API tools faq
paste
Advertisement
dissectmalware

Macro - loop

dissectmalware
May 25th, 2020
340
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 28.97 KB | None | 0 0
raw download clone embed print report
  1. _ _______
  2. |\ /|( \ ( )
  3. ( \ / )| ( | () () |
  4. \ (_) / | | | || || |
  5. ) _ ( | | | |(_)| |
  6. / ( ) \ | | | | | |
  7. ( / \ )| (____/\| ) ( |
  8. |/ \|(_______/|/ \|
  9. ______ _______ _______ ______ _______ _______ _______ _______ _________ _______ _______
  10. ( __ \ ( ____ \( ___ )( ___ \ ( ____ \|\ /|( ____ \( ____ \( ___ )\__ __/( ___ )( ____ )
  11. | ( \ )| ( \/| ( ) || ( ) )| ( \/| ) ( || ( \/| ( \/| ( ) | ) ( | ( ) || ( )|
  12. | | ) || (__ | | | || (__/ / | (__ | | | || (_____ | | | (___) | | | | | | || (____)|
  13. | | | || __) | | | || __ ( | __) | | | |(_____ )| | | ___ | | | | | | || __)
  14. | | ) || ( | | | || ( \ \ | ( | | | | ) || | | ( ) | | | | | | || (\ (
  15. | (__/ )| (____/\| (___) || )___) )| ) | (___) |/\____) || (____/\| ) ( | | | | (___) || ) \ \__
  16. (______/ (_______/(_______)|/ \___/ |/ (_______)\_______)(_______/|/ \| )_( (_______)|/ \__/
  17.  
  18.  
  19. XLMMacroDeobfuscator(v 0.1.3) - https://github.com/DissectMalware/XLMMacroDeobfuscator
  20.  
  21. File: C:\Users\user\Downloads\while_with_decryption\while_with_decryption.xls
  22.  
  23. [Loading Cells]
  24. auto_open: auto_open->Macro1!$A$1
  25. [Starting Deobfuscation]
  26. CELL:A1 , FullEvaluation , SELECT(B1:B100,B1)
  27. CELL:A2 , FullEvaluation , SET.VALUE(Macro1!F1,"")
  28. CELL:A3 , FullEvaluation , SET.VALUE(Macro1!C1,0.0)
  29. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  30. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=")
  31. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,1)
  32. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  33. CELL:A8 , FullEvaluation , NEXT
  34. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  35. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=C")
  36. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,2)
  37. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  38. CELL:A8 , FullEvaluation , NEXT
  39. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  40. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=CA")
  41. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,3)
  42. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  43. CELL:A8 , FullEvaluation , NEXT
  44. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  45. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=CAL")
  46. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,4)
  47. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  48. CELL:A8 , FullEvaluation , NEXT
  49. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  50. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=CALL")
  51. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,5)
  52. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  53. CELL:A8 , FullEvaluation , NEXT
  54. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  55. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=CALL(")
  56. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,6)
  57. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  58. CELL:A8 , FullEvaluation , NEXT
  59. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  60. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=CALL(""")
  61. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,7)
  62. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  63. CELL:A8 , FullEvaluation , NEXT
  64. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  65. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=CALL(""S")
  66. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,8)
  67. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  68. CELL:A8 , FullEvaluation , NEXT
  69. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  70. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=CALL(""Sh")
  71. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,9)
  72. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  73. CELL:A8 , FullEvaluation , NEXT
  74. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  75. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=CALL(""She")
  76. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,10)
  77. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  78. CELL:A8 , FullEvaluation , NEXT
  79. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  80. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=CALL(""Shel")
  81. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,11)
  82. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  83. CELL:A8 , FullEvaluation , NEXT
  84. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  85. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=CALL(""Shell")
  86. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,12)
  87. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  88. CELL:A8 , FullEvaluation , NEXT
  89. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  90. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=CALL(""Shell3")
  91. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,13)
  92. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  93. CELL:A8 , FullEvaluation , NEXT
  94. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  95. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=CALL(""Shell32")
  96. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,14)
  97. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  98. CELL:A8 , FullEvaluation , NEXT
  99. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  100. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=CALL(""Shell32""")
  101. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,15)
  102. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  103. CELL:A8 , FullEvaluation , NEXT
  104. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  105. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=CALL(""Shell32"",")
  106. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,16)
  107. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  108. CELL:A8 , FullEvaluation , NEXT
  109. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  110. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=CALL(""Shell32"",""")
  111. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,17)
  112. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  113. CELL:A8 , FullEvaluation , NEXT
