API tools faq
paste
Advertisement
dissectmalware

Macro - loop2

dissectmalware
May 25th, 2020
391
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 29.06 KB | None | 0 0
raw download clone embed print report
  1.  
  2. _ _______
  3. |\ /|( \ ( )
  4. ( \ / )| ( | () () |
  5. \ (_) / | | | || || |
  6. ) _ ( | | | |(_)| |
  7. / ( ) \ | | | | | |
  8. ( / \ )| (____/\| ) ( |
  9. |/ \|(_______/|/ \|
  10. ______ _______ _______ ______ _______ _______ _______ _______ _________ _______ _______
  11. ( __ \ ( ____ \( ___ )( ___ \ ( ____ \|\ /|( ____ \( ____ \( ___ )\__ __/( ___ )( ____ )
  12. | ( \ )| ( \/| ( ) || ( ) )| ( \/| ) ( || ( \/| ( \/| ( ) | ) ( | ( ) || ( )|
  13. | | ) || (__ | | | || (__/ / | (__ | | | || (_____ | | | (___) | | | | | | || (____)|
  14. | | | || __) | | | || __ ( | __) | | | |(_____ )| | | ___ | | | | | | || __)
  15. | | ) || ( | | | || ( \ \ | ( | | | | ) || | | ( ) | | | | | | || (\ (
  16. | (__/ )| (____/\| (___) || )___) )| ) | (___) |/\____) || (____/\| ) ( | | | | (___) || ) \ \__
  17. (______/ (_______/(_______)|/ \___/ |/ (_______)\_______)(_______/|/ \| )_( (_______)|/ \__/
  18.  
  19.  
  20. XLMMacroDeobfuscator(v 0.1.3) - https://github.com/DissectMalware/XLMMacroDeobfuscator
  21.  
  22. File: C:\Users\user\Downloads\61a0f3729f79dedc084dcca795f2fe956fbfb06225c2d6959b2319cb846d9aad\61a0f3729f79dedc084dcca795f2fe956fbfb06225c2d6959b2319cb846d9aad.xls
  23.  
  24. [Loading Cells]
  25. auto_open: auto_open->Macro1!$A$1
  26. [Starting Deobfuscation]
  27. CELL:A1 , FullEvaluation , SELECT(B1:B100,B1)
  28. CELL:A2 , FullEvaluation , SET.VALUE(Macro1!F1,"")
  29. CELL:A3 , FullEvaluation , SET.VALUE(Macro1!C1,0.0)
  30. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  31. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=")
  32. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,1)
  33. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  34. CELL:A8 , FullEvaluation , NEXT
  35. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  36. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=C")
  37. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,2)
  38. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  39. CELL:A8 , FullEvaluation , NEXT
  40. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  41. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=CA")
  42. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,3)
  43. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  44. CELL:A8 , FullEvaluation , NEXT
  45. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  46. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=CAL")
  47. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,4)
  48. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  49. CELL:A8 , FullEvaluation , NEXT
  50. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  51. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=CALL")
  52. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,5)
  53. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  54. CELL:A8 , FullEvaluation , NEXT
  55. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  56. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=CALL(")
  57. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,6)
  58. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  59. CELL:A8 , FullEvaluation , NEXT
  60. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  61. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=CALL(""")
  62. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,7)
  63. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  64. CELL:A8 , FullEvaluation , NEXT
  65. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  66. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=CALL(""S")
  67. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,8)
  68. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  69. CELL:A8 , FullEvaluation , NEXT
  70. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  71. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=CALL(""Sh")
  72. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,9)
  73. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  74. CELL:A8 , FullEvaluation , NEXT
  75. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  76. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=CALL(""She")
  77. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,10)
  78. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  79. CELL:A8 , FullEvaluation , NEXT
  80. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  81. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=CALL(""Shel")
  82. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,11)
  83. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  84. CELL:A8 , FullEvaluation , NEXT
  85. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  86. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=CALL(""Shell")
  87. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,12)
  88. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  89. CELL:A8 , FullEvaluation , NEXT
  90. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  91. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=CALL(""Shell3")
  92. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,13)
  93. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  94. CELL:A8 , FullEvaluation , NEXT
  95. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  96. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=CALL(""Shell32")
  97. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,14)
  98. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  99. CELL:A8 , FullEvaluation , NEXT
  100. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  101. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=CALL(""Shell32""")
  102. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,15)
  103. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  104. CELL:A8 , FullEvaluation , NEXT
  105. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  106. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=CALL(""Shell32"",")
  107. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,16)
  108. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  109. CELL:A8 , FullEvaluation , NEXT
  110. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  111. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=CALL(""Shell32"",""")
  112. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,17)
