Loading ...

Play interactive tourEdit tour

Analysis Report EM_B43454933_7621780_573.exe

Overview

General Information

Sample Name:EM_B43454933_7621780_573.exe
Analysis ID:355935
MD5:b679e85b64a7b5851f0abc9d69740978
SHA1:7c103c70859b5d708ae5ff82a65a67b71272df4d
SHA256:a1677b7e54a0d67b9b16d0a0835187b889db434d77d8a8f3f7714a86b01a27db

Most interesting Screenshot:

Detection

GuLoader
Score:84
Range:0 - 100
Whitelisted:false
Confidence:100%

Signatures

Multi AV Scanner detection for submitted file
Potential malicious icon found
Yara detected GuLoader
Contains functionality to detect hardware virtualization (CPUID execution measurement)
Detected RDTSC dummy instruction sequence (likely for instruction hammering)
Tries to detect sandboxes and other dynamic analysis tools (process name or module or function)
Tries to detect virtualization through RDTSC time measurements
Yara detected VB6 Downloader Generic
Abnormal high CPU Usage
Contains functionality for execution timing, often used to detect debuggers
Contains functionality to read the PEB
Detected potential crypto function
PE file contains strange resources
Sample file is different than original file name gathered from version info
Uses 32bit PE files
Uses code obfuscation techniques (call, push, ret)

Classification

Startup

  • System is w10x64
  • EM_B43454933_7621780_573.exe (PID: 7028 cmdline: 'C:\Users\user\Desktop\EM_B43454933_7621780_573.exe' MD5: B679E85B64A7B5851F0ABC9D69740978)
  • cleanup

Malware Configuration

No configs have been found

Yara Overview

Memory Dumps

SourceRuleDescriptionAuthorStrings
Process Memory Space: EM_B43454933_7621780_573.exe PID: 7028JoeSecurity_VB6DownloaderGenericYara detected VB6 Downloader GenericJoe Security
    Process Memory Space: EM_B43454933_7621780_573.exe PID: 7028JoeSecurity_GuLoaderYara detected GuLoaderJoe Security

      Sigma Overview

      No Sigma rule has matched

      Signature Overview

      Click to jump to signature section

      Show All Signature Results

      AV Detection:

      barindex
      Multi AV Scanner detection for submitted fileShow sources
      Source: EM_B43454933_7621780_573.exeVirustotal: Detection: 19%Perma Link

      Compliance:

      barindex
      Uses 32bit PE filesShow sources
      Source: EM_B43454933_7621780_573.exeStatic PE information: LOCAL_SYMS_STRIPPED, 32BIT_MACHINE, EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, RELOCS_STRIPPED

      System Summary:

      barindex
      Potential malicious icon foundShow sources
      Source: initial sampleIcon embedded in PE file: bad icon match: 20047c7c70f0e004
      Source: C:\Users\user\Desktop\EM_B43454933_7621780_573.exeProcess Stats: CPU usage > 98%
      Source: C:\Users\user\Desktop\EM_B43454933_7621780_573.exeCode function: 0_2_004013B00_2_004013B0
      Source: EM_B43454933_7621780_573.exeStatic PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
      Source: EM_B43454933_7621780_573.exe, 00000000.00000002.1731805623.0000000000410000.00000002.00020000.sdmpBinary or memory string: OriginalFilenameNaticahartko.exe vs EM_B43454933_7621780_573.exe
      Source: EM_B43454933_7621780_573.exe, 00000000.00000002.1732436596.00000000020A0000.00000002.00000001.sdmpBinary or memory string: OriginalFilenameuser32j% vs EM_B43454933_7621780_573.exe
      Source: EM_B43454933_7621780_573.exeBinary or memory string: OriginalFilenameNaticahartko.exe vs EM_B43454933_7621780_573.exe
      Source: EM_B43454933_7621780_573.exeStatic PE information: LOCAL_SYMS_STRIPPED, 32BIT_MACHINE, EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, RELOCS_STRIPPED
      Source: classification engineClassification label: mal84.rans.troj.evad.winEXE@1/0@0/0
      Source: EM_B43454933_7621780_573.exeStatic PE information: Section: .text IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_READ
      Source: C:\Users\user\Desktop\EM_B43454933_7621780_573.exeSection loaded: C:\Windows\SysWOW64\msvbvm60.dllJump to behavior
      Source: C:\Users\user\Desktop\EM_B43454933_7621780_573.exeKey opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiersJump to behavior
      Source: EM_B43454933_7621780_573.exeVirustotal: Detection: 19%

      Data Obfuscation:

      barindex
      Yara detected GuLoaderShow sources
      Source: Yara matchFile source: Process Memory Space: EM_B43454933_7621780_573.exe PID: 7028, type: MEMORY
      Yara detected VB6 Downloader GenericShow sources
      Source: Yara matchFile source: Process Memory Space: EM_B43454933_7621780_573.exe PID: 7028, type: MEMORY
      Source: C:\Users\user\Desktop\EM_B43454933_7621780_573.exeCode function: 0_2_00408621 push ss; retf 0_2_0040862C
      Source: C:\Users\user\Desktop\EM_B43454933_7621780_573.exeCode function: 0_2_02911473 push FFFFFF84h; retf 0_2_02911480
      Source: C:\Users\user\Desktop\EM_B43454933_7621780_573.exeCode function: 0_2_0291526C push eax; ret 0_2_0291526D
      Source: C:\Users\user\Desktop\EM_B43454933_7621780_573.exeCode function: 0_2_02913B44 push edi; retf 0_2_02913B48
      Source: C:\Users\user\Desktop\EM_B43454933_7621780_573.exeProcess information set: NOOPENFILEERRORBOXJump to behavior

      Malware Analysis System Evasion:

      barindex
      Contains functionality to detect hardware virtualization (CPUID execution measurement)Show sources
      Source: C:\Users\user\Desktop\EM_B43454933_7621780_573.exeCode function: 0_2_02914F0A 0_2_02914F0A
      Detected RDTSC dummy instruction sequence (likely for instruction hammering)Show sources
      Source: C:\Users\user\Desktop\EM_B43454933_7621780_573.exeRDTSC instruction interceptor: First address: 0000000002914768 second address: 0000000002914768 instructions:
      Tries to detect sandboxes and other dynamic analysis tools (process name or module or function)Show sources
      Source: EM_B43454933_7621780_573.exeBinary or memory string: C:\PROGRAM FILES\QEMU-GA\QEMU-GA.EXE
      Tries to detect virtualization through RDTSC time measurementsShow sources
      Source: C:\Users\user\Desktop\EM_B43454933_7621780_573.exeRDTSC instruction interceptor: First address: 0000000002914768 second address: 0000000002914768 instructions:
      Source: C:\Users\user\Desktop\EM_B43454933_7621780_573.exeRDTSC instruction interceptor: First address: 0000000002912966 second address: 0000000002912966 instructions: 0x00000000 rdtsc 0x00000002 xor eax, eax 0x00000004 inc eax 0x00000005 cpuid 0x00000007 popad 0x00000008 call 00007F4090C204C9h 0x0000000d lfence 0x00000010 mov edx, dword ptr [7FFE0014h] 0x00000016 lfence 0x00000019 ret 0x0000001a sub edx, esi 0x0000001c ret 0x0000001d cmp ax, 000027F4h 0x00000021 cmp ch, ah 0x00000023 pop ecx 0x00000024 cmp ah, dh 0x00000026 add edi, edx 0x00000028 dec ecx 0x00000029 test cl, dl 0x0000002b cmp ecx, 00000000h 0x0000002e jne 00007F4090C20484h 0x00000030 cmp ah, 00000010h 0x00000033 push ecx 0x00000034 cmp ch, ah 0x00000036 call 00007F4090C204CEh 0x0000003b call 00007F4090C204D9h 0x00000040 lfence 0x00000043 mov edx, dword ptr [7FFE0014h] 0x00000049 lfence 0x0000004c ret 0x0000004d mov esi, edx 0x0000004f pushad 0x00000050 rdtsc
      Source: C:\Users\user\Desktop\EM_B43454933_7621780_573.exeCode function: 0_2_02912292 rdtsc 0_2_02912292
      Source: EM_B43454933_7621780_573.exeBinary or memory string: C:\Program Files\Qemu-ga\qemu-ga.exe
      Source: C:\Users\user\Desktop\EM_B43454933_7621780_573.exeCode function: 0_2_02912292 rdtsc 0_2_02912292
      Source: C:\Users\user\Desktop\EM_B43454933_7621780_573.exeCode function: 0_2_02912805 mov eax, dword ptr fs:[00000030h]0_2_02912805
      Source: C:\Users\user\Desktop\EM_B43454933_7621780_573.exeCode function: 0_2_029145BD mov eax, dword ptr fs:[00000030h]0_2_029145BD
      Source: C:\Users\user\Desktop\EM_B43454933_7621780_573.exeCode function: 0_2_029149A3 mov eax, dword ptr fs:[00000030h]0_2_029149A3
      Source: EM_B43454933_7621780_573.exe, 00000000.00000002.1732324859.0000000000C50000.00000002.00000001.sdmpBinary or memory string: Program Manager
      Source: EM_B43454933_7621780_573.exe, 00000000.00000002.1732324859.0000000000C50000.00000002.00000001.sdmpBinary or memory string: Shell_TrayWnd
      Source: EM_B43454933_7621780_573.exe, 00000000.00000002.1732324859.0000000000C50000.00000002.00000001.sdmpBinary or memory string: Progman
      Source: EM_B43454933_7621780_573.exe, 00000000.00000002.1732324859.0000000000C50000.00000002.00000001.sdmpBinary or memory string: Progmanlock

      Mitre Att&ck Matrix

      Initial AccessExecutionPersistencePrivilege EscalationDefense EvasionCredential AccessDiscoveryLateral MovementCollectionExfiltrationCommand and ControlNetwork EffectsRemote Service EffectsImpact
      Valid AccountsWindows Management InstrumentationPath InterceptionProcess Injection1Process Injection1OS Credential DumpingSecurity Software Discovery411Remote ServicesArchive Collected Data1Exfiltration Over Other Network MediumEncrypted Channel1Eavesdrop on Insecure Network CommunicationRemotely Track Device Without AuthorizationModify System Partition
      Default AccountsScheduled Task/JobBoot or Logon Initialization ScriptsBoot or Logon Initialization ScriptsObfuscated Files or Information1LSASS MemoryProcess Discovery1Remote Desktop ProtocolData from Removable MediaExfiltration Over BluetoothJunk DataExploit SS7 to Redirect Phone Calls/SMSRemotely Wipe Data Without AuthorizationDevice Lockout
      Domain AccountsAt (Linux)Logon Script (Windows)Logon Script (Windows)Obfuscated Files or InformationSecurity Account ManagerSystem Information Discovery31SMB/Windows Admin SharesData from Network Shared DriveAutomated ExfiltrationSteganographyExploit SS7 to Track Device LocationObtain Device Cloud BackupsDelete Device Data

      Behavior Graph

      Hide Legend

      Legend:

      • Process
      • Signature
      • Created File
      • DNS/IP Info
      • Is Dropped
      • Is Windows Process
      • Number of created Registry Values
      • Number of created Files
      • Visual Basic
      • Delphi
      • Java
      • .Net C# or VB.NET
      • C, C++ or other language
      • Is malicious
      • Internet

      Screenshots

      Thumbnails

      This section contains all screenshots as thumbnails, including those not shown in the slideshow.

      windows-stand

      Antivirus, Machine Learning and Genetic Malware Detection

      Initial Sample

      SourceDetectionScannerLabelLink
      EM_B43454933_7621780_573.exe19%VirustotalBrowse
      EM_B43454933_7621780_573.exe4%ReversingLabs

      Dropped Files

      No Antivirus matches

      Unpacked PE Files

      No Antivirus matches

      Domains

      No Antivirus matches

      URLs

      No Antivirus matches

      Domains and IPs

      Contacted Domains

      No contacted domains info

      Contacted IPs

      No contacted IP infos

      General Information

      Joe Sandbox Version:31.0.0 Emerald
      Analysis ID:355935
      Start date:22.02.2021
      Start time:09:40:13
      Joe Sandbox Product:CloudBasic
      Overall analysis duration:0h 11m 45s
      Hypervisor based Inspection enabled:false
      Report type:full
      Sample file name:EM_B43454933_7621780_573.exe
      Cookbook file name:default.jbs
      Analysis system description:Windows 10 64 bit v1803 with Office Professional Plus 2016, Chrome 85, IE 11, Adobe Reader DC 19, Java 8 Update 211
      Number of analysed new started processes analysed:27
      Number of new started drivers analysed:0
      Number of existing processes analysed:0
      Number of existing drivers analysed:0
      Number of injected processes analysed:0
      Technologies:
      • HCA enabled
      • EGA enabled
      • HDC enabled
      • AMSI enabled
      Analysis Mode:default
      Analysis stop reason:Timeout
      Detection:MAL
      Classification:mal84.rans.troj.evad.winEXE@1/0@0/0
      EGA Information:
      • Successful, ratio: 100%
      HDC Information:
      • Successful, ratio: 36.9% (good quality ratio 20.7%)
      • Quality average: 33.8%
      • Quality standard deviation: 35.6%
      HCA Information:Failed
      Cookbook Comments:
      • Adjust boot time
      • Enable AMSI
      • Found application associated with file extension: .exe
      Warnings:
      Show All
      • Exclude process from analysis (whitelisted): BackgroundTransferHost.exe, RuntimeBroker.exe, wermgr.exe, MusNotifyIcon.exe, backgroundTaskHost.exe, svchost.exe, wuapihost.exe

      Simulations

      Behavior and APIs

      No simulations

      Joe Sandbox View / Context

      IPs

      No context

      Domains

      No context

      ASN

      No context

      JA3 Fingerprints

      No context

      Dropped Files

      No context

      Created / dropped Files

      No created / dropped files found

      Static File Info

      General

      File type:PE32 executable (GUI) Intel 80386, for MS Windows
      Entropy (8bit):5.299619096557311
      TrID:
      • Win32 Executable (generic) a (10002005/4) 99.15%
      • Win32 Executable Microsoft Visual Basic 6 (82127/2) 0.81%
      • Generic Win/DOS Executable (2004/3) 0.02%
      • DOS Executable Generic (2002/1) 0.02%
      • Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
      File name:EM_B43454933_7621780_573.exe
      File size:65536
      MD5:b679e85b64a7b5851f0abc9d69740978
      SHA1:7c103c70859b5d708ae5ff82a65a67b71272df4d
      SHA256:a1677b7e54a0d67b9b16d0a0835187b889db434d77d8a8f3f7714a86b01a27db
      SHA512:e40a30142c8d1232ae9157c588b26d4e0613ea01ec7636e9c68fcf72c78a4b8815325f4fd0fda6271d7c3845424bcf59b8671f4b7fb02b1ba595aba67d37aaed
      SSDEEP:768:X4vJqG24/Fh5pe7zWjlZnn6/fEApUHH9mCCg3YYP35R7jgVCm:oxqaF3pe7zWG0nHHtCgoW3f6
      File Content Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........+O..E...E...E.X.K...E...L...E...H...E.Rich..E.................PE..L......G.....................0....................@........

      File Icon

      Icon Hash:20047c7c70f0e004

      Static PE Info

      General

      Entrypoint:0x4013b0
      Entrypoint Section:.text
      Digitally signed:false
      Imagebase:0x400000
      Subsystem:windows gui
      Image File Characteristics:LOCAL_SYMS_STRIPPED, 32BIT_MACHINE, EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, RELOCS_STRIPPED
      DLL Characteristics:
      Time Stamp:0x478A979E [Sun Jan 13 22:58:38 2008 UTC]
      TLS Callbacks:
      CLR (.Net) Version:
      OS Version Major:4
      OS Version Minor:0
      File Version Major:4
      File Version Minor:0
      Subsystem Version Major:4
      Subsystem Version Minor:0
      Import Hash:e040c8c04f7f9a83c53d48451cf696fa

      Entrypoint Preview

      Instruction
      push 00401A50h
      call 00007F409098EB93h
      add byte ptr [eax], al
      add byte ptr [eax], al
      add byte ptr [eax], al
      xor byte ptr [eax], al
      add byte ptr [eax], al
      inc eax
      add byte ptr [eax], al
      add byte ptr [eax], al
      add byte ptr [eax], al
      add byte ptr [esi+1CA7EB43h], dh
      xchg eax, esp
      jo 00007F409098EBEBh
      mov edi, 6EEA2FE3h
      add dword ptr [edi+0000006Ah], edi
      add byte ptr [eax], al
      add byte ptr [ecx], al
      add byte ptr [eax], al
      add byte ptr [edx+00h], al
      push es
      push eax
      add dword ptr [ecx], 54h
      jc 00007F409098EC03h
      je 00007F409098EC08h
      xor eax, dword ptr fs:[eax]
      add byte ptr [eax], al
      add ah, ah
      sub dl, byte ptr [00000003h]
      add bh, bh
      int3
      xor dword ptr [eax], eax
      pop es
      jp 00007F409098EBE5h

      Data Directories

      NameVirtual AddressVirtual Size Is in Section
      IMAGE_DIRECTORY_ENTRY_EXPORT0x00x0
      IMAGE_DIRECTORY_ENTRY_IMPORT0xcee40x28.text
      IMAGE_DIRECTORY_ENTRY_RESOURCE0x100000x9cc.rsrc
      IMAGE_DIRECTORY_ENTRY_EXCEPTION0x00x0
      IMAGE_DIRECTORY_ENTRY_SECURITY0x00x0
      IMAGE_DIRECTORY_ENTRY_BASERELOC0x00x0
      IMAGE_DIRECTORY_ENTRY_DEBUG0x00x0
      IMAGE_DIRECTORY_ENTRY_COPYRIGHT0x00x0
      IMAGE_DIRECTORY_ENTRY_GLOBALPTR0x00x0
      IMAGE_DIRECTORY_ENTRY_TLS0x00x0
      IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG0x00x0
      IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT0x2300x20
      IMAGE_DIRECTORY_ENTRY_IAT0x10000xf8.text
      IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT0x00x0
      IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR0x00x0
      IMAGE_DIRECTORY_ENTRY_RESERVED0x00x0

      Sections

      NameVirtual AddressVirtual SizeRaw SizeXored PEZLIB ComplexityFile TypeEntropyCharacteristics
      .text0x10000xc3680xd000False0.458646334135data5.98020239152IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_READ
      .data0xe0000x19580x1000False0.00634765625data0.0IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_WRITE, IMAGE_SCN_MEM_READ
      .rsrc0x100000x9cc0x1000False0.182373046875data2.14952458859IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ

      Resources

      NameRVASizeTypeLanguageCountry
      RT_ICON0x1089c0x130data
      RT_ICON0x105b40x2e8data
      RT_ICON0x1048c0x128GLS_BINARY_LSB_FIRST
      RT_GROUP_ICON0x1045c0x30data
      RT_VERSION0x101500x30cdataHungarianHungary

      Imports

      DLLImport
      MSVBVM60.DLL_CIcos, _adj_fptan, __vbaVarMove, __vbaFreeVar, __vbaFreeVarList, _adj_fdiv_m64, __vbaFreeObjList, _adj_fprem1, __vbaHresultCheckObj, _adj_fdiv_m32, __vbaLateMemSt, __vbaObjSet, _adj_fdiv_m16i, __vbaObjSetAddref, _adj_fdivr_m16i, __vbaCyStr, _CIsin, __vbaChkstk, EVENT_SINK_AddRef, __vbaStrCmp, __vbaVarTstEq, __vbaObjVar, _adj_fpatan, __vbaLateIdCallLd, EVENT_SINK_Release, _CIsqrt, EVENT_SINK_QueryInterface, __vbaFpCmpCy, __vbaExceptHandler, _adj_fprem, _adj_fdivr_m64, __vbaFPException, _CIlog, __vbaErrorOverflow, __vbaNew2, _adj_fdiv_m32i, _adj_fdivr_m32i, __vbaFreeStrList, _adj_fdivr_m32, _adj_fdiv_r, __vbaVarTstNe, __vbaI4Var, __vbaVarAdd, __vbaVarDup, __vbaFpI4, __vbaLateMemCallLd, _CIatan, __vbaStrMove, _allmul, _CItan, _CIexp, __vbaFreeObj, __vbaFreeStr

      Version Infos

      DescriptionData
      Translation0x040e 0x04b0
      LegalCopyrightCopyright (C) Tulix
      InternalNameNaticahartko
      FileVersion1.00
      CompanyNameTulix
      LegalTrademarksCopyright (C) Tulix
      CommentsTulix
      ProductNameTulix
      ProductVersion1.00
      FileDescriptionTulix
      OriginalFilenameNaticahartko.exe

      Possible Origin

      Language of compilation systemCountry where language is spokenMap
      HungarianHungary

      Network Behavior

      No network behavior found

      Code Manipulations

      Statistics

      CPU Usage

      Click to jump to process

      Memory Usage

      Click to jump to process

      System Behavior

      General

      Start time:09:41:04
      Start date:22/02/2021
      Path:C:\Users\user\Desktop\EM_B43454933_7621780_573.exe
      Wow64 process (32bit):true
      Commandline:'C:\Users\user\Desktop\EM_B43454933_7621780_573.exe'
      Imagebase:0x400000
      File size:65536 bytes
      MD5 hash:B679E85B64A7B5851F0ABC9D69740978
      Has elevated privileges:true
      Has administrator privileges:true
      Programmed in:Visual Basic
      Reputation:low

      Disassembly

      Code Analysis

      Reset < >

        Execution Graph

        Execution Coverage:5.2%
        Dynamic/Decrypted Code Coverage:1.5%
        Signature Coverage:1.3%
        Total number of Nodes:392
        Total number of Limit Nodes:27