  114. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  115. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=CALL(""Shell32"",""S")
  116. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,18)
  117. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  118. CELL:A8 , FullEvaluation , NEXT
  119. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  120. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=CALL(""Shell32"",""Sh")
  121. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,19)
  122. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  123. CELL:A8 , FullEvaluation , NEXT
  124. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  125. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=CALL(""Shell32"",""She")
  126. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,20)
  127. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  128. CELL:A8 , FullEvaluation , NEXT
  129. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  130. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=CALL(""Shell32"",""Shel")
  131. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,21)
  132. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  133. CELL:A8 , FullEvaluation , NEXT
  134. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  135. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=CALL(""Shell32"",""Shell")
  136. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,22)
  137. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  138. CELL:A8 , FullEvaluation , NEXT
  139. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  140. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=CALL(""Shell32"",""ShellE")
  141. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,23)
  142. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  143. CELL:A8 , FullEvaluation , NEXT
  144. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  145. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=CALL(""Shell32"",""ShellEx")
  146. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,24)
  147. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  148. CELL:A8 , FullEvaluation , NEXT
  149. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  150. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=CALL(""Shell32"",""ShellExe")
  151. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,25)
  152. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  153. CELL:A8 , FullEvaluation , NEXT
  154. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  155. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=CALL(""Shell32"",""ShellExec")
  156. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,26)
  157. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  158. CELL:A8 , FullEvaluation , NEXT
  159. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  160. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=CALL(""Shell32"",""ShellExecu")
  161. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,27)
  162. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  163. CELL:A8 , FullEvaluation , NEXT
  164. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  165. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=CALL(""Shell32"",""ShellExecut")
  166. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,28)
  167. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  168. CELL:A8 , FullEvaluation , NEXT
  169. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  170. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=CALL(""Shell32"",""ShellExecute")
  171. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,29)
  172. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  173. CELL:A8 , FullEvaluation , NEXT
  174. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  175. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=CALL(""Shell32"",""ShellExecuteA")
  176. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,30)
  177. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  178. CELL:A8 , FullEvaluation , NEXT
  179. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  180. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=CALL(""Shell32"",""ShellExecuteA""")
  181. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,31)
  182. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  183. CELL:A8 , FullEvaluation , NEXT
  184. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  185. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=CALL(""Shell32"",""ShellExecuteA"",")
  186. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,32)
  187. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  188. CELL:A8 , FullEvaluation , NEXT
  189. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  190. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=CALL(""Shell32"",""ShellExecuteA"",""")
  191. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,33)
  192. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  193. CELL:A8 , FullEvaluation , NEXT
  194. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  195. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=CALL(""Shell32"",""ShellExecuteA"",""J")
  196. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,34)
  197. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  198. CELL:A8 , FullEvaluation , NEXT
  199. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  200. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=CALL(""Shell32"",""ShellExecuteA"",""JJ")
  201. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,35)
  202. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  203. CELL:A8 , FullEvaluation , NEXT
  204. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  205. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=CALL(""Shell32"",""ShellExecuteA"",""JJC")
  206. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,36)
  207. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  208. CELL:A8 , FullEvaluation , NEXT
  209. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  210. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=CALL(""Shell32"",""ShellExecuteA"",""JJCC")
  211. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,37)
  212. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  213. CELL:A8 , FullEvaluation , NEXT
  214. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  215. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=CALL(""Shell32"",""ShellExecuteA"",""JJCCC")