  113. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  114. CELL:A8 , FullEvaluation , NEXT
  115. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  116. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=CALL(""Shell32"",""S")
  117. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,18)
  118. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  119. CELL:A8 , FullEvaluation , NEXT
  120. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  121. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=CALL(""Shell32"",""Sh")
  122. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,19)
  123. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  124. CELL:A8 , FullEvaluation , NEXT
  125. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  126. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=CALL(""Shell32"",""She")
  127. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,20)
  128. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  129. CELL:A8 , FullEvaluation , NEXT
  130. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  131. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=CALL(""Shell32"",""Shel")
  132. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,21)
  133. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  134. CELL:A8 , FullEvaluation , NEXT
  135. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  136. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=CALL(""Shell32"",""Shell")
  137. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,22)
  138. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  139. CELL:A8 , FullEvaluation , NEXT
  140. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  141. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=CALL(""Shell32"",""ShellE")
  142. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,23)
  143. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  144. CELL:A8 , FullEvaluation , NEXT
  145. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  146. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=CALL(""Shell32"",""ShellEx")
  147. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,24)
  148. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  149. CELL:A8 , FullEvaluation , NEXT
  150. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  151. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=CALL(""Shell32"",""ShellExe")
  152. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,25)
  153. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  154. CELL:A8 , FullEvaluation , NEXT
  155. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  156. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=CALL(""Shell32"",""ShellExec")
  157. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,26)
  158. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  159. CELL:A8 , FullEvaluation , NEXT
  160. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  161. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=CALL(""Shell32"",""ShellExecu")
  162. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,27)
  163. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  164. CELL:A8 , FullEvaluation , NEXT
  165. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  166. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=CALL(""Shell32"",""ShellExecut")
  167. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,28)
  168. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  169. CELL:A8 , FullEvaluation , NEXT
  170. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  171. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=CALL(""Shell32"",""ShellExecute")
  172. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,29)
  173. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  174. CELL:A8 , FullEvaluation , NEXT
  175. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  176. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=CALL(""Shell32"",""ShellExecuteA")
  177. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,30)
  178. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  179. CELL:A8 , FullEvaluation , NEXT
  180. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  181. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=CALL(""Shell32"",""ShellExecuteA""")
  182. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,31)
  183. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  184. CELL:A8 , FullEvaluation , NEXT
  185. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  186. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=CALL(""Shell32"",""ShellExecuteA"",")
  187. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,32)
  188. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  189. CELL:A8 , FullEvaluation , NEXT
  190. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  191. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=CALL(""Shell32"",""ShellExecuteA"",""")
  192. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,33)
  193. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  194. CELL:A8 , FullEvaluation , NEXT
  195. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  196. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=CALL(""Shell32"",""ShellExecuteA"",""J")
  197. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,34)
  198. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  199. CELL:A8 , FullEvaluation , NEXT
  200. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  201. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=CALL(""Shell32"",""ShellExecuteA"",""JJ")
  202. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,35)
  203. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  204. CELL:A8 , FullEvaluation , NEXT
  205. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  206. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=CALL(""Shell32"",""ShellExecuteA"",""JJC")
  207. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,36)
  208. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  209. CELL:A8 , FullEvaluation , NEXT
  210. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  211. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=CALL(""Shell32"",""ShellExecuteA"",""JJCC")
  212. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,37)
  213. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  214. CELL:A8 , FullEvaluation , NEXT
  215. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  216. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=CALL(""Shell32"",""ShellExecuteA"",""JJCCC")