        Graph

        execution_graph 4249 40c6c0 4250 40c6d2 __vbaFreeStr __vbaFreeObj __vbaFreeVarList 4249->4250 4251 40c6ca __vbaFreeVar 4249->4251 4251->4250 4261 408f00 4263 408f08 4261->4263 4262 408fac 4263->4262 4263->4263 4264 4092a9 VirtualAlloc 4263->4264 4265 409490 4264->4265 4265->4265 4019 40cc09 __vbaChkstk 4020 40cc49 #527 __vbaStrMove __vbaStrCmp __vbaFreeStr 4019->4020 4021 40ce71 __vbaFreeStr 4020->4021 4022 40cc88 4020->4022 4023 40cc91 __vbaNew2 4022->4023 4024 40cca9 __vbaObjSet 4022->4024 4023->4024 4027 40cce2 4024->4027 4028 40cd07 4027->4028 4029 40cced __vbaHresultCheckObj 4027->4029 4030 40cd14 __vbaNew2 4028->4030 4031 40cd2c __vbaObjSet 4028->4031 4029->4028 4030->4031 4033 40cd65 4031->4033 4034 40cd70 __vbaHresultCheckObj 4033->4034 4035 40cd8a 4033->4035 4034->4035 4036 40cd97 __vbaNew2 4035->4036 4037 40cdaf 4035->4037 4036->4037 4038 40cdd8 __vbaHresultCheckObj 4037->4038 4039 40cdef 4037->4039 4038->4039 4040 40ce30 4039->4040 4041 40ce19 __vbaHresultCheckObj 4039->4041 4042 40ce34 __vbaStrMove __vbaFreeStrList __vbaFreeObjList 4040->4042 4041->4042 4042->4021 4276 40cbca __vbaFreeStr __vbaFreeObjList 4018 40c44c __vbaFreeStr __vbaFreeObj __vbaFreeVarList 4014 408fcf 4015 408fe7 4014->4015 4015->4015 4016 4092a9 VirtualAlloc 4015->4016 4017 409490 4016->4017 4017->4017 4228 40ca10 __vbaChkstk 4229 40ca50 __vbaCyStr __vbaFpCmpCy 4228->4229 4230 40cbc2 4229->4230 4231 40ca6f 4229->4231 4232 40caa6 4231->4232 4233 40ca8c __vbaHresultCheckObj 4231->4233 4234 40cab3 __vbaNew2 4232->4234 4235 40cacb 4232->4235 4233->4232 4234->4235 4236 40cae3 __vbaNew2 4235->4236 4237 40cafb __vbaObjSet 4235->4237 4236->4237 4239 40cb34 4237->4239 4240 40cb59 4239->4240 4241 40cb3f __vbaHresultCheckObj 4239->4241 4242 40cb5d __vbaObjSet 4240->4242 4241->4242 4243 40cb82 4242->4243 4244 40cba4 4243->4244 4245 40cb8d __vbaHresultCheckObj 4243->4245 4246 40cba8 __vbaFreeStr __vbaFreeObjList 4244->4246 4245->4246 4246->4230 3833 40a394 __vbaChkstk 3834 40a3e1 3833->3834 3835 40a44c 3834->3835 3836 40a42c __vbaHresultCheckObj 3834->3836 3837 40a453 9 API calls 3835->3837 3836->3837 3838 40a50a __vbaObjSet 3837->3838 3839 40a4ef __vbaNew2 3837->3839 3841 40a558 3838->3841 3839->3838 3842 40a569 __vbaHresultCheckObj 3841->3842 3843 40a58c 3841->3843 3844 40a593 8 API calls 3842->3844 3843->3844 3845 40a658 3844->3845 3846 40a73b 3844->3846 3849 40a661 __vbaNew2 3845->3849 3850 40a67c 3845->3850 3847 40a744 __vbaNew2 3846->3847 3848 40a75f __vbaObjSet 3846->3848 3847->3848 3854 40a7ad 3848->3854 3849->3850 3852 40a6da 3850->3852 3853 40a6ba __vbaHresultCheckObj 3850->3853 3857 40a72c 3852->3857 3858 40a70c __vbaHresultCheckObj 3852->3858 3853->3852 3855 40a7e1 3854->3855 3856 40a7be __vbaHresultCheckObj 3854->3856 3860 40a84d 3855->3860 3861 40a82d __vbaHresultCheckObj 3855->3861 3856->3855 3859 40a733 __vbaFreeObj 3857->3859 3858->3859 3859->3846 3862 40a854 __vbaFreeObj __vbaFreeVar 3860->3862 3861->3862 3863 40a888 __vbaObjSet 3862->3863 3864 40a86d __vbaNew2 3862->3864 3866 40a8d0 3863->3866 3864->3863 3867 40a901 3866->3867 3868 40a8e1 __vbaHresultCheckObj 3866->3868 3869 40a9e2 3867->3869 3870 40a9c2 __vbaHresultCheckObj 3867->3870 3868->3867 3871 40a9e9 __vbaFreeObj __vbaFreeVarList 3869->3871 3870->3871 3872 40aa23 3871->3872 3873 40aa52 3872->3873 3874 40aa32 __vbaHresultCheckObj 3872->3874 3875 40aa88 __vbaObjSet 3873->3875 3876 40aa6d __vbaNew2 3873->3876 3874->3873 3878 40aad6 3875->3878 3876->3875 3879 40aae7 __vbaHresultCheckObj 3878->3879 3880 40ab0a 3878->3880 3881 40ab11 __vbaChkstk 3879->3881 3880->3881 3882 40ab8d __vbaVarMove __vbaFreeObj 3881->3882 3883 40abc4 __vbaObjSet 3882->3883 3884 40aba9 __vbaNew2 3882->3884 3886 40ac12 3883->3886 3884->3883 3887 40ac23 __vbaHresultCheckObj 3886->3887 3888 40ac46 3886->3888 3887->3888 3889 40ac71 __vbaObjSet 3888->3889 3890 40ac56 __vbaNew2 3888->3890 3892 40acbf 3889->3892 3890->3889 3893 40acd0 __vbaHresultCheckObj 3892->3893 3894 40acf3 3892->3894 3893->3894 3895 40ad03 __vbaNew2 3894->3895 3896 40ad1e __vbaObjSet 3894->3896 3895->3896 3898 40ad69 3896->3898 3899 40ad7a __vbaHresultCheckObj 3898->3899 3900 40ad9d 3898->3900 3901 40ada4 __vbaChkstk 3899->3901 3900->3901 3902 40ae49 3901->3902 3903 40ae78 3902->3903 3904 40ae58 __vbaHresultCheckObj 3902->3904 3905 40ae7f __vbaFreeObjList __vbaFreeVar 3903->3905 3904->3905 3906 40aeca __vbaObjSet 3905->3906 3907 40aeaf __vbaNew2 3905->3907 3909 40af15 3906->3909 3907->3906 3910 40af46 3909->3910 3911 40af26 __vbaHresultCheckObj 3909->3911 3912 40af71 __vbaObjSet 3910->3912 3913 40af56 __vbaNew2 3910->3913 3911->3910 3915 40afbf 3912->3915 3913->3912 3916 40afd0 __vbaHresultCheckObj 3915->3916 3917 40aff3 3915->3917 3916->3917 3918 40b003 __vbaNew2 3917->3918 3919 40b01e __vbaObjSet 3917->3919 3918->3919 3921 40b069 3919->3921 3922 40b07a __vbaHresultCheckObj 3921->3922 3923 40b09d __vbaFreeObjList __vbaFreeVar 3921->3923 3922->3923 3925 40b180 __vbaNew2 3923->3925 3926 40b19b __vbaObjSet 3923->3926 3925->3926 3928 40b1e6 3926->3928 3929 40b217 3928->3929 3930 40b1f7 __vbaHresultCheckObj 3928->3930 3931 40b242 __vbaObjSet 3929->3931 3932 40b227 __vbaNew2 3929->3932 3930->3929 3934 40b290 3931->3934 3932->3931 3935 40b2a1 __vbaHresultCheckObj 3934->3935 3936 40b2c4 3934->3936 3935->3936 3937 40b326 3936->3937 3938 40b306 __vbaHresultCheckObj 3936->3938 3939 40b32d __vbaFreeObjList 3937->3939 3938->3939 3940 40b363 __vbaObjSet 3939->3940 3941 40b348 __vbaNew2 3939->3941 3943 40b3ae 3940->3943 3941->3940 3944 40b3e2 3943->3944 3945 40b3bf __vbaHresultCheckObj 3943->3945 3946 40b3f2 __vbaNew2 3944->3946 3947 40b40d __vbaObjSet 3944->3947 3945->3944 3946->3947 3949 40b45b 3947->3949 3950 40b46c __vbaHresultCheckObj 3949->3950 3951 40b48f 3949->3951 3950->3951 3952 40b519 3951->3952 3953 40b4f9 __vbaHresultCheckObj 3951->3953 3954 40b520 __vbaFreeObjList __vbaFreeVar 3952->3954 3953->3954 3955 40b551 3954->3955 3956 40b582 3955->3956 3957 40b562 __vbaHresultCheckObj 3955->3957 3958 40b5c4 3956->3958 3959 40bc9b __vbaFreeVar __vbaFreeObj 3956->3959 3957->3956 3960 40b5e8 __vbaObjSet 3958->3960 3961 40b5cd __vbaNew2 3958->3961 3964 40b633 3960->3964 3961->3960 3965 40b644 __vbaHresultCheckObj 3964->3965 3966 40b667 3964->3966 3965->3966 3967 40b692 __vbaObjSet 3966->3967 3968 40b677 __vbaNew2 3966->3968 3970 40b6e0 3967->3970 3968->3967 3971 40b6f1 __vbaHresultCheckObj 3970->3971 3972 40b714 3970->3972 3971->3972 3973 40b79e 3972->3973 3974 40b77e __vbaHresultCheckObj 3972->3974 3975 40b7a5 __vbaFreeObjList __vbaFreeVar 3973->3975 3974->3975 3976 40b7d1 __vbaNew2 3975->3976 3977 40b7ec __vbaObjSet 3975->3977 3976->3977 3979 40b837 3977->3979 3980 40b868 3979->3980 3981 40b848 __vbaHresultCheckObj 3979->3981 3982 40b893 __vbaObjSet 3980->3982 3983 40b878 __vbaNew2 3980->3983 3981->3980 3985 40b8e1 3982->3985 3983->3982 3986 40b8f2 __vbaHresultCheckObj 3985->3986 3987 40b915 3985->3987 3986->3987 3988 40b977 3987->3988 3989 40b957 __vbaHresultCheckObj 3987->3989 3990 40b97e __vbaFreeObjList 3988->3990 3989->3990 3991 40b9b4 __vbaObjSet 3990->3991 3992 40b999 __vbaNew2 3990->3992 3994 40ba02 3991->3994 3992->3991 3995 40ba13 __vbaHresultCheckObj 3994->3995 3996 40ba36 3994->3996 3995->3996 3997 40ba61 __vbaObjSet 3996->3997 3998 40ba46 __vbaNew2 3996->3998 4000 40baaf 3997->4000 3998->3997 4001 40bac0 __vbaHresultCheckObj 4000->4001 4002 40bae3 4000->4002 4001->4002 4003 40baf3 __vbaNew2 4002->4003 4004 40bb0e __vbaObjSet 4002->4004 4003->4004 4006 40bb59 4004->4006 4007 40bb6a __vbaHresultCheckObj 4006->4007 4008 40bb8d 4006->4008 4009 40bb94 __vbaChkstk 4007->4009 4008->4009 4010 40bc39 4009->4010 4011 40bc68 4010->4011 4012 40bc48 __vbaHresultCheckObj 4010->4012 4013 40bc6f __vbaFreeObjList __vbaFreeVar 4011->4013 4012->4013 4252 2912805 GetPEB 4115 40c9d5 __vbaFreeStr __vbaFreeObj 4080 40bd1b __vbaChkstk 4081 40bd5d 4080->4081 4082 40bd66 __vbaNew2 4081->4082 4083 40bd7e __vbaObjSet 4081->4083 4082->4083 4085 40bdb7 4083->4085 4086 40bdc2 __vbaHresultCheckObj 4085->4086 4087 40bddc 4085->4087 4088 40bde0 #561 __vbaFreeObj __vbaFreeVar 4086->4088 4087->4088 4089 40be21 4088->4089 4090 40c09d 4088->4090 4091 40be42 __vbaObjSet 4089->4091 4092 40be2a __vbaNew2 4089->4092 4094 40be7b 4091->4094 4092->4091 4095 40bea0 4094->4095 4096 40be86 __vbaHresultCheckObj 4094->4096 4097 40bead __vbaNew2 4095->4097 4098 40bec8 __vbaObjSet 4095->4098 4096->4095 4097->4098 4100 40bf0a 4098->4100 4101 40bf32 4100->4101 4102 40bf15 __vbaHresultCheckObj 4100->4102 4103 40bf39 __vbaLateIdCallLd 4101->4103 4102->4103 4104 40bf70 __vbaObjSet 4103->4104 4105 40bf55 __vbaNew2 4103->4105 4107 40bfaf 4104->4107 4105->4104 4108 40bfd4 4107->4108 4109 40bfba __vbaHresultCheckObj 4107->4109 4110 40bfdb __vbaFpI4 __vbaI4Var 4108->4110 4109->4110 4111 40c04c 4110->4111 4112 40c074 4111->4112 4113 40c057 __vbaHresultCheckObj 4111->4113 4114 40c07b __vbaFreeObjList __vbaFreeVar 4112->4114 4113->4114 4114->4090 4064 40c89d __vbaFreeVarList 4247 40c222 __vbaFreeStr __vbaFreeObj __vbaFreeVar 4116 40b5a3 4117 40b5b2 4116->4117 4118 40bd16 __vbaErrorOverflow 4116->4118 4120 40b5c4 4117->4120 4121 40bc9b __vbaFreeVar __vbaFreeObj 4117->4121 4119 40bd1b __vbaChkstk 4118->4119 4124 40bd5d 4119->4124 4122 40b5e8 __vbaObjSet 4120->4122 4123 40b5cd __vbaNew2 4120->4123 4130 40b633 4122->4130 4123->4122 4125 40bd66 __vbaNew2 4124->4125 4126 40bd7e __vbaObjSet 4124->4126 4125->4126 4131 40bdb7 4126->4131 4132 40b644 __vbaHresultCheckObj 4130->4132 4133 40b667 4130->4133 4134 40bdc2 __vbaHresultCheckObj 4131->4134 4135 40bddc 4131->4135 4132->4133 4137 40b692 __vbaObjSet 4133->4137 4138 40b677 __vbaNew2 4133->4138 4136 40bde0 #561 __vbaFreeObj __vbaFreeVar 4134->4136 4135->4136 4139 40be21 4136->4139 4140 40c09d 4136->4140 4145 40b6e0 4137->4145 4138->4137 4141 40be42 __vbaObjSet 4139->4141 4142 40be2a __vbaNew2 4139->4142 4148 40be7b 4141->4148 4142->4141 4146 40b6f1 __vbaHresultCheckObj 4145->4146 4147 40b714 4145->4147 4146->4147 4153 40b79e 4147->4153 4154 40b77e __vbaHresultCheckObj 4147->4154 4149 40bea0 4148->4149 4150 40be86 __vbaHresultCheckObj 4148->4150 4151 40bec8 __vbaObjSet 4149->4151 4152 40bead __vbaNew2 4149->4152 4150->4149 4159 40bf0a 4151->4159 4152->4151 4155 40b7a5 __vbaFreeObjList __vbaFreeVar 4153->4155 4154->4155 4156 40b7d1 __vbaNew2 4155->4156 4157 40b7ec __vbaObjSet 4155->4157 4156->4157 4164 40b837 4157->4164 4161 40bf32 4159->4161 4162 40bf15 __vbaHresultCheckObj 4159->4162 4163 40bf39 __vbaLateIdCallLd 4161->4163 4162->4163 4165 40bf70 __vbaObjSet 4163->4165 4166 40bf55 __vbaNew2 4163->4166 4167 40b868 4164->4167 4168 40b848 __vbaHresultCheckObj 4164->4168 4173 40bfaf 4165->4173 4166->4165 4169 40b893 __vbaObjSet 4167->4169 4170 40b878 __vbaNew2 4167->4170 4168->4167 4176 40b8e1 4169->4176 4170->4169 4174 40bfd4 4173->4174 4175 40bfba __vbaHresultCheckObj 4173->4175 4177 40bfdb __vbaFpI4 __vbaI4Var 4174->4177 4175->4177 4178 40b8f2 __vbaHresultCheckObj 4176->4178 4179 40b915 4176->4179 4180 40c04c 4177->4180 4178->4179 4184 40b977 4179->4184 4185 40b957 __vbaHresultCheckObj 4179->4185 4181 40c074 4180->4181 4182 40c057 __vbaHresultCheckObj 4180->4182 4183 40c07b __vbaFreeObjList __vbaFreeVar 4181->4183 4182->4183 4183->4140 4186 40b97e __vbaFreeObjList 4184->4186 4185->4186 4187 40b9b4 __vbaObjSet 4186->4187 4188 40b999 __vbaNew2 4186->4188 4190 40ba02 4187->4190 4188->4187 4191 40ba13 __vbaHresultCheckObj 4190->4191 4192 40ba36 4190->4192 4191->4192 4193 40ba61 __vbaObjSet 4192->4193 4194 40ba46 __vbaNew2 4192->4194 4196 40baaf 4193->4196 4194->4193 4197 40bac0 __vbaHresultCheckObj 4196->4197 4198 40bae3 4196->4198 4197->4198 4199 40baf3 __vbaNew2 4198->4199 4200 40bb0e __vbaObjSet 4198->4200 4199->4200 4202 40bb59 4200->4202 4203 40bb6a __vbaHresultCheckObj 4202->4203 4204 40bb8d 4202->4204 4205 40bb94 __vbaChkstk 4203->4205 4204->4205 4206 40bc39 4205->4206 4207 40bc68 4206->4207 4208 40bc48 __vbaHresultCheckObj 4206->4208 4209 40bc6f __vbaFreeObjList __vbaFreeVar 4207->4209 4208->4209 4043 40c8e4 __vbaChkstk 4044 40c932 4043->4044 4045 40c91a __vbaNew2 4043->4045 4046 40c95b __vbaHresultCheckObj 4044->4046 4047 40c972 4044->4047 4045->4044 4046->4047 4048 40c996 __vbaHresultCheckObj 4047->4048 4049 40c9ad 4047->4049 4050 40c9b1 __vbaStrMove __vbaFreeObj 4048->4050 4049->4050 4051 40c9e6 __vbaFreeStr 4050->4051 4065 40c0a5 __vbaFreeObjList __vbaFreeVar 4248 401226 __vbaExceptHandler 4052 40c0e8 __vbaChkstk 4053 40c128 #572 __vbaStrMove __vbaStrCmp __vbaFreeStr __vbaFreeVar 4052->4053 4054 40c21b __vbaFreeObj 4053->4054 4055 40c17c 4053->4055 4057 40c185 __vbaNew2 4055->4057 4058 40c19d 4055->4058 4059 40c1a4 __vbaChkstk 4057->4059 4058->4059 4060 40c1df 4059->4060 4061 40c201 4060->4061 4062 40c1ea __vbaHresultCheckObj 4060->4062 4063 40c205 __vbaObjSet 4061->4063 4062->4063 4063->4054 4066 40c4a9 8 API calls 4067 40c6b9 __vbaFreeStr __vbaFreeVar 4066->4067 4068 40c58f 4066->4068 4070 40c5b3 4068->4070 4071 40c598 __vbaNew2 4068->4071 4072 40c611 4070->4072 4073 40c5f1 __vbaHresultCheckObj 4070->4073 4071->4070 4074 40c618 __vbaChkstk 4072->4074 4073->4074 4075 40c65e 4074->4075 4076 40c68f 4075->4076 4077 40c66f __vbaHresultCheckObj 4075->4077 4078 40c696 __vbaStrMove __vbaFreeObj 4076->4078 4077->4078 4078->4067 4210 40c26d __vbaChkstk 4211 40c2af #647 4210->4211 4212 40c2d3 __vbaNew2 4211->4212 4213 40c2ee __vbaObjSet 4211->4213 4212->4213 4215 40c32d 4213->4215 4216 40c352 4215->4216 4217 40c338 __vbaHresultCheckObj 4215->4217 4218 40c359 __vbaVarTstEq __vbaFreeObj __vbaFreeVarList 4216->4218 4217->4218 4219 40c3b1 4218->4219 4220 40c445 __vbaFreeStr 4218->4220 4222 40c3d5 4219->4222 4223 40c3ba __vbaNew2 4219->4223 4224 40c423 4222->4224 4225 40c409 __vbaHresultCheckObj 4222->4225 4223->4222 4226 40c42a __vbaStrMove 4224->4226 4225->4226 4226->4220 3831 4013b0 #100 3832 4013d4 3831->3832 4079 40bcb1 __vbaFreeStr __vbaFreeObjList __vbaFreeVarList 4259 29149a3 GetPEB 4260 29149cf 4259->4260 4266 40c732 __vbaChkstk 4267 40c772 __vbaVarDup #607 __vbaVarTstNe __vbaFreeVarList 4266->4267 4268 40c7d7 4267->4268 4275 40c88e __vbaFreeVar 4267->4275 4270 40c7f6 4268->4270 4271 40c7fe _adj_fdiv_m64 4268->4271 4272 40c80f __vbaFpI4 4270->4272 4271->4272 4273 40c866 4272->4273 4274 40c871 __vbaHresultCheckObj 4273->4274 4273->4275 4274->4275 4227 40ce79 __vbaFreeStrList __vbaFreeObjList

        Executed Functions

        Control-flow Graph

        • Executed
        • Not Executed
        control_flow_graph 234 4013b0-4013d2 #100 235 4013d4-401405 234->235 236 40141d-401476 234->236 235->236 237 401478-401488 236->237 238 4014dd-4014e4 236->238 240 40148a-4014ab 237->240 241 4014ef-4014f7 237->241 242 4014e6 238->242 243 401559-40155e 238->243 245 401516-40151c 240->245 246 4014ad-4014bd 240->246 250 4014f9 241->250 251 4014fa-401507 241->251 248 4014e8-4014e9 242->248 249 40154d 242->249 247 401561-401570 243->247 253 401521-40152e 245->253 252 4014c0-4014d9 246->252 246->253 255 401572-401577 247->255 254 401550-401558 248->254 256 4014eb-4014ee 248->256 249->254 250->251 251->255 257 401509-401512 251->257 259 401544-40154c 252->259 260 4014db-4014dc 252->260 253->247 258 401530-401542 253->258 254->243 261 401579-40158a 255->261 256->241 257->261 262 401514 257->262 258->259 259->249 260->238 263 40158c-4015a8 261->263 264 4015ed-4015fa 261->264 262->245 266 4015aa-4015ac 263->266 267 4015ae-4015eb 263->267 266->267 267->264
        C-Code - Quality: 90%
        			_entry_() {
        				signed char _t3;
        				intOrPtr* _t4;
        				void* _t5;
        				void* _t6;
        				void* _t8;
        
        				_push("VB5!6&*"); // executed
        				L004013A8(); // executed
        				 *_t3 =  *_t3 + _t3;
        				 *_t3 =  *_t3 + _t3;
        				 *_t3 =  *_t3 + _t3;
        				 *_t3 =  *_t3 ^ _t3;
        				 *_t3 =  *_t3 + _t3;
        				_t4 = _t3 + 1;
        				 *_t4 =  *_t4 + _t4;
        				 *_t4 =  *_t4 + _t4;
        				 *_t4 =  *_t4 + _t4;
        				 *((intOrPtr*)(_t8 + 0x1ca7eb43)) =  *((intOrPtr*)(_t8 + 0x1ca7eb43)) + _t6;
        				_t5 = _t5 + _t5;
        			}








        0x004013b0
        0x004013b5
        0x004013ba
        0x004013bc
        0x004013be
        0x004013c0
        0x004013c2
        0x004013c4
        0x004013c5
        0x004013c7
        0x004013c9
        0x004013cb
        0x00401377

        APIs
        Strings
        Memory Dump Source
        • Source File: 00000000.00000002.1731710525.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true
        • Associated: 00000000.00000002.1731690330.0000000000400000.00000002.00020000.sdmp Download File
        • Associated: 00000000.00000002.1731774426.000000000040E000.00000004.00020000.sdmp Download File
        • Associated: 00000000.00000002.1731805623.0000000000410000.00000002.00020000.sdmp Download File
        Joe Sandbox IDA Plugin
        • Snapshot File: hcaresult_0_2_400000_EM_B43454933_7621780_573.jbxd
        Similarity
        • API ID: #100
        • String ID: VB5!6&*$/n
        • API String ID: 1341478452-2495334981
        • Opcode ID: 29c39112536db989437982b8ee01c00646752f31e252830040ba37680a772746
        • Instruction ID: edb02cc504dc507454bee206cbf5c2c2745aea02d43d66f8c2ac0dcc391fef63
        • Opcode Fuzzy Hash: 29c39112536db989437982b8ee01c00646752f31e252830040ba37680a772746
        • Instruction Fuzzy Hash: 9381446244E3C19FD7138B749DA65A27FB0AE13314B1E05EBC882CF5B3D22C591AC726
        Uniqueness

        Uniqueness Score: -1.00%

        C-Code - Quality: 56%
        			E0040A394(void* __ebx, signed int __ecx, void* __edi, void* __esi, signed int _a4) {
        				intOrPtr* _v0;
        				char _v3;
        				signed int _v8;
        				intOrPtr _v12;
        				intOrPtr _v16;
        				signed int _v28;
        				char _v32;
        				char _v36;
        				char _v40;
        				char _v44;
        				signed int _v52;
        				void* _v56;
        				char _v60;
        				char _v68;
        				intOrPtr _v72;
        				intOrPtr _v76;
        				signed int _v80;
        				char _v84;
        				void* _v88;
        				signed int _v92;
        				signed int _v96;
        				signed int _v100;
        				intOrPtr* _v104;
        				signed int _v108;
        				signed int _v112;
        				intOrPtr _v120;
        				intOrPtr* _v124;
        				signed int _v128;
        				intOrPtr* _v132;
        				signed int _v136;
        				intOrPtr* _v140;
        				signed int _v144;
        				intOrPtr* _v148;
        				signed int _v152;
        				intOrPtr _v156;
        				char _v160;
        				intOrPtr _v164;
        				intOrPtr _v168;
        				signed int _v172;
        				void* _v176;
        				char _v196;
        				char _v200;
        				char _v204;
        				char _v208;
        				char _v212;
        				intOrPtr _v216;
        				char _v220;
        				char _v224;
        				char _v228;
        				intOrPtr _v232;
        				char _v236;
        				signed int _v240;
        				signed int _v244;
        				signed int _v248;
        				signed int _v252;
        				signed int _v256;
        				signed int _v260;
        				signed int _v264;
        				intOrPtr _v268;
        				intOrPtr _v272;
        				signed int _v284;
        				signed int _v288;
        				signed int _v292;
        				signed int _v296;
        				signed int _v300;
        				signed int _v304;
        				signed int _v308;
        				char _v312;
        				signed int _v316;
        				intOrPtr* _v320;
        				signed int _v324;
        				signed int _v328;
        				intOrPtr* _v332;
        				signed int _v336;
        				signed int _v340;
        				intOrPtr* _v344;
        				signed int _v348;
        				signed int _v352;
        				signed int _v356;
        				intOrPtr* _v360;
        				signed int _v364;
        				intOrPtr* _v368;
        				signed int _v372;
        				intOrPtr* _v376;
        				signed int _v380;
        				intOrPtr* _v384;
        				signed int _v388;
        				signed int _v392;
        				intOrPtr* _v396;
        				signed int _v400;
        				intOrPtr* _v404;
        				signed int _v408;
        				intOrPtr* _v412;
        				signed int _v416;
        				intOrPtr* _v420;
        				signed int _v424;
        				intOrPtr* _v428;
        				signed int _v432;
        				signed int _v436;
        				void* _v440;
        				signed int _v444;
        				intOrPtr* _v448;
        				signed int _v452;
        				signed int _v456;
        				signed int _v460;
        				intOrPtr* _v464;
        				signed int _v468;
        				intOrPtr* _v472;
        				signed int _v476;
        				signed int _v480;
        				intOrPtr* _v484;
        				signed int _v488;
        				intOrPtr* _v492;
        				signed int _v496;
        				signed int _v500;
        				intOrPtr* _v504;
        				signed int _v508;
        				intOrPtr* _v512;
        				signed int _v516;
        				intOrPtr* _v520;
        				signed int _v524;
        				signed int _v528;
        				intOrPtr* _v788;
        				intOrPtr _v800;
        				intOrPtr _v804;
        				intOrPtr _v808;
        				intOrPtr _v1957646271;
        				intOrPtr* _t874;
        				signed int _t878;
        				intOrPtr* _t881;
        				intOrPtr _t882;
        				void* _t884;
        				intOrPtr* _t885;
        				signed int _t886;
        				signed int* _t889;
        				signed int _t895;
        				signed int _t899;
        				signed int* _t903;
        				signed int _t904;
        				signed int _t909;
        				signed int _t913;
        				signed int _t918;
        				signed int _t922;
        				signed int _t926;
        				signed int _t937;
        				signed int _t944;
        				signed int _t949;
        				signed int _t953;
        				signed int _t965;
        				signed int _t969;
        				signed int _t973;
        				signed int _t977;
        				signed int _t981;
        				signed int _t985;
        				signed int _t995;
        				signed int _t1003;
        				signed int _t1007;
        				signed int _t1011;
        				signed int _t1015;
        				signed int _t1019;
        				signed int _t1023;
        				signed int _t1043;
        				signed int _t1047;
        				signed int _t1051;
        				signed int _t1055;
        				signed int _t1059;
        				signed int _t1065;
        				signed int _t1069;
        				signed int _t1073;
        				signed int _t1077;
        				signed int _t1085;
        				signed int _t1090;
        				void* _t1092;
        				signed int _t1096;
        				signed int _t1100;
        				signed int _t1104;
        				signed int _t1108;
        				signed int _t1116;
        				signed int _t1122;
        				signed int _t1126;
        				signed int _t1130;
        				signed int _t1134;
        				signed int _t1138;
        				signed int _t1144;
        				signed int _t1148;
        				signed int _t1152;
        				signed int _t1156;
        				signed int _t1160;
        				signed int _t1164;
        				signed int _t1174;
        				signed int _t1180;
        				char* _t1189;
        				signed int _t1193;
        				char* _t1195;
        				char* _t1196;
        				char* _t1200;
        				signed int _t1204;
        				signed int _t1208;
        				signed int _t1212;
        				char* _t1217;
        				signed int _t1221;
        				char* _t1222;
        				signed int _t1225;
        				signed int _t1234;
        				signed int _t1238;
        				void* _t1240;
        				void* _t1242;
        				intOrPtr _t1258;
        				intOrPtr _t1262;
        				intOrPtr _t1273;
        				intOrPtr _t1283;
        				intOrPtr _t1296;
        				intOrPtr _t1307;
        				intOrPtr _t1323;
        				intOrPtr _t1341;
        				long long* _t1353;
        				signed int* _t1362;
        				void* _t1363;
        				char* _t1366;
        				void* _t1368;
        				intOrPtr _t1369;
        				void* _t1370;
        				void* _t1371;
        				void* _t1372;
        				void* _t1373;
        				void* _t1374;
        				long long* _t1375;
        				intOrPtr* _t1376;
        				void* _t1377;
        				long long* _t1378;
        				intOrPtr _t1379;
        				intOrPtr* _t1380;
        				intOrPtr _t1474;
        				intOrPtr _t1475;
        				intOrPtr _t1476;
        