  216. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,38)
  217. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  218. CELL:A8 , FullEvaluation , NEXT
  219. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  220. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=CALL(""Shell32"",""ShellExecuteA"",""JJCCCJ")
  221. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,39)
  222. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  223. CELL:A8 , FullEvaluation , NEXT
  224. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  225. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=CALL(""Shell32"",""ShellExecuteA"",""JJCCCJJ")
  226. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,40)
  227. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  228. CELL:A8 , FullEvaluation , NEXT
  229. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  230. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=CALL(""Shell32"",""ShellExecuteA"",""JJCCCJJ""")
  231. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,41)
  232. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  233. CELL:A8 , FullEvaluation , NEXT
  234. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  235. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=CALL(""Shell32"",""ShellExecuteA"",""JJCCCJJ"",")
  236. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,42)
  237. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  238. CELL:A8 , FullEvaluation , NEXT
  239. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  240. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=CALL(""Shell32"",""ShellExecuteA"",""JJCCCJJ"",0")
  241. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,43)
  242. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  243. CELL:A8 , FullEvaluation , NEXT
  244. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  245. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=CALL(""Shell32"",""ShellExecuteA"",""JJCCCJJ"",0,")
  246. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,44)
  247. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  248. CELL:A8 , FullEvaluation , NEXT
  249. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  250. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=CALL(""Shell32"",""ShellExecuteA"",""JJCCCJJ"",0,""")
  251. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,45)
  252. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  253. CELL:A8 , FullEvaluation , NEXT
  254. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  255. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=CALL(""Shell32"",""ShellExecuteA"",""JJCCCJJ"",0,""o")
  256. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,46)
  257. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  258. CELL:A8 , FullEvaluation , NEXT
  259. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  260. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=CALL(""Shell32"",""ShellExecuteA"",""JJCCCJJ"",0,""op")
  261. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,47)
  262. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  263. CELL:A8 , FullEvaluation , NEXT
  264. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  265. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=CALL(""Shell32"",""ShellExecuteA"",""JJCCCJJ"",0,""ope")
  266. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,48)
  267. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  268. CELL:A8 , FullEvaluation , NEXT
  269. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  270. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=CALL(""Shell32"",""ShellExecuteA"",""JJCCCJJ"",0,""open")
  271. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,49)
  272. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  273. CELL:A8 , FullEvaluation , NEXT
  274. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  275. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=CALL(""Shell32"",""ShellExecuteA"",""JJCCCJJ"",0,""open""")
  276. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,50)
  277. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  278. CELL:A8 , FullEvaluation , NEXT
  279. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  280. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=CALL(""Shell32"",""ShellExecuteA"",""JJCCCJJ"",0,""open"",")
  281. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,51)
  282. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  283. CELL:A8 , FullEvaluation , NEXT
  284. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  285. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=CALL(""Shell32"",""ShellExecuteA"",""JJCCCJJ"",0,""open"",""")
  286. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,52)
  287. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  288. CELL:A8 , FullEvaluation , NEXT
  289. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  290. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=CALL(""Shell32"",""ShellExecuteA"",""JJCCCJJ"",0,""open"",""c")
  291. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,53)
  292. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  293. CELL:A8 , FullEvaluation , NEXT
  294. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  295. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=CALL(""Shell32"",""ShellExecuteA"",""JJCCCJJ"",0,""open"",""ca")
  296. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,54)
  297. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  298. CELL:A8 , FullEvaluation , NEXT
  299. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  300. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=CALL(""Shell32"",""ShellExecuteA"",""JJCCCJJ"",0,""open"",""cal")
  301. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,55)
  302. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  303. CELL:A8 , FullEvaluation , NEXT
  304. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  305. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=CALL(""Shell32"",""ShellExecuteA"",""JJCCCJJ"",0,""open"",""calc")
  306. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,56)
  307. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  308. CELL:A8 , FullEvaluation , NEXT
  309. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  310. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=CALL(""Shell32"",""ShellExecuteA"",""JJCCCJJ"",0,""open"",""calc.")