  217. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,38)
  218. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  219. CELL:A8 , FullEvaluation , NEXT
  220. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  221. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=CALL(""Shell32"",""ShellExecuteA"",""JJCCCJ")
  222. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,39)
  223. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  224. CELL:A8 , FullEvaluation , NEXT
  225. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  226. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=CALL(""Shell32"",""ShellExecuteA"",""JJCCCJJ")
  227. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,40)
  228. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  229. CELL:A8 , FullEvaluation , NEXT
  230. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  231. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=CALL(""Shell32"",""ShellExecuteA"",""JJCCCJJ""")
  232. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,41)
  233. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  234. CELL:A8 , FullEvaluation , NEXT
  235. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  236. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=CALL(""Shell32"",""ShellExecuteA"",""JJCCCJJ"",")
  237. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,42)
  238. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  239. CELL:A8 , FullEvaluation , NEXT
  240. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  241. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=CALL(""Shell32"",""ShellExecuteA"",""JJCCCJJ"",0")
  242. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,43)
  243. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  244. CELL:A8 , FullEvaluation , NEXT
  245. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  246. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=CALL(""Shell32"",""ShellExecuteA"",""JJCCCJJ"",0,")
  247. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,44)
  248. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  249. CELL:A8 , FullEvaluation , NEXT
  250. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  251. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=CALL(""Shell32"",""ShellExecuteA"",""JJCCCJJ"",0,""")
  252. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,45)
  253. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  254. CELL:A8 , FullEvaluation , NEXT
  255. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  256. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=CALL(""Shell32"",""ShellExecuteA"",""JJCCCJJ"",0,""o")
  257. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,46)
  258. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  259. CELL:A8 , FullEvaluation , NEXT
  260. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  261. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=CALL(""Shell32"",""ShellExecuteA"",""JJCCCJJ"",0,""op")
  262. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,47)
  263. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  264. CELL:A8 , FullEvaluation , NEXT
  265. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  266. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=CALL(""Shell32"",""ShellExecuteA"",""JJCCCJJ"",0,""ope")
  267. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,48)
  268. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  269. CELL:A8 , FullEvaluation , NEXT
  270. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  271. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=CALL(""Shell32"",""ShellExecuteA"",""JJCCCJJ"",0,""open")
  272. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,49)
  273. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  274. CELL:A8 , FullEvaluation , NEXT
  275. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  276. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=CALL(""Shell32"",""ShellExecuteA"",""JJCCCJJ"",0,""open""")
  277. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,50)
  278. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  279. CELL:A8 , FullEvaluation , NEXT
  280. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  281. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=CALL(""Shell32"",""ShellExecuteA"",""JJCCCJJ"",0,""open"",")
  282. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,51)
  283. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  284. CELL:A8 , FullEvaluation , NEXT
  285. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  286. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=CALL(""Shell32"",""ShellExecuteA"",""JJCCCJJ"",0,""open"",""")
  287. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,52)
  288. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  289. CELL:A8 , FullEvaluation , NEXT
  290. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  291. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=CALL(""Shell32"",""ShellExecuteA"",""JJCCCJJ"",0,""open"",""c")
  292. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,53)
  293. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  294. CELL:A8 , FullEvaluation , NEXT
  295. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  296. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=CALL(""Shell32"",""ShellExecuteA"",""JJCCCJJ"",0,""open"",""ca")
  297. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,54)
  298. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  299. CELL:A8 , FullEvaluation , NEXT
  300. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  301. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=CALL(""Shell32"",""ShellExecuteA"",""JJCCCJJ"",0,""open"",""cal")
  302. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,55)
  303. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  304. CELL:A8 , FullEvaluation , NEXT
  305. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  306. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=CALL(""Shell32"",""ShellExecuteA"",""JJCCCJJ"",0,""open"",""calc")
  307. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,56)
  308. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  309. CELL:A8 , FullEvaluation , NEXT
  310. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  311. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=CALL(""Shell32"",""ShellExecuteA"",""JJCCCJJ"",0,""open"",""calc.")