        				_t1369 = _t1368 - 0xc;
        				_t874 =  *[fs:0x0];
        				 *[fs:0x0] = _t1369;
        				 *0 = _t1369;
        				 *_t874 =  *_t874 + _t874;
        				L00401240();
        				asm("invalid");
        				 *((intOrPtr*)(__ebx + 0x56))();
        				_v16 = _t1369;
        				_v12 = 0x401158;
        				_t878 = _a4 & 0x00000001;
        				asm("loopne 0x3");
        				_v8 = _t878;
        				asm("cld");
        				_a4 = _a4 & 0xfffffffe;
        				_t881 = _a4;
        				_t882 =  *_t881;
        				_t1240 = __ebx;
        				asm("invalid");
        				_t884 = _t882 + 0xc7 - 0x40;
        				_t885 = _t884 + 1;
        				 *_t885 =  *_t885 - 1;
        				 *_t885 =  *_t885 + _t885;
        				_t1242 = _t1240 + _t885 + _t885;
        				[far dword [esp+ebp-0x7a38ffc0](_t882, _a4, __edi, _t874, 0x401246, _t1363);
        				asm("invalid");
        				 *_t885 =  *_t885 - 1;
        				 *_t885 =  *_t885 + _t885;
        				_v1957646271 = _v1957646271 + __ecx;
        				_t1366 =  &_v3;
        				 *(_t1242 + 0x875ff00) =  *(_t1242 + 0x875ff00) | __ecx;
        				_t886 =  *((intOrPtr*)(_t885 + 0x218))(_t1369);
        				asm("fclex");
        				_v240 = _t886;
        				if(_v240 >= 0) {
        					_v308 = _v308 & 0x00000000;
        				} else {
        					_push(0x218);
        					_push(0x402aac);
        					_push(_a4);
        					_push(_v240);
        					L0040137E();
        					_v308 = _t886;
        				}
        				_push(0x10);
        				L00401240();
        				asm("movsd");
        				asm("movsd");
        				asm("movsd");
        				asm("movsd");
        				_push(0x10);
        				L00401240();
        				asm("movsd");
        				asm("movsd");
        				asm("movsd");
        				asm("movsd");
        				_push(2);
        				_push(L"Add");
        				_push(_v84);
        				_t889 =  &_v112;
        				_push(_t889); // executed
        				L00401384(); // executed
        				_t1370 = _t1369 + 0x30;
        				_push(_t889);
        				L0040138A();
        				_push(_t889);
        				_push( &_v68);
        				L00401390();
        				L00401378();
        				L00401372();
        				_v136 = 0x350;
        				_v144 = 2;
        				_push(0x10);
        				L00401240();
        				asm("movsd");
        				asm("movsd");
        				asm("movsd");
        				asm("movsd");
        				_push(L"Left");
        				_push(_v68);
        				L0040136C();
        				if( *0x40e010 != 0) {
        					_v312 = 0x40e010;
        				} else {
        					_push(0x40e010);
        					_push(0x401f74);
        					L00401360();
        					_v312 = 0x40e010;
        				}
        				_t895 =  &_v84;
        				L00401366();
        				_v240 = _t895;
        				_t899 =  *((intOrPtr*)( *_v240 + 0x110))(_v240,  &_v196, _t895,  *((intOrPtr*)( *((intOrPtr*)( *_v312)) + 0x304))( *_v312));
        				asm("fclex");
        				_v244 = _t899;
        				if(_v244 >= 0) {
        					_v316 = _v316 & 0x00000000;
        				} else {
        					_push(0x110);
        					_push(0x402ccc);
        					_push(_v240);
        					_push(_v244);
        					L0040137E();
        					_v316 = _t899;
        				}
        				_v136 = _v196;
        				_v144 = 2;
        				_push(0x10);
        				L00401240();
        				asm("movsd");
        				asm("movsd");
        				asm("movsd");
        				asm("movsd");
        				_push("Top");
        				_push(_v68);
        				L0040136C();
        				L00401378();
        				_v136 = _v136 | 0xffffffff;
        				_v144 = 0xb;
        				_push(0x10);
        				L00401240();
        				asm("movsd");
        				asm("movsd");
        				asm("movsd");
        				asm("movsd");
        				_push(L"Visible");
        				_push(_v68);
        				L0040136C();
        				_v136 = _v136 | 0xffffffff;
        				_v144 = 0x800b;
        				_push(0);
        				_push(L"Enabled");
        				_push(_v68);
        				_t903 =  &_v112;
        				_push(_t903);
        				L00401384();
        				_t1371 = _t1370 + 0x10;
        				_push(_t903);
        				_t904 =  &_v144;
        				_push(_t904);
        				L0040135A();
        				_v240 = _t904;
        				L00401372();
        				if(_v240 != 0) {
        					if( *0x40eb0c != 0) {
        						_v320 = 0x40eb0c;
        					} else {
        						_push(0x40eb0c);
        						_push(0x402d24);
        						L00401360();
        						_v320 = 0x40eb0c;
        					}
        					_v240 =  *_v320;
        					_t1234 =  *((intOrPtr*)( *_v240 + 0x1c))(_v240,  &_v84);
        					asm("fclex");
        					_v244 = _t1234;
        					if(_v244 >= 0) {
        						_v324 = _v324 & 0x00000000;
        					} else {
        						_push(0x1c);
        						_push(0x402d14);
        						_push(_v240);
        						_push(_v244);
        						L0040137E();
        						_v324 = _t1234;
        					}
        					_v248 = _v84;
        					_t1238 =  *((intOrPtr*)( *_v248 + 0x50))(_v248);
        					asm("fclex");
        					_v252 = _t1238;
        					if(_v252 >= 0) {
        						_v328 = _v328 & 0x00000000;
        					} else {
        						_push(0x50);
        						_push(0x402d34);
        						_push(_v248);
        						_push(_v252);
        						L0040137E();
        						_v328 = _t1238;
        					}
        					L00401378();
        				}
        				if( *0x40e010 != 0) {
        					_v332 = 0x40e010;
        				} else {
        					_push(0x40e010);
        					_push(0x401f74);
        					L00401360();
        					_v332 = 0x40e010;
        				}
        				_t909 =  &_v84;
        				L00401366();
        				_v240 = _t909;
        				_t913 =  *((intOrPtr*)( *_v240 + 0x160))(_v240,  &_v196, _t909,  *((intOrPtr*)( *((intOrPtr*)( *_v332)) + 0x314))( *_v332));
        				asm("fclex");
        				_v244 = _t913;
        				if(_v244 >= 0) {
        					_v336 = _v336 & 0x00000000;
        				} else {
        					_push(0x160);
        					_push(0x402d44);
        					_push(_v240);
        					_push(_v244);
        					L0040137E();
        					_v336 = _t913;
        				}
        				_v200 = 0x43ed;
        				_v104 = 0xd200;
        				_v112 = 3;
        				_t918 =  *((intOrPtr*)( *_a4 + 0x6f8))(_a4,  &_v112,  &_v200, _v196);
        				_v248 = _t918;
        				if(_v248 >= 0) {
        					_v340 = _v340 & 0x00000000;
        				} else {
        					_push(0x6f8);
        					_push(0x402ae0);
        					_push(_a4);
        					_push(_v248);
        					L0040137E();
        					_v340 = _t918;
        				}
        				L00401378();
        				L00401372();
        				if( *0x40e010 != 0) {
        					_v344 = 0x40e010;
        				} else {
        					_push(0x40e010);
        					_push(0x401f74);
        					L00401360();
        					_v344 = 0x40e010;
        				}
        				_t1258 =  *((intOrPtr*)( *_v344));
        				_t922 =  &_v84;
        				L00401366();
        				_v240 = _t922;
        				_t926 =  *((intOrPtr*)( *_v240 + 0x50))(_v240,  &_v80, _t922,  *((intOrPtr*)(_t1258 + 0x300))( *_v344));
        				asm("fclex");
        				_v244 = _t926;
        				if(_v244 >= 0) {
        					_v348 = _v348 & 0x00000000;
        				} else {
        					_push(0x50);
        					_push(0x402ccc);
        					_push(_v240);
        					_push(_v244);
        					L0040137E();
        					_v348 = _t926;
        				}
        				_v228 = 0x24ef09a0;
        				_v224 = 0x5af6;
        				_v120 = 0x1ffaec;
        				_v128 = 3;
        				_v204 =  *0x401154;
        				_v284 = _v80;
        				_v80 = _v80 & 0x00000000;
        				_v104 = _v284;
        				_v112 = 8;
        				_v220 = 0x9430efd0;
        				_v216 = 0x5b01;
        				_v144 =  *0x401150;
        				_v160 =  *0x401148;
        				_t937 =  *((intOrPtr*)( *_a4 + 0x6fc))(_a4,  &_v220,  &_v112, _t1258, _t1258,  &_v204,  &_v128, _t1258,  &_v228, 0x43b490,  &_v196);
        				_v248 = _t937;
        				if(_v248 >= 0) {
        					_v352 = _v352 & 0x00000000;
        				} else {
        					_push(0x6fc);
        					_push(0x402ae0);
        					_push(_a4);
        					_push(_v248);
        					L0040137E();
        					_v352 = _t937;
        				}
        				_v40 = _v196;
        				L00401378();
        				L00401354();
        				_t1372 = _t1371 + 0xc;
        				_t944 =  *((intOrPtr*)( *_a4 + 0x700))(_a4,  &_v196, 2,  &_v112,  &_v128);
        				_v240 = _t944;
        				if(_v240 >= 0) {
        					_v356 = _v356 & 0x00000000;
        				} else {
        					_push(0x700);
        					_push(0x402ae0);
        					_push(_a4);
        					_push(_v240);
        					L0040137E();
        					_v356 = _t944;
        				}
        				_v32 = _v196;
        				if( *0x40e010 != 0) {
        					_v360 = 0x40e010;
        				} else {
        					_push(0x40e010);
        					_push(0x401f74);
        					L00401360();
        					_v360 = 0x40e010;
        				}
        				_t1262 =  *((intOrPtr*)( *_v360));
        				_t949 =  &_v84;
        				L00401366();
        				_v240 = _t949;
        				_t953 =  *((intOrPtr*)( *_v240 + 0x160))(_v240,  &_v204, _t949,  *((intOrPtr*)(_t1262 + 0x310))( *_v360));
        				asm("fclex");
        				_v244 = _t953;
        				if(_v244 >= 0) {
        					_v364 = _v364 & 0x00000000;
        				} else {
        					_push(0x160);
        					_push(0x402d54);
        					_push(_v240);
        					_push(_v244);
        					L0040137E();
        					_v364 = _t953;
        				}
        				_v208 =  *0x401140;
        				_v136 = _v204;
        				_v144 = 3;
        				_v220 =  *0x401138;
        				_v224 =  *0x401130;
        				L00401240();
        				asm("movsd");
        				asm("movsd");
        				asm("movsd");
        				asm("movsd");
        				 *((intOrPtr*)( *_a4 + 0x714))(_a4,  &_v220, 0x10, 0x55ed, _t1262, _t1262, 0xd890ffc0, 0x5b07,  &_v208,  &_v112);
        				L0040134E();
        				L00401378();
        				if( *0x40e010 != 0) {
        					_v368 = 0x40e010;
        				} else {
        					_push(0x40e010);
        					_push(0x401f74);
        					L00401360();
        					_v368 = 0x40e010;
        				}
        				_t965 =  &_v84;
        				L00401366();
        				_v240 = _t965;
        				_t969 =  *((intOrPtr*)( *_v240 + 0x158))(_v240,  &_v196, _t965,  *((intOrPtr*)( *((intOrPtr*)( *_v368)) + 0x308))( *_v368));
        				asm("fclex");
        				_v244 = _t969;
        				if(_v244 >= 0) {
        					_v372 = _v372 & 0x00000000;
        				} else {
        					_push(0x158);
        					_push(0x402d64);
        					_push(_v240);
        					_push(_v244);
        					L0040137E();
        					_v372 = _t969;
        				}
        				if( *0x40e010 != 0) {
        					_v376 = 0x40e010;
        				} else {
        					_push(0x40e010);
        					_push(0x401f74);
        					L00401360();
        					_v376 = 0x40e010;
        				}
        				_t973 =  &_v88;
        				L00401366();
        				_v248 = _t973;
        				_t977 =  *((intOrPtr*)( *_v248 + 0x1a0))(_v248,  &_v204, _t973,  *((intOrPtr*)( *((intOrPtr*)( *_v376)) + 0x308))( *_v376));
        				asm("fclex");
        				_v252 = _t977;
        				if(_v252 >= 0) {
        					_v380 = _v380 & 0x00000000;
        				} else {
        					_push(0x1a0);
        					_push(0x402d64);
        					_push(_v248);
        					_push(_v252);
        					L0040137E();
        					_v380 = _t977;
        				}
        				if( *0x40e010 != 0) {
        					_v384 = 0x40e010;
        				} else {
        					_push(0x40e010);
        					_push(0x401f74);
        					L00401360();
        					_v384 = 0x40e010;
        				}
        				_t1273 =  *((intOrPtr*)( *_v384));
        				_t981 =  &_v92;
        				L00401366();
        				_v256 = _t981;
        				_t985 =  *((intOrPtr*)( *_v256 + 0x108))(_v256,  &_v80, _t981,  *((intOrPtr*)(_t1273 + 0x300))( *_v384));
        				asm("fclex");
        				_v260 = _t985;
        				if(_v260 >= 0) {
        					_v388 = _v388 & 0x00000000;
        				} else {
        					_push(0x108);
        					_push(0x402ccc);
        					_push(_v256);
        					_push(_v260);
        					L0040137E();
        					_v388 = _t985;
        				}
        				_v288 = _v80;
        				_v80 = _v80 & 0x00000000;
        				_v104 = _v288;
        				_v112 = 8;
        				_v228 =  *0x401128;
        				_v220 =  *0x401120;
        				_v136 = 0x8909d4;
        				_v144 = 3;
        				_v312 =  *0x401118;
        				L00401240();
        				asm("movsd");
        				asm("movsd");
        				asm("movsd");
        				asm("movsd");
        				_t995 =  *((intOrPtr*)( *_a4 + 0x704))(_a4, 0x10,  &_v220, 0xdd379050, 0x5afa, _v196,  &_v228, _v204, _t1273, _t1273,  &_v112,  &_v208);
        				_v264 = _t995;
        				if(_v264 >= 0) {
        					_v392 = _v392 & 0x00000000;
        				} else {
        					_push(0x704);
        					_push(0x402ae0);
        					_push(_a4);
        					_push(_v264);
        					L0040137E();
        					_v392 = _t995;
        				}
        				_v60 = _v208;
        				_push( &_v92);
        				_push( &_v88);
        				_push( &_v84);
        				_push(3);
        				L00401348();
        				_t1373 = _t1372 + 0x10;
        				L00401372();
        				if( *0x40e010 != 0) {
        					_v396 = 0x40e010;
        				} else {
        					_push(0x40e010);
        					_push(0x401f74);
        					L00401360();
        					_v396 = 0x40e010;
        				}
        				_t1003 =  &_v84;
        				L00401366();
        				_v240 = _t1003;
        				_t1007 =  *((intOrPtr*)( *_v240 + 0x78))(_v240,  &_v204, _t1003,  *((intOrPtr*)( *((intOrPtr*)( *_v396)) + 0x304))( *_v396));
        				asm("fclex");
        				_v244 = _t1007;
        				if(_v244 >= 0) {
        					_v400 = _v400 & 0x00000000;
        				} else {
        					_push(0x78);
        					_push(0x402ccc);
        					_push(_v240);
        					_push(_v244);
        					L0040137E();
        					_v400 = _t1007;
        				}
        				if( *0x40e010 != 0) {
        					_v404 = 0x40e010;
        				} else {
        					_push(0x40e010);
        					_push(0x401f74);
        					L00401360();
        					_v404 = 0x40e010;
        				}
        				_t1011 =  &_v88;
        				L00401366();
        				_v248 = _t1011;
        				_t1015 =  *((intOrPtr*)( *_v248 + 0xe0))(_v248,  &_v196, _t1011,  *((intOrPtr*)( *((intOrPtr*)( *_v404)) + 0x310))( *_v404));
        				asm("fclex");
        				_v252 = _t1015;
        				if(_v252 >= 0) {
        					_v408 = _v408 & 0x00000000;
        				} else {
        					_push(0xe0);
        					_push(0x402d54);
        					_push(_v248);
        					_push(_v252);
        					L0040137E();
        					_v408 = _t1015;
        				}
        				if( *0x40e010 != 0) {
        					_v412 = 0x40e010;
        				} else {
        					_push(0x40e010);
        					_push(0x401f74);
        					L00401360();
        					_v412 = 0x40e010;
        				}
        				_t1283 =  *((intOrPtr*)( *_v412));
        				_t1019 =  &_v92;
        				L00401366();
        				_v256 = _t1019;
        				_t1023 =  *((intOrPtr*)( *_v256 + 0x130))(_v256,  &_v96, _t1019,  *((intOrPtr*)(_t1283 + 0x304))( *_v412));
        				asm("fclex");
        				_v260 = _t1023;
        				if(_v260 >= 0) {
        					_v416 = _v416 & 0x00000000;
        				} else {
        					_push(0x130);
        					_push(0x402ccc);
        					_push(_v256);
        					_push(_v260);
        					L0040137E();
        					_v416 = _t1023;
        				}
        				_v212 = 0x7a0394;
        				_v292 = _v96;
        				_v96 = _v96 & 0x00000000;
        				_v104 = _v292;
        				_v112 = 9;
        				_v228 = 0x3151d390;
        				_v224 = 0x5afa;
        				_v220 =  *0x401110;
        				_v208 = _v204;
        				_v408 =  *0x401108;
        				_v440 =  *0x401100;
        				 *((intOrPtr*)( *_a4 + 0x718))(_a4, _t1283, _t1283,  &_v208,  &_v220,  &_v228, _v196,  &_v112,  &_v212, _t1283,  &_v236);
        				_v76 = _v236;
        				_v72 = _v232;
        				_push( &_v92);
        				_push( &_v88);
        				_push( &_v84);
        				_push(3);
        				L00401348();
        				_t1374 = _t1373 + 0x10;
        				L00401372();
        				if( *0x40e010 != 0) {
        					_v420 = 0x40e010;
        				} else {
        					_push(0x40e010);
        					_push(0x401f74);
        					L00401360();
        					_v420 = 0x40e010;
        				}
        				_t1043 =  &_v84;
        				L00401366();
        				_v240 = _t1043;
        				_t1047 =  *((intOrPtr*)( *_v240 + 0x68))(_v240,  &_v204, _t1043,  *((intOrPtr*)( *((intOrPtr*)( *_v420)) + 0x30c))( *_v420));
        				asm("fclex");
        				_v244 = _t1047;
        				if(_v244 >= 0) {
        					_v424 = _v424 & 0x00000000;
        				} else {
        					_push(0x68);
        					_push(0x402d74);
        					_push(_v240);
        					_push(_v244);
        					L0040137E();
        					_v424 = _t1047;
        				}
        				if( *0x40e010 != 0) {
        					_v428 = 0x40e010;
        				} else {
        					_push(0x40e010);
        					_push(0x401f74);
        					L00401360();
        					_v428 = 0x40e010;
        				}
        				_t1051 =  &_v88;
        				L00401366();
        				_v248 = _t1051;
        				_t1055 =  *((intOrPtr*)( *_v248 + 0x138))(_v248,  &_v208, _t1051,  *((intOrPtr*)( *((intOrPtr*)( *_v428)) + 0x2fc))( *_v428));
        				asm("fclex");
        				_v252 = _t1055;
        				if(_v252 >= 0) {
        					_v432 = _v432 & 0x00000000;
        				} else {
        					_push(0x138);
        					_push(0x402ccc);
        					_push(_v248);
        					_push(_v252);
        					L0040137E();
        					_v432 = _t1055;
        				}
        				_v212 = _v204;
        				_t1059 =  *((intOrPtr*)( *_a4 + 0x708))(_a4, 0x5573,  &_v212, _v208);
        				_v256 = _t1059;
        				if(_v256 >= 0) {
        					_v436 = _v436 & 0x00000000;
        				} else {
        					_push(0x708);
        					_push(0x402ae0);
        					_push(_a4);
        					_push(_v256);
        					L0040137E();
        					_v436 = _t1059;
        				}
        				_push( &_v88);
        				_push( &_v84);
        				_push(2);
        				L00401348();
        				_t1375 = _t1374 + 0xc;
        				if( *0x40e010 != 0) {
        					_v440 = 0x40e010;
        				} else {
        					_push(0x40e010);
        					_push(0x401f74);
        					L00401360();
        					_v440 = 0x40e010;
        				}
        				_t1065 =  &_v84;
        				L00401366();
        				_v240 = _t1065;
        				_t1069 =  *((intOrPtr*)( *_v240 + 0x140))(_v240,  &_v80, _t1065,  *((intOrPtr*)( *((intOrPtr*)( *_v440)) + 0x310))( *_v440));
        				asm("fclex");
        				_v244 = _t1069;
        				if(_v244 >= 0) {
        					_v444 = _v444 & 0x00000000;
        				} else {
        					_push(0x140);
        					_push(0x402d54);
        					_push(_v240);
        					_push(_v244);
        					L0040137E();
        					_v444 = _t1069;
        				}
        				if( *0x40e010 != 0) {
        					_v448 = 0x40e010;
        				} else {
        					_push(0x40e010);
        					_push(0x401f74);
        					L00401360();
        					_v448 = 0x40e010;
        				}
        				_t1296 =  *((intOrPtr*)( *_v448));
        				_t1073 =  &_v88;
        				L00401366();
        				_v248 = _t1073;
        				_t1077 =  *((intOrPtr*)( *_v248 + 0x80))(_v248,  &_v204, _t1073,  *((intOrPtr*)(_t1296 + 0x308))( *_v448));
        				asm("fclex");
        				_v252 = _t1077;
        				if(_v252 >= 0) {
        					_v452 = _v452 & 0x00000000;
        				} else {
        					_push(0x80);
        					_push(0x402d64);
        					_push(_v248);
        					_push(_v252);
        					L0040137E();
        					_v452 = _t1077;
        				}
        				_v208 = _v204;
        				_v296 = _v80;
        				_v80 = _v80 & 0x00000000;
        				_v104 = _v296;
        				_v112 = 8;
        				 *_t1375 =  *0x4010f8;
        				_t1085 =  *((intOrPtr*)( *_a4 + 0x70c))(_a4,  &_v112, _t1296, _t1296,  &_v208,  &_v212);
        				_v256 = _t1085;
        				if(_v256 >= 0) {
        					_v456 = _v456 & 0x00000000;
        				} else {
        					_push(0x70c);
        					_push(0x402ae0);
        					_push(_a4);
        					_push(_v256);
        					L0040137E();
        					_v456 = _t1085;
        				}
        				_v36 = _v212;
        				L00401348();
        				_t1376 = _t1375 + 0xc;
        				L00401372();
        				_t1090 =  *((intOrPtr*)( *_a4 + 0x2b4))(_a4, 2,  &_v84,  &_v88);
        				asm("fclex");
        				_v240 = _t1090;
        				if(_v240 >= 0) {
        					_v460 = _v460 & 0x00000000;
        				} else {
        					_push(0x2b4);
        					_push(0x402aac);
        					_push(_a4);
        					_push(_v240);
        					L0040137E();
        					_v460 = _t1090;
        				}
        				_v272 = 0x5ae61;
        				_v268 = 1;
        				_v28 = _v28 & 0x00000000;
        				while(_v28 <= _v272) {
        					if( *0x40e010 != 0) {
        						_v464 = 0x40e010;
        					} else {
        						_push(0x40e010);
        						_push(0x401f74);
        						L00401360();
        						_v464 = 0x40e010;
        					}
        					_t1096 =  &_v84;
        					L00401366();
        					_v240 = _t1096;
        					_t1100 =  *((intOrPtr*)( *_v240 + 0x140))(_v240,  &_v80, _t1096,  *((intOrPtr*)( *((intOrPtr*)( *_v464)) + 0x310))( *_v464));
        					asm("fclex");
        					_v244 = _t1100;
        					if(_v244 >= 0) {
        						_v468 = _v468 & 0x00000000;
        					} else {
        						_push(0x140);
        						_push(0x402d54);
        						_push(_v240);
        						_push(_v244);
        						L0040137E();
        						_v468 = _t1100;
        					}
        					if( *0x40e010 != 0) {
        						_v472 = 0x40e010;
        					} else {
        						_push(0x40e010);
        						_push(0x401f74);
        						L00401360();
        						_v472 = 0x40e010;
        					}
        					_t1307 =  *((intOrPtr*)( *_v472));
        					_t1104 =  &_v88;
        					L00401366();
        					_v248 = _t1104;
        					_t1108 =  *((intOrPtr*)( *_v248 + 0x80))(_v248,  &_v204, _t1104,  *((intOrPtr*)(_t1307 + 0x308))( *_v472));
        					asm("fclex");
        					_v252 = _t1108;
        					if(_v252 >= 0) {
        						_v476 = _v476 & 0x00000000;
        					} else {
        						_push(0x80);
        						_push(0x402d64);
        						_push(_v248);
        						_push(_v252);
        						L0040137E();
        						_v476 = _t1108;
        					}
        					_v208 = _v204;
        					_v300 = _v80;
        					_v80 = _v80 & 0x00000000;
        					_v104 = _v300;
        					_v112 = 8;
        					 *_t1376 =  *0x4010f8;
        					_t1116 =  *((intOrPtr*)( *_a4 + 0x70c))(_a4,  &_v112, _t1307, _t1307,  &_v208,  &_v212);
        					_v256 = _t1116;
        					if(_v256 >= 0) {
        						_v480 = _v480 & 0x00000000;
        					} else {
        						_push(0x70c);
        						_push(0x402ae0);
        						_push(_a4);
        						_push(_v256);
        						L0040137E();
        						_v480 = _t1116;
        					}
        					_v36 = _v212;
        					_push( &_v88);
        					_push( &_v84);
        					_push(2);
        					L00401348();
        					_t1377 = _t1376 + 0xc;
        					L00401372();
        					if( *0x40e010 != 0) {
        						_v484 = 0x40e010;
        					} else {
        						_push(0x40e010);
        						_push(0x401f74);
        						L00401360();
        						_v484 = 0x40e010;
        					}
        					_t1122 =  &_v84;
        					L00401366();
        					_v240 = _t1122;
        					_t1126 =  *((intOrPtr*)( *_v240 + 0x68))(_v240,  &_v204, _t1122,  *((intOrPtr*)( *((intOrPtr*)( *_v484)) + 0x30c))( *_v484));
        					asm("fclex");
        					_v244 = _t1126;
        					if(_v244 >= 0) {
        						_v488 = _v488 & 0x00000000;
        					} else {
        						_push(0x68);
        						_push(0x402d74);
        						_push(_v240);
        						_push(_v244);
        						L0040137E();
        						_v488 = _t1126;
        					}
        					if( *0x40e010 != 0) {
        						_v492 = 0x40e010;
        					} else {
        						_push(0x40e010);
        						_push(0x401f74);
        						L00401360();
        						_v492 = 0x40e010;
        					}
        					_t1130 =  &_v88;
        					L00401366();
        					_v248 = _t1130;
        					_t1134 =  *((intOrPtr*)( *_v248 + 0x138))(_v248,  &_v208, _t1130,  *((intOrPtr*)( *((intOrPtr*)( *_v492)) + 0x2fc))( *_v492));
        					asm("fclex");
        					_v252 = _t1134;
        					if(_v252 >= 0) {
        						_v496 = _v496 & 0x00000000;
        					} else {
        						_push(0x138);
        						_push(0x402ccc);
        						_push(_v248);
        						_push(_v252);
        						L0040137E();
        						_v496 = _t1134;
        					}
        					_v212 = _v204;
        					_t1138 =  *((intOrPtr*)( *_a4 + 0x708))(_a4, 0x5573,  &_v212, _v208);
        					_v256 = _t1138;
        					if(_v256 >= 0) {
        						_v500 = _v500 & 0x00000000;
        					} else {
        						_push(0x708);
        						_push(0x402ae0);
        						_push(_a4);
        						_push(_v256);
        						L0040137E();
        						_v500 = _t1138;
        					}
        					_push( &_v88);
        					_push( &_v84);
        					_push(2);
        					L00401348();
        					_t1378 = _t1377 + 0xc;
        					if( *0x40e010 != 0) {
        						_v504 = 0x40e010;
        					} else {
        						_push(0x40e010);
        						_push(0x401f74);
        						L00401360();
        						_v504 = 0x40e010;
        					}
        					_t1144 =  &_v84;
        					L00401366();
        					_v240 = _t1144;
        					_t1148 =  *((intOrPtr*)( *_v240 + 0x158))(_v240,  &_v196, _t1144,  *((intOrPtr*)( *((intOrPtr*)( *_v504)) + 0x308))( *_v504));
        					asm("fclex");
        					_v244 = _t1148;
        					if(_v244 >= 0) {
        						_v508 = _v508 & 0x00000000;
        					} else {
        						_push(0x158);
        						_push(0x402d64);
        						_push(_v240);
        						_push(_v244);
        						L0040137E();
        						_v508 = _t1148;
        					}
        					if( *0x40e010 != 0) {
        						_v512 = 0x40e010;
        					} else {
        						_push(0x40e010);
        						_push(0x401f74);
        						L00401360();
        						_v512 = 0x40e010;
        					}
        					_t1152 =  &_v88;
        					L00401366();
        					_v248 = _t1152;
        					_t1156 =  *((intOrPtr*)( *_v248 + 0x1a0))(_v248,  &_v204, _t1152,  *((intOrPtr*)( *((intOrPtr*)( *_v512)) + 0x308))( *_v512));
        					asm("fclex");
        					_v252 = _t1156;
        					if(_v252 >= 0) {
        						_v516 = _v516 & 0x00000000;
        					} else {
        						_push(0x1a0);
        						_push(0x402d64);
        						_push(_v248);
        						_push(_v252);
        						L0040137E();
        						_v516 = _t1156;
        					}
        					if( *0x40e010 != 0) {
        						_v520 = 0x40e010;
        					} else {
        						_push(0x40e010);
        						_push(0x401f74);
        						L00401360();
        						_v520 = 0x40e010;
        					}
        					_t1323 =  *((intOrPtr*)( *_v520));
        					_t1160 =  &_v92;
        					L00401366();
        					_v256 = _t1160;
        					_t1164 =  *((intOrPtr*)( *_v256 + 0x108))(_v256,  &_v80, _t1160,  *((intOrPtr*)(_t1323 + 0x300))( *_v520));
        					asm("fclex");
        					_v260 = _t1164;
        					if(_v260 >= 0) {
        						_v524 = _v524 & 0x00000000;
        					} else {
        						_push(0x108);
        						_push(0x402ccc);
        						_push(_v256);
        						_push(_v260);
        						L0040137E();
        						_v524 = _t1164;
        					}
        					_v304 = _v80;
        					_v80 = _v80 & 0x00000000;
        					_v104 = _v304;
        					_v112 = 8;
        					_v228 =  *0x401128;
        					_v220 =  *0x401120;
        					_v136 = 0x8909d4;
        					_v144 = 3;
        					 *_t1378 =  *0x401118;
        					L00401240();
        					_t1362 =  &_v144;
        					_t1353 = _t1378;
        					asm("movsd");
        					asm("movsd");
        					asm("movsd");
        					asm("movsd");
        					_t1174 =  *((intOrPtr*)( *_a4 + 0x704))(_a4, 0x10,  &_v220, 0xdd379050, 0x5afa, _v196,  &_v228, _v204, _t1323, _t1323,  &_v112,  &_v208);
        					_v264 = _t1174;
        					if(_v264 >= 0) {
        						_v528 = _v528 & 0x00000000;
        					} else {
        						_push(0x704);
        						_push(0x402ae0);
        						_push(_a4);
        						_push(_v264);
        						L0040137E();
        						_v528 = _t1174;
        					}
        					_v60 = _v208;
        					_push( &_v92);
        					_push( &_v88);
        					_push( &_v84);
        					_push(3);
        					L00401348();
        					_t1376 = _t1378 + 0x10;
        					L00401372();
        					_t1180 = _v28 + _v268;
        					if(_t1180 < 0) {
        						L0040133C();
        						_t1379 = _t1376 - 0xc;
        						 *[fs:0x0] = _t1379;
        						L00401240();
        						_v808 = _t1379;
        						_v804 = 0x401178;
        						_v800 = 0;
        						 *((intOrPtr*)( *_v788 + 4))(_v788, _t1353, _t1362, _t1242,  *[fs:0x0], 0x401246, _t1366);
        						if( *0x40e010 != 0) {
        							_v124 = 0x40e010;
        						} else {
        							_push(0x40e010);
        							_push(0x401f74);
        							L00401360();
        							_v124 = 0x40e010;
        						}
        						_t1189 =  &_v32;
        						L00401366();
        						_v88 = _t1189;
        						_t1193 =  *((intOrPtr*)( *_v88 + 0x120))(_v88,  &_v80, _t1189,  *((intOrPtr*)( *((intOrPtr*)( *_v124)) + 0x30c))( *_v124));
        						asm("fclex");
        						_v92 = _t1193;
        						if(_v92 >= 0) {
        							_v128 = _v128 & 0x00000000;
        						} else {
        							_push(0x120);
        							_push(0x402d74);
        							_push(_v88);
        							_push(_v92);
        							L0040137E();
        							_v128 = _t1193;
        						}
        						_v52 = _v80;
        						_v60 = 3;
        						_t1195 =  &_v60;
        						_push(_t1195);
        						L00401336();
        						_v96 =  ~(0 | _t1195 != 0x0000ffff);
        						L00401378();
        						L00401372();
        						_t1196 = _v96;
        						if(_t1196 == 0) {
        							L220:
        							asm("wait");
        							_push(E0040C0C9);
        							return _t1196;
        						}
        						if( *0x40e010 != 0) {
        							_v132 = 0x40e010;
        						} else {
        							_push(0x40e010);
        							_push(0x401f74);
        							L00401360();
        							_v132 = 0x40e010;
        						}
        						_t1200 =  &_v32;
        						L00401366();
        						_v88 = _t1200;
        						_t1204 =  *((intOrPtr*)( *_v88 + 0x180))(_v88,  &_v80, _t1200,  *((intOrPtr*)( *((intOrPtr*)( *_v132)) + 0x30c))( *_v132));
        						asm("fclex");
        						_v92 = _t1204;
        						if(_v92 >= 0) {
        							_v136 = _v136 & 0x00000000;
        						} else {
        							_push(0x180);
        							_push(0x402d74);
        							_push(_v88);
        							_push(_v92);
        							L0040137E();
        							_v136 = _t1204;
        						}
        						if( *0x40e010 != 0) {
        							_v140 = 0x40e010;
        						} else {
        							_push(0x40e010);
        							_push(0x401f74);
        							L00401360();
        							_v140 = 0x40e010;
        						}
        						_t1208 =  &_v36;
        						L00401366();
        						_v96 = _t1208;
        						_t1212 =  *((intOrPtr*)( *_v96 + 0x100))(_v96,  &_v40, _t1208,  *((intOrPtr*)( *((intOrPtr*)( *_v140)) + 0x30c))( *_v140));
        						asm("fclex");
        						_v100 = _t1212;
        						if(_v100 >= 0) {
        							_v144 = _v144 & 0x00000000;
        						} else {
        							_push(0x100);
        							_push(0x402d74);
        							_push(_v96);
        							_push(_v100);
        							L0040137E();
        							_v144 = _t1212;
        						}
        						_push(0);
        						_push(0);
        						_push(_v40);
        						_push( &_v60);
        						L00401330();
        						_t1380 = _t1379 + 0x10;
        						if( *0x40e010 != 0) {
        							_v148 = 0x40e010;
        						} else {
        							_push(0x40e010);
        							_push(0x401f74);
        							L00401360();
        							_v148 = 0x40e010;
        						}
        						_t1341 =  *((intOrPtr*)( *_v148));
        						_t1217 =  &_v44;
        						L00401366();
        						_v104 = _t1217;
        						_t1221 =  *((intOrPtr*)( *_v104 + 0x60))(_v104,  &_v84, _t1217,  *((intOrPtr*)(_t1341 + 0x310))( *_v148));
        						asm("fclex");
        						_v108 = _t1221;
        						if(_v108 >= 0) {
        							_v152 = _v152 & 0x00000000;
        						} else {
        							_push(0x60);
        							_push(0x402d54);
        							_push(_v104);
        							_push(_v108);
        							L0040137E();
        							_v152 = _t1221;
        						}
        						L0040132A();
        						_t1474 =  *0x401168;
        						 *_t1380 = _t1474;
        						asm("fild dword [ebp-0x4c]");
        						_v156 = _t1474;
        						_t1475 = _v156;
        						 *_t1380 = _t1475;
        						_t1222 =  &_v60;
        						L00401324();
        						_v160 = _t1222;
        						asm("fild dword [ebp-0x98]");
        						_v164 = _t1475;
        						_t1476 = _v164;
        						 *_t1380 = _t1476;
        						asm("fild dword [ebp-0x48]");
        						_v168 = _t1476;
        						 *_t1380 = _v168;
        						_t1225 =  *((intOrPtr*)( *_v0 + 0x2c8))(_v0, 6, _t1341, _t1341, _t1222, _t1341, _t1341, _t1221);
        						asm("fclex");
        						_v112 = _t1225;
        						if(_v112 >= 0) {
        							_v172 = _v172 & 0x00000000;
        						} else {
        							_push(0x2c8);
        							_push(0x402aac);
        							_push(_v0);
        							_push(_v112);
        							L0040137E();
        							_v172 = _t1225;
        						}
        						_push( &_v40);
        						_push( &_v44);
        						_push( &_v36);
        						_t1196 =  &_v32;
        						_push(_t1196);
        						_push(4);
        						L00401348();
        						L00401372();
        						goto L220;
        					}
        					_v28 = _t1180;
        				}
        				_t1092 =  *((intOrPtr*)(0x2c1128 +  *_t1376))(0x147e9d);
        				_push(E0040BCF7);
        				L00401372();
        				L00401378();
        				return _t1092;
        			}














































































































































































































