  311. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,57)
  312. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  313. CELL:A8 , FullEvaluation , NEXT
  314. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  315. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=CALL(""Shell32"",""ShellExecuteA"",""JJCCCJJ"",0,""open"",""calc.e")
  316. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,58)
  317. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  318. CELL:A8 , FullEvaluation , NEXT
  319. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  320. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=CALL(""Shell32"",""ShellExecuteA"",""JJCCCJJ"",0,""open"",""calc.ex")
  321. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,59)
  322. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  323. CELL:A8 , FullEvaluation , NEXT
  324. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  325. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=CALL(""Shell32"",""ShellExecuteA"",""JJCCCJJ"",0,""open"",""calc.exe")
  326. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,60)
  327. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  328. CELL:A8 , FullEvaluation , NEXT
  329. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  330. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=CALL(""Shell32"",""ShellExecuteA"",""JJCCCJJ"",0,""open"",""calc.exe""")
  331. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,61)
  332. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  333. CELL:A8 , FullEvaluation , NEXT
  334. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  335. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=CALL(""Shell32"",""ShellExecuteA"",""JJCCCJJ"",0,""open"",""calc.exe"",")
  336. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,62)
  337. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  338. CELL:A8 , FullEvaluation , NEXT
  339. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  340. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=CALL(""Shell32"",""ShellExecuteA"",""JJCCCJJ"",0,""open"",""calc.exe"",""")
  341. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,63)
  342. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  343. CELL:A8 , FullEvaluation , NEXT
  344. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  345. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=CALL(""Shell32"",""ShellExecuteA"",""JJCCCJJ"",0,""open"",""calc.exe"",""""")
  346. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,64)
  347. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  348. CELL:A8 , FullEvaluation , NEXT
  349. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  350. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=CALL(""Shell32"",""ShellExecuteA"",""JJCCCJJ"",0,""open"",""calc.exe"","""",")
  351. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,65)
  352. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  353. CELL:A8 , FullEvaluation , NEXT
  354. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  355. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=CALL(""Shell32"",""ShellExecuteA"",""JJCCCJJ"",0,""open"",""calc.exe"","""",0")
  356. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,66)
  357. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  358. CELL:A8 , FullEvaluation , NEXT
  359. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  360. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=CALL(""Shell32"",""ShellExecuteA"",""JJCCCJJ"",0,""open"",""calc.exe"","""",0,")
  361. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,67)
  362. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  363. CELL:A8 , FullEvaluation , NEXT