  312. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,57)
  313. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  314. CELL:A8 , FullEvaluation , NEXT
  315. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  316. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=CALL(""Shell32"",""ShellExecuteA"",""JJCCCJJ"",0,""open"",""calc.e")
  317. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,58)
  318. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  319. CELL:A8 , FullEvaluation , NEXT
  320. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  321. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=CALL(""Shell32"",""ShellExecuteA"",""JJCCCJJ"",0,""open"",""calc.ex")
  322. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,59)
  323. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  324. CELL:A8 , FullEvaluation , NEXT
  325. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  326. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=CALL(""Shell32"",""ShellExecuteA"",""JJCCCJJ"",0,""open"",""calc.exe")
  327. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,60)
  328. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  329. CELL:A8 , FullEvaluation , NEXT
  330. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  331. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=CALL(""Shell32"",""ShellExecuteA"",""JJCCCJJ"",0,""open"",""calc.exe""")
  332. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,61)
  333. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  334. CELL:A8 , FullEvaluation , NEXT
  335. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  336. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=CALL(""Shell32"",""ShellExecuteA"",""JJCCCJJ"",0,""open"",""calc.exe"",")
  337. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,62)
  338. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  339. CELL:A8 , FullEvaluation , NEXT
  340. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  341. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=CALL(""Shell32"",""ShellExecuteA"",""JJCCCJJ"",0,""open"",""calc.exe"",""")
  342. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,63)
  343. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  344. CELL:A8 , FullEvaluation , NEXT
  345. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  346. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=CALL(""Shell32"",""ShellExecuteA"",""JJCCCJJ"",0,""open"",""calc.exe"",""""")
  347. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,64)
  348. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  349. CELL:A8 , FullEvaluation , NEXT
  350. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  351. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=CALL(""Shell32"",""ShellExecuteA"",""JJCCCJJ"",0,""open"",""calc.exe"","""",")
  352. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,65)
  353. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  354. CELL:A8 , FullEvaluation , NEXT
  355. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  356. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=CALL(""Shell32"",""ShellExecuteA"",""JJCCCJJ"",0,""open"",""calc.exe"","""",0")
  357. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,66)
  358. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  359. CELL:A8 , FullEvaluation , NEXT
  360. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  361. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=CALL(""Shell32"",""ShellExecuteA"",""JJCCCJJ"",0,""open"",""calc.exe"","""",0,")
  362. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,67)
  363. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  364. CELL:A8 , FullEvaluation , NEXT