        0x0040a397
        0x0040a39f
        0x0040a3a6
        0x0040a3a7
        0x0040a3ab
        0x0040a3b2
        0x0040a3b5
        0x0040a3b6
        0x0040a3ba
        0x0040a3bd
        0x0040a3c7
        0x0040a3c8
        0x0040a3ca
        0x0040a3cc
        0x0040a3d3
        0x0040a3d6
        0x0040a3d9
        0x0040a3dd
        0x0040a3e6
        0x0040a3e8
        0x0040a3e9
        0x0040a3f0
        0x0040a3f2
        0x0040a3f4
        0x0040a3fa
        0x0040a402
        0x0040a404
        0x0040a406
        0x0040a408
        0x0040a40e
        0x0040a40f
        0x0040a415
        0x0040a41b
        0x0040a41d
        0x0040a42a
        0x0040a44c
        0x0040a42c
        0x0040a42c
        0x0040a431
        0x0040a436
        0x0040a439
        0x0040a43f
        0x0040a444
        0x0040a444
        0x0040a453
        0x0040a456
        0x0040a463
        0x0040a464
        0x0040a465
        0x0040a466
        0x0040a467
        0x0040a46a
        0x0040a477
        0x0040a478
        0x0040a479
        0x0040a47a
        0x0040a47b
        0x0040a47d
        0x0040a482
        0x0040a485
        0x0040a488
        0x0040a489
        0x0040a48e
        0x0040a491
        0x0040a492
        0x0040a497
        0x0040a49b
        0x0040a49c
        0x0040a4a4
        0x0040a4ac
        0x0040a4b1
        0x0040a4bb
        0x0040a4c5
        0x0040a4c8
        0x0040a4d5
        0x0040a4d6
        0x0040a4d7
        0x0040a4d8
        0x0040a4d9
        0x0040a4de
        0x0040a4e1
        0x0040a4ed
        0x0040a50a
        0x0040a4ef
        0x0040a4ef
        0x0040a4f4
        0x0040a4f9
        0x0040a4fe
        0x0040a4fe
        0x0040a52e
        0x0040a532
        0x0040a537
        0x0040a552
        0x0040a558
        0x0040a55a
        0x0040a567
        0x0040a58c
        0x0040a569
        0x0040a569
        0x0040a56e
        0x0040a573
        0x0040a579
        0x0040a57f
        0x0040a584
        0x0040a584
        0x0040a59a
        0x0040a5a1
        0x0040a5ab
        0x0040a5ae
        0x0040a5bb
        0x0040a5bc
        0x0040a5bd
        0x0040a5be
        0x0040a5bf
        0x0040a5c4
        0x0040a5c7
        0x0040a5cf
        0x0040a5d4
        0x0040a5db
        0x0040a5e5
        0x0040a5e8
        0x0040a5f5
        0x0040a5f6
        0x0040a5f7
        0x0040a5f8
        0x0040a5f9
        0x0040a5fe
        0x0040a601
        0x0040a606
        0x0040a60d
        0x0040a617
        0x0040a619
        0x0040a61e
        0x0040a621
        0x0040a624
        0x0040a625
        0x0040a62a
        0x0040a62d
        0x0040a62e
        0x0040a634
        0x0040a635
        0x0040a63a
        0x0040a644
        0x0040a652
        0x0040a65f
        0x0040a67c
        0x0040a661
        0x0040a661
        0x0040a666
        0x0040a66b
        0x0040a670
        0x0040a670
        0x0040a68e
        0x0040a6a6
        0x0040a6a9
        0x0040a6ab
        0x0040a6b8
        0x0040a6da
        0x0040a6ba
        0x0040a6ba
        0x0040a6bc
        0x0040a6c1
        0x0040a6c7
        0x0040a6cd
        0x0040a6d2
        0x0040a6d2
        0x0040a6e4
        0x0040a6f8
        0x0040a6fb
        0x0040a6fd
        0x0040a70a
        0x0040a72c
        0x0040a70c
        0x0040a70c
        0x0040a70e
        0x0040a713
        0x0040a719
        0x0040a71f
        0x0040a724
        0x0040a724
        0x0040a736
        0x0040a736
        0x0040a742
        0x0040a75f
        0x0040a744
        0x0040a744
        0x0040a749
        0x0040a74e
        0x0040a753
        0x0040a753
        0x0040a783
        0x0040a787
        0x0040a78c
        0x0040a7a7
        0x0040a7ad
        0x0040a7af
        0x0040a7bc
        0x0040a7e1
        0x0040a7be
        0x0040a7be
        0x0040a7c3
        0x0040a7c8
        0x0040a7ce
        0x0040a7d4
        0x0040a7d9
        0x0040a7d9
        0x0040a7e8
        0x0040a7f1
        0x0040a7f8
        0x0040a818
        0x0040a81e
        0x0040a82b
        0x0040a84d
        0x0040a82d
        0x0040a82d
        0x0040a832
        0x0040a837
        0x0040a83a
        0x0040a840
        0x0040a845
        0x0040a845
        0x0040a857
        0x0040a85f
        0x0040a86b
        0x0040a888
        0x0040a86d
        0x0040a86d
        0x0040a872
        0x0040a877
        0x0040a87c
        0x0040a87c
        0x0040a8a2
        0x0040a8ac
        0x0040a8b0
        0x0040a8b5
        0x0040a8cd
        0x0040a8d0
        0x0040a8d2
        0x0040a8df
        0x0040a901
        0x0040a8e1
        0x0040a8e1
        0x0040a8e3
        0x0040a8e8
        0x0040a8ee
        0x0040a8f4
        0x0040a8f9
        0x0040a8f9
        0x0040a908
        0x0040a912
        0x0040a91c
        0x0040a923
        0x0040a930
        0x0040a939
        0x0040a93f
        0x0040a949
        0x0040a94c
        0x0040a953
        0x0040a95d
        0x0040a981
        0x0040a997
        0x0040a9ad
        0x0040a9b3
        0x0040a9c0
        0x0040a9e2
        0x0040a9c2
        0x0040a9c2
        0x0040a9c7
        0x0040a9cc
        0x0040a9cf
        0x0040a9d5
        0x0040a9da
        0x0040a9da
        0x0040a9f0
        0x0040a9f7
        0x0040aa06
        0x0040aa0b
        0x0040aa1d
        0x0040aa23
        0x0040aa30
        0x0040aa52
        0x0040aa32
        0x0040aa32
        0x0040aa37
        0x0040aa3c
        0x0040aa3f
        0x0040aa45
        0x0040aa4a
        0x0040aa4a
        0x0040aa60
        0x0040aa6b
        0x0040aa88
        0x0040aa6d
        0x0040aa6d
        0x0040aa72
        0x0040aa77
        0x0040aa7c
        0x0040aa7c
        0x0040aaa2
        0x0040aaac
        0x0040aab0
        0x0040aab5
        0x0040aad0
        0x0040aad6
        0x0040aad8
        0x0040aae5
        0x0040ab0a
        0x0040aae7
        0x0040aae7
        0x0040aaec
        0x0040aaf1
        0x0040aaf7
        0x0040aafd
        0x0040ab02
        0x0040ab02
        0x0040ab17
        0x0040ab23
        0x0040ab29
        0x0040ab39
        0x0040ab5c
        0x0040ab67
        0x0040ab74
        0x0040ab75
        0x0040ab76
        0x0040ab77
        0x0040ab87
        0x0040ab93
        0x0040ab9b
        0x0040aba7
        0x0040abc4
        0x0040aba9
        0x0040aba9
        0x0040abae
        0x0040abb3
        0x0040abb8
        0x0040abb8
        0x0040abe8
        0x0040abec
        0x0040abf1
        0x0040ac0c
        0x0040ac12
        0x0040ac14
        0x0040ac21
        0x0040ac46
        0x0040ac23
        0x0040ac23
        0x0040ac28
        0x0040ac2d
        0x0040ac33
        0x0040ac39
        0x0040ac3e
        0x0040ac3e
        0x0040ac54
        0x0040ac71
        0x0040ac56
        0x0040ac56
        0x0040ac5b
        0x0040ac60
        0x0040ac65
        0x0040ac65
        0x0040ac95
        0x0040ac99
        0x0040ac9e
        0x0040acb9
        0x0040acbf
        0x0040acc1
        0x0040acce
        0x0040acf3
        0x0040acd0
        0x0040acd0
        0x0040acd5
        0x0040acda
        0x0040ace0
        0x0040ace6
        0x0040aceb
        0x0040aceb
        0x0040ad01
        0x0040ad1e
        0x0040ad03
        0x0040ad03
        0x0040ad08
        0x0040ad0d
        0x0040ad12
        0x0040ad12
        0x0040ad38
        0x0040ad42
        0x0040ad46
        0x0040ad4b
        0x0040ad63
        0x0040ad69
        0x0040ad6b
        0x0040ad78
        0x0040ad9d
        0x0040ad7a
        0x0040ad7a
        0x0040ad7f
        0x0040ad84
        0x0040ad8a
        0x0040ad90
        0x0040ad95
        0x0040ad95
        0x0040ada7
        0x0040adad
        0x0040adb7
        0x0040adba
        0x0040adc7
        0x0040add3
        0x0040add9
        0x0040ade3
        0x0040ae00
        0x0040ae2a
        0x0040ae37
        0x0040ae38
        0x0040ae39
        0x0040ae3a
        0x0040ae43
        0x0040ae49
        0x0040ae56
        0x0040ae78
        0x0040ae58
        0x0040ae58
        0x0040ae5d
        0x0040ae62
        0x0040ae65
        0x0040ae6b
        0x0040ae70
        0x0040ae70
        0x0040ae85
        0x0040ae8b
        0x0040ae8f
        0x0040ae93
        0x0040ae94
        0x0040ae96
        0x0040ae9b
        0x0040aea1
        0x0040aead
        0x0040aeca
        0x0040aeaf
        0x0040aeaf
        0x0040aeb4
        0x0040aeb9
        0x0040aebe
        0x0040aebe
        0x0040aeee
        0x0040aef2
        0x0040aef7
        0x0040af12
        0x0040af15
        0x0040af17
        0x0040af24
        0x0040af46
        0x0040af26
        0x0040af26
        0x0040af28
        0x0040af2d
        0x0040af33
        0x0040af39
        0x0040af3e
        0x0040af3e
        0x0040af54
        0x0040af71
        0x0040af56
        0x0040af56
        0x0040af5b
        0x0040af60
        0x0040af65
        0x0040af65
        0x0040af95
        0x0040af99
        0x0040af9e
        0x0040afb9
        0x0040afbf
        0x0040afc1
        0x0040afce
        0x0040aff3
        0x0040afd0
        0x0040afd0
        0x0040afd5
        0x0040afda
        0x0040afe0
        0x0040afe6
        0x0040afeb
        0x0040afeb
        0x0040b001
        0x0040b01e
        0x0040b003
        0x0040b003
        0x0040b008
        0x0040b00d
        0x0040b012
        0x0040b012
        0x0040b038
        0x0040b042
        0x0040b046
        0x0040b04b
        0x0040b063
        0x0040b069
        0x0040b06b
        0x0040b078
        0x0040b09d
        0x0040b07a
        0x0040b07a
        0x0040b07f
        0x0040b084
        0x0040b08a
        0x0040b090
        0x0040b095
        0x0040b095
        0x0040b0a4
        0x0040b0b1
        0x0040b0b7
        0x0040b0c1
        0x0040b0c4
        0x0040b0cb
        0x0040b0d5
        0x0040b0e5
        0x0040b0f1
        0x0040b105
        0x0040b136
        0x0040b141
        0x0040b14d
        0x0040b156
        0x0040b15c
        0x0040b160
        0x0040b164
        0x0040b165
        0x0040b167
        0x0040b16c
        0x0040b172
        0x0040b17e
        0x0040b19b
        0x0040b180
        0x0040b180
        0x0040b185
        0x0040b18a
        0x0040b18f
        0x0040b18f
        0x0040b1bf
        0x0040b1c3
        0x0040b1c8
        0x0040b1e3
        0x0040b1e6
        0x0040b1e8
        0x0040b1f5
        0x0040b217
        0x0040b1f7
        0x0040b1f7
        0x0040b1f9
        0x0040b1fe
        0x0040b204
        0x0040b20a
        0x0040b20f
        0x0040b20f
        0x0040b225
        0x0040b242
        0x0040b227
        0x0040b227
        0x0040b22c
        0x0040b231
        0x0040b236
        0x0040b236
        0x0040b266
        0x0040b26a
        0x0040b26f
        0x0040b28a
        0x0040b290
        0x0040b292
        0x0040b29f
        0x0040b2c4
        0x0040b2a1
        0x0040b2a1
        0x0040b2a6
        0x0040b2ab
        0x0040b2b1
        0x0040b2b7
        0x0040b2bc
        0x0040b2bc
        0x0040b2d1
        0x0040b2f1
        0x0040b2f7
        0x0040b304
        0x0040b326
        0x0040b306
        0x0040b306
        0x0040b30b
        0x0040b310
        0x0040b313
        0x0040b319
        0x0040b31e
        0x0040b31e
        0x0040b330
        0x0040b334
        0x0040b335
        0x0040b337
        0x0040b33c
        0x0040b346
        0x0040b363
        0x0040b348
        0x0040b348
        0x0040b34d
        0x0040b352
        0x0040b357
        0x0040b357
        0x0040b387
        0x0040b38b
        0x0040b390
        0x0040b3a8
        0x0040b3ae
        0x0040b3b0
        0x0040b3bd
        0x0040b3e2
        0x0040b3bf
        0x0040b3bf
        0x0040b3c4
        0x0040b3c9
        0x0040b3cf
        0x0040b3d5
        0x0040b3da
        0x0040b3da
        0x0040b3f0
        0x0040b40d
        0x0040b3f2
        0x0040b3f2
        0x0040b3f7
        0x0040b3fc
        0x0040b401
        0x0040b401
        0x0040b427
        0x0040b431
        0x0040b435
        0x0040b43a
        0x0040b455
        0x0040b45b
        0x0040b45d
        0x0040b46a
        0x0040b48f
        0x0040b46c
        0x0040b46c
        0x0040b471
        0x0040b476
        0x0040b47c
        0x0040b482
        0x0040b487
        0x0040b487
        0x0040b49c
        0x0040b4a5
        0x0040b4ab
        0x0040b4b5
        0x0040b4b8
        0x0040b4d5
        0x0040b4e4
        0x0040b4ea
        0x0040b4f7
        0x0040b519
        0x0040b4f9
        0x0040b4f9
        0x0040b4fe
        0x0040b503
        0x0040b506
        0x0040b50c
        0x0040b511
        0x0040b511
        0x0040b526
        0x0040b533
        0x0040b538
        0x0040b53e
        0x0040b54b
        0x0040b551
        0x0040b553
        0x0040b560
        0x0040b582
        0x0040b562
        0x0040b562
        0x0040b567
        0x0040b56c
        0x0040b56f
        0x0040b575
        0x0040b57a
        0x0040b57a
        0x0040b589
        0x0040b593
        0x0040b59d
        0x0040b5b5
        0x0040b5cb
        0x0040b5e8
        0x0040b5cd
        0x0040b5cd
        0x0040b5d2
        0x0040b5d7
        0x0040b5dc
        0x0040b5dc
        0x0040b60c
        0x0040b610
        0x0040b615
        0x0040b62d
        0x0040b633
        0x0040b635
        0x0040b642
        0x0040b667
        0x0040b644
        0x0040b644
        0x0040b649
        0x0040b64e
        0x0040b654
        0x0040b65a
        0x0040b65f
        0x0040b65f
        0x0040b675
        0x0040b692
        0x0040b677
        0x0040b677
        0x0040b67c
        0x0040b681
        0x0040b686
        0x0040b686
        0x0040b6ac
        0x0040b6b6
        0x0040b6ba
        0x0040b6bf
        0x0040b6da
        0x0040b6e0
        0x0040b6e2
        0x0040b6ef
        0x0040b714
        0x0040b6f1
        0x0040b6f1
        0x0040b6f6
        0x0040b6fb
        0x0040b701
        0x0040b707
        0x0040b70c
        0x0040b70c
        0x0040b721
        0x0040b72a
        0x0040b730
        0x0040b73a
        0x0040b73d
        0x0040b75a
        0x0040b769
        0x0040b76f
        0x0040b77c
        0x0040b79e
        0x0040b77e
        0x0040b77e
        0x0040b783
        0x0040b788
        0x0040b78b
        0x0040b791
        0x0040b796
        0x0040b796
        0x0040b7ab
        0x0040b7b1
        0x0040b7b5
        0x0040b7b6
        0x0040b7b8
        0x0040b7bd
        0x0040b7c3
        0x0040b7cf
        0x0040b7ec
        0x0040b7d1
        0x0040b7d1
        0x0040b7d6
        0x0040b7db
        0x0040b7e0
        0x0040b7e0
        0x0040b810
        0x0040b814
        0x0040b819
        0x0040b834
        0x0040b837
        0x0040b839
        0x0040b846
        0x0040b868
        0x0040b848
        0x0040b848
        0x0040b84a
        0x0040b84f
        0x0040b855
        0x0040b85b
        0x0040b860
        0x0040b860
        0x0040b876
        0x0040b893
        0x0040b878
        0x0040b878
        0x0040b87d
        0x0040b882
        0x0040b887
        0x0040b887
        0x0040b8b7
        0x0040b8bb
        0x0040b8c0
        0x0040b8db
        0x0040b8e1
        0x0040b8e3
        0x0040b8f0
        0x0040b915
        0x0040b8f2
        0x0040b8f2
        0x0040b8f7
        0x0040b8fc
        0x0040b902
        0x0040b908
        0x0040b90d
        0x0040b90d
        0x0040b922
        0x0040b942
        0x0040b948
        0x0040b955
        0x0040b977
        0x0040b957
        0x0040b957
        0x0040b95c
        0x0040b961
        0x0040b964
        0x0040b96a
        0x0040b96f
        0x0040b96f
        0x0040b981
        0x0040b985
        0x0040b986
        0x0040b988
        0x0040b98d
        0x0040b997
        0x0040b9b4
        0x0040b999
        0x0040b999
        0x0040b99e
        0x0040b9a3
        0x0040b9a8
        0x0040b9a8
        0x0040b9d8
        0x0040b9dc
        0x0040b9e1
        0x0040b9fc
        0x0040ba02
        0x0040ba04
        0x0040ba11
        0x0040ba36
        0x0040ba13
        0x0040ba13
        0x0040ba18
        0x0040ba1d
        0x0040ba23
        0x0040ba29
        0x0040ba2e
        0x0040ba2e
        0x0040ba44
        0x0040ba61
        0x0040ba46
        0x0040ba46
        0x0040ba4b
        0x0040ba50
        0x0040ba55
        0x0040ba55
        0x0040ba85
        0x0040ba89
        0x0040ba8e
        0x0040baa9
        0x0040baaf
        0x0040bab1
        0x0040babe
        0x0040bae3
        0x0040bac0
        0x0040bac0
        0x0040bac5
        0x0040baca
        0x0040bad0
        0x0040bad6
        0x0040badb
        0x0040badb
        0x0040baf1
        0x0040bb0e
        0x0040baf3
        0x0040baf3
        0x0040baf8
        0x0040bafd
        0x0040bb02
        0x0040bb02
        0x0040bb28
        0x0040bb32
        0x0040bb36
        0x0040bb3b
        0x0040bb53
        0x0040bb59
        0x0040bb5b
        0x0040bb68
        0x0040bb8d
        0x0040bb6a
        0x0040bb6a
        0x0040bb6f
        0x0040bb74
        0x0040bb7a
        0x0040bb80
        0x0040bb85
        0x0040bb85
        0x0040bb97
        0x0040bb9d
        0x0040bba7
        0x0040bbaa
        0x0040bbb7
        0x0040bbc3
        0x0040bbc9
        0x0040bbd3
        0x0040bbf0
        0x0040bc1a
        0x0040bc1f
        0x0040bc25
        0x0040bc27
        0x0040bc28
        0x0040bc29
        0x0040bc2a
        0x0040bc33
        0x0040bc39
        0x0040bc46
        0x0040bc68
        0x0040bc48
        0x0040bc48
        0x0040bc4d
        0x0040bc52
        0x0040bc55
        0x0040bc5b
        0x0040bc60
        0x0040bc60
        0x0040bc75
        0x0040bc7b
        0x0040bc7f
        0x0040bc83
        0x0040bc84
        0x0040bc86
        0x0040bc8b
        0x0040bc91
        0x0040b5a6
        0x0040b5ac
        0x0040bd16
        0x0040bd1e
        0x0040bd2d
        0x0040bd39
        0x0040bd41
        0x0040bd44
        0x0040bd4b
        0x0040bd5a
        0x0040bd64
        0x0040bd7e
        0x0040bd66
        0x0040bd66
        0x0040bd6b
        0x0040bd70
        0x0040bd75
        0x0040bd75
        0x0040bd99
        0x0040bd9d
        0x0040bda2
        0x0040bdb1
        0x0040bdb7
        0x0040bdb9
        0x0040bdc0
        0x0040bddc
        0x0040bdc2
        0x0040bdc2
        0x0040bdc7
        0x0040bdcc
        0x0040bdcf
        0x0040bdd2
        0x0040bdd7
        0x0040bdd7
        0x0040bde3
        0x0040bde6
        0x0040bded
        0x0040bdf0
        0x0040bdf1
        0x0040be01
        0x0040be08
        0x0040be10
        0x0040be15
        0x0040be1b
        0x0040c09d
        0x0040c09d
        0x0040c09e
        0x00000000
        0x0040c09e
        0x0040be28
        0x0040be42
        0x0040be2a
        0x0040be2a
        0x0040be2f
        0x0040be34
        0x0040be39
        0x0040be39
        0x0040be5d
        0x0040be61
        0x0040be66
        0x0040be75
        0x0040be7b
        0x0040be7d
        0x0040be84
        0x0040bea0
        0x0040be86
        0x0040be86
        0x0040be8b
        0x0040be90
        0x0040be93
        0x0040be96
        0x0040be9b
        0x0040be9b
        0x0040beab
        0x0040bec8
        0x0040bead
        0x0040bead
        0x0040beb2
        0x0040beb7
        0x0040bebc
        0x0040bebc
        0x0040beec
        0x0040bef0
        0x0040bef5
        0x0040bf04
        0x0040bf0a
        0x0040bf0c
        0x0040bf13
        0x0040bf32
        0x0040bf15
        0x0040bf15
        0x0040bf1a
        0x0040bf1f
        0x0040bf22
        0x0040bf25
        0x0040bf2a
        0x0040bf2a
        0x0040bf39
        0x0040bf3b
        0x0040bf3d
        0x0040bf43
        0x0040bf44
        0x0040bf49
        0x0040bf53
        0x0040bf70
        0x0040bf55
        0x0040bf55
        0x0040bf5a
        0x0040bf5f
        0x0040bf64
        0x0040bf64
        0x0040bf8a
        0x0040bf94
        0x0040bf98
        0x0040bf9d
        0x0040bfac
        0x0040bfaf
        0x0040bfb1
        0x0040bfb8
        0x0040bfd4
        0x0040bfba
        0x0040bfba
        0x0040bfbc
        0x0040bfc1
        0x0040bfc4
        0x0040bfc7
        0x0040bfcc
        0x0040bfcc
        0x0040bfe1
        0x0040bfe7
        0x0040bfee
        0x0040bff1
        0x0040bff4
        0x0040bffa
        0x0040c001
        0x0040c004
        0x0040c008
        0x0040c00d
        0x0040c013
        0x0040c019
        0x0040c01f
        0x0040c026
        0x0040c029
        0x0040c02c
        0x0040c039
        0x0040c046
        0x0040c04c
        0x0040c04e
        0x0040c055
        0x0040c074
        0x0040c057
        0x0040c057
        0x0040c05c
        0x0040c061
        0x0040c064
        0x0040c067
        0x0040c06c
        0x0040c06c
        0x0040c07e
        0x0040c082
        0x0040c086
        0x0040c087
        0x0040c08a
        0x0040c08b
        0x0040c08d
        0x0040c098
        0x00000000
        0x0040c098
        0x0040b5b2
        0x0040b5b2
        0x0040bca8
        0x0040bcaa
        0x0040bce9
        0x0040bcf1
        0x0040bcf6