  364. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  365. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=CALL(""Shell32"",""ShellExecuteA"",""JJCCCJJ"",0,""open"",""calc.exe"","""",0,5")
  366. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,68)
  367. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  368. CELL:A8 , FullEvaluation , NEXT
  369. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [True]
  370. CELL:A5 , FullEvaluation , SET.VALUE(Macro1!F1,"=CALL(""Shell32"",""ShellExecuteA"",""JJCCCJJ"",0,""open"",""calc.exe"","""",0,5)")
  371. CELL:A6 , FullEvaluation , SET.VALUE(Macro1!C1,69)
  372. CELL:A7 , FullEvaluation , SELECT(,"R[1]C")
  373. CELL:A8 , FullEvaluation , NEXT
  374. CELL:A4 , FullEvaluation , WHILE(AND(C1<C2,ACTIVE.CELL()<>"END")) -> [False]
  375. CELL:A9 , FullEvaluation , SELECT(D1:D10,D1)
  376. CELL:A10 , FullEvaluation , SET.VALUE(Macro1!F2,"")
  377. CELL:A11 , FullEvaluation , SET.VALUE(Macro1!E1,0.0)
  378. CELL:A12 , FullEvaluation , WHILE(AND(E1<E2,ACTIVE.CELL()<>"END")) -> [True]
  379. CELL:A13 , FullEvaluation , SET.VALUE(Macro1!F2,"=")
  380. CELL:A14 , FullEvaluation , SET.VALUE(Macro1!E1,1)
  381. CELL:A15 , FullEvaluation , SELECT(,"R[1]C")
  382. CELL:A16 , FullEvaluation , NEXT
  383. CELL:A12 , FullEvaluation , WHILE(AND(E1<E2,ACTIVE.CELL()<>"END")) -> [True]
  384. CELL:A13 , FullEvaluation , SET.VALUE(Macro1!F2,"=H")
  385. CELL:A14 , FullEvaluation , SET.VALUE(Macro1!E1,2)
  386. CELL:A15 , FullEvaluation , SELECT(,"R[1]C")
  387. CELL:A16 , FullEvaluation , NEXT
  388. CELL:A12 , FullEvaluation , WHILE(AND(E1<E2,ACTIVE.CELL()<>"END")) -> [True]
  389. CELL:A13 , FullEvaluation , SET.VALUE(Macro1!F2,"=HA")
  390. CELL:A14 , FullEvaluation , SET.VALUE(Macro1!E1,3)
  391. CELL:A15 , FullEvaluation , SELECT(,"R[1]C")
  392. CELL:A16 , FullEvaluation , NEXT
  393. CELL:A12 , FullEvaluation , WHILE(AND(E1<E2,ACTIVE.CELL()<>"END")) -> [True]
  394. CELL:A13 , FullEvaluation , SET.VALUE(Macro1!F2,"=HAL")
  395. CELL:A14 , FullEvaluation , SET.VALUE(Macro1!E1,4)
  396. CELL:A15 , FullEvaluation , SELECT(,"R[1]C")
  397. CELL:A16 , FullEvaluation , NEXT
  398. CELL:A12 , FullEvaluation , WHILE(AND(E1<E2,ACTIVE.CELL()<>"END")) -> [True]
  399. CELL:A13 , FullEvaluation , SET.VALUE(Macro1!F2,"=HALT")
  400. CELL:A14 , FullEvaluation , SET.VALUE(Macro1!E1,5)
  401. CELL:A15 , FullEvaluation , SELECT(,"R[1]C")
  402. CELL:A16 , FullEvaluation , NEXT
  403. CELL:A12 , FullEvaluation , WHILE(AND(E1<E2,ACTIVE.CELL()<>"END")) -> [True]
  404. CELL:A13 , FullEvaluation , SET.VALUE(Macro1!F2,"=HALT(")
  405. CELL:A14 , FullEvaluation , SET.VALUE(Macro1!E1,6)
  406. CELL:A15 , FullEvaluation , SELECT(,"R[1]C")
  407. CELL:A16 , FullEvaluation , NEXT
  408. CELL:A12 , FullEvaluation , WHILE(AND(E1<E2,ACTIVE.CELL()<>"END")) -> [True]
  409. CELL:A13 , FullEvaluation , SET.VALUE(Macro1!F2,"=HALT()")
  410. CELL:A14 , FullEvaluation , SET.VALUE(Macro1!E1,7)
  411. CELL:A15 , FullEvaluation , SELECT(,"R[1]C")
  412. CELL:A16 , FullEvaluation , NEXT
  413. CELL:A12 , FullEvaluation , WHILE(AND(E1<E2,ACTIVE.CELL()<>"END")) -> [False]
  414. CELL:A17 , FullEvaluation , FORMULA("=CALL(""Shell32"",""ShellExecuteA"",""JJCCCJJ"",0,""open"",""calc.exe"","""",0,5)",Macro1!F1)
  415. CELL:A18 , FullEvaluation , FORMULA("=HALT()",Macro1!F2)
  416. CELL:A19 , FullEvaluation , GOTO(F1)
  417. CELL:F1 , FullEvaluation , CALL("Shell32","ShellExecuteA","JJCCCJJ",0,"open","calc.exe","",0,5)
  418. CELL:F2 , End , HALT()
  419. [END of Deobfuscation]
  420. time elapsed: 0.4207453727722168
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!