  365. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  366. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=CALL(""Shell32"",""ShellExecuteA"",""JJCCCJJ"",0,""open"",""calc.exe"","""",0,5")
  367. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,68)
  368. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  369. CELL:A8 , FullEvaluation , NEXT
  370. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  371. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=CALL(""Shell32"",""ShellExecuteA"",""JJCCCJJ"",0,""open"",""calc.exe"","""",0,5)")
  372. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,69)
  373. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  374. CELL:A8 , FullEvaluation , NEXT
  375. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [False]
  376. CELL:A9 , FullEvaluation , SELECT(D1:D10:D1)
  377. CELL:A10 , FullEvaluation , SET.VALUE(Macro1!F2,"")
  378. CELL:A11 , FullEvaluation , SET.VALUE(Macro1!E1,0.0)
  379. CELL:A12 , FullEvaluation , WHILE(AND(E1<E2,ACTIVE.CELL()<>"END")) -> [True]
  380. CELL:A13 , FullEvaluation , SET.VALUE(Macro1!F2,"=")
  381. CELL:A14 , FullEvaluation , SET.VALUE(Macro1!E1,1)
  382. CELL:A15 , FullEvaluation , SELECT(,"R[1]C")
  383. CELL:A16 , FullEvaluation , NEXT
  384. CELL:A12 , FullEvaluation , WHILE(AND(E1<E2,ACTIVE.CELL()<>"END")) -> [True]
  385. CELL:A13 , FullEvaluation , SET.VALUE(Macro1!F2,"=H")
  386. CELL:A14 , FullEvaluation , SET.VALUE(Macro1!E1,2)
  387. CELL:A15 , FullEvaluation , SELECT(,"R[1]C")
  388. CELL:A16 , FullEvaluation , NEXT
  389. CELL:A12 , FullEvaluation , WHILE(AND(E1<E2,ACTIVE.CELL()<>"END")) -> [True]
  390. CELL:A13 , FullEvaluation , SET.VALUE(Macro1!F2,"=HA")
  391. CELL:A14 , FullEvaluation , SET.VALUE(Macro1!E1,3)
  392. CELL:A15 , FullEvaluation , SELECT(,"R[1]C")
  393. CELL:A16 , FullEvaluation , NEXT
  394. CELL:A12 , FullEvaluation , WHILE(AND(E1<E2,ACTIVE.CELL()<>"END")) -> [True]
  395. CELL:A13 , FullEvaluation , SET.VALUE(Macro1!F2,"=HAL")
  396. CELL:A14 , FullEvaluation , SET.VALUE(Macro1!E1,4)
  397. CELL:A15 , FullEvaluation , SELECT(,"R[1]C")
  398. CELL:A16 , FullEvaluation , NEXT
  399. CELL:A12 , FullEvaluation , WHILE(AND(E1<E2,ACTIVE.CELL()<>"END")) -> [True]
  400. CELL:A13 , FullEvaluation , SET.VALUE(Macro1!F2,"=HALT")
  401. CELL:A14 , FullEvaluation , SET.VALUE(Macro1!E1,5)
  402. CELL:A15 , FullEvaluation , SELECT(,"R[1]C")
  403. CELL:A16 , FullEvaluation , NEXT
  404. CELL:A12 , FullEvaluation , WHILE(AND(E1<E2,ACTIVE.CELL()<>"END")) -> [True]
  405. CELL:A13 , FullEvaluation , SET.VALUE(Macro1!F2,"=HALT(")
  406. CELL:A14 , FullEvaluation , SET.VALUE(Macro1!E1,6)
  407. CELL:A15 , FullEvaluation , SELECT(,"R[1]C")
  408. CELL:A16 , FullEvaluation , NEXT
  409. CELL:A12 , FullEvaluation , WHILE(AND(E1<E2,ACTIVE.CELL()<>"END")) -> [True]
  410. CELL:A13 , FullEvaluation , SET.VALUE(Macro1!F2,"=HALT()")
  411. CELL:A14 , FullEvaluation , SET.VALUE(Macro1!E1,7)
  412. CELL:A15 , FullEvaluation , SELECT(,"R[1]C")
  413. CELL:A16 , FullEvaluation , NEXT
  414. CELL:A12 , FullEvaluation , WHILE(AND(E1<E2,ACTIVE.CELL()<>"END")) -> [False]
  415. CELL:A17 , FullEvaluation , FORMULA("=CALL(""Shell32"",""ShellExecuteA"",""JJCCCJJ"",0,""open"",""calc.exe"","""",0,5)",Macro1!F1)
  416. CELL:A18 , FullEvaluation , FORMULA("=HALT()",Macro1!F2)
  417. CELL:A19 , FullEvaluation , GOTO(F1)
  418. CELL:F1 , FullEvaluation , CALL("Shell32","ShellExecuteA","JJCCCJJ",0,"open","calc.exe","",0,5)
  419. CELL:F2 , End , HALT()
  420. [END of Deobfuscation]
  421. time elapsed: 0.42973852157592773
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!