        APIs
        • __vbaChkstk.MSVBVM60(?,00401246), ref: 0040A3B2
        • __vbaHresultCheckObj.MSVBVM60(00000000,00401158,00402AAC,00000218), ref: 0040A43F
        • __vbaChkstk.MSVBVM60(00000000,00401158,00402AAC,00000218), ref: 0040A456
        • __vbaChkstk.MSVBVM60(00000000,00401158,00402AAC,00000218), ref: 0040A46A
        • __vbaLateMemCallLd.MSVBVM60(?,?,Add,00000002), ref: 0040A489
        • __vbaObjVar.MSVBVM60(00000000,?,?,?,?,?,?,?,?,?,?,?,00401246), ref: 0040A492
        • __vbaObjSetAddref.MSVBVM60(00000000,00000000,00000000,?,?,?,?,?,?,?,?,?,?,?,00401246), ref: 0040A49C
        • __vbaFreeObj.MSVBVM60(00000000,00000000,00000000,?,?,?,?,?,?,?,?,?,?,?,00401246), ref: 0040A4A4
        • __vbaFreeVar.MSVBVM60(00000000,00000000,00000000,?,?,?,?,?,?,?,?,?,?,?,00401246), ref: 0040A4AC
        • __vbaChkstk.MSVBVM60 ref: 0040A4C8
        • __vbaLateMemSt.MSVBVM60(00000000,Left), ref: 0040A4E1
        • __vbaNew2.MSVBVM60(00401F74,0040E010,00000000,Left), ref: 0040A4F9
        • __vbaObjSet.MSVBVM60(?,00000000), ref: 0040A532
        • __vbaHresultCheckObj.MSVBVM60(00000000,?,00402CCC,00000110), ref: 0040A57F
        • __vbaChkstk.MSVBVM60(00000000,?,00402CCC,00000110), ref: 0040A5AE
        • __vbaLateMemSt.MSVBVM60(00000000,Top), ref: 0040A5C7
        • __vbaFreeObj.MSVBVM60(00000000,Top), ref: 0040A5CF
        • __vbaChkstk.MSVBVM60(00000000,Top), ref: 0040A5E8
        • __vbaLateMemSt.MSVBVM60(00000000,Visible,00000000,Top), ref: 0040A601
        • __vbaLateMemCallLd.MSVBVM60(?,00000000,Enabled,00000000,00000000,Visible,00000000,Top), ref: 0040A625
        • __vbaVarTstNe.MSVBVM60(?,00000000,?,00000000,00000000,00000000), ref: 0040A635
        • __vbaFreeVar.MSVBVM60(?,00000000,?,00000000,00000000,00000000), ref: 0040A644
        • __vbaNew2.MSVBVM60(00402D24,0040EB0C,?,00000000,?,00000000,00000000,00000000), ref: 0040A66B
        • __vbaHresultCheckObj.MSVBVM60(00000000,?,00402D14,0000001C), ref: 0040A6CD
        • __vbaHresultCheckObj.MSVBVM60(00000000,?,00402D34,00000050), ref: 0040A71F
        • __vbaFreeObj.MSVBVM60(00000000,?,00402D34,00000050), ref: 0040A736
        • __vbaNew2.MSVBVM60(00401F74,0040E010,?,00000000,?,00000000,00000000,00000000), ref: 0040A74E
        • __vbaObjSet.MSVBVM60(00000000,00000000), ref: 0040A787
        • __vbaHresultCheckObj.MSVBVM60(00000000,?,00402D44,00000160), ref: 0040A7D4
        • __vbaHresultCheckObj.MSVBVM60(00000000,00401158,00402AE0,000006F8), ref: 0040A840
        • __vbaFreeObj.MSVBVM60(00000000,00401158,00402AE0,000006F8), ref: 0040A857
        • __vbaFreeVar.MSVBVM60(00000000,00401158,00402AE0,000006F8), ref: 0040A85F
        • __vbaNew2.MSVBVM60(00401F74,0040E010), ref: 0040A877
        • __vbaObjSet.MSVBVM60(00000000,00000000), ref: 0040A8B0
        • __vbaHresultCheckObj.MSVBVM60(00000000,?,00402CCC,00000050), ref: 0040A8F4
        • __vbaHresultCheckObj.MSVBVM60(00000000,00401158,00402AE0,000006FC,?,?,?,00000003,?,24EF09A0,0043B490,?), ref: 0040A9D5
        • __vbaFreeObj.MSVBVM60(?,?,?,00000003,?,24EF09A0,0043B490,?), ref: 0040A9F7
        • __vbaFreeVarList.MSVBVM60(00000002,00000008,00000003,?,?,?,00000003,?,24EF09A0,0043B490,?), ref: 0040AA06
        • __vbaHresultCheckObj.MSVBVM60(00000000,00401158,00402AE0,00000700), ref: 0040AA45
        • __vbaNew2.MSVBVM60(00401F74,0040E010), ref: 0040AA77
        • __vbaObjSet.MSVBVM60(00000000,00000000), ref: 0040AAB0
        • __vbaHresultCheckObj.MSVBVM60(00000000,00000000,00402D54,00000160), ref: 0040AAFD
        • __vbaChkstk.MSVBVM60(000055ED,?,?,D890FFC0,00005B07,?,?), ref: 0040AB67
        • __vbaVarMove.MSVBVM60(?,?,D890FFC0,00005B07,?,?), ref: 0040AB93
        • __vbaFreeObj.MSVBVM60(?,?,D890FFC0,00005B07,?,?), ref: 0040AB9B
        • __vbaNew2.MSVBVM60(00401F74,0040E010,?,?,D890FFC0,00005B07,?,?), ref: 0040ABB3
        • __vbaObjSet.MSVBVM60(00000000,00000000,?,?,D890FFC0,00005B07,?,?), ref: 0040ABEC
        • __vbaHresultCheckObj.MSVBVM60(00000000,00000000,00402D64,00000158,?,?,D890FFC0,00005B07,?,?), ref: 0040AC39
        • __vbaNew2.MSVBVM60(00401F74,0040E010,?,?,D890FFC0,00005B07,?,?), ref: 0040AC60
        • __vbaObjSet.MSVBVM60(?,00000000,?,?,D890FFC0,00005B07,?,?), ref: 0040AC99
        • __vbaHresultCheckObj.MSVBVM60(00000000,?,00402D64,000001A0,?,?,D890FFC0,00005B07,?,?), ref: 0040ACE6
        • __vbaNew2.MSVBVM60(00401F74,0040E010,?,?,D890FFC0,00005B07,?,?), ref: 0040AD0D
        • __vbaObjSet.MSVBVM60(?,00000000,?,?,D890FFC0,00005B07,?,?), ref: 0040AD46
        • __vbaHresultCheckObj.MSVBVM60(00000000,?,00402CCC,00000108,?,?,D890FFC0,00005B07,?,?), ref: 0040AD90
        • __vbaChkstk.MSVBVM60(?,DD379050,00005AFA,?,?,?,?,?,00000008,?,?,?,D890FFC0,00005B07,?,?), ref: 0040AE2A
        • __vbaHresultCheckObj.MSVBVM60(00000000,00401158,00402AE0,00000704,?,?,00000008,?,?,?,D890FFC0,00005B07,?,?), ref: 0040AE6B
        • __vbaFreeObjList.MSVBVM60(00000003,00000000,?,?,?,?,00000008,?,?,?,D890FFC0,00005B07,?,?), ref: 0040AE96
        • __vbaFreeVar.MSVBVM60(?,?,?,?,?,?,00000000), ref: 0040AEA1
        • __vbaNew2.MSVBVM60(00401F74,0040E010,?,?,?,?,?,?,00000000), ref: 0040AEB9
        • __vbaObjSet.MSVBVM60(00000000,00000000), ref: 0040AEF2
        • __vbaHresultCheckObj.MSVBVM60(00000000,?,00402CCC,00000078), ref: 0040AF39
        • __vbaNew2.MSVBVM60(00401F74,0040E010), ref: 0040AF60
        • __vbaObjSet.MSVBVM60(?,00000000), ref: 0040AF99
        • __vbaHresultCheckObj.MSVBVM60(00000000,?,00402D54,000000E0), ref: 0040AFE6
        • __vbaNew2.MSVBVM60(00401F74,0040E010), ref: 0040B00D
        • __vbaObjSet.MSVBVM60(?,00000000), ref: 0040B046
        • __vbaHresultCheckObj.MSVBVM60(00000000,?,00402CCC,00000130), ref: 0040B090
        • __vbaFreeObjList.MSVBVM60(00000003,00000000,?,?,?,?,?,?,3151D390,?,00000009,007A0394,?,?), ref: 0040B167
        • __vbaFreeVar.MSVBVM60 ref: 0040B172
        • __vbaNew2.MSVBVM60(00401F74,0040E010), ref: 0040B18A
        • __vbaObjSet.MSVBVM60(00000000,00000000), ref: 0040B1C3
        • __vbaHresultCheckObj.MSVBVM60(00000000,?,00402D74,00000068), ref: 0040B20A
        • __vbaNew2.MSVBVM60(00401F74,0040E010), ref: 0040B231
        • __vbaObjSet.MSVBVM60(?,00000000), ref: 0040B26A
        • __vbaHresultCheckObj.MSVBVM60(00000000,?,00402CCC,00000138), ref: 0040B2B7
        • __vbaHresultCheckObj.MSVBVM60(00000000,00401158,00402AE0,00000708), ref: 0040B319
        • __vbaFreeObjList.MSVBVM60(00000002,00000000,?), ref: 0040B337
        • __vbaNew2.MSVBVM60(00401F74,0040E010), ref: 0040B352
        • __vbaObjSet.MSVBVM60(00000000,00000000), ref: 0040B38B
        • __vbaHresultCheckObj.MSVBVM60(00000000,?,00402D54,00000140), ref: 0040B3D5
        • __vbaNew2.MSVBVM60(00401F74,0040E010), ref: 0040B3FC
        • __vbaObjSet.MSVBVM60(?,00000000), ref: 0040B435
        • __vbaHresultCheckObj.MSVBVM60(00000000,?,00402D64,00000080), ref: 0040B482
        • __vbaHresultCheckObj.MSVBVM60(00000000,00401158,00402AE0,0000070C,?,?,?,?), ref: 0040B50C
        • __vbaFreeObjList.MSVBVM60(00000002,00000000,?,?,?,?,?), ref: 0040B533
        • __vbaFreeVar.MSVBVM60(?,00401F74,0040E010,?,00401F74,0040E010), ref: 0040B53E
        • __vbaHresultCheckObj.MSVBVM60(00000000,00401158,00402AAC,000002B4), ref: 0040B575
        • __vbaNew2.MSVBVM60(00401F74,0040E010), ref: 0040B5D7
        • __vbaObjSet.MSVBVM60(00000000,00000000), ref: 0040B610
        • __vbaHresultCheckObj.MSVBVM60(00000000,00000000,00402D54,00000140), ref: 0040B65A
        • __vbaNew2.MSVBVM60(00401F74,0040E010), ref: 0040B681
        • __vbaObjSet.MSVBVM60(?,00000000), ref: 0040B6BA
        Strings
        Memory Dump Source
        • Source File: 00000000.00000002.1731710525.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true
        • Associated: 00000000.00000002.1731690330.0000000000400000.00000002.00020000.sdmp Download File
        • Associated: 00000000.00000002.1731774426.000000000040E000.00000004.00020000.sdmp Download File
        • Associated: 00000000.00000002.1731805623.0000000000410000.00000002.00020000.sdmp Download File
        Joe Sandbox IDA Plugin
        • Snapshot File: hcaresult_0_2_400000_EM_B43454933_7621780_573.jbxd
        Similarity
        • API ID: __vba$CheckHresult$FreeNew2$Chkstk$LateList$Call$AddrefMove
        • String ID: $-@$Add$Enabled$Left$Top$VB.PictureBox$Vagabondiser$Visible$C
        • API String ID: 4257037141-2202263267
        • Opcode ID: e6f9533f6ec32967dc612916be44ac33e8b5e64dcbb5ec93fdb3379728b50fe8
        • Instruction ID: f371b7c8ae085380516b3ca01cb3fabe7f28f79a81cabfd5becfb9447f875e64
        • Opcode Fuzzy Hash: e6f9533f6ec32967dc612916be44ac33e8b5e64dcbb5ec93fdb3379728b50fe8
        • Instruction Fuzzy Hash: 76E20470940229DFDB20DF91CC49FEDB7B4BB08304F1085EAE549BB2A0D7B95A949F58
        Uniqueness

        Uniqueness Score: -1.00%

        Control-flow Graph

        • Executed
        • Not Executed
        control_flow_graph 269 408f00-408f07 270 408f08-408f2d 269->270 271 408f61-408f67 270->271 272 408f2f-408f39 270->272 271->270 273 408f69 271->273 272->271 274 408fb1-408fcd 273->274 275 408f6b-408fa7 273->275 276 408faa 275->276 277 40901c-40909b 275->277 278 409010-409018 276->278 279 408fac-408faf 276->279 280 4090a1-40923d 277->280 281 408fe7-40900e 277->281 278->277 279->274 282 409240-4092a7 280->282 281->278 282->282 284 4092a9-40948c VirtualAlloc 282->284 285 409490-409552 284->285 285->285 286 409558-409585 285->286
        Memory Dump Source
        • Source File: 00000000.00000002.1731710525.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true
        • Associated: 00000000.00000002.1731690330.0000000000400000.00000002.00020000.sdmp Download File
        • Associated: 00000000.00000002.1731774426.000000000040E000.00000004.00020000.sdmp Download File
        • Associated: 00000000.00000002.1731805623.0000000000410000.00000002.00020000.sdmp Download File
        Joe Sandbox IDA Plugin
        • Snapshot File: hcaresult_0_2_400000_EM_B43454933_7621780_573.jbxd
        Similarity
        • API ID:
        • String ID:
        • API String ID:
        • Opcode ID: 32d3143aa19a95c2f65cf485fff91b03d0756f13de8d933cf876139908381816
        • Instruction ID: 5035f1d67462ca9a2720821fb9d028b5e2a41258582bcc9b39595762628a2217
        • Opcode Fuzzy Hash: 32d3143aa19a95c2f65cf485fff91b03d0756f13de8d933cf876139908381816
        • Instruction Fuzzy Hash: 2CF15EDFE10A1207F7442939EE593DB1B8AD7707AFE1B46349E0E66ECBB02E5B060044
        Uniqueness

        Uniqueness Score: -1.00%

        Control-flow Graph

        • Executed
        • Not Executed
        control_flow_graph 287 408f40-408f48 288 408f75-408f7f 287->288 289 408f4a-408f63 287->289 290 408f80-408f9b 288->290 289->290 294 408f65 289->294 292 408fa8 290->292 293 408f9e-408fa7 290->293 295 408faa 292->295 296 40901c-40909b 292->296 293->292 293->296 294->288 298 409010-409018 295->298 299 408fac-408fcd 295->299 300 4090a1-40923d 296->300 301 408fe7-40900e 296->301 298->296 302 409240-4092a7 300->302 301->298 302->302 305 4092a9-40948c VirtualAlloc 302->305 306 409490-409552 305->306 306->306 307 409558-409585 306->307
        Memory Dump Source
        • Source File: 00000000.00000002.1731710525.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true
        • Associated: 00000000.00000002.1731690330.0000000000400000.00000002.00020000.sdmp Download File
        • Associated: 00000000.00000002.1731774426.000000000040E000.00000004.00020000.sdmp Download File
        • Associated: 00000000.00000002.1731805623.0000000000410000.00000002.00020000.sdmp Download File
        Joe Sandbox IDA Plugin
        • Snapshot File: hcaresult_0_2_400000_EM_B43454933_7621780_573.jbxd
        Similarity
        • API ID:
        • String ID:
        • API String ID:
        • Opcode ID: 337d25dee12d9ec20838af857ad2c3e80597ef1b087892f02376afd652c331fe
        • Instruction ID: 0cf7bc06c148435b49e54e6c2635b880384d06f1147bcfb3cf6c728827e43ba6
        • Opcode Fuzzy Hash: 337d25dee12d9ec20838af857ad2c3e80597ef1b087892f02376afd652c331fe
        • Instruction Fuzzy Hash: 48E15EDFE50A1207F7442539FE593DB1B8AD7B07AFE1B46349E0A66ECBB02E5B061040
        Uniqueness

        Uniqueness Score: -1.00%

        Control-flow Graph

        • Executed
        • Not Executed
        control_flow_graph 308 408fcf-408fe2 309 408fe7-40909b 308->309 313 4090a1-40923d 309->313 314 409240-4092a7 313->314 314->314 315 4092a9-40948c VirtualAlloc 314->315 316 409490-409552 315->316 316->316 317 409558-409585 316->317
        C-Code - Quality: 29%
        			E00408FCF(void* __eax, void* __ebx, void* __ecx, void* __edx, void* __edi, void* __esi) {
        				void* _t10;
        				void* _t11;
        				intOrPtr* _t34;
        				intOrPtr* _t38;
        				void* _t50;
        				void* _t53;
        				void* _t57;
        				void* _t60;
        				void* _t63;
        				void* _t64;
        				intOrPtr _t87;
        				void* _t129;
        				void* _t132;
        				void* _t183;
        				void* _t195;
        				void* _t196;
        				void* _t216;
        				signed int _t238;
        				signed int _t245;
        				signed int _t247;
        				void* _t255;
        				void* _t259;
        				void* _t260;
        				void* _t287;
        				void* _t313;
        				void* _t324;
        				void* _t326;
        				void* _t353;
        				void* _t383;
        				void* _t387;
        				void* _t392;
        
        				_t255 = __edi;
        				_t195 = __edx;
        				_t10 = __eax;
        				_t63 = __ebx;
        				_t324 = __esi;
        				_t129 = 0x531b408;
        				do {
        					_t11 = _t10;
        					_t196 = _t195;
        					_t64 = _t63;
        					_t259 = _t255;
        					_t326 = _t324;
        					_t132 = _t129;
        					 *((intOrPtr*)(_t326 - 0x7d)) =  *((intOrPtr*)(_t326 - 0x7d)) + _t11;
        					0x12a1318();
        					_t260 = _t259;
        					_t63 = _t64;
        					_t10 = _t11;
        					_t195 = _t196;
        					_t255 = _t260;
        					_t324 = _t326;
        					_t129 = _t132 - 1;
        				} while (_t129 != 1);
        				_t87 =  *0x5b581c;
        				_t287 = 0x3fffff + _t129;
        				_t34 =  *0x005B7188;
        				_t353 = _t324;
        				_t216 = _t195;
        				do {
        					asm("emms");
        					_t38 = _t34 - 1;
        					_push( *_t38);
        					_t34 = _t38;
        					_pop(0x1000);
        					_t87 = _t87;
        					_t216 = _t216;
        					_t287 = _t287;
        					_t353 = _t353;
        				} while (0x1000 != _t87);
        				_t50 = VirtualAlloc(0, 0xb000, 0x1000, 0x40); // executed
        				_t238 = 0;
        				_t183 = 0x1000;
        				_t53 = _t50;
        				_t383 = 0x6164;
        				_t245 = _t238 | 0x00403260;
        				_t313 = _t287;
        				do {
        					_t247 = _t245;
        					_t387 = _t383;
        					_t57 = _t53;
        					 *_t6 = 0 +  *((intOrPtr*)(_t247 + _t387));
        					_t392 = _t387;
        					 *(_t57 + _t392) =  *(_t57 + _t392) ^ 0x9b46e29f;
        					_t245 = _t247;
        					_t53 = _t57;
        					_t313 = _t313;
        					_t183 = _t183;
        					_t383 = _t392 - 0xfffffffffffffff4 + 8;
        				} while (_t383 >= 0);
        				_t60 = _t53;
        				_push(_t60);
        				return _t60;
        			}


































        0x00408fcf
        0x00408fcf
        0x00408fd2
        0x00408fd6
        0x00408fda
        0x00408fe2
        0x00408fe7
        0x00408fef
        0x00408ff7
        0x00409001
        0x00409008
        0x0040900b
        0x0040900e
        0x00409010
        0x00409013
        0x00409018
        0x00409058
        0x0040907d
        0x00409081
        0x0040908f
        0x00409092
        0x00409095
        0x00409098
        0x00409222
        0x00409225
        0x00409236
        0x00409239
        0x0040923d
        0x00409240
        0x0040925f
        0x00409261
        0x00409271
        0x00409288
        0x00409290
        0x00409291
        0x00409294
        0x0040929b
        0x004092a2
        0x004092a5
        0x00409413
        0x00409443
        0x00409473
        0x0040947e
        0x00409486
        0x00409489
        0x0040948c
        0x00409490
        0x004094a0
        0x004094bd
        0x004094d8
        0x004094ef
        0x0040950c
        0x00409510
        0x00409527
        0x00409536
        0x00409544
        0x0040954c
        0x0040954f
        0x0040954f
        0x0040955f
        0x00409569
        0x00409585

        APIs
        • VirtualAlloc.KERNELBASE(?,0000B000,00001000,00000040), ref: 00409413
        Memory Dump Source
        • Source File: 00000000.00000002.1731710525.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true
        • Associated: 00000000.00000002.1731690330.0000000000400000.00000002.00020000.sdmp Download File
        • Associated: 00000000.00000002.1731774426.000000000040E000.00000004.00020000.sdmp Download File
        • Associated: 00000000.00000002.1731805623.0000000000410000.00000002.00020000.sdmp Download File
        Joe Sandbox IDA Plugin
        • Snapshot File: hcaresult_0_2_400000_EM_B43454933_7621780_573.jbxd
        Similarity
        • API ID: AllocVirtual
        • String ID:
        • API String ID: 4275171209-0
        • Opcode ID: 4a124e7e4c95be0957173195075c635f71daa7c92a0c4644df8221db030fb217
        • Instruction ID: bb7d4663afba1d8bdddb82ec6bbf01ae39a6402b20c0ccb8beb5c1437e0ca471
        • Opcode Fuzzy Hash: 4a124e7e4c95be0957173195075c635f71daa7c92a0c4644df8221db030fb217
        • Instruction Fuzzy Hash: D2D1E4DFE51A1207F7842939FE693DB1A8AC7B07AFE1B46355E0D66ECBB02E4B051044
        Uniqueness

        Uniqueness Score: -1.00%

        Non-executed Functions

        Memory Dump Source
        • Source File: 00000000.00000002.1733425855.0000000002910000.00000040.00000001.sdmp, Offset: 02910000, based on PE: false
        Joe Sandbox IDA Plugin
        • Snapshot File: hcaresult_0_2_2910000_EM_B43454933_7621780_573.jbxd
        Similarity
        • API ID:
        • String ID:
        • API String ID:
        • Opcode ID: fea4da092091c2716eb921fdbc543ef74d16ae26d1ed0e12fd50d7e45776685b
        • Instruction ID: 7af7bfa8ab312ba99b38151d84b2da0572454c55d81d465aa6b51089b8384dc0
        • Opcode Fuzzy Hash: fea4da092091c2716eb921fdbc543ef74d16ae26d1ed0e12fd50d7e45776685b
        • Instruction Fuzzy Hash: FC5145B0A40248BFFF222F09CCA4BD83A27EF49750F454124FD889B1D6C7B988C98A41
        Uniqueness

        Uniqueness Score: -1.00%

        Memory Dump Source
        • Source File: 00000000.00000002.1733425855.0000000002910000.00000040.00000001.sdmp, Offset: 02910000, based on PE: false
        Joe Sandbox IDA Plugin
        • Snapshot File: hcaresult_0_2_2910000_EM_B43454933_7621780_573.jbxd
        Similarity
        • API ID:
        • String ID:
        • API String ID:
        • Opcode ID: 30c6ca2694bc78ebd713e928600be02aee89e9bbcee7b8d4c1c7777c720e8dfe
        • Instruction ID: 17e9cc9f68983898b6cd0f41b5610af356a3ac92d0c1a03516ba3b48e09f3d3d
        • Opcode Fuzzy Hash: 30c6ca2694bc78ebd713e928600be02aee89e9bbcee7b8d4c1c7777c720e8dfe
        • Instruction Fuzzy Hash: C411C13970431B8FD7218AADC5D47D677D2EF8E310B49A538ED99CB30AE6748C82C645
        Uniqueness

        Uniqueness Score: -1.00%

        Memory Dump Source
        • Source File: 00000000.00000002.1733425855.0000000002910000.00000040.00000001.sdmp, Offset: 02910000, based on PE: false
        Joe Sandbox IDA Plugin
        • Snapshot File: hcaresult_0_2_2910000_EM_B43454933_7621780_573.jbxd
        Similarity
        • API ID:
        • String ID:
        • API String ID:
        • Opcode ID: e11c00154f1c823cc3e8b46c782df57d37b7ecb4853d65185a90cf321ed31685
        • Instruction ID: 79bbe013d9e4a87bab34866b91974e4a91d838b71e2d6449bb29a2d13eb7748c
        • Opcode Fuzzy Hash: e11c00154f1c823cc3e8b46c782df57d37b7ecb4853d65185a90cf321ed31685
        • Instruction Fuzzy Hash: F5F0A031300204CFC314DA26C2D4FAA33EABF6EB90F5A5954DC07CB195D330D840CA24
        Uniqueness

        Uniqueness Score: -1.00%

        Memory Dump Source
        • Source File: 00000000.00000002.1733425855.0000000002910000.00000040.00000001.sdmp, Offset: 02910000, based on PE: false
        Joe Sandbox IDA Plugin
        • Snapshot File: hcaresult_0_2_2910000_EM_B43454933_7621780_573.jbxd
        Similarity
        • API ID:
        • String ID:
        • API String ID:
        • Opcode ID: b437a0a9e83da321b896467c075550e3c0c4257e33fac8bcdc8202f014abf4fb
        • Instruction ID: 45e100917726205cd964974d4926568521b7d61ad927fda605b1c228aa780b96
        • Opcode Fuzzy Hash: b437a0a9e83da321b896467c075550e3c0c4257e33fac8bcdc8202f014abf4fb
        • Instruction Fuzzy Hash: 53C092B6341A818FFF0ACA49C4D1B44B3E5FB58644B0804E0E403CBB61E368ED40CA00
        Uniqueness

        Uniqueness Score: -1.00%

        Memory Dump Source
        • Source File: 00000000.00000002.1733425855.0000000002910000.00000040.00000001.sdmp, Offset: 02910000, based on PE: false
        Joe Sandbox IDA Plugin
        • Snapshot File: hcaresult_0_2_2910000_EM_B43454933_7621780_573.jbxd
        Similarity
        • API ID:
        • String ID:
        • API String ID:
        • Opcode ID: 35c81a08bab92bde3dc9f8c2d1da994b350f80c476b92c6ed57041c71768b476
        • Instruction ID: 6872dafb55e78e28345968b1dbe3875cc791ab6abc6ce00c57f8b5d1874ba1cc
        • Opcode Fuzzy Hash: 35c81a08bab92bde3dc9f8c2d1da994b350f80c476b92c6ed57041c71768b476
        • Instruction Fuzzy Hash: C2C0483A351A408FC251CE29C190BC0B7A0BF11AB0BCA4684A8A1C7AE1C368E900CA00
        Uniqueness

        Uniqueness Score: -1.00%

        Control-flow Graph

        • Executed
        • Not Executed
        control_flow_graph 435 40bd1b-40bd64 __vbaChkstk 437 40bd66-40bd7c __vbaNew2 435->437 438 40bd7e 435->438 439 40bd85-40bdc0 __vbaObjSet 437->439 438->439 442 40bdc2-40bdda __vbaHresultCheckObj 439->442 443 40bddc 439->443 444 40bde0-40be1b #561 __vbaFreeObj __vbaFreeVar 442->444 443->444 445 40be21-40be28 444->445 446 40c09d-40c0c8 444->446 447 40be42 445->447 448 40be2a-40be40 __vbaNew2 445->448 450 40be49-40be84 __vbaObjSet 447->450 448->450 453 40bea0 450->453 454 40be86-40be9e __vbaHresultCheckObj 450->454 455 40bea4-40beab 453->455 454->455 456 40bec8 455->456 457 40bead-40bec6 __vbaNew2 455->457 458 40bed2-40bf13 __vbaObjSet 456->458 457->458 461 40bf32 458->461 462 40bf15-40bf30 __vbaHresultCheckObj 458->462 463 40bf39-40bf53 __vbaLateIdCallLd 461->463 462->463 464 40bf70 463->464 465 40bf55-40bf6e __vbaNew2 463->465 466 40bf7a-40bfb8 __vbaObjSet 464->466 465->466 469 40bfd4 466->469 470 40bfba-40bfd2 __vbaHresultCheckObj 466->470 471 40bfdb-40c055 __vbaFpI4 __vbaI4Var 469->471 470->471 473 40c074 471->473 474 40c057-40c072 __vbaHresultCheckObj 471->474 475 40c07b-40c098 __vbaFreeObjList __vbaFreeVar 473->475 474->475 475->446
        C-Code - Quality: 57%
        			E0040BD1B(void* __ebx, void* __edi, void* __esi, intOrPtr* _a4) {
        				intOrPtr _v8;
        				intOrPtr _v12;
        				intOrPtr _v16;
        				char _v28;
        				char _v32;
        				char _v36;
        				char _v40;
        				char _v48;
        				char _v56;
        				char _v76;
        				char _v80;
        				intOrPtr* _v84;
        				signed int _v88;
        				void* _v92;
        				signed int _v96;
        				intOrPtr* _v100;
        				signed int _v104;
        				signed int _v108;
        				intOrPtr* _v120;
        				signed int _v124;
        				intOrPtr* _v128;
        				signed int _v132;
        				char _v136;
        				signed int _v140;
        				char _v144;
        				signed int _v148;
        				char _v152;
        				intOrPtr _v156;
        				signed int _v160;
        				signed int _v164;
        				signed int _v168;
        				char* _t122;
        				signed int _t126;
        				char* _t128;
        				char* _t129;
        				char* _t133;
        				signed int _t137;
        				char* _t141;
        				signed int _t145;
        				char* _t150;
        				signed int _t154;
        				char* _t155;
        				signed int _t158;
        				intOrPtr _t179;
        				void* _t183;
        				void* _t185;
        				intOrPtr _t186;
        				void* _t201;
        				void* _t202;
        				signed int _t203;
        
        				_t186 = _t185 - 0xc;
        				 *[fs:0x0] = _t186;
        				L00401240();
        				_v16 = _t186;
        				_v12 = 0x401178;
        				_v8 = 0;
        				 *((intOrPtr*)( *_a4 + 4))(_a4, __edi, __esi, __ebx,  *[fs:0x0], 0x401246, _t183);
        				if( *0x40e010 != 0) {
        					_v120 = 0x40e010;
        				} else {
        					_push(0x40e010);
        					_push(0x401f74);
        					L00401360();
        					_v120 = 0x40e010;
        				}
        				_t122 =  &_v28;
        				L00401366();
        				_v84 = _t122;
        				_t126 =  *((intOrPtr*)( *_v84 + 0x120))(_v84,  &_v76, _t122,  *((intOrPtr*)( *((intOrPtr*)( *_v120)) + 0x30c))( *_v120));
        				asm("fclex");
        				_v88 = _t126;
        				if(_v88 >= 0) {
        					_v124 = _v124 & 0x00000000;
        				} else {
        					_push(0x120);
        					_push(0x402d74);
        					_push(_v84);
        					_push(_v88);
        					L0040137E();
        					_v124 = _t126;
        				}
        				_v48 = _v76;
        				_v56 = 3;
        				_t128 =  &_v56;
        				_push(_t128);
        				L00401336();
        				_v92 =  ~(0 | _t128 != 0x0000ffff);
        				L00401378();
        				L00401372();
        				_t129 = _v92;
        				if(_t129 != 0) {
        					if( *0x40e010 != 0) {
        						_v128 = 0x40e010;
        					} else {
        						_push(0x40e010);
        						_push(0x401f74);
        						L00401360();
        						_v128 = 0x40e010;
        					}
        					_t133 =  &_v28;
        					L00401366();
        					_v84 = _t133;
        					_t137 =  *((intOrPtr*)( *_v84 + 0x180))(_v84,  &_v76, _t133,  *((intOrPtr*)( *((intOrPtr*)( *_v128)) + 0x30c))( *_v128));
        					asm("fclex");
        					_v88 = _t137;
        					if(_v88 >= 0) {
        						_v132 = _v132 & 0x00000000;
        					} else {
        						_push(0x180);
        						_push(0x402d74);
        						_push(_v84);
        						_push(_v88);
        						L0040137E();
        						_v132 = _t137;
        					}
        					if( *0x40e010 != 0) {
        						_v136 = 0x40e010;
        					} else {
        						_push(0x40e010);
        						_push(0x401f74);
        						L00401360();
        						_v136 = 0x40e010;
        					}
        					_t141 =  &_v32;
        					L00401366();
        					_v92 = _t141;
        					_t145 =  *((intOrPtr*)( *_v92 + 0x100))(_v92,  &_v36, _t141,  *((intOrPtr*)( *((intOrPtr*)( *_v136)) + 0x30c))( *_v136));
        					asm("fclex");
        					_v96 = _t145;
        					if(_v96 >= 0) {
        						_v140 = _v140 & 0x00000000;
        					} else {
        						_push(0x100);
        						_push(0x402d74);
        						_push(_v92);
        						_push(_v96);
        						L0040137E();
        						_v140 = _t145;
        					}
        					_push(0);
        					_push(0);
        					_push(_v36);
        					_push( &_v56);
        					L00401330();
        					if( *0x40e010 != 0) {
        						_v144 = 0x40e010;
        					} else {
        						_push(0x40e010);
        						_push(0x401f74);
        						L00401360();
        						_v144 = 0x40e010;
        					}
        					_t179 =  *((intOrPtr*)( *_v144));
        					_t150 =  &_v40;
        					L00401366();
        					_v100 = _t150;
        					_t154 =  *((intOrPtr*)( *_v100 + 0x60))(_v100,  &_v80, _t150,  *((intOrPtr*)(_t179 + 0x310))( *_v144));
        					asm("fclex");
        					_v104 = _t154;
        					if(_v104 >= 0) {
        						_v148 = _v148 & 0x00000000;
        					} else {
        						_push(0x60);
        						_push(0x402d54);
        						_push(_v100);
        						_push(_v104);
        						L0040137E();
        						_v148 = _t154;
        					}
        					L0040132A();
        					_t201 =  *0x401168;
        					_v132 = _t201;
        					asm("fild dword [ebp-0x4c]");
        					_v152 = _t201;
        					_t202 = _v152;
        					_v136 = _t202;
        					_t155 =  &_v56;
        					L00401324();
        					_v156 = _t155;
        					asm("fild dword [ebp-0x98]");
        					_v160 = _t202;
        					_t203 = _v160;
        					_v144 = _t203;
        					asm("fild dword [ebp-0x48]");
        					_v164 = _t203;
        					_v148 = _v164;
        					_t158 =  *((intOrPtr*)( *_a4 + 0x2c8))(_a4, 6, _t179, _t179, _t155, _t179, _t179, _t154);
        					asm("fclex");
        					_v108 = _t158;
        					if(_v108 >= 0) {
        						_v168 = _v168 & 0x00000000;
        					} else {
        						_push(0x2c8);
        						_push(0x402aac);
        						_push(_a4);
        						_push(_v108);
        						L0040137E();
        						_v168 = _t158;
        					}
        					_push( &_v36);
        					_push( &_v40);
        					_push( &_v32);
        					_t129 =  &_v28;
        					_push(_t129);
        					_push(4);
        					L00401348();
        					L00401372();
        				}
        				asm("wait");
        				_push(E0040C0C9);
        				return _t129;
        			}





















































        0x0040bd1e
        0x0040bd2d
        0x0040bd39
        0x0040bd41
        0x0040bd44
        0x0040bd4b
        0x0040bd5a
        0x0040bd64
        0x0040bd7e
        0x0040bd66
        0x0040bd66
        0x0040bd6b
        0x0040bd70
        0x0040bd75
        0x0040bd75
        0x0040bd99
        0x0040bd9d
        0x0040bda2
        0x0040bdb1
        0x0040bdb7
        0x0040bdb9
        0x0040bdc0
        0x0040bddc
        0x0040bdc2
        0x0040bdc2
        0x0040bdc7
        0x0040bdcc
        0x0040bdcf
        0x0040bdd2
        0x0040bdd7
        0x0040bdd7
        0x0040bde3
        0x0040bde6
        0x0040bded
        0x0040bdf0
        0x0040bdf1
        0x0040be01
        0x0040be08
        0x0040be10
        0x0040be15
        0x0040be1b
        0x0040be28
        0x0040be42
        0x0040be2a
        0x0040be2a
        0x0040be2f
        0x0040be34
        0x0040be39
        0x0040be39
        0x0040be5d
        0x0040be61
        0x0040be66
        0x0040be75
        0x0040be7b
        0x0040be7d
        0x0040be84
        0x0040bea0
        0x0040be86
        0x0040be86
        0x0040be8b
        0x0040be90
        0x0040be93
        0x0040be96
        0x0040be9b
        0x0040be9b
        0x0040beab
        0x0040bec8
        0x0040bead
        0x0040bead
        0x0040beb2
        0x0040beb7
        0x0040bebc
        0x0040bebc
        0x0040beec
        0x0040bef0
        0x0040bef5
        0x0040bf04
        0x0040bf0a
        0x0040bf0c
        0x0040bf13
        0x0040bf32
        0x0040bf15
        0x0040bf15
        0x0040bf1a
        0x0040bf1f
        0x0040bf22
        0x0040bf25
        0x0040bf2a
        0x0040bf2a
        0x0040bf39
        0x0040bf3b
        0x0040bf3d
        0x0040bf43
        0x0040bf44
        0x0040bf53
        0x0040bf70
        0x0040bf55
        0x0040bf55
        0x0040bf5a
        0x0040bf5f
        0x0040bf64
        0x0040bf64
        0x0040bf8a
        0x0040bf94
        0x0040bf98
        0x0040bf9d
        0x0040bfac
        0x0040bfaf
        0x0040bfb1
        0x0040bfb8
        0x0040bfd4
        0x0040bfba
        0x0040bfba
        0x0040bfbc
        0x0040bfc1
        0x0040bfc4
        0x0040bfc7
        0x0040bfcc
        0x0040bfcc
        0x0040bfe1
        0x0040bfe7
        0x0040bfee
        0x0040bff1
        0x0040bff4
        0x0040bffa
        0x0040c001
        0x0040c004
        0x0040c008
        0x0040c00d
        0x0040c013
        0x0040c019
        0x0040c01f
        0x0040c026
        0x0040c029
        0x0040c02c
        0x0040c039
        0x0040c046
        0x0040c04c
        0x0040c04e
        0x0040c055
        0x0040c074
        0x0040c057
        0x0040c057
        0x0040c05c
        0x0040c061
        0x0040c064
        0x0040c067
        0x0040c06c
        0x0040c06c
        0x0040c07e
        0x0040c082
        0x0040c086
        0x0040c087
        0x0040c08a
        0x0040c08b
        0x0040c08d
        0x0040c098
        0x0040c098
        0x0040c09d
        0x0040c09e
        0x00000000

        APIs
        • __vbaChkstk.MSVBVM60(?,00401246), ref: 0040BD39
        • __vbaNew2.MSVBVM60(00401F74,0040E010,?,?,?,?,00401246), ref: 0040BD70
        • __vbaObjSet.MSVBVM60(?,00000000), ref: 0040BD9D
        • __vbaHresultCheckObj.MSVBVM60(00000000,?,00402D74,00000120), ref: 0040BDD2
        • #561.MSVBVM60(00000003), ref: 0040BDF1
        • __vbaFreeObj.MSVBVM60(00000003), ref: 0040BE08
        • __vbaFreeVar.MSVBVM60(00000003), ref: 0040BE10
        • __vbaNew2.MSVBVM60(00401F74,0040E010,00000003), ref: 0040BE34
        • __vbaObjSet.MSVBVM60(?,00000000), ref: 0040BE61
        • __vbaHresultCheckObj.MSVBVM60(00000000,?,00402D74,00000180), ref: 0040BE96
        • __vbaNew2.MSVBVM60(00401F74,0040E010), ref: 0040BEB7
        • __vbaObjSet.MSVBVM60(?,00000000), ref: 0040BEF0
        • __vbaHresultCheckObj.MSVBVM60(00000000,?,00402D74,00000100), ref: 0040BF25
        • __vbaLateIdCallLd.MSVBVM60(00000003,?,00000000,00000000), ref: 0040BF44
        • __vbaNew2.MSVBVM60(00401F74,0040E010,?,?,?,00401246), ref: 0040BF5F
        • __vbaObjSet.MSVBVM60(?,00000000), ref: 0040BF98
        • __vbaHresultCheckObj.MSVBVM60(00000000,?,00402D54,00000060), ref: 0040BFC7
        • __vbaFpI4.MSVBVM60(00000000,?,00402D54,00000060), ref: 0040BFE1
        • __vbaI4Var.MSVBVM60(?,?,?,00000000), ref: 0040C008
        • __vbaHresultCheckObj.MSVBVM60(00000000,00401178,00402AAC,000002C8,?,?,?,?,?,00000000), ref: 0040C067
        • __vbaFreeObjList.MSVBVM60(00000004,?,?,?,?,?,?,?,?,?,00000000), ref: 0040C08D
        • __vbaFreeVar.MSVBVM60(?,?,?,?,?,?,?,?,00401246), ref: 0040C098
        Memory Dump Source
        • Source File: 00000000.00000002.1731710525.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true
        • Associated: 00000000.00000002.1731690330.0000000000400000.00000002.00020000.sdmp Download File
        • Associated: 00000000.00000002.1731774426.000000000040E000.00000004.00020000.sdmp Download File
        • Associated: 00000000.00000002.1731805623.0000000000410000.00000002.00020000.sdmp Download File
        Joe Sandbox IDA Plugin
        • Snapshot File: hcaresult_0_2_400000_EM_B43454933_7621780_573.jbxd
        Similarity
        • API ID: __vba$CheckHresult$FreeNew2$#561CallChkstkLateList
        • String ID:
        • API String ID: 2168923781-0
        • Opcode ID: ec0c85e338679f40af0b741444f4c5c86c70b284777124fcef9b9e8f7c0e49f8
        • Instruction ID: b842851445623b6cd68db7bfc70d14481c305988a05124c895bdce13fdac47ac
        • Opcode Fuzzy Hash: ec0c85e338679f40af0b741444f4c5c86c70b284777124fcef9b9e8f7c0e49f8
        • Instruction Fuzzy Hash: 3CB10270900218EFDB10DFA1C849BDEBBB4FF08304F1045AAE545BB2A1DBB95A95DF58
        Uniqueness

        Uniqueness Score: -1.00%

        Control-flow Graph

        • Executed
        • Not Executed
        control_flow_graph 476 40cc09-40cc82 __vbaChkstk #527 __vbaStrMove __vbaStrCmp __vbaFreeStr 478 40ce71-40ceae __vbaFreeStr 476->478 479 40cc88-40cc8f 476->479 480 40cc91-40cca7 __vbaNew2 479->480 481 40cca9 479->481 483 40ccb0-40cceb __vbaObjSet 480->483 481->483 486 40cd07 483->486 487 40cced-40cd05 __vbaHresultCheckObj 483->487 488 40cd0b-40cd12 486->488 487->488 489 40cd14-40cd2a __vbaNew2 488->489 490 40cd2c 488->490 491 40cd33-40cd6e __vbaObjSet 489->491 490->491 494 40cd70-40cd88 __vbaHresultCheckObj 491->494 495 40cd8a 491->495 496 40cd8e-40cd95 494->496 495->496 497 40cd97-40cdad __vbaNew2 496->497 498 40cdaf 496->498 499 40cdb6-40cdd6 497->499 498->499 501 40cdd8-40cded __vbaHresultCheckObj 499->501 502 40cdef 499->502 503 40cdf3-40ce17 501->503 502->503 505 40ce30 503->505 506 40ce19-40ce2e __vbaHresultCheckObj 503->506 507 40ce34-40ce6e __vbaStrMove __vbaFreeStrList __vbaFreeObjList 505->507 506->507 507->478
        C-Code - Quality: 53%
        			E0040CC09(void* __ebx, void* __edi, void* __esi, intOrPtr* _a4) {
        				intOrPtr _v8;
        				intOrPtr _v12;
        				intOrPtr _v16;
        				void* _v28;
        				char _v36;
        				char _v40;
        				signed int _v44;
        				char _v48;
        				char _v52;
        				char _v56;
        				void* _v60;
        				signed int _v64;
        				intOrPtr* _v68;
        				signed int _v72;
        				intOrPtr* _v76;
        				signed int _v80;
        				intOrPtr* _v84;
        				signed int _v88;
        				signed int _v100;
        				intOrPtr* _v104;
        				signed int _v108;
        				intOrPtr* _v112;
        				signed int _v116;
        				intOrPtr* _v120;
        				signed int _v124;
        				signed int _v128;
        				signed int _t93;
        				char* _t97;
        				char* _t101;
        				signed int _t105;
        				char* _t109;
        				signed int _t113;
        				signed int _t119;
        				signed int _t124;
        				void* _t145;
        				void* _t147;
        				intOrPtr _t148;
        
        				_t148 = _t147 - 0xc;
        				 *[fs:0x0] = _t148;
        				L00401240();
        				_v16 = _t148;
        				_v12 = 0x401228;
        				_v8 = 0;
        				_t93 =  *((intOrPtr*)( *_a4 + 4))(_a4, __edi, __esi, __ebx, 0x68,  *[fs:0x0], 0x401246, _t145);
        				_push(0x402dbc);
        				L004012D6();
        				L00401318();
        				_push(_t93);
        				_push(0x402dc4);
        				L0040131E();
        				asm("sbb eax, eax");
        				_v60 =  ~( ~( ~_t93));
        				L00401342();
        				_t97 = _v60;
        				if(_t97 != 0) {
        					if( *0x40e010 != 0) {
        						_v104 = 0x40e010;
        					} else {
        						_push(0x40e010);
        						_push(0x401f74);
        						L00401360();
        						_v104 = 0x40e010;
        					}
        					_t101 =  &_v48;
        					L00401366();
        					_v60 = _t101;
        					_t105 =  *((intOrPtr*)( *_v60 + 0x218))(_v60,  &_v36, _t101,  *((intOrPtr*)( *((intOrPtr*)( *_v104)) + 0x308))( *_v104));
        					asm("fclex");
        					_v64 = _t105;
        					if(_v64 >= 0) {
        						_v108 = _v108 & 0x00000000;
        					} else {
        						_push(0x218);
        						_push(0x402d64);
        						_push(_v60);
        						_push(_v64);
        						L0040137E();
        						_v108 = _t105;
        					}
        					if( *0x40e010 != 0) {
        						_v112 = 0x40e010;
        					} else {
        						_push(0x40e010);
        						_push(0x401f74);
        						L00401360();
        						_v112 = 0x40e010;
        					}
        					_t109 =  &_v52;
        					L00401366();
        					_v68 = _t109;
        					_t113 =  *((intOrPtr*)( *_v68 + 0x1c0))(_v68,  &_v40, _t109,  *((intOrPtr*)( *((intOrPtr*)( *_v112)) + 0x310))( *_v112));
        					asm("fclex");
        					_v72 = _t113;
        					if(_v72 >= 0) {
        						_v116 = _v116 & 0x00000000;
        					} else {
        						_push(0x1c0);
        						_push(0x402d54);
        						_push(_v68);
        						_push(_v72);
        						L0040137E();
        						_v116 = _t113;
        					}
        					if( *0x40eb0c != 0) {
        						_v120 = 0x40eb0c;
        					} else {
        						_push(0x40eb0c);
        						_push(0x402d24);
        						L00401360();
        						_v120 = 0x40eb0c;
        					}
        					_v76 =  *_v120;
        					_t119 =  *((intOrPtr*)( *_v76 + 0x4c))(_v76,  &_v56);
        					asm("fclex");
        					_v80 = _t119;
        					if(_v80 >= 0) {
        						_v124 = _v124 & 0x00000000;
        					} else {
        						_push(0x4c);
        						_push(0x402d14);
        						_push(_v76);
        						_push(_v80);
        						L0040137E();
        						_v124 = _t119;
        					}
        					_v84 = _v56;
        					_t124 =  *((intOrPtr*)( *_v84 + 0x24))(_v84, _v36, _v40,  &_v44);
        					asm("fclex");
        					_v88 = _t124;
        					if(_v88 >= 0) {
        						_v128 = _v128 & 0x00000000;
        					} else {
        						_push(0x24);
        						_push(0x402dc8);
        						_push(_v84);
        						_push(_v88);
        						L0040137E();
        						_v128 = _t124;
        					}
        					_v100 = _v44;
        					_v44 = _v44 & 0x00000000;
        					L00401318();
        					_push( &_v40);
        					_push( &_v36);
        					_push(2);
        					L004012D0();
        					_push( &_v56);
        					_push( &_v52);
        					_t97 =  &_v48;
        					_push(_t97);
        					_push(3);
        					L00401348();
        				}
        				asm("wait");
        				_push(E0040CEAF);
        				L00401342();
        				return _t97;
        			}








































        0x0040cc0c
        0x0040cc1b
        0x0040cc25
        0x0040cc2d
        0x0040cc30
        0x0040cc37
        0x0040cc46
        0x0040cc49
        0x0040cc4e
        0x0040cc58
        0x0040cc5d
        0x0040cc5e
        0x0040cc63
        0x0040cc6a
        0x0040cc70
        0x0040cc77
        0x0040cc7c
        0x0040cc82
        0x0040cc8f
        0x0040cca9
        0x0040cc91
        0x0040cc91
        0x0040cc96
        0x0040cc9b
        0x0040cca0
        0x0040cca0
        0x0040ccc4
        0x0040ccc8
        0x0040cccd
        0x0040ccdc
        0x0040cce2
        0x0040cce4
        0x0040cceb
        0x0040cd07
        0x0040cced
        0x0040cced
        0x0040ccf2
        0x0040ccf7
        0x0040ccfa
        0x0040ccfd
        0x0040cd02
        0x0040cd02
        0x0040cd12
        0x0040cd2c
        0x0040cd14
        0x0040cd14
        0x0040cd19
        0x0040cd1e
        0x0040cd23
        0x0040cd23
        0x0040cd47
        0x0040cd4b
        0x0040cd50
        0x0040cd5f
        0x0040cd65
        0x0040cd67
        0x0040cd6e
        0x0040cd8a
        0x0040cd70
        0x0040cd70
        0x0040cd75
        0x0040cd7a
        0x0040cd7d
        0x0040cd80
        0x0040cd85
        0x0040cd85
        0x0040cd95
        0x0040cdaf
        0x0040cd97
        0x0040cd97
        0x0040cd9c
        0x0040cda1
        0x0040cda6
        0x0040cda6
        0x0040cdbb
        0x0040cdca
        0x0040cdcd
        0x0040cdcf
        0x0040cdd6
        0x0040cdef
        0x0040cdd8
        0x0040cdd8
        0x0040cdda
        0x0040cddf
        0x0040cde2
        0x0040cde5
        0x0040cdea
        0x0040cdea
        0x0040cdf6
        0x0040ce0b
        0x0040ce0e
        0x0040ce10
        0x0040ce17
        0x0040ce30
        0x0040ce19
        0x0040ce19
        0x0040ce1b
        0x0040ce20
        0x0040ce23
        0x0040ce26
        0x0040ce2b
        0x0040ce2b
        0x0040ce37
        0x0040ce3a
        0x0040ce44
        0x0040ce4c
        0x0040ce50
        0x0040ce51
        0x0040ce53
        0x0040ce5e
        0x0040ce62
        0x0040ce63
        0x0040ce66
        0x0040ce67
        0x0040ce69
        0x0040ce6e
        0x0040ce71
        0x0040ce72
        0x0040cea9
        0x0040ceae

        APIs
        • __vbaChkstk.MSVBVM60(?,00401246), ref: 0040CC25
        • #527.MSVBVM60(00402DBC,?,?,?,?,00401246), ref: 0040CC4E
        • __vbaStrMove.MSVBVM60(00402DBC,?,?,?,?,00401246), ref: 0040CC58
        • __vbaStrCmp.MSVBVM60(00402DC4,00000000,00402DBC,?,?,?,?,00401246), ref: 0040CC63
        • __vbaFreeStr.MSVBVM60(00402DC4,00000000,00402DBC,?,?,?,?,00401246), ref: 0040CC77
        • __vbaNew2.MSVBVM60(00401F74,0040E010,00402DC4,00000000,00402DBC,?,?,?,?,00401246), ref: 0040CC9B
        • __vbaObjSet.MSVBVM60(00402DC4,00000000), ref: 0040CCC8
        • __vbaHresultCheckObj.MSVBVM60(00000000,?,00402D64,00000218), ref: 0040CCFD
        • __vbaNew2.MSVBVM60(00401F74,0040E010), ref: 0040CD1E
        • __vbaObjSet.MSVBVM60(?,00000000), ref: 0040CD4B
        • __vbaHresultCheckObj.MSVBVM60(00000000,?,00402D54,000001C0), ref: 0040CD80
        • __vbaNew2.MSVBVM60(00402D24,0040EB0C), ref: 0040CDA1
        • __vbaHresultCheckObj.MSVBVM60(00000000,?,00402D14,0000004C), ref: 0040CDE5
        • __vbaHresultCheckObj.MSVBVM60(00000000,?,00402DC8,00000024), ref: 0040CE26
        • __vbaStrMove.MSVBVM60(00000000,?,00402DC8,00000024), ref: 0040CE44
        • __vbaFreeStrList.MSVBVM60(00000002,?,00402DBC), ref: 0040CE53
        • __vbaFreeObjList.MSVBVM60(00000003,?,?,?,?,?,00401246), ref: 0040CE69
        • __vbaFreeStr.MSVBVM60(0040CEAF,00402DC4,00000000,00402DBC,?,?,?,?,00401246), ref: 0040CEA9
        Memory Dump Source
        • Source File: 00000000.00000002.1731710525.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true
        • Associated: 00000000.00000002.1731690330.0000000000400000.00000002.00020000.sdmp Download File
        • Associated: 00000000.00000002.1731774426.000000000040E000.00000004.00020000.sdmp Download File
        • Associated: 00000000.00000002.1731805623.0000000000410000.00000002.00020000.sdmp Download File
        Joe Sandbox IDA Plugin
        • Snapshot File: hcaresult_0_2_400000_EM_B43454933_7621780_573.jbxd
        Similarity
        • API ID: __vba$CheckFreeHresult$New2$ListMove$#527Chkstk
        • String ID:
        • API String ID: 966294641-0
        • Opcode ID: dbabe374dde36d6e6af804cbef8caff2a1d862716a57fc85b9ffb19520d2388e
        • Instruction ID: 0eeb1adbee81c102e15b3462086f2713b53e9f384ae1b531a5f817e6c485b23a
        • Opcode Fuzzy Hash: dbabe374dde36d6e6af804cbef8caff2a1d862716a57fc85b9ffb19520d2388e
        • Instruction Fuzzy Hash: 5481F070900218EFDB10EFE1C989BDDBBB4BF08704F20457AE502BB2A1D7B96945DB58
        Uniqueness

        Uniqueness Score: -1.00%

        Control-flow Graph

        C-Code - Quality: 47%
        			E0040C4A9(void* __ebx, void* __edi, void* __esi, void* _a12, signed int* _a52) {
        				intOrPtr _v12;
        				intOrPtr _v16;
        				void* _v28;
        				void* _v44;
        				signed int _v64;
        				void* _v68;
        				char _v84;
        				char _v100;
        				char _v116;
        				char _v132;
        				intOrPtr _v156;
        				char _v164;
        				intOrPtr _v172;
        				char _v180;
        				void* _v184;
        				signed int _v188;
        				intOrPtr* _v192;
        				signed int _v196;
        				intOrPtr _v208;
        				intOrPtr* _v212;
        				signed int _v216;
        				signed int _v220;
        				char* _t72;
        				short _t76;
        				signed int _t81;
        				signed int _t87;
        				signed int _t93;
        				void* _t108;
        				intOrPtr _t109;
        
        				_t109 = _t108 - 0xc;
        				_push(0x401246);
        				_push( *[fs:0x0]);
        				 *[fs:0x0] = _t109;
        				L00401240();
        				_v16 = _t109;
        				_v12 = 0x4011a8;
        				L00401300();
        				 *_a52 =  *_a52 & 0x00000000;
        				_push( &_v84);
        				L004012FA();
        				_push( &_v100);
        				L004012FA();
        				_v156 = 1;
        				_v164 = 2;
        				_push(1);
        				_push(1);
        				_push( &_v100);
        				_push( &_v164);
        				_t72 =  &_v116;
        				_push(_t72);
        				L004012EE();
        				_push(_t72);
        				_push( &_v84);
        				_push(0x402d94);
        				_push( &_v132);
        				L004012F4();
        				_v172 = 1;
        				_v180 = 0x8002;
        				_push( &_v132);
        				_t76 =  &_v180;
        				_push(_t76);
        				L0040135A();
        				_v184 = _t76;
        				_push( &_v132);
        				_push( &_v116);
        				_push( &_v84);
        				_push( &_v100);
        				_push(4);
        				L00401354();
        				_t81 = _v184;
        				if(_t81 != 0) {
        					if( *0x40eb0c != 0) {
        						_v212 = 0x40eb0c;
        					} else {
        						_push(0x40eb0c);
        						_push(0x402d24);
        						L00401360();
        						_v212 = 0x40eb0c;
        					}
        					_v184 =  *_v212;
        					_t87 =  *((intOrPtr*)( *_v184 + 0x1c))(_v184,  &_v68);
        					asm("fclex");
        					_v188 = _t87;
        					if(_v188 >= 0) {
        						_v216 = _v216 & 0x00000000;
        					} else {
        						_push(0x1c);
        						_push(0x402d14);
        						_push(_v184);
        						_push(_v188);
        						L0040137E();
        						_v216 = _t87;
        					}
        					_v192 = _v68;
        					_v156 = 0x80020004;
        					_v164 = 0xa;
        					L00401240();
        					asm("movsd");
        					asm("movsd");
        					asm("movsd");
        					asm("movsd");
        					_t93 =  *((intOrPtr*)( *_v192 + 0x5c))(_v192, 0x10,  &_v64);
        					asm("fclex");
        					_v196 = _t93;
        					if(_v196 >= 0) {
        						_v220 = _v220 & 0x00000000;
        					} else {
        						_push(0x5c);
        						_push(0x402d34);
        						_push(_v192);
        						_push(_v196);
        						L0040137E();
        						_v220 = _t93;
        					}
        					_t81 = _v64;
        					_v208 = _t81;
        					_v64 = _v64 & 0x00000000;
        					L00401318();
        					L00401378();
        				}
        				_push(E0040C715);
        				L00401342();
        				L00401372();
        				return _t81;
        			}
































        0x0040c4ac
        0x0040c4af
        0x0040c4ba
        0x0040c4bb
        0x0040c4c7
        0x0040c4cf
        0x0040c4d2
        0x0040c4df
        0x0040c4e7
        0x0040c4ed
        0x0040c4ee
        0x0040c4f6
        0x0040c4f7
        0x0040c4fc
        0x0040c506
        0x0040c510
        0x0040c512
        0x0040c517
        0x0040c51e
        0x0040c51f
        0x0040c522
        0x0040c523
        0x0040c528
        0x0040c52c
        0x0040c52d
        0x0040c535
        0x0040c536
        0x0040c53b
        0x0040c545
        0x0040c552
        0x0040c553
        0x0040c559
        0x0040c55a
        0x0040c55f
        0x0040c569
        0x0040c56d
        0x0040c571
        0x0040c575
        0x0040c576
        0x0040c578
        0x0040c580
        0x0040c589
        0x0040c596
        0x0040c5b3
        0x0040c598
        0x0040c598
        0x0040c59d
        0x0040c5a2
        0x0040c5a7
        0x0040c5a7
        0x0040c5c5
        0x0040c5dd
        0x0040c5e0
        0x0040c5e2
        0x0040c5ef
        0x0040c611
        0x0040c5f1
        0x0040c5f1
        0x0040c5f3
        0x0040c5f8
        0x0040c5fe
        0x0040c604
        0x0040c609
        0x0040c609
        0x0040c61b
        0x0040c621
        0x0040c62b
        0x0040c63c
        0x0040c649
        0x0040c64a
        0x0040c64b
        0x0040c64c
        0x0040c65b
        0x0040c65e
        0x0040c660
        0x0040c66d
        0x0040c68f
        0x0040c66f
        0x0040c66f
        0x0040c671
        0x0040c676
        0x0040c67c
        0x0040c682
        0x0040c687
        0x0040c687
        0x0040c696
        0x0040c699
        0x0040c69f
        0x0040c6ac
        0x0040c6b4
        0x0040c6b4
        0x0040c6b9
        0x0040c707
        0x0040c70f
        0x0040c714

        APIs
        • __vbaChkstk.MSVBVM60(?,00401246), ref: 0040C4C7
        • __vbaVarDup.MSVBVM60(?,?,?,?,00401246), ref: 0040C4DF
        • #610.MSVBVM60(?,?,?,?,?,00401246), ref: 0040C4EE
        • #610.MSVBVM60(?,?,?,?,?,?,00401246), ref: 0040C4F7
        • __vbaVarAdd.MSVBVM60(?,00000002,?,00000001,00000001), ref: 0040C523
        • #662.MSVBVM60(?,00402D94,?,00000000,?,00000002,?,00000001,00000001), ref: 0040C536
        • __vbaVarTstNe.MSVBVM60(00008002,?,?,00402D94,?,00000000,?,00000002,?,00000001,00000001), ref: 0040C55A
        • __vbaFreeVarList.MSVBVM60(00000004,?,?,?,?,00008002,?,?,00402D94,?,00000000,?,00000002,?,00000001,00000001), ref: 0040C578
        • __vbaNew2.MSVBVM60(00402D24,0040EB0C,?,?,?,?,00401246), ref: 0040C5A2
        • __vbaHresultCheckObj.MSVBVM60(00000000,?,00402D14,0000001C), ref: 0040C604
        • __vbaChkstk.MSVBVM60(?), ref: 0040C63C
        • __vbaHresultCheckObj.MSVBVM60(00000000,?,00402D34,0000005C), ref: 0040C682
        • __vbaStrMove.MSVBVM60(00000000,?,00402D34,0000005C), ref: 0040C6AC
        • __vbaFreeObj.MSVBVM60(00000000,?,00402D34,0000005C), ref: 0040C6B4
        • __vbaFreeStr.MSVBVM60(0040C715,?,?,?,?,00401246), ref: 0040C707
        • __vbaFreeVar.MSVBVM60(0040C715,?,?,?,?,00401246), ref: 0040C70F
        Memory Dump Source
        • Source File: 00000000.00000002.1731710525.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true
        • Associated: 00000000.00000002.1731690330.0000000000400000.00000002.00020000.sdmp Download File
        • Associated: 00000000.00000002.1731774426.000000000040E000.00000004.00020000.sdmp Download File
        • Associated: 00000000.00000002.1731805623.0000000000410000.00000002.00020000.sdmp Download File
        Joe Sandbox IDA Plugin
        • Snapshot File: hcaresult_0_2_400000_EM_B43454933_7621780_573.jbxd
        Similarity
        • API ID: __vba$Free$#610CheckChkstkHresult$#662ListMoveNew2
        • String ID:
        • API String ID: 558009573-0
        • Opcode ID: f26323e9f1267b4413ba4ed88766104bcdb2cc823cbc8e290776db525c7c1374
        • Instruction ID: 369750fcae3b8aeb4681a7126862ebcdcaed751ea306300646769e05faa58874
        • Opcode Fuzzy Hash: f26323e9f1267b4413ba4ed88766104bcdb2cc823cbc8e290776db525c7c1374
        • Instruction Fuzzy Hash: 6C51F571900228EFDB20EB95CC85FDEB7B9BF04304F1045AAE509B71A1DB786A89CF55
        Uniqueness

        Uniqueness Score: -1.00%

        Control-flow Graph

        C-Code - Quality: 59%
        			E0040C0E8(void* __ebx, void* __edi, void* __esi, intOrPtr* _a4) {
        				intOrPtr _v8;
        				intOrPtr _v12;
        				intOrPtr _v16;
        				char _v28;
        				void* _v36;
        				signed int _v40;
        				intOrPtr _v48;
        				char _v56;
        				intOrPtr _v64;
        				intOrPtr _v72;
        				void* _v76;
        				signed int _v80;
        				signed int _v92;
        				intOrPtr* _v96;
        				signed int _v100;
        				signed int _t45;
        				char* _t49;
        				signed int _t56;
        				void* _t68;
        				void* _t70;
        				intOrPtr _t71;
        
        				_t71 = _t70 - 0xc;
        				 *[fs:0x0] = _t71;
        				L00401240();
        				_v16 = _t71;
        				_v12 = 0x401188;
        				_v8 = 0;
        				 *((intOrPtr*)( *_a4 + 4))(_a4, __edi, __esi, __ebx, 0x4c,  *[fs:0x0], 0x401246, _t68);
        				_v48 = 0x4b;
        				_v56 = 2;
        				_t45 =  &_v56;
        				_push(_t45);
        				L00401312();
        				L00401318();
        				_push(_t45);
        				_push(0x402d88);
        				L0040131E();
        				asm("sbb eax, eax");
        				_v76 =  ~( ~( ~_t45));
        				L00401342();
        				L00401372();
        				_t49 = _v76;
        				if(_t49 != 0) {
        					if( *0x40eb0c != 0) {
        						_v96 = 0x40eb0c;
        					} else {
        						_push(0x40eb0c);
        						_push(0x402d24);
        						L00401360();
        						_v96 = 0x40eb0c;
        					}
        					_v76 =  *_v96;
        					_v64 = 0x47;
        					_v72 = 2;
        					L00401240();
        					asm("movsd");
        					asm("movsd");
        					asm("movsd");
        					asm("movsd");
        					_t56 =  *((intOrPtr*)( *_v76 + 0x34))(_v76, 0x10, 0x5e9,  &_v40);
        					asm("fclex");
        					_v80 = _t56;
        					if(_v80 >= 0) {
        						_v100 = _v100 & 0x00000000;
        					} else {
        						_push(0x34);
        						_push(0x402d14);
        						_push(_v76);
        						_push(_v80);
        						L0040137E();
        						_v100 = _t56;
        					}
        					_v92 = _v40;
        					_v40 = _v40 & 0x00000000;
        					_push(_v92);
        					_t49 =  &_v28;
        					_push(_t49);
        					L00401366();
        				}
        				_push(E0040C244);
        				L00401378();
        				return _t49;
        			}
























        0x0040c0eb
        0x0040c0fa
        0x0040c104
        0x0040c10c
        0x0040c10f
        0x0040c116
        0x0040c125
        0x0040c128
        0x0040c12f
        0x0040c136
        0x0040c139
        0x0040c13a
        0x0040c144
        0x0040c149
        0x0040c14a
        0x0040c14f
        0x0040c156
        0x0040c15c
        0x0040c163
        0x0040c16b
        0x0040c170
        0x0040c176
        0x0040c183
        0x0040c19d
        0x0040c185
        0x0040c185
        0x0040c18a
        0x0040c18f
        0x0040c194
        0x0040c194
        0x0040c1a9
        0x0040c1ac
        0x0040c1b3
        0x0040c1c6
        0x0040c1d0
        0x0040c1d1
        0x0040c1d2
        0x0040c1d3
        0x0040c1dc
        0x0040c1df
        0x0040c1e1
        0x0040c1e8
        0x0040c201
        0x0040c1ea
        0x0040c1ea
        0x0040c1ec
        0x0040c1f1
        0x0040c1f4
        0x0040c1f7
        0x0040c1fc
        0x0040c1fc
        0x0040c208
        0x0040c20b
        0x0040c20f
        0x0040c212
        0x0040c215
        0x0040c216
        0x0040c216
        0x0040c21b
        0x0040c23e
        0x0040c243

        APIs
        • __vbaChkstk.MSVBVM60(?,00401246), ref: 0040C104
        • #572.MSVBVM60(00000002), ref: 0040C13A
        • __vbaStrMove.MSVBVM60(00000002), ref: 0040C144
        • __vbaStrCmp.MSVBVM60(00402D88,00000000,00000002), ref: 0040C14F
        • __vbaFreeStr.MSVBVM60(00402D88,00000000,00000002), ref: 0040C163
        • __vbaFreeVar.MSVBVM60(00402D88,00000000,00000002), ref: 0040C16B
        • __vbaNew2.MSVBVM60(00402D24,0040EB0C,00402D88,00000000,00000002), ref: 0040C18F
        • __vbaChkstk.MSVBVM60(000005E9,?,?,?,?,?,?,?,?,00402D88,00000000,00000002), ref: 0040C1C6
        • __vbaHresultCheckObj.MSVBVM60(00000000,?,00402D14,00000034,?,?,?,?,?,?,?,00402D88,00000000,00000002), ref: 0040C1F7
        • __vbaObjSet.MSVBVM60(?,?,?,?,?,?,?,?,?,00402D88,00000000,00000002), ref: 0040C216
        • __vbaFreeObj.MSVBVM60(0040C244,00402D88,00000000,00000002), ref: 0040C23E
        Strings
        Memory Dump Source
        • Source File: 00000000.00000002.1731710525.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true
        • Associated: 00000000.00000002.1731690330.0000000000400000.00000002.00020000.sdmp Download File
        • Associated: 00000000.00000002.1731774426.000000000040E000.00000004.00020000.sdmp Download File
        • Associated: 00000000.00000002.1731805623.0000000000410000.00000002.00020000.sdmp Download File
        Joe Sandbox IDA Plugin
        • Snapshot File: hcaresult_0_2_400000_EM_B43454933_7621780_573.jbxd
        Similarity
        • API ID: __vba$Free$Chkstk$#572CheckHresultMoveNew2
        • String ID: G$K
        • API String ID: 1892661122-2591177705
        • Opcode ID: 63a0c95da89eddb83301cc825d69654b9ce5b1560fa8d43ec72c2f809b2c1dbe
        • Instruction ID: 278bccd53777a87ca49dccc4a86a8776dfec0e03131be60b43321080aade4e28
        • Opcode Fuzzy Hash: 63a0c95da89eddb83301cc825d69654b9ce5b1560fa8d43ec72c2f809b2c1dbe
        • Instruction Fuzzy Hash: 39310770D00208EBDB10EFE5C98AB9DBBB4AF04704F10416AF901BB6E1C7796946CF58
        Uniqueness

        Uniqueness Score: -1.00%

        Control-flow Graph

        • Executed
        • Not Executed
        control_flow_graph 535 40ca10-40ca69 __vbaChkstk __vbaCyStr __vbaFpCmpCy 537 40cbc2-40cbe9 535->537 538 40ca6f-40ca8a 535->538 541 40caa6 538->541 542 40ca8c-40caa4 __vbaHresultCheckObj 538->542 543 40caaa-40cab1 541->543 542->543 544 40cab3-40cac9 __vbaNew2 543->544 545 40cacb 543->545 546 40cad2-40cae1 544->546 545->546 547 40cae3-40caf9 __vbaNew2 546->547 548 40cafb 546->548 549 40cb02-40cb3d __vbaObjSet 547->549 548->549 552 40cb59 549->552 553 40cb3f-40cb57 __vbaHresultCheckObj 549->553 554 40cb5d-40cb8b __vbaObjSet 552->554 553->554 556 40cba4 554->556 557 40cb8d-40cba2 __vbaHresultCheckObj 554->557 558 40cba8-40cbbf __vbaFreeStr __vbaFreeObjList 556->558 557->558 558->537
        C-Code - Quality: 56%
        			E0040CA10(void* __ebx, void* __edx, void* __edi, void* __esi, intOrPtr* _a4) {
        				intOrPtr _v8;
        				intOrPtr _v12;
        				intOrPtr _v16;
        				char _v28;
        				signed int _v32;
        				char _v36;
        				char _v40;
        				signed int _v44;
        				intOrPtr* _v48;
        				signed int _v52;
        				intOrPtr* _v56;
        				signed int _v60;
        				signed int _v72;
        				signed int _v76;
        				intOrPtr* _v80;
        				intOrPtr* _v84;
        				signed int _v88;
        				signed int _v92;
        				char* _t64;
        				signed int _t68;
        				char* _t74;
        				signed int _t78;
        				char* _t80;
        				signed int _t83;
        				void* _t93;
        				void* _t95;
        				intOrPtr _t96;
        
        				_t96 = _t95 - 0xc;
        				 *[fs:0x0] = _t96;
        				L00401240();
        				_v16 = _t96;
        				_v12 = 0x401218;
        				_v8 = 0;
        				_t64 =  *((intOrPtr*)( *_a4 + 4))(_a4, __edi, __esi, __ebx, 0x44,  *[fs:0x0], 0x401246, _t93);
        				_push(0x402db4);
        				L004012DC();
        				_push(_t64);
        				L004012E2();
        				if(_t64 != 0) {
        					_t68 =  *((intOrPtr*)( *_a4 + 0x160))(_a4,  &_v32);
        					asm("fclex");
        					_v44 = _t68;
        					if(_v44 >= 0) {
        						_v76 = _v76 & 0x00000000;
        					} else {
        						_push(0x160);
        						_push(0x402aac);
        						_push(_a4);
        						_push(_v44);
        						L0040137E();
        						_v76 = _t68;
        					}
        					if( *0x40eb0c != 0) {
        						_v80 = 0x40eb0c;
        					} else {
        						_push(0x40eb0c);
        						_push(0x402d24);
        						L00401360();
        						_v80 = 0x40eb0c;
        					}
        					_v56 =  *_v80;
        					if( *0x40e010 != 0) {
        						_v84 = 0x40e010;
        					} else {
        						_push(0x40e010);
        						_push(0x401f74);
        						L00401360();
        						_v84 = 0x40e010;
        					}
        					_t74 =  &_v36;
        					L00401366();
        					_v48 = _t74;
        					_t78 =  *((intOrPtr*)( *_v48 + 0x1c0))(_v48,  &_v28, _t74,  *((intOrPtr*)( *((intOrPtr*)( *_v84)) + 0x310))( *_v84));
        					asm("fclex");
        					_v52 = _t78;
        					if(_v52 >= 0) {
        						_v88 = _v88 & 0x00000000;
        					} else {
        						_push(0x1c0);
        						_push(0x402d54);
        						_push(_v48);
        						_push(_v52);
        						L0040137E();
        						_v88 = _t78;
        					}
        					_v72 = _v32;
        					_v32 = _v32 & 0x00000000;
        					_t80 =  &_v40;
        					L00401366();
        					_t83 =  *((intOrPtr*)( *_v56 + 0x40))(_v56, _t80, _t80, _v72, _v28);
        					asm("fclex");
        					_v60 = _t83;
        					if(_v60 >= 0) {
        						_v92 = _v92 & 0x00000000;
        					} else {
        						_push(0x40);
        						_push(0x402d14);
        						_push(_v56);
        						_push(_v60);
        						L0040137E();
        						_v92 = _t83;
        					}
        					L00401342();
        					_push( &_v40);
        					_t64 =  &_v36;
        					_push(_t64);
        					_push(2);
        					L00401348();
        				}
        				asm("wait");
        				_push(E0040CBEA);
        				return _t64;
        			}






























        0x0040ca13
        0x0040ca22
        0x0040ca2c
        0x0040ca34
        0x0040ca37
        0x0040ca3e
        0x0040ca4d
        0x0040ca50
        0x0040ca55
        0x0040ca5b
        0x0040ca62
        0x0040ca69
        0x0040ca7b
        0x0040ca81
        0x0040ca83
        0x0040ca8a
        0x0040caa6
        0x0040ca8c
        0x0040ca8c
        0x0040ca91
        0x0040ca96
        0x0040ca99
        0x0040ca9c
        0x0040caa1
        0x0040caa1
        0x0040cab1
        0x0040cacb
        0x0040cab3
        0x0040cab3
        0x0040cab8
        0x0040cabd
        0x0040cac2
        0x0040cac2
        0x0040cad7
        0x0040cae1
        0x0040cafb
        0x0040cae3
        0x0040cae3
        0x0040cae8
        0x0040caed
        0x0040caf2
        0x0040caf2
        0x0040cb16
        0x0040cb1a
        0x0040cb1f
        0x0040cb2e
        0x0040cb34
        0x0040cb36
        0x0040cb3d
        0x0040cb59
        0x0040cb3f
        0x0040cb3f
        0x0040cb44
        0x0040cb49
        0x0040cb4c
        0x0040cb4f
        0x0040cb54
        0x0040cb54
        0x0040cb60
        0x0040cb63
        0x0040cb6d
        0x0040cb71
        0x0040cb7f
        0x0040cb82
        0x0040cb84
        0x0040cb8b
        0x0040cba4
        0x0040cb8d
        0x0040cb8d
        0x0040cb8f
        0x0040cb94
        0x0040cb97
        0x0040cb9a
        0x0040cb9f
        0x0040cb9f
        0x0040cbab
        0x0040cbb3
        0x0040cbb4
        0x0040cbb7
        0x0040cbb8
        0x0040cbba
        0x0040cbbf
        0x0040cbc2
        0x0040cbc3
        0x00000000

        APIs
        • __vbaChkstk.MSVBVM60(?,00401246), ref: 0040CA2C
        • __vbaCyStr.MSVBVM60(00402DB4,?,?,?,?,00401246), ref: 0040CA55
        • __vbaFpCmpCy.MSVBVM60(00000000,?,00402DB4,?,?,?,?,00401246), ref: 0040CA62
        • __vbaHresultCheckObj.MSVBVM60(00000000,00401218,00402AAC,00000160), ref: 0040CA9C
        • __vbaNew2.MSVBVM60(00402D24,0040EB0C), ref: 0040CABD
        • __vbaNew2.MSVBVM60(00401F74,0040E010), ref: 0040CAED
        • __vbaObjSet.MSVBVM60(?,00000000), ref: 0040CB1A
        • __vbaHresultCheckObj.MSVBVM60(00000000,?,00402D54,000001C0), ref: 0040CB4F
        • __vbaObjSet.MSVBVM60(00402DB4,?,?), ref: 0040CB71
        • __vbaHresultCheckObj.MSVBVM60(00000000,?,00402D14,00000040), ref: 0040CB9A
        • __vbaFreeStr.MSVBVM60(00000000,?,00402D14,00000040), ref: 0040CBAB
        • __vbaFreeObjList.MSVBVM60(00000002,?,00402DB4), ref: 0040CBBA
        Memory Dump Source
        • Source File: 00000000.00000002.1731710525.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true
        • Associated: 00000000.00000002.1731690330.0000000000400000.00000002.00020000.sdmp Download File
        • Associated: 00000000.00000002.1731774426.000000000040E000.00000004.00020000.sdmp Download File
        • Associated: 00000000.00000002.1731805623.0000000000410000.00000002.00020000.sdmp Download File
        Joe Sandbox IDA Plugin
        • Snapshot File: hcaresult_0_2_400000_EM_B43454933_7621780_573.jbxd
        Similarity
        • API ID: __vba$CheckHresult$FreeNew2$ChkstkList
        • String ID:
        • API String ID: 3534970231-0
        • Opcode ID: 1607ec89eab8416a079751674c23d996cc044b76e76a7af87d1d15f3cdedfb27
        • Instruction ID: 133868969914196cf9033430aa1eaa62c28833afa927ed3e4827adf229b9509b
        • Opcode Fuzzy Hash: 1607ec89eab8416a079751674c23d996cc044b76e76a7af87d1d15f3cdedfb27
        • Instruction Fuzzy Hash: 5B51C471A00208EFDB10DFE5D98ABDDBBB4BF08704F10457AF501BA2A0C7B969559F58
        Uniqueness

        Uniqueness Score: -1.00%

        Control-flow Graph

        • Executed
        • Not Executed
        control_flow_graph 559 40c26d-40c2d1 __vbaChkstk #647 561 40c2d3-40c2ec __vbaNew2 559->561 562 40c2ee 559->562 563 40c2f8-40c336 __vbaObjSet 561->563 562->563 566 40c352 563->566 567 40c338-40c350 __vbaHresultCheckObj 563->567 568 40c359-40c3ab __vbaVarTstEq __vbaFreeObj __vbaFreeVarList 566->568 567->568 569 40c3b1-40c3b8 568->569 570 40c445-40c47f __vbaFreeStr 568->570 572 40c3d5 569->572 573 40c3ba-40c3d3 __vbaNew2 569->573 574 40c3df-40c407 572->574 573->574 576 40c423 574->576 577 40c409-40c421 __vbaHresultCheckObj 574->577 578 40c42a-40c440 __vbaStrMove 576->578 577->578 578->570
        C-Code - Quality: 61%
        			E0040C26D(void* __ebx, void* __edi, void* __esi, intOrPtr* _a4) {
        				intOrPtr _v8;
        				intOrPtr _v12;
        				intOrPtr _v16;
        				void* _v32;
        				signed int _v36;
        				char _v40;
        				intOrPtr _v48;
        				char _v56;
        				char _v72;
        				intOrPtr _v80;
        				char _v88;
        				intOrPtr* _v124;
        				signed int _v128;
        				short _v132;
        				signed int _v144;
        				intOrPtr _v148;
        				intOrPtr* _v152;
        				signed int _v156;
        				intOrPtr* _v160;
        				signed int _v164;
        				char* _t76;
        				signed int _t80;
        				short _t84;
        				signed int _t88;
        				signed int _t94;
        				void* _t105;
        				void* _t107;
        				intOrPtr _t108;
        
        				_t108 = _t107 - 0xc;
        				 *[fs:0x0] = _t108;
        				L00401240();
        				_v16 = _t108;
        				_v12 = 0x401198;
        				_v8 = 0;
        				 *((intOrPtr*)( *_a4 + 4))(_a4, __edi, __esi, __ebx,  *[fs:0x0], 0x401246, _t105);
        				_v48 = 0x80020004;
        				_v56 = 0xa;
        				_push( &_v56);
        				_push( &_v72);
        				L00401306();
        				if( *0x40e010 != 0) {
        					_v152 = 0x40e010;
        				} else {
        					_push(0x40e010);
        					_push(0x401f74);
        					L00401360();
        					_v152 = 0x40e010;
        				}
        				_t76 =  &_v40;
        				L00401366();
        				_v124 = _t76;
        				_t80 =  *((intOrPtr*)( *_v124 + 0x48))(_v124,  &_v36, _t76,  *((intOrPtr*)( *((intOrPtr*)( *_v152)) + 0x314))( *_v152));
        				asm("fclex");
        				_v128 = _t80;
        				if(_v128 >= 0) {
        					_v156 = _v156 & 0x00000000;
        				} else {
        					_push(0x48);
        					_push(0x402d44);
        					_push(_v124);
        					_push(_v128);
        					L0040137E();
        					_v156 = _t80;
        				}
        				_v144 = _v36;
        				_v36 = _v36 & 0x00000000;
        				_v80 = _v144;
        				_v88 = 0x8008;
        				_push( &_v72);
        				_t84 =  &_v88;
        				_push(_t84);
        				L0040130C();
        				_v132 = _t84;
        				L00401378();
        				_push( &_v88);
        				_push( &_v72);
        				_push( &_v56);
        				_push(3);
        				L00401354();
        				_t88 = _v132;
        				if(_t88 != 0) {
        					if( *0x40eb0c != 0) {
        						_v160 = 0x40eb0c;
        					} else {
        						_push(0x40eb0c);
        						_push(0x402d24);
        						L00401360();
        						_v160 = 0x40eb0c;
        					}
        					_v124 =  *_v160;
        					_t94 =  *((intOrPtr*)( *_v124 + 0x48))(_v124, 0xae,  &_v36);
        					asm("fclex");
        					_v128 = _t94;
        					if(_v128 >= 0) {
        						_v164 = _v164 & 0x00000000;
        					} else {
        						_push(0x48);
        						_push(0x402d14);
        						_push(_v124);
        						_push(_v128);
        						L0040137E();
        						_v164 = _t94;
        					}
        					_t88 = _v36;
        					_v148 = _t88;
        					_v36 = _v36 & 0x00000000;
        					L00401318();
        				}
        				_push(E0040C480);
        				L00401342();
        				return _t88;
        			}































        0x0040c270
        0x0040c27f
        0x0040c28b
        0x0040c293
        0x0040c296
        0x0040c29d
        0x0040c2ac
        0x0040c2af
        0x0040c2b6
        0x0040c2c0
        0x0040c2c4
        0x0040c2c5
        0x0040c2d1
        0x0040c2ee
        0x0040c2d3
        0x0040c2d3
        0x0040c2d8
        0x0040c2dd
        0x0040c2e2
        0x0040c2e2
        0x0040c312
        0x0040c316
        0x0040c31b
        0x0040c32a
        0x0040c32d
        0x0040c32f
        0x0040c336
        0x0040c352
        0x0040c338
        0x0040c338
        0x0040c33a
        0x0040c33f
        0x0040c342
        0x0040c345
        0x0040c34a
        0x0040c34a
        0x0040c35c
        0x0040c362
        0x0040c36c
        0x0040c36f
        0x0040c379
        0x0040c37a
        0x0040c37d
        0x0040c37e
        0x0040c383
        0x0040c38a
        0x0040c392
        0x0040c396
        0x0040c39a
        0x0040c39b
        0x0040c39d
        0x0040c3a5
        0x0040c3ab
        0x0040c3b8
        0x0040c3d5
        0x0040c3ba
        0x0040c3ba
        0x0040c3bf
        0x0040c3c4
        0x0040c3c9
        0x0040c3c9
        0x0040c3e7
        0x0040c3fb
        0x0040c3fe
        0x0040c400
        0x0040c407
        0x0040c423
        0x0040c409
        0x0040c409
        0x0040c40b
        0x0040c410
        0x0040c413
        0x0040c416
        0x0040c41b
        0x0040c41b
        0x0040c42a
        0x0040c42d
        0x0040c433
        0x0040c440
        0x0040c440
        0x0040c445
        0x0040c47a
        0x0040c47f

        APIs
        • __vbaChkstk.MSVBVM60(?,00401246), ref: 0040C28B
        • #647.MSVBVM60(?,0000000A), ref: 0040C2C5
        • __vbaNew2.MSVBVM60(00401F74,0040E010,?,0000000A), ref: 0040C2DD
        • __vbaObjSet.MSVBVM60(?,00000000), ref: 0040C316
        • __vbaHresultCheckObj.MSVBVM60(00000000,?,00402D44,00000048), ref: 0040C345
        • __vbaVarTstEq.MSVBVM60(00008008,?), ref: 0040C37E
        • __vbaFreeObj.MSVBVM60(00008008,?), ref: 0040C38A
        • __vbaFreeVarList.MSVBVM60(00000003,0000000A,?,00008008,00008008,?), ref: 0040C39D
        • __vbaNew2.MSVBVM60(00402D24,0040EB0C,?,?,?,00401246), ref: 0040C3C4
        • __vbaHresultCheckObj.MSVBVM60(00000000,?,00402D14,00000048), ref: 0040C416
        • __vbaStrMove.MSVBVM60(00000000,?,00402D14,00000048), ref: 0040C440
        • __vbaFreeStr.MSVBVM60(0040C480,?,?,?,00401246), ref: 0040C47A
        Memory Dump Source
        • Source File: 00000000.00000002.1731710525.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true
        • Associated: 00000000.00000002.1731690330.0000000000400000.00000002.00020000.sdmp Download File
        • Associated: 00000000.00000002.1731774426.000000000040E000.00000004.00020000.sdmp Download File
        • Associated: 00000000.00000002.1731805623.0000000000410000.00000002.00020000.sdmp Download File
        Joe Sandbox IDA Plugin
        • Snapshot File: hcaresult_0_2_400000_EM_B43454933_7621780_573.jbxd
        Similarity
        • API ID: __vba$Free$CheckHresultNew2$#647ChkstkListMove
        • String ID:
        • API String ID: 4111187846-0
        • Opcode ID: fe00ff6a90cc877d55d9a59a9e02f9a90224f763396c556bb38ff2bcf4df0aae
        • Instruction ID: 8e83227a2694e94ceda994d8975ce6ca069419f6901750891d427538fc9b39cd
        • Opcode Fuzzy Hash: fe00ff6a90cc877d55d9a59a9e02f9a90224f763396c556bb38ff2bcf4df0aae
        • Instruction Fuzzy Hash: F1511671D00218DFEB20DFA5C885BDDBBB4BF08304F2085AAE505B72A1D7796A85CF59
        Uniqueness

        Uniqueness Score: -1.00%

        Control-flow Graph

        • Executed
        • Not Executed
        control_flow_graph 579 40c732-40c7d1 __vbaChkstk __vbaVarDup #607 __vbaVarTstNe __vbaFreeVarList 581 40c895-40c8bc __vbaFreeVar 579->581 582 40c7d7-40c7f4 579->582 584 40c7f6-40c7fc 582->584 585 40c7fe-40c80a _adj_fdiv_m64 582->585 586 40c80f-40c86f __vbaFpI4 584->586 585->586 588 40c871-40c88c __vbaHresultCheckObj 586->588 589 40c88e 586->589 588->581 589->581
        C-Code - Quality: 61%
        			E0040C732(void* __ebx, void* __edi, void* __esi, intOrPtr* _a4, void* _a8) {
        				intOrPtr _v8;
        				intOrPtr _v12;
        				intOrPtr _v16;
        				char _v40;
        				intOrPtr _v52;
        				char _v60;
        				char _v76;
        				intOrPtr _v116;
        				char _v124;
        				signed int _v128;
        				char _v140;
        				signed int _v144;
        				signed int _t42;
        				signed int _t45;
        				char* _t49;
        				void* _t54;
        				void* _t56;
        				intOrPtr _t57;
        				intOrPtr* _t58;
        				signed long long _t64;
        
        				_t57 = _t56 - 0xc;
        				 *[fs:0x0] = _t57;
        				L00401240();
        				_v16 = _t57;
        				_v12 = 0x4011f8;
        				_v8 = 0;
        				 *((intOrPtr*)( *_a4 + 4))(_a4, __edi, __esi, __ebx, 0x78,  *[fs:0x0], 0x401246, _t54);
        				_t49 =  &_v40;
        				L00401300();
        				_v52 = 0x20;
        				_v60 = 2;
        				_push( &_v60);
        				_push(1);
        				_push( &_v76);
        				L004012E8();
        				_v116 = 0x402d9c;
        				_v124 = 0x8008;
        				_push( &_v76);
        				_t42 =  &_v124;
        				_push(_t42);
        				L0040135A();
        				_v128 = _t42;
        				_push( &_v76);
        				_push( &_v60);
        				_push(2);
        				L00401354();
        				_t58 = _t57 + 0xc;
        				_t45 = _v128;
        				if(_t45 != 0) {
        					_push(_t49);
        					 *_t58 =  *0x4011f0;
        					_t64 =  *0x4011e8 *  *0x4011e0;
        					if( *0x40e000 != 0) {
        						_push( *0x4011dc);
        						_push( *0x4011d8);
        						L00401264();
        					} else {
        						_t64 = _t64 /  *0x4011d8;
        					}
        					_v140 = _t64;
        					_v76 = _v140;
        					 *_t58 =  *0x4011d0;
        					L0040132A();
        					 *_t58 =  *0x4011c0;
        					 *_t58 =  *0x4011bc;
        					 *_t58 =  *0x4011b8;
        					_t45 =  *((intOrPtr*)( *_a4 + 0x2c0))(_a4, 0x1c2, _t49, _t49, _t49, _t45, _t49, _t49);
        					asm("fclex");
        					_v128 = _t45;
        					if(_v128 >= 0) {
        						_v144 = _v144 & 0x00000000;
        					} else {
        						_push(0x2c0);
        						_push(0x402aac);
        						_push(_a4);
        						_push(_v128);
        						L0040137E();
        						_v144 = _t45;
        					}
        				}
        				asm("wait");
        				_push(E0040C8BD);
        				L00401372();
        				return _t45;
        			}























        0x0040c735
        0x0040c744
        0x0040c74e
        0x0040c756
        0x0040c759
        0x0040c760
        0x0040c76f
        0x0040c775
        0x0040c778
        0x0040c77d
        0x0040c784
        0x0040c78e
        0x0040c78f
        0x0040c794
        0x0040c795
        0x0040c79a
        0x0040c7a1
        0x0040c7ab
        0x0040c7ac
        0x0040c7af
        0x0040c7b0
        0x0040c7b5
        0x0040c7bc
        0x0040c7c0
        0x0040c7c1
        0x0040c7c3
        0x0040c7c8
        0x0040c7cb
        0x0040c7d1
        0x0040c7dd
        0x0040c7de
        0x0040c7e7
        0x0040c7f4
        0x0040c7fe
        0x0040c804
        0x0040c80a
        0x0040c7f6
        0x0040c7f6
        0x0040c7f6
        0x0040c80f
        0x0040c81c
        0x0040c826
        0x0040c82f
        0x0040c83c
        0x0040c846
        0x0040c850
        0x0040c860
        0x0040c866
        0x0040c868
        0x0040c86f
        0x0040c88e
        0x0040c871
        0x0040c871
        0x0040c876
        0x0040c87b
        0x0040c87e
        0x0040c881
        0x0040c886
        0x0040c886
        0x0040c86f
        0x0040c895
        0x0040c896
        0x0040c8b7
        0x0040c8bc

        APIs
        • __vbaChkstk.MSVBVM60(?,00401246), ref: 0040C74E
        • __vbaVarDup.MSVBVM60(?,?,?,?,00401246), ref: 0040C778
        • #607.MSVBVM60(?,00000001,00000002), ref: 0040C795
        • __vbaVarTstNe.MSVBVM60(00008008,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 0040C7B0
        • __vbaFreeVarList.MSVBVM60(00000002,00000002,?,00008008,?), ref: 0040C7C3
        • _adj_fdiv_m64.MSVBVM60(?,?,?,00401246), ref: 0040C80A
        • __vbaFpI4.MSVBVM60(?,?,?,?,?,00401246), ref: 0040C82F
        • __vbaHresultCheckObj.MSVBVM60(00000000,004011F8,00402AAC,000002C0), ref: 0040C881
        • __vbaFreeVar.MSVBVM60(0040C8BD,?,?,00401246), ref: 0040C8B7
        Strings
        Memory Dump Source
        • Source File: 00000000.00000002.1731710525.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true
        • Associated: 00000000.00000002.1731690330.0000000000400000.00000002.00020000.sdmp Download File
        • Associated: 00000000.00000002.1731774426.000000000040E000.00000004.00020000.sdmp Download File
        • Associated: 00000000.00000002.1731805623.0000000000410000.00000002.00020000.sdmp Download File
        Joe Sandbox IDA Plugin
        • Snapshot File: hcaresult_0_2_400000_EM_B43454933_7621780_573.jbxd
        Similarity
        • API ID: __vba$Free$#607CheckChkstkHresultList_adj_fdiv_m64
        • String ID:
        • API String ID: 2704755911-3916222277
        • Opcode ID: f2b3b9eafbda0934082c2862d50151621a97136ab46378f3f94edee918e46c93
        • Instruction ID: 8049fae24b77b2eec12d0b69cbf1fb649c56a67c77806560115a82c1c546859f
        • Opcode Fuzzy Hash: f2b3b9eafbda0934082c2862d50151621a97136ab46378f3f94edee918e46c93
        • Instruction Fuzzy Hash: D7414771900208EFDB14AFA1DD89BADBBB8FB08704F10857AF641BA1A1CB784554DF58
        Uniqueness

        Uniqueness Score: -1.00%

        Control-flow Graph

        • Executed
        • Not Executed
        control_flow_graph 590 40c8e4-40c918 __vbaChkstk 591 40c932 590->591 592 40c91a-40c930 __vbaNew2 590->592 593 40c939-40c959 591->593 592->593 595 40c972 593->595 596 40c95b-40c970 __vbaHresultCheckObj 593->596 597 40c976-40c994 595->597 596->597 599 40c996-40c9ab __vbaHresultCheckObj 597->599 600 40c9ad 597->600 601 40c9b1-40c9ee __vbaStrMove __vbaFreeObj __vbaFreeStr 599->601 600->601
        C-Code - Quality: 55%
        			E0040C8E4(void* __ebx, void* __ecx, void* __edi, void* __esi) {
        				intOrPtr _v8;
        				intOrPtr _v12;
        				void* _v24;
        				signed int _v36;
        				void* _v40;
        				intOrPtr* _v44;
        				signed int _v48;
        				intOrPtr* _v52;
        				signed int _v56;
        				intOrPtr _v64;
        				intOrPtr* _v68;
        				signed int _v72;
        				signed int _v76;
        				signed int _t46;
        				signed int _t51;
        				signed int _t52;
        				intOrPtr _t63;
        
        				_push(0x401246);
        				_push( *[fs:0x0]);
        				 *[fs:0x0] = _t63;
        				_push(0x38);
        				L00401240();
        				_v12 = _t63;
        				_v8 = 0x401208;
        				if( *0x40eb0c != 0) {
        					_v68 = 0x40eb0c;
        				} else {
        					_push(0x40eb0c);
        					_push(0x402d24);
        					L00401360();
        					_v68 = 0x40eb0c;
        				}
        				_v44 =  *_v68;
        				_t46 =  *((intOrPtr*)( *_v44 + 0x14))(_v44,  &_v40);
        				asm("fclex");
        				_v48 = _t46;
        				if(_v48 >= 0) {
        					_v72 = _v72 & 0x00000000;
        				} else {
        					_push(0x14);
        					_push(0x402d14);
        					_push(_v44);
        					_push(_v48);
        					L0040137E();
        					_v72 = _t46;
        				}
        				_v52 = _v40;
        				_t51 =  *((intOrPtr*)( *_v52 + 0x58))(_v52,  &_v36);
        				asm("fclex");
        				_v56 = _t51;
        				if(_v56 >= 0) {
        					_v76 = _v76 & 0x00000000;
        				} else {
        					_push(0x58);
        					_push(0x402da0);
        					_push(_v52);
        					_push(_v56);
        					L0040137E();
        					_v76 = _t51;
        				}
        				_t52 = _v36;
        				_v64 = _t52;
        				_v36 = _v36 & 0x00000000;
        				L00401318();
        				L00401378();
        				_push(E0040C9EF);
        				L00401342();
        				return _t52;
        			}




















        0x0040c8e9
        0x0040c8f4
        0x0040c8f5
        0x0040c8fc
        0x0040c8ff
        0x0040c907
        0x0040c90a
        0x0040c918
        0x0040c932
        0x0040c91a
        0x0040c91a
        0x0040c91f
        0x0040c924
        0x0040c929
        0x0040c929
        0x0040c93e
        0x0040c94d
        0x0040c950
        0x0040c952
        0x0040c959
        0x0040c972
        0x0040c95b
        0x0040c95b
        0x0040c95d
        0x0040c962
        0x0040c965
        0x0040c968
        0x0040c96d
        0x0040c96d
        0x0040c979
        0x0040c988
        0x0040c98b
        0x0040c98d
        0x0040c994
        0x0040c9ad
        0x0040c996
        0x0040c996
        0x0040c998
        0x0040c99d
        0x0040c9a0
        0x0040c9a3
        0x0040c9a8
        0x0040c9a8
        0x0040c9b1
        0x0040c9b4
        0x0040c9b7
        0x0040c9c1
        0x0040c9c9
        0x0040c9ce
        0x0040c9e9
        0x0040c9ee

        APIs
        • __vbaChkstk.MSVBVM60(?,00401246), ref: 0040C8FF
        • __vbaNew2.MSVBVM60(00402D24,0040EB0C,?,?,?,?,00401246), ref: 0040C924
        • __vbaHresultCheckObj.MSVBVM60(00000000,?,00402D14,00000014), ref: 0040C968
        • __vbaHresultCheckObj.MSVBVM60(00000000,?,00402DA0,00000058), ref: 0040C9A3
        • __vbaStrMove.MSVBVM60(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,00401246), ref: 0040C9C1
        • __vbaFreeObj.MSVBVM60(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,00401246), ref: 0040C9C9
        • __vbaFreeStr.MSVBVM60(0040C9EF), ref: 0040C9E9
        Memory Dump Source
        • Source File: 00000000.00000002.1731710525.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true
        • Associated: 00000000.00000002.1731690330.0000000000400000.00000002.00020000.sdmp Download File
        • Associated: 00000000.00000002.1731774426.000000000040E000.00000004.00020000.sdmp Download File
        • Associated: 00000000.00000002.1731805623.0000000000410000.00000002.00020000.sdmp Download File
        Joe Sandbox IDA Plugin
        • Snapshot File: hcaresult_0_2_400000_EM_B43454933_7621780_573.jbxd
        Similarity
        • API ID: __vba$CheckFreeHresult$ChkstkMoveNew2
        • String ID:
        • API String ID: 1253681662-0
        • Opcode ID: 5103e2fc5e12bd9b24634d912dee63ed2e29e8f12d6b507141101263b7c2af97
        • Instruction ID: a88167143a4f6b8959706a35234d8b41e9a8ebf34e2dd2bae032b55c9a4aa913
        • Opcode Fuzzy Hash: 5103e2fc5e12bd9b24634d912dee63ed2e29e8f12d6b507141101263b7c2af97
        • Instruction Fuzzy Hash: 6E3102B1940208EFDB10DF95C98AFDEBBB4BF08705F20426AF001B62A1C7786945CF69
        Uniqueness

        Uniqueness Score: -1.00%

        Control-flow Graph

        • Executed
        • Not Executed
        control_flow_graph 603 40c6c0-40c6c8 604 40c6d2-40c703 __vbaFreeStr __vbaFreeObj __vbaFreeVarList 603->604 605 40c6ca-40c6cd __vbaFreeVar 603->605 605->604
        C-Code - Quality: 42%
        			E0040C6C0() {
        				void* _t16;
        				void* _t20;
        
        				if(( *(_t20 - 4) & 0x00000004) != 0) {
        					L00401372();
        				}
        				L00401342();
        				L00401378();
        				_push(_t20 - 0x90);
        				_push(_t20 - 0x80);
        				_push(_t20 - 0x70);
        				_push(_t20 - 0x60);
        				_t16 = _t20 - 0x50;
        				_push(_t16);
        				_push(5);
        				L00401354();
        				return _t16;
        			}





        0x0040c6c8
        0x0040c6cd
        0x0040c6cd
        0x0040c6d5
        0x0040c6dd
        0x0040c6e8
        0x0040c6ec
        0x0040c6f0
        0x0040c6f4
        0x0040c6f5
        0x0040c6f8
        0x0040c6f9
        0x0040c6fb
        0x0040c703

        APIs
        • __vbaFreeVar.MSVBVM60 ref: 0040C6CD
        • __vbaFreeStr.MSVBVM60 ref: 0040C6D5
        • __vbaFreeObj.MSVBVM60 ref: 0040C6DD
        • __vbaFreeVarList.MSVBVM60(00000005,?,?,?,?,?), ref: 0040C6FB
        Memory Dump Source
        • Source File: 00000000.00000002.1731710525.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true
        • Associated: 00000000.00000002.1731690330.0000000000400000.00000002.00020000.sdmp Download File
        • Associated: 00000000.00000002.1731774426.000000000040E000.00000004.00020000.sdmp Download File
        • Associated: 00000000.00000002.1731805623.0000000000410000.00000002.00020000.sdmp Download File
        Joe Sandbox IDA Plugin
        • Snapshot File: hcaresult_0_2_400000_EM_B43454933_7621780_573.jbxd
        Similarity
        • API ID: Free__vba$List
        • String ID:
        • API String ID: 2192533141-0
        • Opcode ID: 64ba308a4c088cbe4cf48c855535f5df7d303a7ce602ef2e7a8a9eee91355815
        • Instruction ID: 695d48e6fac8d5d5126fdf8066d0edae40ad8909e30f8a9256fd616a3aaffde5
        • Opcode Fuzzy Hash: 64ba308a4c088cbe4cf48c855535f5df7d303a7ce602ef2e7a8a9eee91355815
        • Instruction Fuzzy Hash: 36E0597280051CAAEB15EBD1DC91EEFB37CBF14304F58057AF506B64A1EA34AA19CA54
        Uniqueness

        Uniqueness Score: -1.00%